GET sanoramackie.blogspot.com/
200 OK 53 kB URL User Request GET HTTP/2 sanoramackie.blogspot.com/
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint94:BE:07:34:DC:B3:69:6B:D8:B7:0C:00:54:6F:1B:B5:65:03:76:83
ValidityMon, 05 Feb 2024 08:16:24 GMT - Mon, 29 Apr 2024 08:16:23 GMT
File type HTML document, ASCII text, with very long lines (13221)
Hash 8893a5c27fc7100fd86b3c5d9eebb10a
27ad8074e4be5ba2a09c4ba81c6e55dc6c103ac1
b5833462e2a183ef518ce6a1b2808827711a77ce60cad10846be5118eac95d12
GET / HTTP/1.1
Host: sanoramackie.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 28 Feb 2024 04:01:26 GMT
date: Wed, 28 Feb 2024 04:01:26 GMT
cache-control: private, max-age=0
last-modified: Wed, 19 Jul 2023 22:21:34 GMT
etag: W/"e83cad3f1839a2263ced8d1e04058b08d83a682314bfb7908c6a26730d46a767"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 53417
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET sanoramackie.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 sanoramackie.blogspot.com/js/cookienotice.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint94:BE:07:34:DC:B3:69:6B:D8:B7:0C:00:54:6F:1B:B5:65:03:76:83
ValidityMon, 05 Feb 2024 08:16:24 GMT - Mon, 29 Apr 2024 08:16:23 GMT
File type JavaScript source, ASCII text
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: sanoramackie.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 28 Feb 2024 04:01:26 GMT
expires: Wed, 06 Mar 2024 04:01:26 GMT
cache-control: public, max-age=604800
last-modified: Tue, 27 Feb 2024 18:30:18 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 5.6 kB URL GET HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /ajax/libs/font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 28 Feb 2024 04:01:27 GMT
content-type: text/css; charset=utf-8
content-length: 5631
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e5f-7918"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 6036541
expires: Mon, 17 Feb 2025 04:01:27 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r8G0W%2FproDqVdmtmr%2FLjY6PX%2FMqwN0HLccammAURYAhVt9H2bI%2FUidXgEq41I0frDFvyaiAcoFedPfMyNYG8fmBnePaR9KbsmeCb7HbvWOEOJUIjUwf39sa0jMKuS9bX2X5doXwp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 85c5c42fff5d0afa-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/lookatdons/gasak@main/auto.js
200 OK 229 B URL GET HTTP/2 cdn.jsdelivr.net/gh/lookatdons/gasak@main/auto.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type HTML document, ASCII text
Hash 2237c8083fb0c7c29b060466ca234501
73fe59b524d6a8104ce353cd58efa38918fef8b8
28db2d7fec5a9079a897e815aafa5bf1442ecfa5d43fff4a3625065cc4deb31a
GET /gh/lookatdons/gasak@main/auto.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"151-c/5ZtSTWqBBM41PNWO+jiRj++Lg"
content-encoding: br
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
age: 24698
x-served-by: cache-fra-etou8220100-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 229
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/lookatdons/gasak@main/spare.js
200 OK 6 B URL GET HTTP/2 cdn.jsdelivr.net/gh/lookatdons/gasak@main/spare.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /gh/lookatdons/gasak@main/spare.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"1-rcg7GeeTSRscbqD9i0bNnzLlkvw"
content-encoding: br
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
age: 11635
x-served-by: cache-fra-eddf8230101-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 6
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/lookatdons/gasak@main/sihol.js
200 OK 235 B URL GET HTTP/2 cdn.jsdelivr.net/gh/lookatdons/gasak@main/sihol.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
File type JavaScript source, ASCII text
Hash 9bdd598b78b7cd8ffcf6f073becfeae4
2a3214d83d5bbaa47f793fb45fb80985c299b908
5d46e9802c6d3e7337bda9f1bbb505d84fb6616d38ae1518b52e69baae894d40
GET /gh/lookatdons/gasak@main/sihol.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"1d8-KjIU2D1buqR/eT+0X7gJhcKZuQg"
content-encoding: br
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
age: 22769
x-served-by: cache-fra-eddf8230127-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 235
X-Firefox-Spdy: h2
GET apis.google.com/js/platform.js
200 OK 22 kB URL GET HTTP/2 apis.google.com/js/platform.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.apis.google.com
FingerprintBF:C9:4C:C2:F5:CD:88:83:B0:2A:A2:0C:62:D0:84:73:03:4C:65:51
ValidityMon, 05 Feb 2024 08:19:59 GMT - Mon, 29 Apr 2024 08:19:58 GMT
File type JavaScript source, ASCII text, with very long lines (2437)
Hash 22bb0bee85abdb9d4a065962582936fc
01ba1a8588197194c93a4673c472ff4a804bcc9c
e23a7507aebfd7528cc99957bbaa4a9917de241a5559fa73ed0ed51e424aebff
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21876
date: Wed, 28 Feb 2024 04:01:27 GMT
expires: Wed, 28 Feb 2024 04:01:27 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9127b207f82b7141"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.jsdelivr.net/gh/lookatdons/gasak@main/server.js
200 OK 199 B URL GET HTTP/2 cdn.jsdelivr.net/gh/lookatdons/gasak@main/server.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectjsdelivr.net
Fingerprint05:87:2C:BA:73:14:21:54:82:00:8B:AD:85:8F:E9:C6:4D:C7:66:09
ValidityWed, 27 Sep 2023 18:13:13 GMT - Mon, 28 Oct 2024 18:13:12 GMT
Hash f64a28a30d0ab8b55dab57422c2c7407
0e8c979ddcb69085ce20f35cf0a740de8ab0b8bf
33ea365b846739807ab2bc400bcb30efe5b0774b199f5e2d99d9c15d5c559edf
GET /gh/lookatdons/gasak@main/server.js HTTP/1.1
Host: cdn.jsdelivr.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: *
timing-allow-origin: *
cache-control: public, max-age=604800, s-maxage=43200
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
content-type: application/javascript; charset=utf-8
x-jsd-version: main
x-jsd-version-type: branch
etag: W/"115-DoyXndy2kIXOIPNc8KdA3oqwuL8"
content-encoding: br
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
age: 7660
x-served-by: cache-fra-etou8220129-FRA, cache-hel1410024-HEL
x-cache: HIT, HIT
vary: Accept-Encoding
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 199
X-Firefox-Spdy: h2
GET pi.tedcdn.com/r/s3.amazonaws.com/talkstar-photos/uploads/9ebc48f3-4eff-4a3c-bd96-462a6dffe469/BrianCox_2009U-embed.jpg?cb=20160511&quality=63&u=&w=512
200 OK 18 kB URL GET HTTP/2 pi.tedcdn.com/r/s3.amazonaws.com/talkstar-photos/uploads/9ebc48f3-4eff-4a3c-bd96-462a6dffe469/BrianCox_2009U-embed.jpg?cb=20160511&quality=63&u=&w=512
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subject*.tedcdn.com
Fingerprint88:0F:37:1E:F3:4B:7B:41:A6:9C:1F:63:88:44:B0:FC:8C:5B:77:B4
ValidityTue, 27 Feb 2024 10:51:27 GMT - Mon, 27 May 2024 10:51:26 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 512x288, components 3
Hash ec7f3cfb69fa08e9ca543efef3a850c7
ccaeb32d5d7a7abab4925705eaaf05a2e143f55e
a0c9e968c38a7a4442d3df7e3c2eb3565e293fd7aa5bba3938f722c6a736e829
GET /r/s3.amazonaws.com/talkstar-photos/uploads/9ebc48f3-4eff-4a3c-bd96-462a6dffe469/BrianCox_2009U-embed.jpg?cb=20160511&quality=63&u=&w=512 HTTP/1.1
Host: pi.tedcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx/1.14.2
content-type: image/jpeg
last-modified: Wed, 10 Feb 2021 19:00:22 GMT
cache-control: max-age=31536000, public=true
access-control-allow-origin: *
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
age: 292588
x-served-by: td_07ba9ad458c7, cache-iad-kiad7000162-IAD, cache-hel1410034-HEL
x-cache: HIT, MISS
x-cache-hits: 10, 0
x-timer: S1709092887.066205,VS0,VE114
content-length: 17608
X-Firefox-Spdy: h2
GET s3-media0.fl.yelpcdn.com/bphoto/NPs0_3SbPgNlTabDPoswdg/348s.jpg
200 OK 28 kB URL GET HTTP/2 s3-media0.fl.yelpcdn.com/bphoto/NPs0_3SbPgNlTabDPoswdg/348s.jpg
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjects3-media.fl.yelpcdn.com
Fingerprint33:75:AD:E0:B5:11:0B:BD:AB:21:A8:B3:D0:57:C5:7A:D4:77:CD:EE
ValidityMon, 09 Oct 2023 17:15:18 GMT - Sat, 09 Nov 2024 17:15:17 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 348x348, components 3
Hash 8f4e985d4a42151c35ac6e335cfa5c03
14d3117ac333fcb5f0cc24b6235da4fc6967cbb3
82c17a185f3646a9bb0265411249a013cce7adabe0a085f9f2533feea2cf69a0
GET /bphoto/NPs0_3SbPgNlTabDPoswdg/348s.jpg HTTP/1.1
Host: s3-media0.fl.yelpcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
etag: "8f4e985d4a42151c35ac6e335cfa5c03"
content-type: image/jpeg
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
x-served-by: cache-sjc10057-SJC, cache-hel1410029-HEL
x-cache: HIT, MISS
x-cache-hits: 1, 0
x-timer: S1709092887.078823,VS0,VE163
cache-control: max-age=315360000, immutable
timing-allow-origin: *
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 27572
X-Firefox-Spdy: h2
GET www.blogger.com/static/v1/widgets/2129073323-widgets.js
200 OK 52 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/2129073323-widgets.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type JavaScript source, ASCII text, with very long lines (2302)
Hash 9512d1ef8ddbe4127292e63f9b5395d6
7c3e6effb6d9c30cc579003fee1dbb71696e5841
673f5cd415ef91449249d5999de7b2a58f104bc4b5f993f512c7f2da5d4d13f4
GET /static/v1/widgets/2129073323-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51535
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Feb 2024 01:59:15 GMT
expires: Thu, 27 Feb 2025 01:59:15 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 28 Feb 2024 00:55:46 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 7332
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d
404 Not Found 1.7 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7e1de32268cd6ddf10d3d1c94551acc3
33a69699fcaf2dbf0791eb90f9092435c8dc8364
a50de8c64f8dc2cbdd86e46b6529d54d74518e56b2731ea619845db83ae2c9a3
GET /blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:27 GMT
server: sffe
content-length: 1720
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/2 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash dfde2ddaa5bf069b24cebc995601cf53
02cbd9151a1a7be84a1470d7d3fb67bcbca964a1
57c8dfe289d64af90657be11205d538c1bdfb295b27751683e88ce5c914a0893
GET /blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:27 GMT
server: sffe
content-length: 1799
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL GET HTTP/2 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash e232bf55a5314e94db1151ff9601fd8d
609614eb31c6beb162d0270e27de460f0838234b
b73f39ab7b7b21f2e94d63b103d99dec45c0883bf7f0af23da813c15e4292f96
GET /blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:27 GMT
server: sffe
content-length: 1745
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash bd2046aeb0af412c516c8c24147591e6
f8a5b3edb84538afe8d0602bf12c34399a16e9c0
4809e447f7f098d693c3dd5f63c275a6d48466b3e1152e6fd234e81be9c715b3
GET /blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:27 GMT
server: sffe
content-length: 1752
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET www.merkur.de/bilder/2022/11/17/91922998/30312706-zum-backen-kochen-oder-einfach-nur-aufs-brot-butter-ist-in-deutschland-beliebt-symbolfoto-2e5xaPXCbwBG.jpg
200 OK 33 kB URL GET HTTP/2 www.merkur.de/bilder/2022/11/17/91922998/30312706-zum-backen-kochen-oder-einfach-nur-aufs-brot-butter-ist-in-deutschland-beliebt-symbolfoto-2e5xaPXCbwBG.jpg
IP
ASN #34788 Neue Medien Muennich GmbH
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectmerkur.de
Fingerprint3B:B4:69:A9:AF:88:29:9B:04:E3:B1:3B:E2:A7:2B:36:37:2A:49:49
ValidityWed, 03 Jan 2024 03:46:26 GMT - Tue, 02 Apr 2024 03:46:25 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1100x733, components 3
Hash 030ff956f1f86f26db47ba597d82c067
625df2d183824a5f299753b3157f89ee093087f6
d10f67ac0923aacbbe6736f5e250cc532da7d18cb7c8223866eeea55ea66af92
GET /bilder/2022/11/17/91922998/30312706-zum-backen-kochen-oder-einfach-nur-aufs-brot-butter-ist-in-deutschland-beliebt-symbolfoto-2e5xaPXCbwBG.jpg HTTP/1.1
Host: www.merkur.de
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 28 Feb 2024 04:01:27 GMT
content-type: image/jpeg
content-length: 32866
expires: Sun, 10 Mar 2024 12:43:59 GMT
cache-control: max-age=2592000
last-modified: Fri, 09 Feb 2024 12:43:54 GMT
mime-version: 1.0
x-varnish: 232492110 1008981695
age: 1610248
via: 1.1 varnish-v4
x-cache: HIT
x-cache-hits: 377
accept-ranges: bytes
server: nginx, idlb1
X-Firefox-Spdy: h2
GET assets.teenvogue.com/photos/5d0a4919c4daaa77891d847e/16:9/w_2560%2Cc_limit/Elite_106_Unit_0111_R.jpg
200 OK 253 kB URL GET HTTP/1.1 assets.teenvogue.com/photos/5d0a4919c4daaa77891d847e/16:9/w_2560%2Cc_limit/Elite_106_Unit_0111_R.jpg
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGlobalSign nv-sa
Subjectcondenast.com
Fingerprint20:49:A6:A9:A1:30:AE:57:F2:05:6D:A6:A6:CF:D8:93:72:F9:85:72
ValidityTue, 13 Jun 2023 18:45:52 GMT - Sun, 14 Jul 2024 18:45:51 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2560x1440, Scaling: [none]x[none], YUV color, decoders should clamp
Size 253 kB (252836 bytes)
Hash 9f2ca34d5c5efd6256bd7cfb509e3776
ff6a35413e3ba563f05ba75a8d3c90af796c546b
dfa5bff5d549a4644d9f8a89ab720708046f85743286eeac4c4b2626705154b7
GET /photos/5d0a4919c4daaa77891d847e/16:9/w_2560%2Cc_limit/Elite_106_Unit_0111_R.jpg HTTP/1.1
Host: assets.teenvogue.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 252836
Content-Type: image/webp
Etag: "etuDegQc/UWG4RC1zHkBzeKGPHtz8uuxJo/MiuFPKXk"
Fastly-Io-Info: ifsz=22842252 idim=7080x4391 ifmt=jpeg ofsz=252836 odim=2560x1440 ofmt=webp
Fastly-Io-Served-By: vpop-kiad7010251
Fastly-Stats: io=1
X-Amz-Server-Side-Encryption: AES256
Fastly-Restarts: 1
Accept-Ranges: bytes
Date: Wed, 28 Feb 2024 04:01:27 GMT
Age: 100270
X-Served-By: cache-iad-kiad7000068-IAD, cache-hel1410032-HEL
X-Cache: HIT, MISS
X-Cache-Hits: 1, 0
X-Timer: S1709092887.206338,VS0,VE216
experience: katra
server-timing: geo;desc="continent=EU;country=NO;pop=HEL"
cache-control: max-age=3600, must-revalidate, public
timing-allow-origin: *
vary: accept
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 1a0fa638f325b8db25a0170800217a25
19936eb0543f79da23a8e64d52cb1a0ee89f6cb3
37a4016dad308ef6a7a796eda58849552ca411dfffbc1bda94ef831fb60341e0
GET /blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:27 GMT
server: sffe
content-length: 1831
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET media.nbclosangeles.com/2022/11/karen-bass-office.png?resize=1200%2C675&quality=85&strip=all
200 OK 731 kB URL GET HTTP/2 media.nbclosangeles.com/2022/11/karen-bass-office.png?resize=1200%2C675&quality=85&strip=all
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerDigiCert Inc
Subjectmedia.nbcnewyork.com
Fingerprint7A:BC:5C:8A:2E:8F:BD:FD:77:4C:68:74:BC:6D:C6:F8:EB:61:48:7F
ValidityWed, 16 Aug 2023 00:00:00 GMT - Sun, 18 Aug 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image
Size 731 kB (730638 bytes)
Hash 904234cb03b7aa32b9cdd556c0c7ec61
a896bfb563501072f9159e196ce8f73d8d9ff0fd
9275752c7b836244412dbfd18eed637a568b74b0e09fc7ae95f467114e8bde67
GET /2022/11/karen-bass-office.png?resize=1200%2C675&quality=85&strip=all HTTP/1.1
Host: media.nbclosangeles.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
content-type: image/webp
content-length: 730638
last-modified: Wed, 28 Feb 2024 04:01:27 GMT
etag: "e509db07f54d3912"
vary: Accept
strict-transport-security: max-age=31536000
x-rq: ams5 109 86 443
cache-control: max-age=31536000
accept-ranges: bytes
date: Wed, 28 Feb 2024 04:01:27 GMT
access-control-max-age: 86400
access-control-allow-credentials: false
access-control-allow-headers: *
access-control-allow-methods: GET,POST
access-control-allow-origin: *
X-Firefox-Spdy: h2
GET effacedefend.com/66d03a0154b09a9cdc94a1a16dbf5124/invoke.js
200 OK 12 kB URL GET HTTP/1.1 effacedefend.com/66d03a0154b09a9cdc94a1a16dbf5124/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subjecteffacedefend.com
Fingerprint99:32:EA:4B:9E:03:8A:BB:BA:AD:DD:40:F5:D8:3A:9C:B4:14:30:7A
ValidityMon, 12 Feb 2024 06:48:04 GMT - Sun, 12 May 2024 06:48:03 GMT
File type JavaScript source, ASCII text, with very long lines (31330), with no line terminators
Hash 2789876b2692a672095f621bc132bb1e
7e191085d5bf81573bb8d605b7598d1e9d46586c
d85d031536e34613bcfb539ec8900e40d1008e518ff8ee68030c6a52c64e57c7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /66d03a0154b09a9cdc94a1a16dbf5124/invoke.js HTTP/1.1
Host: effacedefend.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 28 Feb 2024 04:01:28 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4129eaa45dd280a7f8d0cc053027c4b3
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs
200 OK 61 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint15:64:B9:36:57:83:FF:80:1D:11:90:74:39:EC:B1:FC:98:E7:B7:C7
ValidityMon, 05 Feb 2024 08:03:56 GMT - Mon, 29 Apr 2024 08:03:55 GMT
File type JavaScript source, ASCII text, with very long lines (1833)
Hash 4d4e1c761e3b8eb804a71cdf093cace9
6c17659b5b7782edac52e8d940594a4299f160ce
ee0c655ef27e84f0b50811b4d851be3b9a1177c8195f2060e7249c9e100daa81
GET /_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61139
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Feb 2024 03:33:12 GMT
expires: Thu, 27 Feb 2025 03:33:12 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Feb 2024 17:51:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 1696
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 151ba0b0914dce268e6180e1289948dd
71111cdfb89ae2cd5de06bc8358311f9b7700657
1b0365d3ad1e37bb771fc396f314f671f1a7baf62d44365a5e81c63beeac6fa7
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 28 Feb 2024 04:01:28 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://sanoramackie.blogspot.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=26a5b837-0356-46d5-a08a-867f3a253084:2:1; expires=Sat, 25 Feb 2034 04:01:28 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d
404 Not Found 1.7 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 7e1de32268cd6ddf10d3d1c94551acc3
33a69699fcaf2dbf0791eb90f9092435c8dc8364
a50de8c64f8dc2cbdd86e46b6529d54d74518e56b2731ea619845db83ae2c9a3
GET /blogger_img_proxy/AEn0k_vo3CUBNVs2ZJINpnhoCec0dkopc0E6nHs_LeF2vW71OM91-cTdXtuX96LVYLYIQHodcneqP1aQsUvPsZs9Be-VgZ1MwUnqaP8W0QwYZx4JtYyMW-xIB8hSCJsArm7LU5Mm=s0-d HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:28 GMT
server: sffe
content-length: 1720
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/2 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash dfde2ddaa5bf069b24cebc995601cf53
02cbd9151a1a7be84a1470d7d3fb67bcbca964a1
57c8dfe289d64af90657be11205d538c1bdfb295b27751683e88ce5c914a0893
GET /blogger_img_proxy/AEn0k_uLBNbspmSixkySJMe0-sBclMCDv2b9und5KoIl3U_x4TOahG7IWMh2NT80DUEFrJgDogih5w6_sB5k6wsm7aCtZhSslnu_lnxBX-axoGe3bElI2b7OWGwOrDfM9zU3fApJINR-LJvuLj0AYxR1JBrqC8esUk5SxIF6-i2oFvR-r2ml1nJW0htHKlAqxyM0b1n0dA=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:28 GMT
server: sffe
content-length: 1799
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 1a0fa638f325b8db25a0170800217a25
19936eb0543f79da23a8e64d52cb1a0ee89f6cb3
37a4016dad308ef6a7a796eda58849552ca411dfffbc1bda94ef831fb60341e0
GET /blogger_img_proxy/AEn0k_vxM4XNgCtWEMsMDoiNYFMONXZUT4UZ8bUVJYfZWd8XzpdcPHm6-hFhhz2IpuBJbbJgqH26Ue8Ucx4AGS1hMBVEdSUS9uwdGEoW6Go6K1-zDS5wuOAhrRHy0lyeCjBHWHxGct9mLFAMGvchC6xQ2b_CNiYPSNLYVLvV-KKeBJDAD24PXFMiMYfWVj3wMbs1Vgac30L3PD2-qH-ep20bQPm7CLi58303cipTLg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:28 GMT
server: sffe
content-length: 1831
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 42 B URL GET HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.g.doubleclick.net
FingerprintF9:C9:CC:8E:3F:62:67:61:11:E0:1F:E7:00:4A:19:E3:4E:31:40:DA
ValidityMon, 05 Feb 2024 08:03:51 GMT - Mon, 29 Apr 2024 08:03:50 GMT
Hash 7f5f2be159837d73b72a4b37616bce44
c93d7f25b530b05c26440d3352213b683d03dcc3
ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 42
x-xss-protection: 0
date: Tue, 27 Feb 2024 23:32:32 GMT
expires: Tue, 12 Mar 2024 23:32:32 GMT
cache-control: public, max-age=1209600
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 16136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu
404 Not Found 1.7 kB URL GET HTTP/2 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash e232bf55a5314e94db1151ff9601fd8d
609614eb31c6beb162d0270e27de460f0838234b
b73f39ab7b7b21f2e94d63b103d99dec45c0883bf7f0af23da813c15e4292f96
GET /blogger_img_proxy/AEn0k_uv61pSTyiQiSpl7qMVB9C1PibRxzKhVUvFz_8fgt95nWlJPz6C9qB9fl-KU1ylBNEqYtLCeYaKEmpEgQDz6hKjEtnq1dJOGrYW7R3IKnJn7g4H3YAbuC6jw28hdAkpQdT6NJa77mYm25Jt=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:28 GMT
server: sffe
content-length: 1745
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu
404 Not Found 1.8 kB URL GET HTTP/3 lh3-testonly.googleusercontent.com/blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint72:BC:E5:2A:54:15:8A:36:AB:0E:62:5C:4F:6C:2B:FF:FD:16:86:4E
ValidityMon, 05 Feb 2024 08:18:43 GMT - Mon, 29 Apr 2024 08:18:42 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash bd2046aeb0af412c516c8c24147591e6
f8a5b3edb84538afe8d0602bf12c34399a16e9c0
4809e447f7f098d693c3dd5f63c275a6d48466b3e1152e6fd234e81be9c715b3
GET /blogger_img_proxy/AEn0k_tpvcxa8CX27wTRrLo2iNvEy-rJvdUp_s_1zR3fZnUT7ZC5obE5Gpm-SJpO2SoNgpL_eIPjGdnFjx9lmmdBPUZHZ4kNAzynots1GewMFqAXaI1VUkXIi-ehsPzXSutdvhY-Tgna2nWEGE75qvVSaLY=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3-testonly.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Wed, 28 Feb 2024 04:01:28 GMT
server: sffe
content-length: 1752
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET draft.blogger.com/dyn-css/authorization.css?targetBlogID=8636484122121374487&zx=b464eef2-fcc5-40ac-ac9b-8559c3f211fc
200 OK 21 B URL GET HTTP/3 draft.blogger.com/dyn-css/authorization.css?targetBlogID=8636484122121374487&zx=b464eef2-fcc5-40ac-ac9b-8559c3f211fc
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type very short file (no magic)
Hash 68b329da9893e34099c7d8ad5cb9c940
adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=8636484122121374487&zx=b464eef2-fcc5-40ac-ac9b-8559c3f211fc HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Feb 2024 04:01:29 GMT
last-modified: Wed, 28 Feb 2024 04:01:29 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
2.6 kB URL draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__
IP
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (3172)
Hash 8d15ced5433e46447b6a49a1e8dc3179
9adc1f34eb55dde14371cdaa83594cb749bef560
cb5280231c9d16d5cf0f1f0930fd607b28e0f5f0c8cba360063d41a168f3baff
GET /navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__ HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Feb 2024 04:01:29 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2589
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET prayercertificatecompletion.com/watch.362226078732.js?key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&tz=0&dev=e&res=14.2071&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
307 Temporary Redirect 0 B URL GET HTTP/1.1 prayercertificatecompletion.com/watch.362226078732.js?key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&tz=0&dev=e&res=14.2071&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectprayercertificatecompletion.com
FingerprintAC:DD:D7:7E:F7:B7:EC:31:56:88:26:86:93:C4:0B:67:02:E1:BF:4B
ValidityThu, 22 Feb 2024 12:58:12 GMT - Wed, 22 May 2024 12:58:11 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.362226078732.js?key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&tz=0&dev=e&res=14.2071&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1 HTTP/1.1
Host: prayercertificatecompletion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.21.6
Date: Wed, 28 Feb 2024 04:01:29 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://sanoramackie.blogspot.com
Access-Control-Allow-Origin: https://sanoramackie.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://prayercertificatecompletion.com/watch.362226078732.js?dev=e&key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&pst=1709092949&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&res=14.2071&rmtc=t&shu=8af0e1b61f65c79bf9c1c25af9dcbfc969800e30d2402b30dfe88d095e3b6d934b208cea7e6c9868236e4ffdcc832c764005d53049da00b9ab68e9ab7a8f40cc202d4aa265d61be5006d1ed1b39ebf3eddd1e6ded5b57794b55c072a016c7a&tz=0&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
Set-Cookie: u_pl=20480673; expires=Thu, 29 Feb 2024 04:01:29 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.jemewMf9JXNQCrIAwYwR8OnDhc9y2LgO71blpWrsQFo; expires=Wed, 28 Feb 2024 04:02:29 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 608ebe9a974d994555fede2d3f679ac1
Strict-Transport-Security: max-age=0; includeSubdomains
GET apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 22 kB URL GET HTTP/3 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
Requested by https://draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsanoramackie.blogspot.com&pfname=&rpctoken=79895446
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint15:64:B9:36:57:83:FF:80:1D:11:90:74:39:EC:B1:FC:98:E7:B7:C7
ValidityMon, 05 Feb 2024 08:03:56 GMT - Mon, 29 Apr 2024 08:03:55 GMT
File type JavaScript source, ASCII text, with very long lines (2437)
Hash bf78e91c4b8c660626008446d6d30703
db09dae5dda987e24027a540e47650cb970e31bf
f554260f317f497231227b9def0144f0bf370ae71cdd7a54ac60d0ae1a56e096
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21886
date: Wed, 28 Feb 2024 04:01:29 GMT
expires: Wed, 28 Feb 2024 04:01:29 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "59662782cf9cc03d"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET resources.blogblog.com/img/navbar/icons_orange.png
200 OK 915 B URL GET HTTP/3 resources.blogblog.com/img/navbar/icons_orange.png
IP
Requested by https://draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsanoramackie.blogspot.com&pfname=&rpctoken=79895446
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced
Hash 87f25844d23ac1ee03604e668f5c1797
85d440947d70a78672740ff7e8062f68ce9d99a3
d70c36f2f61b735573caa3dd5a1602e19916701bb88d99ff4527cd2c89fa8b72
GET /img/navbar/icons_orange.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Feb 2024 03:43:32 GMT
expires: Wed, 06 Mar 2024 03:43:32 GMT
cache-control: public, max-age=604800
last-modified: Tue, 27 Feb 2024 12:57:00 GMT
content-type: image/png
age: 1077
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET resources.blogblog.com/img/navbar/arrows-blue.png
200 OK 104 B URL GET HTTP/3 resources.blogblog.com/img/navbar/arrows-blue.png
IP
Requested by https://draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsanoramackie.blogspot.com&pfname=&rpctoken=79895446
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced
Hash 38c95719e05f4184a301768d8de91e09
d0ed1147d46f2cf592584239a5a101d6f2abb588
259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
GET /img/navbar/arrows-blue.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Feb 2024 02:08:42 GMT
expires: Wed, 06 Mar 2024 02:08:42 GMT
cache-control: public, max-age=604800
last-modified: Tue, 27 Feb 2024 07:55:33 GMT
content-type: image/png
age: 6767
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs
200 OK 46 kB URL GET HTTP/3 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs
IP
Requested by https://draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fsanoramackie.blogspot.com&pfname=&rpctoken=79895446
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint15:64:B9:36:57:83:FF:80:1D:11:90:74:39:EC:B1:FC:98:E7:B7:C7
ValidityMon, 05 Feb 2024 08:03:56 GMT - Mon, 29 Apr 2024 08:03:55 GMT
File type JavaScript source, ASCII text, with very long lines (1833)
Hash c8be3350843695958a33474aeb3ea8f1
ad92694d9b189ee479c1be438636e39247b216af
22494eb4f5fc2ef8c229b9df2e171990687e4837282655145cca0fa302af1278
GET /_/scs/abc-static/_/js/k=gapi.lb.en.8uXxGUoumbY.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://draft.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45690
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Feb 2024 01:04:30 GMT
expires: Sat, 22 Feb 2025 01:04:30 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Feb 2024 17:51:09 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 442619
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET prayercertificatecompletion.com/watch.362226078732.js?dev=e&key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&pst=1709092949&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&res=14.2071&rmtc=t&shu=8af0e1b61f65c79bf9c1c25af9dcbfc969800e30d2402b30dfe88d095e3b6d934b208cea7e6c9868236e4ffdcc832c764005d53049da00b9ab68e9ab7a8f40cc202d4aa265d61be5006d1ed1b39ebf3eddd1e6ded5b57794b55c072a016c7a&tz=0&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
200 OK 2.0 kB URL GET HTTP/1.1 prayercertificatecompletion.com/watch.362226078732.js?dev=e&key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&pst=1709092949&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&res=14.2071&rmtc=t&shu=8af0e1b61f65c79bf9c1c25af9dcbfc969800e30d2402b30dfe88d095e3b6d934b208cea7e6c9868236e4ffdcc832c764005d53049da00b9ab68e9ab7a8f40cc202d4aa265d61be5006d1ed1b39ebf3eddd1e6ded5b57794b55c072a016c7a&tz=0&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectprayercertificatecompletion.com
FingerprintAC:DD:D7:7E:F7:B7:EC:31:56:88:26:86:93:C4:0B:67:02:E1:BF:4B
ValidityThu, 22 Feb 2024 12:58:12 GMT - Wed, 22 May 2024 12:58:11 GMT
File type JavaScript source, ASCII text, with very long lines (2449)
Hash 0421d675f53130a46c1c7e73b04e83c3
7007ccf130e5982f39e100440343fe34fe082fcc
216f44bceb88e9360cf1d7005f17e9c66c53cae6dc3941a073d0878c56c1b10f
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /watch.362226078732.js?dev=e&key=66d03a0154b09a9cdc94a1a16dbf5124&kw=%5B%22sanora%22%2C%22mackie%22%5D&pst=1709092949&refer=https%3A%2F%2Fsanoramackie.blogspot.com%2F&res=14.2071&rmtc=t&shu=8af0e1b61f65c79bf9c1c25af9dcbfc969800e30d2402b30dfe88d095e3b6d934b208cea7e6c9868236e4ffdcc832c764005d53049da00b9ab68e9ab7a8f40cc202d4aa265d61be5006d1ed1b39ebf3eddd1e6ded5b57794b55c072a016c7a&tz=0&uuid=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1 HTTP/1.1
Host: prayercertificatecompletion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://sanoramackie.blogspot.com
Referer: https://sanoramackie.blogspot.com/
DNT: 1
Connection: keep-alive
Cookie: u_pl=20480673; ain=eyJhbGciOiJIUzI1NiJ9.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.jemewMf9JXNQCrIAwYwR8OnDhc9y2LgO71blpWrsQFo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Wed, 28 Feb 2024 04:01:29 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://sanoramackie.blogspot.com
Access-Control-Allow-Origin: https://sanoramackie.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=26a5b837-0356-46d5-a08a-867f3a253084:2:1; expires=Wed, 06 Mar 2024 04:01:29 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 29 Feb 2024 04:01:29 GMT; secure; SameSite=None
uncs=1; expires=Thu, 29 Feb 2024 04:01:29 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 29 Feb 2024 04:01:29 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 29 Feb 2024 04:01:29 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 259b77c56b732c719a5a9491320c5e87
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
GET sanoramackie.blogspot.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=totalcountdata
200 OK 4.2 kB URL GET HTTP/3 sanoramackie.blogspot.com/feeds/posts/summary?max-results=1&alt=json-in-script&callback=totalcountdata
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint94:BE:07:34:DC:B3:69:6B:D8:B7:0C:00:54:6F:1B:B5:65:03:76:83
ValidityMon, 05 Feb 2024 08:16:24 GMT - Mon, 29 Apr 2024 08:16:23 GMT
File type Unicode text, UTF-8 text, with very long lines (14625)
Hash 5af41fac1cc707ab4e2d3dab9cc89101
8856c71894e5af3622bb05d30ac861add8be6fc5
aa7a30bdfcc43cb773c6ccdd8a6d29e82e030d575520f464beb436fd8cfac592
GET /feeds/posts/summary?max-results=1&alt=json-in-script&callback=totalcountdata HTTP/1.1
Host: sanoramackie.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"4cb5c89b53274f852753f1b114eb7d62cc9ac81d1b74c872d6a40cb174b7de53"
date: Wed, 28 Feb 2024 04:01:29 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Wed, 28 Feb 2024 04:01:30 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Wed, 19 Jul 2023 22:21:34 GMT
content-encoding: gzip
content-length: 4169
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint7A:EA:B9:09:71:70:6C:87:C9:D3:82:74:8A:7B:B4:60:E5:40:2D:8D
ValidityMon, 03 Jul 2023 00:00:00 GMT - Tue, 02 Jul 2024 23:59:59 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /ajax/libs/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://cdnjs.cloudflare.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Wed, 28 Feb 2024 04:01:29 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 77160
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-12d68"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 7954033
expires: Mon, 17 Feb 2025 04:01:29 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ziaEjxqqWArRbQUUorILg%2B5on9B6QGOkU1RsxS4Zr8UBcrcfr8nN2Ioha389u5ZsxivQ2QqaEQTh2vHBtg2E4CuwHEd5ipqw4nfcX4f%2FP4MBvZAkLWHx7VlM85oWh1K0uBr%2Fj7or"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 85c5c43eefad56c9-OSL
alt-svc: h3=":443"; ma=86400
GET fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint7E:D8:A3:26:76:2A:70:11:A5:C6:42:20:61:35:14:1C:03:F2:35:55
ValidityMon, 05 Feb 2024 08:19:14 GMT - Mon, 29 Apr 2024 08:19:13 GMT
File type Web Open Font Format (Version 2), TrueType, length 48208, version 1.0
Hash c49b7c3643f781d71645c5a40a78b5bf
e71138026b38afc443fb60da5ffc2244c4f5eb11
8cbc049ddbd7ca67068451ce754401833499959c4c6ed7b98f664d42e0597808
GET /s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48208
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Feb 2024 01:25:30 GMT
expires: Sat, 22 Feb 2025 01:25:30 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:24:45 GMT
content-type: font/woff2
age: 441359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL GET HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint7E:D8:A3:26:76:2A:70:11:A5:C6:42:20:61:35:14:1C:03:F2:35:55
ValidityMon, 05 Feb 2024 08:19:14 GMT - Mon, 29 Apr 2024 08:19:13 GMT
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Feb 2024 03:42:33 GMT
expires: Thu, 27 Feb 2025 03:42:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
age: 1136
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
Fingerprint7E:D8:A3:26:76:2A:70:11:A5:C6:42:20:61:35:14:1C:03:F2:35:55
ValidityMon, 05 Feb 2024 08:19:14 GMT - Mon, 29 Apr 2024 08:19:13 GMT
File type Web Open Font Format (Version 2), TrueType, length 48208, version 1.0
Hash c49b7c3643f781d71645c5a40a78b5bf
e71138026b38afc443fb60da5ffc2244c4f5eb11
8cbc049ddbd7ca67068451ce754401833499959c4c6ed7b98f664d42e0597808
GET /s/raleway/v29/1Ptug8zYS_SKggPNyC0ITw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://sanoramackie.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48208
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Feb 2024 01:25:30 GMT
expires: Sat, 22 Feb 2025 01:25:30 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 13 Sep 2023 23:24:45 GMT
content-type: font/woff2
age: 441359
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
GET cdn.cloudimagesb.com/cti/0f/19/1c/0f191c5d3acdb94fc619fe49f3e35e6d/1627915929.png
200 OK 111 kB URL GET HTTP/2 cdn.cloudimagesb.com/cti/0f/19/1c/0f191c5d3acdb94fc619fe49f3e35e6d/1627915929.png
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerLet's Encrypt
Subjectcdn.cloudimagesb.com
Fingerprint71:38:53:46:20:AD:CB:67:E9:56:B6:72:8C:A7:4C:60:7B:37:35:13
ValidityMon, 22 Jan 2024 05:00:36 GMT - Sun, 21 Apr 2024 05:00:35 GMT
File type PNG image data, 300 x 250, 8-bit/color RGB, non-interlaced
Size 111 kB (111206 bytes)
Hash 07ff58dd4e527aa139b3ca4bc2d86d12
68f4fec46190913399a1ee165eb17ceee6901ac3
39af4877d1d9b2f78a9ca4c0060438a7cf2ddd271c3581910600b6999728dc77
GET /cti/0f/19/1c/0f191c5d3acdb94fc619fe49f3e35e6d/1627915929.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Wed, 28 Feb 2024 04:01:29 GMT
content-type: image/png
content-length: 111206
server: nginx/1.21.6
last-modified: Mon, 02 Aug 2021 14:52:19 GMT
etag: "610806a3-1b266"
expires: Fri, 01 Mar 2024 04:01:29 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
GET sanoramackie.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 sanoramackie.blogspot.com/favicon.ico
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint94:BE:07:34:DC:B3:69:6B:D8:B7:0C:00:54:6F:1B:B5:65:03:76:83
ValidityMon, 05 Feb 2024 08:16:24 GMT - Mon, 29 Apr 2024 08:16:23 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: sanoramackie.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=26a5b837-0356-46d5-a08a-867f3a253084%3A2%3A1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Wed, 28 Feb 2024 04:01:29 GMT
date: Wed, 28 Feb 2024 04:01:29 GMT
cache-control: private, max-age=86400
last-modified: Wed, 19 Jul 2023 22:21:34 GMT
etag: W/"e83cad3f1839a2263ced8d1e04058b08d83a682314bfb7908c6a26730d46a767"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET d2y6mqrpjbqoe6.cloudfront.net/image/upload/f_auto,q_auto/cdn1/movies-pictures/80a7ab9c-484e-4130-89cf-1dd3fb807b01.jpg
200 OK 22 kB URL GET HTTP/2 d2y6mqrpjbqoe6.cloudfront.net/image/upload/f_auto,q_auto/cdn1/movies-pictures/80a7ab9c-484e-4130-89cf-1dd3fb807b01.jpg
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerAmazon
Subject*.cloudfront.net
FingerprintFA:21:45:DC:4D:94:03:A3:09:77:51:78:4A:21:F2:C5:6D:94:BE:52
ValidityTue, 10 Oct 2023 00:00:00 GMT - Thu, 19 Sep 2024 23:59:59 GMT
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x360, Scaling: [none]x[none], YUV color, decoders should clamp
Hash 2a1772efd09ddeebcdcf01c985fa2dd2
1091e9072fe6905afdf1a92185e8d319b23467da
c7cbf73155b1a72e049251fa99061630bf805806a38728ba2cbe26976f15659f
GET /image/upload/f_auto,q_auto/cdn1/movies-pictures/80a7ab9c-484e-4130-89cf-1dd3fb807b01.jpg HTTP/1.1
Host: d2y6mqrpjbqoe6.cloudfront.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 22390
content-disposition: inline; filename="80a7ab9c-484e-4130-89cf-1dd3fb807b01.webp"
etag: "2a1772efd09ddeebcdcf01c985fa2dd2"
last-modified: Wed, 05 Aug 2020 02:08:58 GMT
date: Wed, 28 Feb 2024 04:01:29 GMT
cache-control: public, no-transform, max-age=31536000
server-timing: cld-fastly;mitm=zp;dur=3;cpu=1;start=2024-02-28T04:01:29.789Z;desc=hit,rtt;dur=88
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,X-Content-Type-Options
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: UUrnQTmTHhrsr-cvKiMBsuBliAaWalEJU2r6k2wrd5QX6UykLL5gDg==
X-Firefox-Spdy: h2
GET draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__
200 OK 6.7 kB URL GET HTTP/3 draft.blogger.com/navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint9B:14:77:76:EB:D5:FA:64:9E:BD:ED:51:CF:39:E7:E6:CB:E1:2A:B8
ValidityMon, 05 Feb 2024 08:02:54 GMT - Mon, 29 Apr 2024 08:02:53 GMT
File type HTML document, Unicode text, UTF-8 text, with very long lines (6894), with no line terminators
Hash 493e0c15c0dec1e7b849ccc251f409f9
9111d5a4eb6dd0db7f74a01f3b44c489010693dd
22b9cdab5bce97fd517c83397bbfe2d7eccf3f168b0d3e38ddf72676c34c52c6
GET /navbar.g?targetBlogID=8636484122121374487&blogName=Sanora+Mackie&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://sanoramackie.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://sanoramackie.blogspot.com/&vt=-8558029722777136673&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.8uXxGUoumbY.O%2Fd%3D1%2Frs%3DAHpOoo96qx3mL4tzGUOa-0q0udyPRqEAoA%2Fm%3D__features__ HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 28 Feb 2024 04:01:29 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2589
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
GET fonts.googleapis.com/css?family=Poppins%3A400%2C700%7CRaleway%3A400%2C700&ver=5.0.3
200 OK 5.5 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Poppins%3A400%2C700%7CRaleway%3A400%2C700&ver=5.0.3
IP
Requested by https://sanoramackie.blogspot.com/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint48:72:AA:F2:E2:69:76:76:93:18:78:2B:17:6E:20:5F:DF:87:66:5C
ValidityMon, 05 Feb 2024 08:19:19 GMT - Mon, 29 Apr 2024 08:19:18 GMT
File type ASCII text, with very long lines (5612), with no line terminators
Hash 62100fd6cf580b6501c5c4be069e3f2f
1d567e971a0bbb8b7d67394f61ebf6d61b66bad5
f150d33d0bdbe787078b740cb3fc4da5479beac560ef403caa76f6dfbf4fd006
GET /css?family=Poppins%3A400%2C700%7CRaleway%3A400%2C700&ver=5.0.3 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://sanoramackie.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 28 Feb 2024 04:01:27 GMT
date: Wed, 28 Feb 2024 04:01:27 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
216.58.207.225
104.17.25.14
104.110.31.70
3.69.69.24
0.0.0.0