www.orwell.city/
301 Moved Permanently 173 B IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash af34dc53aa64b71d9865619621071191
7ddbd982c1f5ad79afe6f8e0859bcf0e1a7fe1b5
f6fd83a607f7848fde77ea09cf6040d955da12d2eaa4151de4d747127e7f2806
GET / HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.orwell.city/
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 15 Feb 2023 02:37:03 GMT
Expires: Wed, 15 Feb 2023 02:37:03 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 173
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4e78a380539960903ccc45f8ce47f434
87563f3db248a83ef5cb030836137976ab500be7
aa0a995b254f5db7f523b19e8d1d169828eb621680e8b6169df8e99643f85b73
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AA0A995B254F5DB7F523B19E8D1D169828EB621680E8B6169DF8E99643F85B73"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3969
Expires: Wed, 15 Feb 2023 03:43:12 GMT
Date: Wed, 15 Feb 2023 02:37:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8281405c524ff6eb1b0046b1c9661ce4
8233cad9810b06677bb8330dc7492dd5d1a65067
f9758415d785323b3f2108cb7762c5fc6cdc7f9fc49a46d05d691e56f93bc19f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F9758415D785323B3F2108CB7762C5FC6CDC7F9FC49A46D05D691E56F93BC19F"
Last-Modified: Tue, 14 Feb 2023 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3547
Expires: Wed, 15 Feb 2023 03:36:10 GMT
Date: Wed, 15 Feb 2023 02:37:03 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3534c46dafa4e959cb5f4aba0b1d8cd7
f4aa8774355b04bf1f074aeb73c56c52b32568ab
68b7b6679046611b607c073416e818c6d0391e2953ecc8781b02e57a9b5af306
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "68B7B6679046611B607C073416E818C6D0391E2953ECC8781B02E57A9B5AF306"
Last-Modified: Mon, 13 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4259
Expires: Wed, 15 Feb 2023 03:48:02 GMT
Date: Wed, 15 Feb 2023 02:37:03 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 15 Feb 2023 01:49:05 GMT
content-type: application/json
age: 2878
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: w+vgBT8A0E0aEfojwesW3jiwa9G/G6/vVvZvC+YU3ryQ3T2Qxmf1xXxPU4lzMAp1Gj0Aq+o2JRg=
x-amz-request-id: CWCXFB1T0CANEA5F
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 15 Feb 2023 01:47:09 GMT
age: 2994
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 15 Feb 2023 02:37:03 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1d4/cby5rWq6Yaw
200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/cby5rWq6Yaw
IP
Hash a6e09079be01c68406a460209f93920d
752edaf6ec044ebe5edd56f3aa18ef162b005be0
0f766006f1f9e1d1b76127ecf8880f4b80afa472b6322ff4d0da0dcac7e92e02
POST /s/gts1d4/cby5rWq6Yaw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:03 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.orwell.city/
200 OK 66 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (5829)
Hash 99e7e27d8f32da99a0ca2694c9fbcba2
7c589e9a8713064066affa8700b34dde3d5b78fa
55e080c0ce2cb621b5181868ec464c0ca2846822a704c5e99358bb4134d70069
GET / HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 15 Feb 2023 02:37:03 GMT
date: Wed, 15 Feb 2023 02:37:03 GMT
cache-control: private, max-age=0
last-modified: Mon, 14 Nov 2022 01:47:51 GMT
etag: W/"fda980042324af58e592c2cc1facf0017fb2badcd95f4fe50c4e5da93d2642e1"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 65951
server: GSE
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c6bac9db2171b2063aa85ea730a7d72
b636698fa6971f1c0031e71daa10825addd94d13
e977ba10782e8ca041303e2103688f4781fbfe19b318875d9dda6193dcc95b4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a861ad34eebfde7b0fb8be89ae9a80
4e36dac83150fac2efa4cada5b72ae50fe7aa95c
f9dca744ee31eaffa8710d2e1863ce4ee0e0a206b0288b82a6631f4e424c561d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.orwell.city/js/cookienotice.js
200 OK 2.0 kB URL HTTP/2 www.orwell.city/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 15 Feb 2023 02:37:04 GMT
expires: Wed, 22 Feb 2023 02:37:04 GMT
cache-control: public, max-age=604800
last-modified: Tue, 14 Feb 2023 19:55:46 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a861ad34eebfde7b0fb8be89ae9a80
4e36dac83150fac2efa4cada5b72ae50fe7aa95c
f9dca744ee31eaffa8710d2e1863ce4ee0e0a206b0288b82a6631f4e424c561d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a861ad34eebfde7b0fb8be89ae9a80
4e36dac83150fac2efa4cada5b72ae50fe7aa95c
f9dca744ee31eaffa8710d2e1863ce4ee0e0a206b0288b82a6631f4e424c561d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Feb 2023 04:55:51 GMT
expires: Wed, 14 Feb 2024 04:55:51 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Feb 2023 08:50:59 GMT
content-type: text/css
vary: Accept-Encoding
age: 78073
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3724678734-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3724678734-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash fa3689c4da148dc1d32b08048e1fb853
6e57810834a237751a8930aaa111c2d602555efd
7f58d0d690199515e88ea159f2c88c348411342c577b8d67016b149897285177
GET /static/v1/widgets/3724678734-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56565
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 08:55:01 GMT
expires: Tue, 13 Feb 2024 08:55:01 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 09 Feb 2023 22:53:35 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 150123
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-netvibes.png
200 OK 1.4 kB URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-netvibes.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash c52a5f4ecb6be5d7e93b23ef4122ee4e
4e698a5f455daf3a8ea1e219b1998079f0546716
71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 1445
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 17:21:05 GMT
expires: Mon, 20 Feb 2023 17:21:05 GMT
cache-control: public, max-age=604800
last-modified: Mon, 13 Feb 2023 12:50:56 GMT
content-type: image/png
age: 119759
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/subscribe-yahoo.png
200 OK 580 B URL HTTP/2 resources.blogblog.com/img/widgets/subscribe-yahoo.png
IP
File type PNG image data, 91 x 17, 8-bit colormap, non-interlaced\012- data
Hash 79f602b6ac18bee79b4e2353a6674010
28accf82263aa1a11bb821439d4d185865662530
bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 11:26:54 GMT
expires: Mon, 20 Feb 2023 11:26:54 GMT
cache-control: public, max-age=604800
last-modified: Mon, 13 Feb 2023 10:51:40 GMT
content-type: image/png
age: 141010
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee4ed4f567dcd71845e82cda6a27dd1f
b85e0a0201de4a90ad9247511584ed45bdb3266a
065c293b1ff1fd764585c40412160ec5439d1330745ce84d6d274dc94cb1d9ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9510916a15d80ca2eb9fc98904cb93ee
420495d8896aeaf34e73a1c6ad8d95c882553c11
4391a82749b95a599bd1605b98b665772676ea8707765b8d9f8451774f6a709f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4391A82749B95A599BD1605B98B665772676EA8707765B8D9F8451774F6A709F"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7729
Expires: Wed, 15 Feb 2023 04:45:53 GMT
Date: Wed, 15 Feb 2023 02:37:04 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee4ed4f567dcd71845e82cda6a27dd1f
b85e0a0201de4a90ad9247511584ed45bdb3266a
065c293b1ff1fd764585c40412160ec5439d1330745ce84d6d274dc94cb1d9ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/icon_feed12.png
200 OK 500 B URL HTTP/2 resources.blogblog.com/img/icon_feed12.png
IP
File type PNG image data, 12 x 12, 8-bit colormap, non-interlaced\012- data
Hash 44e7355a788fd1082deff0018883758e
50e3a28a44978e85d13c30522e0c71c8d0b24675
3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
GET /img/icon_feed12.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 500
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 09:58:09 GMT
expires: Mon, 20 Feb 2023 09:58:09 GMT
cache-control: public, max-age=604800
last-modified: Mon, 13 Feb 2023 01:50:02 GMT
content-type: image/png
age: 146335
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 43525454497eda55f3d13b92d7139aed
46429b37b5cc2ec9a2a4013089f9d053cbe4c422
1592aaf53511c3bc8148398111ed5ed8bee02b2a3ff3c9db7dc053b5a571c9c4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3655
Cache-Control: max-age=90782
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Etag: "63eaf6a7-117"
Expires: Thu, 16 Feb 2023 03:50:06 GMT
Last-Modified: Tue, 14 Feb 2023 02:49:11 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 279
code.jquery.com/jquery-migrate-1.2.1.js
200 OK 5.8 kB URL HTTP/2 code.jquery.com/jquery-migrate-1.2.1.js
IP
Hash ab50f392b13415af57f9720f4d24e981
8bee0d6d15bc0bf62197f6a33493df7494bf42c2
3c7ae468bcd5eefaf92cfac278a5a998f871e0aaa190f87b0f56fd79f93d00b7
GET /jquery-migrate-1.2.1.js HTTP/1.1
Host: code.jquery.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:04 GMT
content-encoding: gzip
content-length: 5783
content-type: application/javascript; charset=utf-8
last-modified: Wed, 16 Feb 2022 10:50:39 GMT
accept-ranges: bytes
server: nginx
etag: W/"620cd6ff-40ed"
cache-control: max-age=315360000, public
access-control-allow-origin: *
vary: Accept-Encoding
x-hw: 1676428624.dop231.sk1.t,1676428624.cds202.sk1.hn,1676428624.cds216.sk1.c
X-Firefox-Spdy: h2
resources.blogblog.com/img/widgets/arrow_dropdown.gif
200 OK 141 B URL HTTP/2 resources.blogblog.com/img/widgets/arrow_dropdown.gif
IP
File type GIF image data, version 89a, 13 x 10\012- data
Hash 2964a07d60a4e76b299130fb1b4115f6
3b72dcc19f3ad685513eaba612e07e0ed495f2e1
28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 141
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Feb 2023 22:20:26 GMT
expires: Sun, 19 Feb 2023 22:20:26 GMT
cache-control: public, max-age=604800
last-modified: Sun, 12 Feb 2023 02:50:04 GMT
content-type: image/gif
age: 188198
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.11.0/jquery.min.js
IP
File type ASCII text, with very long lines (32341)
Hash 856f85cc1b07156fa844b44a10c236c2
7cef457c0e1cd0c20f4e699564ea8997f0332021
c61aa9ce7b32f93630abac1a4b27382f9333e0ff69477c9d9099070ae0742b01
GET /ajax/libs/jquery/1.11.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33576
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 19:26:10 GMT
expires: Tue, 13 Feb 2024 19:26:10 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 112254
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/s72-w640-c-h436/vlcsnap-2021-08-04-01h51m29s800.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/s72-w640-c-h436/vlcsnap-2021-08-04-01h51m29s800.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash a6b51008a3e2896756ad05135330e052
eb1d6b7a3a8178a27a8d7a1272f315d1f7fae707
1d293a794f5a8b26c0817ee7c0fd1d94453858352502d25900d3023f72059ae9
GET /-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/s72-w640-c-h436/vlcsnap-2021-08-04-01h51m29s800.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-08-04-01h51m29s800.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10044
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:33 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v1d2"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png
200 OK 11 kB URL HTTP/2 1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 80baaada1dc68f5c0fe36414836202e1
5f6a379de32628add55d52c25cf8eff6b3cf3d14
5f1c5c728b374689d47a6de7e3aa93c180e1da05c5132aefbd5d348f77458e6a
GET /-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-23h24m21s497.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-23h24m21s497.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10581
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Mon, 13 Feb 2023 19:53:48 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v16d"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 99974e025b0ae60d4719d25e2edb81b2
6454af410c78e67d0080ab695581b492b15bfab6
2f40bde8c4bb26bf206d391b6410cca93e37f4e1b670422c8ae86b7e1b0420ef
GET /-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-20-02h04m18s241.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-02h04m18s241.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12177
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Mon, 13 Feb 2023 19:53:48 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v16b"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png
200 OK 11 kB URL HTTP/2 1.bp.blogspot.com/-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 428b9ceb8745ad0b8bf5414c27be5bf8
51493ebd8a4ba62e2df7f94b32cb5112171c7d27
7d8dfb15dddc3fcaf9817b91eb4b0f64a44a4af0eae0bdfdccf42b7f4e37ff27
GET /-4kHGWz00KBE/YPeTdQc9pLI/AAAAAAAAAWw/nDzxA8L2ArITssmU2VtFkT-uZ8LJBkKFQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-23h24m21s497.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-23h24m21s497.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10576
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Thu, 16 Feb 2023 02:36:43 GMT
cache-control: public, max-age=86400, no-transform
etag: "v16d"
content-type: image/png
vary: Origin
age: 21
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash fdff16a8a6bd663ddc0aa74581928171
8470e410bcaac804ce06244324df44bdcb1fc6d2
761c3e0cf3861c8ae227fcce97af0c5751fd277cb9bdd312586215d1c87b2430
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6177
Cache-Control: max-age=118104
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Etag: "63eb5787-116"
Expires: Thu, 16 Feb 2023 11:25:28 GMT
Last-Modified: Tue, 14 Feb 2023 09:42:31 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 278
1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash dbb04ba9f4c0defafd6ebf402f96a2b3
1034d1c8802b5cf619c49b0561099cd9212e4e91
9df4acbf61d69cea926917a46afb71c9e48214af43cdbd5fa27424b165b567d9
GET /-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-07-21-21h38m03s939.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-21-21h38m03s939.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10212
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:34 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v17c"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c6bac9db2171b2063aa85ea730a7d72
b636698fa6971f1c0031e71daa10825addd94d13
e977ba10782e8ca041303e2103688f4781fbfe19b318875d9dda6193dcc95b4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 81a861ad34eebfde7b0fb8be89ae9a80
4e36dac83150fac2efa4cada5b72ae50fe7aa95c
f9dca744ee31eaffa8710d2e1863ce4ee0e0a206b0288b82a6631f4e424c561d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-06-25-23h16m17s736.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-06-25-23h16m17s736.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 2724f84a0b24be98a731060a28dad6ec
12d7aa75947bfcc3507bdd0994ffaeaaafe47d94
6a90115a34b7354363bc9f7ad539e942966a634f8377f473584b50df0451bf78
GET /-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-06-25-23h16m17s736.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-06-25-23h16m17s736.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12239
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:34 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "vab"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-06-25-23h16m17s736.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-06-25-23h16m17s736.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 7815c4493eb465a400071cbd35a53b33
7fbf1e2b19ec8a5dced7d42d6334e35aeb941f23
14ded73766c66aee214532dca2784cdeb330b313565d175f5a50e35daf8f4e8f
GET /-jos-M-nBtjk/YNalBooCfqI/AAAAAAAAAKo/qMcvDJ4DoHQe29o0h6A5SAqCpdm3Pf2fwCLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-06-25-23h16m17s736.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-06-25-23h16m17s736.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12231
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Mon, 13 Feb 2023 19:53:48 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "vab"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 414870511663b9d25d10400b9f05cbcc
25b19c276bdf6ef9d378f4745b7e142e23c4772c
4d0060581099e79ab9e30b2d7eb731d71b0c46cf44e52f1b4170c55fce7c9e6e
GET /-WKXkdw9PZFg/YPjMZwyM6tI/AAAAAAAAAXs/Ucb4lgF5SiQ02bLbfkbTmrr52Ycql4MMwCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-21-21h38m03s939.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-21-21h38m03s939.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 10259
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:33 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v17c"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-08-04-01h51m29s800.png
200 OK 10 kB URL HTTP/2 1.bp.blogspot.com/-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-08-04-01h51m29s800.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 503ef770afd9c59ba2438885347955d0
e1d80371fe40f73493e32387aed58d2ab312a6e6
de37ea271efcb4d0fb3de7fffb059ff5fd75c53f132cbdae1e9fd6723ca5675d
GET /-6KZ-YelKEw8/YQorwwFFR6I/AAAAAAAAAdE/U9g-zKpkQeUwd4qtJi270NLw68dp13LEACLcBGAsYHQ/w72-h72-p-k-no-nu/vlcsnap-2021-08-04-01h51m29s800.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-08-04-01h51m29s800.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 9987
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:34 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v1d2"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 20585ae3760ffcfec2734511e71cc063
47f1b72990954d46e45525c1097284e3aeef2ea9
7919b3160ca04150535d2328e4266efa6b5bd81a3a49bb9c28d348276a0fe1f7
GET /-82ifmmpiaEo/YPZoH1W1XyI/AAAAAAAAAWo/9SnWt6cZKC8cQ6i2aZy-ScpTpXhjDxjWgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-07-20-02h04m18s241.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-07-20-02h04m18s241.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 12197
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Thu, 16 Feb 2023 02:36:43 GMT
cache-control: public, max-age=86400, no-transform
etag: "v16b"
content-type: image/png
vary: Origin
age: 21
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c6bac9db2171b2063aa85ea730a7d72
b636698fa6971f1c0031e71daa10825addd94d13
e977ba10782e8ca041303e2103688f4781fbfe19b318875d9dda6193dcc95b4f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-GHCWzQnI-hI/YQtIRgFnzoI/AAAAAAAAAdo/8_8nZu0WI0sZp1ho9rzhv7CoZrze3AQqgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-04-22h08m41s117.png
200 OK 12 kB URL HTTP/2 1.bp.blogspot.com/-GHCWzQnI-hI/YQtIRgFnzoI/AAAAAAAAAdo/8_8nZu0WI0sZp1ho9rzhv7CoZrze3AQqgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-04-22h08m41s117.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 5d570631170034b36c0268b9bf75057a
acb59c2def29824488a6ae5b1e95976e0a86d807
e06bb3392702f0928a89f9b8b678dd72f12aef436ab14f4cd077738a5e0ae91b
GET /-GHCWzQnI-hI/YQtIRgFnzoI/AAAAAAAAAdo/8_8nZu0WI0sZp1ho9rzhv7CoZrze3AQqgCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-04-22h08m41s117.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-08-04-22h08m41s117.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11475
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Fri, 10 Feb 2023 16:12:34 GMT
cache-control: public, max-age=86400, no-transform
age: 21
etag: "v1db"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/-R-acPKq_Xrg/YQirXFeT5qI/AAAAAAAAAc8/s7gBhxLxLwsIIi77VFLGBJ6ddyQBiohkQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-02-22h34m42s762.png
200 OK 13 kB URL HTTP/2 1.bp.blogspot.com/-R-acPKq_Xrg/YQirXFeT5qI/AAAAAAAAAc8/s7gBhxLxLwsIIi77VFLGBJ6ddyQBiohkQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-02-22h34m42s762.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash d1c812736035577d3ba51a9511552a38
2a4c39bbbf67369ec0d9e35d8797a10ddd8b2a5d
2fd176628e6efa46326cc0c3c9e43f58de44a316c953a3f5fddeb5cb2984dd16
GET /-R-acPKq_Xrg/YQirXFeT5qI/AAAAAAAAAc8/s7gBhxLxLwsIIi77VFLGBJ6ddyQBiohkQCLcBGAsYHQ/s72-w640-c-h360/vlcsnap-2021-08-02-22h34m42s762.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="vlcsnap-2021-08-02-22h34m42s762.png"
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 13184
x-xss-protection: 0
date: Wed, 15 Feb 2023 02:36:43 GMT
expires: Thu, 16 Feb 2023 02:36:43 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1d0"
content-type: image/png
vary: Origin
age: 21
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee4ed4f567dcd71845e82cda6a27dd1f
b85e0a0201de4a90ad9247511584ed45bdb3266a
065c293b1ff1fd764585c40412160ec5439d1330745ce84d6d274dc94cb1d9ce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 43525454497eda55f3d13b92d7139aed
46429b37b5cc2ec9a2a4013089f9d053cbe4c422
1592aaf53511c3bc8148398111ed5ed8bee02b2a3ff3c9db7dc053b5a571c9c4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2553
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Last-Modified: Wed, 15 Feb 2023 01:54:31 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 279
fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2
200 OK 1.2 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2
IP
Hash e587cff82f871051c0764bfc2cfc2369
669c98a31e3d2182877538edb4154c1f4ef0fe7a
6ca703c7e4c2cb4abebedcc3134082d3dcb862d9c2a7a48cab60f9ffcfb0730a
GET /css?family=Open+Sans:300italic,400italic,700italic,400,700,300&subset=latin,cyrillic-ext&ver=3.9.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e4db11a6d0206c68a9274210d2120
ce389f25bc611015de3ea733b5a6c08ad13af6ae
1b78c7ffc08566a5bdd8638c50f92e8f5d77d5d398e938ff82b5e5bf7f08cb1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e4db11a6d0206c68a9274210d2120
ce389f25bc611015de3ea733b5a6c08ad13af6ae
1b78c7ffc08566a5bdd8638c50f92e8f5d77d5d398e938ff82b5e5bf7f08cb1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 46 kB URL HTTP/2 fonts.gstatic.com/s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 46524, version 1.0\012- data
Hash c1fd378f54921c75e4ae1821e7b8fff6
2ce96e97783b2f154d07f4464ca6f8eb2469f2c1
405ceee1c2f5c31f1cb94ebc63d49a43fddd1471c2c7401a01c7c11bb1d93826
GET /s/raleway/v28/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 46524
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 03:37:24 GMT
expires: Thu, 08 Feb 2024 03:37:24 GMT
cache-control: public, max-age=31536000
age: 601180
last-modified: Mon, 18 Jul 2022 19:58:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Feb 2023 13:09:06 GMT
expires: Wed, 14 Feb 2024 13:09:06 GMT
cache-control: public, max-age=31536000
age: 48478
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 13 Feb 2023 18:52:41 GMT
expires: Tue, 13 Feb 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 114263
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 10 Feb 2023 17:05:47 GMT
expires: Sat, 10 Feb 2024 17:05:47 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
age: 379877
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e4db11a6d0206c68a9274210d2120
ce389f25bc611015de3ea733b5a6c08ad13af6ae
1b78c7ffc08566a5bdd8638c50f92e8f5d77d5d398e938ff82b5e5bf7f08cb1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e4db11a6d0206c68a9274210d2120
ce389f25bc611015de3ea733b5a6c08ad13af6ae
1b78c7ffc08566a5bdd8638c50f92e8f5d77d5d398e938ff82b5e5bf7f08cb1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 4htFfkQhTphDAwLg948daQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: g5duBHVgiwyeGUvqV7uW7a9bO0A=
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Feb 2023 22:02:00 GMT
expires: Mon, 12 Feb 2024 22:02:00 GMT
cache-control: public, max-age=31536000
age: 189304
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Hash 3a44e06eb954b96aa043227f3534189d
23cef6993ddb2b2979e8e7647fc3763694e2ba7d
b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 07:51:59 GMT
expires: Thu, 08 Feb 2024 07:51:59 GMT
cache-control: public, max-age=31536000
age: 585905
last-modified: Wed, 11 May 2022 19:24:45 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
200 OK 36 kB URL HTTP/2 fonts.gstatic.com/s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 35764, version 1.0\012- data
Hash 60f23230f1a8d5c3b7d25b73f5b5ce23
ed08ada85d017893b9bcb8224e99154c6708f5d2
22b6cdc450204c1cb32b31e679d812fea1c17ac506a7b78daeb12bd0ab25fde8
GET /s/playfairdisplay/v30/nuFiD-vYSZviVYUb_rj3ij__anPXDTzYgA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35764
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 12 Feb 2023 18:29:15 GMT
expires: Mon, 12 Feb 2024 18:29:15 GMT
cache-control: public, max-age=31536000
age: 202069
last-modified: Mon, 18 Jul 2022 19:06:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bb1e4db11a6d0206c68a9274210d2120
ce389f25bc611015de3ea733b5a6c08ad13af6ae
1b78c7ffc08566a5bdd8638c50f92e8f5d77d5d398e938ff82b5e5bf7f08cb1f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.orwell.city/feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2
200 OK 21 kB URL HTTP/2 www.orwell.city/feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2
IP
File type Unicode text, UTF-8 text, with very long lines (65433)
Hash aca0210bb2cd7203abdbefeb17677b5b
509054d8fbaf2863bc91c6831b911f1f9110af74
f7233b78aef5ca13c4e2db65c1ad1d32379f5d53f430d04a916ae66854d563ee
GET /feeds/posts/default?max-results=8&orderby=published&alt=json-in-script&callback=showrecentposts2 HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"9eb2d0a4627ae0fca177dfc866940067b3c770e6edbc1ee76553f5918ca1ae71"
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Wed, 15 Feb 2023 02:37:05 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Mon, 14 Nov 2022 01:47:51 GMT
content-length: 21126
x-frame-options: SAMEORIGIN
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 14 Feb 2023 09:41:19 GMT
expires: Wed, 14 Feb 2024 09:41:19 GMT
cache-control: public, max-age=31536000
age: 60945
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 52a57a832cb4aa444c3bb2d338bcd2cb
632d36e2096c1a66ba6467c8e963fbe123123b7c
9cf42dc52cab1572d1a7175e13f5cf0f447c74d487a989dd52277c32c1b0138f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6376
Cache-Control: max-age=162238
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Etag: "63ec0326-1d7"
Expires: Thu, 16 Feb 2023 23:41:02 GMT
Last-Modified: Tue, 14 Feb 2023 21:54:46 GMT
Server: ECS (ska/F717)
X-Cache: HIT
Content-Length: 471
64.media.tumblr.com/3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png
200 OK 5.9 kB URL HTTP/2 64.media.tumblr.com/3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png
IP
File type PNG image data, 298 x 79, 8-bit/color RGBA, non-interlaced\012- data
Hash d1971fb87d786a43a4d258d1fe41d362
2bf7946f1c781b203b9bd60ee5849da66b3e4989
cd8aea32f911ec256e98934161d4107b62980447124a86cb9efb03ab7dc6586d
GET /3d1bff384558fc1ff8e5e0950cc0cbae/56960fb8bc1fc818-5c/s400x600/c73c651aeed2ff109b80ccfe3a8c43745b7e9ba3.png HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: image/png
content-length: 5903
last-modified: Sun, 30 May 2021 23:15:41 GMT
etag: "578b38d5d5f4dc7ef6d8f70246977d84-1498089600-00605cb"
content-disposition: inline; filename="tumblr_3d1bff384558fc1ff8e5e0950cc0cbae_c73c651a_400.png"
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: HIT arn 1
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=1.0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2dea84b056fe03cf91ce514618731475
5eaa44bbf7d4864cb50950e90c5832027fb8a18f
5f05224b4c2683bf0d1eca2b00cb5ace1f985e8dbc9f4b5461b0a21c2d8e2398
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
64.media.tumblr.com/e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg
200 OK 19 kB URL HTTP/2 64.media.tumblr.com/e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, orientation=upper-left], progressive, precision 8, 200x200, components 3\012- data
Hash eeec8f8d5e7913fa9ff61de8a87e8621
b33526480e6cb08a6c510e5e09e5b3225591738d
dfb312aaf1688e5444cd6643b67f1fb63941bef6da1a3c46bcdb8aaa26d4ae73
GET /e3cef3e1dcaedca1672ce709ee9c0400/56960fb8bc1fc818-12/s250x400/35e4d7ec3db79c62324c65ed22b757cdfcd1fd63.jpg HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: image/jpeg
content-length: 18616
last-modified: Sun, 30 May 2021 23:46:22 GMT
etag: "a779aeae5809fd14844e7d543e38174f-1498089600-00605cb"
content-disposition: inline; filename="tumblr_e3cef3e1dcaedca1672ce709ee9c0400_35e4d7ec_250.jpg"
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: HIT arn 8
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=HIT;dur=1.0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b2e61a08704c2834389aed5ef9e2c888
63db60f882da7e91c9571bfae12fada29788f62d
13fdc320a441928b811568278916138555e6bb075cf94ea45b77f215e8eeebd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
xn--r1a.website/s/orwellcity
200 OK 20 kB URL HTTP/1.1 xn--r1a.website/s/orwellcity
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1279)
Hash 9b161c19eb8150507d425ae64cf32eec
e6ab8d128b99b9adfbadf4f0f3f4ad1a47ae82de
62eb636336ad935191150bb9e36f1383003008c6f2d78212149377933fa073ad
Analyzer Verdict Alert fortinet Malware
GET /s/orwellcity HTTP/1.1
Host: xn--r1a.website
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 15 Feb 2023 02:37:04 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: stel_ssid=d9cc42b24746cd214b_1635187275249808225; expires=Thu, 16 Feb 2023 02:37:04 GMT; path=/; samesite=None; secure; HttpOnly
Pragma: no-cache
Cache-control: no-store
Strict-Transport-Security: max-age=35768000
Access-Control-Allow-Origin: *
Content-Encoding: gzip
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 23b94e09dd64cb077d89f0534a853947
352b4faedf8f34f42f087a72249c2171dda98fde
8121f00c89d9c987e3cd6ca3a42439f12fd29fe7dc12de7823127a32f367f7ee
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 49063a2064d7f1850d3f3d100b518a42
etag: "f1fb9db637d008f85ad08f7b4b6a0ab1"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 15 Feb 2023 02:40:29 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: I7lOCd1kywd9ifBTSoU5Rw==
x-fb-debug: 4lTYIVRnC3x+vVOrj9zGgzncHMTTmiAjo33aWrstf9ef0sMry8No08zWPKSj/YaSwuZgIT3D9oa9YMedKf/oSw==
content-length: 1685
x-fb-trip-id: 1679558926
date: Wed, 15 Feb 2023 02:37:04 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Wed, 15 Feb 2023 01:53:27 GMT
expires: Wed, 15 Feb 2023 03:53:27 GMT
cache-control: public, max-age=7200
age: 2617
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6768e8111d6b4b7eff11bc8ecb7c382
d1a322a3300d57aad0e2f60b7ed9a13638399dd1
02fd37be97e8ad6e055b5332d1c339e4dbb499f12676afe1af7184866e9f2f2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b2e61a08704c2834389aed5ef9e2c888
63db60f882da7e91c9571bfae12fada29788f62d
13fdc320a441928b811568278916138555e6bb075cf94ea45b77f215e8eeebd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b2e61a08704c2834389aed5ef9e2c888
63db60f882da7e91c9571bfae12fada29788f62d
13fdc320a441928b811568278916138555e6bb075cf94ea45b77f215e8eeebd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.globalsign.com/gseccovsslca2018
200 OK 939 B URL HTTP/1.1 ocsp.globalsign.com/gseccovsslca2018
IP
Hash d2f3c4a855ebd14df12606ba9b1b21d7
f37fca7b289eb0fffb848b91d26ca4743628e15d
4b01516dc3e0855c34dcede3efb6b7084dd493f8a94bbf9b21e546b225b1377f
POST /gseccovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 15 Feb 2023 02:37:04 GMT
Content-Type: application/ocsp-response
Content-Length: 939
Connection: keep-alive
Expires: Sat, 18 Feb 2023 22:54:57 GMT
ETag: "f37fca7b289eb0fffb848b91d26ca4743628e15d"
Last-Modified: Tue, 14 Feb 2023 22:54:58 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2273
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 799aa8da2dbeb500-OSL
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5102631316300045&host=ca-host-pub-1556223355139109
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-5102631316300045&host=ca-host-pub-1556223355139109
IP
File type ASCII text, with very long lines (3649)
Hash f206a46f14047e2b67adb87ba8820057
7be297906ef2e1c6c48cf142fe047e5527309309
4d41bb6ba157a09d4008ecac6d480e9f67e4c8e00df33bd4886a8659d3360bd9
GET /pagead/js/adsbygoogle.js?client=ca-pub-5102631316300045&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Wed, 15 Feb 2023 02:37:04 GMT
expires: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 16253847852144691231
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 49962
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j99&a=1521296344&t=pageview&_s=1&dl=https%3A%2F%2Fwww.orwell.city%2F&ul=en-us&de=UTF-8&dt=ORWELL%20CITY&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=488219734&gjid=254420722&cid=1561763952.1676428625&tid=UA-198902548-1&_gid=2105189242.1676428625&_r=1&_slc=1&z=1528047772
200 OK 3 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j99&a=1521296344&t=pageview&_s=1&dl=https%3A%2F%2Fwww.orwell.city%2F&ul=en-us&de=UTF-8&dt=ORWELL%20CITY&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=488219734&gjid=254420722&cid=1561763952.1676428625&tid=UA-198902548-1&_gid=2105189242.1676428625&_r=1&_slc=1&z=1528047772
IP
File type ASCII text, with no line terminators
Hash dec002daa3f9abe33f5ab1a61ba58e91
b286614a767c86a75059fb1d4557be706e7c3812
1cffc2b3146584685cd72751d7f28aa030ab9ae2f1bc78f2c27909f8d8287b26
POST /j/collect?v=1&_v=j99&a=1521296344&t=pageview&_s=1&dl=https%3A%2F%2Fwww.orwell.city%2F&ul=en-us&de=UTF-8&dt=ORWELL%20CITY&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=488219734&gjid=254420722&cid=1561763952.1676428625&tid=UA-198902548-1&_gid=2105189242.1676428625&_r=1&_slc=1&z=1528047772 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.orwell.city
date: Wed, 15 Feb 2023 02:37:05 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 3
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 52a57a832cb4aa444c3bb2d338bcd2cb
632d36e2096c1a66ba6467c8e963fbe123123b7c
9cf42dc52cab1572d1a7175e13f5cf0f447c74d487a989dd52277c32c1b0138f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5299
Cache-Control: max-age=161160
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Etag: "63ec0326-1d7"
Expires: Thu, 16 Feb 2023 23:23:05 GMT
Last-Modified: Tue, 14 Feb 2023 21:54:46 GMT
Server: ECS (ska/F705)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js?hash=e60cd05545b94c7ceac721b7a03524a7
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=e60cd05545b94c7ceac721b7a03524a7
IP
File type ASCII text, with very long lines (18530)
Hash fce9a3b382ab2af04312d4540865db0e
076fe675f44caaed16f8eb433ad25bcdba0a34bd
c7c6f9bef6de8baccc5245522cfad1e83f83fd809c6fd5be1c6a5268aa2f1071
GET /en_US/sdk.js?hash=e60cd05545b94c7ceac721b7a03524a7 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 09ef4410580fff3592ea03022c89390e
etag: "a16defbf5674e9ea595818a089da8df2"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 14 Feb 2024 22:30:08 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: /Omjs4KrKvBDEtRUCGXbDg==
x-fb-debug: lN2/MMFDpwvawcXqZ40HgwbpQ6+IVL/XlFI6fI8UMbAqVjWAfTeUy7VLLXqQj7nocxpn5nLW/cIHz9NdG61+Sg==
priority: u=3,i
content-length: 88486
x-fb-trip-id: 1679558926
date: Wed, 15 Feb 2023 02:37:05 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
mc.yandex.ru/metrika/tag.js
200 OK 74 kB URL HTTP/2 mc.yandex.ru/metrika/tag.js
IP
File type Unicode text, UTF-8 (with BOM) text, with very long lines (659)
Hash a236c7014c1f1a1e52d356f59e5d665a
b66c638eb2346287364c37725819bbab1f409d66
ad2d57579e453af0eac49156840bcd1dcfbd802a82135af98f41f714d7e698f2
GET /metrika/tag.js HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 73769
date: Wed, 15 Feb 2023 02:37:05 GMT
access-control-allow-origin: *
etag: "63e36f34-12029"
expires: Wed, 15 Feb 2023 03:37:05 GMT
last-modified: Wed, 08 Feb 2023 12:45:24 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: max-age=3600
content-type: application/javascript
content-encoding: br
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2dea84b056fe03cf91ce514618731475
5eaa44bbf7d4864cb50950e90c5832027fb8a18f
5f05224b4c2683bf0d1eca2b00cb5ace1f985e8dbc9f4b5461b0a21c2d8e2398
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6768e8111d6b4b7eff11bc8ecb7c382
d1a322a3300d57aad0e2f60b7ed9a13638399dd1
02fd37be97e8ad6e055b5332d1c339e4dbb499f12676afe1af7184866e9f2f2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/lEK-qJIHKYg
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/lEK-qJIHKYg
IP
Hash 6a7907e16adeeb75eaf4caf09a23019c
7154d6c84114ec58cb0aa76b5c010ef01a235970
fa795f5b657ab04754b17504992ef78413ce940ec08341ad2e2f1d363487bf53
POST /s/gts1d4/lEK-qJIHKYg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 03b08c24da2f529a8fb548adf25cb7f1
92702d492a2f8aa88d781c9eace056f4198e4c80
fbd686e58f9922f58c982371bf7a7be9f385399cb64c9fe9012e0dd046db0659
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 15 Feb 2023 02:37:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 14 Feb 2023 19:49:33 GMT
Expires: Wed, 15 Feb 2023 19:49:33 GMT
ETag: "92702d492a2f8aa88d781c9eace056f4198e4c80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 03b08c24da2f529a8fb548adf25cb7f1
92702d492a2f8aa88d781c9eace056f4198e4c80
fbd686e58f9922f58c982371bf7a7be9f385399cb64c9fe9012e0dd046db0659
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 15 Feb 2023 02:37:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 14 Feb 2023 19:49:33 GMT
Expires: Wed, 15 Feb 2023 19:49:33 GMT
ETag: "92702d492a2f8aa88d781c9eace056f4198e4c80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 03b08c24da2f529a8fb548adf25cb7f1
92702d492a2f8aa88d781c9eace056f4198e4c80
fbd686e58f9922f58c982371bf7a7be9f385399cb64c9fe9012e0dd046db0659
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 15 Feb 2023 02:37:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 14 Feb 2023 19:49:33 GMT
Expires: Wed, 15 Feb 2023 19:49:33 GMT
ETag: "92702d492a2f8aa88d781c9eace056f4198e4c80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 03b08c24da2f529a8fb548adf25cb7f1
92702d492a2f8aa88d781c9eace056f4198e4c80
fbd686e58f9922f58c982371bf7a7be9f385399cb64c9fe9012e0dd046db0659
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 15 Feb 2023 02:37:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 14 Feb 2023 19:49:33 GMT
Expires: Wed, 15 Feb 2023 19:49:33 GMT
ETag: "92702d492a2f8aa88d781c9eace056f4198e4c80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 03b08c24da2f529a8fb548adf25cb7f1
92702d492a2f8aa88d781c9eace056f4198e4c80
fbd686e58f9922f58c982371bf7a7be9f385399cb64c9fe9012e0dd046db0659
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Wed, 15 Feb 2023 02:37:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19036
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Tue, 14 Feb 2023 19:49:33 GMT
Expires: Wed, 15 Feb 2023 19:49:33 GMT
ETag: "92702d492a2f8aa88d781c9eace056f4198e4c80"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
cdn1.telegram-cdn.org/file/Hroq8cABbQ3NEBuUYzdGtYLaX8PRk7MlF2WHl01eBb2G2xFqaWHoeh2VeZl18boqO6nI4zSRiBLBZGseJM8csq62Cj26Wt78D_sn9Aht_ORd3jN0B_Bpv7KqoNCEqHI8DJ9LJxWIYYD7_ie0Hg0nClPyO2I7gvyngRsM22BSkR4BVZ1Oj77h8QhjmoMP0P0JrBkY9Er6C6-_dGkwD_Ptw2TR0PnbNmMA9tZ7RVrEMsdfAcT7zNPpszdnLvAW4qdiHyuGBrH9YV1PaM7Jid_zTmUltviVU3HrjZlQMrAg9wlytdQOjRKtpjFrOH43Vict42MJ233NWu0N0M5jQ9JO7g.jpg
200 OK 3.6 kB URL HTTP/2 cdn1.telegram-cdn.org/file/Hroq8cABbQ3NEBuUYzdGtYLaX8PRk7MlF2WHl01eBb2G2xFqaWHoeh2VeZl18boqO6nI4zSRiBLBZGseJM8csq62Cj26Wt78D_sn9Aht_ORd3jN0B_Bpv7KqoNCEqHI8DJ9LJxWIYYD7_ie0Hg0nClPyO2I7gvyngRsM22BSkR4BVZ1Oj77h8QhjmoMP0P0JrBkY9Er6C6-_dGkwD_Ptw2TR0PnbNmMA9tZ7RVrEMsdfAcT7zNPpszdnLvAW4qdiHyuGBrH9YV1PaM7Jid_zTmUltviVU3HrjZlQMrAg9wlytdQOjRKtpjFrOH43Vict42MJ233NWu0N0M5jQ9JO7g.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3\012- data
Hash a7a14378afb6b9d14930120eac955899
fa545fb9f335887b42c13cbb125e69614ea77f26
8ffb952c3b27b1863447660cd649955c2ee8755c5ed99ad4e63d42ffb07036c7
GET /file/Hroq8cABbQ3NEBuUYzdGtYLaX8PRk7MlF2WHl01eBb2G2xFqaWHoeh2VeZl18boqO6nI4zSRiBLBZGseJM8csq62Cj26Wt78D_sn9Aht_ORd3jN0B_Bpv7KqoNCEqHI8DJ9LJxWIYYD7_ie0Hg0nClPyO2I7gvyngRsM22BSkR4BVZ1Oj77h8QhjmoMP0P0JrBkY9Er6C6-_dGkwD_Ptw2TR0PnbNmMA9tZ7RVrEMsdfAcT7zNPpszdnLvAW4qdiHyuGBrH9YV1PaM7Jid_zTmUltviVU3HrjZlQMrAg9wlytdQOjRKtpjFrOH43Vict42MJ233NWu0N0M5jQ9JO7g.jpg HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: image/jpeg
content-length: 3582
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes, bytes
cache-control: public,max-age=7200
etag: "45d69f14f19aefff8932fc9a46ffc5bc76bb5e4d"
strict-transport-security: max-age=31536000; includeSubDomains; preload
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b2e61a08704c2834389aed5ef9e2c888
63db60f882da7e91c9571bfae12fada29788f62d
13fdc320a441928b811568278916138555e6bb075cf94ea45b77f215e8eeebd1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/s/gts1d4/lEK-qJIHKYg
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1d4/lEK-qJIHKYg
IP
Hash 6a7907e16adeeb75eaf4caf09a23019c
7154d6c84114ec58cb0aa76b5c010ef01a235970
fa795f5b657ab04754b17504992ef78413ce940ec08341ad2e2f1d363487bf53
POST /s/gts1d4/lEK-qJIHKYg HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/a/AVvXsEgfJxV77k_buc7Kj2HGvnp4kZzoHIpw1TNySvaSEPXBtGgMIq0yVp9a8zQ8PatazVx9B61ToibtkPCs3siAXeCrmRgPZrkKJJgGgFA824t82j8mC6-iDeedsNeeZ1iMFsc-ROU50yFpElNekE-HXJ8RiRp9qDS64LNaOgEnipqMnuhLIhok1BjGT8axag=w72-h72-p-k-no-nu
200 OK 7.8 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEgfJxV77k_buc7Kj2HGvnp4kZzoHIpw1TNySvaSEPXBtGgMIq0yVp9a8zQ8PatazVx9B61ToibtkPCs3siAXeCrmRgPZrkKJJgGgFA824t82j8mC6-iDeedsNeeZ1iMFsc-ROU50yFpElNekE-HXJ8RiRp9qDS64LNaOgEnipqMnuhLIhok1BjGT8axag=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 15c5aa9efe17a4629786c9dfab988d42
b9d5e64734ebbeb29dfe10fba052d3dcd1e9ddc9
091ca704c0bb9b1eb723a16c74059ef59a60a658483cdb769b750adeeabff93f
GET /img/a/AVvXsEgfJxV77k_buc7Kj2HGvnp4kZzoHIpw1TNySvaSEPXBtGgMIq0yVp9a8zQ8PatazVx9B61ToibtkPCs3siAXeCrmRgPZrkKJJgGgFA824t82j8mC6-iDeedsNeeZ1iMFsc-ROU50yFpElNekE-HXJ8RiRp9qDS64LNaOgEnipqMnuhLIhok1BjGT8axag=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7ff"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-01-27-04h07m44s465.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 7758
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000
200 OK 9.2 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000
IP
File type PNG image data, 200 x 59, 8-bit/color RGB, non-interlaced\012- data
Hash 43153ed3053dabee236f766048b87af2
4a6b176fa2e088420d199afb0d86819fa725e246
1256d699a722d7bb7a5ba1c569b39c086ff49f604d872a737a7a9abc95cd9729
GET /img/a/AVvXsEi_htYtlOXV4h0CwMpGWy2uhH2QWAWXfTKRUDOP_8UwHgYTX9wVfjTuXA-ODLhV6B3Rsh2J14qwyshoH8vyu9kjSIGu-XD8KA6UC1wQlxgkFONcIsbGDgFPMqx4d7JWmWOE3o6EXZnM40X2A2G-mLE7r5Zfz_jaomjAdqocMrv0LvfJVJBkzpQyw2j2Zg=s16000 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v904"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Donate.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 9243
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
302 Found 43 B URL HTTP/2 mc.yandex.ru/watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
GET /watch/80600038?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)fip(1)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
location: /watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
date: Wed, 15 Feb 2023 02:37:05 GMT
access-control-allow-origin: https://www.orwell.city
set-cookie: yabs-sid=1090800781676428625; Path=/; SameSite=None; Secure
i=osXU7meOpdBXjzAnzl5dWdFLHK4narNEHHtDVb3Z4isbIk0ZZl9vtBuxwzqHtct1caks8B7GcZER6ieN5QHT6rtnOwk=; Expires=Sat, 12-Feb-2033 02:37:02 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None
yandexuid=3396800941676428625; Expires=Thu, 15-Feb-2024 02:37:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
yuidss=3396800941676428625; Expires=Thu, 15-Feb-2024 02:37:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
ymex=1707964625.yc.1676428625#1707964625.yrts.1676428625#1707964625.yrtsi.1676428625; Expires=Thu, 15-Feb-2024 02:37:05 GMT; Domain=.yandex.ru; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:05 GMT
last-modified: Wed, 15-Feb-2023 02:37:05 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
www.orwell.city/favicon.ico
200 OK 337 B URL HTTP/2 www.orwell.city/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 7e0d8fd3fb0a055398ee2d4ecebd771a
a91d8a8d155cb9e9048bb090d964fe26eb33fde8
d438c8dcbd349d1283a9230943de692899d80f43573d822743d5a05c8ccdf225
GET /favicon.ico HTTP/1.1
Host: www.orwell.city
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
content-type: image/x-icon
expires: Wed, 15 Feb 2023 02:37:05 GMT
date: Wed, 15 Feb 2023 02:37:05 GMT
cache-control: private, max-age=86400
last-modified: Mon, 14 Nov 2022 01:47:51 GMT
etag: W/"fda980042324af58e592c2cc1facf0017fb2badcd95f4fe50c4e5da93d2642e1"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 337
server: GSE
X-Firefox-Spdy: h2
mc.yandex.ru/watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
200 OK 407 B URL HTTP/2 mc.yandex.ru/watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29
IP
File type JSON data\012- , ASCII text, with very long lines (407), with no line terminators
Hash 16f7abec5d8b1227f80566ace2982fbc
ebc23990fbf83d1cecd7000bef6e332c91d26902
7a850d45a05a1635653f229bfa4c897b5f23f82c15cc7dee7aa7fd04c83a4f1e
GET /watch/80600038/1?wmode=7&page-url=https%3A%2F%2Fwww.orwell.city%2F&charset=utf-8&browser-info=pv%3A1%3Avf%3Asm0eap24hzlr84c06sesn%3Afp%3A1333%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A960%3Acn%3A1%3Adp%3A0%3Als%3A584939899136%3Ahid%3A62862071%3Az%3A0%3Ai%3A20230215023705%3Aet%3A1676428625%3Ac%3A1%3Arn%3A528284283%3Arqn%3A1%3Au%3A1676428625539003984%3Aw%3A1268x939%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A0%2C125%2C181%2C0%2C391%2C0%2C%2C964%2C68%2C%2C%2C%2C1693%3Aco%3A0%3Ans%3A1676428622976%3Afip%3Aa81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-a81f3b9bcdd80a361c14af38dc09b309-4bd84c89c35a312599d807af285e7b5f-4335742423629acc806791d3e9f585f3-5b56a9f28e63b1a76c5f94a136cc484e-61b9878bbce18de73aafc8582a198c0c-e9c964637c807fcca817e718cc2d1338-a81f3b9bcdd80a361c14af38dc09b309-c6d7b47b2dcff33f80cab17f3a360d0b-2facd2c41a0047c68391f933b930bc3a%3Arqnl%3A1%3Ast%3A1676428625%3At%3AORWELL%20CITY&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29fip%281%29ti%282%29 HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Referer: https://www.orwell.city/
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 407
date: Wed, 15 Feb 2023 02:37:05 GMT
x-content-type-options: nosniff
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:05 GMT
last-modified: Wed, 15-Feb-2023 02:37:05 GMT
accept-ch: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: application/json; charset=utf-8
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiu7hS6eEW5vwdAh8fJyrc8cDX6E-jZlV1gD8IlxELo3ryPDxxNpYf2n9Q6y1XKETNnnazeHgZJWIhkwgidvg62i6qo-jvutXgL9TL-uHwrDcvxH46WFNo5xeMIq1qMcFuK2Ma2j5jYrpDkXDEQmevekPlQdZT0GPQPJ2Vrlt11xEtG-yw_00ZaT7mwLQ=w640-h360
200 OK 259 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiu7hS6eEW5vwdAh8fJyrc8cDX6E-jZlV1gD8IlxELo3ryPDxxNpYf2n9Q6y1XKETNnnazeHgZJWIhkwgidvg62i6qo-jvutXgL9TL-uHwrDcvxH46WFNo5xeMIq1qMcFuK2Ma2j5jYrpDkXDEQmevekPlQdZT0GPQPJ2Vrlt11xEtG-yw_00ZaT7mwLQ=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 259 kB (259360 bytes)
Hash 02a1843236d5ab5b3f6cff1b68326f0a
d5c3435e465d8cf18df450252911dde1b9ab1b95
394341771afa21d4e69f171e80e217e02ed7fd48c33e0b3c966bd1bc0b9adf45
GET /img/a/AVvXsEiu7hS6eEW5vwdAh8fJyrc8cDX6E-jZlV1gD8IlxELo3ryPDxxNpYf2n9Q6y1XKETNnnazeHgZJWIhkwgidvg62i6qo-jvutXgL9TL-uHwrDcvxH46WFNo5xeMIq1qMcFuK2Ma2j5jYrpDkXDEQmevekPlQdZT0GPQPJ2Vrlt11xEtG-yw_00ZaT7mwLQ=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v963"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-08-03h21m15s517.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 259360
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360
200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 118 kB (117732 bytes)
Hash dcbffe6fd7511b72518d6fc10549ec7e
bf98ef9e2544226901730249d798209e363b6301
31edaf82c09fe7ef7a479e8d27a6cf735256bae5526dd1ede2b900ff490abddd
GET /img/a/AVvXsEiCO7ePZDpovOxynaTsp2VFQZil6lrJjB2nbtOCuMYJ33SU0kmgrubbAfbtAVeOPH-KEklVGS9MZFFEerZV_9ZLhNyEVIkwobZ5Sr2kn00ndIqUrneHBwziAHKf7nWM_ZSgV66HhK4RLUWPPekQhtJmyNJp1hTRJQfpT69S7S5kzNa2CYRSmwjGptSBWA=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97b"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-15-00h43m28s638.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 117732
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360
200 OK 118 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 118 kB (118270 bytes)
Hash 95e17c86b4161530f5c55cb6e5f73a5a
589cc80404327b832ca89089349445c9676e964f
e213ade9d92ce6e975ce5888c745417293c9fdcc6b4581ca6a094d9de525d102
GET /img/a/AVvXsEiI8Fm08jNfoNibJzS8d_Fl2q04PVz39d5BuuhHdlFyFZz83ag82MOzoMsbM3f5u39xU7nfTaQ_2SQh3uDZGcNQoqVQYEEN5x4m9nNpiN0OBm_H1P6QIi8ukfC5B-kZHSFof6fya2C6X5NcE9YstMV_9peRIVBgpyRlho5nRovAUpREnp3izTjJy8FBtw=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v977"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-10-00h39m55s409.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 118270
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEifjIL8hmXGkATBHaGZrk6YZI4BOnPGNSqZwxaCpQkJz1_y_S0alDc_IPq_eHypgsA1NrLESIvd3Fwvbt-QJV6NIMdDRF8csCnyooHkQxv-5wYva0CJCCYRt_zNRWHz3C6o4ueWhpc6XKjGdYrhhvDHiTFCJpH0LPnpJY1rOjNU1-Ra6f7PyTuwhb3WQA=w640-h362
200 OK 119 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEifjIL8hmXGkATBHaGZrk6YZI4BOnPGNSqZwxaCpQkJz1_y_S0alDc_IPq_eHypgsA1NrLESIvd3Fwvbt-QJV6NIMdDRF8csCnyooHkQxv-5wYva0CJCCYRt_zNRWHz3C6o4ueWhpc6XKjGdYrhhvDHiTFCJpH0LPnpJY1rOjNU1-Ra6f7PyTuwhb3WQA=w640-h362
IP
File type PNG image data, 640 x 361, 8-bit/color RGB, non-interlaced\012- data
Size 119 kB (119121 bytes)
Hash d8bfd5af73541bcf24c1f0c90735eaf3
b17e8b59668ff69c41bbf2aa8b97eef66c681844
452aa766c06cc725fdf6c2475dd8da2b73f093cfeb3b63cfcc6f2851f89783d4
GET /img/a/AVvXsEifjIL8hmXGkATBHaGZrk6YZI4BOnPGNSqZwxaCpQkJz1_y_S0alDc_IPq_eHypgsA1NrLESIvd3Fwvbt-QJV6NIMdDRF8csCnyooHkQxv-5wYva0CJCCYRt_zNRWHz3C6o4ueWhpc6XKjGdYrhhvDHiTFCJpH0LPnpJY1rOjNU1-Ra6f7PyTuwhb3WQA=w640-h362 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v961"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-06-03h59m09s876.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 119121
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360
200 OK 241 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 241 kB (240952 bytes)
Hash d90e7e5821df23d127592a15e5723b5a
4b740bff3a1dc9d60d15892e687328195bb778a7
6b56a33f81cef96af4f2a7ab7d91cf886e4e0d7b0d8cb36876a6e46c519c68b2
GET /img/a/AVvXsEhsuOhftlDZFDxUXsFnhu2QqpD81u2uP88x9dSTupRQzIqybAl20KRbNnOfs3t9GNJy7cCqbrhqCS2fOhXR7tzLa6rrdBXji2RdVJVCK5dHvXtWVF4E6KpgOpZTpo_p_rEmrhDKoef70exxMu5vrCNHV53X92Wd-isXEFrXqQTq_en3k1cyaPQ-DPLq4A=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v410"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-11-12-06h37m55s133.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 240952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360
200 OK 327 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 327 kB (326658 bytes)
Hash 0a438ce86e7a41df2b90a5b9186f73fb
88b78ef4d511114a8e23aaed2ded6dd8bceba9d0
f960d4c6521e09cc200421162ce62ab06409056b91885ebd0c37f12b9e36bf96
GET /img/a/AVvXsEgHimv7S1ouV7lmimbuFuVYG46wvc3d5RWHI4_lAdnTNddFy0Mlv17_8WwGEoVZ5CaWcIpI0RrhF_9ZsZpBvLdDimiNgJD7CHBJ9ot3I3XS2DsFJ7KdPYTBR4l9PAuhsLB1QEp6Id9MPeyyvVRs_Ju4ei8nCq9gFlBWkRP6KV3lDuTyxbILXEIkrBVD3g=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v979"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-13-00h14m03s621.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 326658
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8b36bc34918c60930807ff9c9db0ded5
bae57528671e054630c3754ea6c1c6e427080b7e
113d32181868bd7878fd4f737992c6048739d3fe6c5a559049940899f0508b60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu
200 OK 7.4 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash faeaf9aa023817478df3399b95487188
f92d9131ead1e4943d111d35e72740ecabf12a9c
357fdf306363ef902c237054ac0978ce2a8b7248153d393d764bed38aa801a99
GET /img/a/AVvXsEiQSwPNYyunGumyN3AnY6djWU_IoS1uB_6sznjPNqH68cLN5F15x0s75rmptr04Dh0DAwgxAUpYauzqF4usV2kaO43dFzhuswLANVhX0ZKckOyxqHPhF51jrgx163gzMlEe6LSFIw9Wdy3Qiteueuc-lB1Ew_U5l52l9F9LRKfrv69tMHhXdlrIdEvxpA=w72-h72-p-k-no-nu HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v454"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2021-12-12-04h15m26s597.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 7413
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png
200 OK 370 kB URL HTTP/2 blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 370 kB (370161 bytes)
Hash bc5103dc9e5c146ad4314f459d0909a1
80a8a19ca762b683d7207eff23b575e15dd9f096
877a85eada7696e8fda215324f50b22d9e5bf2a960890a36c55d00cf15f990a2
GET /img/b/R29vZ2xl/AVvXsEh8ukvF9fASUv1ODnmEim8YG0nXVD14L9q43ihgy3yeWTG0ILG__hGTRmBB-sL8nuXw3p12Vwq83VFX68F5PKvWZTBQ5NWuFUKZeSlhRR7ETUQK1SLWSXJ3MOzOoLQS3Hk3mVoHqX0pEglj84E48gvyK0-mQ0chfHznJY8Keai7aZC4EhCf0s3EwC5wig/w640-h360/vlcsnap-2022-03-18-20h31m59s088.png HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v983"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-18-20h31m59s088.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 370161
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
partner.googleadservices.com/gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045
200 OK 251 B URL HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045
IP
File type ASCII text, with very long lines (389), with no line terminators
Hash 00e46f63304f5da072bf5c4375f58835
a6a95086a071c2b8eedda66ef89e392c3e3cb6ec
f06a4f3bca35ebe7d561fe9af4763ff1ef0f1b3f8bf6447087e9f7c80dd7ae22
GET /gampad/cookie.js?domain=www.orwell.city&callback=_gfp_s_&client=ca-pub-5102631316300045 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 15 Feb 2023 02:37:05 GMT
server: cafe
cache-control: private
content-length: 251
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/F09F9189F09F8FBB.png
200 OK 1.4 kB URL HTTP/2 telegram.org/img/emoji/40/F09F9189F09F8FBB.png
IP
ASN #62041 Telegram Messenger Inc
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash b3209d511bfa7925a7ed172ce478cb7d
0159ccce6e29239e89e44c3a4f7c1c2990138f85
dce1d2885b0d564724b04ce9fbfb23c9f9d1f2c970f9aa092518974134ad76a3
GET /img/emoji/40/F09F9189F09F8FBB.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: image/png
content-length: 1416
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-588"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12561503&u1=B2AAE042F76F4F07CB8B4C46F9FE29E4&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/&t=ORWELL%20CITY&invisible=1&sc_rum_e_s=2083&sc_rum_e_e=2090&sc_rum_f_s=0&sc_rum_f_e=2063&get_config=true
200 OK 652 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12561503&u1=B2AAE042F76F4F07CB8B4C46F9FE29E4&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/&t=ORWELL%20CITY&invisible=1&sc_rum_e_s=2083&sc_rum_e_e=2090&sc_rum_f_s=0&sc_rum_f_e=2063&get_config=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6feab6f9a257d96309ae7077277dd97c
78693899c5d1366aca59e5e7739cf4d54a691bbc
2d4e6cf6dca6ff3607d65eaa1fcdf972e39fd7aa71d01b53390cf4be32fcc7eb
GET /t.php?sc_project=12561503&u1=B2AAE042F76F4F07CB8B4C46F9FE29E4&java=1&security=f05ba710&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.orwell.city/&t=ORWELL%20CITY&invisible=1&sc_rum_e_s=2083&sc_rum_e_e=2090&sc_rum_f_s=0&sc_rum_f_e=2063&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12561503.1676428625.0; SameSite=None; Secure; Expires=Sunday, 13-Feb-2028 23:37:05 -03; Path=/; Domain=.statcounter.com
is_visitor_unique=1676428625302735029; SameSite=None; Secure; Expires=Thursday, 13-Feb-2025 23:37:05 -03; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 799aa8db98e00afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
telegram.org/img/emoji/40/E280BC.png
200 OK 1.2 kB URL HTTP/2 telegram.org/img/emoji/40/E280BC.png
IP
ASN #62041 Telegram Messenger Inc
File type PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced\012- data
Hash 663785dbb514c6131a634a1521563d34
411dc515ad6c998c63046123e2c130f27710cb72
4a003dc58f3e95a18e44712b9161181319e6a40613242cbcac158f6dc8d7339d
GET /img/emoji/40/E280BC.png HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: image/png
content-length: 1190
last-modified: Fri, 01 Nov 2019 00:04:50 GMT
etag: "5dbb76a2-4a6"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 29a7a34fc894553ff324f97441fdaaeb
00357179dbfc4b0608c7d972e203007687378b7e
dc8608bacd61ca8f8eb8c315b7ea3ccb3e1e988177b8a22026e96b100019431b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 16f6de27455c5b63adbedb4723dfaf0b
4f7ba412760e56c23efdf2fba19c26382c13a948
56d77096cf28d083a903491dbee2a7ad0877510ab78c74cd3b0eefe9bbe8643e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
telegram.org/css/telegram-web.css?37
200 OK 16 kB URL HTTP/2 telegram.org/css/telegram-web.css?37
IP
ASN #62041 Telegram Messenger Inc
Hash 510505b837281c4bc42d23dba59f81c0
8b36fe7f6afdcc945b92732afc2b6176ff416f5e
2f980a481cdab53d1cabcfb71966e603e871a15d7b894d00cb61996be5708a81
GET /css/telegram-web.css?37 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: text/css
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-6b31"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
200 OK 11 kB URL HTTP/2 telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
ASN #62041 Telegram Messenger Inc
File type Web Open Font Format (Version 2), TrueType, length 11028, version 1.0\012- data
Hash 1f6d3cf6d38f25d83d95f5a800b8cac3
279f300ca2cbbdf9f5036ef2f438607fbf377daa
796de064b8d80eba7ccacb8ba67d77fdbcdf4b385c844645d452c24537b3108f
GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/octet-stream
content-length: 11028
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b14"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
200 OK 11 kB URL HTTP/2 telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
IP
ASN #62041 Telegram Messenger Inc
File type Web Open Font Format (Version 2), TrueType, length 11072, version 1.0\012- data
Hash e7df3d0942815909add8f9d0c40d00d9
cf5032eea3399a58870e8a05e629b006a8c7c3c7
bce2f309470952b7affa62ff4d91b454334c68cefa541429b502904d20696875
GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://xn--r1a.website
Connection: keep-alive
Referer: https://telegram.org/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/octet-stream
content-length: 11072
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: "63512b7d-2b40"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
adservice.google.com/adsid/integrator.js?domain=www.orwell.city
200 OK 100 B URL HTTP/2 adservice.google.com/adsid/integrator.js?domain=www.orwell.city
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.orwell.city HTTP/1.1
Host: adservice.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 15 Feb 2023 02:37:05 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8b36bc34918c60930807ff9c9db0ded5
bae57528671e054630c3754ea6c1c6e427080b7e
113d32181868bd7878fd4f737992c6048739d3fe6c5a559049940899f0508b60
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
adservice.google.no/adsid/integrator.js?domain=www.orwell.city
200 OK 100 B URL HTTP/2 adservice.google.no/adsid/integrator.js?domain=www.orwell.city
IP
File type ASCII text, with no line terminators
Hash 917951a58be8c6c6f3680159550ba3c2
21cd25c2a4eb9ec7e0f37021ce7b69e852dab4b4
cd8c45d9a0d98ca2e23d967483ec538bcafa246afdcf434bf60c8257acfacfac
GET /adsid/integrator.js?domain=www.orwell.city HTTP/1.1
Host: adservice.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
cache-control: private, no-cache, no-store
content-type: application/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Wed, 15 Feb 2023 02:37:05 GMT
server: cafe
content-length: 100
x-xss-protection: 0
alt-svc: h3="googleads.g.doubleclick.net:443"; ma=2592000,h3=":443"; ma=2592000,h3-29="googleads.g.doubleclick.net:443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360
200 OK 425 kB URL HTTP/2 blogger.googleusercontent.com/img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360
IP
File type PNG image data, 640 x 360, 8-bit/color RGB, non-interlaced\012- data
Size 425 kB (424596 bytes)
Hash 0497a092c7bb80d318781d4d7ebb3ca8
48e8abe8540bba82f07b4c8ad1ebc2ad407b3a7b
e26500c8f8c8fadb38d78b3d33e96d7a2f5599b61b6e3451832a827c36a3ed45
GET /img/a/AVvXsEhDIx0shoh9IkpS6HSYxUkltCNpSdQJtc4zZLQCmi493rfP2IH_YkODoypLv61EOypQON7KCQN3GGPqLeZdnhA6A8mKPTTLUjpysxG3Sx97G_2OnD5gHe45PK6ipFEmUbTkBVl3_mwYfCjGvMYaAmK2MParm1yCv2tj5vhIA3pnysERpDgRyU-F8NCBSQ=w640-h360 HTTP/1.1
Host: blogger.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97d"
expires: Thu, 16 Feb 2023 02:37:05 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="vlcsnap-2022-03-17-01h36m18s515.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 15 Feb 2023 02:37:05 GMT
server: fife
content-length: 424596
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 557678ff401326da1fe82a91ad545a3b
34553ffe009c6bece95cc88502bf95285ac0455e
8926c16f4032de5e1748e24d46a35db17b26f63524dfb1c2baafd84999fe4cc8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f48f404b096233d450cf335d9f40f24e
18ce733026e09526ffba5f79822902bffcbbd4e1
547f22d026f56991f3b61db25c1331a88a3728276bed76b89619cb738c195547
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:05 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c9333ebd8634e6b287e0b58265edf328
6ea57e1529609f015e198c72d2455c758f5b45ab
6bc07733856e4fbefbb42e5ad6423539ccbc855c66cf4279bf515997ea8933d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11601
Expires: Wed, 15 Feb 2023 05:50:27 GMT
Date: Wed, 15 Feb 2023 02:37:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c9333ebd8634e6b287e0b58265edf328
6ea57e1529609f015e198c72d2455c758f5b45ab
6bc07733856e4fbefbb42e5ad6423539ccbc855c66cf4279bf515997ea8933d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11601
Expires: Wed, 15 Feb 2023 05:50:27 GMT
Date: Wed, 15 Feb 2023 02:37:06 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c9333ebd8634e6b287e0b58265edf328
6ea57e1529609f015e198c72d2455c758f5b45ab
6bc07733856e4fbefbb42e5ad6423539ccbc855c66cf4279bf515997ea8933d2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6BC07733856E4FBEFBB42E5AD6423539CCBC855C66CF4279BF515997EA8933D2"
Last-Modified: Tue, 14 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11601
Expires: Wed, 15 Feb 2023 05:50:27 GMT
Date: Wed, 15 Feb 2023 02:37:06 GMT
Connection: keep-alive
telegram.org/js/widget-frame.js?60
200 OK 26 kB URL HTTP/2 telegram.org/js/widget-frame.js?60
IP
ASN #62041 Telegram Messenger Inc
Hash f94dbc310fbdd2a705477e9c2dfb9047
3e1ddecaa0151e9eaf3967fdd648cc0dbd35a188
b338dfb9a032edcff8717cc668ae7853d601a6a60904104095c3c1130346d85d
GET /js/widget-frame.js?60 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Sat, 08 Oct 2022 23:46:30 GMT
etag: W/"63420bd6-16c85"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3378718-9a33-4244-b271-cfcdef31432a.jpeg
200 OK 5.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3378718-9a33-4244-b271-cfcdef31432a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d2057397a167fb65e7d1e34d431adba4
7b991a089ddfe5c69ec823813c3a54a69d37438b
e738c7829e100e4bd7a2e3a711fbe47a946c1d8f448f2a4839571240a14b1949
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa3378718-9a33-4244-b271-cfcdef31432a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5688
x-amzn-requestid: d392b8d7-fab2-4c90-b457-77eb4b1c6a5e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AJ4A-HzvIAMFw-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e706d2-6bd21e383ad96cfc6b02809e;Sampled=0
x-amzn-remapped-date: Sat, 11 Feb 2023 03:09:06 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lk7RsDGL_6yBju_OIQE8lqYWmQ_lTAnhIEQn9dWIj0pfs1KnVFvYIA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 14 Feb 2023 22:13:37 GMT
age: 15809
etag: "7b991a089ddfe5c69ec823813c3a54a69d37438b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56a719d6-9ca0-4fce-8cf9-926def886b0b.jpeg
200 OK 5.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56a719d6-9ca0-4fce-8cf9-926def886b0b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 19114ad40978f16492b9b43dcee7349e
2f3e9ef206d557873054e0113d2bbe30df8785be
20ea09e55bbbdfd842416b4ecd7ab87eecd64d8e7aceaf8047b4a4a894fde815
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F56a719d6-9ca0-4fce-8cf9-926def886b0b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5924
x-amzn-requestid: 3e920b3a-a3c5-4278-b235-14905ad574c2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f-shmH4eoAMFcoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e28e0a-6290b3e4711b406e69407ad5;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 17:44:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PNPLahgBq_mQDcHxjnqOlDO67suruxcNIamy2fV2a8CZFH18bHRMRA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 14 Feb 2023 22:10:33 GMT
age: 15993
etag: "2f3e9ef206d557873054e0113d2bbe30df8785be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231f4f33-ceca-4a48-817a-3eaabd540fd5.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231f4f33-ceca-4a48-817a-3eaabd540fd5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d36e15febd05762c8857bbe3da466e14
39dfeafd9fad2a99285d0cdf57eee7d315261cef
4d7c06ac1072162fc88b4a79be018af34eb4a558c8e29ccc11374f2367233245
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F231f4f33-ceca-4a48-817a-3eaabd540fd5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8026
x-amzn-requestid: e2b4f266-484d-4e7a-bcf9-343cf9d35c06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANLUiFc1oAMFVAw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e858e9-39d5257e0447fe66622f2387;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 03:11:37 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: J3CO3CYxmSVDDz-UR71VL4VBQOucquive-Ss9A198TZNP2MQywTNrA==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 15 Feb 2023 02:27:20 GMT
age: 586
etag: "39dfeafd9fad2a99285d0cdf57eee7d315261cef"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0357e503-9acd-4249-9fde-b023bb96ef76.jpeg
200 OK 9.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0357e503-9acd-4249-9fde-b023bb96ef76.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea463f7a06fe1403c18c8ce8781244a1
fbbe4b97e4b39983b36340030f6b40adc69cd485
93a12a85886512e3336d027c889a2276087976b1c9106356cc81596b88087042
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0357e503-9acd-4249-9fde-b023bb96ef76.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8971
x-amzn-requestid: e27d68ed-4f52-406e-bed2-1d6b6d5f62c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ACnqiGCPIAMF3VA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e41fdc-5c79b77c5e32bf133e8b1748;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 22:19:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Dotp8LRAmKCHB6nqjeINmKMZKWy6RS5CaFNZHwObLCSLEqWcCDnPug==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 14 Feb 2023 22:13:37 GMT
etag: "fbbe4b97e4b39983b36340030f6b40adc69cd485"
content-type: image/jpeg
age: 15809
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c5a0bab7d34e51ee6476be179b356ba
87917d3cf520d73b7b1029f44505e7700413d51d
136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: K3teFfj79RPIRVaLUr5b2XMz3Jb5g8AeZCce6ZAAZmjOSJWr1QIsNw==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Tue, 14 Feb 2023 11:50:05 GMT
age: 53221
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/cb3e16a9b8.mp4?token=dcwbUGhX8OjST1oYm0ak2Y9xHzYyr4_URfBhA6LUOnwEhQ23o5ksMNtVh451vk_jp-87-ouTJsRsEZMN7kxU4r-Hzu8vQkvbOOLXQ4DKPq52spP7E84cRKINAXlN_aagjCOrmdSJADmV1gP_qDlpZ4ZSt5j71G6o-S0rQYeiDCkcnWVJ0nEYxRyBMf7wOfmEzFKj5OcjZRjuAKeT_9dSBL3RYbWeX1ayYkgfVNnnUTYEXsAYs2wgxIw5fpeSIbQ0-00zcoCeMQIoU1XOUS6bqOypUcqqvhEzJmPsYCRHYXkxyjNTOQHScJ2qWPx2PKko_OcvO9niJk0aIS09GOE92w
206 Partial Content 40 kB URL HTTP/2 cdn1.telegram-cdn.org/file/cb3e16a9b8.mp4?token=dcwbUGhX8OjST1oYm0ak2Y9xHzYyr4_URfBhA6LUOnwEhQ23o5ksMNtVh451vk_jp-87-ouTJsRsEZMN7kxU4r-Hzu8vQkvbOOLXQ4DKPq52spP7E84cRKINAXlN_aagjCOrmdSJADmV1gP_qDlpZ4ZSt5j71G6o-S0rQYeiDCkcnWVJ0nEYxRyBMf7wOfmEzFKj5OcjZRjuAKeT_9dSBL3RYbWeX1ayYkgfVNnnUTYEXsAYs2wgxIw5fpeSIbQ0-00zcoCeMQIoU1XOUS6bqOypUcqqvhEzJmPsYCRHYXkxyjNTOQHScJ2qWPx2PKko_OcvO9niJk0aIS09GOE92w
IP
File type ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]\012- data
Hash 609846d07030ddd61081dfa6165ee617
75a21ba7d3423f58e45cb800d1ec76ea75474ad5
16d01d043f2a4c10bcb66363c148876acb015a3dd6f82b4b5f79ade796845361
GET /file/cb3e16a9b8.mp4?token=dcwbUGhX8OjST1oYm0ak2Y9xHzYyr4_URfBhA6LUOnwEhQ23o5ksMNtVh451vk_jp-87-ouTJsRsEZMN7kxU4r-Hzu8vQkvbOOLXQ4DKPq52spP7E84cRKINAXlN_aagjCOrmdSJADmV1gP_qDlpZ4ZSt5j71G6o-S0rQYeiDCkcnWVJ0nEYxRyBMf7wOfmEzFKj5OcjZRjuAKeT_9dSBL3RYbWeX1ayYkgfVNnnUTYEXsAYs2wgxIw5fpeSIbQ0-00zcoCeMQIoU1XOUS6bqOypUcqqvhEzJmPsYCRHYXkxyjNTOQHScJ2qWPx2PKko_OcvO9niJk0aIS09GOE92w HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 9320336
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "09d0c3d66a04f11e722e56ce9c92f98f0b262615"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-9320335/9320336
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/9bb8cd3708.mp4?token=EgfpyzfU6zvBqzwnKWauQEp3MX6ZdzVZ51MvpZV5_Ke-jzmUI27fGYHOFrDj1USt_Z_MXOt-Q8S7BqzZHZpG0HsEjoUUWs_OUjFgjJz2D8DDwgQNKrtCdYumvvCrhNgO5Vkh9cakJOkIYRUnmDXAtVkY8XqGWE_oSpYcci83yZkDjtAzfnWHDmmSyOzIvDj2nO1fZkU_DY2rQeaOMQdhnMZ68hG654jvK3404HXzefAWvS0OpUQ_Ptv9kOkeZcx1qw0YrAHMs6sdtCSO2cypHfhvza1rVzPZIWzfEwSgqStoONi_EVqOkjAYmU2s8BurfAEy5vvQMPRSW_VjPxH-GA
206 Partial Content 32 kB URL HTTP/2 cdn1.telegram-cdn.org/file/9bb8cd3708.mp4?token=EgfpyzfU6zvBqzwnKWauQEp3MX6ZdzVZ51MvpZV5_Ke-jzmUI27fGYHOFrDj1USt_Z_MXOt-Q8S7BqzZHZpG0HsEjoUUWs_OUjFgjJz2D8DDwgQNKrtCdYumvvCrhNgO5Vkh9cakJOkIYRUnmDXAtVkY8XqGWE_oSpYcci83yZkDjtAzfnWHDmmSyOzIvDj2nO1fZkU_DY2rQeaOMQdhnMZ68hG654jvK3404HXzefAWvS0OpUQ_Ptv9kOkeZcx1qw0YrAHMs6sdtCSO2cypHfhvza1rVzPZIWzfEwSgqStoONi_EVqOkjAYmU2s8BurfAEy5vvQMPRSW_VjPxH-GA
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash a79aac20b84bdd8ec09a45b4d9d60f6f
a1d17f059d659322b8517e7934557cf8eb6b18be
d5b8a672823922ec8f26ad717dcfe93955061fadd16cc1b74e3fb2a39613d51a
GET /file/9bb8cd3708.mp4?token=EgfpyzfU6zvBqzwnKWauQEp3MX6ZdzVZ51MvpZV5_Ke-jzmUI27fGYHOFrDj1USt_Z_MXOt-Q8S7BqzZHZpG0HsEjoUUWs_OUjFgjJz2D8DDwgQNKrtCdYumvvCrhNgO5Vkh9cakJOkIYRUnmDXAtVkY8XqGWE_oSpYcci83yZkDjtAzfnWHDmmSyOzIvDj2nO1fZkU_DY2rQeaOMQdhnMZ68hG654jvK3404HXzefAWvS0OpUQ_Ptv9kOkeZcx1qw0YrAHMs6sdtCSO2cypHfhvza1rVzPZIWzfEwSgqStoONi_EVqOkjAYmU2s8BurfAEy5vvQMPRSW_VjPxH-GA HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 3401531
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "0d692f93f38f96641b64179a2980b6d9898c89d3"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-3401530/3401531
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 66c4f9cb9464d3c2fb3484f882f055f5
6e9a8ba5dfdb7bedfebcae89696dd7f8f93faad9
69b87604e0b6b0b16ebdae42897280240f3370d08023c9e9bfc9f1ee9a2ab0a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 15 Feb 2023 02:37:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
File type ASCII text, with very long lines (1321)
Hash ac906814ed812c4ecdbb624a3bd2f6c3
8e4547eaffaa66a1ee61b36028dbcd7091d0e7de
8ab8cef6156022c4547455defd8252b48b6bcb8b734072849345bb99758705fe
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Wed, 15 Feb 2023 02:37:06 GMT
expires: Wed, 15 Feb 2023 02:37:06 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/c83a352fc4.mp4?token=RyAvMYV7UAa1Edull7Rn-XEZyOJEiZFaVAGpRw9E18BemutvA6LPRVVzasiezZfmEi2hHMr0yTVFQaCJ3zd9_G3EDb8z7rOenWMuorDwy-5QTEQV0P_7o0PVtnF2FCSCa8UNFxizA_WqrU9l9SLw7aR3LniKhZOppW0tTg-ATD_cw75rZpGyX2POC6rALLRG-nKhDyd0-EQ28J6bzHbuYJw9wJgwEJNSBDlvl4WYckCumbMgCoYPjAMZzy9_jEZzTX7r5TgXLdC32RihMfRl_gIa7RzE3MDDMAL2nJTeeuwa5PPKrBJGFMnH6dutC88Fc4TUbRq-rlk-UpiKAyJy2iqKUSQPgXwtqEw0skBQxtjMVjRTeLnxQQr_ckf5rJwDOdAjrghiiTcGg7gq8fqCIAH6IdblmSxN7OfD_7d9o8l6h7i22IzbznbfiBqib2pCoUHOy7-1vgIe5ArmoeEm2W7SRID2MEaNPOqjmQwV_HSNr1c-QrrWLicYC0ynPQ72OfsXhgk4SyjVJuoRxeVViYiEg0MQMLlps71kdm163SySb6GEPAQuYI3x87CHw2EwgR4l8uFtkIlsb7g9qo46WjTm2zZdPPqdP2SL2Tq9pges6DaBS0QSdz3GQx1qBgWSIlNY6BQXL7c7NdN9LQ995bQJgvbsWTFXxnFLeNqm-E0
206 Partial Content 37 kB URL HTTP/2 cdn1.telegram-cdn.org/file/c83a352fc4.mp4?token=RyAvMYV7UAa1Edull7Rn-XEZyOJEiZFaVAGpRw9E18BemutvA6LPRVVzasiezZfmEi2hHMr0yTVFQaCJ3zd9_G3EDb8z7rOenWMuorDwy-5QTEQV0P_7o0PVtnF2FCSCa8UNFxizA_WqrU9l9SLw7aR3LniKhZOppW0tTg-ATD_cw75rZpGyX2POC6rALLRG-nKhDyd0-EQ28J6bzHbuYJw9wJgwEJNSBDlvl4WYckCumbMgCoYPjAMZzy9_jEZzTX7r5TgXLdC32RihMfRl_gIa7RzE3MDDMAL2nJTeeuwa5PPKrBJGFMnH6dutC88Fc4TUbRq-rlk-UpiKAyJy2iqKUSQPgXwtqEw0skBQxtjMVjRTeLnxQQr_ckf5rJwDOdAjrghiiTcGg7gq8fqCIAH6IdblmSxN7OfD_7d9o8l6h7i22IzbznbfiBqib2pCoUHOy7-1vgIe5ArmoeEm2W7SRID2MEaNPOqjmQwV_HSNr1c-QrrWLicYC0ynPQ72OfsXhgk4SyjVJuoRxeVViYiEg0MQMLlps71kdm163SySb6GEPAQuYI3x87CHw2EwgR4l8uFtkIlsb7g9qo46WjTm2zZdPPqdP2SL2Tq9pges6DaBS0QSdz3GQx1qBgWSIlNY6BQXL7c7NdN9LQ995bQJgvbsWTFXxnFLeNqm-E0
IP
File type ISO Media, MP4 v2 [ISO 14496-14]\012- data
Hash fa4ba16e7d476acd7fe0ad557b3c29ab
504a0537e21e186037ad71a81b6d2add8cca5682
08a8dec1fe32a12dd4cf87b7d3c3dd39fa78a6d836ed3aab96d3d233b392a420
GET /file/c83a352fc4.mp4?token=RyAvMYV7UAa1Edull7Rn-XEZyOJEiZFaVAGpRw9E18BemutvA6LPRVVzasiezZfmEi2hHMr0yTVFQaCJ3zd9_G3EDb8z7rOenWMuorDwy-5QTEQV0P_7o0PVtnF2FCSCa8UNFxizA_WqrU9l9SLw7aR3LniKhZOppW0tTg-ATD_cw75rZpGyX2POC6rALLRG-nKhDyd0-EQ28J6bzHbuYJw9wJgwEJNSBDlvl4WYckCumbMgCoYPjAMZzy9_jEZzTX7r5TgXLdC32RihMfRl_gIa7RzE3MDDMAL2nJTeeuwa5PPKrBJGFMnH6dutC88Fc4TUbRq-rlk-UpiKAyJy2iqKUSQPgXwtqEw0skBQxtjMVjRTeLnxQQr_ckf5rJwDOdAjrghiiTcGg7gq8fqCIAH6IdblmSxN7OfD_7d9o8l6h7i22IzbznbfiBqib2pCoUHOy7-1vgIe5ArmoeEm2W7SRID2MEaNPOqjmQwV_HSNr1c-QrrWLicYC0ynPQ72OfsXhgk4SyjVJuoRxeVViYiEg0MQMLlps71kdm163SySb6GEPAQuYI3x87CHw2EwgR4l8uFtkIlsb7g9qo46WjTm2zZdPPqdP2SL2Tq9pges6DaBS0QSdz3GQx1qBgWSIlNY6BQXL7c7NdN9LQ995bQJgvbsWTFXxnFLeNqm-E0 HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 15368160
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "24f4348c74bc0cff77db6ea80f9d9940ad0d4623"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-15368159/15368160
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/js/telegram-web.js?14
200 OK 4.3 kB URL HTTP/2 telegram.org/js/telegram-web.js?14
IP
ASN #62041 Telegram Messenger Inc
Hash 4fe7e14c1f214e5e09bd3d425a3964f9
802563dfa64a6ae05d7ab6dd053dbe9af7e37fe3
3ad8ff1adb39c4cae389fbb2a6ba4c1998f03427fcc997d329aaf511c783dbf9
GET /js/telegram-web.js?14 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Fri, 18 Mar 2022 10:32:52 GMT
etag: W/"62345fd4-2e63"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
www.google.com/recaptcha/api2/aframe
200 OK 511 B URL HTTP/2 www.google.com/recaptcha/api2/aframe
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (783), with no line terminators
Hash 49d63f1db4a825a3673554ba4f4a9ac4
9fe2af471c2ad7bce39e94c81baac8d53b9ef3e7
27e15170d06a5b3974297c6c44eed92dd562fc91ed8a97935b174aaf905e3d0e
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Wed, 15 Feb 2023 02:37:06 GMT
date: Wed, 15 Feb 2023 02:37:06 GMT
cache-control: private, max-age=300
content-type: text/html; charset=utf-8
content-security-policy: script-src 'nonce-iEY9SbTxMOYL2T8nmeCu8Q' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 511
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=800700443&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428629%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428629&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=800700443&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428629%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428629&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=800700443&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428629%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428629&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 327182
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 15 Feb 2023 02:37:09 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:09 GMT
last-modified: Wed, 15-Feb-2023 02:37:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=173350063&wv-type=3&browser-info=we%3A1%3Aet%3A1676428630%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428630&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=173350063&wv-type=3&browser-info=we%3A1%3Aet%3A1676428630%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428630&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=173350063&wv-type=3&browser-info=we%3A1%3Aet%3A1676428630%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023709%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428630&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 189
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 15 Feb 2023 02:37:09 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:09 GMT
last-modified: Wed, 15-Feb-2023 02:37:09 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wv-check=52351&wv-type=0&wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=417769523&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wv-check=52351&wv-type=0&wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=417769523&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wv-check=52351&wv-type=0&wmode=0&wv-part=1&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=417769523&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 44
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 15 Feb 2023 02:37:12 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:12 GMT
last-modified: Wed, 15-Feb-2023 02:37:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=664632482&wv-type=3&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=664632482&wv-type=3&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=664632482&wv-type=3&browser-info=we%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 21
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 15 Feb 2023 02:37:12 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:12 GMT
last-modified: Wed, 15-Feb-2023 02:37:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=1057486791&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
200 OK 43 B URL HTTP/2 mc.yandex.ru/webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=1057486791&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2)
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash df3e567d6f16d040326c7a0ea29a4f41
ea7df583983133b62712b5e73bffbcd45cc53736
548f2d6f4d0d820c6c5ffbeffcbd7f0e73193e2932eefe542accc84762deec87
POST /webvisor/80600038?wmode=0&wv-part=2&wv-hit=62862071&page-url=https%3A%2F%2Fwww.orwell.city%2F&rn=1057486791&wv-type=3&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1676428632%3Aw%3A1268x898%3Av%3A960%3Az%3A0%3Ai%3A20230215023712%3Au%3A1676428625539003984%3Avf%3Asm0eap24hzlr84c06sesn%3Ast%3A1676428632&t=gdpr(14)ti(2) HTTP/1.1
Host: mc.yandex.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 15
Origin: https://www.orwell.city
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-length: 43
date: Wed, 15 Feb 2023 02:37:12 GMT
access-control-allow-origin: https://www.orwell.city
access-control-allow-credentials: true
pragma: no-cache
x-xss-protection: 1; mode=block
expires: Wed, 15-Feb-2023 02:37:12 GMT
last-modified: Wed, 15-Feb-2023 02:37:12 GMT
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
content-type: image/gif
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i
IP
GET /css?family=Playfair+Display:400,400i,700,700i,900,900i|Roboto:100,100i,300,300i,400,400i,500,500i,700,700i,900,900i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 03/12/2022 14:32:07
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: d59b1bc690982b057c0e17bb58696d82
cdn-cache: HIT
cf-cache-status: HIT
age: 2879940
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 799aa8d5fe120b06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Lato:300,400,700,400italic&ver=4.2.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Lato:300,400,700,400italic&ver=4.2.4
IP
GET /css?family=Lato:300,400,700,400italic&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/js/jquery.min.js
200 OK 0 B URL HTTP/2 telegram.org/js/jquery.min.js
IP
ASN #62041 Telegram Messenger Inc
GET /js/jquery.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-1762a"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/img/tgme/pattern.svg?1
200 OK 0 B URL HTTP/2 telegram.org/img/tgme/pattern.svg?1
IP
ASN #62041 Telegram Messenger Inc
GET /img/tgme/pattern.svg?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://telegram.org/css/telegram-web.css?37
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: image/svg+xml
last-modified: Thu, 05 Jan 2023 17:52:04 GMT
etag: W/"63b70e44-3891a"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
access-control-allow-origin: *
content-encoding: gzip
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/363c8d5196.mp4?token=UQF2FRmjwFZSOyANuxxvTR-9PpMbnYu44fe4rFnGtr2fVJ3wRFgfo3ekuwdKyYEN9bgZ6I-mGx0rq4RYt0bzZK4kU2Xk-vUAYqxMiyg3w2iwqNEIo9A8IzmqgELe9UYIuc-5C0YxBTm_iLC8g_XB6CXuIgV7YwGIRRZ8mHVuEoe_Yu-xsZLLausDsWDMhjPBBkIzbch76hJ0Gtx6YtYa2hL9-aGrW4cEHyoZE4r7nqfHNxykZdjOe2fAbIGJNgScxOid3NexxiffbLUw4H6Zb4msDfMpKHfFSXNWQCnnBSUIF3UWoOuTYOKPWhKOxZR2jjenxWWvI28meMosHkO_Ew
206 Partial Content 0 B URL HTTP/2 cdn1.telegram-cdn.org/file/363c8d5196.mp4?token=UQF2FRmjwFZSOyANuxxvTR-9PpMbnYu44fe4rFnGtr2fVJ3wRFgfo3ekuwdKyYEN9bgZ6I-mGx0rq4RYt0bzZK4kU2Xk-vUAYqxMiyg3w2iwqNEIo9A8IzmqgELe9UYIuc-5C0YxBTm_iLC8g_XB6CXuIgV7YwGIRRZ8mHVuEoe_Yu-xsZLLausDsWDMhjPBBkIzbch76hJ0Gtx6YtYa2hL9-aGrW4cEHyoZE4r7nqfHNxykZdjOe2fAbIGJNgScxOid3NexxiffbLUw4H6Zb4msDfMpKHfFSXNWQCnnBSUIF3UWoOuTYOKPWhKOxZR2jjenxWWvI28meMosHkO_Ew
IP
GET /file/363c8d5196.mp4?token=UQF2FRmjwFZSOyANuxxvTR-9PpMbnYu44fe4rFnGtr2fVJ3wRFgfo3ekuwdKyYEN9bgZ6I-mGx0rq4RYt0bzZK4kU2Xk-vUAYqxMiyg3w2iwqNEIo9A8IzmqgELe9UYIuc-5C0YxBTm_iLC8g_XB6CXuIgV7YwGIRRZ8mHVuEoe_Yu-xsZLLausDsWDMhjPBBkIzbch76hJ0Gtx6YtYa2hL9-aGrW4cEHyoZE4r7nqfHNxykZdjOe2fAbIGJNgScxOid3NexxiffbLUw4H6Zb4msDfMpKHfFSXNWQCnnBSUIF3UWoOuTYOKPWhKOxZR2jjenxWWvI28meMosHkO_Ew HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 10299210
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "f2ecdb2654c8af88083ede1e7f8318ca5816985f"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-10299209/10299210
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400
IP
GET /css?family=Bad+Script%7CRaleway:400,500,600,700,300%7CLora:400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Domine:400,700&ver=4.2.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Domine:400,700&ver=4.2.4
IP
GET /css?family=Domine:400,700&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/7dada8254b.mp4?token=b3g_If9ateMso0NwysFdeiy4rTSsqoAWsC8LLd6rZ_vz7BUi8hFgxTCIx_xLKbMd-0_xLNdPIks7jJLavyvEI6kMZVSl_YZGRk07Nu5GCF_ub_arNdZfYZOZ35Mc0q-MsvIpaLRZMifkZaSK1Biqm3QZ3Z0oSakIMTtjgKLRAK5QYyuuhhdlmfTqlZZi9MHZRg-28Y2BMXsmxFqdaIqZ8-5KTR43YaG08NAJY3OhxAOb9q86PDhMPZYzeBICRv5OXY6hoUzTmMYwxSGJgB0JzfC10gxqmNAhRLCai_JAVv3aFpmAmE-8uEDaz6oAFY4ilxjtno5qThjekANRfXjeFg
206 Partial Content 0 B URL HTTP/2 cdn1.telegram-cdn.org/file/7dada8254b.mp4?token=b3g_If9ateMso0NwysFdeiy4rTSsqoAWsC8LLd6rZ_vz7BUi8hFgxTCIx_xLKbMd-0_xLNdPIks7jJLavyvEI6kMZVSl_YZGRk07Nu5GCF_ub_arNdZfYZOZ35Mc0q-MsvIpaLRZMifkZaSK1Biqm3QZ3Z0oSakIMTtjgKLRAK5QYyuuhhdlmfTqlZZi9MHZRg-28Y2BMXsmxFqdaIqZ8-5KTR43YaG08NAJY3OhxAOb9q86PDhMPZYzeBICRv5OXY6hoUzTmMYwxSGJgB0JzfC10gxqmNAhRLCai_JAVv3aFpmAmE-8uEDaz6oAFY4ilxjtno5qThjekANRfXjeFg
IP
GET /file/7dada8254b.mp4?token=b3g_If9ateMso0NwysFdeiy4rTSsqoAWsC8LLd6rZ_vz7BUi8hFgxTCIx_xLKbMd-0_xLNdPIks7jJLavyvEI6kMZVSl_YZGRk07Nu5GCF_ub_arNdZfYZOZ35Mc0q-MsvIpaLRZMifkZaSK1Biqm3QZ3Z0oSakIMTtjgKLRAK5QYyuuhhdlmfTqlZZi9MHZRg-28Y2BMXsmxFqdaIqZ8-5KTR43YaG08NAJY3OhxAOb9q86PDhMPZYzeBICRv5OXY6hoUzTmMYwxSGJgB0JzfC10gxqmNAhRLCai_JAVv3aFpmAmE-8uEDaz6oAFY4ilxjtno5qThjekANRfXjeFg HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 5680824
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "2a421f10a0f25457fc5a7c2e2b702702de895bc6"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-5680823/5680824
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
telegram.org/js/tgsticker.js?29
200 OK 0 B URL HTTP/2 telegram.org/js/tgsticker.js?29
IP
ASN #62041 Telegram Messenger Inc
GET /js/tgsticker.js?29 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Wed, 29 Jun 2022 21:52:44 GMT
etag: W/"62bcc9ac-5faf"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
commerce.coinbase.com/v1/button.css
200 OK 0 B URL HTTP/2 commerce.coinbase.com/v1/button.css
IP
GET /v1/button.css HTTP/1.1
Host: commerce.coinbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: text/css; charset=UTF-8
cache-control: public, max-age=43200
content-security-policy: default-src 'none'; connect-src https://commerce.coinbase.com https://api.commerce.coinbase.com https://www.coinbase.com https://dp.coinbase.com https://api.cloudinary.com https://api.amplitude.com/; font-src 'self' https://fonts.gstatic.com; frame-src https://www.google.com/recaptcha/ https://fast.wistia.net https://commerce-accounting-reports-prod.s3.us-east-1.amazonaws.com https://wallet.commerce.coinbase.com; img-src 'self' data: https://exceptions.coinbase.com/js https://www.google-analytics.com/ https://res.cloudinary.com https://nft.reddit.com https://dynamic-assets.coinbase.com https://static-assets.coinbase.com asset-metadata-service-production.s3.amazonaws.com; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com; script-src 'self' https://www.google-analytics.com/analytics.js https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/ 'sha256-/T46MuEZnRTWI4K3nyZO+jpGnZUbZ7wHGn1iQXeMfMI='; report-uri https://commerce.coinbase.com/csp/report; block-all-mixed-content
etag: W/"10f2-1864cabc150"
last-modified: Mon, 13 Feb 2023 21:26:10 GMT
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
trace-id: 4302267766333249746
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-frame-options: DENY
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 41862
expires: Wed, 15 Feb 2023 14:37:04 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 799aa8d74b46b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2
IP
GET /css?family=Crimson+Text:400,700,400italic,700italic&ver=3.9.2 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
commerce.coinbase.com/v1/checkout.js?version=201807
200 OK 0 B URL HTTP/2 commerce.coinbase.com/v1/checkout.js?version=201807
IP
GET /v1/checkout.js?version=201807 HTTP/1.1
Host: commerce.coinbase.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:04 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=14400
etag: W/"1dd3-kGCLmutp/eAEmbJUva1JQjsFWGg"
referrer-policy: strict-origin-when-cross-origin
strict-transport-security: max-age=15552000; includeSubDomains
x-content-type-options: nosniff
x-dns-prefetch-control: off
x-download-options: noopen
x-xss-protection: 1; mode=block
cf-cache-status: HIT
expires: Wed, 15 Feb 2023 06:37:04 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 799aa8d66ae8b4f9-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/tgwallpaper.min.js?3
200 OK 0 B URL HTTP/2 telegram.org/js/tgwallpaper.min.js?3
IP
ASN #62041 Telegram Messenger Inc
GET /js/tgwallpaper.min.js?3 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Thu, 03 Mar 2022 19:57:25 GMT
etag: W/"62211da5-ba3"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/css/font-roboto.css?1
200 OK 0 B URL HTTP/2 telegram.org/css/font-roboto.css?1
IP
ASN #62041 Telegram Messenger Inc
GET /css/font-roboto.css?1 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: text/css
last-modified: Thu, 20 Oct 2022 11:05:33 GMT
etag: W/"63512b7d-1816"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
telegram.org/js/jquery-ui.min.js
200 OK 0 B URL HTTP/2 telegram.org/js/jquery-ui.min.js
IP
ASN #62041 Telegram Messenger Inc
GET /js/jquery-ui.min.js HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
last-modified: Fri, 10 Nov 2017 17:54:14 GMT
etag: W/"5a05e7c6-181a9"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Montserrat:400,700&ver=4.2.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Montserrat:400,700&ver=4.2.4
IP
GET /css?family=Montserrat:400,700&ver=4.2.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 15 Feb 2023 02:37:04 GMT
date: Wed, 15 Feb 2023 02:37:04 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.statcounter.com/counter/counter.js
200 OK 0 B URL HTTP/2 www.statcounter.com/counter/counter.js
IP
GET /counter/counter.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.orwell.city/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Mon, 13 Feb 2023 12:37:28 GMT
etag: W/"63ea2f08-aa70"
expires: Wed, 15 Feb 2023 10:53:31 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 13414
server: cloudflare
cf-ray: 799aa8db48ce0afe-OSL
content-encoding: br
X-Firefox-Spdy: h2
telegram.org/css/widget-frame.css?64
200 OK 0 B URL HTTP/2 telegram.org/css/widget-frame.css?64
IP
ASN #62041 Telegram Messenger Inc
GET /css/widget-frame.css?64 HTTP/1.1
Host: telegram.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: text/css
last-modified: Mon, 21 Nov 2022 12:06:59 GMT
etag: W/"637b69e3-14544"
expires: Sun, 19 Feb 2023 02:37:05 GMT
cache-control: max-age=345600
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-encoding: gzip
X-Firefox-Spdy: h2
cdn1.telegram-cdn.org/file/d2a6e9f87c.mp4?token=ThdSdyr4xeBcArm73UZ72JKXCFPpFVDlgXoGgpuTSveqXnt3-qNxccFVm4Na9dq9_3Xp7DznNWvnZ41aK1wwXfJHjy816Q271Ft7L-CC9EEWNCtk3vpPJys6k8_V-Mj4ZHRETQmXZB99b77YNGqqccbHY2Lmq1SIXWR1bKLH0s1z6XfSiW2R7l6g_zHkVnw--MvVEMFlmLAGaqRQCMRJpkZKmjo6GZn1v09V7hQqbE5rvTuCZ5MdvH_1OoDopuEw9NKR75AbaEwu_Iv8TNyMoO4fa7cZdTCf05dLA6ZMApyXKU9UFSuHWpHG6O5PutffDX_-wtShosUPNQV7lL-UG6FGbRUjs9qFi0izlUzcfW-nH3miFs5AS41KyIInwOSc0DiRLNcRIHm1XBoebaNiDXVb1nSfabKCm_zGf8-XmlYOPcT74r2HfNnZM7vFt0pQpRtRNAaWMZNuGJJxua0G5wlurbaa-K1cunosY_h6RCVMpx84OvfiVy4PiHilswMBcO6DBUNHAi6Lu6ip09T9Ogm0sFMt0zv9NpKq82Zrh0MtgBi22Wq5oRSTGYk5uYfcidYEnjBsfXMFJrNz2lz3aj-DgivgE6bDOeSmpxepWE9YXR6thzjP-yFCIyy0b1ok2rEWLNc9wzNNLbdwrMhKkdoU6n4xt1O_Rd1Ye9kNNks
206 Partial Content 0 B URL HTTP/2 cdn1.telegram-cdn.org/file/d2a6e9f87c.mp4?token=ThdSdyr4xeBcArm73UZ72JKXCFPpFVDlgXoGgpuTSveqXnt3-qNxccFVm4Na9dq9_3Xp7DznNWvnZ41aK1wwXfJHjy816Q271Ft7L-CC9EEWNCtk3vpPJys6k8_V-Mj4ZHRETQmXZB99b77YNGqqccbHY2Lmq1SIXWR1bKLH0s1z6XfSiW2R7l6g_zHkVnw--MvVEMFlmLAGaqRQCMRJpkZKmjo6GZn1v09V7hQqbE5rvTuCZ5MdvH_1OoDopuEw9NKR75AbaEwu_Iv8TNyMoO4fa7cZdTCf05dLA6ZMApyXKU9UFSuHWpHG6O5PutffDX_-wtShosUPNQV7lL-UG6FGbRUjs9qFi0izlUzcfW-nH3miFs5AS41KyIInwOSc0DiRLNcRIHm1XBoebaNiDXVb1nSfabKCm_zGf8-XmlYOPcT74r2HfNnZM7vFt0pQpRtRNAaWMZNuGJJxua0G5wlurbaa-K1cunosY_h6RCVMpx84OvfiVy4PiHilswMBcO6DBUNHAi6Lu6ip09T9Ogm0sFMt0zv9NpKq82Zrh0MtgBi22Wq5oRSTGYk5uYfcidYEnjBsfXMFJrNz2lz3aj-DgivgE6bDOeSmpxepWE9YXR6thzjP-yFCIyy0b1ok2rEWLNc9wzNNLbdwrMhKkdoU6n4xt1O_Rd1Ye9kNNks
IP
GET /file/d2a6e9f87c.mp4?token=ThdSdyr4xeBcArm73UZ72JKXCFPpFVDlgXoGgpuTSveqXnt3-qNxccFVm4Na9dq9_3Xp7DznNWvnZ41aK1wwXfJHjy816Q271Ft7L-CC9EEWNCtk3vpPJys6k8_V-Mj4ZHRETQmXZB99b77YNGqqccbHY2Lmq1SIXWR1bKLH0s1z6XfSiW2R7l6g_zHkVnw--MvVEMFlmLAGaqRQCMRJpkZKmjo6GZn1v09V7hQqbE5rvTuCZ5MdvH_1OoDopuEw9NKR75AbaEwu_Iv8TNyMoO4fa7cZdTCf05dLA6ZMApyXKU9UFSuHWpHG6O5PutffDX_-wtShosUPNQV7lL-UG6FGbRUjs9qFi0izlUzcfW-nH3miFs5AS41KyIInwOSc0DiRLNcRIHm1XBoebaNiDXVb1nSfabKCm_zGf8-XmlYOPcT74r2HfNnZM7vFt0pQpRtRNAaWMZNuGJJxua0G5wlurbaa-K1cunosY_h6RCVMpx84OvfiVy4PiHilswMBcO6DBUNHAi6Lu6ip09T9Ogm0sFMt0zv9NpKq82Zrh0MtgBi22Wq5oRSTGYk5uYfcidYEnjBsfXMFJrNz2lz3aj-DgivgE6bDOeSmpxepWE9YXR6thzjP-yFCIyy0b1ok2rEWLNc9wzNNLbdwrMhKkdoU6n4xt1O_Rd1Ye9kNNks HTTP/1.1
Host: cdn1.telegram-cdn.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
Connection: keep-alive
Referer: https://xn--r1a.website/
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 206 Partial Content
server: nginx/1.18.0
date: Wed, 15 Feb 2023 02:37:05 GMT
content-type: video/mp4
content-length: 12615016
access-control-allow-origin: *
x-content-type-options: nosniff
content-security-policy: default-src 'none'; sandbox
x-frame-options: DENY
x-xss-protection: 1; mode=block
access-control-expose-headers: Accept-Ranges, Content-Range, Content-Length
accept-ranges: bytes
cache-control: public,max-age=7200
etag: "b9613e2909021c8291ff6e4644ad81bf7899c245"
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-range: bytes 0-12615015/12615016
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
142.250.74.179
104.18.16.189
87.250.250.119
93.184.220.29
157.240.200.14
23.36.76.226
188.114.99.234
95.216.186.40