karolynna.com/im
188.114.97.1301 Moved Permanently 0 B IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /im HTTP/1.1
Host: karolynna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Fri, 02 Dec 2022 11:35:05 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 02 Dec 2022 12:35:05 GMT
Location: https://karolynna.com/im
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fSIWHAuupsIbVoPEB5HG4%2BZWNYeMuFf%2B%2FmPnZxmAOpP1Uj%2B3jbvnHRl%2BG2fVONyLVBy4sKG6k8TqeHDwIryaSA8z4razuN5hslLGhIawtlT4QdFflPUuDVMj%2BXxzsURJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7733c1d4f8241c12-OSL
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3bbb845b153026fc5332dd4506585b57
3cad200fac28fd00f34ce6ef79373e661e188743
6035871c0de6ff2d120921461207cfa32bc286e1fe78849ce74815ffbb9ff950
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8213
Expires: Fri, 02 Dec 2022 13:51:58 GMT
Date: Fri, 02 Dec 2022 11:35:05 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7439fb99a444b66db1e68ffbfaa38451
4b7742d7956485906f1c392c478515ff89a46184
636327ce88f733e5a1d39af212f97242717a39ce20edaef330fafea238e3a309
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 785
Cache-Control: max-age=169754
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:06 GMT
Etag: "6389d3f3-1d7"
Expires: Sun, 04 Dec 2022 10:44:20 GMT
Last-Modified: Fri, 02 Dec 2022 10:31:15 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 55b4c61a1e99001307750e3647fe1102
7559f9f6770b7d3f45b723167062096312641e08
39f6bb64420bcfc8f0b010168fd35b67732984cd0698409f04d5ae40410422aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5680
Expires: Fri, 02 Dec 2022 13:09:46 GMT
Date: Fri, 02 Dec 2022 11:35:06 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
34.102.187.140200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 02 Dec 2022 11:19:56 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 910
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: xkpOeGZ2E4SHbExCQ5f6C59iSkc4qOzaCSTpvm/9/ho/Jl0dwpyDeG+AvCCHx7zHfDB4Eb45iVU=
x-amz-request-id: 633JGMGSB3V7DZ1S
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 02 Dec 2022 10:46:05 GMT
age: 2941
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a334b122b019b13bbb52fa3d4f685295
c752204a038d9f322f0a9082a4fdda36d9639d05
b73a429955f062128afa8698e838f78e9147620eed78364b4b714f10290e71b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:06 GMT
Etag: "638879f4-118"
Server: ECS (amb/6B87)
Content-Length: 279
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Dec 2022 11:35:06 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
34.102.187.140200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 34.102.187.140:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 02 Dec 2022 11:08:57 GMT
cache-control: public,max-age=3600
age: 1569
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a334b122b019b13bbb52fa3d4f685295
c752204a038d9f322f0a9082a4fdda36d9639d05
b73a429955f062128afa8698e838f78e9147620eed78364b4b714f10290e71b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:06 GMT
Etag: "638879f4-118"
Last-Modified: Fri, 02 Dec 2022 11:35:06 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7f1f8fc556d1f7e0aea3e1208ee2fd1c
09c341a56ff876479cfc8a0505a5fef4a5d110f1
65adcf58887bcc23f73379f74ab19a61cfbb93285c95c64b44a6716eeacc1482
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 787
Cache-Control: max-age=164695
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:06 GMT
Etag: "6389c02e-1d7"
Expires: Sun, 04 Dec 2022 09:20:01 GMT
Last-Modified: Fri, 02 Dec 2022 09:06:54 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
44.238.202.79101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.238.202.79:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: +P0GdjP/i8W3/cq5vjLW0Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: DX6x0A4TWY0XSE6nJAO2/ckYpJo=
s7.addthis.com/js/300/addthis_widget.js
23.38.200.123200 OK 126 kB URL HTTP/2 s7.addthis.com/js/300/addthis_widget.js
IP 23.38.200.123:0
Size 126 kB (125463 bytes)
Hash 369a4a7de0799d9ea2310c68011dd144
5113547552bb6e9bb50c68fed84d63e292c74e70
a1bec49a02e476e190fe2a1df641756187af49fbf58381c95a78e385bbd7eb57
GET /js/300/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116406
date: Fri, 02 Dec 2022 11:35:07 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 4.8 kB IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash c3db5228dcf4a87d885239ceafcbbb41
053ae83d84805de3fb5ea9e18cce4d48576b1de7
f2c75fa25f81a8db54fcc331b93821cf949c5a42032ed8d080c92ec150b72852
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7064
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 11:35:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 919 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash bce6955047ac70c5e719794363457bef
59c5041739325b05ccb9d5497a1e6835b079312b
daad70a98bb3a695e8179db9287fb229ce9040d3c49870869beeca669c31f8fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7064
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 11:35:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7064
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 11:35:08 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash ecab83d593cc540b02689be5be7abc8a
81cda579b7b9b22332b85266b0126585f3d3f73f
d469c5adb69f261084b016f8e24edf8b69b62d9f930ca2d85cf35375e2303ecc
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D469C5ADB69F261084B016F8E24EDF8B69B62D9F930CA2D85CF35375E2303ECC"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7064
Expires: Fri, 02 Dec 2022 13:32:52 GMT
Date: Fri, 02 Dec 2022 11:35:08 GMT
Connection: keep-alive
karolynna.com/im-dutt/
188.114.97.1200 OK 53 kB IP 188.114.97.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash f3206a3c6a1988b38999d0dfa1af52f8
d6308db3874b4cd6570b909795318cc00bf02328
21f3929edc9d3f1c36965e04591d73184146f801884177dbcb5423c637ddd08d
GET /im-dutt/ HTTP/1.1
Host: karolynna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:06 GMT
content-type: text/html; charset=UTF-8
link: <https://karolynna.com/?p=25890>; rel=shortlink
vary: Accept-Encoding
cache-control: max-age=1728000, private, must-revalidate
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7JiOgE3ogAwr1h%2Fm9DXa8Lb5pJG%2Bf51ps71sl1n9us206yBVluymbmOpLDmxo5mF%2F7dkYIhv8KnAHCe%2BpYT8fRRhK05hMj%2FkJigFBaca2DOZLJdEWnwVJi2JRx1oJHps"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7733c1d9cb93b4fd-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 16a112f00456d38c4c9e051ccf40e105
8fe32fffe672f0e91ce773af0e4be960f55bad08
43517bbcd17ec6d05d09a4c0d183610acdc7e2fa4767cb786cb8b936d5f44402
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Feb2cfbf1-2aef-40a6-97e1-99a756e32924.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13461
x-amzn-requestid: 8c0121a6-cf29-4cd0-bd42-d9f67af62b84
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZQsyGhGoAMF1-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6386c7eb-593f28367320530e2dcafbfb;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 03:03:07 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: npt-A-TEzjd-QRTVhv5FMJhwlYujCRCF7tyYbathxjCdCFFEwh_vEQ==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 36810aa1793ee589dc8c194860296078.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:42:38 GMT
age: 17550
etag: "8fe32fffe672f0e91ce773af0e4be960f55bad08"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25c68d8b1fae82820f93efca500fd848
45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48
f0ec6b6f6ba0a931c9b71f5bc7ad1e5b89c8e4d8b7441f35eeebfba418d0e588
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbb8ec880-52b8-4350-bb47-d051878e78f1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6882
x-amzn-requestid: 6b5f15a5-c15b-46bf-9fd5-5d013d37a0eb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGfrG3WIAMFc9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891dfd-6038ca700dfb4489230c2683;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:34:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2O6x-8-ESFDtlhcjVyGxEXCZcLbbfhsCVQeX02lbNMupPWmM-fKuLA==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:34:54 GMT
age: 50414
etag: "45cf5e1a54ee491497ffe08a8e39fe97ba3c8a48"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
34.120.237.76200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash cc0a257323f882caff067adb86d906e4
cedf2f21be7cd366bd46055b62b5513db3011dfc
c16a9296d5e840a468fef7fb2764b9f7d4b3131d7ade2ce4999de1eead5469e0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881a33ae-e81b-4603-85d9-a2242b17be66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4803
x-amzn-requestid: ad2d9243-5e32-4faf-8ff3-b9abd3af1e89
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cb1_hEJJIAMF4Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6387d063-596f5833509112ee6cbedf54;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 21:51:31 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PIC-TIeTFK_Y2AiqowYT4_8tMuzIKO23lAwx18fYepTf4PIWkmLqkQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 05:20:15 GMT
age: 22493
etag: "cedf2f21be7cd366bd46055b62b5513db3011dfc"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg
IP 34.120.237.76:0
Hash 02fe770cb0fc4c4c5a40b6f0f4f663c6
a1031bb4b13b3c52825f9516034ebfd8e37de5c1
7913d7b2dca9e74455707e5db5b8c9d243130ff14a5179b6a1db8cfe91eb8066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb582f62c-d1ce-4054-b87e-36be40dadfa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8863
x-amzn-requestid: 798d014b-0f9c-4787-a676-8f5e8fae3d11
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdG14HBNIAMFdWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851bf-7549feac6d476a8512676412;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: r_0F64VpyutAOJ9IcTWrs3Sv--fhKiwKsV1FW0fOMSRt1QLLPxvJzg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 13:21:56 GMT
age: 79992
etag: "fc71ae3cae92ed6011904bb2367f23bf4e69fab4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
34.120.237.76200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b986f9fcbeca91ed5c8d58fbfaf47d19
6e6c8bd2bce144cc4da1cd7be375b046b60dca79
07a8938d2841f8c13bd646f4e79e41e46acd6463aa019cd70871b3741f12bb4f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F683f066f-699d-4765-8f4f-33c72e1672e2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6174
x-amzn-requestid: f78f1e9d-8c0c-495d-a862-61838f8297e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cZ0iyH2WoAMFQdg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63870144-45442a8544259930564f685b;Sampled=0
x-amzn-remapped-date: Wed, 30 Nov 2022 07:07:48 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QIOz71_Kr08pIIwOm2GUkWr421fO7-UyUI7LYld0JBaGnYQ0j3IDFg==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 02 Dec 2022 06:00:48 GMT
age: 20060
etag: "6e6c8bd2bce144cc4da1cd7be375b046b60dca79"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash c9a9fd5165af4ee4ee2f2b926555ff3f
5f2895b5088e9bb0b1517fb97e6076104310dd8c
188b651a62a6fdf0157f03867d17e0195c0755df826f12e4b1969c7df3445e26
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188B651A62A6FDF0157F03867D17E0195C0755DF826F12E4B1969C7DF3445E26"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10282
Expires: Fri, 02 Dec 2022 14:26:30 GMT
Date: Fri, 02 Dec 2022 11:35:08 GMT
Connection: keep-alive
obeyroman.com/a3162be09c403508942b5b008e0a273c/invoke.js
173.233.137.44200 OK 9.8 kB URL HTTP/1.1 obeyroman.com/a3162be09c403508942b5b008e0a273c/invoke.js
IP 173.233.137.44:0
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 38eb5b959bcc6fc18e56194ed80d7a2c
566212f2531beb724997b4b5bd23d28ab10c1274
afde3ed14fc8d6cc79082d48b74196411d35cbe4300a46679cc6633e59b1ec3d
GET /a3162be09c403508942b5b008e0a273c/invoke.js HTTP/1.1
Host: obeyroman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6079d1c9fc39312b31d0c580d67312f2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
obeyroman.com/580a8ccdaa4a6a8e83fcfd4b199120de/invoke.js
173.233.137.44200 OK 9.8 kB URL HTTP/1.1 obeyroman.com/580a8ccdaa4a6a8e83fcfd4b199120de/invoke.js
IP 173.233.137.44:0
File type exported SGML document, ASCII text, with very long lines (26953), with no line terminators
Hash 38eb5b959bcc6fc18e56194ed80d7a2c
566212f2531beb724997b4b5bd23d28ab10c1274
afde3ed14fc8d6cc79082d48b74196411d35cbe4300a46679cc6633e59b1ec3d
GET /580a8ccdaa4a6a8e83fcfd4b199120de/invoke.js HTTP/1.1
Host: obeyroman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e79d7244b1556cde536be34b9e0e7b03
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
143.204.42.158200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.158:0
Hash f60f02a95664f3be8fd0b4e614010c6a
bb83d56ac8ae98bff5e9954dffc7f2035b47f63f
eddc54420a811685bfd0c2c14dd13340c9380b529bf1bb8c0426baa0375a67f2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=93875
Date: Fri, 02 Dec 2022 11:35:08 GMT
Etag: "6388ac95-1d7"
Expires: Sat, 03 Dec 2022 13:39:43 GMT
Last-Modified: Thu, 01 Dec 2022 13:31:01 GMT
Server: ECS (bsa/EB17)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: ONZoGIfizttTMoqIH7wmOUfwQs1dI6FyK3gMNFbi6gxC_B4XUq5BWg==
Age: 522
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash 2e0095b19936c1d72a0f1776b960c182
a3260fdb063bcc5a58b0ee0746b410de4c0ef372
84ec1dfebade810b90de8f334096cf796c5009ffe6795b0eb825fed527a1b3d6
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:08 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://karolynna.com
access-control-allow-credentials: true
set-cookie: uid_id2=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea:2:1; expires=Mon, 29 Nov 2032 11:35:08 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
obeyroman.com/295186d1837628698f8df836f955f03f/invoke.js
173.233.137.44200 OK 9.8 kB URL HTTP/1.1 obeyroman.com/295186d1837628698f8df836f955f03f/invoke.js
IP 173.233.137.44:0
File type exported SGML document, ASCII text, with very long lines (26949), with no line terminators
Hash 2110d7153b493064cd1a9dfaef190af6
f947123d6536a9f49d4a00a34a8ef0eb4feff90f
e9fd21bec879b843e3c72324df2f02061f93eaf706947cfea215122edb367cf8
GET /295186d1837628698f8df836f955f03f/invoke.js HTTP/1.1
Host: obeyroman.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:08 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c558de6a281cdf955c9537c46a8105b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
52.28.211.11200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 52.28.211.11:0
File type ASCII text, with no line terminators
Hash f5fec1cb01fdd10d5121602d895abe8a
c8aeb01f39087e9a86c9b63bc4749ce795dbef37
ea824bceba699e4757f48c59b6370d6d602f0825776004e99751c803baa6012a
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://karolynna.com
access-control-allow-credentials: true
set-cookie: uid_id2=df5edf5e-bf02-4fbf-8328-c9e121e522a3:3:1; expires=Mon, 29 Nov 2032 11:35:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Fri, 02 Dec 2022 11:35:09 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 15 kB IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 93e0579c9840af8b7f677fd11b8d22de
fbed32523a9d57c31a053fd5c7087151fe929637
8adde8bfec954b9de2cc170feda5270351560b6103e20ef6c45359ceba98eeed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E6EB3A90890B38211A9CFAD8C78FD23978E2F855829C4E0CDE29FECCF1D8950A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7355
Expires: Fri, 02 Dec 2022 13:37:44 GMT
Date: Fri, 02 Dec 2022 11:35:09 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 23193c3c0d9580d0c757de17730ac556
5ac0a13fe68155bfd4c6a3076729da2578776f8c
5019cffffb2c40d48d084ac4bf0bfac07569ecbe8835293c9ee4d4404dbcd4da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5019CFFFFB2C40D48D084AC4BF0BFAC07569ECBE8835293C9EE4D4404DBCD4DA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7028
Expires: Fri, 02 Dec 2022 13:32:17 GMT
Date: Fri, 02 Dec 2022 11:35:09 GMT
Connection: keep-alive
tallysaturatesnare.com/watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1
173.233.137.52307 Temporary Redirect 0 B URL HTTP/1.1 tallysaturatesnare.com/watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Location: https://tallysaturatesnare.com/watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=d55c9e3262d8ad8905a3fcfc302a4f1da52eac16361f6907e0d5a381020834ca2e4d3695e76fff7bbb37c177f0287f6660a5497bb527cc5143d79ff40a389745a259ebeba35fe59cc5b4eda323216dd54b8d96cdac17e88714c746cfebdd&pst=1669980969&rmtc=t
Set-Cookie: u_pl=16698915; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.0tybZ8gkwMb46EDdMJwfwjeLBZ_epwgvaYyi93-BToU; expires=Fri, 02 Dec 2022 11:36:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 54900f418a74747b4a242af53e1be2a3
Strict-Transport-Security: max-age=0; includeSubdomains
s7.addthis.com/l10n/client.de.min.json
23.38.200.123200 OK 1.8 kB URL HTTP/2 s7.addthis.com/l10n/client.de.min.json
IP 23.38.200.123:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (3547), with no line terminators
Hash 4716bfc23f1c3a2636fd777b3ea4cb0c
1c87c8dcbbcffce95e4694f1658de31f4f2e5767
300a335221e0083c8bf4a15eb95fd1fda652ffbd3f6d016bf0cb81b23a3f89a4
GET /l10n/client.de.min.json HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: application/json
last-modified: Tue, 10 Sep 2019 15:15:17 GMT
etag: W/"5d77be05-df3"
cache-control: public, s-maxage=604800
access-control-allow-origin: *
timing-allow-origin: *
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 1751
date: Fri, 02 Dec 2022 11:35:09 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 1413a0356a72865b7dbc7fe37619494a
aab37da8b30715f88e5a6961d714a7bfba88e614
84980f1fbe502d3c8785de96dfde102b027e9a648a6034d74f0668485178e34c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3164
Cache-Control: max-age=116648
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:09 GMT
Etag: "6388fb39-116"
Expires: Sat, 03 Dec 2022 19:59:17 GMT
Last-Modified: Thu, 01 Dec 2022 19:06:33 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
z.moatads.com/addthismoatframe568911941483/moatframe.js
23.38.201.146200 OK 948 B URL HTTP/2 z.moatads.com/addthismoatframe568911941483/moatframe.js
IP 23.38.201.146:0
File type ASCII text, with very long lines (523)
Hash f14b4e1f799b14f798a195f43cf58376
b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86
92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac
GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: e0HboiVQpjIDEK8WTxqU5+8G8wOtu9bNCFY72alTHLP0/Yb+qoiTOxu6fad89ebRofzHxENxOOg=
x-amz-request-id: 61EC92F13BB22DD4
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
cache-control: max-age=38487
date: Fri, 02 Dec 2022 11:35:09 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 27eb71308d3abe49e12e54fa4d913074
3d6a461733e24d93f1871f6cd0170b43391bd577
67b009509eabd4d3026668ffd795e93a156dee05171fe540f4e4da5fbf4e96be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4757
Cache-Control: max-age=153567
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:09 GMT
Etag: "63898538-116"
Expires: Sun, 04 Dec 2022 06:14:36 GMT
Last-Modified: Fri, 02 Dec 2022 04:55:20 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
tallysaturatesnare.com/watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1
173.233.137.52307 Temporary Redirect 0 B URL HTTP/1.1 tallysaturatesnare.com/watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1
IP 173.233.137.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1 HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Location: https://tallysaturatesnare.com/watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1&shu=1274371fc90b1d14876ceb654191eb71b69c7d52f52e819efccfb6039f7bff44dffd972f77bc4a860c5f0c6be9a9238de9201cea1a860e2739ccca72ae982d50bf95d12de8cc1eb519c3caaaf6d233a654de4c97332a41e1a73c42415a7f5f50&pst=1669980969&rmtc=t
Set-Cookie: u_pl=16808815; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.nMHNEoWISYCUmtOwakL1ERlVPhyh_snjyoLOF1feNRU; expires=Fri, 02 Dec 2022 11:36:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e3635e338877929d208d5d88df353cd0
Strict-Transport-Security: max-age=0; includeSubdomains
assets.pinterest.com/js/pinit.js
2.18.172.195200 OK 203 B URL HTTP/2 assets.pinterest.com/js/pinit.js
IP 2.18.172.195:0
File type ASCII text, with very long lines (361), with no line terminators
Hash 62d32c28f14783b94192cd8d35bc010d
78c1ba11e104bbd01a07225d0f8c41d7712094d4
e823b68f75484d37c74ebb652e2a5b183a1b65c43f1592985e519a8cabc44b2e
GET /js/pinit.js HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "62d32c28f14783b94192cd8d35bc010d"
content-encoding: br
accept-ranges: bytes
content-type: application/javascript; charset=utf-8
content-length: 203
cache-control: max-age=195
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 27eb71308d3abe49e12e54fa4d913074
3d6a461733e24d93f1871f6cd0170b43391bd577
67b009509eabd4d3026668ffd795e93a156dee05171fe540f4e4da5fbf4e96be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4757
Cache-Control: max-age=153567
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:09 GMT
Etag: "63898538-116"
Expires: Sun, 04 Dec 2022 06:14:36 GMT
Last-Modified: Fri, 02 Dec 2022 04:55:20 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
ocsp2.globalsign.com/gsalphasha2g2
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP 104.18.21.226:0
Hash b9422568ffee5a87207a2cef26bd129e
0d57e8451b517682df2cc389fcf140d9f5fdfd92
904142470d4b03cb454c74544e94d67e8e17bdd5b6fb033bff881ef20b3b9179
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Tue, 06 Dec 2022 08:15:51 GMT
ETag: "0d57e8451b517682df2cc389fcf140d9f5fdfd92"
Last-Modified: Fri, 02 Dec 2022 08:15:52 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 2152
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7733c1ee3b65b509-OSL
reproductiontape.com/watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1
192.243.59.20307 Temporary Redirect 0 B URL HTTP/1.1 reproductiontape.com/watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1 HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Location: https://reproductiontape.com/watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=ce6c2d7796077e9c37ae2c81cc9d46d26424978f5181d54ab2aed1274aaecab32a78b7c264d198d4a67b5e584b1664bb89a288149fc7fd9774a27273981796fa6abc4a3e234bc1a7d778d946f458dc539d111d1b&pst=1669980969&rmtc=t
Set-Cookie: u_pl=16834325; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjgzNDMyNSwiayI6IjI5NTE4NmQxODM3NjI4Njk4ZjhkZjgzNmY5NTVmMDNmIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjkyNjIxLCJwaWQiOjM4NDQ1MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjoyNSwicHQiOjQsInBrIjoieDMzejBkZzEiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9rYXJvbHlubmEuY29tL2ltLWR1dHQvIn19.FUb3aTgN6lCFFDwKa4I_AdpMddD_EjOVWg7bKDAdoYw; expires=Fri, 02 Dec 2022 11:36:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 14fccdbc0c082fda3c03e35b705147d8
Strict-Transport-Security: max-age=0; includeSubdomains
counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//karolynna.com/im-dutt/;0.818404476872236
88.212.202.52200 OK 43 B URL HTTP/1.1 counter.yadro.ru/hit?r;s1280*1024*24;uhttps%3A//karolynna.com/im-dutt/;0.818404476872236
IP 88.212.202.52:0
ASN #39134 United Network LLC
File type GIF image data, version 89a, 1 x 1\012- data
Hash fc94fb0c3ed8a8f909dbc7630a0987ff
56d45f8a17f5078a20af9962c992ca4678450765
2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
GET /hit?r;s1280*1024*24;uhttps%3A//karolynna.com/im-dutt/;0.818404476872236 HTTP/1.1
Host: counter.yadro.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: image/gif
Content-Length: 43
Connection: keep-alive
Expires: Wed, 01 Dec 2021 21:00:00 GMT
Pragma: no-cache
Cache-control: no-cache
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=86400
tallysaturatesnare.com/watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=d55c9e3262d8ad8905a3fcfc302a4f1da52eac16361f6907e0d5a381020834ca2e4d3695e76fff7bbb37c177f0287f6660a5497bb527cc5143d79ff40a389745a259ebeba35fe59cc5b4eda323216dd54b8d96cdac17e88714c746cfebdd&pst=1669980969&rmtc=t
173.233.137.52200 OK 2.0 kB URL HTTP/1.1 tallysaturatesnare.com/watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=d55c9e3262d8ad8905a3fcfc302a4f1da52eac16361f6907e0d5a381020834ca2e4d3695e76fff7bbb37c177f0287f6660a5497bb527cc5143d79ff40a389745a259ebeba35fe59cc5b4eda323216dd54b8d96cdac17e88714c746cfebdd&pst=1669980969&rmtc=t
IP 173.233.137.52:0
File type HTML document, ASCII text, with very long lines (2455)
Hash 36e68d9e50ccc84376443375dedd5fb0
2f4f9cf22afa558807046db3cec3f5772264083e
893f8b44179ce987167a9d436f6a2e38114e75df6f3cd9c7b2d1b3f6ca755777
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.92054445205.js?key=a3162be09c403508942b5b008e0a273c&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=d55c9e3262d8ad8905a3fcfc302a4f1da52eac16361f6907e0d5a381020834ca2e4d3695e76fff7bbb37c177f0287f6660a5497bb527cc5143d79ff40a389745a259ebeba35fe59cc5b4eda323216dd54b8d96cdac17e88714c746cfebdd&pst=1669980969&rmtc=t HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Referer: https://karolynna.com/
Connection: keep-alive
Cookie: u_pl=16698915; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjY5ODkxNSwiayI6ImEzMTYyYmUwOWM0MDM1MDg5NDJiNWIwMDhlMGEyNzNjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjkyNjIxLCJwaWQiOjM4NDQ1MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjo1LCJwdCI6NCwicGsiOiJmajJlYXE1c2oiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9rYXJvbHlubmEuY29tL2ltLWR1dHQvIn19.0tybZ8gkwMb46EDdMJwfwjeLBZ_epwgvaYyi93-BToU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea:2:1; expires=Fri, 09 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5ed651c90d17c39d88ef4277b38c1c3a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
m.addthis.com/live/red_lojson/300lo.json?si=6389e2ea4189bd39&bkl=0&bl=1&pdt=1540&sid=6389e2ea4189bd39&pub=ra-5241d4033f2ea1d9&rev=v8.28.8-wp&ln=de&pc=men&cb=0&ab=-&dp=karolynna.com&fp=im-dutt%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669980907446&jsl=1&uvs=6389e2ea6b7ed7f6000&skipb=1&callback=addthis.cbs.jsonp__96534118335417410
23.38.200.123200 OK 1.6 kB URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=6389e2ea4189bd39&bkl=0&bl=1&pdt=1540&sid=6389e2ea4189bd39&pub=ra-5241d4033f2ea1d9&rev=v8.28.8-wp&ln=de&pc=men&cb=0&ab=-&dp=karolynna.com&fp=im-dutt%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669980907446&jsl=1&uvs=6389e2ea6b7ed7f6000&skipb=1&callback=addthis.cbs.jsonp__96534118335417410
IP 23.38.200.123:0
Hash fec2bafcdb21ba22cd2f6dcdb35ded24
53f75b81a76c413bdae48d61cc508a1c94987fcc
24c033ee84f21ba796a2aedfc1fa86631e6fa7fb3797ed1dc47dc5694d734a73
GET /live/red_lojson/300lo.json?si=6389e2ea4189bd39&bkl=0&bl=1&pdt=1540&sid=6389e2ea4189bd39&pub=ra-5241d4033f2ea1d9&rev=v8.28.8-wp&ln=de&pc=men&cb=0&ab=-&dp=karolynna.com&fp=im-dutt%2F&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1669980907446&jsl=1&uvs=6389e2ea6b7ed7f6000&skipb=1&callback=addthis.cbs.jsonp__96534118335417410 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Fri, 02 Dec 2022 11:35:09 GMT
X-Firefox-Spdy: h2
tallysaturatesnare.com/watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1&shu=1274371fc90b1d14876ceb654191eb71b69c7d52f52e819efccfb6039f7bff44dffd972f77bc4a860c5f0c6be9a9238de9201cea1a860e2739ccca72ae982d50bf95d12de8cc1eb519c3caaaf6d233a654de4c97332a41e1a73c42415a7f5f50&pst=1669980969&rmtc=t
173.233.137.52200 OK 2.0 kB URL HTTP/1.1 tallysaturatesnare.com/watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1&shu=1274371fc90b1d14876ceb654191eb71b69c7d52f52e819efccfb6039f7bff44dffd972f77bc4a860c5f0c6be9a9238de9201cea1a860e2739ccca72ae982d50bf95d12de8cc1eb519c3caaaf6d233a654de4c97332a41e1a73c42415a7f5f50&pst=1669980969&rmtc=t
IP 173.233.137.52:0
File type HTML document, ASCII text, with very long lines (2462)
Hash 3f45efecbe6d21c87ae4a038072ef1ea
021c528d510aa087d5c14c69eda3c095bc765137
2f197693b1b6c5e7425028d9994cf1bccb463152b4105e3bb27c294c29ba750c
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.269781859249.js?key=580a8ccdaa4a6a8e83fcfd4b199120de&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=df5edf5e-bf02-4fbf-8328-c9e121e522a3%3A3%3A1&shu=1274371fc90b1d14876ceb654191eb71b69c7d52f52e819efccfb6039f7bff44dffd972f77bc4a860c5f0c6be9a9238de9201cea1a860e2739ccca72ae982d50bf95d12de8cc1eb519c3caaaf6d233a654de4c97332a41e1a73c42415a7f5f50&pst=1669980969&rmtc=t HTTP/1.1
Host: tallysaturatesnare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Referer: https://karolynna.com/
Connection: keep-alive
Cookie: u_pl=16808815; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjgwODgxNSwiayI6IjU4MGE4Y2NkYWE0YTZhOGU4M2ZjZmQ0YjE5OTEyMGRlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNjkyNjIxLCJwaWQiOjM4NDQ1MiwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjoyNSwicHQiOjQsInBrIjoiZzdhaTl2eDYiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6OTA3NTM0NTcsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMjA2MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTA1LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9rYXJvbHlubmEuY29tL2ltLWR1dHQvIn19.nMHNEoWISYCUmtOwakL1ERlVPhyh_snjyoLOF1feNRU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=df5edf5e-bf02-4fbf-8328-c9e121e522a3:3:1; expires=Fri, 09 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv25=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs25=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: e95b8f92426d9f28f144b163edbabd86
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
v1.addthisedge.com/live/boost/ra-5241d4033f2ea1d9/_ate.track.config_resp
23.38.200.123200 OK 154 B URL HTTP/2 v1.addthisedge.com/live/boost/ra-5241d4033f2ea1d9/_ate.track.config_resp
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 1798455c51e19a1de93e52339a502e8d
a0457d200050e575fe5fce342ef18826773a19a2
3f695eaf6f5245ffc8385edd6ed3d174509a3faedc9b9e14e4bffb1f0a881fb0
GET /live/boost/ra-5241d4033f2ea1d9/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
etag: 659743217
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 154
cache-control: public, max-age=55, s-maxage=86400
date: Fri, 02 Dec 2022 11:35:09 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
reproductiontape.com/watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=ce6c2d7796077e9c37ae2c81cc9d46d26424978f5181d54ab2aed1274aaecab32a78b7c264d198d4a67b5e584b1664bb89a288149fc7fd9774a27273981796fa6abc4a3e234bc1a7d778d946f458dc539d111d1b&pst=1669980969&rmtc=t
192.243.59.20200 OK 2.0 kB URL HTTP/1.1 reproductiontape.com/watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=ce6c2d7796077e9c37ae2c81cc9d46d26424978f5181d54ab2aed1274aaecab32a78b7c264d198d4a67b5e584b1664bb89a288149fc7fd9774a27273981796fa6abc4a3e234bc1a7d778d946f458dc539d111d1b&pst=1669980969&rmtc=t
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2425)
Hash 67bb37f046f3edba1adfabfb988393e3
c36a6d22f5d9c98af2d5fddc395a0f18a363fcf8
d0d11ec9ee3798cc975c865ce8e2ab7899ef386ae67b993bbcdf648320de0517
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.272192280880.js?key=295186d1837628698f8df836f955f03f&kw=%5B%22im%22%2C%22dutt%22%2C%22-%22%2C%22sch%C3%B6nheit%22%2C%22und%22%2C%22pflege%22%5D&refer=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&tz=0&dev=e&res=12.1055&uuid=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea%3A2%3A1&shu=ce6c2d7796077e9c37ae2c81cc9d46d26424978f5181d54ab2aed1274aaecab32a78b7c264d198d4a67b5e584b1664bb89a288149fc7fd9774a27273981796fa6abc4a3e234bc1a7d778d946f458dc539d111d1b&pst=1669980969&rmtc=t HTTP/1.1
Host: reproductiontape.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Referer: https://karolynna.com/
Connection: keep-alive
Cookie: u_pl=16834325; ain=eyJhbGciOiJIUzI1NiJ9.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.FUb3aTgN6lCFFDwKa4I_AdpMddD_EjOVWg7bKDAdoYw
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 02 Dec 2022 11:35:09 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://karolynna.com
Access-Control-Allow-Origin: https://karolynna.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=a11f9b2c-5e6a-4985-9632-2e20f7cdb2ea:2:1; expires=Fri, 09 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
pdhtkv25=true; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
uncs25=1; expires=Sat, 03 Dec 2022 11:35:09 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b4b42a5821ae493536dfa818c27f2958
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
assets.pinterest.com/js/pinit_main.js?0.29226961591383716
2.18.172.195200 OK 19 kB URL HTTP/2 assets.pinterest.com/js/pinit_main.js?0.29226961591383716
IP 2.18.172.195:0
File type Unicode text, UTF-8 text, with very long lines (32016)
Hash 3725764cf05d1a0938de73d398772331
abdc742d760ca9c8f28c8d44ca9796d9ad6c0bc7
f8c41f2f59fc9e9d088bc9002eef583c3cf256b4cd371619b18107b4abd92812
GET /js/pinit_main.js?0.29226961591383716 HTTP/1.1
Host: assets.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "3725764cf05d1a0938de73d398772331"
content-encoding: br
accept-ranges: bytes
content-type: application/javascript; charset=utf-8
content-length: 18679
cache-control: max-age=202
vary: Accept-Encoding, Origin
x-cdn: akamai
access-control-max-age: 86400
access-control-expose-headers: X-CDN
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
jsc.adskeeper.co.uk/k/a/karolynna.com.399110.js
172.64.153.20200 OK 920 B URL HTTP/2 jsc.adskeeper.co.uk/k/a/karolynna.com.399110.js
IP 172.64.153.20:0
File type ASCII text, with very long lines (2361)
Hash cc2f39b69daf009a120023d4c0c2101a
f4aac0633ba705fdc64907c07e38982a5813397c
e60419a55f0ffeea569565e470e91b868c31ca164952556d35d6b11deb199128
GET /k/a/karolynna.com.399110.js HTTP/1.1
Host: jsc.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: text/javascript
content-length: 920
x-amz-id-2: wjGyd6o/P75S18RfO+OVw/badOHhy2XzORkycUx7depQIaQBFldEToIHu0dHN0HQHP+63UC3c8w=
x-amz-request-id: A8EXC8BC8S7R4498
last-modified: Wed, 23 Nov 2022 11:38:32 GMT
etag: "cc2f39b69daf009a120023d4c0c2101a"
content-encoding: gzip
x-amz-version-id: Q.QcywRtAob8DWxqOAyGDy4TCabez6JP
cf-cache-status: MISS
expires: Fri, 02 Dec 2022 15:35:10 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1ee0adab51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 1413a0356a72865b7dbc7fe37619494a
aab37da8b30715f88e5a6961d714a7bfba88e614
84980f1fbe502d3c8785de96dfde102b027e9a648a6034d74f0668485178e34c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3165
Cache-Control: max-age=116648
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:10 GMT
Etag: "6388fb39-116"
Expires: Sat, 03 Dec 2022 19:59:18 GMT
Last-Modified: Thu, 01 Dec 2022 19:06:33 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
jsc.adskeeper.com/k/a/karolynna.com.1052521.js
172.64.151.192200 OK 919 B URL HTTP/2 jsc.adskeeper.com/k/a/karolynna.com.1052521.js
IP 172.64.151.192:0
File type ASCII text, with very long lines (2358)
Hash 2dacec2b2d75dc0c0bc07d3854380807
075d2f608e79b86b1e9f8c6cb8ca86eb2f594b89
e3822800c7d2c3ca1e22406e4c5acd8067f9191a0765e3417d659f98d1bb5529
GET /k/a/karolynna.com.1052521.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: text/javascript
content-length: 919
x-amz-id-2: /Rf1/pROgAAkEaA1wyiu7dAD5bWzXs3UTIEIEhlZhlbWxV7miHCTYckTKcOC/G3X300uk2sebM8=
x-amz-request-id: A8ENTVZ9KSSBJDBR
last-modified: Wed, 23 Nov 2022 11:44:01 GMT
etag: "2dacec2b2d75dc0c0bc07d3854380807"
content-encoding: gzip
x-amz-version-id: FW7WzGu9XrD4d9NPv1my.RAMKna12iFE
cf-cache-status: MISS
expires: Fri, 02 Dec 2022 15:35:10 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1ee1963b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jsc.adskeeper.com/k/a/karolynna.com.1052519.js
172.64.151.192200 OK 919 B URL HTTP/2 jsc.adskeeper.com/k/a/karolynna.com.1052519.js
IP 172.64.151.192:0
File type ASCII text, with very long lines (2358)
Hash f20b1311ddd07bda1d000bdff19801d9
2045b4f76fd1fd06afa432455465b360fc029628
69ea29c87b7423a5924c8f5d7770af55976ed7a1c35308298976ac6e28c24489
GET /k/a/karolynna.com.1052519.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: text/javascript
content-length: 919
x-amz-id-2: 05j/PDjhLU9A6JuT+/9VEAHQCYuFhKGxEUIalbUxLTw9xbM2xa+D0bmwec9/JFDZAZSdPutFBeQ=
x-amz-request-id: A8EHRK0WJV93961Y
last-modified: Wed, 23 Nov 2022 11:43:58 GMT
etag: "f20b1311ddd07bda1d000bdff19801d9"
content-encoding: gzip
x-amz-version-id: 5YmfYDvoChI9nhMXdaOnK1tbK_FJJ00P
cf-cache-status: MISS
expires: Fri, 02 Dec 2022 15:35:10 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1ee296cb4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 27eb71308d3abe49e12e54fa4d913074
3d6a461733e24d93f1871f6cd0170b43391bd577
67b009509eabd4d3026668ffd795e93a156dee05171fe540f4e4da5fbf4e96be
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4758
Cache-Control: max-age=153567
Content-Type: application/ocsp-response
Date: Fri, 02 Dec 2022 11:35:10 GMT
Etag: "63898538-116"
Expires: Sun, 04 Dec 2022 06:14:37 GMT
Last-Modified: Fri, 02 Dec 2022 04:55:20 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 278
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3c0282fb1989711e4a48dce935bf7813
30bed8a42fc820e4feb64bd22ddfefe120889014
81e304f070d6b7aa4dc67c727523578cd18a665a5cfe674a3b1391f3f39fc11a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E304F070D6B7AA4DC67C727523578CD18A665A5CFE674A3B1391F3F39FC11A"
Last-Modified: Thu, 01 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10528
Expires: Fri, 02 Dec 2022 14:30:38 GMT
Date: Fri, 02 Dec 2022 11:35:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3c0282fb1989711e4a48dce935bf7813
30bed8a42fc820e4feb64bd22ddfefe120889014
81e304f070d6b7aa4dc67c727523578cd18a665a5cfe674a3b1391f3f39fc11a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E304F070D6B7AA4DC67C727523578CD18A665A5CFE674A3B1391F3F39FC11A"
Last-Modified: Thu, 01 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10528
Expires: Fri, 02 Dec 2022 14:30:38 GMT
Date: Fri, 02 Dec 2022 11:35:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 3c0282fb1989711e4a48dce935bf7813
30bed8a42fc820e4feb64bd22ddfefe120889014
81e304f070d6b7aa4dc67c727523578cd18a665a5cfe674a3b1391f3f39fc11a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E304F070D6B7AA4DC67C727523578CD18A665A5CFE674A3B1391F3F39FC11A"
Last-Modified: Thu, 01 Dec 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10528
Expires: Fri, 02 Dec 2022 14:30:38 GMT
Date: Fri, 02 Dec 2022 11:35:10 GMT
Connection: keep-alive
cdn.cloudimagesb.com/cti/d7/b8/61/d7b861bc8f8cb3be450d5ddfd2bfe642/1663164678.gif
45.133.44.10200 OK 31 kB URL HTTP/2 cdn.cloudimagesb.com/cti/d7/b8/61/d7b861bc8f8cb3be450d5ddfd2bfe642/1663164678.gif
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 300 x 250\012- data
Hash 10ed4fc609e58d8ec63dfbc7ba938e71
cf3479a3319c224cb95e58a37c742980cd28352f
ee1b7677ee7270b0a0342c79540aec32e6dd95b94c626ca5865617ef144c3332
GET /cti/d7/b8/61/d7b861bc8f8cb3be450d5ddfd2bfe642/1663164678.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: image/gif
content-length: 30654
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:11:26 GMT
etag: "6321e10e-77be"
expires: Sun, 04 Dec 2022 11:35:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/78/a6/1f/78a61fc9e90e37f19a9bd96f19767e96/1627915810.png
45.133.44.10200 OK 89 kB URL HTTP/2 cdn.cloudimagesb.com/cti/78/a6/1f/78a61fc9e90e37f19a9bd96f19767e96/1627915810.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 160 x 600, 8-bit/color RGB, non-interlaced\012- data
Hash 25cd014a40f08c9b7c50f4791dbe0d0c
550bf1487f297ddae2ca403679561cc8819fa884
d261781a45a8e1b898970abaa5d2aa13db57c39c8c90f7030c88fd681ce4b506
GET /cti/78/a6/1f/78a61fc9e90e37f19a9bd96f19767e96/1627915810.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: image/png
content-length: 89405
server: nginx/1.17.6
last-modified: Mon, 02 Aug 2021 14:50:20 GMT
etag: "6108062c-15d3d"
expires: Sun, 04 Dec 2022 11:35:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/c1/dc/2b/c1dc2bd01e4f281e1cc5d42bedc8472e/1663164381.gif
45.133.44.10200 OK 24 kB URL HTTP/2 cdn.cloudimagesb.com/cti/c1/dc/2b/c1dc2bd01e4f281e1cc5d42bedc8472e/1663164381.gif
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type GIF image data, version 89a, 160 x 600\012- data
Hash 5973d99f79b50d8aff2a9e82d276dc50
b32c1b18891edcde64b1c995337bf702872512fd
29e096d5d5a2017ee51493f96f6de174fba60ce9d808df69f6473ccde5923c7e
GET /cti/c1/dc/2b/c1dc2bd01e4f281e1cc5d42bedc8472e/1663164381.gif HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: image/gif
content-length: 23612
server: nginx/1.17.6
last-modified: Wed, 14 Sep 2022 14:06:30 GMT
etag: "6321dfe6-5c3c"
expires: Sun, 04 Dec 2022 11:35:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
jsc.adskeeper.com/k/a/karolynna.com.1052521.es6.js
172.64.151.192200 OK 79 kB URL HTTP/2 jsc.adskeeper.com/k/a/karolynna.com.1052521.es6.js
IP 172.64.151.192:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (29491)
Hash aaf4ff01bdc85c3add956f2cdc92320f
2c6b368844d442cd33f32a8cf5f83ec501a0b08c
f3f8cc25a2d73f2d49e8e7991c50920d111234960495ddfd9deaa32585798a4d
GET /k/a/karolynna.com.1052521.es6.js HTTP/1.1
Host: jsc.adskeeper.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: text/javascript
content-length: 78816
x-amz-id-2: fyiXUmsh22iiQlxODhfP1tIU0S2Jo92B3YZYR4abuoZr0akKHcI4nv+bXMq84du6uV3AFvQ8w9A=
x-amz-request-id: A8ES1F8VH51JEGZC
last-modified: Wed, 23 Nov 2022 11:44:01 GMT
etag: "aaf4ff01bdc85c3add956f2cdc92320f"
content-encoding: gzip
x-amz-version-id: iwnhktQFiJlDYYIPVZPBRYebn7r1Wa6A
cf-cache-status: MISS
expires: Fri, 02 Dec 2022 15:35:10 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1f11d23b4e8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
jsc.adskeeper.co.uk/k/a/karolynna.com.399110.es6.js
172.64.153.20200 OK 80 kB URL HTTP/2 jsc.adskeeper.co.uk/k/a/karolynna.com.399110.es6.js
IP 172.64.153.20:0
File type HTML document text\012- HTML document, ASCII text, with very long lines (33536)
Hash b1d67354658fbb48caa25c6c7cc89516
84e956c562c580fe2b02c6b6c188b3657105a0ba
394a20e3766f0023e249dedfc6550581d9190299ada41f3142c777996d0065c2
GET /k/a/karolynna.com.399110.es6.js HTTP/1.1
Host: jsc.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:10 GMT
content-type: text/javascript
content-length: 80513
x-amz-id-2: TD1ttE//rtVqqhKsOS7sM0AyKwiMAFdIRyY0V2Tyq/0XPxanP8bPujBOZzS/KyirOURmQJqtnbM=
x-amz-request-id: A8ETEXPWQBWZ32EM
last-modified: Wed, 23 Nov 2022 11:38:32 GMT
etag: "b1d67354658fbb48caa25c6c7cc89516"
content-encoding: gzip
x-amz-version-id: U.Alk4xMPDKvP9VbJj..xK_.e_q5xISZ
cf-cache-status: MISS
expires: Fri, 02 Dec 2022 15:35:10 GMT
cache-control: public, max-age=14400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1f0eebfb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
log.pinterest.com/?type=pidget&guid=1T2nqbMBgo50&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&button_hover=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&viaSrc=canonical
151.101.128.84200 OK 0 B URL HTTP/2 log.pinterest.com/?type=pidget&guid=1T2nqbMBgo50&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&button_hover=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&viaSrc=canonical
IP 151.101.128.84:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?type=pidget&guid=1T2nqbMBgo50&tv=2021110201&event=init&sub=www&button_count=1&follow_count=0&pin_count=0&button_hover=1&profile_count=0&board_count=0§ion_count=0&lang=en&nvl=en-US&via=https%3A%2F%2Fkarolynna.com%2Fim-dutt%2F&viaSrc=canonical HTTP/1.1
Host: log.pinterest.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: no-cache,no-store,must-revalidate,max-age=0
pragma: no-cache
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-envoy-upstream-service-time: 0
server: envoy
x-pinterest-rid: 7448439745698644
accept-ranges: bytes
date: Fri, 02 Dec 2022 11:35:11 GMT
via: 1.1 varnish
x-served-by: cache-bma1667-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669980911.046899,VS0,VE40
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
content-length: 0
X-Firefox-Spdy: h2
s-img.adskeeper.co.uk/g/14137478/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC9iNzczMDc4ZTFmMmEyZjhmYTFmODllM2JhMDIwMjAzMy5qcGVn.webp?v=1669980911-XaawPFvuQRc3njQyd9CHPHQwPvnnBG9pItEocL78IEo
104.18.34.236200 OK 22 kB URL HTTP/2 s-img.adskeeper.co.uk/g/14137478/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC9iNzczMDc4ZTFmMmEyZjhmYTFmODllM2JhMDIwMjAzMy5qcGVn.webp?v=1669980911-XaawPFvuQRc3njQyd9CHPHQwPvnnBG9pItEocL78IEo
IP 104.18.34.236:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 492x328, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e0ea4f483645cf636d96fa9553db8469
8740c152700a41e0c7f54203cd3f93b4fff5cef4
0f5d4f3b015ab5008a6515b10e6be0b55673d3f03b70c87cee7b5cb75d98c0d5
GET /g/14137478/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX2ZhY2VzOmF1dG8scV9hdXRvOmdvb2Qsd18xMDIwL2h0dHA6Ly9pbWdob3N0cy5jb20vdC8yMDIyLTA5LzEwMTkyNC9iNzczMDc4ZTFmMmEyZjhmYTFmODllM2JhMDIwMjAzMy5qcGVn.webp?v=1669980911-XaawPFvuQRc3njQyd9CHPHQwPvnnBG9pItEocL78IEo HTTP/1.1
Host: s-img.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:11 GMT
content-type: image/webp
content-length: 22142
x-mg-request-uuid: a9385b4c-bca1-4174-a18a-b56225c408f2
access-control-allow-origin: *
last-modified: Thu, 22 Sep 2022 10:00:32 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 6139672
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1f7af4b1c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s-img.adskeeper.co.uk/g/13780622/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMTYseV8yMTIvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0LzBkZjk0ZjBiNGM0N2U5N2EwNDY0YzIyNzc5OGEzMDQyLmpwZw.webp?v=1669980911-4JpxXk6NkS9SABhMtNP6d9lmY3q5PptjBP7NgxsmfHo
104.18.34.236200 OK 33 kB URL HTTP/2 s-img.adskeeper.co.uk/g/13780622/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMTYseV8yMTIvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0LzBkZjk0ZjBiNGM0N2U5N2EwNDY0YzIyNzc5OGEzMDQyLmpwZw.webp?v=1669980911-4JpxXk6NkS9SABhMtNP6d9lmY3q5PptjBP7NgxsmfHo
IP 104.18.34.236:0
File type gzip compressed data, from Unix\012- data
Hash c78b52bdd0e2383d861905474ad14bf8
16b386c365a2ddb441dbf355a49e6231f6034040
25f8a7ec86638692bb1aeef192c8655fff706baad4f761a4fa75509f754519c0
GET /g/13780622/492x328/-/aHR0cDovL2NsLmltZ2hvc3RzLmNvbS9pbWdoL2ltYWdlL2ZldGNoL2FyXzM6MixjX2ZpbGwsZV9zaGFycGVuOjEwMCxmX2pwZyxnX3h5X2NlbnRlcixxX2F1dG86Z29vZCx3XzEwMjAseF8zMTYseV8yMTIvaHR0cDovL2ltZ2hvc3RzLmNvbS90LzIwMjItMDcvMTAxOTI0LzBkZjk0ZjBiNGM0N2U5N2EwNDY0YzIyNzc5OGEzMDQyLmpwZw.webp?v=1669980911-4JpxXk6NkS9SABhMtNP6d9lmY3q5PptjBP7NgxsmfHo HTTP/1.1
Host: s-img.adskeeper.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://karolynna.com
Connection: keep-alive
Referer: https://karolynna.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Dec 2022 11:35:11 GMT
content-type: image/webp
content-length: 31474
x-mg-request-uuid: 3b035ee1-81a1-466f-9e8d-a58af207276e
access-control-allow-origin: *
last-modified: Thu, 11 Aug 2022 08:46:44 GMT
cache-control: immutable, max-age=31536000
cf-cache-status: HIT
age: 6463864
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 7733c1f7af531c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png
34.120.237.76200 OK 3.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 89e1a735e16f55c78fa75ae434294029
6c56f4015305eff04a99cec9758cd40bf4e5f704
26e8b042c0bbef2c7f93f77451563cf6e12af282251ef864652574be2b2c5b15
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F092f8542-1ed2-47c2-82aa-d5ef970a77ca.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 3711
x-amzn-requestid: 68772438-16c4-40ab-a40e-860425d8301c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cfGyhHVsIAMFmsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63891e76-21d27db6708228002e738938;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 21:36:54 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JOCSKxy4WUDbS22Gd9BlyN1gmcDsDNlNWnT57KITGlNwfOe_Iaco9g==
via: 1.1 da5952aa802df39905ceb16592e9698a.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Dec 2022 21:48:59 GMT
age: 49576
etag: "6c56f4015305eff04a99cec9758cd40bf4e5f704"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
karolynna.com/im
188.114.97.1301 Moved Permanently 0 B IP 188.114.97.1:0
GET /im HTTP/1.1
Host: karolynna.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Fri, 02 Dec 2022 11:35:06 GMT
content-type: text/html; charset=UTF-8
location: https://karolynna.com/im-dutt/
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=1728000, private, must-revalidate
x-redirect-by: WordPress
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ir6oiDOSn2Iups%2BH9e0ggPKPqTEvYXfJn08ekfvUIy%2FPmGXIOHVciDwHZnbI8H6snenZrVb2KuxC7My9H97X6YBZ%2FgwBydLOZS0tN%2BNh9CuQLHsFjgNK034fJ2JhubKq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7733c1d7989eb4fd-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2