ocsp.pki.goog/gts1c3
471 B IP
Hash d01fcdf9d07d46c2f636f5d4761b4216
b0b5d955d4da1ad20192a71164d982626c4e723a
77273f261fedd69a83c6bd35f063e592e1aba013c76665a376d2e82a4793e052
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trojanoriginal.blogspot.com/search/label/R.A.Th
200 OK 16 kB URL User Request GET HTTP/2 trojanoriginal.blogspot.com/search/label/R.A.Th
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (558)
Hash fd0662a81a66010f18ef086808218a6f
fe41a5d6c3a2621814a951e66f10f94fe03b861a
0280625d59ed3b98bb2de0b093863477617586426684c8ec38df5a131a541973
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /search/label/R.A.Th HTTP/1.1
Host: trojanoriginal.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Sat, 23 Sep 2023 15:57:58 GMT
date: Sat, 23 Sep 2023 15:57:58 GMT
cache-control: private, max-age=0
last-modified: Sat, 27 May 2023 04:46:59 GMT
etag: W/"3e2491e978f7a4f1b563c490ec5bd45613ee4cedf838f46e6288b383b32892f5"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 15835
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash d01fcdf9d07d46c2f636f5d4761b4216
b0b5d955d4da1ad20192a71164d982626c4e723a
77273f261fedd69a83c6bd35f063e592e1aba013c76665a376d2e82a4793e052
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
trojanoriginal.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 trojanoriginal.blogspot.com/js/cookienotice.js
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /js/cookienotice.js HTTP/1.1
Host: trojanoriginal.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/search/label/R.A.Th
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sat, 23 Sep 2023 15:57:59 GMT
expires: Sat, 30 Sep 2023 15:57:59 GMT
cache-control: public, max-age=604800
last-modified: Fri, 22 Sep 2023 20:56:58 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 5deab2863cc64ff54664df9e40738c24
7e731c4f0a6c9cbc80490586ddb39a82dcfbb5ae
fc49292164496bd63fb16adb3f5b6fc10d0c5f397c19007a858848257ea4a302
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash aeafca61929af48f5ce5cc58fdaaed3c
f9c7530a7c334f9199f83a568fea5392ad41c8b9
a9b7cb4305b51e6964e793e0d5fb329c39c5cb8a1f7dafcc25b0074687abe954
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 5deab2863cc64ff54664df9e40738c24
7e731c4f0a6c9cbc80490586ddb39a82dcfbb5ae
fc49292164496bd63fb16adb3f5b6fc10d0c5f397c19007a858848257ea4a302
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash acd4654c810f5853fa0195aae9cc7942
64c6efd0274073e8c26f8c14cb243f6d2bc0658d
408d5b35481363f0bd9d08b9e626574beaaadb7a4f61ba43e936a94bbeb01bf5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
200 OK 7.8 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (35959)
Hash 1e32420a7b6ddbdcb7def8b3141c4d1e
a1be54d42ff1f95244c9653539f90318f5bc0580
a9ca837900b6ae007386d400f659c233120b8af7d93407fd6475c9180d9e83d2
GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 20:27:35 GMT
expires: Tue, 17 Sep 2024 20:27:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Sep 2023 14:53:49 GMT
content-type: text/css
vary: Accept-Encoding
age: 415824
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/562952797-widgets.js
200 OK 160 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/562952797-widgets.js
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type ASCII text, with very long lines (2215)
Size 160 kB (160393 bytes)
Hash 0804e4c7fd72aea2ce34a04d9ec9686c
9f46bef1076230a1271d151a506fd1d91ae7df93
5ea4b0b19c5f030a3b42b570c07cbea89a7899f1d824a95b53ad2c4ca18a2b5c
GET /static/v1/widgets/562952797-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 160393
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 20 Sep 2023 02:21:50 GMT
expires: Thu, 19 Sep 2024 02:21:50 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 20 Sep 2023 00:55:53 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 308169
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform.js
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2664)
Hash ce7e88034e2b1226294f3d7e515299c9
326b37908964a9f69460d42cb646716c9f1e86e1
08280e7af6518c3230f34d50cb9534b35c82fddd96138896e2608d9a12661bbe
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21949
date: Sat, 23 Sep 2023 15:57:59 GMT
expires: Sat, 23 Sep 2023 15:57:59 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "22f179323a7dd95a"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-9770034656947675&host=ca-host-pub-1556223355139109
200 OK 51 kB URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-9770034656947675&host=ca-host-pub-1556223355139109
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
File type ASCII text, with very long lines (3920)
Hash 1c2840c646771ae606db859dc1b211ad
bac2e9078eb00ef494b6471f9f017b76f253f7e6
9d7a6f5439ac816c36aa2722cd9adbc052b96dd66c87349280287378019fb2d5
GET /pagead/js/adsbygoogle.js?client=ca-pub-9770034656947675&host=ca-host-pub-1556223355139109 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trojanoriginal.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 23 Sep 2023 15:57:59 GMT
expires: Sat, 23 Sep 2023 15:57:59 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 8829005315766396523
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50638
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 5deab2863cc64ff54664df9e40738c24
7e731c4f0a6c9cbc80490586ddb39a82dcfbb5ae
fc49292164496bd63fb16adb3f5b6fc10d0c5f397c19007a858848257ea4a302
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash aeafca61929af48f5ce5cc58fdaaed3c
f9c7530a7c334f9199f83a568fea5392ad41c8b9
a9b7cb4305b51e6964e793e0d5fb329c39c5cb8a1f7dafcc25b0074687abe954
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 8e0560c46747530b07f20c3704aecf0c
30e8a5e5b62c28ed29ef6408f9044f2d8a911db5
e5b8c6bd88bfb832b0b14cf3e17048b546cbf82d7de8d539f8fdad12794b3cb8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:57:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-1PVNlruO_Gc/Ww2zCGj7kqI/AAAAAAAAF6w/GVcY_KdwtJMUTBnBXjbfTB_z8DT0m7NjwCK4BGAYYCw/s1600/anuncio%2Bbloger.jpg
200 OK 12 kB URL GET HTTP/2 3.bp.blogspot.com/-1PVNlruO_Gc/Ww2zCGj7kqI/AAAAAAAAF6w/GVcY_KdwtJMUTBnBXjbfTB_z8DT0m7NjwCK4BGAYYCw/s1600/anuncio%2Bbloger.jpg
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 280x250, components 3\012- data
Hash f8a42ab5883afc4fcc4ab0ddf5864ee6
a33ea0216ef396e6e14de2cb490e8509c059c617
617837a6c7cd0cc903f8ce76e609a2a1eb2ac9bddf018f5a513c7b607d538e18
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-1PVNlruO_Gc/Ww2zCGj7kqI/AAAAAAAAF6w/GVcY_KdwtJMUTBnBXjbfTB_z8DT0m7NjwCK4BGAYYCw/s1600/anuncio%2Bbloger.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v17ad"
expires: Sun, 24 Sep 2023 15:57:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="anuncio bloger.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:57:59 GMT
server: fife
content-length: 12536
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-Rb7yaUW78gI/Ww24LFQTU2I/AAAAAAAAF-Q/AvELQO3Zoe0IuV4-xlFbnkP6qPby9oa5ACLcBGAs/s1600/banner%2Bfixo.jpg
200 OK 9.6 kB URL GET HTTP/2 4.bp.blogspot.com/-Rb7yaUW78gI/Ww24LFQTU2I/AAAAAAAAF-Q/AvELQO3Zoe0IuV4-xlFbnkP6qPby9oa5ACLcBGAs/s1600/banner%2Bfixo.jpg
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 160x590, components 3\012- data
Hash 2908b415e8205142f870bb4d12b35873
062894af87179ff48e924f155a017d1dbbd6a18c
5f23b4333a118cc1ce4b8bb2631352497e6926245b80ae95f17236ddafc5b44b
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-Rb7yaUW78gI/Ww24LFQTU2I/AAAAAAAAF-Q/AvELQO3Zoe0IuV4-xlFbnkP6qPby9oa5ACLcBGAs/s1600/banner%2Bfixo.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v17e5"
expires: Sun, 24 Sep 2023 15:57:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="banner fixo.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:57:59 GMT
server: fife
content-length: 9569
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-11KexCcVXas/Ww22mxbdcrI/AAAAAAAAF9g/dRtVA4NCXjIiei8XV7OMZiyM6f6VSFTcwCK4BGAYYCw/s1600/2.jpg
200 OK 16 kB URL GET HTTP/2 4.bp.blogspot.com/-11KexCcVXas/Ww22mxbdcrI/AAAAAAAAF9g/dRtVA4NCXjIiei8XV7OMZiyM6f6VSFTcwCK4BGAYYCw/s1600/2.jpg
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x250, components 3\012- data
Hash db934b4cf3730e87432ef80adfbf2960
7fe88ab5e13bc1e1850d765e0cfa752827d471a9
c7198cb164e9a4b44b235b0b2a083d385503feba9ff3b66f5101aa117a026630
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-11KexCcVXas/Ww22mxbdcrI/AAAAAAAAF9g/dRtVA4NCXjIiei8XV7OMZiyM6f6VSFTcwCK4BGAYYCw/s1600/2.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v17dc"
expires: Sun, 24 Sep 2023 15:57:59 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:57:59 GMT
server: fife
content-length: 15714
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=6615264094065939740&zx=a17cc4f7-b8df-4144-8312-7b8cdab652a2
200 OK 21 B URL GET HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=6615264094065939740&zx=a17cc4f7-b8df-4144-8312-7b8cdab652a2
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=6615264094065939740&zx=a17cc4f7-b8df-4144-8312-7b8cdab652a2 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:57:59 GMT
last-modified: Sat, 23 Sep 2023 15:57:59 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 42 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Sat, 23 Sep 2023 14:42:49 GMT
expires: Sat, 07 Oct 2023 14:42:49 GMT
cache-control: public, max-age=1209600
age: 4511
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Hash 76cf20f34e61bb4ebd83ecf652268483
ff6c80fb175d247f11cceb99b7eb113f043c703b
34ed5573773da6701a325bf1c4ee50adbacab764a71e26efe12843e38bd7d438
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60820
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:31:08 GMT
expires: Tue, 17 Sep 2024 17:31:08 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 426412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform.js
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2664)
Hash ce7e88034e2b1226294f3d7e515299c9
326b37908964a9f69460d42cb646716c9f1e86e1
08280e7af6518c3230f34d50cb9534b35c82fddd96138896e2608d9a12661bbe
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21949
date: Sat, 23 Sep 2023 15:58:00 GMT
expires: Sat, 23 Sep 2023 15:58:00 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "22f179323a7dd95a"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-9770034656947675&plah=trojanoriginal.blogspot.com
200 OK 132 kB URL GET HTTP/3 pagead2.googlesyndication.com/pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-9770034656947675&plah=trojanoriginal.blogspot.com
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
File type ASCII text, with very long lines (2079)
Size 132 kB (131563 bytes)
Hash 01a8d102ff3d30ee6df871b99ea0fbd8
b1c9feff07727f25d999a3417bf4b7d3b61b98bf
c4220a758976081ba95ca2da8d0e73f85d4ea6557c5f8c0c6dc6e85e9820857c
GET /pagead/managed/js/adsense/m202309140101/show_ads_impl_with_ama_fy2021.js?client=ca-pub-9770034656947675&plah=trojanoriginal.blogspot.com HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sat, 23 Sep 2023 15:57:59 GMT
expires: Sat, 23 Sep 2023 15:57:59 GMT
cache-control: private, max-age=3600, stale-while-revalidate=3600
content-type: text/javascript; charset=UTF-8
etag: 6768792641433849774
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 131563
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogblog.com/1kt/transparent/black50.png
200 OK 96 B URL GET HTTP/3 www.blogblog.com/1kt/transparent/black50.png
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 857cf81cfd3449fd408ac0604cd3a326
69209e67fdd7533fb3c76a7f3e2430a63909e4e9
380be71e72fb28899a6cf71bad4434677a6df3a2fcce56d23c28bc4794549047
GET /1kt/transparent/black50.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 96
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 08:32:16 GMT
expires: Tue, 26 Sep 2023 08:32:16 GMT
cache-control: public, max-age=604800
last-modified: Tue, 19 Sep 2023 05:53:01 GMT
content-type: image/png
age: 372344
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
4.bp.blogspot.com/-1RzYcNoRoiE/VpbS8YzGG9I/AAAAAAAAFf8/3L4pOajyrGM/w1600/download.jpg
200 OK 2.9 kB URL GET HTTP/2 4.bp.blogspot.com/-1RzYcNoRoiE/VpbS8YzGG9I/AAAAAAAAFf8/3L4pOajyrGM/w1600/download.jpg
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x168, components 3\012- data
Hash 8ca653f587a4f9d46191f915818248dc
9d42e69cc3a01595d478bd88c56bf7354ec4e625
a027fb62ac71eef7e0fbbeecd7150ee9c0c476ff67973833d21e19d9d5ade8d9
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-1RzYcNoRoiE/VpbS8YzGG9I/AAAAAAAAFf8/3L4pOajyrGM/w1600/download.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1600"
expires: Sun, 24 Sep 2023 15:58:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="download.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:00 GMT
server: fife
content-length: 2930
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
528 B URL www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1060)
Hash 38f2e1d56b7d27d9ea275774485878b5
4a9bacdb65fab5a0f617430b6b0080d727bd2bee
69bbe7581d18106ca5be4c70e098034dcb5223476bc43a5074efc167df7890db
GET /followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 23 Sep 2023 15:58:00 GMT
expires: Sat, 23 Sep 2023 15:58:00 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 528
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash a1df14e0c62a34d1aeeb45ab94638130
d3bdfb2c75f9fdc495b9662ae128e4992accc8d6
e95646a781b21b7bebac7070f1b6e5d511fb2fa24d0b24e382ecc97736e3d92a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
0 B URL accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://trojanoriginal.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:dJCfoNNJYiMczKqFTFzFvnDBXWIrXQ:B_UpydO4m3UF7sou; Expires=Mon, 22-Sep-2025 15:58:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
location: https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-PJTD6SGe-pDI3-_a1JOEtA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
trojanoriginal.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmBSZ2XIMzv3vyN7pFBLE3r3hANZ5lSGPlE9-TC8jQ_wOCx-eN9ElCWByVUiTKEB-Tmt4KjNaKKK9rZpilbeSoW03pPo9A
200 OK 263 B URL GET HTTP/3 trojanoriginal.blogspot.com/b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmBSZ2XIMzv3vyN7pFBLE3r3hANZ5lSGPlE9-TC8jQ_wOCx-eN9ElCWByVUiTKEB-Tmt4KjNaKKK9rZpilbeSoW03pPo9A
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type JSON data\012- , ASCII text, with very long lines (410), with no line terminators
Hash 1f10219ffe6acb1be0885df514a7bfae
dc1d8f70a89bf33687646f16fd47a97ae950fd11
d8af4c67f506ce6dc191618bbbf47bdddf2a30e543ccd38585d9cd555f41d593
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmBSZ2XIMzv3vyN7pFBLE3r3hANZ5lSGPlE9-TC8jQ_wOCx-eN9ElCWByVUiTKEB-Tmt4KjNaKKK9rZpilbeSoW03pPo9A HTTP/1.1
Host: trojanoriginal.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/search/label/R.A.Th
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 23 Sep 2023 15:58:00 GMT
expires: Sat, 23 Sep 2023 15:58:00 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 263
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
3.bp.blogspot.com/-L0xy7SwwgxY/VpbUYWtxKnI/AAAAAAAAFgI/--16AKoGVKg/s1020-r/GIF%2BTROJAN.gif
200 OK 429 kB URL GET HTTP/2 3.bp.blogspot.com/-L0xy7SwwgxY/VpbUYWtxKnI/AAAAAAAAFgI/--16AKoGVKg/s1020-r/GIF%2BTROJAN.gif
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type GIF image data, version 89a, 1020 x 204\012- data
Size 429 kB (428748 bytes)
Hash 75d8e5b84291a2d56b0244f1d1420ea0
4ad8bd5e9e7f0178ba2d2c1f7c756e31d0872d92
46b57c1ac71ee2166cb5978391e94e7176d0e8e80d44391080c1d74532068a3a
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /-L0xy7SwwgxY/VpbUYWtxKnI/AAAAAAAAFgI/--16AKoGVKg/s1020-r/GIF%2BTROJAN.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/gif
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1603"
expires: Sun, 24 Sep 2023 15:58:00 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="GIF TROJAN.gif"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:00 GMT
server: fife
content-length: 428748
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 8bd82cc167dcfca92222c771cc727ea4
5412299d9da7fc26af5eb6ab0bb0adcbed11fe19
eaf1c14f5129b21a7ac323e2cb8a7d73b5258af575b971b7f8a507fd7f98577a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/img/widgets/stats-flipper.png
200 OK 233 B URL GET HTTP/3 www.blogger.com/img/widgets/stats-flipper.png
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 88 x 30, 8-bit grayscale, non-interlaced\012- data
Hash 99a2cb03ed5a76104972e477196f1f09
4e12527ed6d99f198728c6631bf7a787911bf4bc
2911f4e04096744757ceab7a895e0ee51494b6feaefaef9f1870272b3dc2dcca
GET /img/widgets/stats-flipper.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 233
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 21:03:57 GMT
expires: Fri, 29 Sep 2023 21:03:57 GMT
cache-control: public, max-age=604800
last-modified: Fri, 22 Sep 2023 05:50:40 GMT
content-type: image/png
age: 68043
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/gen_204?id=ach_evt&tn=DIV&id=cookieChoiceInfo&cls=cookie-choices-info%20singleton-element&ign=false&pw=1280&ph=1024&x=0&y=0 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Sat, 23 Sep 2023 15:58:00 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
partner.googleadservices.com/gampad/cookie.js?domain=trojanoriginal.blogspot.com&callback=_gfp_s_&client=ca-pub-9770034656947675
200 OK 252 B URL GET HTTP/2 partner.googleadservices.com/gampad/cookie.js?domain=trojanoriginal.blogspot.com&callback=_gfp_s_&client=ca-pub-9770034656947675
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.googleadservices.com
FingerprintEB:BF:81:86:29:44:29:54:16:A0:12:6C:6C:7F:D1:8D:ED:9E:97:1A
ValidityMon, 04 Sep 2023 08:21:47 GMT - Mon, 27 Nov 2023 08:21:46 GMT
File type ASCII text, with very long lines (391), with no line terminators
Hash e4ebe82332e6069cbce59a81685ef33b
5f24dc12e2bb51a9cd9c7e3e5bc016e4392f2e00
d3dec6639fa8acd580812c50cb952e66c83d8a22e08dcc0e74d821f7313bee00
GET /gampad/cookie.js?domain=trojanoriginal.blogspot.com&callback=_gfp_s_&client=ca-pub-9770034656947675 HTTP/1.1
Host: partner.googleadservices.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/javascript; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 23 Sep 2023 15:58:00 GMT
server: cafe
cache-control: private
content-length: 252
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 8bd82cc167dcfca92222c771cc727ea4
5412299d9da7fc26af5eb6ab0bb0adcbed11fe19
eaf1c14f5129b21a7ac323e2cb8a7d73b5258af575b971b7f8a507fd7f98577a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
2.6 kB URL www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash 86738b7900c008870ecd74a388bc02b1
9c5acea4ce34bbb67196781d0da97fa13713db20
15ac284802e3b24b6a6805c729fb1af99ffe6b76ed861648ffbe94354e9043eb
GET /navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
3.4 kB URL www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (7332)
Hash d6badc1786fc7f788cfd60b80179e518
afea0726ad49ee51cb37007cd13bcf42fbffc8f7
85b2d968b4048b95d3acb7cfbf5614c774b56d68be9e5c42134728d5256589bc
GET /followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://trojanoriginal.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3357
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
trojanoriginal.blogspot.com/favicon.ico
200 OK 640 B URL GET HTTP/3 trojanoriginal.blogspot.com/favicon.ico
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint37:39:0F:F8:47:2E:23:CF:70:6A:2D:5A:34:A0:98:7E:C9:0F:5A:84
ValidityMon, 04 Sep 2023 08:22:52 GMT - Mon, 27 Nov 2023 08:22:51 GMT
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f7fc1d4d50f645ff5b64d23d2bb19193
a388dd97562ebdf475cbb1d9fa7f1872bca30f4e
e7977f8a900a5a539fcf262b4f3772b8ee491b084b014b3f8176c3229e946a86
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /favicon.ico HTTP/1.1
Host: trojanoriginal.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/search/label/R.A.Th
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Sat, 23 Sep 2023 15:58:01 GMT
date: Sat, 23 Sep 2023 15:58:01 GMT
cache-control: private, max-age=86400
last-modified: Sat, 27 May 2023 04:46:59 GMT
etag: W/"3e2491e978f7a4f1b563c490ec5bd45613ee4cedf838f46e6288b383b32892f5"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 640
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/icons_peach.png
200 OK 907 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_peach.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=15427876
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 22 Sep 2023 02:28:08 GMT
expires: Fri, 29 Sep 2023 02:28:08 GMT
cache-control: public, max-age=604800
last-modified: Thu, 21 Sep 2023 07:52:40 GMT
content-type: image/png
age: 134993
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=15427876
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2664)
Hash 5ea6889749e35d1997d3d7b45b526cbe
b2be66a88cda67c0d38638906a19d3502db702f2
f8f1efe1d0d52a96dff5f0e285975b33bc89f9093c51e50024fa4c1d3810041f
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21959
date: Sat, 23 Sep 2023 15:58:01 GMT
expires: Sat, 23 Sep 2023 15:58:01 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "fb306044a1b24cfb"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
resources.blogblog.com/img/navbar/arrows-light.png
200 OK 117 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-light.png
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=15427876
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 19 Sep 2023 02:56:18 GMT
expires: Tue, 26 Sep 2023 02:56:18 GMT
cache-control: public, max-age=604800
last-modified: Tue, 19 Sep 2023 01:56:24 GMT
content-type: image/png
age: 392503
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform.js
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (2664)
Hash ce7e88034e2b1226294f3d7e515299c9
326b37908964a9f69460d42cb646716c9f1e86e1
08280e7af6518c3230f34d50cb9534b35c82fddd96138896e2608d9a12661bbe
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21949
date: Sat, 23 Sep 2023 15:58:01 GMT
expires: Sat, 23 Sep 2023 15:58:01 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "22f179323a7dd95a"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 45 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=15427876
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Hash 216b38745f3cce08ced4200dd91c83a4
3f6bd3ee5da23060e704e8116b5a0961e20a80bf
a8183085f79cc939053929846561337bf0b9287aedece2d7eb154a87e572bab1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:31:09 GMT
expires: Tue, 17 Sep 2024 17:31:09 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 426412
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
200 OK 45 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
FingerprintBB:B9:27:FB:7D:F3:A7:1A:57:CC:23:F8:42:E9:10:BE:59:7E:1F:D4
ValidityMon, 04 Sep 2023 08:17:06 GMT - Mon, 27 Nov 2023 08:17:05 GMT
File type ASCII text, with very long lines (1503)
Hash 216b38745f3cce08ced4200dd91c83a4
3f6bd3ee5da23060e704e8116b5a0961e20a80bf
a8183085f79cc939053929846561337bf0b9287aedece2d7eb154a87e572bab1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.L92w_vMR5kE.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45424
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 18 Sep 2023 17:31:05 GMT
expires: Tue, 17 Sep 2024 17:31:05 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Sep 2023 15:18:27 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 426416
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a/default-user=s45-c
200 OK 316 B URL GET HTTP/2 lh3.googleusercontent.com/a/default-user=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 9fae1841320a0eaa434a022513f60859
245fac7a1ba86adda5bf5571babef7d5280672a4
1e2ce2743c2908d3aa1ce10a03be76d756eaa493cd41f9dcc94a3cc35cbfa1bd
GET /a/default-user=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
server: fife
content-length: 316
x-xss-protection: 0
date: Sat, 23 Sep 2023 13:54:50 GMT
expires: Sun, 24 Sep 2023 13:54:50 GMT
cache-control: public, max-age=86400, no-transform
age: 7391
etag: "v0"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/ALV-UjUUZa2wRGCGPCv7mEzfrACP-vRItLv_Rtpm46A_Qx3AKUM=s45-c
200 OK 2.9 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjUUZa2wRGCGPCv7mEzfrACP-vRItLv_Rtpm46A_Qx3AKUM=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 28c2b1cc004e9ce479fc1028b2268b2d
2990de76f6cbc2eb0fc5fc6ac4fb2fac4162dba2
c64fed0b24750d755fdea8e150285ee7fc787913e1adfef6b49e5f8f9595dab1
GET /a-/ALV-UjUUZa2wRGCGPCv7mEzfrACP-vRItLv_Rtpm46A_Qx3AKUM=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1e25"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 2932
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjV6tCf9ItJuS4pEXXMumOUiDF2bUxWUZSKClqcxLpJIqL6N=s45-c
200 OK 2.0 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjV6tCf9ItJuS4pEXXMumOUiDF2bUxWUZSKClqcxLpJIqL6N=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 5a3032a6d72166c968c4d70f10dbf763
237feb418ae5d1eaa3040141b3f76e05096d4858
1c96e3164386de0b8d306abb242d6548e668a5c60e3da1ed403c5665eb39e632
GET /a-/ALV-UjV6tCf9ItJuS4pEXXMumOUiDF2bUxWUZSKClqcxLpJIqL6N=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v4095"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1955
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjUQIjuvRoz4RKTp49lmRph4QA9pYtiEIZf1RxRpv9rEZQ=s45-c
200 OK 1.7 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjUQIjuvRoz4RKTp49lmRph4QA9pYtiEIZf1RxRpv9rEZQ=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 622fad4a110b32b99ccd685962894796
7c4f462dd826412baca94705e93cb8b8db273c8e
9a449667b46990d4a2d46b36dae3f52d2a9174106e23d3b061a56a029b29506f
GET /a-/ALV-UjUQIjuvRoz4RKTp49lmRph4QA9pYtiEIZf1RxRpv9rEZQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vc"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1705
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjXZy0J7Tb5jx1-P-sZDaNPuDCU39RZ1gQSvvc7SOM-8HhU=s45-c
200 OK 2.0 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjXZy0J7Tb5jx1-P-sZDaNPuDCU39RZ1gQSvvc7SOM-8HhU=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash c224b0b3a65eec171bfa739a12099a0b
b31f2f359e84b637dcc8228a73474f42fe5977d9
6b5852979e6de08ab9252892d66c62b21743b55437bfbea573d2bb6baa59494d
GET /a-/ALV-UjXZy0J7Tb5jx1-P-sZDaNPuDCU39RZ1gQSvvc7SOM-8HhU=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v88"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1987
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjV68edm0b5c1CVp1HUdWUnnBlxt_r2QJNBVC96fxOnK4Q=s45-c
200 OK 1.8 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjV68edm0b5c1CVp1HUdWUnnBlxt_r2QJNBVC96fxOnK4Q=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 0faf3cd64c107ceed36179035d4401eb
2de6e1319562612f18a152d031a5e393488457a2
972c6ae177723c0e85f18592c8baa30aef89b6203bf2c783cd0f7ca3cbebdaa9
GET /a-/ALV-UjV68edm0b5c1CVp1HUdWUnnBlxt_r2QJNBVC96fxOnK4Q=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v7"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1769
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjXi-4KQhfY2iklZkhsazNMAr5AkxSuvWzRdOgZEO-CIqnnx=s45-c
200 OK 4.6 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjXi-4KQhfY2iklZkhsazNMAr5AkxSuvWzRdOgZEO-CIqnnx=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 4835d0f13888098aabac9a262715fb1b
96f96dace5445f780defd68973ee6c70bcc7005e
e75ea039a36aebada3a06192a61f2ee4c180925c136568a05c7840ca5aadab61
GET /a-/ALV-UjXi-4KQhfY2iklZkhsazNMAr5AkxSuvWzRdOgZEO-CIqnnx=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "vdadd"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 4576
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjU6BplSNStC3mUU3dzBjXRqCC0dat8PgS1c0oNVhXuj8e8=s45-c
200 OK 1.3 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjU6BplSNStC3mUU3dzBjXRqCC0dat8PgS1c0oNVhXuj8e8=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 109ea01566438549fdc8cb5b0a7b26ac
b07d2f3e037a6ebfe1b8e5439a471b0af10a6036
8c6c0fb903ac071622a946f53b3d3ddbb1bff8bc061698265808467981b9ee74
GET /a-/ALV-UjU6BplSNStC3mUU3dzBjXRqCC0dat8PgS1c0oNVhXuj8e8=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v164"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1288
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjVamf2no-rai9xOrfMrplWRBO_AoKGlxuwt_FWxuRPn3xc=s45-c
200 OK 5.0 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjVamf2no-rai9xOrfMrplWRBO_AoKGlxuwt_FWxuRPn3xc=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 9928d5ad3d392da490e7c435fa0bd5c2
e33b277e44591d819e6daafe6e1b86af1c5e3a77
6c967ddaa1847ab2bcef5b805462418e9df1aced11e764efd55051e2050112c4
GET /a-/ALV-UjVamf2no-rai9xOrfMrplWRBO_AoKGlxuwt_FWxuRPn3xc=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "ve4"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 5027
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjVp6B4npPNZR8jIeZFmmz1rkEObbFS3hBtlRkAXbBSh8Hk=s45-c
200 OK 1.8 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjVp6B4npPNZR8jIeZFmmz1rkEObbFS3hBtlRkAXbBSh8Hk=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 9af18c8a0850689c554151da15b23deb
85623f51d7db047e679b5b9ae7524db5224bebc1
3485d36cb0d19753a42c8409c756ec273e5a63f4f9d7a5b747733217c4d0ce96
GET /a-/ALV-UjVp6B4npPNZR8jIeZFmmz1rkEObbFS3hBtlRkAXbBSh8Hk=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1949"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1769
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjWMCQ2vzmsAQ6LwgKzt0wTwrxdjYtSsAJgvvoHcW8vAXA=s45-c
200 OK 2.0 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjWMCQ2vzmsAQ6LwgKzt0wTwrxdjYtSsAJgvvoHcW8vAXA=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 56c14abbccb272e8b3b2024140f6e428
05b57bfefdc459c65bf40793755c8393061d0632
0b20c5997c49542982af75b3b4d3bb46e313c6d2dc8f3950440f96232a944d07
GET /a-/ALV-UjWMCQ2vzmsAQ6LwgKzt0wTwrxdjYtSsAJgvvoHcW8vAXA=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1c"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1962
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjXc5hdq27yfnwX3AG9Eazcr2uptN9wsXfZCulKNOOlC0Gw=s45-c
200 OK 1.5 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjXc5hdq27yfnwX3AG9Eazcr2uptN9wsXfZCulKNOOlC0Gw=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 6797a0ca9f082dd059f63312033e736d
be7704e392decf0ee0252e7cf18dac1152a19f09
e4d78c07797cc3ff4cd8ee900ddf606686d6d835976af0d69026f040c62e3fc1
GET /a-/ALV-UjXc5hdq27yfnwX3AG9Eazcr2uptN9wsXfZCulKNOOlC0Gw=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v16a"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1544
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjVw8y2_Oa9zRxbiVY92ntKU0q_yLcG4Rg0_jqliwOBbZQkk=s45-c
200 OK 2.0 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjVw8y2_Oa9zRxbiVY92ntKU0q_yLcG4Rg0_jqliwOBbZQkk=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 65f270172f6cadda96d0bcd963b4ca87
bb77efa487d1fa275e62b398fc09749a62caac2a
cb31f884260c1930c7e587d8c01b16e6db36dec8c160bac443fc1b445d76755a
GET /a-/ALV-UjVw8y2_Oa9zRxbiVY92ntKU0q_yLcG4Rg0_jqliwOBbZQkk=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v7420"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1974
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjWNX_-PBzhs9Kcbao87Cf2PWSfFTsX4BoeryOzGwerdVQ=s45-c
200 OK 1.6 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjWNX_-PBzhs9Kcbao87Cf2PWSfFTsX4BoeryOzGwerdVQ=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2efbc0e55644571ebf45f52e16ad9b65
375e4f75892c603c69510d8a32158ec19815f32e
2a5daf0aa0510e0ddbb74447fa1ca465342bd856914005e87f362da936035290
GET /a-/ALV-UjWNX_-PBzhs9Kcbao87Cf2PWSfFTsX4BoeryOzGwerdVQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1f"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1615
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjWSly1M8B9BOvC2LwZ3fLvLzO8f5ugDzzfwZDzWnKG6hQ=s45-c
200 OK 1.7 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjWSly1M8B9BOvC2LwZ3fLvLzO8f5ugDzzfwZDzWnKG6hQ=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 5990dbd7b90b87c786a96788bd5d3364
1e76669912534083e611394bd77bf475a3a312ae
dea2990af7ada782d6d17cb9c2dbbb23359de32f275a7779a510eea14b3c62aa
GET /a-/ALV-UjWSly1M8B9BOvC2LwZ3fLvLzO8f5ugDzzfwZDzWnKG6hQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v6b"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1739
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjWChUP41zXMS7GHGyZ4Q_GqKAFge_MSFH5VYkyQzPsakQ=s45-c
200 OK 690 B URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjWChUP41zXMS7GHGyZ4Q_GqKAFge_MSFH5VYkyQzPsakQ=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 59544955dfd770475d740cbb0dfc73ea
a0d6a58187b2bab1acfb9626a7eddbd1d9a08803
2621648b434e19f2d73c99d165ec85c9678e2b8c6806d719c5013407f33b9202
GET /a-/ALV-UjWChUP41zXMS7GHGyZ4Q_GqKAFge_MSFH5VYkyQzPsakQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 690
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjWsqBnooukwYvYM-yyu1d2qahePrFlC92fLz92hFbBzDBw=s45-c
200 OK 3.3 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjWsqBnooukwYvYM-yyu1d2qahePrFlC92fLz92hFbBzDBw=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 9a07b24834c6aca8df81f7cbfea25761
fa42717ca5cb2f91452d4d16c2ad776d0d92affb
b174312426ceeaff7af36cf4264b33acf5e58e03f71471bdfc35c49d0125eca8
GET /a-/ALV-UjWsqBnooukwYvYM-yyu1d2qahePrFlC92fLz92hFbBzDBw=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1eb9"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 3342
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjV_XmBe_-Zgo55EAMrzkFd2DSPgvL96uIqAQKyWyP6EOQ=s45-c
200 OK 1.7 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjV_XmBe_-Zgo55EAMrzkFd2DSPgvL96uIqAQKyWyP6EOQ=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash c531e180373b34f0b60d558c5238b7c2
5d51aa3e3a22ff660af115990a8bb9248c3b226c
72e3e4719a3263a03ecc0e1cc184f59ce28afc998d34e36ac39d2af0a9e77823
GET /a-/ALV-UjV_XmBe_-Zgo55EAMrzkFd2DSPgvL96uIqAQKyWyP6EOQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v53"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 1653
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjXO7m1UrDsAZhGiDl7nswvDfkqpL8Rc46mN7PNbBs1n4Cc=s45-c
200 OK 4.8 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjXO7m1UrDsAZhGiDl7nswvDfkqpL8Rc46mN7PNbBs1n4Cc=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 22804b45748976394ec1a0ad46949b60
20141a9597e47ff16efb5c89d9eeacfa345bf500
5fc11a5f980ddc4674f598631a99377a5228206e48642e9ef81bd221b0f02388
GET /a-/ALV-UjXO7m1UrDsAZhGiDl7nswvDfkqpL8Rc46mN7PNbBs1n4Cc=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v3fb"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 4775
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ALV-UjVX1ePHtnDzTrihJXwlJSHx6bVB7P1Rm9tpJn6hhX_RNyc=s45-c
200 OK 2.7 kB URL GET HTTP/2 lh3.googleusercontent.com/a-/ALV-UjVX1ePHtnDzTrihJXwlJSHx6bVB7P1Rm9tpJn6hhX_RNyc=s45-c
IP
Requested by https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1#id=I0_1695484680621&_gfid=I0_1695484680621&parent=https%3A%2F%2Ftrojanoriginal.blogspot.com&pfname=&rpctoken=19357636
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint25:24:05:0B:D2:5F:DF:ED:3B:BE:B8:47:80:C5:AE:2B:51:94:69:F5
ValidityMon, 04 Sep 2023 08:23:19 GMT - Mon, 27 Nov 2023 08:23:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash e366eb84d9a908dbb57e3112a1c7e589
6fef174e727b194aecfed8e4c349a67f77a72356
9e0ad9e72a954b40db5f1dd4ee82a5d238fa1a2f8de1d557ddbd679c07870ae1
GET /a-/ALV-UjVX1ePHtnDzTrihJXwlJSHx6bVB7P1Rm9tpJn6hhX_RNyc=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v3346"
expires: Sun, 24 Sep 2023 15:58:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:01 GMT
server: fife
content-length: 2726
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 04c3317215dbb6290c22b51fb76ba3fd
4f6dd945ef1d6d3ff6863608e7f26b1ba0b00134
47ca7e2430599f81f776f12dfad83f9a89ac22c636adfdfbb7b001e3b9167c16
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230920&st=env
200 OK 12 kB URL GET HTTP/3 pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20230920&st=env
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
File type JSON data\012- , ASCII text, with very long lines (15722), with no line terminators
Hash 0ad068f3f71669a9324ddd815036c7a3
46cf1679f076d998c882ea91c8a8efcefdea19d4
9165a6143650063dceb935b79b52b76b8024fe5aeac4eb50e98fdfd024a5de82
GET /getconfig/sodar?sv=200&tid=gda&tv=r20230920&st=env HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://trojanoriginal.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
content-type: application/json; charset=UTF-8
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
date: Sat, 23 Sep 2023 15:58:03 GMT
server: cafe
content-length: 11864
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
472 B IP
Hash 5f51b90d588da5830fe2f42925d6bced
27e4e2138921def351cd58994edaf1bbeb26b60a
448968bd0ef2587926e2ffc64e36cbfa8590fa30880e143dabfba31ea5f98199
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tpc.googlesyndication.com/sodar/sodar2.js
200 OK 6.4 kB URL GET HTTP/2 tpc.googlesyndication.com/sodar/sodar2.js
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
Fingerprint51:2A:C5:84:C9:49:F8:BA:3F:D9:82:0E:BA:01:C7:D5:36:C2:BA:64
ValidityMon, 04 Sep 2023 08:22:41 GMT - Mon, 27 Nov 2023 08:22:40 GMT
File type ASCII text, with very long lines (1321)
Hash 2cc87e9764aebcbbf36ff2061e6a2793
b4f2ffdf4c695aa79f0e63651c18a88729c2407b
61c32059a5e94075a7ecff678b33907966fc9cfa384daa01aa057f872da14dbb
GET /sodar/sodar2.js HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 6386
date: Sat, 23 Sep 2023 15:58:03 GMT
expires: Sat, 23 Sep 2023 15:58:03 GMT
cache-control: private, max-age=3000
etag: "1637097310169751"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tpc.googlesyndication.com/sodar/sodar2/225/runner.html
200 OK 5.0 kB URL GET HTTP/3 tpc.googlesyndication.com/sodar/sodar2/225/runner.html
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2020)
Hash 1d3d22df067f5219073f9c0fabb74fdd
d5c226022639323d93946df3571404116041e588
55a119c0394f901a8a297e109c17b5e5402689708b999ab10691c16179f32a4a
GET /sodar/sodar2/225/runner.html HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="adspam-signals-scs"
report-to: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
content-length: 5046
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 23 Sep 2023 10:32:29 GMT
expires: Sun, 22 Sep 2024 10:32:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Jun 2021 20:47:05 GMT
content-type: text/html
vary: Accept-Encoding
age: 19534
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ocsp.pki.goog/gts1c3
471 B IP
Hash ec7e4fa5141f5c291141f904d913eb18
a1d02556789afef84c5c74b80eb45cd1604c3c70
9d7147857b1d24f497c88bbb8edb50fa9e27d8abbf81a4156bb5f97cfaf977aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 23 Sep 2023 15:58:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api2/aframe
200 OK 15 kB URL GET HTTP/2 www.google.com/recaptcha/api2/aframe
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintD2:77:FE:08:C6:61:6A:42:5C:1F:85:13:DA:23:B2:B8:46:20:45:88
ValidityMon, 04 Sep 2023 08:23:29 GMT - Mon, 27 Nov 2023 08:23:28 GMT
File type gzip compressed data\012- data
Hash 64ddda2d5fbd17e2d2104b17000beb4a
056438f17f2e4da4013989ee4760470207a411da
6a3ce8cff45c9a98f0fd8d7b62fcbbd4d2d1db3a188ecdc8f2f73e051de8d6c0
GET /recaptcha/api2/aframe HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
cross-origin-resource-policy: cross-origin
cross-origin-embedder-policy: require-corp
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
expires: Sat, 23 Sep 2023 15:58:03 GMT
date: Sat, 23 Sep 2023 15:58:03 GMT
cache-control: private, max-age=300
content-security-policy: script-src 'nonce-EBD88oFnvG58xgJgdgCU9A' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230920&jk=3368388457729443&rc=
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&li=gda_r20230920&jk=3368388457729443&rc=
IP
Requested by https://www.google.com/recaptcha/api2/aframe
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&li=gda_r20230920&jk=3368388457729443&rc= HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:04 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tpc.googlesyndication.com/generate_204?vIThTA
0 B URL tpc.googlesyndication.com/generate_204?vIThTA
IP
Certificate IssuerGoogle Trust Services LLC
Subjecttpc.googlesyndication.com
Fingerprint51:2A:C5:84:C9:49:F8:BA:3F:D9:82:0E:BA:01:C7:D5:36:C2:BA:64
ValidityMon, 04 Sep 2023 08:22:41 GMT - Mon, 27 Nov 2023 08:22:40 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?vIThTA HTTP/1.1
Host: tpc.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Sat, 23 Sep 2023 15:58:04 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230920&jk=3368388457729443&bg=!d3SldDvNAAYrDsWMCw47ADQBe5WfODrefPUo_EzcMjUV3ZLr6MnQSwq_hzFuc5WnOTLWfFF9SsTwquuUrs0OiD1QiQJiAgAAASxSAAAAG2gBB5kCi3SZFH9aFqMajnO6AWvanJSs4HFuw2rfjic5_BGf1CCr6jOk7Wb7lnJsRldvmdrqB3W_jYpYQgwJLlUaYqySPDy5-9si116jeIrhYoKLqgIes9NBC8jeQQiIsd7QVLHMxUXcMHsTcDyxyHfWusM3l01dWR481AtlwAl6hTxwtvxemIg3qzEB_OSAZ88k1Ehard1igT3UFH1IijNnjcr9-fLoyNvOCUkJf86E0XywhFAbYmW-gCZdqeqPUvLvOxpxGs4ctaP5yq3eH45b5cuW-MLrOjR4q1WG-Fje9hFOMaDJQeGk2t6lpUpZPh-aKphuXpRgvv6h13xd0xWB9KD9wlW1O3qfZZIVADk7wk8ZiZVE7A8eK-FsyFC6M6F1tz34gEt8ryoxO4A1a68nXDwT3JHWggsVXHZS-5t0kuimDC1j6zOAKFWioLH_O0HBNBtejuJnPC9SAYOfCdHPMHEuVESu4Y-CiWNPzGChuVef5-XCcdqrp76LckB7DrG6pnTcu3kvkKqQ5Ul8Y_DkfxMyzzYBpk6Z3c6GuBA9icct0g2VCrE3zH0HB3GeeKo_g50-BGCHZQ8nlEQp0ZGj3IvX_Jh01m43Up-7VfcmEhJy0kSzxtUwnWkDt_6USJqB6eYeej7h0F0_Nj-XKL1uoZkL2kEwzqYwop0WgtBew514HDLImsH_nIYlVn-c5n0kvHV-tElUXesUCitLqwmbJowOOhwKVIn0z2Dr2LWmRGjY5QOOY-AZj-3Q-SSZVyDHHgnA0lPKUOkq6AJUwoIwBrJhXQEe-H_VJ8FF8ZbY3YfX3jj12FVv5TX5uXoMUoXa8ztzNC0jhOAI1Ih_crQZCHqUxbvsy9o2iDT-IFCsGg
204 No Content 0 B URL GET HTTP/3 pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230920&jk=3368388457729443&bg=!d3SldDvNAAYrDsWMCw47ADQBe5WfODrefPUo_EzcMjUV3ZLr6MnQSwq_hzFuc5WnOTLWfFF9SsTwquuUrs0OiD1QiQJiAgAAASxSAAAAG2gBB5kCi3SZFH9aFqMajnO6AWvanJSs4HFuw2rfjic5_BGf1CCr6jOk7Wb7lnJsRldvmdrqB3W_jYpYQgwJLlUaYqySPDy5-9si116jeIrhYoKLqgIes9NBC8jeQQiIsd7QVLHMxUXcMHsTcDyxyHfWusM3l01dWR481AtlwAl6hTxwtvxemIg3qzEB_OSAZ88k1Ehard1igT3UFH1IijNnjcr9-fLoyNvOCUkJf86E0XywhFAbYmW-gCZdqeqPUvLvOxpxGs4ctaP5yq3eH45b5cuW-MLrOjR4q1WG-Fje9hFOMaDJQeGk2t6lpUpZPh-aKphuXpRgvv6h13xd0xWB9KD9wlW1O3qfZZIVADk7wk8ZiZVE7A8eK-FsyFC6M6F1tz34gEt8ryoxO4A1a68nXDwT3JHWggsVXHZS-5t0kuimDC1j6zOAKFWioLH_O0HBNBtejuJnPC9SAYOfCdHPMHEuVESu4Y-CiWNPzGChuVef5-XCcdqrp76LckB7DrG6pnTcu3kvkKqQ5Ul8Y_DkfxMyzzYBpk6Z3c6GuBA9icct0g2VCrE3zH0HB3GeeKo_g50-BGCHZQ8nlEQp0ZGj3IvX_Jh01m43Up-7VfcmEhJy0kSzxtUwnWkDt_6USJqB6eYeej7h0F0_Nj-XKL1uoZkL2kEwzqYwop0WgtBew514HDLImsH_nIYlVn-c5n0kvHV-tElUXesUCitLqwmbJowOOhwKVIn0z2Dr2LWmRGjY5QOOY-AZj-3Q-SSZVyDHHgnA0lPKUOkq6AJUwoIwBrJhXQEe-H_VJ8FF8ZbY3YfX3jj12FVv5TX5uXoMUoXa8ztzNC0jhOAI1Ih_crQZCHqUxbvsy9o2iDT-IFCsGg
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
Fingerprint67:E1:F2:5D:6B:29:01:55:36:48:B9:44:27:87:2A:0A:C4:DD:B7:B7
ValidityMon, 04 Sep 2023 08:17:04 GMT - Mon, 27 Nov 2023 08:17:03 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/sodar?id=sodar2&v=225&t=2&li=gda_r20230920&jk=3368388457729443&bg=!d3SldDvNAAYrDsWMCw47ADQBe5WfODrefPUo_EzcMjUV3ZLr6MnQSwq_hzFuc5WnOTLWfFF9SsTwquuUrs0OiD1QiQJiAgAAASxSAAAAG2gBB5kCi3SZFH9aFqMajnO6AWvanJSs4HFuw2rfjic5_BGf1CCr6jOk7Wb7lnJsRldvmdrqB3W_jYpYQgwJLlUaYqySPDy5-9si116jeIrhYoKLqgIes9NBC8jeQQiIsd7QVLHMxUXcMHsTcDyxyHfWusM3l01dWR481AtlwAl6hTxwtvxemIg3qzEB_OSAZ88k1Ehard1igT3UFH1IijNnjcr9-fLoyNvOCUkJf86E0XywhFAbYmW-gCZdqeqPUvLvOxpxGs4ctaP5yq3eH45b5cuW-MLrOjR4q1WG-Fje9hFOMaDJQeGk2t6lpUpZPh-aKphuXpRgvv6h13xd0xWB9KD9wlW1O3qfZZIVADk7wk8ZiZVE7A8eK-FsyFC6M6F1tz34gEt8ryoxO4A1a68nXDwT3JHWggsVXHZS-5t0kuimDC1j6zOAKFWioLH_O0HBNBtejuJnPC9SAYOfCdHPMHEuVESu4Y-CiWNPzGChuVef5-XCcdqrp76LckB7DrG6pnTcu3kvkKqQ5Ul8Y_DkfxMyzzYBpk6Z3c6GuBA9icct0g2VCrE3zH0HB3GeeKo_g50-BGCHZQ8nlEQp0ZGj3IvX_Jh01m43Up-7VfcmEhJy0kSzxtUwnWkDt_6USJqB6eYeej7h0F0_Nj-XKL1uoZkL2kEwzqYwop0WgtBew514HDLImsH_nIYlVn-c5n0kvHV-tElUXesUCitLqwmbJowOOhwKVIn0z2Dr2LWmRGjY5QOOY-AZj-3Q-SSZVyDHHgnA0lPKUOkq6AJUwoIwBrJhXQEe-H_VJ8FF8ZbY3YfX3jj12FVv5TX5uXoMUoXa8ztzNC0jhOAI1Ih_crQZCHqUxbvsy9o2iDT-IFCsGg HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Sat, 23 Sep 2023 15:58:04 GMT
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
200 OK 6.7 kB URL GET HTTP/3 www.blogger.com/navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6892), with no line terminators
Hash 155a63f45506d3a6c6492ff3781e701e
dfde94d5f1d545e6efab1898977b874232602e31
8d353f8f1b7ac19a5ba239205b96648bc051128017005c4e74b302b1f27caab6
GET /navbar.g?targetBlogID=6615264094065939740&blogName=trojan+original&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://trojanoriginal.blogspot.com/search&blogLocale=pt_BR&v=2&homepageUrl=https://trojanoriginal.blogspot.com/&vt=4696683164358905332&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2584
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
302 Found 13 kB URL GET HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subjectaccounts.google.com
Fingerprint2F:C1:71:0A:05:D9:0F:38:EF:D1:16:F7:50:AF:41:48:6B:F9:BA:B5
ValidityMon, 04 Sep 2023 08:23:30 GMT - Mon, 27 Nov 2023 08:23:29 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://trojanoriginal.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: application/binary
set-cookie: __Host-GAPS=1:dJCfoNNJYiMczKqFTFzFvnDBXWIrXQ:B_UpydO4m3UF7sou; Expires=Mon, 22-Sep-2025 15:58:00 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
location: https://www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-PJTD6SGe-pDI3-_a1JOEtA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: unsafe-none
server: ESF
content-length: 0
x-xss-protection: 0
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
302 Found 13 kB URL GET HTTP/3 www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.L92w_vMR5kE.O%2Fd%3D1%2Frs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://trojanoriginal.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 302 Found
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D6615264094065939740%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttps://trojanoriginal.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.L92w_vMR5kE.O/d%253D1/rs%253DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%253D__features__%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Sat, 23 Sep 2023 15:58:00 GMT
expires: Sat, 23 Sep 2023 15:58:00 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 528
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
200 OK 13 kB URL GET HTTP/3 www.blogger.com/followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1
IP
Requested by https://trojanoriginal.blogspot.com/search/label/R.A.Th
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
FingerprintCB:2E:4E:04:8F:48:B1:A1:1A:F4:F6:E1:8A:18:2F:F9:B5:A6:DD:60
ValidityMon, 04 Sep 2023 08:16:44 GMT - Mon, 27 Nov 2023 08:16:43 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /followers.g?blogID=6615264094065939740&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByM1OGViMDAqC3RyYW5zcGFyZW50MgcjZmZmZmZmOgcjZmZmZmZmQgcjNThlYjAwSgcjMDAwMDAwUgcjNThlYjAwWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=https://trojanoriginal.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.L92w_vMR5kE.O/d%3D1/rs%3DAHpOoo-GjmyR8TQVDKPrbqj5UQg7cU3cCA/m%3D__features__&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://trojanoriginal.blogspot.com/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 23 Sep 2023 15:58:00 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3357
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
216.58.207.193
0.0.0.0