firefox.settings.services.mozilla.com/v1/
143.204.55.27200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 804f8bbb7f556d51a5f52d5ebd5b6eef
922cd7e06df278615a04abb81d811d14596c8180
ef4804d381a34ab67873a7755621081c49c646310e085a9b2356ae07098f6021
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Length, Backoff, Retry-After, Content-Type
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 21 Sep 2022 12:13:35 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: q5WPeKmr79hCHWQEVMQYX0okVYRGZfTcwitUiYWWy2IyqX8ZKRUGCQ==
Age: 3092
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash a26d0784548ecab22f417f3d689daf23
8893b79366bbadeb5c8d587b8f023e310694df1c
35baaae7b3ce3110ebb2b075881cfab55ecf3eab57d834283fd18ac691b41fa2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35BAAAE7B3CE3110EBB2B075881CFAB55ECF3EAB57D834283FD18AC691B41FA2"
Last-Modified: Tue, 20 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10928
Expires: Wed, 21 Sep 2022 16:07:15 GMT
Date: Wed, 21 Sep 2022 13:05:07 GMT
Connection: keep-alive
myralubowitz.blogspot.com/2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html
142.250.74.161301 Moved Permanently 214 B URL HTTP/1.1 myralubowitz.blogspot.com/2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 53489235a637262135372695a620db87
0f3e5e6a3bc086d07c16598c108f6ebd059aafa7
17afeb865c57a00d418b7c59c25b1962652ff1ccd3a068f28eede4f9f3601a4f
GET /2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html HTTP/1.1
Host: myralubowitz.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://myralubowitz.blogspot.com/2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 21 Sep 2022 13:05:07 GMT
Expires: Wed, 21 Sep 2022 13:05:07 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 214
Server: GSE
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.25200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.25:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 21 Sep 2022 04:35:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: i0nY-tXCwemRIUh6t-4IH1tUxpzw8NJDxAkKrccCbhKzmMxEPhKByQ==
age: 30594
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6833bdc6f3a1531c260df0eec1b6a07a
3f9431fb6284dcde388b72b034f3225a2b2ded87
2ebf5b4059d407bc62be0be11472c845589a26e438720c59a85c0b68f6f01990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:07 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:07 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.27200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.27:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 21 Sep 2022 13:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 21 Sep 2022 13:44:47 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: hYuvJm31xNB1itZNOuMN-AauuwMuHosFaPWLJSsgjeDYZ262RD_CqQ==
Age: 105
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash ff6d50919e56aed75c47feb45ee2f2ec
98f558a4b2d4f3c271abc93d0b74ece4ad7a59ef
b1b6f0e78b5a1e2092cba6d71d0d5a918066c0486176cef0a19f51e2d5a9962e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5856
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Last-Modified: Wed, 21 Sep 2022 11:27:32 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 6833bdc6f3a1531c260df0eec1b6a07a
3f9431fb6284dcde388b72b034f3225a2b2ded87
2ebf5b4059d407bc62be0be11472c845589a26e438720c59a85c0b68f6f01990
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
44.242.32.27101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.242.32.27:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: e1PJGtp5QvwtzfhEmM0lQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Hu668NypxT0wRjVkase37E1ypDc=
myralubowitz.blogspot.com/2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html
142.250.74.161200 OK 71 kB URL HTTP/2 myralubowitz.blogspot.com/2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (18032)
Hash c5d13ee648b24bf897f1c5cfa05001fe
15e4b6bba61a76b5e16b31d786b8adca96cb68ac
9880705c0247e0e7f619f72217a0a7bedc392b59bbca985806a3fc770bf417ec
GET /2022/08/dibujo-de-jonas-y-la-ballena-dibujo.html HTTP/1.1
Host: myralubowitz.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 21 Sep 2022 13:05:08 GMT
date: Wed, 21 Sep 2022 13:05:08 GMT
cache-control: private, max-age=0
last-modified: Sat, 17 Sep 2022 23:47:24 GMT
etag: W/"d0a878d436d8502b38dacb5e2cd0e9b93654bd79951e931aca203e34702b57f3"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 71432
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif
192.0.77.2302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/4.bp.blogspot.com/-LKOdNd_PNhs/UrRhgqYmFTI/AAAAAAAA4dA/EcGXYrUDfYQ/w1200-h630-p-k-no-nu/Dibujos+Para+Colorear+De+Jonas+y+la+Ballena01.gif
192.0.77.2302 Found 138 B URL HTTP/2 i0.wp.com/4.bp.blogspot.com/-LKOdNd_PNhs/UrRhgqYmFTI/AAAAAAAA4dA/EcGXYrUDfYQ/w1200-h630-p-k-no-nu/Dibujos+Para+Colorear+De+Jonas+y+la+Ballena01.gif
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /4.bp.blogspot.com/-LKOdNd_PNhs/UrRhgqYmFTI/AAAAAAAA4dA/EcGXYrUDfYQ/w1200-h630-p-k-no-nu/Dibujos+Para+Colorear+De+Jonas+y+la+Ballena01.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html
content-length: 138
location: https://4.bp.blogspot.com/-LKOdNd_PNhs/UrRhgqYmFTI/AAAAAAAA4dA/EcGXYrUDfYQ/w1200-h630-p-k-no-nu/Dibujos+Para+Colorear+De+Jonas+y+la+Ballena01.gif
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cded94ac1c3c7bc6b1a7343db0bb38a1
c4d86791d371a5839bae58b913061daecd404e04
646698dbbb24e7f0099a525aa1ac2822b7cc03cdddb687fe38829370932a9f78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
216.58.207.201200 OK 6.5 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
IP 216.58.207.201:0
File type ASCII text, with very long lines (1264)
Hash 30af015884191ce4fe52ce1e707baed9
faa1418efa036704d31eb90f4fbd82de456b81b7
0456cf81299c957c8e54dabb00b4d6d96b76be729b1e112d478b34ba56d8059d
GET /static/v1/jsbin/3262169375-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 18:36:04 GMT
expires: Mon, 18 Sep 2023 18:36:04 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 18 Sep 2022 02:49:24 GMT
content-type: text/javascript
age: 239344
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cded94ac1c3c7bc6b1a7343db0bb38a1
c4d86791d371a5839bae58b913061daecd404e04
646698dbbb24e7f0099a525aa1ac2822b7cc03cdddb687fe38829370932a9f78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/st2.depositphotos.com/5886116/8798/v/600/depositphotos_87989550-stock-illustration-jonah-in-the-whale-silhouette.jpg
192.0.77.2200 OK 14 kB URL HTTP/2 i0.wp.com/st2.depositphotos.com/5886116/8798/v/600/depositphotos_87989550-stock-illustration-jonah-in-the-whale-silhouette.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x600, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2a6c04bbe00c3997ef023cb2d7a1457c
002185a9c803a9a9c7036305e39224c0395d8105
c0bb35f792bd526a3de0fb6c0df37e5780e0a7de244c8a5b6385d434e255f880
GET /st2.depositphotos.com/5886116/8798/v/600/depositphotos_87989550-stock-illustration-jonah-in-the-whale-silhouette.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: image/webp
content-length: 13978
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
expires: Sat, 21 Sep 2024 01:05:08 GMT
cache-control: public, max-age=63115200
link: <http://st2.depositphotos.com/5886116/8798/v/600/depositphotos_87989550-stock-illustration-jonah-in-the-whale-silhouette.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "fc6c8ea802177240"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/139732538-widgets.js
216.58.207.201200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/139732538-widgets.js
IP 216.58.207.201:0
File type ASCII text, with very long lines (2221)
Hash 85f397c389efac9ad63d1798bceeff88
2258e2f2f18d8a6c6bb4d89e3c047c6c83da4f4b
e0d600281770079e5cdb9f4bb66aa3bdce5ee67e21c321c9e325789e96e5db76
GET /static/v1/widgets/139732538-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56922
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Sep 2022 02:05:24 GMT
expires: Tue, 19 Sep 2023 02:05:24 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 00:49:30 GMT
content-type: text/javascript
age: 212384
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/dibujoscolorear.es/wp-content/uploads/jonah.gif
192.0.77.2200 OK 14 kB URL HTTP/2 i1.wp.com/dibujoscolorear.es/wp-content/uploads/jonah.gif
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 52924555cb8e8ab54a549f51769755db
0298a5c79db79e5b776ed7f805e6e5e4fe883d6d
10062c0d899a9d15419f7db4047e8ffae8ba9d0343f9c0c7b3ab4681e9d6b7bc
GET /dibujoscolorear.es/wp-content/uploads/jonah.gif HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: image/webp
content-length: 14168
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
expires: Sat, 21 Sep 2024 01:05:08 GMT
cache-control: public, max-age=63115200
link: <http://dibujoscolorear.es/wp-content/uploads/jonah.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "7cc4d19d033db725"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 87196299c7d78f0c9fa810e76396da69
495fbe3818b3fe996704cb14370d27c15d786881
5644ac089a5d15b976af9f45578739e63c8866f1b7ab493bb1865df576d7e2e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v20/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15816, version 1.0\012- data
Hash 2735a3a69b509faf3577afd25bdf552e
8621aff863b67040010ccc183da5b9079ce6fd1d
b4d07892cde715d50bb69c1982df496385d1dfd8f9d1867c31f19a3c8634cfae
GET /s/roboto/v20/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 20 Sep 2022 06:03:08 GMT
expires: Wed, 20 Sep 2023 06:03:08 GMT
cache-control: public, max-age=31536000
age: 111720
last-modified: Wed, 24 Jul 2019 01:19:00 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15736, version 1.0\012- data
Hash 479970ffb74f2117317f9d24d9e317fe
81c796737cbe44d4a719777f0aff14b73a3efb1e
48c3fa6f86c54f1d9bb519220713d4b0a1f8cd1a589a3c03b9fa82e98ecb13e3
GET /s/roboto/v20/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15736
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 01:19:35 GMT
expires: Sun, 17 Sep 2023 01:19:35 GMT
cache-control: public, max-age=31536000
age: 387933
last-modified: Wed, 24 Jul 2019 01:18:36 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash cded94ac1c3c7bc6b1a7343db0bb38a1
c4d86791d371a5839bae58b913061daecd404e04
646698dbbb24e7f0099a525aa1ac2822b7cc03cdddb687fe38829370932a9f78
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/friendlystock.com/wp-content/uploads/2019/11/6-jonah-getting-swallowed-by-whale-cartoon-clipart.jpg
192.0.77.2200 OK 31 kB URL HTTP/2 i1.wp.com/friendlystock.com/wp-content/uploads/2019/11/6-jonah-getting-swallowed-by-whale-cartoon-clipart.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x583, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f0cff53913d15e5b19eda3fe5f50a1ac
09995e7b1e53abc17cd34386e4e86ed7fbf7a4eb
9270b721e114b44c48584c7bd07b6e7a8842f90f9ef2a70a036ad207667932c2
GET /friendlystock.com/wp-content/uploads/2019/11/6-jonah-getting-swallowed-by-whale-cartoon-clipart.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: image/webp
content-length: 31028
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
expires: Sat, 21 Sep 2024 01:05:08 GMT
cache-control: public, max-age=63115200
link: <http://friendlystock.com/wp-content/uploads/2019/11/6-jonah-getting-swallowed-by-whale-cartoon-clipart.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "eb3dcd59510f2395"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
142.250.74.174200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Wed, 21 Sep 2022 13:05:08 GMT
expires: Wed, 21 Sep 2022 13:05:08 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=554833381269812950&zx=82b5b232-db0f-48cf-a0c2-40d4206a47c7
216.58.207.201200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=554833381269812950&zx=82b5b232-db0f-48cf-a0c2-40d4206a47c7
IP 216.58.207.201:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=554833381269812950&zx=82b5b232-db0f-48cf-a0c2-40d4206a47c7 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 21 Sep 2022 13:05:08 GMT
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash c683e61e63df92799aa274fdac42cd3b
191aeec95861fa8596a90a10c60b22434431c033
898c007bc0e7d5f4d3180c9fe28b88036102ba64912d0773c023e1f4f07d7beb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bb4bdc4c3c6869c822618f0b9ef1bdc5
6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d
eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/adelycac.files.wordpress.com/2014/07/800px-sanborondon.jpg?w=640
192.0.77.2200 OK 113 kB URL HTTP/2 i0.wp.com/adelycac.files.wordpress.com/2014/07/800px-sanborondon.jpg?w=640
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x481, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 113 kB (112714 bytes)
Hash 98af4a971a3045079a158778e46860be
4e39b9190c66755947334e0950108a87d249c003
d1cdd680c91a2513a34dbacfd8580d646dc7f161e3102a6c38ede32a8aa99bd9
GET /adelycac.files.wordpress.com/2014/07/800px-sanborondon.jpg?w=640 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: image/webp
content-length: 112714
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
expires: Sat, 21 Sep 2024 01:05:08 GMT
cache-control: public, max-age=63115200
link: <http://adelycac.files.wordpress.com/2014/07/800px-sanborondon.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "c7012632c8d98820"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
142.250.74.174200 OK 64 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP 142.250.74.174:0
File type ASCII text, with very long lines (580)
Hash 68ad53bc8ffceaff0e27d07690609326
2ee4ea5dcef485ec718acf208b54d4cd371ea2b7
9ce1a6286c578c295fca51a75dfa9246c18534699119d4bf23c349a22a8deff1
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 64328
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 06:55:24 GMT
expires: Thu, 21 Sep 2023 06:55:24 GMT
cache-control: public, max-age=31536000
age: 22184
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs
142.250.74.174200 OK 5.6 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs
IP 142.250.74.174:0
File type ASCII text, with very long lines (3295)
Hash add1c094467a85397dd1dcba79647c16
0c10daefd2c177b97572b707d64e262ece9de222
e7b42344ded3823cfd449cbeafe5f885022b6e883dad06c56ffb84a6f389c0fb
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=profile/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 5608
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 16 Sep 2022 04:11:48 GMT
expires: Sat, 16 Sep 2023 04:11:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
age: 464000
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9baaa3878151bf5d83c8d7014da17e5d
d8952bdd01ddec1d9a5a480f17ff5e39f6bdb037
1734ff9035c0a9c965cb5047e9fdbc2c1184b6c568066e856c6dbf0b8dc51df3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.34200 OK 67 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.34:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Tue, 20 Sep 2022 20:42:41 GMT
expires: Tue, 04 Oct 2022 20:42:41 GMT
cache-control: public, max-age=1209600
age: 58947
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9baaa3878151bf5d83c8d7014da17e5d
d8952bdd01ddec1d9a5a480f17ff5e39f6bdb037
1734ff9035c0a9c965cb5047e9fdbc2c1184b6c568066e856c6dbf0b8dc51df3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:08 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/files.liveworksheets.com/def_files/2021/1/15/101151019321189033/101151019321189033001.jpg
192.0.77.2200 OK 80 kB URL HTTP/2 i1.wp.com/files.liveworksheets.com/def_files/2021/1/15/101151019321189033/101151019321189033001.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1862, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 00fd559b75091053d1cbfc57a59f2f32
bb3f09af13da4a8b332727e8490f6325c55f1e1f
6cb53ae88a490bf6bc29fdf1f9862dfa44264757cfe7e4be857af87885e3d814
GET /files.liveworksheets.com/def_files/2021/1/15/101151019321189033/101151019321189033001.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: image/webp
content-length: 79512
last-modified: Wed, 21 Sep 2022 13:05:08 GMT
expires: Sat, 21 Sep 2024 01:05:08 GMT
cache-control: public, max-age=63115200
link: <http://files.liveworksheets.com/def_files/2021/1/15/101151019321189033/101151019321189033001.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "6f2801a29bd4c0bb"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcToqFXdXzpbNEPMaZevChJWSNS-LY1trPu4xA&usqp=CAU
192.0.77.2404 Not Found 3.8 kB URL HTTP/2 i1.wp.com/encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcToqFXdXzpbNEPMaZevChJWSNS-LY1trPu4xA&usqp=CAU
IP 192.0.77.2:0
Hash bae4bfa80a6ea4d77c2dfb8d4cb559f4
0f3903f15b98e3ee43c38d370d39251c02122f69
2259a3c983fe7e14d9feeeb3ec6a4c21f4551af732a87b95963da7b982a5a5cb
GET /encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcToqFXdXzpbNEPMaZevChJWSNS-LY1trPu4xA&usqp=CAU HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 8
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 67b756e82caefc7860b9f2d4a4f40341
adeae15d52089bcca4ca247fc4aebceef8406e34
72ff9f52080a633dc841554f7d4cc70083edd2572b535d84093ae63f0c50b832
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
142.250.74.164200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP 142.250.74.164:0
File type ASCII text, with very long lines (1034), with no line terminators
Hash a885189cd9a522cfaaac98af1a03b512
a4045ce6f8d8e14582bb5245694d73b40da7f0f7
6afe80cbbc72285aa8f73e7d64bdeb755148410a8ec6c0eb13df255548ef17ad
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 21 Sep 2022 13:05:09 GMT
date: Wed, 21 Sep 2022 13:05:09 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 3177bde7dfe693ad37e2d09ce7168dd4
9ff178fa18600433122d072830961ed282e78429
a153222c0ca7683d79a94783dddbd81425c2e51d5b775025629b703684429221
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A153222C0CA7683D79A94783DDDBD81425C2E51D5B775025629B703684429221"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17575
Expires: Wed, 21 Sep 2022 17:58:04 GMT
Date: Wed, 21 Sep 2022 13:05:09 GMT
Connection: keep-alive
i1.wp.com/images.freeimages.com/images/premium/previews/1654/16546273-jonah-and-the-whale.jpg
192.0.77.2200 OK 21 kB URL HTTP/2 i1.wp.com/images.freeimages.com/images/premium/previews/1654/16546273-jonah-and-the-whale.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 440x440, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 86829fc7f77501b9d5ec7f3398f22795
bd772f38006f775a16143c0d3624d3cf5addfe6e
c2bfa119cfac175ef9f52ca6afc3d760c930240f3ede7e20ce9d30a90d1d0c1e
GET /images.freeimages.com/images/premium/previews/1654/16546273-jonah-and-the-whale.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: image/webp
content-length: 21020
last-modified: Wed, 21 Sep 2022 13:05:09 GMT
expires: Sat, 21 Sep 2024 01:05:09 GMT
cache-control: public, max-age=63115200
link: <http://images.freeimages.com/images/premium/previews/1654/16546273-jonah-and-the-whale.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2e3d01a0dd707be3"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.cool2bkids.com/wp-content/uploads/2020/10/Jonas-y-la-Ballena-Versiculo-Biblico-Para-Colorear.jpg
192.0.77.2200 OK 40 kB URL HTTP/2 i0.wp.com/www.cool2bkids.com/wp-content/uploads/2020/10/Jonas-y-la-Ballena-Versiculo-Biblico-Para-Colorear.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 850x744, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b3f4eac868f1260f48c730d54b79e675
60ab7ad6b6138c7426a87bbeaa438943a8e6be58
257c9cda95bdd7df578c0f833caf92fadf57b971cadc090f1566562ba3cb7f5e
GET /www.cool2bkids.com/wp-content/uploads/2020/10/Jonas-y-la-Ballena-Versiculo-Biblico-Para-Colorear.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: image/webp
content-length: 40430
last-modified: Wed, 21 Sep 2022 13:05:09 GMT
expires: Sat, 21 Sep 2024 01:05:09 GMT
cache-control: public, max-age=63115200
link: <http://www.cool2bkids.com/wp-content/uploads/2020/10/Jonas-y-la-Ballena-Versiculo-Biblico-Para-Colorear.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "55ed27f0303fcf3e"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.kizicolor.com/storage/coloring-pages-2/Jonah-And-The-Whale-Coloring-Pages-Jonah-Sit-under-Tree.jpg
192.0.77.2403 Forbidden 537 B URL HTTP/2 i0.wp.com/www.kizicolor.com/storage/coloring-pages-2/Jonah-And-The-Whale-Coloring-Pages-Jonah-Sit-under-Tree.jpg
IP 192.0.77.2:0
Hash bedac2e07712aca852fbe4ead5ee5098
1f425d7b1ede4c713ca6dcb061497b72dfa3eea5
b6b6bdc3f1a2ec08e85290693d122002db4378f3a02607ac2a24cd2839159310
GET /www.kizicolor.com/storage/coloring-pages-2/Jonah-And-The-Whale-Coloring-Pages-Jonah-Sit-under-Tree.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 7
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash bb4bdc4c3c6869c822618f0b9ef1bdc5
6a438b8d9d87aa30e0989ace7fc0d4cafce1f29d
eb762661b0a0ecc4ccdf50229ce134d0062e8d60698b7ed1970c5073b18f31ac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
216.58.207.206200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 216.58.207.206:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 21 Sep 2022 13:05:09 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+751; expires=Fri, 20-Sep-2024 13:05:09 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 21 Sep 2022 13:05:09 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
216.58.207.206200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 216.58.207.206:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2974
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 21 Sep 2022 13:05:09 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+020; expires=Fri, 20-Sep-2024 13:05:09 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 21 Sep 2022 13:05:09 GMT
X-Firefox-Spdy: h2
accompanycollapse.com/bc8d59f796233b632b8846bc72a15192/invoke.js
192.243.61.227200 OK 9.8 kB URL HTTP/1.1 accompanycollapse.com/bc8d59f796233b632b8846bc72a15192/invoke.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (27008), with no line terminators
Hash d9964d4725fbbde46576f7b4539cab38
9333c91386b57d9deecc32e2d78571fe9d77ad97
39ba19892f639384cedd91d6dd6af140e4f85200c32256fcc46dd0c57b4e636a
GET /bc8d59f796233b632b8846bc72a15192/invoke.js HTTP/1.1
Host: accompanycollapse.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 21 Sep 2022 13:05:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 41d89b17a813d5c5d1aa9f6e68d49f35
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
143.204.42.88200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.88:0
Hash f4c9b7ff62fa66a4f516525d8c8ca467
6c113f795d7ca72bacf3c1712d0d6dd2ad86c274
300442f861166c3ba6bdc82beaea50023343d05c1ba38f90450107870e63511b
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 21 Sep 2022 13:05:09 GMT
Last-Modified: Wed, 21 Sep 2022 12:23:49 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: lzxbsA4bXZ6jieYIVUo_3L-QUKF-jx_09YitzTVLW_SY2t-papmsZw==
Age: 2480
simplewebanalysis.com/stats
35.158.153.212200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 35.158.153.212:0
File type ASCII text, with no line terminators
Hash 5bfa44ac220c0f229ee7d63b41d66cdb
c8fff896b263cc5c1f944791a372dd068bfa7c03
fdec71188dccc06931efc5b9fb9c33b3e9409d1af0176125f198897648003f21
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://myralubowitz.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=510d8c29-200d-48e5-a7fc-b57e6c387ada:1:1; expires=Sat, 18 Sep 2032 13:05:09 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg
192.0.77.2302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg?resize=160,120
192.0.77.2302 Found 138 B URL HTTP/2 i0.wp.com/ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg?resize=160,120
IP 192.0.77.2:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg?resize=160,120 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: text/html
content-length: 138
location: https://ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/twinsisters.com/wp-content/uploads/edd/2019/04/TW1090-AS.jpg
192.0.77.2200 OK 274 kB URL HTTP/2 i0.wp.com/twinsisters.com/wp-content/uploads/edd/2019/04/TW1090-AS.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2400x2400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 274 kB (273964 bytes)
Hash dbee43be963a38a9bf81e94555c75aa1
1d14876f98eebb2b4c3d4e012b37bcb5eeeb57df
9ca3c12ec14b63a6e1263feb922587d77b6b9465002b9991f545ec62fbee1605
GET /twinsisters.com/wp-content/uploads/edd/2019/04/TW1090-AS.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: image/webp
content-length: 273964
last-modified: Wed, 21 Sep 2022 13:05:09 GMT
expires: Sat, 21 Sep 2024 01:05:09 GMT
cache-control: public, max-age=63115200
link: <http://twinsisters.com/wp-content/uploads/edd/2019/04/TW1090-AS.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a42d36213770d884"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a4e067cf9396520b301997cfd44bd24f
45f8bbfbfe97bbf99408cc2af05ae1f99ed117b7
370ca51f635bf93430f33878ff667898bca5ae08b259b51d910773e772fef309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/assets.bharian.com.my/images/articles/bh20amanah-o_BHfield_image_listing_featured.var_1537438916.jpg
192.0.77.2200 OK 20 kB URL HTTP/2 i1.wp.com/assets.bharian.com.my/images/articles/bh20amanah-o_BHfield_image_listing_featured.var_1537438916.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 616x366, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 83e5fca78d94afc4ca3ce0ce8919d0ba
ae342247db7c54b8ca565f7245b2a7604eec49f3
7da0c9cce575b87934cad1d850d10cb5156f82671d4d40ee6cc809460fb6c42f
GET /assets.bharian.com.my/images/articles/bh20amanah-o_BHfield_image_listing_featured.var_1537438916.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: image/webp
content-length: 19754
last-modified: Wed, 21 Sep 2022 13:05:09 GMT
expires: Sat, 21 Sep 2024 01:05:09 GMT
cache-control: public, max-age=63115200
link: <http://assets.bharian.com.my/images/articles/bh20amanah-o_BHfield_image_listing_featured.var_1537438916.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9efe01aa3e4b04a3"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2606
Expires: Wed, 21 Sep 2022 13:48:35 GMT
Date: Wed, 21 Sep 2022 13:05:09 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 8ebb267e443b81854ef9a01b3eb6489d
b932e9e5679da5a9160da5429458041765509b52
4ac5aa5b4fb4a85282b825c5c0ed7b1aaf2b39ffe77d69dec5123a84709f3fe2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4AC5AA5B4FB4A85282B825C5C0ED7B1AAF2B39FFE77D69DEC5123A84709F3FE2"
Last-Modified: Tue, 20 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2606
Expires: Wed, 21 Sep 2022 13:48:35 GMT
Date: Wed, 21 Sep 2022 13:05:09 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a692964324dbb9c460a1b855808d02e6
1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54
3fa9e780d62fffb635064aeed542c8e04923ff943c6080476836fab6c24e2426
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1874c3ef-e614-4fd9-9d88-b87eac5ea0e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9201
x-amzn-requestid: 6dbfae76-f9ab-4f31-9b62-bcf5d9ce4515
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YxzxlEYcoAMFaQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a333d-7d147481402cc46a751b72ed;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:40:13 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JEb0g486u6AjYFbf8rSbreKjh0m1GsAGbvykHl0oahmVN2ciqe5FOw==
via: 1.1 7dcaa43cd0535d889b549e6a30a57aa0.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:14:57 GMT
etag: "1eef1ab0099d09d1cf965b6e7b55fe2aa4e18e54"
content-type: image/jpeg
age: 53412
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash dab1f2cd68979d2004ba4449d759a341
54ed14436a75ba2aeb8459bad2ce70229aff4203
e782fb5ede547e1b167719068c6821c62414dcb0991bf9ac38285cb3ce8894e3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fecaa9082-610c-41c1-ae9a-e453d87828ab.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10038
x-amzn-requestid: 4cf38a70-a706-4e6a-b854-9404727c599d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy1mHDCIAMF5-g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31bd-5aba5b0640221b302a19781b;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:49 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NzOpixfxr2pFiDhF5WUGmjD8r2CTn1grSkCEyWvthxRq0djbDKjknA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:15:05 GMT
age: 53404
etag: "54ed14436a75ba2aeb8459bad2ce70229aff4203"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg
142.250.74.1200 OK 112 kB URL HTTP/2 ytimg.googleusercontent.com/vi/SnIy7_qcov8/maxresdefault.jpg
IP 142.250.74.1:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 112 kB (111748 bytes)
Hash 701a173ae053a9f0b3680b8c328c3ec7
8765ddb1d2a02a81705ff8d2a0b9b2e361a27f78
186bde867ddc6b5ce2831607ddbc6e5472f57c07091ef4ed62ca04e07e35247b
GET /vi/SnIy7_qcov8/maxresdefault.jpg HTTP/1.1
Host: ytimg.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myralubowitz.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 111748
date: Wed, 21 Sep 2022 13:05:09 GMT
expires: Wed, 21 Sep 2022 15:05:09 GMT
cache-control: public, max-age=7200
etag: "0"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad78a6f9-e73d-465c-b7fd-7c8b261e5825.jpeg
34.120.237.76200 OK 4.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad78a6f9-e73d-465c-b7fd-7c8b261e5825.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 672ffe8377dcaf5bad2d7e4534441984
e1b634652b4112c30f80745059523cbfce09365a
a4b6bcfb246be2d02b5d04b49f9d8c13fef8661abc7d9f146d5cc9c766fc96f1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fad78a6f9-e73d-465c-b7fd-7c8b261e5825.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4878
x-amzn-requestid: 2d39705a-e054-428a-a3c8-fc0b12e70724
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YeH-EGvAoAMFZSA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322538d-6ca748d854879c6b0d6194cd;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 22:19:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: Zf2uIPDMuEhWSRmZiYf0FVRSH6whsje5zUFIsgdEdK9VEBVMA2uM5g==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Wed, 21 Sep 2022 11:58:15 GMT
age: 4014
etag: "e1b634652b4112c30f80745059523cbfce09365a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6be1360-d048-4319-9cac-dfebe92db87f.jpeg
34.120.237.76200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6be1360-d048-4319-9cac-dfebe92db87f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 267173c6b4e4e6ae4a84dc08df92f82f
4183102af1963e1edb3aa572c43aeda7d855e9f5
20487bb2e59f2e6afcaaac3e3c4f1dfec9a8ef761403a44f7f92a6b57d143714
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe6be1360-d048-4319-9cac-dfebe92db87f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9271
x-amzn-requestid: b8139dfc-8f24-41e0-9948-56bad215416c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yx0Q-EkZoAMF_sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a3406-4365026f7f832cee0c12e4d7;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:43:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QhTzqhSMCDgWwTSsmfM_3jBwV-g0fVABMLy-gwrjoxaoE4VomNqahg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 22:38:46 GMT
age: 51983
etag: "4183102af1963e1edb3aa572c43aeda7d855e9f5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg
34.120.237.76200 OK 7.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 681b3e236c8b9bc524d935af247ec72b
96048f054243b5a13f14ab3dd9f4a0f3f2e0feae
aaa2f649fd336f89b3c0fc1d9226f8763f5a8cd850826a7f0819ebe7414fbf2a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8fb4f53-c4a2-4769-939e-c2f7ff562e36.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7383
x-amzn-requestid: 32b97df0-b979-4e80-a54f-cae77affc915
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yxy2sHJ_oAMF0bg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632a31c4-2c6db6e21fa1db233a4c1f49;Sampled=0
x-amzn-remapped-date: Tue, 20 Sep 2022 21:33:56 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cgtMqpEEGh4T-E7vTcy_XhKVaoN9trQ_gtoxx1igk62zYATMmZBQCA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 21:41:30 GMT
age: 55419
etag: "96048f054243b5a13f14ab3dd9f4a0f3f2e0feae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 14e6ddceb639a5f4875aecb796f95c79
b1cd04a66852694284eeef16a1cde38896e33c03
4c0657a00d7fb4caefa64c28340cad94a306cc393cffe692fcc69c65a80f2391
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4f06ad5e-83fd-449e-b227-1b9d5389e57d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10244
x-amzn-requestid: 71f08b9e-e977-48de-ad60-5192a43db517
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YYwBkGqjIAMFz0Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63202d3d-0af3334d085ca4a764e31bb5;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 07:11:57 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: e3MMA-NVstIsR7M9_JGH05i1e8pK17RsjyERrSMlC3uoHsWw_7ABtA==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 20 Sep 2022 19:18:32 GMT
age: 63997
etag: "b1cd04a66852694284eeef16a1cde38896e33c03"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bb9f5419c8aa26b7c363cd9ab183f062
2ab4f2330b6a78b9300852b26d4333b7fe67663f
c964acb0c35eca69b54b77c031be23480c34b8a7b737618410a6a685508c987c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C964ACB0C35ECA69B54B77C031BE23480C34B8A7B737618410A6A685508C987C"
Last-Modified: Mon, 19 Sep 2022 03:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7933
Expires: Wed, 21 Sep 2022 15:17:22 GMT
Date: Wed, 21 Sep 2022 13:05:09 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash a4e067cf9396520b301997cfd44bd24f
45f8bbfbfe97bbf99408cc2af05ae1f99ed117b7
370ca51f635bf93430f33878ff667898bca5ae08b259b51d910773e772fef309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:09 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/elblogdewim.files.wordpress.com/2022/04/jonas-y-la-ballena.png
192.0.77.2200 OK 453 kB URL HTTP/2 i1.wp.com/elblogdewim.files.wordpress.com/2022/04/jonas-y-la-ballena.png
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image\012- data
Size 453 kB (452866 bytes)
Hash bb3a7a305cde99a2e868641ecea1391f
e05031cc960154a99a3110dcab2b921e3624de83
ed209c9c148ce82cd108085f214e2e41f47ce9c1e8546eb90cbe5a4b7b955216
GET /elblogdewim.files.wordpress.com/2022/04/jonas-y-la-ballena.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:09 GMT
content-type: image/webp
content-length: 452866
last-modified: Wed, 21 Sep 2022 13:05:09 GMT
expires: Sat, 21 Sep 2024 01:05:09 GMT
cache-control: public, max-age=63115200
link: <http://elblogdewim.files.wordpress.com/2022/04/jonas-y-la-ballena.png>; rel="canonical"
x-content-type-options: nosniff
etag: "4947448c1b4b8926"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
wadmargincling.com/watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1
192.243.59.13307 Temporary Redirect 0 B URL HTTP/1.1 wadmargincling.com/watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1 HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Wed, 21 Sep 2022 13:05:10 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://myralubowitz.blogspot.com
Access-Control-Allow-Origin: https://myralubowitz.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://wadmargincling.com/watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1&shu=70ac3d604e8311d63214bdc4bed4db22750ff2ebf795cd643cc18ae271a2dc9cd72038959e17516276688165127f8445f6892deaa4193939a7a87aecc2d875bed6f2b1c0e4333d0244e6aacae319be367c7f7fca&pst=1663765570&rmtc=t
Set-Cookie: u_pl=15928454; expires=Thu, 22 Sep 2022 13:05:10 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.wETkVAo7U-NgW7NgtcQo4rmbfHnpz75fz20ijqktGgI; expires=Wed, 21 Sep 2022 13:06:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: aa843aadc2e1254924a118d28fad50c2
Strict-Transport-Security: max-age=0; includeSubdomains
wadmargincling.com/da/ce/88/dace887d039f088ae0d9952a8b8cb060.js
192.243.59.13200 OK 13 kB URL HTTP/1.1 wadmargincling.com/da/ce/88/dace887d039f088ae0d9952a8b8cb060.js
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37118), with no line terminators
Hash 20bf0b5e74cab0c41b452ce85347aaa7
39c11d242f62c08181c71c8683e04957c541b6c9
88666ededbec0d4b84d6108d884d5980e653880458c436550332a37fd0f63649
Analyzer Verdict Alert fortinet Phishing
quad9 Sinkholed
GET /da/ce/88/dace887d039f088ae0d9952a8b8cb060.js HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 21 Sep 2022 13:05:09 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 003d905b0002cea6eebe14871875d79c
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 0528286dace12ef154588bb423e5877c
01494fb0d18b32da2d1f80d37cef4420c0506c5d
39c8eb46e99b438b8c912728eb96977e932ef6ff8da39294beaa2fa8df1921b0
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5274
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:10 GMT
Last-Modified: Wed, 21 Sep 2022 11:37:17 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
wadmargincling.com/watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1&shu=70ac3d604e8311d63214bdc4bed4db22750ff2ebf795cd643cc18ae271a2dc9cd72038959e17516276688165127f8445f6892deaa4193939a7a87aecc2d875bed6f2b1c0e4333d0244e6aacae319be367c7f7fca&pst=1663765570&rmtc=t
192.243.59.13200 OK 2.1 kB URL HTTP/1.1 wadmargincling.com/watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1&shu=70ac3d604e8311d63214bdc4bed4db22750ff2ebf795cd643cc18ae271a2dc9cd72038959e17516276688165127f8445f6892deaa4193939a7a87aecc2d875bed6f2b1c0e4333d0244e6aacae319be367c7f7fca&pst=1663765570&rmtc=t
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2612)
Hash 85e029fd292c82de507d828709f6abc4
b7b0e3388ed049470d4c5f6d5cfaa73e05d25f2a
f04e2dac13de21a5ea9d721c56e5df6fd7a538ef364ee0649fd2a147f9cf7f93
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1409836155418.js?key=bc8d59f796233b632b8846bc72a15192&kw=%5B%22dibujo%22%2C%22de%22%2C%22jon%C3%A1s%22%2C%22y%22%2C%22la%22%2C%22ballena%22%2C%22-%22%2C%22dibujo%22%2C%22para%22%2C%22colorear%22%2C%22jonas%22%2C%22dibujos%22%2C%22para%22%2C%22imprimir%22%2C%22gratis%22%2C%22img%22%2C%2225957%22%2C%22-%22%2C%22myra%22%2C%22lubowitz%22%5D&refer=https%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&tz=0&dev=r&res=12.31&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1&shu=70ac3d604e8311d63214bdc4bed4db22750ff2ebf795cd643cc18ae271a2dc9cd72038959e17516276688165127f8445f6892deaa4193939a7a87aecc2d875bed6f2b1c0e4333d0244e6aacae319be367c7f7fca&pst=1663765570&rmtc=t HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myralubowitz.blogspot.com
Referer: https://myralubowitz.blogspot.com/
Connection: keep-alive
Cookie: u_pl=15928454; ain=eyJhbGciOiJIUzI1NiJ9.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.wETkVAo7U-NgW7NgtcQo4rmbfHnpz75fz20ijqktGgI
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 21 Sep 2022 13:05:10 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://myralubowitz.blogspot.com
Access-Control-Allow-Origin: https://myralubowitz.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=510d8c29-200d-48e5-a7fc-b57e6c387ada:1:1; expires=Wed, 28 Sep 2022 13:05:10 GMT; secure; SameSite=None
iprc4b5093ca043913e0769e86782534bda6=3569806; expires=Wed, 21 Sep 2022 17:05:10 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 22 Sep 2022 13:05:10 GMT; secure; SameSite=None
uncs=1; expires=Thu, 22 Sep 2022 13:05:10 GMT; secure; SameSite=None
pdhtkv5=true; expires=Thu, 22 Sep 2022 13:05:10 GMT; secure; SameSite=None
uncs5=1; expires=Thu, 22 Sep 2022 13:05:10 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c60b4da439faeea22ee8d98f2ff61843
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
creepingbrings.com/sfp.js
172.64.105.16200 OK 23 kB URL HTTP/2 creepingbrings.com/sfp.js
IP 172.64.105.16:0
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash 0f7d23ac088bfea7c65087e4d887463c
98037dbd157c2519db755feb58919d16530a1458
17a3475498fa31d411ec0d19238ca240ab32601efa69642f91d3653da168915d
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:10 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 20d1e978bd1e27e8557481ad2afcdb23
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Wed, 21 Sep 2022 13:05:10 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bsCKpeE0b%2BGjc6oESCVPAEQuxzAjxm7i%2Bpal6vvfjxJHoreQGMIfc5zQ22ywOKEvW2D1VfFJZRLuYtrsK9dHWMNWMCp%2FMIr9Ym8QKephaDHVtV%2B7DLkVFf5CzYRgSG17P5%2B3vMM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e302c6bd2176cc-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 07a84f3d5ccee252ccd6be81614b07d9
5dba65c283060e1dc4c90ee1a91b6d1ca36c3b4f
e01e928852b3791b44a241439989daf5eaddcedafa21c497298096e7af0540c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E01E928852B3791B44A241439989DAF5EADDCEDAFA21C497298096E7AF0540C6"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4757
Expires: Wed, 21 Sep 2022 14:24:27 GMT
Date: Wed, 21 Sep 2022 13:05:10 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 4fba52f3a5369325ec24f39df01270f8
7941e039a4ac59069e23cfbdc7b03bf1a40f54de
cb623455572dc60364cc94638c7479a8357dcdbf0e3cfc7b801c1a681f40e1ee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "CB623455572DC60364CC94638C7479A8357DCDBF0E3CFC7B801C1A681F40E1EE"
Last-Modified: Mon, 19 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14217
Expires: Wed, 21 Sep 2022 17:02:07 GMT
Date: Wed, 21 Sep 2022 13:05:10 GMT
Connection: keep-alive
i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif
151.101.84.84200 OK 35 kB URL HTTP/2 i.pinimg.com/originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif
IP 151.101.84.84:0
File type GIF image data, version 89a, 500 x 666\012- data
Hash f01407e48c84577fc2d6d121671733b0
07bddad68586ba3548027c97449c0902afe6ef2a
d3171a0a4adb46970fcf543eaf9a548bff8be48da64558f4fc3b041a5cc684d9
GET /originals/12/cc/ea/12cceadbb88fed78ec518c76e7b9afb9.gif HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myralubowitz.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "f01407e48c84577fc2d6d121671733b0"
content-type: image/gif
cache-control: max-age=31536000, immutable
accept-ranges: bytes
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
date: Wed, 21 Sep 2022 13:05:10 GMT
content-length: 34795
X-Firefox-Spdy: h2
s10.histats.com/js15_as.js
46.105.201.240200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP 46.105.201.240:0
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:06 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 481853902
content-type: text/javascript
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash f2e5ffde5dd751df7a8ca24f6acaa4ee
7744bcf748b5b25b3f00beab83d0a99cd8f187aa
52ffd04a9cd5e44228154e1fe4bbe24e1f72d94730834c1c705685229050c265
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6538
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:10 GMT
Last-Modified: Wed, 21 Sep 2022 11:16:12 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 471
i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg
151.101.84.84200 OK 127 kB URL HTTP/2 i.pinimg.com/originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg
IP 151.101.84.84:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 960x720, components 3\012- data
Size 127 kB (126809 bytes)
Hash 3f78cf9deefd334aa636a406983a1363
b432de581cda55b76431a0c893fa607f8c8924be
6f68fc37438edfc4e9f31fbdea25b371409edf5d97d2ddd02d359170f28a22c0
GET /originals/26/65/89/266589c7b39f5a6f2f5c226fa63e640a.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://myralubowitz.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "3f78cf9deefd334aa636a406983a1363"
content-type: image/jpeg
cache-control: max-age=31536000, immutable
accept-ranges: bytes
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
date: Wed, 21 Sep 2022 13:05:10 GMT
content-length: 126809
X-Firefox-Spdy: h2
i1.wp.com/images.tokopedia.net/img/cache/500-square/VqbcmM/2022/3/13/07f6523c-7233-49ac-b018-5481694ac7a8.jpg
192.0.77.2200 OK 43 kB URL HTTP/2 i1.wp.com/images.tokopedia.net/img/cache/500-square/VqbcmM/2022/3/13/07f6523c-7233-49ac-b018-5481694ac7a8.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 500x500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1175dc5c6b684cedae00820734c65ee6
e11701bec5d8509896428a74cfb494b22bde574b
7e720eab2c89274d5a1209c1772b8b51674a431edd34fceb09e5cfb6fe763cd8
GET /images.tokopedia.net/img/cache/500-square/VqbcmM/2022/3/13/07f6523c-7233-49ac-b018-5481694ac7a8.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:11 GMT
content-type: image/webp
content-length: 42580
last-modified: Wed, 21 Sep 2022 13:05:11 GMT
expires: Sat, 21 Sep 2024 01:05:11 GMT
cache-control: public, max-age=63115200
link: <http://images.tokopedia.net/img/cache/500-square/VqbcmM/2022/3/13/07f6523c-7233-49ac-b018-5481694ac7a8.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a7bb7388c513a41b"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4633384&@f16&@g1&@h1&@i1&@j1663765510641&@k0&@l1&@mDibujo%20De%20Jon%C3%A1s%20Y%20La%20Ballena%20-%20Dibujo%20Para%20Colorear%20Jonas%20Dibujos%20Para%20Imprimir%20Gratis%20Img%2025957%20-%20Myra%20Lubowitz&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-59171445&@b3:1663765511&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&@w
192.99.8.27200 OK 51 B URL HTTP/1.1 s4.histats.com/stats/0.php?4633384&@f16&@g1&@h1&@i1&@j1663765510641&@k0&@l1&@mDibujo%20De%20Jon%C3%A1s%20Y%20La%20Ballena%20-%20Dibujo%20Para%20Colorear%20Jonas%20Dibujos%20Para%20Imprimir%20Gratis%20Img%2025957%20-%20Myra%20Lubowitz&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-59171445&@b3:1663765511&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&@w
IP 192.99.8.27:0
File type ASCII text, with no line terminators
Hash 3f1e6f56511f896d6a0eae895f34187f
ecbb58b86fc73146f54f2585d4e201a82ba0b7af
7362a3cd07db8b2f12f24068ce22947c80b2ea4f4be3e0fe19412ca0b5469f87
GET /stats/0.php?4633384&@f16&@g1&@h1&@i1&@j1663765510641&@k0&@l1&@mDibujo%20De%20Jon%C3%A1s%20Y%20La%20Ballena%20-%20Dibujo%20Para%20Colorear%20Jonas%20Dibujos%20Para%20Imprimir%20Gratis%20Img%2025957%20-%20Myra%20Lubowitz&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:-59171445&@b3:1663765511&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmyralubowitz.blogspot.com%2F2022%2F08%2Fdibujo-de-jonas-y-la-ballena-dibujo.html&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 21 Sep 2022 13:05:11 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 51
Connection: close
i0.wp.com/www.etp.com.py/img/tapa-mediana-86979.jpg
192.0.77.2200 OK 81 kB URL HTTP/2 i0.wp.com/www.etp.com.py/img/tapa-mediana-86979.jpg
IP 192.0.77.2:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 750x947, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b10137adc928b4a4c49ee6e583d4b54c
14eaa62d8eca33bcae742db2d78466950fed9c57
6e510147eccc0283243c0d83c292e3c4071821608e7770ba32de3f99830695bf
GET /www.etp.com.py/img/tapa-mediana-86979.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Wed, 21 Sep 2022 13:05:11 GMT
content-type: image/webp
content-length: 81302
last-modified: Wed, 21 Sep 2022 13:05:11 GMT
expires: Sat, 21 Sep 2024 01:05:11 GMT
cache-control: public, max-age=63115200
link: <http://www.etp.com.py/img/tapa-mediana-86979.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1bf52357de5f6bd3"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 32a56657ee87189d84e36aa919cd2469
c93ce15e966956dbaa7ed6dae6b56c2745114833
2134db13c1af8c05396990aa5c37b0f5d8e9e3561f70cea5540cd6900f2c468f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2134DB13C1AF8C05396990AA5C37B0F5D8E9E3561F70CEA5540CD6900F2C468F"
Last-Modified: Wed, 21 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6602
Expires: Wed, 21 Sep 2022 14:55:14 GMT
Date: Wed, 21 Sep 2022 13:05:12 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=dace887d039f088ae0d9952a8b8cb060&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=13
192.243.59.20200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=dace887d039f088ae0d9952a8b8cb060&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=13
IP 192.243.59.20:0
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=dace887d039f088ae0d9952a8b8cb060&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=13 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 21 Sep 2022 13:05:12 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 541a80e3ea2caf0b16f82f84c7fa5677
Strict-Transport-Security: max-age=0; includeSubdomains
wadmargincling.com/sbar.json?key=dace887d039f088ae0d9952a8b8cb060&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1
192.243.59.13200 OK 4.2 kB URL HTTP/1.1 wadmargincling.com/sbar.json?key=dace887d039f088ae0d9952a8b8cb060&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type JSON data\012- , ASCII text, with very long lines (5921), with no line terminators
Hash 2132f6429ee9b92bff030b73e2afba37
b30bd71accb3e6d96692f36a9f492226035433e6
657a7adf39d41e8277420793aafa25c522162a5b55c55aae4a97edf303353874
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=dace887d039f088ae0d9952a8b8cb060&uuid=510d8c29-200d-48e5-a7fc-b57e6c387ada%3A1%3A1 HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Cookie: u_pl=15928454; ain=eyJhbGciOiJIUzI1NiJ9.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.wETkVAo7U-NgW7NgtcQo4rmbfHnpz75fz20ijqktGgI; uid_id2=510d8c29-200d-48e5-a7fc-b57e6c387ada:1:1; iprc4b5093ca043913e0769e86782534bda6=3569806; pdhtkv=true; uncs=1; pdhtkv5=true; uncs5=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 21 Sep 2022 13:05:15 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://myralubowitz.blogspot.com
Access-Control-Allow-Origin: https://myralubowitz.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15928454,16032438; expires=Thu, 22 Sep 2022 13:05:15 GMT; secure; SameSite=None
uid_id2=510d8c29-200d-48e5-a7fc-b57e6c387ada:1:1; expires=Wed, 28 Sep 2022 13:05:15 GMT; secure; SameSite=None
uncs=2; expires=Thu, 22 Sep 2022 13:05:15 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 22 Sep 2022 13:05:15 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 22 Sep 2022 13:05:15 GMT; secure; SameSite=None
slecdace887d039f088ae0d9952a8b8cb060=[3364848]; expires=Wed, 21 Sep 2022 13:05:20 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: b707ef216c8091dcdbbd2250153b1252
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a2b39113a70529527307eb2feae6d112
a91848aee8648b986ee238008b30c19211afee7e
5503aa902278ea78a58fee7b81e884975ce8c4c29c596812b9ca6e6711ad9231
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6131
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 21 Sep 2022 13:05:15 GMT
Last-Modified: Wed, 21 Sep 2022 11:23:04 GMT
Server: ECS (ska/F706)
X-Cache: HIT
Content-Length: 279
wadmargincling.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS28cRRetdrz4pHwbkDcgEc2CBQjsdM%2Bju4csIkIwisiLBBR2UF1V4ylc09Wqx%2FTECxQRQFmhyT%2FoOWPHCkQIJMSOgMaRsvAqzcoL%2FBtAIFYs0EwsDFcq3XvPuYtTR%2BfziT8kITw9OH9Jb0ml6OnOWth46f0oOtO4KHM%2FaozS%2BIO4faZhhq9147Xw5cZbgm3q080wCsMojBrr0oieHp2ek5DFg2601g3X2s21qNPGyPx3t34Jlgbgw0PyLCSvlx8FK5BshnzwzXlhN50uXn1z4BV12mDId9%2FLN3Nd5hgcjz0ToJfvHl1D2yfrD6HznYVc6OE%2Fh5msSfD4IbJ890gksuH2QmemIHJk%2FCTK4QxCzSDpDEzfhuRPCMA4Ll9BPrh3WZuS3nzK0jlbk%2BU%2Ff4csa7L8ywrywdfnlBw1rmvlndS5xahXQY5mkBszFH4PbmsJstwDc59AcoJ8UEHygxc7UchT1uyuNsOQr7ZT0VmlSY%2BtZp1ExKyVJpTThTFSziB7Myhxtybx6AtQG8DPnwzgewF8EWDADxosiqIk5IyGaZexFk9EFvMwokkvolEYp%2FBs%2FoExXDEGU2Mw8%2Bm9gvfd5nDbGS%2B2fc7sJNp9CnUW2M4c60wiFOYWNuUYxv8E269g%2BRKsq0nwTokhr1AKgtISlJSglASlIyiH1Q5Xtmmre1xZn0VHvXnUW9VUu40J3dFuQ%2BRkUhySZxYO%2F4HvsSkOGpwykaYJD1vdXpimVIS82%2B00aZqlLAvjEFZWkHZpYcmWrMnKQRuFrMnSqTEyuger9sDkCqh%2FAbScJs0QtD9tpyG28h9dX%2FjcOl0UNFOCC%2Br6A8r6Mhd2LRcOXFco3DLczWCiDslzC2mtG79CsP2zH2aX6t%2Fu%2FwVmKhSmwkfyEcGGujO9pkuyfU2Xlnx7pXByILfoPBjXHXXixJdvi5ulNvzCeTu%2B%2FzqbE%2FPxwbvCuos05zLfsOSrc5JzYda1YYL8cMHeENlVb%2FvnvMl9cfHqG%2BsXBoUR1kqdz0BlTcjjfTBZk%2F99t7PI%2FPOffQxpZjC%2BwsDvk6OC1HtgxS3Y4li%2F1Sdg1PFNVgQofTU1zewYVJJAieOdZhXsv%2FbseJ7YO9gwp0Dd7UXUh6bCUFWgagzrT0xdYfbP%2FtxaFDIVTDNlgu1MGXX3qblWHjSSViukcbcTJQkVSdZupr044pQ223EzjmkLztbslf%2Bf%2FBsAAP%2F%2FAQAA%2F%2F%2BzIHt9vgQAAA%3D%3D
192.243.59.13200 OK 7 B URL HTTP/1.1 wadmargincling.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSS28cRRetdrz4pHwbkDcgEc2CBQjsdM%2Bju4csIkIwisiLBBR2UF1V4ylc09Wqx%2FTECxQRQFmhyT%2FoOWPHCkQIJMSOgMaRsvAqzcoL%2FBtAIFYs0EwsDFcq3XvPuYtTR%2BfziT8kITw9OH9Jb0ml6OnOWth46f0oOtO4KHM%2FaozS%2BIO4faZhhq9147Xw5cZbgm3q080wCsMojBrr0oieHp2ek5DFg2601g3X2s21qNPGyPx3t34Jlgbgw0PyLCSvlx8FK5BshnzwzXlhN50uXn1z4BV12mDId9%2FLN3Nd5hgcjz0ToJfvHl1D2yfrD6HznYVc6OE%2Fh5msSfD4IbJ890gksuH2QmemIHJk%2FCTK4QxCzSDpDEzfhuRPCMA4Ll9BPrh3WZuS3nzK0jlbk%2BU%2Ff4csa7L8ywrywdfnlBw1rmvlndS5xahXQY5mkBszFH4PbmsJstwDc59AcoJ8UEHygxc7UchT1uyuNsOQr7ZT0VmlSY%2BtZp1ExKyVJpTThTFSziB7Myhxtybx6AtQG8DPnwzgewF8EWDADxosiqIk5IyGaZexFk9EFvMwokkvolEYp%2FBs%2FoExXDEGU2Mw8%2Bm9gvfd5nDbGS%2B2fc7sJNp9CnUW2M4c60wiFOYWNuUYxv8E269g%2BRKsq0nwTokhr1AKgtISlJSglASlIyiH1Q5Xtmmre1xZn0VHvXnUW9VUu40J3dFuQ%2BRkUhySZxYO%2F4HvsSkOGpwykaYJD1vdXpimVIS82%2B00aZqlLAvjEFZWkHZpYcmWrMnKQRuFrMnSqTEyuger9sDkCqh%2FAbScJs0QtD9tpyG28h9dX%2FjcOl0UNFOCC%2Br6A8r6Mhd2LRcOXFco3DLczWCiDslzC2mtG79CsP2zH2aX6t%2Fu%2FwVmKhSmwkfyEcGGujO9pkuyfU2Xlnx7pXByILfoPBjXHXXixJdvi5ulNvzCeTu%2B%2FzqbE%2FPxwbvCuos05zLfsOSrc5JzYda1YYL8cMHeENlVb%2FvnvMl9cfHqG%2BsXBoUR1kqdz0BlTcjjfTBZk%2F99t7PI%2FPOffQxpZjC%2BwsDvk6OC1HtgxS3Y4li%2F1Sdg1PFNVgQofTU1zewYVJJAieOdZhXsv%2FbseJ7YO9gwp0Dd7UXUh6bCUFWgagzrT0xdYfbP%2FtxaFDIVTDNlgu1MGXX3qblWHjSSViukcbcTJQkVSdZupr044pQ223EzjmkLztbslf%2Bf%2FBsAAP%2F%2FAQAA%2F%2F%2BzIHt9vgQAAA%3D%3D
IP 192.243.59.13:0
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSS28cRRetdrz4pHwbkDcgEc2CBQjsdM%2Bju4csIkIwisiLBBR2UF1V4ylc09Wqx%2FTECxQRQFmhyT%2FoOWPHCkQIJMSOgMaRsvAqzcoL%2FBtAIFYs0EwsDFcq3XvPuYtTR%2BfziT8kITw9OH9Jb0ml6OnOWth46f0oOtO4KHM%2FaozS%2BIO4faZhhq9147Xw5cZbgm3q080wCsMojBrr0oieHp2ek5DFg2601g3X2s21qNPGyPx3t34Jlgbgw0PyLCSvlx8FK5BshnzwzXlhN50uXn1z4BV12mDId9%2FLN3Nd5hgcjz0ToJfvHl1D2yfrD6HznYVc6OE%2Fh5msSfD4IbJ890gksuH2QmemIHJk%2FCTK4QxCzSDpDEzfhuRPCMA4Ll9BPrh3WZuS3nzK0jlbk%2BU%2Ff4csa7L8ywrywdfnlBw1rmvlndS5xahXQY5mkBszFH4PbmsJstwDc59AcoJ8UEHygxc7UchT1uyuNsOQr7ZT0VmlSY%2BtZp1ExKyVJpTThTFSziB7Myhxtybx6AtQG8DPnwzgewF8EWDADxosiqIk5IyGaZexFk9EFvMwokkvolEYp%2FBs%2FoExXDEGU2Mw8%2Bm9gvfd5nDbGS%2B2fc7sJNp9CnUW2M4c60wiFOYWNuUYxv8E269g%2BRKsq0nwTokhr1AKgtISlJSglASlIyiH1Q5Xtmmre1xZn0VHvXnUW9VUu40J3dFuQ%2BRkUhySZxYO%2F4HvsSkOGpwykaYJD1vdXpimVIS82%2B00aZqlLAvjEFZWkHZpYcmWrMnKQRuFrMnSqTEyuger9sDkCqh%2FAbScJs0QtD9tpyG28h9dX%2FjcOl0UNFOCC%2Br6A8r6Mhd2LRcOXFco3DLczWCiDslzC2mtG79CsP2zH2aX6t%2Fu%2FwVmKhSmwkfyEcGGujO9pkuyfU2Xlnx7pXByILfoPBjXHXXixJdvi5ulNvzCeTu%2B%2FzqbE%2FPxwbvCuos05zLfsOSrc5JzYda1YYL8cMHeENlVb%2FvnvMl9cfHqG%2BsXBoUR1kqdz0BlTcjjfTBZk%2F99t7PI%2FPOffQxpZjC%2BwsDvk6OC1HtgxS3Y4li%2F1Sdg1PFNVgQofTU1zewYVJJAieOdZhXsv%2FbseJ7YO9gwp0Dd7UXUh6bCUFWgagzrT0xdYfbP%2FtxaFDIVTDNlgu1MGXX3qblWHjSSViukcbcTJQkVSdZupr044pQ223EzjmkLztbslf%2Bf%2FBsAAP%2F%2FAQAA%2F%2F%2BzIHt9vgQAAA%3D%3D HTTP/1.1
Host: wadmargincling.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Cookie: u_pl=15928454,16032438; ain=eyJhbGciOiJIUzI1NiJ9.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.wETkVAo7U-NgW7NgtcQo4rmbfHnpz75fz20ijqktGgI; uid_id2=510d8c29-200d-48e5-a7fc-b57e6c387ada:1:1; iprc4b5093ca043913e0769e86782534bda6=3569806; pdhtkv=true; uncs=2; pdhtkv5=true; uncs5=1; pdhtkv29=true; uncs29=1; slecdace887d039f088ae0d9952a8b8cb060=[3364848]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 21 Sep 2022 13:05:15 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6af6df8e8845ac63eff82fe53cdf1e3b
Strict-Transport-Security: max-age=0; includeSubdomains
i1.wp.com/assets.puzzlefactory.pl/puzzle/452/022/original.jpg
192.0.77.2403 Forbidden 0 B URL HTTP/2 i1.wp.com/assets.puzzlefactory.pl/puzzle/452/022/original.jpg
IP 192.0.77.2:0
GET /assets.puzzlefactory.pl/puzzle/452/022/original.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 3
X-Firefox-Spdy: h2
i0.wp.com/encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSrQ0LiDzpbNIeacSOqBMDLs_FYMD4hU7t6CA&usqp=CAU
192.0.77.2404 Not Found 0 B URL HTTP/2 i0.wp.com/encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSrQ0LiDzpbNIeacSOqBMDLs_FYMD4hU7t6CA&usqp=CAU
IP 192.0.77.2:0
GET /encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSrQ0LiDzpbNIeacSOqBMDLs_FYMD4hU7t6CA&usqp=CAU HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 8
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
45.133.44.10200 OK 0 B URL HTTP/2 cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:10 GMT
content-type: image/png
content-length: 144379
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Fri, 23 Sep 2022 13:05:10 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html
172.67.74.218200 OK 0 B URL HTTP/2 cdn.yourwebbars.com/sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html
IP 172.67.74.218:0
GET /sb/notifications/utility/default/us/blog/Progamerage/simple_bubbleicon/15/index.html HTTP/1.1
Host: cdn.yourwebbars.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://myralubowitz.blogspot.com
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:16 GMT
content-type: text/html
last-modified: Wed, 09 Feb 2022 14:12:53 GMT
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vJ%2FJFPDSOLEMwJEZBRuEITBYvo3Rq6O%2BzPcvCv18IDp0Ebs664UMLnnrR5AcV0pksj0GQyvMX3gXHfw9TpzxNrQWo21t2juEzmf4Q5Z651DmELdaxr9f2DwSCppc2SyMmSe30bA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74e302e87a1bfac8-OSL
content-encoding: br
X-Firefox-Spdy: h2
bestbestfree.com/01bestbestfree.js
104.21.18.186200 OK 0 B URL HTTP/2 bestbestfree.com/01bestbestfree.js
IP 104.21.18.186:0
GET /01bestbestfree.js HTTP/1.1
Host: bestbestfree.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 21 Sep 2022 13:05:08 GMT
content-type: application/javascript
last-modified: Tue, 18 Jan 2022 15:57:35 GMT
vary: Accept-Encoding
etag: W/"61e6e36f-34b8"
expires: Sun, 02 Oct 2022 07:34:02 GMT
cache-control: public, max-age=2592000
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: HIT
age: 1661466
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5HsSYfI6yZRskDb2CGRXA0jEbyEag1EDScmvmV59gKJi%2BIBMhHzTdI%2FKx5O5XQsYc%2B00WUdvp2XsSfUUr5osHynvN1qCRkbR%2BTukrK4kXVegGeaTdthMO7TMHHhZJjSuudz1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74e302bc0b17b515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/comment/frame/554833381269812950?po=6678173675233034599&hl=en&skin=contempo&blogspotRpcToken=3818570
216.58.207.201200 OK 0 B URL HTTP/2 www.blogger.com/comment/frame/554833381269812950?po=6678173675233034599&hl=en&skin=contempo&blogspotRpcToken=3818570
IP 216.58.207.201:0
GET /comment/frame/554833381269812950?po=6678173675233034599&hl=en&skin=contempo&blogspotRpcToken=3818570 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://myralubowitz.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 21 Sep 2022 13:05:08 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport, script-src 'nonce-iWmPOMbzUpKPzrhxoTU1PQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=sb174xCCwq1MOtRaEtLn0MiYZcVEZEv0U0TwKXb0nSRwgKrFuaMiIOGHutrj6rA2AsVVFz5mGDW_zyHc4bvQix_mhASQZgqOMB9nrK94IOA_qqWjFcgDse7UevzqhCNUmvnZwoT7WfZfDBBsbmvClHq4gTEKzTUKHscbJWZGQ88; expires=Thu, 23-Mar-2023 13:05:08 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2