ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
301 Moved Permanently 202 B URL HTTP/1.1 ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d6694abcbb04d7a5b9ac44c7cf8b748c
7b82edc4278d51cdfd3478db3b14007d036a36c3
f3aff2152aeedcd333bf8fe92eac68f81a3c2ca726ddf0ad7dd3e86d5a580718
Analyzer Verdict Alert fortinet Malware
GET /2016/08/blog-post_17.html HTTP/1.1
Host: ujyaalochitwan.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 25 Mar 2023 16:43:16 GMT
Expires: Sat, 25 Mar 2023 16:43:16 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 202
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5d9435c884bf4a0777fdf4b57079ae09
7f04b9db47ffeec90ac6397416b7553e5336a550
fe77420ec3a11f547cf5172b68d30faa4fe0c13165ae305f0013b02914e61084
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FE77420EC3A11F547CF5172B68D30FAA4FE0C13165AE305F0013B02914E61084"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16191
Expires: Sat, 25 Mar 2023 21:13:07 GMT
Date: Sat, 25 Mar 2023 16:43:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dfd491ebe7381221b3674c2c8bf9e566
d2ac5badf17f348c28a52e9db10e6eb80e5a231a
34a026664386054b0b73c36cd1ddfce023551ee41963df0e38248bac1e1eb56c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "34A026664386054B0B73C36CD1DDFCE023551EE41963DF0E38248BAC1E1EB56C"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11340
Expires: Sat, 25 Mar 2023 19:52:16 GMT
Date: Sat, 25 Mar 2023 16:43:16 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 84db75194692d4afe13196bda6f22da8
4c1f49bc973a4917f146d93c8d598344edc021f6
a3bec66f95b3bdf1d310c726e8ed05f7b06c1901c62381a94582d581844d2c23
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Content-Type, Alert, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 25 Mar 2023 16:15:27 GMT
content-type: application/json
age: 1669
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1313ee2f06606d09c45b06ff9e8e1001
285ca89d1d3ea45d35832bc6d9827f834b3bfe21
63463447d29550c3734f621be02ec85290fbdf4612f79f9fad7e94f7e066dcb0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "63463447D29550C3734F621BE02EC85290FBDF4612F79F9FAD7E94F7E066DCB0"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5728
Expires: Sat, 25 Mar 2023 18:18:44 GMT
Date: Sat, 25 Mar 2023 16:43:16 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: kPfGbClIC9vumIpt/0WEWX0nFmua2Qi8vSn3njXFC02f1d5LGorWD8PSQANsWYmML53nPgke29c=
x-amz-request-id: SHW3JP38HYBHMRCJ
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 25 Mar 2023 15:54:58 GMT
age: 2898
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f85ea3abda99851b663c856d72826933
28a0d455a221e09a958817ddea5136b985f40659
297663474574534b1b9f585c81e7c884809a2256fcaf402a2ceb73513c578ff8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:16 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Last-Modified, Retry-After, Content-Length, Alert, Cache-Control, Expires, Content-Type, Backoff, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 25 Mar 2023 16:14:33 GMT
age: 1724
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f85ea3abda99851b663c856d72826933
28a0d455a221e09a958817ddea5136b985f40659
297663474574534b1b9f585c81e7c884809a2256fcaf402a2ceb73513c578ff8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 70300b32357c46f3448d567189b64cb3
6ba66a5cf63cdbfeaec59b936151cc812bac56df
5a2b4f9fc5ebaa8062058bf68eae75fc28e06c6ef6a0e79c3c761c1d92f81cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5A2B4F9FC5EBAA8062058BF68EAE75FC28E06C6EF6A0E79C3C761C1D92F81CB9"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9663
Expires: Sat, 25 Mar 2023 19:24:20 GMT
Date: Sat, 25 Mar 2023 16:43:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash d0c8b5fc43c71eae416ea2b97e52f08c
3af586da4f6a0b773ac1109eb2971cf09ec4597b
97f95d46cc8f0420dd3f61970ec299c5e3038f0acd8e04485c6f22baa83d3237
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
200 OK 86 kB URL HTTP/2 ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2382)
Hash 937e07391af7245d2ad294e7e13fea34
3817cde866aec05a324c2513e5d61aa04106432f
c1cefb4c4c0c1403fff8443c449526f6c0bdfcbb469cdec20c82a54d046e12ce
Analyzer Verdict Alert fortinet Malware
GET /2016/08/blog-post_17.html HTTP/1.1
Host: ujyaalochitwan.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:17 GMT
date: Sat, 25 Mar 2023 16:43:17 GMT
cache-control: private, max-age=0
last-modified: Tue, 05 Apr 2022 16:42:15 GMT
etag: W/"23a6be29867f2bc41a1ce324dd702a9cd724015f85db34dd6cf81c8db721abe0"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 86236
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 18 Mar 2023 20:17:37 GMT
expires: Sun, 17 Mar 2024 20:17:37 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 18 Mar 2023 16:49:42 GMT
content-type: text/css
vary: Accept-Encoding
age: 591940
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/3855953344-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3855953344-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 0b4fa1144018f3ac4c94ef3025feddba
bfb265fb34cf2ddf45913b8d4d21005da524c70e
059211c83ff1b35abf766cb0ad462b1cd9737aef054b04da279b6261d448e869
GET /static/v1/widgets/3855953344-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 22:29:05 GMT
expires: Thu, 21 Mar 2024 22:29:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 21 Mar 2023 22:29:47 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 238452
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 20 Mar 2023 14:02:57 GMT
expires: Tue, 19 Mar 2024 14:02:57 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 441620
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2c96f66770c65a338e519ceb9c405c1e
e41b77c8080644a48b82f22aba5e43a34b51bc7c
8f7a9e49f30588d1a0d22b4cc7bc1d47c2809d9967f35ed432e37708f18f4a93
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43af77eba85b20fd2149239d5090eccc
ea8295db4a453c7f94579d5b57ced78f97ba13ba
2b2f233ecbc037d24ca63bd69de70d7f49dff9f36228ee63d796287de0c9650b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 3161bcab6d00af494c239ab853923a64
3a9c842aa0b2fc894aea7a308a56cc09fce0def3
2b5444c3782c761e5ddb30bd733e9f746f49b3442c5d787b0a7b0c10434fe81f
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Sat, 25 Mar 2023 16:43:17 GMT
expires: Sat, 25 Mar 2023 16:43:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "a817d6f6a95ec85f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3a85d9c2de0b1015b62c81a1ab7fe625
389c7fe2d0d53ff607a3fd8e27283c8f1cb3a238
717fa1c4098bd6e282c24452a39aafc0b436941b2f398ef0086960effcc3f2ca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a229e13ab0262306e8233705569c7866
d389ff1fc114c031f85a57a9ebf1845ead515e38
9865a8767eed63858b778ab5774d5ae48fc46d0adcb1693c76eabb9ad9e81bc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-nFR97nLxtTY/V5JcMTuCiCI/AAAAAAAAAMs/_HKqK_wy2tgGVE7qgXcUpMr1oqWPwFipQCK4B/s1600/header%2Bfinal.png
200 OK 151 kB URL HTTP/2 4.bp.blogspot.com/-nFR97nLxtTY/V5JcMTuCiCI/AAAAAAAAAMs/_HKqK_wy2tgGVE7qgXcUpMr1oqWPwFipQCK4B/s1600/header%2Bfinal.png
IP
File type PNG image data, 1079 x 83, 8-bit/color RGBA, non-interlaced\012- data
Size 151 kB (151284 bytes)
Hash 919fd3363fae483c3d1a74fe5d34ddff
2384698c423a6be172da2ff40db79ffb8a4191fa
97059c6b169a9986c6888c71e0bcd268192f9e978bafa75a1f0f0670b40597ff
GET /-nFR97nLxtTY/V5JcMTuCiCI/AAAAAAAAAMs/_HKqK_wy2tgGVE7qgXcUpMr1oqWPwFipQCK4B/s1600/header%2Bfinal.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="header final.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 151284
x-xss-protection: 0
date: Sat, 25 Mar 2023 12:46:49 GMT
expires: Sun, 26 Mar 2023 12:46:49 GMT
cache-control: public, max-age=86400, no-transform
etag: "vcc"
content-type: image/png
vary: Origin
age: 14188
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s7.addthis.com/js/300/addthis_widget.js
200 OK 116 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP
File type ASCII text, with very long lines (54602)
Size 116 kB (116423 bytes)
Hash d5b9b7a3accd3b7b7de639c072ae3ee2
9583b5c046d78af5c6379d844219f828aa2222d0
648dad6716bb917c7d981e7772fca499d9583717fd83ffef47b0534cb9132b60
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5834c"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 116423
date: Sat, 25 Mar 2023 16:43:17 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
4.bp.blogspot.com/-yv5OxRitVAQ/Uz1cgd6dDpI/AAAAAAAAJbE/8PS_aU1Rxkw/h25/team-socialicons.png
200 OK 10 kB URL HTTP/2 4.bp.blogspot.com/-yv5OxRitVAQ/Uz1cgd6dDpI/AAAAAAAAJbE/8PS_aU1Rxkw/h25/team-socialicons.png
IP
File type PNG image data, 916 x 25, 8-bit/color RGBA, non-interlaced\012- data
Hash 21ac8eee3b19a3293e8f899b357cc6dd
8f2e2968ea581c0a97896f4ea916fd12cd449ac3
4114ecdf5d96f4e79271fa0541c464c811404186307fca09981ad363f732a0cc
GET /-yv5OxRitVAQ/Uz1cgd6dDpI/AAAAAAAAJbE/8PS_aU1Rxkw/h25/team-socialicons.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="team-socialicons.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10278
x-xss-protection: 0
date: Sat, 25 Mar 2023 16:04:05 GMT
expires: Mon, 20 Mar 2023 18:15:25 GMT
cache-control: public, max-age=86400, no-transform
age: 2352
etag: "v25b2"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 0XnRFNhFmLdcPRotJZCntA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 1bWEBO7UsccIBFQcqs+AxTSCiKk=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f0f306ea49f1bd3f358f7579513e7377
c2845c696f6685a211bc040895d28ebf23fa1bc0
cda7588d5040ef3c8e83955838618a0ed0a6ee242d24abf5af697b2289fc8bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
netdna.bootstrapcdn.com/font-awesome/3.2.0/font/fontawesome-webfont.woff?v=3.2.0
200 OK 44 kB URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/3.2.0/font/fontawesome-webfont.woff?v=3.2.0
IP
File type Web Open Font Format, TrueType, length 43572, version 1.0\012- data
Hash b683029bafe0305ac2234038a03e1541
12f8c193902e99348493ace32e498031bf79b654
18e6b5ff511b90edf098e62ac45ed9d6673a3eee10165d0de4164d4d02a3a77f
GET /font-awesome/3.2.0/font/fontawesome-webfont.woff?v=3.2.0 HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ujyaalochitwan.blogspot.com
Connection: keep-alive
Referer: https://netdna.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 16:43:17 GMT
content-type: font/woff
content-length: 43572
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "b683029bafe0305ac2234038a03e1541"
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 02/05/2023 21:16:50
cdn-proxyver: 1.03
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 864
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 12217ab361233d2274552652ed726279
cdn-cache: HIT
cf-cache-status: HIT
age: 14188
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ad89caccbebb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
netdna.bootstrapcdn.com/font-awesome/3.2.0/css/font-awesome.min.css
200 OK 4.8 kB URL HTTP/2 netdna.bootstrapcdn.com/font-awesome/3.2.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (668)
Hash 73d22e58d26abdbf0f963e8500827e09
f5e08e4d79451da36ccb59f463c32d0dbdef6280
c8e67eaf0da1356a63de05878b38d13e324995a0c143a5ad4611c6f5a4860ba5
GET /font-awesome/3.2.0/css/font-awesome.min.css HTTP/1.1
Host: netdna.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 16:43:17 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 565, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:51 GMT
cdn-cachedat: 2021-06-04 00:14:54
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 8c4558e91bad59dd2ace8b9f65ef90b1
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 25210962
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ad89cab8ee50b59-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ujyaalochitwan.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:42 GMT
expires: Sat, 23 Mar 2024 10:26:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 108995
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16740, version 1.0\012- data
Hash e43b535855a4ae53bd5b07a6eeb3bf67
6507312d9491156036316484bf8dc41e8b52ddd9
b34551ae25916c460423b82beb8e0675b27f76a9a2908f18286260fbd6de6681
GET /s/opensans/v34/memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0B4gaVI.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ujyaalochitwan.blogspot.com
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:54 GMT
expires: Sat, 23 Mar 2024 10:26:54 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:14:44 GMT
content-type: font/woff2
age: 108983
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b644abd1d83faa6f0327486dae33b18d
cb745aa55db6976159ef31ff8835e2b26fd32109
784e1b0a41a50629890a6fd6f58beb9f3a6eb5ba56aa35c671e5217d839aeeac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 47ba27dcddcc188f206daede0468da37
8e40f67bcbbb51fd3780716ce8b4a83b42c08d84
10042090339c937fbf0ab1bcf7a61567d459fc1c45df2e62a006305b1c9b2d8a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "10042090339C937FBF0AB1BCF7A61567D459FC1C45DF2E62A006305B1C9B2D8A"
Last-Modified: Fri, 24 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12950
Expires: Sat, 25 Mar 2023 20:19:07 GMT
Date: Sat, 25 Mar 2023 16:43:17 GMT
Connection: keep-alive
themes.googleusercontent.com/image?id=1RUMOzjWeRA832TdLQnkO89yQ4381KWiRGRGdfqXIo-81BN4kWkPZpymfS4uw8h5g03IE
200 OK 136 kB URL HTTP/2 themes.googleusercontent.com/image?id=1RUMOzjWeRA832TdLQnkO89yQ4381KWiRGRGdfqXIo-81BN4kWkPZpymfS4uw8h5g03IE
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x1200, components 3\012- data
Size 136 kB (135705 bytes)
Hash 3ac4624162faf0f6b8ba8ce1df465eaf
23331e9354392abb4e1f2ba80ace158dcfb585e9
a97be5b3ff4195e3b468bb8c535f125d119b67e61684887db89fe9c5c1653691
GET /image?id=1RUMOzjWeRA832TdLQnkO89yQ4381KWiRGRGdfqXIo-81BN4kWkPZpymfS4uw8h5g03IE HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Sun, 26 Mar 2023 16:43:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 25 Mar 2023 16:43:18 GMT
server: fife
content-length: 135705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Sat, 25 Mar 2023 16:43:18 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 234e1cd8a5d0db6d181996ee2cd4d86c
df53ef290c471f414961bf88ee2a4b8f10f0a00c
ee1505a502f777e39a6db0f33b7cde67e1e45b81366c64f07072ff7554d80877
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EE1505A502F777E39A6DB0F33B7CDE67E1E45B81366C64F07072FF7554D80877"
Last-Modified: Sat, 25 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 25 Mar 2023 22:43:18 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 53a8af78b2cf2f66d1a18ac9967c7e3c
496502a04380132d2117b739e7a7a5f2458da1ac
4ba2a74c0936f71241a472276a423539295ba1f0ed5391d9069468c8fa6a4fb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BA2A74C0936F71241A472276A423539295BA1F0ED5391D9069468C8FA6A4FB3"
Last-Modified: Sat, 25 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sat, 25 Mar 2023 22:43:18 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
ylx-4.com/mobile_redir.php?section=General&pub=777952&ga=g
200 OK 503 B URL HTTP/2 ylx-4.com/mobile_redir.php?section=General&pub=777952&ga=g
IP
ASN #201702 skHosting.eu s.r.o.
Hash 234e1cd8a5d0db6d181996ee2cd4d86c
df53ef290c471f414961bf88ee2a4b8f10f0a00c
ee1505a502f777e39a6db0f33b7cde67e1e45b81366c64f07072ff7554d80877
GET /mobile_redir.php?section=General&pub=777952&ga=g HTTP/1.1
Host: ylx-4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: application/javascript
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 53a8af78b2cf2f66d1a18ac9967c7e3c
496502a04380132d2117b739e7a7a5f2458da1ac
4ba2a74c0936f71241a472276a423539295ba1f0ed5391d9069468c8fa6a4fb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BA2A74C0936F71241A472276A423539295BA1F0ED5391D9069468C8FA6A4FB3"
Last-Modified: Sat, 25 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21514
Expires: Sat, 25 Mar 2023 22:41:52 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 53a8af78b2cf2f66d1a18ac9967c7e3c
496502a04380132d2117b739e7a7a5f2458da1ac
4ba2a74c0936f71241a472276a423539295ba1f0ed5391d9069468c8fa6a4fb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4BA2A74C0936F71241A472276A423539295BA1F0ED5391D9069468C8FA6A4FB3"
Last-Modified: Sat, 25 Mar 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21561
Expires: Sat, 25 Mar 2023 22:42:39 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:44 GMT
expires: Sat, 23 Mar 2024 10:26:44 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 108994
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:45 GMT
expires: Sat, 23 Mar 2024 10:26:45 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 108993
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash a229e13ab0262306e8233705569c7866
d389ff1fc114c031f85a57a9ebf1845ead515e38
9865a8767eed63858b778ab5774d5ae48fc46d0adcb1693c76eabb9ad9e81bc1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f0f306ea49f1bd3f358f7579513e7377
c2845c696f6685a211bc040895d28ebf23fa1bc0
cda7588d5040ef3c8e83955838618a0ed0a6ee242d24abf5af697b2289fc8bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f0f306ea49f1bd3f358f7579513e7377
c2845c696f6685a211bc040895d28ebf23fa1bc0
cda7588d5040ef3c8e83955838618a0ed0a6ee242d24abf5af697b2289fc8bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash fae1909661b247d9b9cd52a112504080
98b1ca782d56f019963c239216e66b9d2ec4ebdc
a466ff86c64078f7e01eaeca1ff547c37940045c2aa9f077343f68df5dcf5789
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3418
Cache-Control: max-age=97327
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:18 GMT
Etag: "641df07b-1d7"
Expires: Sun, 26 Mar 2023 19:45:25 GMT
Last-Modified: Fri, 24 Mar 2023 18:48:27 GMT
Server: ECAcc (ska/F775)
X-Cache: HIT
Content-Length: 471
www.blogger.com/dyn-css/authorization.css?targetBlogID=1218425079316799059&zx=3df00610-9d37-4c5b-96af-ca0fad041401
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=1218425079316799059&zx=3df00610-9d37-4c5b-96af-ca0fad041401
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=1218425079316799059&zx=3df00610-9d37-4c5b-96af-ca0fad041401 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-rktVD_UADXI/V66aqdEIdlI/AAAAAAAADto/CjMACRewM_wqfed26sMZVD1YOIqcdjL0ACLcB/s640/uddar-800x445.jpg
200 OK 85 kB URL HTTP/2 2.bp.blogspot.com/-rktVD_UADXI/V66aqdEIdlI/AAAAAAAADto/CjMACRewM_wqfed26sMZVD1YOIqcdjL0ACLcB/s640/uddar-800x445.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 640x356, components 3\012- data
Hash 3c3739521e989ee24c49c281c4f22ef7
731bb6b6fc9bd374d8995f5ea0df8fb1a45c36a4
35730a6cd6d426ae66a7b43fca0b4b063a892323c0086ac9c5e1b9abb560395a
GET /-rktVD_UADXI/V66aqdEIdlI/AAAAAAAADto/CjMACRewM_wqfed26sMZVD1YOIqcdjL0ACLcB/s640/uddar-800x445.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vedd"
expires: Sun, 26 Mar 2023 16:43:18 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="uddar-800x445.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 25 Mar 2023 16:43:18 GMT
server: fife
content-length: 85407
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash fae1909661b247d9b9cd52a112504080
98b1ca782d56f019963c239216e66b9d2ec4ebdc
a466ff86c64078f7e01eaeca1ff547c37940045c2aa9f077343f68df5dcf5789
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3435
Cache-Control: max-age=97344
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:18 GMT
Etag: "641df07b-1d7"
Expires: Sun, 26 Mar 2023 19:45:42 GMT
Last-Modified: Fri, 24 Mar 2023 18:48:27 GMT
Server: ECAcc (ska/F6D2)
X-Cache: HIT
Content-Length: 471
accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fujyaalochitwan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__
200 OK 6.4 kB URL HTTP/2 accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fujyaalochitwan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (39775), with no line terminators
Hash 3b7c68003cacb4b2fd29993455215ec0
641d7781db91242854557b5986939f1e67d66911
ce98b18040825c50d9aa948fbc16565ee60035aeaed7757d08c1d0e500ea79e2
GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fujyaalochitwan.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.zUi2Oiqh0cQ.O%2Fd%3D1%2Frs%3DAHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw%2Fm%3D__features__ HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 25 Mar 2023 16:43:18 GMT
content-security-policy: require-trusted-types-for 'script';report-uri /o/cspreport, script-src 'nonce-QgahEGjsNpnWp7-LPLlE0A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
200 OK 75 kB URL HTTP/2 ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
IP
ASN #201702 skHosting.eu s.r.o.
Hash dca91398a8a56eceb4c7ada96833cdd9
650fe6445a3ddd14d70bbfe14e6ee6b5d5792835
3ce2a3fd7f19a9a677071a1dec8d887d1a00c70736bcaad4c0c719573dfebf28
GET /banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2317006=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_851458728_0; expires=Mon, 24-Apr-2023 16:43:18 GMT; Max-Age=2592000; path=/; domain=ylx-3.com; secure; SameSite=None
X-Firefox-Spdy: h2
ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
200 OK 4.2 kB URL HTTP/2 ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
IP
ASN #201702 skHosting.eu s.r.o.
Hash cf519dc9a6b69212ab95f84c53e99549
70005f4a640088fe13d303878457768c31466472
404911bb29eb50c953e89c70ff3db37263798a621c88c91ea405d17bd0d9a28d
GET /banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2307194=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_851458728_0; expires=Mon, 24-Apr-2023 16:43:18 GMT; Max-Age=2592000; path=/; domain=ylx-3.com; secure; SameSite=None
X-Firefox-Spdy: h2
static.xx.fbcdn.net/rsrc.php/v3/yw/l/0,cross/BWImj6dnsd1.css?_nc_x=Ij3Wp8lg5Kz
200 OK 5.2 kB URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/yw/l/0,cross/BWImj6dnsd1.css?_nc_x=Ij3Wp8lg5Kz
IP
File type ASCII text, with very long lines (4431)
Hash 24d3d4a858ea21f727e8cceb28f3b631
186864277b25bf800b5d38efe7c077582dfabf84
37e1e4ab5a80e76089398e63c62ecfc367e076cab5734e183bbe3fb63462ed4e
GET /rsrc.php/v3/yw/l/0,cross/BWImj6dnsd1.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.facebook.com
Connection: keep-alive
Referer: https://www.facebook.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: br
content-type: text/css; charset=utf-8
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
expires: Sat, 23 Mar 2024 16:26:57 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
content-md5: JNPUqFjqIfcn6MzrKPO2MQ==
x-fb-debug: n5vlHAhquEGwO3MwiL1Bj9DVVIVrBMpW2N/A8p1ZlGc+CGalzQnwP0ON2kSaeLD+oRD078vgpdE2ep0plohTHw==
content-length: 5242
x-fb-trip-id: 1904183273
date: Sat, 25 Mar 2023 16:43:18 GMT
access-control-allow-origin: https://www.facebook.com
vary: Origin
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ssl.gstatic.com/accounts/o/611095756-postmessagerelay.js
200 OK 4.5 kB URL HTTP/2 ssl.gstatic.com/accounts/o/611095756-postmessagerelay.js
IP
File type ASCII text, with very long lines (2708)
Hash a55a8c71cd1ed530e7ad0692f3783c2f
5e8de3d08119de192cd1fec1efc1b01df85269e1
fe6ed6b00cb077b4b4f2902975bd0a2759321bf9ff993f7c40eb999dc156ef3e
GET /accounts/o/611095756-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4526
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Mar 2023 07:53:25 GMT
expires: Fri, 22 Mar 2024 07:53:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 22 Mar 2023 00:15:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 204593
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
z.moatads.com/addthismoatframe568911941483/moatframe.js
200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=11814
date: Sat, 25 Mar 2023 16:43:18 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a88cb8cbf9164d168bce01f0ce136060
bb98c27febb9dd06ce8bc78a5c75e70a8a9653f4
80682a825e7720503fbac7969d5cc7bc0291c15a6adb9caf18269a6fc62da865
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "80682A825E7720503FBAC7969D5CC7BC0291C15A6ADB9CAF18269A6FC62DA865"
Last-Modified: Sat, 25 Mar 2023 07:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15485
Expires: Sat, 25 Mar 2023 21:01:23 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 053e75891e490694a8e4473654b5afe1
f6d290807fe23ec2bfa4616a587c398326d0908f
deb3df5c24928db7061dcddf3b02abf81f89478b8666186f65d1101d2909b190
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DEB3DF5C24928DB7061DCDDF3B02ABF81F89478B8666186F65D1101D2909B190"
Last-Modified: Fri, 24 Mar 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11876
Expires: Sat, 25 Mar 2023 20:01:14 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 053e75891e490694a8e4473654b5afe1
f6d290807fe23ec2bfa4616a587c398326d0908f
deb3df5c24928db7061dcddf3b02abf81f89478b8666186f65d1101d2909b190
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DEB3DF5C24928DB7061DCDDF3B02ABF81F89478B8666186F65D1101D2909B190"
Last-Modified: Fri, 24 Mar 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11910
Expires: Sat, 25 Mar 2023 20:01:48 GMT
Date: Sat, 25 Mar 2023 16:43:18 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ed33bdc6090d1558095fc122af8549d2
bae03247a31ab66cdaa73aa44bcd91be5bad20d3
6796a09c01b7af9ebbe1f1e2da64da5247e490c3885d29f49f1e0802b1921633
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6796A09C01B7AF9EBBE1F1E2DA64DA5247E490C3885D29F49F1E0802B1921633"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9360
Expires: Sat, 25 Mar 2023 19:19:19 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ed33bdc6090d1558095fc122af8549d2
bae03247a31ab66cdaa73aa44bcd91be5bad20d3
6796a09c01b7af9ebbe1f1e2da64da5247e490c3885d29f49f1e0802b1921633
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6796A09C01B7AF9EBBE1F1E2DA64DA5247E490C3885D29F49F1E0802B1921633"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9312
Expires: Sat, 25 Mar 2023 19:18:31 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9726
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9726
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9726
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9726
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b62c9b9530dd66bb7f03ba2ce3d835da
bf8560766de78dd925e395f59610ab2f1335e565
62a45c1bedd4241448ab43b535518e423b0500901328b3a0b984d758c9b0540d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A45C1BEDD4241448AB43B535518E423B0500901328B3A0B984D758C9B0540D"
Last-Modified: Fri, 24 Mar 2023 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9726
Expires: Sat, 25 Mar 2023 19:25:25 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 85351059b67b0a42eda7e69a31b3b4b4
b798268806dc2f79f033e5872676019faf0e0cc1
86e163b7159b197d6358ab01333ac6da221de0ebe1c5da8d5cef2977d38625fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F255e6a5a-97bb-4a35-8a48-4d120747a63c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4000
x-amzn-requestid: 68dc01d7-3eed-48f6-8532-8efaa96cc1ec
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CJpraEqyoAMFgNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641a2315-3852cc8961365a560d1fa02f;Sampled=0
x-amzn-remapped-date: Tue, 21 Mar 2023 21:35:17 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: I3GuoZ4ZxAtz0sKe3wrW67aitLlCAbaZkiPw23fl0F3FoumJDEnXiQ==
via: 1.1 288c777a01e22425da9494dad7a69734.cloudfront.net (CloudFront), 1.1 d90109c5a0c30f43223e0db85921c5c2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 25 Mar 2023 05:56:24 GMT
age: 38815
etag: "b798268806dc2f79f033e5872676019faf0e0cc1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dd191e3a122d6e31f81e6e9d434c58d6
aec88022970c93289434f8097e4a663da33e5271
1f00c901ef479637ec703d7924526a970cb13dd2635b2bbb68b285df9d98e011
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6f9abe8-74dc-41f6-984c-4a9e53a6198a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6185
x-amzn-requestid: 223de50b-9a7e-4ac7-9305-336658eec4ac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiwYHoLoAMFXtg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e1802-226bd8524ade75234053ff50;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:37:06 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: Ye0ADORg1hFVLxcNVj-qS60tlfguOEtyTx_XFU4ooJOcDHqNsqV3kw==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:14 GMT
age: 67565
etag: "aec88022970c93289434f8097e4a663da33e5271"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
200 OK 5.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aecd210f66f83c73c3450d047ae7448a
d68861e96e12e8a3f293dbae8b687f05b6e15afb
22b69c41c56e5538d91f824d5dc2e63ab5563f99ae8e429c9166f4b397cacd0e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fca67e232-d39a-48ac-a0be-316741df0c53.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5296
x-amzn-requestid: 11fdf0c8-244c-4cd5-bfa7-4c77d777174f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTiuzEqkIAMFXOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17f8-5c241d63598dbf595b54ead5;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:36:56 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: b1KWFmKdRQ4DU0v5JmC7AJatpv2B5FAHKVWL7pFiyh13fqYDA5qydA==
via: 1.1 b5695e36d7fbc522ece27885d73757ae.cloudfront.net (CloudFront), 1.1 deaaf0548506de20925615eb51a7ea7e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:57:13 GMT
age: 67566
etag: "d68861e96e12e8a3f293dbae8b687f05b6e15afb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
200 OK 8.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 73f9697594d173d623b331b5c35eab8d
6323f751f6b7517f062a0442480f672086ea02a1
116cb71658b31e87f19c390b242c684f6505cc8edf90b7fc934ac726fc7ddd18
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7bda2583-e595-45ff-852f-d4b6bd713109.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8635
x-amzn-requestid: fc715b03-f48f-4300-b752-ab157a684f08
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihcETyIAMFhYQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a2-68f685ec0f50dae026ea3f64;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:30 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: i6dsVaC_gPijsRqh_EL5tZYZpjNEbQJvKIpPq501TIJZzcLUWeRz9w==
via: 1.1 ba490acb2ea716cd57876286ed686786.cloudfront.net (CloudFront), 1.1 34f8ef0e4c880df0650a814412a26ea6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:45:56 GMT
age: 68243
etag: "6323f751f6b7517f062a0442480f672086ea02a1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 02e0767e0c72d95e30337ad42f5d15b3
79aa21ca35c9d98ea7d0713d219e9b67083bdc05
7991a0c4d409cca49259cb626d0de39684635f14fad72e074b303235026673a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdaf1038f-e1d8-41a0-a039-85a85d278271.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6511
x-amzn-requestid: 38d33f4d-2b85-4666-b778-04f4b4dfdf10
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTihSFIdIAMFRjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e17a1-036a28e75189d05209396933;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:29 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: eYAgUDZFGkaskq0A77VgX54hvvjtQtClrFyED3COkankS76uD7hTAQ==
via: 1.1 53ee82a7eb57de316cba44c26680b4a6.cloudfront.net (CloudFront), 1.1 1ec2938341958d70d56193d709c89dee.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:52 GMT
age: 68367
etag: "79aa21ca35c9d98ea7d0713d219e9b67083bdc05"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5773974a7341690f006b052ad02c94db
1b11316c952e2195da1646dd94671669e7e3bc2b
a06b72138745500cacc919fea29536ebd4188a1c483f6123e3402458e299f16a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4af2ab94-b5c3-4517-b9d7-97ddb369f62d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7800
x-amzn-requestid: bad99b1e-3923-4de9-8bea-4dd04e96f7cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CTigfFGcIAMFdBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641e179c-0826b92d4c4af16553503600;Sampled=0
x-amzn-remapped-date: Fri, 24 Mar 2023 21:35:24 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: 9AGLmjvUSTKIsYIWECOR8QwdF4PP1tP1TweUm0VYvxQ0qskqj3YuLA==
via: 1.1 3698a5f586d9ecca74d570e41f4c8516.cloudfront.net (CloudFront), 1.1 995664ee945c06fc706b5cb8e0e650dc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 24 Mar 2023 21:43:53 GMT
age: 68366
etag: "1b11316c952e2195da1646dd94671669e7e3bc2b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ylx-3.com/trk/?db807ffc38d3250daeae4be9af457852
200 OK 43 B URL HTTP/2 ylx-3.com/trk/?db807ffc38d3250daeae4be9af457852
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?db807ffc38d3250daeae4be9af457852 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/show.php?u82551679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db807ffc38d3250daeae4be9af457852&cc=NO&https=1&useAf=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/gif
content-length: 43
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/300lo.json?si=641f24b38205f861&bkl=0&bl=1&pdt=1246&sid=641f24b38205f861&pub=xa-5216f78f348f6577&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=ujyaalochitwan.blogspot.com&fp=2016%2F08%2Fblog-post_17.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1679762611595&jsl=1&uvs=641f24b35d7d21f9000&skipb=1&callback=addthis.cbs.jsonp__411209800131773440
200 OK 90 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=641f24b38205f861&bkl=0&bl=1&pdt=1246&sid=641f24b38205f861&pub=xa-5216f78f348f6577&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=ujyaalochitwan.blogspot.com&fp=2016%2F08%2Fblog-post_17.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1679762611595&jsl=1&uvs=641f24b35d7d21f9000&skipb=1&callback=addthis.cbs.jsonp__411209800131773440
IP
File type ASCII text, with no line terminators
Hash e30bb5858b896d0483c000b66bed7c55
a95b54a890701dbee1b1a3a681efdf0d64e2384a
c6546ded60d156b27a7f89cc28e0478bc4cc0c8c75c6d7254f7b570a0c4887d2
GET /live/red_lojson/300lo.json?si=641f24b38205f861&bkl=0&bl=1&pdt=1246&sid=641f24b38205f861&pub=xa-5216f78f348f6577&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=ujyaalochitwan.blogspot.com&fp=2016%2F08%2Fblog-post_17.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1679762611595&jsl=1&uvs=641f24b35d7d21f9000&skipb=1&callback=addthis.cbs.jsonp__411209800131773440 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 90
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Sat, 25 Mar 2023 16:43:19 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5716bd17f0cc1d649bcba4a6400ad0fa
752def7b1cf7d2f2e8213b28cb17f93e1015d333
ef78bd37975cc2a43c78562c8fcd9977f92a2ef525b87cfcef89f114f28eac3b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fa363658b10afd87af493d2c443e3106
6d1f5da75206662432381be4dd22e72fb3cb968a
f0d0e2a38e51f762415e65b7f49f2acd09b4651b5c111875ff9184a58f0cc8f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 16:35:11 GMT
expires: Sat, 25 Mar 2023 16:50:11 GMT
cache-control: public, max-age=900
age: 488
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 25 Mar 2023 16:43:19 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ylx-3.com/trk/?be4a55ce00fd989a39db5e6e0fa5b639
200 OK 43 B URL HTTP/2 ylx-3.com/trk/?be4a55ce00fd989a39db5e6e0fa5b639
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?be4a55ce00fd989a39db5e6e0fa5b639 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/show.php?u87371679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=be4a55ce00fd989a39db5e6e0fa5b639&cc=NO&https=1&useAf=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/gif
content-length: 43
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ylx-3.com/trk/?db7afad7942fce685d79b232dd10bbfc
200 OK 43 B URL HTTP/2 ylx-3.com/trk/?db7afad7942fce685d79b232dd10bbfc
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?db7afad7942fce685d79b232dd10bbfc HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/show.php?u36631679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db7afad7942fce685d79b232dd10bbfc&cc=NO&https=1&useAf=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/gif
content-length: 43
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash fa363658b10afd87af493d2c443e3106
6d1f5da75206662432381be4dd22e72fb3cb968a
f0d0e2a38e51f762415e65b7f49f2acd09b4651b5c111875ff9184a58f0cc8f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash eef4409d0ad90e2899e538028bd3fa76
2d6edd13cbd2d201ef921fc33c053aec8f8b740c
61eef3a534769ac291c82d37206b392dea96af36a38e9d7da4cf0fb2d5d2342d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s7.addthis.com/static/counter.d27508c102582d608697.js
200 OK 8.3 kB URL HTTP/2 s7.addthis.com/static/counter.d27508c102582d608697.js
IP
File type ASCII text, with very long lines (24530), with no line terminators
Hash 47fcfb824ad738c29e3195451d5c755e
8a955f27a30f4a8c9cde94567c041040e3c60d61
1508b4ae159e51231031ce58f3a5c31aca11a438f4ea3c12ea3581bbc97f4305
GET /static/counter.d27508c102582d608697.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/javascript
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-5fd2"
timing-allow-origin: *
cache-control: public, max-age=86313600
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 8265
date: Sat, 25 Mar 2023 16:43:19 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
platform.twitter.com/widgets.js
200 OK 28 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (38752)
Hash 8aa708f5eebf10bd82e942dabf1623a5
326a6d469222302a80ecf29039e7837d8870ee47
fcfdc2930fdd7f4b3c7f0c1308ce2e89fcc5082ae6a0a1e16ecf0f7e417f1368
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Access-Control-Max-Age: 3000
Age: 160
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Sat, 25 Mar 2023 16:43:19 GMT
Etag: "9e99725b7a4cd730a934afba2a438bb5+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:51 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
x-amz-server-side-encryption: AES256
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 27630
v1.addthisedge.com/live/boost/xa-5216f78f348f6577/_ate.track.config_resp
200 OK 47 B URL HTTP/2 v1.addthisedge.com/live/boost/xa-5216f78f348f6577/_ate.track.config_resp
IP
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/xa-5216f78f348f6577/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=60, s-maxage=86400
date: Sat, 25 Mar 2023 16:43:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
ylx-3.com/trk/?156f5eead825c6d981736d3fb1c41218
200 OK 43 B URL HTTP/2 ylx-3.com/trk/?156f5eead825c6d981736d3fb1c41218
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?156f5eead825c6d981736d3fb1c41218 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/show.php?u56771679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=156f5eead825c6d981736d3fb1c41218&cc=NO&https=1&useAf=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/gif
content-length: 43
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
ylx-3.com/trk/?9d0a5b7ef16d3084eac19088d1c36e36
200 OK 43 B URL HTTP/2 ylx-3.com/trk/?9d0a5b7ef16d3084eac19088d1c36e36
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?9d0a5b7ef16d3084eac19088d1c36e36 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/show.php?u751679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=9d0a5b7ef16d3084eac19088d1c36e36&cc=NO&https=1&useAf=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/gif
content-length: 43
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=https%3A%2F%2Fujyaalochitwan.blogspot.com
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=https%3A%2F%2Fujyaalochitwan.blogspot.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56166)
Size 105 kB (105435 bytes)
Hash 58f06e7d628e7e207cad8e48c9cc76be
9042f057d52be00c9535ce93b0ce4c03707e0c41
ea6c34f2e7acfea93ba722fe283f2704392dc518c9a0d1eeca0ba03a0b63d789
GET /widgets/widget_iframe.2b2d73daf636805223fb11d48f3e94f7.html?origin=https%3A%2F%2Fujyaalochitwan.blogspot.com HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 849032
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Sat, 25 Mar 2023 16:43:19 GMT
Etag: "95e1b50b0c179aefb47b5b211bb347b5+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:13 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
x-amz-server-side-encryption: AES256
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105435
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash a83083e1fef42986ba5dfbaf1c9c2667
7fe54e60133beb76e3f01518c7d42467f02a7a61
47595fa6b57f0dd4c3d0e212ba142afd2de604c9c7530dd55b1165a106fd931d
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 25 Mar 2023 16:43:19 GMT
server: ESF
cache-control: private
content-length: 30981
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=2113417614775&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
200 OK 110 kB URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=2113417614775&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Size 110 kB (109535 bytes)
Hash 418a6ca45af3f779ea834a60a26c54e6
9f6694e9c3910a775cb6da129f57237800c47aea
d15025b71ea7b2c4b8e2195c34b346621cb5b1daf58b00b6cfeb9fdb4e9d4464
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=2113417614775&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Cookie: total_impressions=1; used_ad2307194=1; used_ad2317006=1; used_ad2558399=1; used_ad2558643=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html; charset=utf-8
set-cookie: total_impressions=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; secure; SameSite=None
used_ad2307194=2; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27276&adApiR=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1523709140532&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
200 OK 35 kB URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27276&adApiR=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1523709140532&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (26637), with no line terminators
Hash 637b37a0cd2ee44150e1ace1423ef53f
958003311581e31c2f0de1f3c307a918aba199b9
716339289f3dbe38f9b60f0a249c7a6ce3bed86c0b8b9ffd00f35c2bd861dd7d
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27276&adApiR=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1523709140532&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html; charset=utf-8
set-cookie: total_impressions=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; secure; SameSite=None
used_ad2558399=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1808727726159&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
200 OK 4.5 kB URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1808727726159&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (11906), with no line terminators
Hash 9812769ac0e7e5275e20f4fc5814ddb5
34c1638674e5963d81f9ef9f07a27ba84791f4f5
74dcc085e3c26141ece069634f6ead179ca7d5a78925776597db0067b8c68a3e
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1808727726159&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html; charset=utf-8
set-cookie: total_impressions=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; secure; SameSite=None
used_ad2317006=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 994368e9cd3edd7245f8ad39ac8565c5
0b08a0465cb418aba7dd3d401b727613315166f2
a2e99e3e0f86d8e1d5fb288e943518a03c05196ac592cefaaaa8dfc962fba4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi_webp/3pdhpRRrmcU/sddefault.webp
200 OK 49 kB URL HTTP/2 i.ytimg.com/vi_webp/3pdhpRRrmcU/sddefault.webp
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a2de5672160d1706e57bdbc9a925d203
1b32379e5f9e7a225ece14daa41155c6bbd820fb
85f165da27c2dd60f89e24444c4713aaadd9ea77d7cc9c5176bce120410eb524
GET /vi_webp/3pdhpRRrmcU/sddefault.webp HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 49390
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 25 Mar 2023 16:43:19 GMT
expires: Sat, 25 Mar 2023 18:43:19 GMT
cache-control: public, max-age=7200
etag: "1495967498"
content-type: image/webp
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html&callback=_ate.cbs.sc_httpsujyaalochitwanblogspotcom201608blogpost17html0
200 OK 96 B URL HTTP/2 api-public.addthis.com/url/shares.json?url=https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html&callback=_ate.cbs.sc_httpsujyaalochitwanblogspotcom201608blogpost17html0
IP
File type ASCII text, with no line terminators
Hash d298fb6a410024b493a499eb6547079f
b26d79b48ffc5a0d38f331af4a9cf5658e911d7c
0a8008d94d6cf82938849a989329ab380af86aabfbe54608877f9c4e2e27344a
GET /url/shares.json?url=https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html&callback=_ate.cbs.sc_httpsujyaalochitwanblogspotcom201608blogpost17html0 HTTP/1.1
Host: api-public.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
cache-control: no-transform, must-revalidate, max-age=0, s-maxage=3600
surrogate-key: ujyaalochitwan.blogspot.com/2016/08/blog-post_17.html
last-modified: Sat, 25 Mar 2023 16:43:19 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 96
date: Sat, 25 Mar 2023 16:43:19 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
200 OK 27 kB URL HTTP/2 maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css
IP
File type ASCII text, with very long lines (65325)
Hash b4937fb81b449b038bd92f292f62a7e5
f17baf23c2c0a5a8b4749676f4b2dbe3f8cbbc43
bb487c27c1eab5197cf7595327ff89bd4a2acdfa5bec78dbd032490f85920688
GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://ebaaa.xyz
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:04 GMT
cdn-cachedat: 01/30/2022 11:18:43
cdn-edgestorageid: 756
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-proxyver: 1.02
cdn-requestid: 17cbbf52cb17a41f68b472fada811a1a
cdn-cache: HIT
cf-cache-status: HIT
age: 1456249
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7ad89cb89c4bb4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 994368e9cd3edd7245f8ad39ac8565c5
0b08a0465cb418aba7dd3d401b727613315166f2
a2e99e3e0f86d8e1d5fb288e943518a03c05196ac592cefaaaa8dfc962fba4f7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:19 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 843 B IP
ASN #20940 Akamai International B.V.
File type gzip compressed data, max compression\012- data
Hash 50d78295224c97985606fb528fd0247c
2dc50a7e8bf4a49489df5640eceedf305bf49492
aef0038f39038932e78208339730c0568da99567e2ba4323782d03b9cc905cef
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "61D0D914F390EAF79F2BA564D93632374C83A26E814023570C0FE0EA8DB16946"
Last-Modified: Fri, 24 Mar 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11478
Expires: Sat, 25 Mar 2023 19:54:37 GMT
Date: Sat, 25 Mar 2023 16:43:19 GMT
Connection: keep-alive
vidtrends.net/api/bannerVideo/article/db/strip/
200 OK 18 kB URL HTTP/2 vidtrends.net/api/bannerVideo/article/db/strip/
IP
ASN #201702 skHosting.eu s.r.o.
Hash b9cc55578fb7376090d193d35e71fa94
987999eadf62ff033b1ba595172e5b0d9f78f9cf
0691b0b3abd7eceaed6fb10c739d7f2250696dacef1f419a673f1e49eb522fa9
GET /api/bannerVideo/article/db/strip/ HTTP/1.1
Host: vidtrends.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.22.0
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/javascript;charset=UTF-8
X-Firefox-Spdy: h2
fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
200 OK 128 kB URL HTTP/2 fonts.gstatic.com/s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 128352, version 1.0\012- data
Size 128 kB (128352 bytes)
Hash 53436aca8627a49f4deaaa44dc9e3c05
0bc0c675480d94ec7e8609dda6227f88c5d08d2c
8265f64786397d6b832d1ca0aafdf149ad84e72759fffa9f7272e91a0fb015d1
GET /s/materialicons/v140/flUhRq6tzZclQEJ-Vdg-IuiaDsNc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://ebaaa.xyz
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 128352
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 24 Mar 2023 10:26:46 GMT
expires: Sat, 23 Mar 2024 10:26:46 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Mar 2023 19:51:56 GMT
content-type: font/woff2
age: 108994
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/bg.jpg
200 OK 25 kB URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/bg.jpg
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (935)
Hash 3e3cae5e2d2d06e440e7e0ed750f4d7c
33e4b4d96f1e3692b000222be4da17d0d782ed23
ee341511af84b9fcb6662111749b6ebc39c321bd41718eea5b822f7a2a562f2b
GET /08c73116f6/82b174e040/bg.jpg HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1808727726159&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
Cookie: total_impressions=1; used_ad2307194=2; used_ad2317006=1; used_ad2558399=1; used_ad2558643=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: application/javascript;charset=utf-8
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 313 B IP
Hash 63c71ef58255d51418f1c08390edc3d9
254f9aed138b42cad651a6203483feadf2ddd7f8
26b6e61572b4cb3bcca8c0af3608523d0d8ec9f78ab86663d5c08c83d6e7bd49
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4528
Cache-Control: max-age=129791
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:20 GMT
Etag: "641e6af7-139"
Expires: Mon, 27 Mar 2023 04:46:31 GMT
Last-Modified: Sat, 25 Mar 2023 03:31:03 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 313
syndication.twitter.com/settings?session_id=0ad088746a3fd7b8a77634129f928a92931048e1
200 OK 284 B URL HTTP/2 syndication.twitter.com/settings?session_id=0ad088746a3fd7b8a77634129f928a92931048e1
IP
File type JSON data\012- , ASCII text, with very long lines (663), with no line terminators
Hash 8792f18dcb406af2be326e0dd816eed7
d1ad89d9036b3985071b394706514862f7c687ce
19640da1d34fa31a031d58d27be6408f6703dddc3c4495f72d55a60f518b7cba
GET /settings?session_id=0ad088746a3fd7b8a77634129f928a92931048e1 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Sat, 25 Mar 2023 16:43:19 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Sat, 25 Mar 2023 16:43:20 GMT
content-length: 284
content-encoding: gzip
x-transaction-id: 67a8decda08142c5
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 104
x-connection-hash: edb09574e44c5512438836e92265974d83a32b99a007e6c038b39c79f263e63a
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 25 Mar 2023 16:43:20 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash ccd5dc1f5e903ada0d785308a9867409
7beb3527b20b1a022c4013ee26a2218a2b93a716
3d9198c328403f88f45a7b01a3b401106613a9058118c5c1f09ed4f763042a3c
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1268
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 25 Mar 2023 16:43:20 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 114 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 40fe31ad103378d87c9a5f521bd473cb
b196d2c1659bb228906e86d7d0076c8f64e8b55f
2fd27b50c65884765dfd8d3ecb25a9e107ed41180b498c85530accf2f06e6689
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1028
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 25 Mar 2023 16:43:20 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
platform.twitter.com/js/button.e7f9415a2e000feaab02c86dd5802747.js
200 OK 2.6 kB URL HTTP/1.1 platform.twitter.com/js/button.e7f9415a2e000feaab02c86dd5802747.js
IP
File type ASCII text, with very long lines (7891), with no line terminators
Hash 50af2557985d9ae5ef0bb111a4066237
b164d515f502d950df3ba208cc32bbe74e70d3d2
a3b6dbbc4e57c65eb23f84b312095c86a69ff47fc57fc745f464394158bda9af
GET /js/button.e7f9415a2e000feaab02c86dd5802747.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 849033
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Sat, 25 Mar 2023 16:43:20 GMT
Etag: "506673dbdb9085e7201e137e893cc152+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:06 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
x-amz-server-side-encryption: AES256
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2618
platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32037)
Hash 59524bd7f5584433bb77a21f1431db47
5be6f11aa7a378e597235668f5ec6819e9722c9a
80c4c77841bb8b9c561fb0ed2816c1e32288fda1178130d920b6830f287a9fea
GET /widgets/tweet_button.2b2d73daf636805223fb11d48f3e94f7.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 849032
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Sat, 25 Mar 2023 16:43:20 GMT
Etag: "28919252629e2fa1d4ed52f48cb66ac0+gzip"
Last-Modified: Tue, 24 Jan 2023 21:41:10 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ
Vary: Accept-Encoding
x-amz-server-side-encryption: AES256
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13592
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b1ff7d7498d05edff17b9dc0140e9c45
425e05641aa27b69db1a7191243966bfa31e34b1
0519969a6464d870dc43c359d22580f26c78e66041f342f9d3796f458caa9304
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9b762efe5751eb25cd26ca67ad6dcf22
661f1247ecc842236957d05747967ec4f20835a2
c51c54e54ffc33cc7643bb0a64da2265f93efaf38838351ec0f2a2fe102efa2e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js
200 OK 14 kB URL HTTP/2 www.google.com/js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js
IP
File type ASCII text, with very long lines (36332)
Hash cd29bf7b28c6b469cad7a00de4f03d7d
ef2a6c612bba820e59447e344ed823cfa199d534
9c8a7a3abb40e232ea3bbed04b3753beff2c30dab3e6e00bbada79ab8e788652
GET /js/th/vfL9pRLeM2I8igeDEoZ-6BrdQvIN_PEUsYwY2am7_pk.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 22 Mar 2023 05:04:26 GMT
expires: Thu, 21 Mar 2024 05:04:26 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 20 Mar 2023 09:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 301134
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
csp.withgoogle.com/csp/lcreport/123841fb-8e4b-4ae0-b0b0-8e18a20500cb
204 No Content 0 B URL HTTP/2 csp.withgoogle.com/csp/lcreport/123841fb-8e4b-4ae0-b0b0-8e18a20500cb
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /csp/lcreport/123841fb-8e4b-4ae0-b0b0-8e18a20500cb HTTP/1.1
Host: csp.withgoogle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 60
Origin: https://ujyaalochitwan.blogspot.com
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
content-type: text/html; charset=utf-8
access-control-allow-origin: https://ujyaalochitwan.blogspot.com
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 25 Mar 2023 16:43:20 GMT
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-BMHdG1_KN1TZBirFQoTRng' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /csp/_/CspCollectorHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /csp/_/CspCollectorHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /csp/_/CspCollectorHttp/cspreport
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b1ff7d7498d05edff17b9dc0140e9c45
425e05641aa27b69db1a7191243966bfa31e34b1
0519969a6464d870dc43c359d22580f26c78e66041f342f9d3796f458caa9304
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 25 Mar 2023 16:43:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22publisher_handle%22%2C%22widget_creator_screen_name%22%3A%22author_handle%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1679762614216%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=0ad088746a3fd7b8a77634129f928a92931048e1
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22publisher_handle%22%2C%22widget_creator_screen_name%22%3A%22author_handle%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1679762614216%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=0ad088746a3fd7b8a77634129f928a92931048e1
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?l=%7B%22widget_origin%22%3A%22https%3A%2F%2Fujyaalochitwan.blogspot.com%2F2016%2F08%2Fblog-post_17.html%22%2C%22widget_frame%22%3Afalse%2C%22widget_site_screen_name%22%3A%22publisher_handle%22%2C%22widget_creator_screen_name%22%3A%22author_handle%22%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1679762614216%2C%22dnt%22%3Afalse%2C%22client_version%22%3A%22aaf4084522e3a%3A1674595607486%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=0ad088746a3fd7b8a77634129f928a92931048e1 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 25 Mar 2023 16:43:20 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Sat, 25 Mar 2023 16:43:20 GMT
content-length: 43
x-transaction-id: e4a93be465583bdf
strict-transport-security: max-age=631138519
x-response-time: 116
x-connection-hash: edb09574e44c5512438836e92265974d83a32b99a007e6c038b39c79f263e63a
X-Firefox-Spdy: h2
ylx-i.advertica-cdn2.com/aff/pub_upk7x1.png?1480419365
200 OK 22 kB URL HTTP/2 ylx-i.advertica-cdn2.com/aff/pub_upk7x1.png?1480419365
IP
ASN #201702 skHosting.eu s.r.o.
Hash b34e650dc0f69567ce421d7c893146f0
5695ececc04794eadc88ee2b00698bd38afeca40
f64c8511451c3d64027a827a6c43f10077581d7cee18438147a0c39b459805fe
GET /aff/pub_upk7x1.png?1480419365 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/png
last-modified: Tue, 29 Nov 2016 11:36:05 GMT
etag: W/"583d6825-5642"
expires: Mon, 24 Apr 2023 16:43:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1094751837815&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1094751837815&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=1094751837815&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html; charset=utf-8
set-cookie: total_impressions=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; secure; SameSite=None
used_ad2307194=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
200 OK 0 B URL HTTP/2 ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
IP
ASN #201702 skHosting.eu s.r.o.
GET /banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2558643=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_851458728_0; expires=Mon, 24-Apr-2023 16:43:18 GMT; Max-Age=2592000; path=/; domain=ylx-3.com; secure; SameSite=None
X-Firefox-Spdy: h2
ylx-3.com/show.php?u82551679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db807ffc38d3250daeae4be9af457852&cc=NO&https=1&useAf=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
200 OK 0 B URL HTTP/2 ylx-3.com/show.php?u82551679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db807ffc38d3250daeae4be9af457852&cc=NO&https=1&useAf=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
IP
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u82551679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db807ffc38d3250daeae4be9af457852&cc=NO&https=1&useAf=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
ylx-3.com/show.php?u56771679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=156f5eead825c6d981736d3fb1c41218&cc=NO&https=1&useAf=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
200 OK 0 B URL HTTP/2 ylx-3.com/show.php?u56771679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=156f5eead825c6d981736d3fb1c41218&cc=NO&https=1&useAf=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
IP
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u56771679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=156f5eead825c6d981736d3fb1c41218&cc=NO&https=1&useAf=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
ylx-3.com/show.php?u36631679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db7afad7942fce685d79b232dd10bbfc&cc=NO&https=1&useAf=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
200 OK 0 B URL HTTP/2 ylx-3.com/show.php?u36631679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db7afad7942fce685d79b232dd10bbfc&cc=NO&https=1&useAf=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
IP
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u36631679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=db7afad7942fce685d79b232dd10bbfc&cc=NO&https=1&useAf=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: application/javascript;charset=utf-8
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_56778&adApiR=loaded_string_4029035b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4608_98512&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: application/javascript;charset=utf-8
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=603631453201&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=603631453201&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0=
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39603&adApiR=loaded_string_7429035b0bce9d250429df012c0426f88d0bd_2558643_1679762598.3363_42567&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e&randomA=603631453201&realRef=M1JjbEovZWMydCthVlFXa08rb1M1dnliMUoyY2lPY2N0OURUMTNwTlM2MD0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: text/html; charset=utf-8
set-cookie: total_impressions=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; secure; SameSite=None
used_ad2558643=1; expires=Sun, 26-Mar-2023 03:59:59 GMT; Max-Age=40600; path=/; secure; SameSite=None
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
access-control-allow-origin: *
content-encoding: br
X-Firefox-Spdy: h2
www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fcserofero%2F&tabs&width=300&height=214&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fcserofero%2F&tabs&width=300&height=214&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId
IP
GET /plugins/page.php?href=https%3A%2F%2Fwww.facebook.com%2Fcserofero%2F&tabs&width=300&height=214&small_header=false&adapt_container_width=true&hide_cover=false&show_facepile=true&appId HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: br
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
x-fb-rlafr: 0
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: Hu0WUL33nViBK3qhHdxo1+nprk4cLlIc5U1JqU+VwSUwIjvrV+iCkQjuRO7nWHTfqPe458Z7ae7I3SABiXONpw==
date: Sat, 25 Mar 2023 16:43:18 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
200 OK 0 B URL HTTP/2 ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
IP
ASN #201702 skHosting.eu s.r.o.
GET /banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2307194=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_851458728_0; expires=Mon, 24-Apr-2023 16:43:18 GMT; Max-Age=2592000; path=/; domain=ylx-3.com; secure; SameSite=None
X-Firefox-Spdy: h2
ylx-3.com/show.php?u87371679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=be4a55ce00fd989a39db5e6e0fa5b639&cc=NO&https=1&useAf=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
200 OK 0 B URL HTTP/2 ylx-3.com/show.php?u87371679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=be4a55ce00fd989a39db5e6e0fa5b639&cc=NO&https=1&useAf=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
IP
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u87371679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=be4a55ce00fd989a39db5e6e0fa5b639&cc=NO&https=1&useAf=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
200 OK 0 B URL HTTP/2 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP
ASN #201702 skHosting.eu s.r.o.
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: image/png
last-modified: Thu, 01 Dec 2016 21:46:50 GMT
etag: W/"58409a4a-631"
expires: Mon, 24 Apr 2023 16:43:19 GMT
cache-control: max-age=2592000
access-control-allow-origin: *
x-cache: HIT
x-server: cdnbts
content-encoding: gzip
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_39353&adApiR=loaded_string_5049235b0bce9d250429df012c0426f88d0bd_2307194_1679762598.4607_37229&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: application/javascript;charset=utf-8
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
200 OK 0 B URL HTTP/2 ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
IP
ASN #201702 skHosting.eu s.r.o.
GET /banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1 HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ujyaalochitwan.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
set-cookie: used_ad2558399=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Sun, 26-Mar-2023 04:00:00 GMT; Max-Age=40602; path=/; domain=ylx-3.com; secure; HttpOnly; SameSite=None
cpa_673873=728x90_851458728_0; expires=Mon, 24-Apr-2023 16:43:18 GMT; Max-Age=2592000; path=/; domain=ylx-3.com; secure; SameSite=None
X-Firefox-Spdy: h2
ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
200 OK 0 B URL HTTP/2 ebaaa.xyz/08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e
IP
ASN #201702 skHosting.eu s.r.o.
GET /08c73116f6/82b174e040/?placementName=ROTATOR&type=n&cv=XrdpCjArpAjGZjCdZAdrrCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_27633&adApiR=loaded_string_7388535b0bce9d250429df012c0426f88d0bd_2317006_1679762598.4589_35199&refferer=1950524806_aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v&width=728&height=90&yxDom=eWx4LTMuY29t_7e4ee6a50de539a82f7cbd9a066dfd5e HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:19 GMT
content-type: application/javascript;charset=utf-8
expires: Sun, 01 Jan 2014 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex,nofollow
content-encoding: br
X-Firefox-Spdy: h2
ylx-3.com/show.php?u751679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=9d0a5b7ef16d3084eac19088d1c36e36&cc=NO&https=1&useAf=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
200 OK 0 B URL HTTP/2 ylx-3.com/show.php?u751679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=9d0a5b7ef16d3084eac19088d1c36e36&cc=NO&https=1&useAf=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v
IP
ASN #201702 skHosting.eu s.r.o.
GET /show.php?u751679762598=true&ad=673873&f=728x90&a=625611&cri=0&s=MjBlYTE4NjA1YTJiNWFmZjU4MmZmZDBiMjViODFmYTM=&u=777952&si=851458728&di=39551905&ci=16&h=9d0a5b7ef16d3084eac19088d1c36e36&cc=NO&https=1&useAf=loaded_string_8991035b0bce9d250429df012c0426f88d0bd_2558399_1679762598.4605_3230&ar=aHR0cHM6Ly91anlhYWxvY2hpdHdhbi5ibG9nc3BvdC5jb20v HTTP/1.1
Host: ylx-3.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ylx-3.com/banner_show.php?section=General&pub=777952&format=728x90&ga=g&https=1
Cookie: used_ad2558643=1; total_impressions=1; cpa_673873=728x90_851458728_0; used_ad2317006=1; used_ad2558399=1; used_ad2307194=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 25 Mar 2023 16:43:18 GMT
content-type: text/html; charset=UTF-8
expires: Sat, 25 Mar 2023 16:43:18 GMT
last-modified: Sat, 25 Mar 2023 16:43:18 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
x-robots-tag: noindex, nofollow, noarchive, nosnippet
X-Firefox-Spdy: h2
142.250.74.65
185.66.200.127
23.38.201.146
104.18.10.207
31.13.72.36