Overview

URLalmayasabdam.blogspot.com/2017/12/whats-christmas.html
IP 142.250.74.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-02-03 04:26:07 UTC
StatusLoading report..
IDS alerts0
Blocklist alert1
urlquery alerts No alerts detected
Tags None

Domain Summary (29)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
s7.addthis.com (4) 1504 2012-05-21 03:34:04 UTC 2023-02-02 04:12:54 UTC 23.38.200.123
translate.google.com (3) 1156 2012-05-30 01:30:32 UTC 2023-02-02 04:09:21 UTC 142.250.74.46
ocsp.pki.goog (21) 175 2017-06-14 07:23:31 UTC 2023-02-02 04:09:06 UTC 172.217.21.163
www.gstatic.com (1) 0 2012-05-29 15:36:17 UTC 2023-02-02 12:19:53 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
1.bp.blogspot.com (4) 8403 2012-05-21 13:44:19 UTC 2023-02-02 04:10:32 UTC 142.250.74.161
simplehitcounter.com (2) 461722 2015-05-26 07:26:16 UTC 2023-02-02 04:43:52 UTC 34.149.245.95
accounts.google.com (1) 81 2012-05-23 06:57:57 UTC 2023-02-02 05:24:49 UTC 216.58.207.237
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-02-02 04:09:20 UTC 34.117.237.239
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-02-02 04:09:02 UTC 35.241.9.150
r3.o.lencr.org (7) 344 2020-12-02 08:52:13 UTC 2023-02-02 04:09:15 UTC 23.36.76.226
v1.addthisedge.com (1) 1721 2019-05-22 18:56:22 UTC 2023-02-02 04:17:09 UTC 23.38.200.123
fonts.gstatic.com (2) 0 2014-04-02 10:51:04 UTC 2023-02-02 07:34:01 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
www.google.com (1) 7 2012-11-08 00:08:21 UTC 2023-02-02 13:15:46 UTC 142.250.74.164
pagead2.googlesyndication.com (1) 101 2012-05-21 07:15:40 UTC 2023-02-02 14:01:11 UTC 142.250.74.162
z.moatads.com (1) 374 2014-02-11 16:19:47 UTC 2023-02-02 04:17:09 UTC 23.38.201.146
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2023-02-02 04:09:26 UTC 34.120.237.76
lh3.googleusercontent.com (16) 66 2012-05-22 07:35:05 UTC 2023-02-02 04:10:33 UTC 142.250.74.97
apis.google.com (2) 105 2013-05-06 20:20:21 UTC 2023-02-02 04:10:32 UTC 142.250.74.78
almayasabdam.blogspot.com (4) 0 2014-10-25 05:07:47 UTC 2023-02-03 01:22:19 UTC 142.250.74.161 Unknown ranking
www.blogger.com (4) 8975 2012-05-22 07:35:03 UTC 2023-02-02 04:09:34 UTC 216.58.207.233
resources.blogblog.com (5) 13274 2017-01-30 04:47:40 UTC 2023-02-02 04:10:32 UTC 216.58.207.233
www.blogblog.com (3) 28878 2012-05-22 07:35:04 UTC 2023-02-02 19:32:41 UTC 216.58.207.233
translate.googleapis.com (1) 1005 2012-05-31 07:21:21 UTC 2023-02-02 15:30:08 UTC 142.250.74.170
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-02-02 04:10:44 UTC 52.33.182.41
play.google.com (2) 34 2013-05-30 23:24:35 UTC 2023-02-02 11:42:23 UTC 142.250.74.110
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-02-02 04:10:44 UTC 34.160.144.191
m.addthis.com (1) 1448 2013-11-06 20:12:22 UTC 2023-02-02 09:58:46 UTC 23.38.200.123
api-public.addthis.com (3) 4111 2012-05-21 13:44:35 UTC 2023-02-02 04:17:09 UTC 23.38.200.123
almayasabdam.blogspot.in (1) 0 2013-07-17 13:52:51 UTC 2023-01-22 04:56:29 UTC 142.250.74.161 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-02-03 2 almayasabdam.blogspot.com/2017/12/whats-christmas.html Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.161
Date UQ / IDS / BL URL IP
2023-03-25 22:01:38 +0000 0 - 2 - 17 googleweblight.com/i?u=eggfoodafv.com/yy/en1b (...) 142.250.74.161
2023-03-23 16:23:29 +0000 0 - 0 - 0 ky331mof.page.link/SiJ8 142.250.74.161
2023-03-22 19:04:48 +0000 0 - 0 - 0 fhpat1yg.page.link/1gGs 142.250.74.161
2023-03-21 16:32:09 +0000 0 - 0 - 0 c83dstwf.page.link/nYJz 142.250.74.161
2023-03-20 18:44:34 +0000 0 - 0 - 8 ngwcscyd.page.link/KrvS7LqTXrouZ8fK7 142.250.74.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-27 16:25:49 +0000 0 - 1 - 0 46081.lchongfu.com/72687/pcu1yc_11182.html 35.205.61.67
2023-03-27 16:25:19 +0000 0 - 1 - 0 download-installer.cdn.mozilla.net/pub/firefo (...) 34.117.35.28
2023-03-27 16:20:39 +0000 0 - 6 - 0 www.medicospira.com/uworld1/login.php 35.209.214.13
2023-03-27 16:12:53 +0000 0 - 2 - 0 793f.cc/ 35.241.57.73
2023-03-27 16:12:35 +0000 0 - 1 - 0 mnm5zk.lchongfu.com/ 35.205.61.67


Last 5 reports on domain: almayasabdam.blogspot.com
Date UQ / IDS / BL URL IP
2023-03-25 08:26:38 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2014/09/call-excell (...) 142.250.74.65
2023-03-07 12:29:26 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2012/03/2.html 172.217.21.161
2023-03-01 05:53:42 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2013/09/pope-franci (...) 142.250.74.1
2023-02-21 10:26:55 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2014/09/call-excell (...) 142.250.74.65
2023-02-21 04:19:57 +0000 0 - 0 - 1 almayasabdam.blogspot.com/2013/08/blog-post_3 (...) 172.217.21.161


No other reports with similar screenshot

JavaScript

Executed Scripts (68)

Executed Evals (7)
#1 JavaScript::Eval (size: 8) - SHA256: 3c4b9b06fe520e9d07b2150eebd412a59c91d789706d99a2b2dc9bf217604d1f
_ate.cbs
#2 JavaScript::Eval (size: 64) - SHA256: 6ddb568813476781555dc007dbf68364ac4237de77158b4a2b8906396d564da3
0,
function(X, D, a) {
    d(X, (D = (a = (D = h(X), h(X)), X.G[D] && m(D, X)), a), D)
}
#3 JavaScript::Eval (size: 22) - SHA256: d896ad7d50d378b59b9d1be3c4950cbc057ad6cc83f9cdef522454929cc9f301
0,
function(X) {
    tc(X, 2)
}
#4 JavaScript::Eval (size: 15590) - SHA256: 276096740107abb4b5b058985713ac9e81f2fcb100010356b47be556e300d790
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var t = function(C, B) {
            if (!(C = (B = X.trustedTypes, null), B) || !B.createPolicy) return C;
            try {
                C = B.createPolicy("bg", {
                    createHTML: D,
                    createScript: D,
                    createScriptURL: D
                })
            } catch (c) {
                X.console && X.console.error(c.message)
            }
            return C
        },
        X = this || self,
        D = function(C) {
            return C
        };
    (0, eval)(function(C, B) {
        return (B = t()) && 1 === C.eval(B.createScript("1")) ? function(c) {
            return B.createScript(c)
        } : function(c) {
            return "" + c
        }
    }(X)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var BD=function(B,C,c,t){return(t=q[B.substring(0,3)+"_"])?t(B.substring(3),C,c):Cw(B,C)},V=function(B,C,c,t){for(c=(C|(t=[],0))-1;0<=c;c--)t[(C|0)-1-(c|0)]=B>>8*c&255;return t},oE=function(B,C){return C[B]<<24|C[(B|0)+1]<<16|C[(B|0)+2]<<8|C[(B|0)+3]},m=function(B,C){if(void 0===(C=C.G[B],C))throw[K,30,B];if(C.value)return C.create();return C.create(4*B*B+36*B+18),C.prototype},Xv=function(B,C,c,t,F,X,D,a){return(D=v[C=(a=(F=c&7,cD),[52,36,82,-14,27,-81,C,-43,75,22]),t.u](t.j$),D[t.u]=function(S){F+=6+(X=S,7*c),F&=7},D).concat=function(S){return(X=(S=(S=(S=B%16+1,-S*X)-612*X+C[F+75&7]*B*S+4*B*B*S-136*B*B*X-1224*B*X+F+34*X*X+(a()|0)*S,C)[S],void 0),C[(F+53&7)+(c&2)]=S,C)[F+(c&2)]=36,S},D},DF=function(B,C,c,t){try{t=B[((C|0)+2)%3],B[C]=(B[C]|0)-(B[((C|0)+1)%3]|0)-(t|0)^(1==C?t<<c:t>>>c)}catch(F){throw F;}},I=function(B,C){C.L=((C.L?C.L+"~":"E:")+B.message+":"+B.stack).slice(0,2048)},tc=function(B,C,c,t){for(t=(c=h(B),0);0<C;C--)t=t<<8|Y(B);d(B,c,t)},Fv=function(B,C,c,t,F,X){if(!C.L){C.h++;try{for(c=(F=0,void 0),X=C.T;--B;)try{if(t=void 0,C.g)c=aE(C.g,C);else{if(F=m(155,C),F>=X)break;t=(d(C,252,F),h(C)),c=m(t,C)}O((c&&c[SO]&2048?c(C,B):P([K,21,t],C,0),false),C,B,false)}catch(D){m(58,C)?P(D,C,22):d(C,58,D)}if(!B){if(C.TP){Fv(570557350755,(C.h--,C));return}P([K,33],C,0)}}catch(D){try{P(D,C,22)}catch(a){I(a,C)}}C.h--}},sM=function(B,C,c){if("object"==(C=typeof B,C))if(B){if(B instanceof Array)return"array";if(B instanceof Object)return C;if(c=Object.prototype.toString.call(B),"[object Window]"==c)return"object";if("[object Array]"==c||"number"==typeof B.length&&"undefined"!=typeof B.splice&&"undefined"!=typeof B.propertyIsEnumerable&&!B.propertyIsEnumerable("splice"))return"array";if("[object Function]"==c||"undefined"!=typeof B.call&&"undefined"!=typeof B.propertyIsEnumerable&&!B.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==C&&"undefined"==typeof B.call)return"object";return C},qB=function(B,C,c,t,F){for(C=(F=0,t=C[2]|0,C)[3]|0;14>F;F++)B=B>>>8|B<<24,B+=c|0,B^=t+1656,C=C>>>8|C<<24,c=c<<3|c>>>29,C+=t|0,t=t<<3|t>>>29,C^=F+1656,c^=B,t^=C;return[c>>>24&255,c>>>16&255,c>>>8&255,c>>>0&255,B>>>24&255,B>>>16&255,B>>>8&255,B>>>0&255]},V7=function(B,C,c,t){w(V((t=(c=h(B),h(B)),m)(c,B),C),t,B)},b,GJ=function(B,C){return(C=Y(B),C&128)&&(C=C&127|Y(B)<<7),C},Ac=function(B,C,c,t,F){for(t=(F=(c.KL=(c.j$=(c.E0=(c.cv=(c.Fz=Kw,Lw),c[x]),Jc({get:function(){return this.concat()}},c.u)),v[c.u](c.j$,{value:{value:{}}})),[]),0);319>t;t++)F[t]=String.fromCharCode(t);M(true,(z((z(((r(c,(d(c,(d(c,276,(c.d2=(r(c,function(X,D,a,S,G,L,J){for(a=(J=m(434,(L=(G=(D=h(X),GJ(X)),""),X)),J.length),S=0;G--;)S=((S|0)+(GJ(X)|0))%a,L+=F[J[S]];d(X,D,L)},(r(c,(r(c,(r(c,(d(c,56,(((r(c,(d(c,(r(c,(r(c,(r(c,(d(c,48,(r(c,(r(c,function(X,D,a,S){if(S=X.lG.pop()){for(a=Y(X);0<a;a--)D=h(X),S[D]=X.G[D];X.G=(S[257]=(S[124]=X.G[124],X).G[257],S)}else d(X,155,X.T)},(r((c.RM=((r(c,(d(c,384,(d(c,(d(c,(r(c,function(X,D,a,S){d(X,(S=(D=m((a=h((D=h((S=h(X),X)),X)),D),X),m(S,X)),a),S in D|0)},(r(c,function(X,D,a,S){d(X,(D=m((S=(a=h((S=(D=h(X),h(X)),X)),m(S,X)),D),X)==S,a),+D)},(d(c,129,[160,0,(d((d(c,6,(r(c,(r((r(c,(r(c,function(X){V7(X,1)},(r(c,function(X,D,a,S,G,L){if(!O(true,X,D,true)){if("object"==(X=(S=m((D=(a=(S=h((D=(L=h(X),h(X)),X)),h(X)),m(D,X)),S),X),a=m(a,X),m(L,X)),sM(X))){for(G in L=[],X)L.push(G);X=L}for(S=(L=(G=X.length,0),0<S?S:1);L<G;L+=S)D(X.slice(L,(L|0)+(S|0)),a)}},(r(c,(r(c,function(X,D,a,S,G,L){O(false,X,D,true)||(L=RE(X.j),D=L.U,G=L.GP,S=L.Y,L=L.LL,a=S.length,D=0==a?new G[D]:1==a?new G[D](S[0]):2==a?new G[D](S[0],S[1]):3==a?new G[D](S[0],S[1],S[2]):4==a?new G[D](S[0],S[1],S[2],S[3]):2(),d(X,L,D))},(r(c,(d(c,(d((d(c,155,(c.tk=(c.Z=null,(t=window.performance||{},c.T=(c.F=void 0,0),c.O=(c.v=(c.lG=[],false),c.C=false,(c.g=void 0,c.G=(c.l=[],c.N=(c.I=0,(c.V=void 0,c).L=void 0,0),[]),(c.h=(c.o=8001,0),c).uG=function(X){this.j=X},c.i=(c.S=0,25),c.j=c,c.H=1,c.g2=false,c).kn=((c.K=void 0,c.R=[],c.J=0,c).W=void 0,0),c.P=[],[]),c.A=void 0,t).timeOrigin||(t.timing||{}).navigationStart||0),0)),c),252,0),r(c,function(X,D){X=(D=h(X),m)(D,X.j),X[0].removeEventListener(X[1],X[2],l)},285),372),c),function(X,D,a,S,G){0!==(D=(G=(a=(S=(D=(a=(G=h((S=h(X),X)),h(X)),h(X)),m)(S,X.j),m)(a,X),m(G,X)),m(D,X)),S)&&(D=TJ(X,a,D,1,S,G),S.addEventListener(G,D,l),d(X,237,[S,G,D]))}),461),103)),function(X,D,a){D=(a=0!=(D=(a=h(X),h)(X),m(a,X)),m(D,X)),a&&d(X,155,D)}),505),94)),441)),function(X){tc(X,4)}),456),c),function(X,D,a,S,G){D=m((S=m((D=(S=(a=(G=h(X),h(X)),h)(X),h)(X),a=m(a,X),S),X),D),X),d(X,G,TJ(X,a,S,D))},111),function(X){V7(X,4)}),313),{})),c),124,[]),0)]),87)),279)),237),0),257),2048),H)),function(X,D,a,S,G,L,J,g,R,T,A,U){function N(f,k){for(;A<f;)S|=Y(X)<<A,A+=8;return S>>=(A-=f,k=S&(1<<f)-1,f),k}for(T=a=(U=(S=A=(L=h(X),0),g=(N(3)|0)+1,R=N(5),[]),0);a<R;a++)G=N(1),U.push(G),T+=G?0:1;for(T=(a=((T|0)-1).toString(2).length,0),D=[];T<R;T++)U[T]||(D[T]=N(a));for(a=0;a<R;a++)U[a]&&(D[a]=h(X));for(J=[];g--;)J.push(m(h(X),X));r(X,function(f,k,y,e,n){for(e=(k=(n=0,[]),[]);n<R;n++){if(!U[y=D[n],n]){for(;y>=e.length;)e.push(h(f));y=e[y]}k.push(y)}f.F=(f.g=gc(f,J.slice()),gc)(f,k)},L)}),242),r)(c,function(X,D,a){d(X,(a=(D=(a=h(X),h)(X),m(a,X)),a=sM(a),D),a)},453),0),c),function(X,D,a){d((a=(D=h(X),h(X)),X),a,""+m(D,X))},236),223)),function(){}),474),[0,0,0])),function(X,D,a,S){d((D=(a=h(X),h(X)),S=h(X),X),S,m(a,X)||m(D,X))}),187),function(X,D,a,S){d(X,(D=(a=Y((S=h(X),X)),h)(X),D),m(S,X)>>>a)}),422),function(X,D,a){O(false,X,D,true)||(D=h(X),a=h(X),d(X,a,function(S){return eval(S)}(mj(m(D,X.j)))))}),18),58),213),function(X,D,a,S){!O(false,X,D,true)&&(D=RE(X),a=D.GP,S=D.U,X.j==X||S==X.uG&&a==X)&&(d(X,D.LL,S.apply(a,D.Y)),X.S=X.X())}),27),r)(c,function(X){vD(3,X)},340),r)(c,function(X,D){D=m(h(X),X),IE(X.j,D)},430),[])),c.xn=0,function(X,D,a,S,G){for(S=(a=(G=h(X),GJ(X)),D=0,[]);D<a;D++)S.push(Y(X));d(X,G,S)}),66),function(X,D,a,S){d(X,(S=(a=m((D=(a=h(X),S=h(X),h)(X),a),X),m(S,X)),D),a[S])}),204),function(X){vD(4,X)}),501),210)),0),0)),249),W(4)),r(c,function(X,D,a,S){(S=h((D=(a=h(X),h)(X),X)),X.j==X)&&(S=m(S,X),D=m(D,X),m(a,X)[D]=S,435==a&&(X.K=void 0,2==D&&(X.V=p(32,false,X),X.K=void 0)))},184),function(X,D,a,S){d(X,(a=m((D=(a=h(X),h(X)),S=m(D,X),a),X),D),S+a)}),30),z)([hc],c),[E,C]),c),[Y7,B]),c),c),true)},UM=function(B,C,c,t){for(;B.l.length;){c=(B.Z=null,B.l.pop());try{t=fw(c,B)}catch(F){I(F,B)}if(C&&B.Z){C=B.Z,C(function(){M(true,B,true)});break}}return t},dc=function(B,C,c){if(3==B.length){for(c=0;3>c;c++)C[c]+=B[c];for(c=[13,8,13,(B=0,12),16,5,3,10,15];9>B;B++)C[3](C,B%3,c[B])}},H=this||self,Jc=function(B,C){return v[C](v.prototype,{length:B,replace:B,floor:B,document:B,stack:B,parent:B,prototype:B,console:B,propertyIsEnumerable:B,splice:B,call:B,pop:B})},M=function(B,C,c,t,F,X){if(C.l.length){C.v=!((C.v&&0(),C).g2=c,0);try{X=C.X(),C.J=X,C.A=0,C.S=X,F=UM(C,c),t=C.X()-C.J,C.N+=t,t<(B?0:10)||0>=C.i--||(t=Math.floor(t),C.P.push(254>=t?t:254))}finally{C.v=false}return F}},jO=function(B,C){if((C=null,B=H.trustedTypes,!B)||!B.createPolicy)return C;try{C=B.createPolicy("bg",{createHTML:PD,createScript:PD,createScriptURL:PD})}catch(c){H.console&&H.console.error(c.message)}return C},p=function(B,C,c,t,F,X,D,a,S,G,L,J,g,R){if(R=m(155,c),R>=c.T)throw[K,31];for(S=(a=(t=(g=R,0),B),c.E0.length);0<a;)L=g%8,J=g>>3,D=c.R[J],G=8-(L|0),G=G<a?G:a,C&&(X=c,X.K!=g>>6&&(X.K=g>>6,F=m(435,X),X.W=qB(X.K,[0,0,F[1],F[2]],X.V)),D^=c.W[J&S]),t|=(D>>8-(L|0)-(G|0)&(1<<G)-1)<<(a|0)-(G|0),a-=G,g+=G;return C=t,d(c,155,(R|0)+(B|0)),C},Q=H.requestIdleCallback?function(B){requestIdleCallback(function(){B()},{timeout:4})}:H.setImmediate?function(B){setImmediate(B)}:function(B){setTimeout(B,0)},OM=function(B,C,c,t,F){for(t=c=(B=B.replace(/\\r\\n/g,"\\n"),0),F=[];t<B.length;t++)C=B.charCodeAt(t),128>C?F[c++]=C:(2048>C?F[c++]=C>>6|192:(55296==(C&64512)&&t+1<B.length&&56320==(B.charCodeAt(t+1)&64512)?(C=65536+((C&1023)<<10)+(B.charCodeAt(++t)&1023),F[c++]=C>>18|240,F[c++]=C>>12&63|128):F[c++]=C>>12|224,F[c++]=C>>6&63|128),F[c++]=C&63|128);return F},l={passive:true,capture:true},wc=function(B,C,c){return C.B(function(t){c=t},false,B),c},aE=function(B,C){return B=B.create().shift(),C.g.create().length||C.F.create().length||(C.g=void 0,C.F=void 0),B},O=function(B,C,c,t,F,X,D,a,S){if((C.j=(C.H+=(F=(a=(D=(X=(t||C.A++,0<C.I)&&C.v&&C.g2&&1>=C.h&&!C.g&&!C.Z&&(!t||1<C.o-c)&&0==document.hidden,S=4==C.A)||X?C.X():C.S,D-C.S),a)>>14,C.V&&(C.V^=F*(a<<2)),F),F||C.j),S)||X)C.A=0,C.S=D;if(!X||D-C.J<C.I-(B?255:t?5:2))return false;return!(C.Z=((d(C,(B=m(t?252:155,(C.o=c,C)),155),C.T),C).l.push([bn,B,t?c+1:c]),Q),0)},z=function(B,C){C.l.splice(0,0,B)},IE=function(B,C){d(B,((B.lG.push(B.G.slice()),B).G[155]=void 0,155),C)},gc=function(B,C,c){return c=v[B.u](B.KL),c[B.u]=function(){return C},c.concat=function(t){C=t},c},q,P=function(B,C,c,t,F,X){if(!C.C){if(3<(B=m(257,(((X=((t=void 0,B)&&B[0]===K&&(c=B[1],t=B[2],B=void 0),m)(124,C),0)==X.length&&(F=m(252,C)>>3,X.push(c,F>>8&255,F&255),void 0!=t&&X.push(t&255)),c="",B)&&(B.message&&(c+=B.message),B.stack&&(c+=":"+B.stack)),C)),B)){C.j=(t=(B-=(c=c.slice(0,(B|0)-3),(c.length|0)+3),c=OM(c),C.j),C);try{w(V(c.length,2).concat(c),249,C,9)}finally{C.j=t}}d(C,257,B)}},TJ=function(B,C,c,t,F,X){function D(){if(B.j==B){if(B.G){var a=[Z,C,c,void 0,F,X,arguments];if(2==t)var S=M(false,(z(a,B),B),false);else if(1==t){var G=!B.l.length;z(a,B),G&&M(false,B,false)}else S=fw(a,B);return S}F&&X&&F.removeEventListener(X,D,l)}}return D},u=function(B,C,c){c=this;try{Ac(C,B,this)}catch(t){I(t,this),C(function(F){F(c.L)})}},W=function(B,C){for(C=[];B--;)C.push(255*Math.random()|0);return C},Y=function(B){return B.g?aE(B.F,B):p(8,true,B)},PD=function(B){return B},r=function(B,C,c){(d(B,c,C),C)[hc]=2796},RE=function(B,C,c,t,F,X){for(X=(C=(t=(F=h((c=B[NB]||{},B)),c.LL=h(B),c.Y=[],B.j==B?(Y(B)|0)-1:1),h(B)),0);X<t;X++)c.Y.push(h(B));for(c.GP=m(C,B);t--;)c.Y[t]=m(c.Y[t],B);return c.U=m(F,B),c},d=function(B,C,c){if(155==C||252==C)B.G[C]?B.G[C].concat(c):B.G[C]=gc(B,c);else{if(B.C&&435!=C)return;129==C||249==C||56==C||124==C||48==C?B.G[C]||(B.G[C]=Xv(C,c,62,B)):B.G[C]=Xv(C,c,121,B)}435==C&&(B.V=p(32,false,B),B.K=void 0)},Cw=function(B,C){return[(C(function(c){c(B)}),function(){return B})]},fw=function(B,C,c,t,F){if((F=B[0],F)==k7)C.i=25,C.D(B);else if(F==x){t=B[1];try{c=C.L||C.D(B)}catch(X){I(X,C),c=C.L}t(c)}else if(F==bn)C.D(B);else if(F==E)C.D(B);else if(F==Y7){try{for(c=0;c<C.O.length;c++)try{t=C.O[c],t[0][t[1]](t[2])}catch(X){}}catch(X){}(0,B[1])(function(X,D){C.B(X,true,D)},(C.O=[],function(X){z([SO],(X=!C.l.length,C)),X&&M(false,C,true)}))}else{if(F==Z)return c=B[2],d(C,481,B[6]),d(C,6,c),C.D(B);F==SO?(C.G=null,C.P=[],C.R=[]):F==hc&&"loading"===H.document.readyState&&(C.Z=function(X,D){function a(){D||(D=true,X())}H.document.addEventListener("DOMContentLoaded",a,(D=false,l)),H.addEventListener("load",a,l)})}},w=function(B,C,c,t,F,X){if(c.j==c)for(F=m(C,c),249==C?(C=function(D,a,S,G){if(F.m7!=(S=(G=F.length,(G|0)-4>>3),S)){S=(S<<3)-(a=[0,0,X[1],X[F.m7=S,2]],4);try{F.Xz=qB(oE((S|0)+4,F),a,oE(S,F))}catch(L){throw L;}}F.push(F.Xz[G&7]^D)},X=m(48,c)):C=function(D){F.push(D)},t&&C(t&255),c=B.length,t=0;t<c;t++)C(B[t])},x7=function(B,C,c,t){function F(){}return{invoke:(t=BD((c=void 0,B),function(X){F&&(C&&Q(C),c=X,F(),F=void 0)},!!C)[0],function(X,D,a,S){function G(){c(function(L){Q(function(){X(L)})},a)}if(!D)return D=t(a),X&&X(D),D;c?G():(S=F,F=function(){Q((S(),G))})})}},ZF=function(B,C){(C.push(B[0]<<24|B[1]<<16|B[2]<<8|B[3]),C).push(B[4]<<24|B[5]<<16|B[6]<<8|B[7]),C.push(B[8]<<24|B[9]<<16|B[10]<<8|B[11])},vD=function(B,C,c,t,F){w((F=m((c=(F=h((B&=(t=B&3,4),C)),h(C)),F),C),B&&(F=OM(""+F)),t&&w(V(F.length,2),c,C),F),c,C)},h=function(B,C){if(B.g)return aE(B.F,B);return(C=p(8,true,B),C&128)&&(C^=128,B=p(2,true,B),C=(C<<2)+(B|0)),C},rc=function(B,C,c,t){return m(6,(d(C,155,(Fv(B,((t=m(155,C),C.R)&&t<C.T?(d(C,155,C.T),IE(C,c)):d(C,155,c),C)),t)),C))},NB=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),k7=[],SO=(u.prototype.S$=void 0,u.prototype.zP=void 0,[]),K=(u.prototype.TP=false,{}),x=[],hc=[],Y7=[],E=(u.prototype.s="toString",[]),Z=[],bn=[],v=((((ZF,W,function(){})(DF),function(){})(dc),u.prototype).u="create",K).constructor,cD=((b=u.prototype,b).Yn=function(B,C,c,t,F){for(t=F=0;t<B.length;t++)F+=B.charCodeAt(t),F+=F<<10,F^=F>>6;return F=(B=(F+=F<<3,F^=F>>11,F+(F<<15)>>>0),new Number(B&(1<<C)-1)),F[0]=(B>>>C)%c,F},b.B=function(B,C,c,t,F){if(c="array"===sM(c)?c:[c],this.L)B(this.L);else try{t=!this.l.length,F=[],z([k7,F,c],this),z([x,B,F],this),C&&!t||M(true,this,C)}catch(X){I(X,this),B(this.L)}},b.Zf=function(){return Math.floor(this.X())},b.w2=function(B,C,c){return((C=(C^=C<<13,C^=C>>17,(C^C<<5)&c))||(C=1),B)^C},void 0),Kw=(((u.prototype.D=(b.X=(b.qj=function(){return Math.floor(this.N+(this.X()-this.J))},(b.Df=function(B,C,c,t,F,X){for(c=t=(X=[],0);c<B.length;c++)for(F=F<<C|B[c],t+=C;7<t;)t-=8,X.push(F>>t&255);return X},window).performance||{}).now?function(){return this.tk+window.performance.now()}:function(){return+new Date},function(B,C){return cD=(C=(B={},{}),function(){return C==B?18:-17}),function(c,t,F,X,D,a,S,G,L,J,g,R,T,A,U){C=(X=C,B);try{if(L=c[0],L==E){D=c[1];try{for(a=(T=(J=0,g=[],atob)(D),0);a<T.length;a++)A=T.charCodeAt(a),255<A&&(g[J++]=A&255,A>>=8),g[J++]=A;d(this,435,(this.T=(this.R=g,this.R.length<<3),[0,0,0]))}catch(N){P(N,this,17);return}Fv(8001,this)}else if(L==k7)c[1].push(m(56,this).length,m(257,this),m(129,this).length,m(249,this).length),d(this,6,c[2]),this.G[341]&&rc(8001,this,m(341,this));else{if(L==x){U=V((m(129,(J=c[2],this)).length|0)+2,2),t=this.j,this.j=this;try{G=m(124,this),0<G.length&&w(V(G.length,2).concat(G),129,this,10),w(V(this.H,1),129,this,109),w(V(this[x].length,1),129,this),T=0,T+=m(276,this)&2047,R=m(249,this),T-=(m(129,this).length|0)+5,4<R.length&&(T-=(R.length|0)+3),0<T&&w(V(T,2).concat(W(T)),129,this,15),4<R.length&&w(V(R.length,2).concat(R),129,this,156)}finally{this.j=t}if(F=(((a=W(2).concat(m(129,this)),a)[1]=a[0]^6,a[3]=a[1]^U[0],a)[4]=a[1]^U[1],this).fL(a))F="!"+F;else for(F="",T=0;T<a.length;T++)S=a[T][this.s](16),1==S.length&&(S="0"+S),F+=S;return(m(129,(d(this,257,(m(56,(g=F,this)).length=J.shift(),J.shift())),this)).length=J.shift(),m)(249,this).length=J.shift(),g}if(L==bn)rc(c[2],this,c[1]);else if(L==Z)return rc(8001,this,c[1])}}finally{C=X}}}()),u.prototype).e$=0,u).prototype.fL=function(B,C,c,t){if(C=window.btoa){for(c=(t="",0);c<B.length;c+=8192)t+=String.fromCharCode.apply(null,B.slice(c,c+8192));B=C(t).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else B=void 0;return B},/./);u.prototype.aM=0;var Lw,ln=(u.prototype[Y7]=[0,0,1,1,0,1,1],E.pop).bind(u.prototype[k7]),mj=function(B,C){return(C=jO())&&1===B.eval(C.createScript("1"))?function(c){return C.createScript(c)}:function(c){return""+c}}((Lw=Jc({get:ln},(Kw[u.prototype.s]=ln,u.prototype.u)),u.prototype.Ve=void 0,H));40<(q=H.botguard||(H.botguard={}),q).m||(q.m=41,q.bg=x7,q.a=BD),q.IDm_=function(B,C,c){return c=new u(B,C),[function(t){return wc(t,c)}]};}).call(this);'));
}).call(this);
#5 JavaScript::Eval (size: 15538) - SHA256: d013a4bf9ffdaed544d92de3ded704baee12176ad3b72e0013e7e406a5642f6c
(function() {
    var BD = function(B, C, c, t) {
            return (t = q[B.substring(0, 3) + "_"]) ? t(B.substring(3), C, c) : Cw(B, C)
        },
        V = function(B, C, c, t) {
            for (c = (C | (t = [], 0)) - 1; 0 <= c; c--) t[(C | 0) - 1 - (c | 0)] = B >> 8 * c & 255;
            return t
        },
        oE = function(B, C) {
            return C[B] << 24 | C[(B | 0) + 1] << 16 | C[(B | 0) + 2] << 8 | C[(B | 0) + 3]
        },
        m = function(B, C) {
            if (void 0 === (C = C.G[B], C)) throw [K, 30, B];
            if (C.value) return C.create();
            return C.create(4 * B * B + 36 * B + 18), C.prototype
        },
        Xv = function(B, C, c, t, F, X, D, a) {
            return (D = v[C = (a = (F = c & 7, cD), [52, 36, 82, -14, 27, -81, C, -43, 75, 22]), t.u](t.j$), D[t.u] = function(S) {
                F += 6 + (X = S, 7 * c), F &= 7
            }, D).concat = function(S) {
                return (X = (S = (S = (S = B % 16 + 1, -S * X) - 612 * X + C[F + 75 & 7] * B * S + 4 * B * B * S - 136 * B * B * X - 1224 * B * X + F + 34 * X * X + (a() | 0) * S, C)[S], void 0), C[(F + 53 & 7) + (c & 2)] = S, C)[F + (c & 2)] = 36, S
            }, D
        },
        DF = function(B, C, c, t) {
            try {
                t = B[((C | 0) + 2) % 3], B[C] = (B[C] | 0) - (B[((C | 0) + 1) % 3] | 0) - (t | 0) ^ (1 == C ? t << c : t >>> c)
            } catch (F) {
                throw F;
            }
        },
        I = function(B, C) {
            C.L = ((C.L ? C.L + "~" : "E:") + B.message + ":" + B.stack).slice(0, 2048)
        },
        tc = function(B, C, c, t) {
            for (t = (c = h(B), 0); 0 < C; C--) t = t << 8 | Y(B);
            d(B, c, t)
        },
        Fv = function(B, C, c, t, F, X) {
            if (!C.L) {
                C.h++;
                try {
                    for (c = (F = 0, void 0), X = C.T; --B;) try {
                        if (t = void 0, C.g) c = aE(C.g, C);
                        else {
                            if (F = m(155, C), F >= X) break;
                            t = (d(C, 252, F), h(C)), c = m(t, C)
                        }
                        O((c && c[SO] & 2048 ? c(C, B) : P([K, 21, t], C, 0), false), C, B, false)
                    } catch (D) {
                        m(58, C) ? P(D, C, 22) : d(C, 58, D)
                    }
                    if (!B) {
                        if (C.TP) {
                            Fv(570557350755, (C.h--, C));
                            return
                        }
                        P([K, 33], C, 0)
                    }
                } catch (D) {
                    try {
                        P(D, C, 22)
                    } catch (a) {
                        I(a, C)
                    }
                }
                C.h--
            }
        },
        sM = function(B, C, c) {
            if ("object" == (C = typeof B, C))
                if (B) {
                    if (B instanceof Array) return "array";
                    if (B instanceof Object) return C;
                    if (c = Object.prototype.toString.call(B), "[object Window]" == c) return "object";
                    if ("[object Array]" == c || "number" == typeof B.length && "undefined" != typeof B.splice && "undefined" != typeof B.propertyIsEnumerable && !B.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == c || "undefined" != typeof B.call && "undefined" != typeof B.propertyIsEnumerable && !B.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == C && "undefined" == typeof B.call) return "object";
            return C
        },
        qB = function(B, C, c, t, F) {
            for (C = (F = 0, t = C[2] | 0, C)[3] | 0; 14 > F; F++) B = B >>> 8 | B << 24, B += c | 0, B ^= t + 1656, C = C >>> 8 | C << 24, c = c << 3 | c >>> 29, C += t | 0, t = t << 3 | t >>> 29, C ^= F + 1656, c ^= B, t ^= C;
            return [c >>> 24 & 255, c >>> 16 & 255, c >>> 8 & 255, c >>> 0 & 255, B >>> 24 & 255, B >>> 16 & 255, B >>> 8 & 255, B >>> 0 & 255]
        },
        V7 = function(B, C, c, t) {
            w(V((t = (c = h(B), h(B)), m)(c, B), C), t, B)
        },
        b, GJ = function(B, C) {
            return (C = Y(B), C & 128) && (C = C & 127 | Y(B) << 7), C
        },
        Ac = function(B, C, c, t, F) {
            for (t = (F = (c.KL = (c.j$ = (c.E0 = (c.cv = (c.Fz = Kw, Lw), c[x]), Jc({get: function() {
                        return this.concat()
                    }
                }, c.u)), v[c.u](c.j$, {
                    value: {
                        value: {}
                    }
                })), []), 0); 319 > t; t++) F[t] = String.fromCharCode(t);
            M(true, (z((z(((r(c, (d(c, (d(c, 276, (c.d2 = (r(c, function(X, D, a, S, G, L, J) {
                for (a = (J = m(434, (L = (G = (D = h(X), GJ(X)), ""), X)), J.length), S = 0; G--;) S = ((S | 0) + (GJ(X) | 0)) % a, L += F[J[S]];
                d(X, D, L)
            }, (r(c, (r(c, (r(c, (d(c, 56, (((r(c, (d(c, (r(c, (r(c, (r(c, (d(c, 48, (r(c, (r(c, function(X, D, a, S) {
                if (S = X.lG.pop()) {
                    for (a = Y(X); 0 < a; a--) D = h(X), S[D] = X.G[D];
                    X.G = (S[257] = (S[124] = X.G[124], X).G[257], S)
                } else d(X, 155, X.T)
            }, (r((c.RM = ((r(c, (d(c, 384, (d(c, (d(c, (r(c, function(X, D, a, S) {
                d(X, (S = (D = m((a = h((D = h((S = h(X), X)), X)), D), X), m(S, X)), a), S in D | 0)
            }, (r(c, function(X, D, a, S) {
                d(X, (D = m((S = (a = h((S = (D = h(X), h(X)), X)), m(S, X)), D), X) == S, a), +D)
            }, (d(c, 129, [160, 0, (d((d(c, 6, (r(c, (r((r(c, (r(c, function(X) {
                V7(X, 1)
            }, (r(c, function(X, D, a, S, G, L) {
                if (!O(true, X, D, true)) {
                    if ("object" == (X = (S = m((D = (a = (S = h((D = (L = h(X), h(X)), X)), h(X)), m(D, X)), S), X), a = m(a, X), m(L, X)), sM(X))) {
                        for (G in L = [], X) L.push(G);
                        X = L
                    }
                    for (S = (L = (G = X.length, 0), 0 < S ? S : 1); L < G; L += S) D(X.slice(L, (L | 0) + (S | 0)), a)
                }
            }, (r(c, (r(c, function(X, D, a, S, G, L) {
                O(false, X, D, true) || (L = RE(X.j), D = L.U, G = L.GP, S = L.Y, L = L.LL, a = S.length, D = 0 == a ? new G[D] : 1 == a ? new G[D](S[0]) : 2 == a ? new G[D](S[0], S[1]) : 3 == a ? new G[D](S[0], S[1], S[2]) : 4 == a ? new G[D](S[0], S[1], S[2], S[3]) : 2(), d(X, L, D))
            }, (r(c, (d(c, (d((d(c, 155, (c.tk = (c.Z = null, (t = window.performance || {}, c.T = (c.F = void 0, 0), c.O = (c.v = (c.lG = [], false), c.C = false, (c.g = void 0, c.G = (c.l = [], c.N = (c.I = 0, (c.V = void 0, c).L = void 0, 0), []), (c.h = (c.o = 8001, 0), c).uG = function(X) {
                this.j = X
            }, c.i = (c.S = 0, 25), c.j = c, c.H = 1, c.g2 = false, c).kn = ((c.K = void 0, c.R = [], c.J = 0, c).W = void 0, 0), c.P = [], []), c.A = void 0, t).timeOrigin || (t.timing || {}).navigationStart || 0), 0)), c), 252, 0), r(c, function(X, D) {
                X = (D = h(X), m)(D, X.j), X[0].removeEventListener(X[1], X[2], l)
            }, 285), 372), c), function(X, D, a, S, G) {
                0 !== (D = (G = (a = (S = (D = (a = (G = h((S = h(X), X)), h(X)), h(X)), m)(S, X.j), m)(a, X), m(G, X)), m(D, X)), S) && (D = TJ(X, a, D, 1, S, G), S.addEventListener(G, D, l), d(X, 237, [S, G, D]))
            }), 461), 103)), function(X, D, a) {
                D = (a = 0 != (D = (a = h(X), h)(X), m(a, X)), m(D, X)), a && d(X, 155, D)
            }), 505), 94)), 441)), function(X) {
                tc(X, 4)
            }), 456), c), function(X, D, a, S, G) {
                D = m((S = m((D = (S = (a = (G = h(X), h(X)), h)(X), h)(X), a = m(a, X), S), X), D), X), d(X, G, TJ(X, a, S, D))
            }, 111), function(X) {
                V7(X, 4)
            }), 313), {})), c), 124, []), 0)]), 87)), 279)), 237), 0), 257), 2048), H)), function(X, D, a, S, G, L, J, g, R, T, A, U) {
                function N(f, k) {
                    for (; A < f;) S |= Y(X) << A, A += 8;
                    return S >>= (A -= f, k = S & (1 << f) - 1, f), k
                }
                for (T = a = (U = (S = A = (L = h(X), 0), g = (N(3) | 0) + 1, R = N(5), []), 0); a < R; a++) G = N(1), U.push(G), T += G ? 0 : 1;
                for (T = (a = ((T | 0) - 1).toString(2).length, 0), D = []; T < R; T++) U[T] || (D[T] = N(a));
                for (a = 0; a < R; a++) U[a] && (D[a] = h(X));
                for (J = []; g--;) J.push(m(h(X), X));
                r(X, function(f, k, y, e, n) {
                    for (e = (k = (n = 0, []), []); n < R; n++) {
                        if (!U[y = D[n], n]) {
                            for (; y >= e.length;) e.push(h(f));
                            y = e[y]
                        }
                        k.push(y)
                    }
                    f.F = (f.g = gc(f, J.slice()), gc)(f, k)
                }, L)
            }), 242), r)(c, function(X, D, a) {
                d(X, (a = (D = (a = h(X), h)(X), m(a, X)), a = sM(a), D), a)
            }, 453), 0), c), function(X, D, a) {
                d((a = (D = h(X), h(X)), X), a, "" + m(D, X))
            }, 236), 223)), function() {}), 474), [0, 0, 0])), function(X, D, a, S) {
                d((D = (a = h(X), h(X)), S = h(X), X), S, m(a, X) || m(D, X))
            }), 187), function(X, D, a, S) {
                d(X, (D = (a = Y((S = h(X), X)), h)(X), D), m(S, X) >>> a)
            }), 422), function(X, D, a) {
                O(false, X, D, true) || (D = h(X), a = h(X), d(X, a, function(S) {
                    return eval(S)
                }(mj(m(D, X.j)))))
            }), 18), 58), 213), function(X, D, a, S) {
                !O(false, X, D, true) && (D = RE(X), a = D.GP, S = D.U, X.j == X || S == X.uG && a == X) && (d(X, D.LL, S.apply(a, D.Y)), X.S = X.X())
            }), 27), r)(c, function(X) {
                vD(3, X)
            }, 340), r)(c, function(X, D) {
                D = m(h(X), X), IE(X.j, D)
            }, 430), [])), c.xn = 0, function(X, D, a, S, G) {
                for (S = (a = (G = h(X), GJ(X)), D = 0, []); D < a; D++) S.push(Y(X));
                d(X, G, S)
            }), 66), function(X, D, a, S) {
                d(X, (S = (a = m((D = (a = h(X), S = h(X), h)(X), a), X), m(S, X)), D), a[S])
            }), 204), function(X) {
                vD(4, X)
            }), 501), 210)), 0), 0)), 249), W(4)), r(c, function(X, D, a, S) {
                (S = h((D = (a = h(X), h)(X), X)), X.j == X) && (S = m(S, X), D = m(D, X), m(a, X)[D] = S, 435 == a && (X.K = void 0, 2 == D && (X.V = p(32, false, X), X.K = void 0)))
            }, 184), function(X, D, a, S) {
                d(X, (a = m((D = (a = h(X), h(X)), S = m(D, X), a), X), D), S + a)
            }), 30), z)([hc], c), [E, C]), c), [Y7, B]), c), c), true)
        },
        UM = function(B, C, c, t) {
            for (; B.l.length;) {
                c = (B.Z = null, B.l.pop());
                try {
                    t = fw(c, B)
                } catch (F) {
                    I(F, B)
                }
                if (C && B.Z) {
                    C = B.Z, C(function() {
                        M(true, B, true)
                    });
                    break
                }
            }
            return t
        },
        dc = function(B, C, c) {
            if (3 == B.length) {
                for (c = 0; 3 > c; c++) C[c] += B[c];
                for (c = [13, 8, 13, (B = 0, 12), 16, 5, 3, 10, 15]; 9 > B; B++) C[3](C, B % 3, c[B])
            }
        },
        H = this || self,
        Jc = function(B, C) {
            return v[C](v.prototype, {
                length: B,
                replace: B,
                floor: B,
                document: B,
                stack: B,
                parent: B,
                prototype: B,
                console: B,
                propertyIsEnumerable: B,
                splice: B,
                call: B,
                pop: B
            })
        },
        M = function(B, C, c, t, F, X) {
            if (C.l.length) {
                C.v = !((C.v && 0(), C).g2 = c, 0);
                try {
                    X = C.X(), C.J = X, C.A = 0, C.S = X, F = UM(C, c), t = C.X() - C.J, C.N += t, t < (B ? 0 : 10) || 0 >= C.i-- || (t = Math.floor(t), C.P.push(254 >= t ? t : 254))
                } finally {
                    C.v = false
                }
                return F
            }
        },
        jO = function(B, C) {
            if ((C = null, B = H.trustedTypes, !B) || !B.createPolicy) return C;
            try {
                C = B.createPolicy("bg", {
                    createHTML: PD,
                    createScript: PD,
                    createScriptURL: PD
                })
            } catch (c) {
                H.console && H.console.error(c.message)
            }
            return C
        },
        p = function(B, C, c, t, F, X, D, a, S, G, L, J, g, R) {
            if (R = m(155, c), R >= c.T) throw [K, 31];
            for (S = (a = (t = (g = R, 0), B), c.E0.length); 0 < a;) L = g % 8, J = g >> 3, D = c.R[J], G = 8 - (L | 0), G = G < a ? G : a, C && (X = c, X.K != g >> 6 && (X.K = g >> 6, F = m(435, X), X.W = qB(X.K, [0, 0, F[1], F[2]], X.V)), D ^= c.W[J & S]), t |= (D >> 8 - (L | 0) - (G | 0) & (1 << G) - 1) << (a | 0) - (G | 0), a -= G, g += G;
            return C = t, d(c, 155, (R | 0) + (B | 0)), C
        },
        Q = H.requestIdleCallback ? function(B) {
            requestIdleCallback(function() {
                B()
            }, {
                timeout: 4
            })
        } : H.setImmediate ? function(B) {
            setImmediate(B)
        } : function(B) {
            setTimeout(B, 0)
        },
        OM = function(B, C, c, t, F) {
            for (t = c = (B = B.replace(/\r\n/g, "\n"), 0), F = []; t < B.length; t++) C = B.charCodeAt(t), 128 > C ? F[c++] = C : (2048 > C ? F[c++] = C >> 6 | 192 : (55296 == (C & 64512) && t + 1 < B.length && 56320 == (B.charCodeAt(t + 1) & 64512) ? (C = 65536 + ((C & 1023) << 10) + (B.charCodeAt(++t) & 1023), F[c++] = C >> 18 | 240, F[c++] = C >> 12 & 63 | 128) : F[c++] = C >> 12 | 224, F[c++] = C >> 6 & 63 | 128), F[c++] = C & 63 | 128);
            return F
        },
        l = {
            passive: true,
            capture: true
        },
        wc = function(B, C, c) {
            return C.B(function(t) {
                c = t
            }, false, B), c
        },
        aE = function(B, C) {
            return B = B.create().shift(), C.g.create().length || C.F.create().length || (C.g = void 0, C.F = void 0), B
        },
        O = function(B, C, c, t, F, X, D, a, S) {
            if ((C.j = (C.H += (F = (a = (D = (X = (t || C.A++, 0 < C.I) && C.v && C.g2 && 1 >= C.h && !C.g && !C.Z && (!t || 1 < C.o - c) && 0 == document.hidden, S = 4 == C.A) || X ? C.X() : C.S, D - C.S), a) >> 14, C.V && (C.V ^= F * (a << 2)), F), F || C.j), S) || X) C.A = 0, C.S = D;
            if (!X || D - C.J < C.I - (B ? 255 : t ? 5 : 2)) return false;
            return !(C.Z = ((d(C, (B = m(t ? 252 : 155, (C.o = c, C)), 155), C.T), C).l.push([bn, B, t ? c + 1 : c]), Q), 0)
        },
        z = function(B, C) {
            C.l.splice(0, 0, B)
        },
        IE = function(B, C) {
            d(B, ((B.lG.push(B.G.slice()), B).G[155] = void 0, 155), C)
        },
        gc = function(B, C, c) {
            return c = v[B.u](B.KL), c[B.u] = function() {
                return C
            }, c.concat = function(t) {
                C = t
            }, c
        },
        q, P = function(B, C, c, t, F, X) {
            if (!C.C) {
                if (3 < (B = m(257, (((X = ((t = void 0, B) && B[0] === K && (c = B[1], t = B[2], B = void 0), m)(124, C), 0) == X.length && (F = m(252, C) >> 3, X.push(c, F >> 8 & 255, F & 255), void 0 != t && X.push(t & 255)), c = "", B) && (B.message && (c += B.message), B.stack && (c += ":" + B.stack)), C)), B)) {
                    C.j = (t = (B -= (c = c.slice(0, (B | 0) - 3), (c.length | 0) + 3), c = OM(c), C.j), C);
                    try {
                        w(V(c.length, 2).concat(c), 249, C, 9)
                    } finally {
                        C.j = t
                    }
                }
                d(C, 257, B)
            }
        },
        TJ = function(B, C, c, t, F, X) {
            function D() {
                if (B.j == B) {
                    if (B.G) {
                        var a = [Z, C, c, void 0, F, X, arguments];
                        if (2 == t) var S = M(false, (z(a, B), B), false);
                        else if (1 == t) {
                            var G = !B.l.length;
                            z(a, B), G && M(false, B, false)
                        } else S = fw(a, B);
                        return S
                    }
                    F && X && F.removeEventListener(X, D, l)
                }
            }
            return D
        },
        u = function(B, C, c) {
            c = this;
            try {
                Ac(C, B, this)
            } catch (t) {
                I(t, this), C(function(F) {
                    F(c.L)
                })
            }
        },
        W = function(B, C) {
            for (C = []; B--;) C.push(255 * Math.random() | 0);
            return C
        },
        Y = function(B) {
            return B.g ? aE(B.F, B) : p(8, true, B)
        },
        PD = function(B) {
            return B
        },
        r = function(B, C, c) {
            (d(B, c, C), C)[hc] = 2796
        },
        RE = function(B, C, c, t, F, X) {
            for (X = (C = (t = (F = h((c = B[NB] || {}, B)), c.LL = h(B), c.Y = [], B.j == B ? (Y(B) | 0) - 1 : 1), h(B)), 0); X < t; X++) c.Y.push(h(B));
            for (c.GP = m(C, B); t--;) c.Y[t] = m(c.Y[t], B);
            return c.U = m(F, B), c
        },
        d = function(B, C, c) {
            if (155 == C || 252 == C) B.G[C] ? B.G[C].concat(c) : B.G[C] = gc(B, c);
            else {
                if (B.C && 435 != C) return;
                129 == C || 249 == C || 56 == C || 124 == C || 48 == C ? B.G[C] || (B.G[C] = Xv(C, c, 62, B)) : B.G[C] = Xv(C, c, 121, B)
            }
            435 == C && (B.V = p(32, false, B), B.K = void 0)
        },
        Cw = function(B, C) {
            return [(C(function(c) {
                c(B)
            }), function() {
                return B
            })]
        },
        fw = function(B, C, c, t, F) {
            if ((F = B[0], F) == k7) C.i = 25, C.D(B);
            else if (F == x) {
                t = B[1];
                try {
                    c = C.L || C.D(B)
                } catch (X) {
                    I(X, C), c = C.L
                }
                t(c)
            } else if (F == bn) C.D(B);
            else if (F == E) C.D(B);
            else if (F == Y7) {
                try {
                    for (c = 0; c < C.O.length; c++) try {
                        t = C.O[c], t[0][t[1]](t[2])
                    } catch (X) {}
                } catch (X) {}(0, B[1])(function(X, D) {
                    C.B(X, true, D)
                }, (C.O = [], function(X) {
                    z([SO], (X = !C.l.length, C)), X && M(false, C, true)
                }))
            } else {
                if (F == Z) return c = B[2], d(C, 481, B[6]), d(C, 6, c), C.D(B);
                F == SO ? (C.G = null, C.P = [], C.R = []) : F == hc && "loading" === H.document.readyState && (C.Z = function(X, D) {
                    function a() {
                        D || (D = true, X())
                    }
                    H.document.addEventListener("DOMContentLoaded", a, (D = false, l)), H.addEventListener("load", a, l)
                })
            }
        },
        w = function(B, C, c, t, F, X) {
            if (c.j == c)
                for (F = m(C, c), 249 == C ? (C = function(D, a, S, G) {
                        if (F.m7 != (S = (G = F.length, (G | 0) - 4 >> 3), S)) {
                            S = (S << 3) - (a = [0, 0, X[1], X[F.m7 = S, 2]], 4);
                            try {
                                F.Xz = qB(oE((S | 0) + 4, F), a, oE(S, F))
                            } catch (L) {
                                throw L;
                            }
                        }
                        F.push(F.Xz[G & 7] ^ D)
                    }, X = m(48, c)) : C = function(D) {
                        F.push(D)
                    }, t && C(t & 255), c = B.length, t = 0; t < c; t++) C(B[t])
        },
        x7 = function(B, C, c, t) {
            function F() {}
            return {
                invoke: (t = BD((c = void 0, B), function(X) {
                    F && (C && Q(C), c = X, F(), F = void 0)
                }, !!C)[0], function(X, D, a, S) {
                    function G() {
                        c(function(L) {
                            Q(function() {
                                X(L)
                            })
                        }, a)
                    }
                    if (!D) return D = t(a), X && X(D), D;
                    c ? G() : (S = F, F = function() {
                        Q((S(), G))
                    })
                })
            }
        },
        ZF = function(B, C) {
            (C.push(B[0] << 24 | B[1] << 16 | B[2] << 8 | B[3]), C).push(B[4] << 24 | B[5] << 16 | B[6] << 8 | B[7]), C.push(B[8] << 24 | B[9] << 16 | B[10] << 8 | B[11])
        },
        vD = function(B, C, c, t, F) {
            w((F = m((c = (F = h((B &= (t = B & 3, 4), C)), h(C)), F), C), B && (F = OM("" + F)), t && w(V(F.length, 2), c, C), F), c, C)
        },
        h = function(B, C) {
            if (B.g) return aE(B.F, B);
            return (C = p(8, true, B), C & 128) && (C ^= 128, B = p(2, true, B), C = (C << 2) + (B | 0)), C
        },
        rc = function(B, C, c, t) {
            return m(6, (d(C, 155, (Fv(B, ((t = m(155, C), C.R) && t < C.T ? (d(C, 155, C.T), IE(C, c)) : d(C, 155, c), C)), t)), C))
        },
        NB = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        k7 = [],
        SO = (u.prototype.S$ = void 0, u.prototype.zP = void 0, []),
        K = (u.prototype.TP = false, {}),
        x = [],
        hc = [],
        Y7 = [],
        E = (u.prototype.s = "toString", []),
        Z = [],
        bn = [],
        v = ((((ZF, W, function() {})(DF), function() {})(dc), u.prototype).u = "create", K).constructor,
        cD = ((b = u.prototype, b).Yn = function(B, C, c, t, F) {
            for (t = F = 0; t < B.length; t++) F += B.charCodeAt(t), F += F << 10, F ^= F >> 6;
            return F = (B = (F += F << 3, F ^= F >> 11, F + (F << 15) >>> 0), new Number(B & (1 << C) - 1)), F[0] = (B >>> C) % c, F
        }, b.B = function(B, C, c, t, F) {
            if (c = "array" === sM(c) ? c : [c], this.L) B(this.L);
            else try {
                t = !this.l.length, F = [], z([k7, F, c], this), z([x, B, F], this), C && !t || M(true, this, C)
            } catch (X) {
                I(X, this), B(this.L)
            }
        }, b.Zf = function() {
            return Math.floor(this.X())
        }, b.w2 = function(B, C, c) {
            return ((C = (C ^= C << 13, C ^= C >> 17, (C ^ C << 5) & c)) || (C = 1), B) ^ C
        }, void 0),
        Kw = (((u.prototype.D = (b.X = (b.qj = function() {
            return Math.floor(this.N + (this.X() - this.J))
        }, (b.Df = function(B, C, c, t, F, X) {
            for (c = t = (X = [], 0); c < B.length; c++)
                for (F = F << C | B[c], t += C; 7 < t;) t -= 8, X.push(F >> t & 255);
            return X
        }, window).performance || {}).now ? function() {
            return this.tk + window.performance.now()
        } : function() {
            return +new Date
        }, function(B, C) {
            return cD = (C = (B = {}, {}), function() {
                    return C == B ? 18 : -17
                }),
                function(c, t, F, X, D, a, S, G, L, J, g, R, T, A, U) {
                    C = (X = C, B);
                    try {
                        if (L = c[0], L == E) {
                            D = c[1];
                            try {
                                for (a = (T = (J = 0, g = [], atob)(D), 0); a < T.length; a++) A = T.charCodeAt(a), 255 < A && (g[J++] = A & 255, A >>= 8), g[J++] = A;
                                d(this, 435, (this.T = (this.R = g, this.R.length << 3), [0, 0, 0]))
                            } catch (N) {
                                P(N, this, 17);
                                return
                            }
                            Fv(8001, this)
                        } else if (L == k7) c[1].push(m(56, this).length, m(257, this), m(129, this).length, m(249, this).length), d(this, 6, c[2]), this.G[341] && rc(8001, this, m(341, this));
                        else {
                            if (L == x) {
                                U = V((m(129, (J = c[2], this)).length | 0) + 2, 2), t = this.j, this.j = this;
                                try {
                                    G = m(124, this), 0 < G.length && w(V(G.length, 2).concat(G), 129, this, 10), w(V(this.H, 1), 129, this, 109), w(V(this[x].length, 1), 129, this), T = 0, T += m(276, this) & 2047, R = m(249, this), T -= (m(129, this).length | 0) + 5, 4 < R.length && (T -= (R.length | 0) + 3), 0 < T && w(V(T, 2).concat(W(T)), 129, this, 15), 4 < R.length && w(V(R.length, 2).concat(R), 129, this, 156)
                                } finally {
                                    this.j = t
                                }
                                if (F = (((a = W(2).concat(m(129, this)), a)[1] = a[0] ^ 6, a[3] = a[1] ^ U[0], a)[4] = a[1] ^ U[1], this).fL(a)) F = "!" + F;
                                else
                                    for (F = "", T = 0; T < a.length; T++) S = a[T][this.s](16), 1 == S.length && (S = "0" + S), F += S;
                                return (m(129, (d(this, 257, (m(56, (g = F, this)).length = J.shift(), J.shift())), this)).length = J.shift(), m)(249, this).length = J.shift(), g
                            }
                            if (L == bn) rc(c[2], this, c[1]);
                            else if (L == Z) return rc(8001, this, c[1])
                        }
                    } finally {
                        C = X
                    }
                }
        }()), u.prototype).e$ = 0, u).prototype.fL = function(B, C, c, t) {
            if (C = window.btoa) {
                for (c = (t = "", 0); c < B.length; c += 8192) t += String.fromCharCode.apply(null, B.slice(c, c + 8192));
                B = C(t).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
            } else B = void 0;
            return B
        }, /./);
    u.prototype.aM = 0;
    var Lw, ln = (u.prototype[Y7] = [0, 0, 1, 1, 0, 1, 1], E.pop).bind(u.prototype[k7]),
        mj = function(B, C) {
            return (C = jO()) && 1 === B.eval(C.createScript("1")) ? function(c) {
                return C.createScript(c)
            } : function(c) {
                return "" + c
            }
        }((Lw = Jc({get: ln
        }, (Kw[u.prototype.s] = ln, u.prototype.u)), u.prototype.Ve = void 0, H));
    40 < (q = H.botguard || (H.botguard = {}), q).m || (q.m = 41, q.bg = x7, q.a = BD), q.IDm_ = function(B, C, c) {
        return c = new u(B, C), [function(t) {
            return wc(t, c)
        }]
    };
}).call(this);
#6 JavaScript::Eval (size: 11) - SHA256: 8ee784d797ce97ed9716bb42682346deb0c7ae8ff75d7ad8ae60508907054c16
addthis.cbs
#7 JavaScript::Eval (size: 22) - SHA256: 3767d5321b4ae282cd6bc77966b15645f99a332b0c28e8bdd6ffd6bfa9cb2104
0,
function(X) {
    tc(X, 1)
}

Executed Writes (39)
#1 JavaScript::Write (size: 24) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05
< xmp style = display: none >
#2 JavaScript::Write (size: 17) - SHA256: cac3dc54e4087e23c4295f7251f46d876c3ec9f4031085f2f0d5f1df58908111
& #8221;</i></div>
#3 JavaScript::Write (size: 109) - SHA256: 916d522aeb24c25dad009af5abd1f9e39f870d24b11518737d79e6b4b432b150
 on < a href = "http://almayasabdam.blogspot.com/2019/04/blog-post.html?showComment=1554243064227" > blog post < /a>
#4 JavaScript::Write (size: 25) - SHA256: 7bdf20024a41524ec5eb288153f24eccc19d4be1922ee1dc7a935bb3d7cbb89a
& hellip; & #8221;</i></div>
#5 JavaScript::Write (size: 118) - SHA256: dfb93ec87c7364aa1c59a7b60845a30c7d8446acf7306c342cbc355ca2426138
Hi Dear Friends, Well written by you.You have studied this issue well and your arguments are & hellip; & #8221;</i></div>
#6 JavaScript::Write (size: 159) - SHA256: d1a2a64b5c2ee45465020c4e4a3cbb6b1bc207c11a4c908e32a8971c8e53e88f
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/03/2019_17.html?showComment=1552776840688#c6680066736008608209" > VR1 < /a></span > commented
#7 JavaScript::Write (size: 163) - SHA256: 5e8c64ca0629b55b2fce678c88213b59f46111f7f396b6695272b8e2850300fc
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/02/blog-post_9.html?showComment=1549962178370#c7203523013699393824" > VR1 < /a></span > commented
#8 JavaScript::Write (size: 462) - SHA256: b8dd86eb0187ab3310b9c204be6172c64e03b00e32063e2fee5973b3ebfcab2e
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.iCxGNTE3Tqc.L.F4.O/d=0/rs=AN8SPfqhvHUlOSBSG-4xrkKOTAVZqlAYTA/m=el_main_css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":3.menuBody" class=VIpgJd&#45;ZVi9od&#45;xl07Ob></div > < /body>
#9 JavaScript::Write (size: 10) - SHA256: 6289266f3189ce617e6c60f18c7616341c0245a45fb9f89747c331e2148cae35
< i > & #8220;
#10 JavaScript::Write (size: 3003) - SHA256: bf5690c926b35118aff973a0c64de863fa871cf23f27d4e0b17754a7d9227572
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.iCxGNTE3Tqc.L.F4.O/d=0/rs=AN8SPfqhvHUlOSBSG-4xrkKOTAVZqlAYTA/m=el_main_css" > < /head><body class="VIpgJd-ZVi9od-ORHb" scroll="no" border=0 dir="ltr"><table border=0 cellspacing=0 cellpadding=0 width=100% height=100%><tr valign=middle><td width=1 nowrap><a href="https:/ / translate.google.com " class="
VIpgJd - ZVi9od - l4eHX - hSRGPd " target="
_blank "><img src="
https: //www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png" alt="Google Oversetter"></a></td><td width=1><img src="https://www.google.com/images/cleardot.gif" width="9" height="15" title="Innholdet p� denne sikre siden sendes til Google via en sikker tilkobling for � bli oversatt." alt="Innholdet p� denne sikre siden sendes til Google via en sikker tilkobling for � bli oversatt." style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-56px 0px;margin:0 4px"></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td><table border=0 cellspacing=0 cellpadding=0 height=100%><tr id=":1.promptSection" style="display:none" valign=middle><td nowrap><span class="VIpgJd-ZVi9od-ORHb-bN97Pc">Vis denne siden p�: <span id=":1.promptTargetLang"></span></span></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td nowrap><div class="VIpgJd-ZVi9od-LgbsSe"><div><button id=":1.confirm"><b>Oversett</b></button></div></div></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td nowrap><div class="VIpgJd-ZVi9od-LgbsSe"><div><button id=":1.noAutoPopup"></button></div></div></td></tr><tr id=":1.progressSection" style="display:none" valign=middle><td><span class="VIpgJd-ZVi9od-ORHb-bN97Pc">Oversettelse p�g�r&nbsp;<span dir="ltr">(<b id=":1.progressValue"></b>%)</span>&nbsp;<img src="https://translate.googleapis.com/translate_static/img/loading.gif"></span></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td nowrap><div class="VIpgJd-ZVi9od-LgbsSe"><div><button id=":1.cancel">Avbryt</button></div></div></td></tr><tr id=":1.finishSection" style="display:none"><td><span class="VIpgJd-ZVi9od-ORHb-bN97Pc">Oversatt til: <span id=":1.finishTargetLang"></span></span></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td nowrap><div class="VIpgJd-ZVi9od-LgbsSe"><div><button id=":1.restore">Vis original</button></div></div></td></tr><tr id=":1.errorSection" style="display:none" valign=middle><td><span id=":1.errorContent" class="VIpgJd-ZVi9od-ORHb-bN97Pc"></span></td></tr></table></td><td class="VIpgJd-ZVi9od-ORHb-KE6vqe"></td><td width=1 id="options"></td><td width=1><a id=":1.close" class="VIpgJd-ZVi9od-TvD9Pc-hSRGPd" href="#" title="Lukk"><img src="https://www.google.com/images/cleardot.gif" width="15" height="15" alt="Lukk" style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-28px 0px"></a></td></tr></table></body>
#11 JavaScript::Write (size: 26) - SHA256: 7128d3348f79c0cae6faf08376a1388e7dafe2f1a1bd02acc7f23901460cd79c
< div class = "rcw-comments" >
#12 JavaScript::Write (size: 2) - SHA256: 45822f54a0d0e030f75698c9252f1345982e743c9466806048f542467b3ca4f9
:
#13 JavaScript::Write (size: 165) - SHA256: b932cf0bec9869846d8ed1ecf66938fb22e47d18b331e65d6a5c9aa0c7865f12
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/09/09.html?showComment=1570150726149#c1527949717118513241" > Joseph Matthew < /a></span > commented
#14 JavaScript::Write (size: 95) - SHA256: 20aee574cda42d97ac17cc3d5fcfb03bfb369af932049a4059f0db79f65bf71d
 on < a href = "http://almayasabdam.blogspot.com/2019/09/09.html?showComment=1570150726149" > 09 < /a>
#15 JavaScript::Write (size: 115) - SHA256: ea28836684b2b6fe10ff07f205635505f13acd01cd5e52f898872c7717059373
 on < a href = "http://almayasabdam.blogspot.com/2019/04/blog-post_42.html?showComment=1554506608581" > blog post_42 < /a>
#16 JavaScript::Write (size: 170) - SHA256: 0f937d624eacbcc90ee1b4bc033754415e08d0ee5fd0a5e40d99fcb14976c5d2
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_17.html?showComment=1553103794203#c7682394868544009823" > Anonymous < /a></span > commented
#17 JavaScript::Write (size: 121) - SHA256: 25c13b33d25c26ea232e31884b0eddaa75cdbbca42ee20de7a903f61f5ba1980
Canon law is the most primitive law and it should be written with consultation of all the church & hellip; & #8221;</i></div>
#18 JavaScript::Write (size: 105) - SHA256: d1761e18fb28360464109755f7d945a9e72d3c1d9936959fed12825c01fcadf9
 on < a href = "http://almayasabdam.blogspot.com/2019/03/2019_17.html?showComment=1552776840688" > 2019 _17 < /a>
#19 JavaScript::Write (size: 166) - SHA256: 97b6e5d13c33497f7820d2cbf3a1499ff02a39aa8b747126182b7763aac77b56
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/11/l-church-act.html?showComment=1575157510332#c166013132854402448" > george < /a></span > commented
#20 JavaScript::Write (size: 163) - SHA256: 967ef703d13f9c11d38f99937c039e05fadd0f9a6e7b5f9adef2244ccd182e5e
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_7.html?showComment=1551923371160#c4288384521382151090" > VR1 < /a></span > commented
#21 JavaScript::Write (size: 86) - SHA256: d991fd5269b9c9f21adc7a51f397d2c4028cbae8c517766bb2a8f24b6626c851
http: //india.ucanews.com/news/syromalabar-land-deal-comes-under-ed-scanner/39266/daily
#22 JavaScript::Write (size: 77) - SHA256: 340fa0d901480bf748423500a2e7da676f1b503b845085392d0448297b9faa92
https: //international.la-croix.com/news/the-resignation-of-pope-francis/9416#
#23 JavaScript::Write (size: 93) - SHA256: 13125bc971efd4f2b3f02daeb3a482ff0b625765266600126deb56eb6757b4b5
http: //almayasabdam.com/indian-catholics-want-pope-francis-to-go-beyond-comments-about-abuse/
#24 JavaScript::Write (size: 161) - SHA256: efbc6609eb7f9a8a184d0680f9c55b2d07f310d16f5bb4b328a24aa19820aab1
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/04/blog-post.html?showComment=1554243064227#c8813156072829792406" > vr1 < /a></span > commented
#25 JavaScript::Write (size: 164) - SHA256: 67bb07b731253f3b1e221302259140b17a8ab24805f515e3d52d125cfddacb4b
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/04/blog-post_42.html?showComment=1554506608581#c1848662251562851109" > VR1 < /a></span > commented
#26 JavaScript::Write (size: 170) - SHA256: a559d650f78ca7bd26192765e6481b84b432b7ae89d8fb89ad16ec69da7a5318
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_17.html?showComment=1552802661082#c3935288829440626416" > Anonymous < /a></span > commented
#27 JavaScript::Write (size: 115) - SHA256: 503b4a5dcd0255448d33369a2813095e2ec17c0fb8edf222a2bf25add5ac382c
 on < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_17.html?showComment=1552802661082" > blog post_17 < /a>
#28 JavaScript::Write (size: 158) - SHA256: ef0d5f1f431ce88a13e17d4f0a8fc5350176d75443828111e350124bebd5318e
< span class = "author-rc" > < a href = "http://almayasabdam.blogspot.com/2019/02/httpsl.html?showComment=1549962008339#c3048212544878923356" > VR1 < /a></span > commented
#29 JavaScript::Write (size: 462) - SHA256: d54910bc09a6fac1e24581b8827791537bf6da9cd09485727cbd202e7b21cb8f
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://www.gstatic.com/_/translate_http/_/ss/k=translate_http.tr.iCxGNTE3Tqc.L.F4.O/d=0/rs=AN8SPfqhvHUlOSBSG-4xrkKOTAVZqlAYTA/m=el_main_css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":2.menuBody" class=VIpgJd&#45;ZVi9od&#45;xl07Ob></div > < /body>
#30 JavaScript::Write (size: 115) - SHA256: e20d4281989192dae848651480cd5d8287cb3ef2781f527ca0a040d7efb603e6
 on < a href = "http://almayasabdam.blogspot.com/2019/11/l-church-act.html?showComment=1575157510332" > l church act < /a>
#31 JavaScript::Write (size: 120) - SHA256: 5826e0d8c14383b31561224a36923e154a679e332d69928f03d6139ffe939b7d
* A0K9 ? $ > '?*$M/5A (M/>8M$M0? @5?$5A.>/? ,(M' * M * F M A * M08 ? & M '@0?M $>(A (M1F 2G(M3AF&hellip;&#8221;</i></div>
#32 JavaScript::Write (size: 115) - SHA256: bdc94c81d4c746405a1c2de716021a12a2cd60ddb963291eafc390bd44bc22fe
 on < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_17.html?showComment=1553103794203" > blog post_17 < /a>
#33 JavaScript::Write (size: 113) - SHA256: ccee2e6310fab97c73aad3fd78ea57b450ac98febfa559ece1cabea6373e888e
 on < a href = "http://almayasabdam.blogspot.com/2019/03/blog-post_7.html?showComment=1551923371160" > blog post_7 < /a>
#34 JavaScript::Write (size: 89) - SHA256: 0688ad120d0e37f4f7eb08ac25345148bb6b3bc215c9abc93b64b50f2b6e2b6e
https: //www.facebook.com/permalink.php?story_fbid=2191933850870667&amp;id=100001622201228
#35 JavaScript::Write (size: 113) - SHA256: 36290a9a155ddcf5a642126b4ae87da27cc8724897c0ed709252de213e31ff52
 on < a href = "http://almayasabdam.blogspot.com/2019/02/blog-post_9.html?showComment=1549962178370" > blog post_9 < /a>
#36 JavaScript::Write (size: 103) - SHA256: 1244ca1733f0477496f94b26ca069f187f8a4632719d7100cf7f2883360cf90b
 on < a href = "http://almayasabdam.blogspot.com/2019/02/httpsl.html?showComment=1549962008339" > httpsl < /a>
#37 JavaScript::Write (size: 28) - SHA256: e574c72aecef2c1556e5d6c0075d349ba3ab7bea576759a66c6d5426cdf6b3ff
https: //youtu.be/dLEhQKTHTTQ
#38 JavaScript::Write (size: 107) - SHA256: 282f5942d7f8f07400aca408a52a3649549915b78bc0b04ebd7d159395dc8f7e
# 1 # > A3 - M. > 2 ? $ ? 0 B * $ / ? 2 F - B. ?  * > M : (M5G7 # 1 ? * M * K0M M M 8.0 M * M * ? M A1K : & hellip; & #8221;</i></div>
#39 JavaScript::Write (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855


HTTP Transactions (101)


Request Response
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "373799B5749D2CB08B5721699A3E4C6B94B0D41604AC07D4EF7179E47DABC71F"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12838
Expires: Fri, 03 Feb 2023 07:59:54 GMT
Date: Fri, 03 Feb 2023 04:25:56 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3974208CE1840F6C9467287B7E220379ED881D76DB64939F411DBC500C103D48"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6232
Expires: Fri, 03 Feb 2023 06:09:48 GMT
Date: Fri, 03 Feb 2023 04:25:56 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Backoff, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 03 Feb 2023 03:43:34 GMT
age: 2542
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    ff250d3ef3fa45322bf05039a0122a9f
Sha1:   b3e7a2c383bce1bab807dbe1a03c375258b51f1d
Sha256: d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "DE0E45969A2AD95E52F7E2FBD0D021D9075DD7B14666C929346EFE111F648F7C"
Last-Modified: Thu, 02 Feb 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9279
Expires: Fri, 03 Feb 2023 07:00:35 GMT
Date: Fri, 03 Feb 2023 04:25:56 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: zZ7OM4q0/zLrGT5dUadV20jiUNxa9Az15ZdeeK19vYGO4EuwJl0fqyycbPtiUZyHHBIVdozlC6g=
x-amz-request-id: JAGAM2K94FXZR2DC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 03 Feb 2023 04:23:24 GMT
age: 152
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    7b922915ebf1fa3639b333f994c74f24
Sha1:   144a3f80b98fd0652d4614f24cf6cbbee40f8938
Sha256: adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Fri, 03 Feb 2023 04:25:56 GMT
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /2017/12/whats-christmas.html HTTP/1.1 
Host: almayasabdam.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 03 Feb 2023 04:25:56 GMT
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 31 Jan 2023 05:03:54 GMT
ETag: W/"a23b0fe7e5df08ac2ef4d7455293efefb1a7e8cd91ae74a04f0a6b84585c4937"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 27247
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (856)
Size:   27247
Md5:    ee4033232a7e44bf81f10ab117234062
Sha1:   ba971272c09bd69b53b5750285acce3f0edaf41f
Sha256: c5beb611de4f9436137eac1cc957f6df77b77dd3f5fc375e5fd8744d35c7abd8

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.46
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 03 Feb 2023 04:25:56 GMT
Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: almayasabdam.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/2017/12/whats-christmas.html

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Fri, 03 Feb 2023 04:25:56 GMT
Expires: Fri, 10 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 03 Feb 2023 01:51:41 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 09:41:18 GMT
expires: Wed, 31 Jan 2024 09:41:18 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 14:52:06 GMT
age: 240278
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /img/widgets/arrow_dropdown.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 01:45:25 GMT
expires: Thu, 09 Feb 2023 01:45:25 GMT
cache-control: public, max-age=604800
last-modified: Wed, 01 Feb 2023 10:52:25 GMT
age: 96031
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 10\012- data
Size:   141
Md5:    2964a07d60a4e76b299130fb1b4115f6
Sha1:   3b72dcc19f3ad685513eaba612e07e0ed495f2e1
Sha256: 28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.78
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Fri, 03 Feb 2023 04:25:56 GMT
expires: Fri, 03 Feb 2023 04:25:56 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1429)
Size:   20950
Md5:    2354fa28c58e16af89e7da6224aeca93
Sha1:   6bd3430a81730ed77c5d53f5406ddb40306ecabd
Sha256: dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
                                        
                                            GET /img/widgets/subscribe-netvibes.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 21:58:57 GMT
expires: Tue, 07 Feb 2023 21:58:57 GMT
cache-control: public, max-age=604800
last-modified: Tue, 31 Jan 2023 07:51:27 GMT
age: 196019
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Size:   1445
Md5:    c52a5f4ecb6be5d7e93b23ef4122ee4e
Sha1:   4e698a5f455daf3a8ea1e219b1998079f0546716
Sha256: 71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
                                        
                                            GET /img/widgets/subscribe-yahoo.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:53:35 GMT
expires: Thu, 09 Feb 2023 00:53:35 GMT
cache-control: public, max-age=604800
last-modified: Wed, 01 Feb 2023 15:52:00 GMT
age: 99141
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Size:   580
Md5:    79f602b6ac18bee79b4e2353a6674010
Sha1:   28accf82263aa1a11bb821439d4d185865662530
Sha256: bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
                                        
                                            GET /static/v1/widgets/1149436903-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56564
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 02:15:05 GMT
expires: Thu, 01 Feb 2024 02:15:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 31 Jan 2023 23:23:14 GMT
age: 180651
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56564
Md5:    b78721b4cce75b522d9ec0d1fae9e007
Sha1:   4ceaa4752e3e81867193004fe928875abc0af5ce
Sha256: e85f67824ac9f31deedecf0b1d58878b6b3993bad9f2b48e8312928154012f06
                                        
                                            GET /img/icon_feed12.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 00:39:15 GMT
expires: Tue, 07 Feb 2023 00:39:15 GMT
cache-control: public, max-age=604800
last-modified: Mon, 30 Jan 2023 21:53:43 GMT
age: 272801
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Size:   500
Md5:    44e7355a788fd1082deff0018883758e
Sha1:   50e3a28a44978e85d13c30522e0c71c8d0b24675
Sha256: 3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
                                        
                                            GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 17447
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 31 Jan 2023 15:34:38 GMT
expires: Wed, 31 Jan 2024 15:34:38 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 30 Jan 2023 15:51:51 GMT
age: 219078
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1441)
Size:   17447
Md5:    f18def4ccec463cf908f91e7cba7f2c1
Sha1:   02d95f67edd84a44c82255ca7abcdbf7f4d0cee5
Sha256: 12b91cbf31131a10b1fc2aa05047c027caeac0d6e0ca5deadf418fff63d68082
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 01 Feb 2023 20:56:35 GMT
expires: Wed, 08 Feb 2023 20:56:35 GMT
cache-control: public, max-age=604800
last-modified: Wed, 01 Feb 2023 17:54:33 GMT
age: 113361
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         23.38.200.123
HTTP/1.1 308 Permanent Redirect
Content-Type: text/html
                                        
Server: nginx/1.15.8
Content-Length: 171
Location: https://s7.addthis.com/js/300/addthis_widget.js
Date: Fri, 03 Feb 2023 04:25:56 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   171
Md5:    3c417e9efbcaeb3bf7e7df75cf3b22fd
Sha1:   00465aec6b8ec302eae8abb99678fc5c09c3f343
Sha256: 21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /1kt/watermark/body_background_bubblegum.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 22611
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 31 Jan 2023 04:28:35 GMT
Expires: Tue, 07 Feb 2023 04:28:35 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 31 Jan 2023 03:51:51 GMT
Age: 259041


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 2-bit colormap, non-interlaced\012- data
Size:   22611
Md5:    ed84146c0a6247ff3c30cc612aeb6a61
Sha1:   5b8d3e5a418744f1aac6fa237e848dee288bba88
Sha256: ebd28750f341fe277c0230f7da14ccf9efcad09d75d8ff45a47ab9bf68b85653
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.78
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60741
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:32:58 GMT
expires: Fri, 02 Feb 2024 00:32:58 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
age: 100378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1448)
Size:   60741
Md5:    62f98a42acaa85f40e228f65e5ee2361
Sha1:   a41c1755a6a2708340b74638f11ebdeed8e977db
Sha256: 54acbd2f18406888cbe8ee3fc76b512081c7c1c0102a4b1f7eef6cd11fc60f15
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /charts/loader.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 19937
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 04:12:59 GMT
expires: Fri, 03 Feb 2023 05:12:59 GMT
cache-control: public, max-age=3600
last-modified: Wed, 23 Jun 2021 18:41:30 GMT
age: 777
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2134)
Size:   19937
Md5:    f3341efa0432876b1697ccec98c33b01
Sha1:   55044e79afbe25d119b7b87dc7b5d1b3ec0c607a
Sha256: 6672904faeb4f203e0109279aa99d88f9e8690d2d696d80309ef50a974f88c77
                                        
                                            GET /1kt/watermark/body_overlay_bubblegum.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 13665
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 31 Jan 2023 05:02:29 GMT
Expires: Tue, 07 Feb 2023 05:02:29 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 31 Jan 2023 04:54:22 GMT
Age: 257007


--- Additional Info ---
Magic:  PNG image data, 80 x 400, 8-bit colormap, non-interlaced\012- data
Size:   13665
Md5:    d494a9f80a47bd39630495bfae854d34
Sha1:   a69ceeded63417ab180fdc6baba3e0a8c30083b5
Sha256: 151bdd3e933856ceceb69c16bdcb8abfc32248013849cfa22c95630a28236382
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 02 Feb 2023 09:56:41 GMT
Expires: Thu, 16 Feb 2023 09:56:41 GMT
Cache-Control: public, max-age=1209600
Age: 66555
ETag: 13036835877489095579


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=8554137243501328466&zx=d22e0970-a933-4a26-bd34-240cfc870849 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 03 Feb 2023 04:25:56 GMT
last-modified: Fri, 03 Feb 2023 04:25:56 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/300/addthis_widget.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://almayasabdam.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116325
date: Fri, 03 Feb 2023 04:25:56 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (54602)
Size:   116325
Md5:    ff4671f71c958029bbf6d9694284da70
Sha1:   7535744f2dbaf99902a54fc529e760b08a73f265
Sha256: 123f781673b2e45e18df36b64984674f489a5f3541c69e295f01f554b8d3c738
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, ETag, Last-Modified, Alert, Retry-After, Content-Length, Cache-Control, Pragma, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 03 Feb 2023 04:07:19 GMT
age: 1118
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /_/translate_http/_/js/k=translate_http.tr.no.k4EubO_g8sw.O/d=1/exm=el_conf/ed=1/rs=AN8SPfqso9EOrOP64PthfqJk228DmwkZLA/m=el_main HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.170
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 75962
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 20:43:43 GMT
expires: Fri, 02 Feb 2024 20:43:43 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 06:11:41 GMT
age: 27734
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2057)
Size:   75962
Md5:    0e8adf0cb4a760f69a0cc7db3e06d42d
Sha1:   7b62952ff254f5eb934d9867f4929a5dc2bb54ce
Sha256: 978cada354ff18ed044c01a86bdfb44df71d474d026d587a5e6a9001138de7a2
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A9838D00256431807CA382FC205064B07C08D5054F2895C2AE3CC4E9094179A"
Last-Modified: Wed, 01 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6885
Expires: Fri, 03 Feb 2023 06:20:42 GMT
Date: Fri, 03 Feb 2023 04:25:57 GMT
Connection: keep-alive

                                        
                                            GET /-qD3msrAZABA/Uv35qi_z9_I/AAAAAAAAAjs/f3jkEWsTqBM/s1600/al%2Bshabdam%2Bbanner.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v23c"
Expires: Sat, 04 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="al shabdam banner.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 03 Feb 2023 04:25:57 GMT
Server: fife
Content-Length: 83163
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x288, components 3\012- data
Size:   83163
Md5:    cc2075079919d42444d946a6907d9e8f
Sha1:   82179c713951b0f0a264f02e6cfd7cc4dec9fac4
Sha256: 4af59144021b270803c564693ab9f4052554316923cb70a22297922ed8c740ad
                                        
                                            GET /-_ZNyCZ0TndY/VeOEo1p8GVI/AAAAAAAAPno/OhqTA1s1fpc/s1600-r/CCV%2B1.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v3e7b"
Expires: Sat, 04 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="CCV 1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 03 Feb 2023 04:25:57 GMT
Server: fife
Content-Length: 17517
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 369x103, components 3\012- data
Size:   17517
Md5:    ab33719232a1b08a8a01fdb12be6e42e
Sha1:   e53b35a87db1a95edd0ed07d094d58322d1a09df
Sha256: 735c043116b4b0b1a7e461a79673be666c2b4e17897f9bfacc86f6c4d702c445
                                        
                                            GET /-RP_hlAE7bCs/WR_hn34MsuI/AAAAAAAAcDQ/z_MmP6Qjr84Lf0QaR7QbWw9u2ttIDfxDACK4B/s1600/Down%2Bload.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v7035"
Expires: Sat, 04 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Down load.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 03 Feb 2023 04:25:57 GMT
Server: fife
Content-Length: 77908
X-XSS-Protection: 0


--- Additional Info ---
Magic:  PNG image data, 641 x 139, 8-bit/color RGB, non-interlaced\012- data
Size:   77908
Md5:    12436b6395e48996fb24a0762725fe42
Sha1:   a04051109de94a883c210093f73c9fb2a6e96ef2
Sha256: f7bc201fec67a1604c8e359571dcdac9ade97d5d664960e3144648d19e7fdc82
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: v0GlOjayuO0/NOYlFlggTA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         52.33.182.41
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: oXAuKJknoAcjBDSTgnslCEXdoDo=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
expires: Fri, 03 Feb 2023 04:25:57 GMT
date: Fri, 03 Feb 2023 04:25:57 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1034), with no line terminators
Size:   668
Md5:    dc0970ee345b90a14d79327dc20bf48c
Sha1:   ef64af0b9aa38731125da81bbd3aa5247d30da7d
Sha256: 37b0c4b55ed83ab6e05003db8b0c4814ea0f92100727929af3407e535d1c8a10
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 21:48:03 GMT
expires: Fri, 02 Feb 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 23875
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 16:40:43 GMT
expires: Fri, 02 Feb 2024 16:40:43 GMT
cache-control: public, max-age=31536000
age: 42315
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            GET /hit.php?uid=1131111&f=16777215&b=0 HTTP/1.1 
Host: simplehitcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         34.149.245.95
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.18.0 (Ubuntu)
Content-Encoding: gzip
Via: 1.1 google
Date: Wed, 01 Feb 2023 00:33:54 GMT
Last-Modified: Thu, 28 Apr 2022 08:50:00 GMT
ETag: W/"626a5538-188f1"
Content-Length: 22843
Age: 186722
Cache-Control: max-age=2592000,public,no-transform


--- Additional Info ---
Magic:  data
Size:   6788
Md5:    4d8f4e160f623fbc64ee73d5f30b7984
Sha1:   10f7b7f60f9116a2f96ecece5b41914b82894ae9
Sha256: d821203e392f140fd3c5e989d00869979418f7c7955def18f76df56d9e4ba46e
                                        
                                            POST /log?format=json&hasfast=true HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1758
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-encoding: gzip
date: Fri, 03 Feb 2023 04:25:58 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+584; expires=Sun, 02-Feb-2025 04:25:58 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 03 Feb 2023 04:25:58 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   131
Md5:    babb6f090aeebc6f421624475b4aefff
Sha1:   06079b7547949822c118224e51604f4c5ebf80c8
Sha256: b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
                                        
                                            GET /feeds/comments/default?alt=json-in-script&callback=showrecentcomments HTTP/1.1 
Host: almayasabdam.blogspot.in
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"309d0a4befa6798bf61a92a87bc906cc8ae39fbdf2170b6cbf492c92646f5285"
Date: Fri, 03 Feb 2023 04:25:57 GMT
Server: blogger-renderd
Expires: Fri, 03 Feb 2023 04:25:58 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Tue, 31 Jan 2023 05:03:53 GMT
Content-Encoding: gzip
Content-Length: 8116
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (48700)
Size:   8116
Md5:    0506083bfa8ef51b5273e509b8a7bc0e
Sha1:   dd0811f34d69f36dd5808a0c06dcb2bdfa07308b
Sha256: 6c84d91beec68da594640e0523767cb09702ab5d6903be17089fc35545d82ea2
                                        
                                            GET /1kt/watermark/body_background_birds.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 22568
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 01 Feb 2023 10:20:19 GMT
Expires: Wed, 08 Feb 2023 10:20:19 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 01 Feb 2023 08:51:41 GMT
Age: 151539


--- Additional Info ---
Magic:  PNG image data, 300 x 300, 2-bit colormap, non-interlaced\012- data
Size:   22568
Md5:    5cd8cda0e75b359eb8f15dc83b0c5c29
Sha1:   86c99fbb62aadacb3ebd3f948d345b917f65253f
Sha256: 0220dbf46954d4efe2e91d261dd3d40f06e6402c722cc5580129af64bddc58f9
                                        
                                            GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: text/html
                                        
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Fri, 03 Feb 2023 04:25:58 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Size:   26421
Md5:    707317ccaabe08d32d1bd781754e6871
Sha1:   bb82dcd3e044c960e0861c2ce878f5504e628f78
Sha256: d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D8554137243501328466%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByNjYzAwMzMqC3RyYW5zcGFyZW50MgcjNjYwMDMzOgcjMzMzMzMzQgcjY2MwMDMzSgcjNzc3Nzc3UgcjY2MwMDMzWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D594498237472046750%26origin%3Dhttp://almayasabdam.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D8554137243501328466%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByNjYzAwMzMqC3RyYW5zcGFyZW50MgcjNjYwMDMzOgcjMzMzMzMzQgcjY2MwMDMzSgcjNzc3Nzc3UgcjY2MwMDMzWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D594498237472046750%26origin%3Dhttp://almayasabdam.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://almayasabdam.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         216.58.207.237
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 03 Feb 2023 04:25:58 GMT
location: https://www.blogger.com/followers.g?blogID=8554137243501328466&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByNjYzAwMzMqC3RyYW5zcGFyZW50MgcjNjYwMDMzOgcjMzMzMzMzQgcjY2MwMDMzSgcjNzc3Nzc3UgcjY2MwMDMzWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&postID=594498237472046750&origin=http%3A%2F%2Falmayasabdam.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-caMIu17Zi4haFj1gnPNvaQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 493
server: GSE
set-cookie: __Host-GAPS=1:2msQRERdJA7Dgp0D6lBlVD_BRRUBBQ:kQJ377rGY_YsU71S;Path=/;Expires=Sun, 02-Feb-2025 04:25:58 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (546)
Size:   493
Md5:    fc5804c200945177a817c647afcf667f
Sha1:   5ba1fa865e268ef841030779f4788f2c54d7a703
Sha256: f201b51e969b809b85594164586ba355a8c93fd061c8a6208a8a04d3da8745dd
                                        
                                            GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmD0HuYW1nGJvWQL3XhWVKjAl51D2KPDKECB939V3bwbO7xCqSBHIOMluf_DduNN1z1hz_X6FsSkpprt1KNOcrBWngWREw HTTP/1.1 
Host: almayasabdam.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/2017/12/whats-christmas.html

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Content-Encoding: gzip
Date: Fri, 03 Feb 2023 04:25:58 GMT
Expires: Fri, 03 Feb 2023 04:25:58 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 258
Server: GSE


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (399), with no line terminators
Size:   258
Md5:    a67f5487589d80b77eb897d0d3a811bf
Sha1:   007af78972f6fe75eccb595bb1c242748277e2aa
Sha256: 5a56b9e30bd07107f9672f2f49bb03f3c4f4fade226b24e3e48ec0fb5cf9463a
                                        
                                            OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                        
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
date: Fri, 03 Feb 2023 04:25:58 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+002; expires=Sun, 02-Feb-2025 04:25:58 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Fri, 03 Feb 2023 04:25:58 GMT
cache-control: private
X-Firefox-Spdy: h2

                                        
                                            GET /addthismoatframe568911941483/moatframe.js HTTP/1.1 
Host: z.moatads.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.38.201.146
HTTP/2 200 OK
content-type: application/x-javascript
                                        
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=6886
date: Fri, 03 Feb 2023 04:25:58 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (523)
Size:   948
Md5:    f14b4e1f799b14f798a195f43cf58376
Sha1:   b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
Sha256: 92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
                                        
                                            GET /gen204?sl=en&nca=te_ap&client=te&logld=vTE_20230201 HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         142.250.74.46
HTTP/1.1 204 No Content
Content-Type: image/gif; charset=us-ascii
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 03 Feb 2023 04:25:58 GMT
Cross-Origin-Resource-Policy: cross-origin
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
Content-Security-Policy: script-src 'nonce-1azqvbZYA1WJb4T796KExQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/TranslateApiHttp/cspreport;worker-src 'self', require-trusted-types-for 'script';report-uri /_/TranslateApiHttp/cspreport
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Cross-Origin-Opener-Policy: same-origin
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff

                                        
                                            GET /live/boost/ra-5c6f80aff1900969/_ate.track.config_resp HTTP/1.1 
Host: v1.addthisedge.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
content-length: 505
etag: -1619096188--gzip
content-disposition: attachment; filename=1.txt
content-encoding: gzip
cache-control: public, max-age=60, s-maxage=86400
date: Fri, 03 Feb 2023 04:25:58 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391), with no line terminators
Size:   505
Md5:    0979fb8126b21a7820a0c735ed85655c
Sha1:   948c2895f5b4cf0bf60e80dcfe7e6448512e623d
Sha256: 595c86c2edaeed82e45bb7268f9c155f95c1becc1001c5c7afe707e16265cc9b
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7444
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 04:25:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7444
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 04:25:58 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "98A14BD950CEC10AEB3D76FA956FE13514F52C742ADBDED7A0FCEF218C7195BA"
Last-Modified: Wed, 01 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7444
Expires: Fri, 03 Feb 2023 06:30:02 GMT
Date: Fri, 03 Feb 2023 04:25:58 GMT
Connection: keep-alive

                                        
                                            GET /static/layers.fa6cd1947ce26e890d3d.js HTTP/1.1 
Host: s7.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/javascript
                                        
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-41cf5"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 77672
date: Fri, 03 Feb 2023 04:25:58 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (65533), with no line terminators
Size:   77672
Md5:    9a77dff666eebb6cf4bbc4c67c7b563b
Sha1:   9e98d7824a7b4e34665c2690d6f52caddad1fe4b
Sha256: 6cdf8e597f3cbe759531153fd926d51aeaebd836a1c9bc1436e079645bfd3ad7
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a53e95-81db-4f71-84bc-169a72e11b24.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7237
x-amzn-requestid: f6aa0d26-8df4-40fe-8984-1aac7c76097e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fVr4jEdeIAMFTYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d2269c-58a038d6491d8f461e9168d4;Sampled=0
x-amzn-remapped-date: Thu, 26 Jan 2023 07:07:08 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XNO6ArxsjiZTxcoSn1Fmhso5bpWNIvzT9nplF6UGTiHVxXlJiv7bJA==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:58:40 GMT
age: 23238
etag: "bc4c004065ce9f558f210d508844c123a85737a1"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7237
Md5:    d4242d4999b7b033873b81a482c319c2
Sha1:   bc4c004065ce9f558f210d508844c123a85737a1
Sha256: ab35a5c1a7c1a0a548aee3b9c301893799680ec1922c13e7a16d44ca457cd91d
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F64144d1c-f524-496f-8b52-ba63714dbfc5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11565
x-amzn-requestid: 87a84ffd-1176-4656-aac4-e98f38ec2cd9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fboIrFGboAMFyyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d48704-162ed8114aa1809204500548;Sampled=0
x-amzn-remapped-date: Sat, 28 Jan 2023 02:23:00 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: w0Zm5V0TQxsQ7917U3fdhS_n7qKE143PuhI2JmNCDM_Pf0yPLyW6yA==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:48:01 GMT
age: 23877
etag: "a52c2883bad98fa20333aa639a5dd3a5bf544c8e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11565
Md5:    e366b32074025aaf60bbae8bdb08d330
Sha1:   a52c2883bad98fa20333aa639a5dd3a5bf544c8e
Sha256: 9d661c26effaec9efee16833f6459d6ecbe4f77b822c9c46e2a6433bda816e5c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4ea648-021a-44ef-a083-3ea03f73dca3.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10796
x-amzn-requestid: 5c9b1a83-c99a-44b9-9a90-5edd7ef1e225
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fi0XKG93oAMFtsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d76760-01bf754d6c725c3275c02a1b;Sampled=0
x-amzn-remapped-date: Mon, 30 Jan 2023 06:44:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: XTZJAn0LMAfFtaQ2bN8z58cCsUT5GzxDMnHVB_iw9E_NskHQ-BgbRQ==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 22:19:26 GMT
age: 84437
etag: "18e9f8f160d3515f1cb31fc7538ac762a6cab344"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10796
Md5:    3490571dd2de0a747987b9a0e18cccc8
Sha1:   18e9f8f160d3515f1cb31fc7538ac762a6cab344
Sha256: 1c071d7f3b288b29254500f94f19c0db0633c6aa90812f2e92c4f64992f5221a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e690e4c-e16d-49e9-ac12-24a092d6a60c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8543
x-amzn-requestid: 3dc0960e-97db-42c8-99ac-623a44e8bb3e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuv0wGJhIAMFaTg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2ceb-5ad3ef033a62559762db42b9;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:36:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EKWOeGruQEm9HuSlJMiEEw_gN1p37qTTIhYqaiQ6bFaCF65kUfmMtA==
via: 1.1 9b311162717b41c968f6f00426d88aaa.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:57:20 GMT
age: 23318
etag: "be04ac3a50aa6f1b349a2410ad386d92de3222be"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8543
Md5:    a1d6fa4715c4e78250b2f72ddd2706f1
Sha1:   be04ac3a50aa6f1b349a2410ad386d92de3222be
Sha256: d1c3c1b7016428bf2a085b71ca0d1e215a64b3d31ff15b0ef8bf5a78f11d9ae5
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff9647681-964b-428d-89fe-5c4bc8cadebe.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7159
x-amzn-requestid: 1d159649-0d8c-4806-8f42-585b985972ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fuwSKF61IAMF5qg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dc2da7-18fc268c5a719c1d19079001;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 21:39:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VyQrwAb5tjqPPPQbxf9Ee_zB1UvrnMPGjOHeRKEzyH6BBDazPUkXSA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 02 Feb 2023 21:44:41 GMT
age: 24077
etag: "676f55b22fdeee4f7737a48cb2b89d86aa371aae"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7159
Md5:    ae0083daa88e6b26c6525c51348d266c
Sha1:   676f55b22fdeee4f7737a48cb2b89d86aa371aae
Sha256: 89f6903260704061faf849549fd95e6f9cbbfcbbf93eaa17d32b96c5e4244d53
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /live/red_lojson/300lo.json?si=63dc8cf239f7b421&bkl=0&bl=1&pdt=688&sid=63dc8cf239f7b421&pub=ra-5c6f80aff1900969&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=almayasabdam.blogspot.com&fp=2017%2F12%2Fwhats-christmas.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1675398387602&jsl=0&uvs=63dc8cf2e33f9613000&skipb=1&callback=addthis.cbs.jsonp__93878939614355950 HTTP/1.1 
Host: m.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
                                        
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Fri, 03 Feb 2023 04:25:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   89
Md5:    9851a17cbd68a6470614b704ae52e0b7
Sha1:   6a61dca57396b16723011335fd94e895ca8eabd2
Sha256: 35c26d56461781564dfdca21a5723163e11cce14fe5d2f18661d400706b12448
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /url/serviceapi/shares-post.json?services=sFbt&url=https%3A%2F%2Falmayasabdam.blogspot.com%2F2017%2F12%2Fwhats-christmas.html HTTP/1.1 
Host: api-public.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Origin: http://almayasabdam.blogspot.com
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx/1.15.8
content-length: 2
cache-control: no-transform, max-age=0, s-maxage=14400
surrogate-key: sFbt=https://almayasabdam.blogspot.com/2017/12/whats-christmas.html
last-modified: Fri, 03 Feb 2023 04:00:00 GMT
access-control-allow-origin: http://almayasabdam.blogspot.com
access-control-allow-credentials: true
strict-transport-security: max-age=15724800; includeSubDomains
date: Fri, 03 Feb 2023 04:25:59 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   2
Md5:    99914b932bd37a50b983c5e7c90ae93b
Sha1:   bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
Sha256: 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: almayasabdam.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/2017/12/whats-christmas.html
Cookie: __atuvc=1%7C5; __atuvs=63dc8cf2e33f9613000

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 03 Feb 2023 04:25:59 GMT
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 31 Jan 2023 05:03:54 GMT
ETag: W/"a23b0fe7e5df08ac2ef4d7455293efefb1a7e8cd91ae74a04f0a6b84585c4937"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 515
Server: GSE


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   515
Md5:    33ccaf0fb3b3d4df31246c81cf741ed4
Sha1:   d70bf774d73b89f9323753c79bbcf3c03fb12986
Sha256: b11136700522b814ccfe9e15850fd0d03f35897a1338b59da4a0c5069463ab99
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /url/shares.json?url=http%3A%2F%2Falmayasabdam.blogspot.com%2F2017%2F12%2Fwhats-christmas.html&callback=_ate.cbs.rcb_3u9i0 HTTP/1.1 
Host: api-public.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx/1.15.8
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: almayasabdam.blogspot.com/2017/12/whats-christmas.html
last-modified: Fri, 03 Feb 2023 04:25:59 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Fri, 03 Feb 2023 04:25:59 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   53
Md5:    c71ff7c42ebcd60bf457e9194e7daaa5
Sha1:   85e694f39fde5b46b80b8345a9f580fce46d1ad0
Sha256: 95b7644cbb758c1002a8362b36eb28bc857c676c60123126653ab6e6c9b80dd7
                                        
                                            GET /url/shares.json?url=https%3A%2F%2Falmayasabdam.blogspot.com%2F2017%2F12%2Fwhats-christmas.html&callback=_ate.cbs.rcb_cpz50 HTTP/1.1 
Host: api-public.addthis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         23.38.200.123
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx/1.15.8
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: almayasabdam.blogspot.com/2017/12/whats-christmas.html
last-modified: Fri, 03 Feb 2023 04:25:59 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 53
date: Fri, 03 Feb 2023 04:25:59 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   53
Md5:    5d4862a1899da66d936a82e24db50b57
Sha1:   8006b77ee0c105e7c3d524c2fb006dda714dc9f3
Sha256: 97e4c95231251a8869b759a06591c30f6c0f97e403d5e59e211d46660d18a13a
                                        
                                            GET /a/default-user=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 316
x-xss-protection: 0
date: Fri, 03 Feb 2023 03:27:18 GMT
expires: Sun, 29 Jan 2023 23:18:27 GMT
cache-control: public, max-age=86400, no-transform
age: 3521
etag: "v0"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Size:   316
Md5:    9fae1841320a0eaa434a022513f60859
Sha1:   245fac7a1ba86adda5bf5571babef7d5280672a4
Sha256: 1e2ce2743c2908d3aa1ce10a03be76d756eaa493cd41f9dcc94a3cc35cbfa1bd
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /p/AF1QipP14HSp9xhWISu8mLKKQioDNppsxbN7rzLwPA_C=s45-c?key=CLbJ3K2i45_InwE HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
etag: "vc0"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
vary: Origin
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 4193
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Size:   4193
Md5:    2c806f4b332124663e16be56e943ba89
Sha1:   5fb9bfd62745c6fd0acf90449270f1155a247bdc
Sha256: 2ac0583b88d8103878654fdbce4fd316122c9dc650f3e239c11129f055972226
                                        
                                            GET /a-/AD5-WCnEgXLAGJiHTjm5j8hcj4I861gs5wyPsoV-gCzkpA=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vcc"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 2035
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2035
Md5:    35e086d91cb64a2d3fc159af1a794448
Sha1:   408b02070b6a9884e2c5430724af45204fd4b247
Sha256: 395510e91b8afb4d01adcb3e76a13371c021e02af87b9eac5df55819e48c6a6a
                                        
                                            GET /a-/AD5-WCkvi4fTyNa0M5AgyFWNjtOHoV89jIjrFR7CCPSUMg=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v2ea"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1494
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1494
Md5:    a6e28f77c63a497caed1650e05967874
Sha1:   7800b3727e3a26c05a2f78f90f3064299202348f
Sha256: 23e2aeb0dd476cef027656a15d94af56f98872d52b3cbf6c5759b3cefb05827c
                                        
                                            GET /a-/AD5-WCnQcnjOPysm4Jhyer-oKgK6bxFaNLS_AtEVehSN=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1f"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1640
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1640
Md5:    d21bd8761a4871f63789bb5e7fcc742d
Sha1:   c7b1766866ce5ccaaea6d6ad9360f3576d756e93
Sha256: 0a6db73f0321f8fe10f172e8de25406b1fb35c13e8bb57951bb9d6f316bc8a89
                                        
                                            GET /a-/AD5-WCln-QdKr9ztP_az9-3cBIpMMZb06c7MbkHJAL6oZg=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v110"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 2141
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=OLYMPUS DIGITAL CAMERA, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2141
Md5:    5e00e6e8d2d697d7a1ca548e7ea1b094
Sha1:   49fb58f8255f3dcdd5fe954cac990d7e6e3d5793
Sha256: 1ba7c662999f8d78c893a252922f287f56d8e80207a274b32096f53b61d5f263
                                        
                                            GET /a-/AD5-WCl95v-2eef703OqZX3k6Vn55bdeo5bQUrpqAvvYtnM=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "ve6e7"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1864
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1864
Md5:    cbd313e3acf10b2d71d3d52a945a37ec
Sha1:   6381baa7a2844cde192f5746d32b4cf3ed02b7b2
Sha256: 0be8cc9ac1f0d62f117d3c18b6c7e32d0ae0246a58d947a00d2aa48e3df75e29
                                        
                                            GET /a-/AD5-WCnKGkuSK5GndJyY77np5HJAMstPKeGNyb3SmmpPKA=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1c2e"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 2294
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2294
Md5:    008afe55d45a1bd4150c5df0e940b731
Sha1:   9761844cea5067a89c520f37655432058fd69bd7
Sha256: bd6c07f72cd5c429ab23b3eacf3243ea92bb4f0ba257fa5bf78cbcc913d0ea0b
                                        
                                            GET /a-/AD5-WCnyAqJ1P06uVlmX3XDo91x9xCBJQT96xh6RWwRlvQ=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v149"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1780
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1780
Md5:    20e4b8295c034d42705233c8797439b7
Sha1:   6c5b784691e752c6cdc7c77762179f4742da5537
Sha256: 10ce5449267ff8131b8a964251b9f55759933a1e7adae5b8dfbb4b6cf4eb499f
                                        
                                            GET /a-/AD5-WCmzsmFv1FEvKDywEsxgpvGn5E2gC8lT-H1UIfqOUg=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v362f"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 353
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   353
Md5:    0c9e0662db1ed1b8d7dce184f8d1f832
Sha1:   2480b7b02d317e082991d41daee94c0f82c1f60e
Sha256: 163c08be5f9339c019af9650739c16b5fd76260e2c57c9dc47d57288c8c0998f
                                        
                                            GET /a-/AD5-WCmLZ9_AMLRGksDViJuirrQuyxl4hEKmarRlyw3S4A=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v862"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 2138
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2138
Md5:    8082d9b12639dfe17432cfd4a16217fc
Sha1:   52b3cb2e75ffc32be77630041468c5fd43ca11ca
Sha256: 4c444f665b2fc2e83c8557b02254e88d169e9b93811b0b532e908379359c1c2f
                                        
                                            GET /a-/AD5-WCm1eJGHVLeqm7ywarUUag6kXappHG5vY4ji3ZrePw=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v207c"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1290
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1290
Md5:    30dbea73f59448e7673ed7224e193d76
Sha1:   7a44727953b8e66162d19864e96ee4895930d1ea
Sha256: 4139595fb71a877f71a41d6c05829e2a0aef297abc373fbe70f37587c6f4fcda
                                        
                                            GET /a-/AD5-WCnKdfOorl-H_a4nbVW1ImYeiAsbdMTQQwGWYMHwz3w=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v5314"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 2116
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   2116
Md5:    8d2b9ee4b2663b13242fe2eb11507ef9
Sha1:   f2b3a9bcf049cad368bf3055e21dccde51b2584e
Sha256: de256b7188479cb72f0e5716c611f9f426e86174d1c24c39e5f5c3027a23e023
                                        
                                            GET /_bQKbqKIGkQQ/SuD7R35_X1I/AAAAAAAADXU/rGPRYMGelSY/S45-s45-c/007.JPG HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vd75"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="007.JPG"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1549
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1549
Md5:    782b738e3b3791547ea6058bd9183179
Sha1:   d08be96c531ded56e241bd6a2cd785d49249bf1b
Sha256: 1c75824969264bdecb247a814dd3622d68526ff511011c3c88a6536f05a184f3
                                        
                                            GET /a-/AD5-WCm_Vq-ouYrWW-tS0AKK7qc3ghBDvUJCEWKMXYa-HQ=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1db"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1811
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1811
Md5:    f3c10bba1770cfde95dbc4465a2b8187
Sha1:   b4b9e99b178db576c1a841bb29435920cb9723b7
Sha256: 07a9725307812b6438ed6ac05aaf23a4debb655893c8476eeca45a92595e9347
                                        
                                            GET /a-/AD5-WClCuFTsOsUUZ_Pp0NPRDVxl9qsr2wQYuLkiUwuRyA=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1a5"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1775
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1775
Md5:    87384d9d686d87d9ffd739dea5123198
Sha1:   bbbcb1cd25ff8f3f825b4d2304f6912de137f638
Sha256: 48980ce4d0ebdd6a52d17cdfa875466f185f69dd2d38037c36220f730e9225ef
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 03 Feb 2023 04:25:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /a-/AD5-WCnZxqffYE-z8HNDfXuWd-glKIPxUmVxkUJUC2ZLBA=s45-c HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v8c7"
expires: Sat, 04 Feb 2023 04:25:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 03 Feb 2023 04:25:59 GMT
server: fife
content-length: 1066
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Size:   1066
Md5:    57170f40e9a39943af034a369b543d09
Sha1:   85e7c81e0b4634da54cc42b47a29c3cf85fbf0ca
Sha256: 521bb8220f136d7c585c9ef65a6c32cc79da4f20b1d42b6d0412ab34bb20f33a
                                        
                                            GET /hit.php?uid=1131111&f=16777215&b=0 HTTP/1.1 
Host: simplehitcounter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://almayasabdam.blogspot.com/

search
                                         34.149.245.95
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Server: nginx/1.18.0 (Ubuntu)
Content-Encoding: gzip
Via: 1.1 google
Date: Fri, 03 Feb 2023 02:34:51 GMT
Last-Modified: Thu, 28 Apr 2022 08:50:00 GMT
ETag: W/"626a5538-188f1"
Content-Length: 22843
Age: 6667
Cache-Control: max-age=2592000,public,no-transform


--- Additional Info ---
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://almayasabdam.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 03 Feb 2023 04:25:56 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+590; expires=Sun, 02-Feb-2025 04:25:56 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---