firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Wed, 14 Sep 2022 11:09:31 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NmzYYH2UVDt3IzmW_0wERKZL-lcDgBHFgF5WL6dCfDmpxlZPZg07uw==
Age: 1721
c639peggyriley.blogspot.com/2022/07/schwinn-gps-watch-software-download.html
301 Moved Permanently 224 B URL HTTP/1.1 c639peggyriley.blogspot.com/2022/07/schwinn-gps-watch-software-download.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 7bc63cea1ad9b5bc18a1d2d4b6d21b92
22f3f1cadc21c2580917812a128637e8cda780e9
120e92103397de4ba72b2fe170e8b41f66bede38f3816644d226fc64ff829c53
GET /2022/07/schwinn-gps-watch-software-download.html HTTP/1.1
Host: c639peggyriley.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://c639peggyriley.blogspot.com/2022/07/schwinn-gps-watch-software-download.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 14 Sep 2022 11:38:11 GMT
Expires: Wed, 14 Sep 2022 11:38:11 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 224
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash be88d3e043e3b95b52e41812e50fb634
0318ba1ce487817ea7cba61dd9413bed29213800
b5f178d23e633283f226cca7a9ae79b01e6cab2299ff7065c980d3a9953212fd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B5F178D23E633283F226CCA7A9AE79B01E6CAB2299FF7065C980D3A9953212FD"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8748
Expires: Wed, 14 Sep 2022 14:04:00 GMT
Date: Wed, 14 Sep 2022 11:38:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 14 Sep 2022 04:35:16 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fWT_8SQAJ_lvQxVLob69HI3xtW_hM4J_GPQeP8HWBk3hiWypflsi8w==
age: 25377
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42c12cedfa72a81738a9e2201ccfb0f8
3deab07fcef84a4015c0fb7f7b548bdbdd668e00
7ca81c53944cf3c853d75ea2d4ba99e0b60cbbe3c6aceab3ed6b4cb13cf341cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 14 Sep 2022 11:38:12 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Wed, 14 Sep 2022 11:03:22 GMT
Cache-Control: max-age=3600
Expires: Wed, 14 Sep 2022 11:29:14 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: zRLPKWQfrr_fwZhEt4F-srXGMq3hV1B5G3rQhaXDAAcMlpkzYR3MSQ==
Age: 2090
ocsp.digicert.com/
200 OK 471 B IP
Hash d3ac56507d17ffff5e8b486406985d68
17d26336cd8ea65af3f23db166945f1b3fbbfbab
e7e321340eed681c1269f715b0214e1511d5762fffbe930e7c157b800afa9a39
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3080
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:12 GMT
Last-Modified: Wed, 14 Sep 2022 10:46:52 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: nvZE8ELalRmtUeUmABIn9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: wmFxmjWcBfSLv+hJAbylD1sfIg8=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 42c12cedfa72a81738a9e2201ccfb0f8
3deab07fcef84a4015c0fb7f7b548bdbdd668e00
7ca81c53944cf3c853d75ea2d4ba99e0b60cbbe3c6aceab3ed6b4cb13cf341cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 332b63f5ce2c65b7d1cdd521be8cbb7d
0dae70e7e2524b2ce89bf61901d45def695e575a
b0d7a5c8c31340e1921737f438dd26f7e1d8ba8263e5ce9e4ba17547a8ced6a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B0D7A5C8C31340E1921737F438DD26F7E1D8BA8263E5CE9E4BA17547A8CED6A4"
Last-Modified: Mon, 12 Sep 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14655
Expires: Wed, 14 Sep 2022 15:42:28 GMT
Date: Wed, 14 Sep 2022 11:38:13 GMT
Connection: keep-alive
c639peggyriley.blogspot.com/2022/07/schwinn-gps-watch-software-download.html
200 OK 52 kB URL HTTP/2 c639peggyriley.blogspot.com/2022/07/schwinn-gps-watch-software-download.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (44506)
Hash c638b48a967e8d92117521d2d532ee6c
d7f54bdb68bdbd2d5e2aec0e62f7996bdbd3c696
b37216743248f3e703e8d274456c5a564bdebb4ffd81036a2dd2ddc186c94603
GET /2022/07/schwinn-gps-watch-software-download.html HTTP/1.1
Host: c639peggyriley.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 14 Sep 2022 11:38:13 GMT
date: Wed, 14 Sep 2022 11:38:13 GMT
cache-control: private, max-age=0
last-modified: Wed, 14 Sep 2022 11:37:32 GMT
etag: W/"f813329ca8f1190adda5b6d829739ea3cae55d8cef87913714269fb546d3896b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 52103
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 11 Sep 2022 02:16:32 GMT
expires: Mon, 11 Sep 2023 02:16:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 292901
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c8c3c421f4861ae04722b3e1fe225e2c
7b5b873edb282616864982e424376e6bfbfc742f
11a9534779c5e2cebac163509d1caf063639b77dae409e345903573551d70d45
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "11A9534779C5E2CEBAC163509D1CAF063639B77DAE409E345903573551D70D45"
Last-Modified: Tue, 13 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7808
Expires: Wed, 14 Sep 2022 13:48:21 GMT
Date: Wed, 14 Sep 2022 11:38:13 GMT
Connection: keep-alive
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash b7693d50d04d032f3d775063b3d45a6f
46ba2e71f8f317b28d73516e9b90c794a6c6b0ab
d072ad941c4d7950a004fafcf4cbdb47087b29a39e4d275b9191d532cfd54717
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "D072AD941C4D7950A004FAFCF4CBDB47087B29A39E4D275B9191D532CFD54717"
Last-Modified: Tue, 13 Sep 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2911
Expires: Wed, 14 Sep 2022 12:26:44 GMT
Date: Wed, 14 Sep 2022 11:38:13 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c62ece93a427b0cc98d2aec5ba0fa51
af03042435a9731f7cc169fa678712d76e9bf2b1
7103b87d9dab758e9a20cafb41610be1106ead51ff1bf9627ba10a32daaf82d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c62ece93a427b0cc98d2aec5ba0fa51
af03042435a9731f7cc169fa678712d76e9bf2b1
7103b87d9dab758e9a20cafb41610be1106ead51ff1bf9627ba10a32daaf82d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 89c8b660533d50ff8fa94d712071f9f7
09e8b2f00a9c830f1c00a37db7a8d859ef4bda8a
1f6cf1978a51d7555d3f3f6466d3c7d20cd0b7714f780da821db0b3eb805d307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 89c8b660533d50ff8fa94d712071f9f7
09e8b2f00a9c830f1c00a37db7a8d859ef4bda8a
1f6cf1978a51d7555d3f3f6466d3c7d20cd0b7714f780da821db0b3eb805d307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/3753684042-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3753684042-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 9310029f33929201831992bd74c13953
092fc9b60b0fcc7e24b80eb89f40178e91effb98
ed0ad17efb3c922e7bc8feffa0a5718d2ad226c44f2bb183b6ad163684f3b982
GET /static/v1/widgets/3753684042-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57039
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Sep 2022 01:53:39 GMT
expires: Fri, 08 Sep 2023 01:53:39 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Sep 2022 22:51:39 GMT
content-type: text/javascript
age: 553474
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash abea4dc307fd4da34aac369f4316657c
ef7be7963fa8154c83b78d6ca8518b8448f079ff
1c50a6b2765a5108f31d7a31c98c62d293440c84e8bf63f9dac685be9e3d77d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
200 OK 7.9 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7884, version 1.0\012- data
Hash 9212f6f9860f9fc6c69b02fedf6db8c3
ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b
7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f
GET /s/poppins/v20/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7884
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:32:09 GMT
expires: Thu, 07 Sep 2023 19:32:09 GMT
cache-control: public, max-age=31536000
age: 576364
last-modified: Wed, 27 Apr 2022 17:03:52 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
200 OK 7.8 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7816, version 1.0\012- data
Hash 25b0e113ca7cce3770d542736db26368
cb726212d5d525021752a1d8470a0fb593e0c49e
9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526
GET /s/poppins/v20/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7816
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:30:58 GMT
expires: Thu, 07 Sep 2023 19:30:58 GMT
cache-control: public, max-age=31536000
age: 576435
last-modified: Wed, 27 Apr 2022 16:11:40 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2SZ0DzeJuiWi39R4R3Iy9Z6jgTwDRYrEyGZKQDx4JFVMHeFID0rH2swqChs7eQLWFrzLoWN_ZtEC1-MxMWZh_DeqmPoM5XP3flbaQAmUbfJc4JMLIyxZezORtYpmR0Py8uHcAGE5kQ8dBfskOX1g=w72-h72-p-k-no-nu
200 OK 3.1 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2SZ0DzeJuiWi39R4R3Iy9Z6jgTwDRYrEyGZKQDx4JFVMHeFID0rH2swqChs7eQLWFrzLoWN_ZtEC1-MxMWZh_DeqmPoM5XP3flbaQAmUbfJc4JMLIyxZezORtYpmR0Py8uHcAGE5kQ8dBfskOX1g=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 163fcf2e017096164e29e040db1f74e3
af667fe1a9ef3d7465663278ae00363e13ce7a89
ffdbe238f80f79f2e0e199b54cd76562f9168e495560d55fd11403e8d740be78
GET /blogger_img_proxy/ANbyha2SZ0DzeJuiWi39R4R3Iy9Z6jgTwDRYrEyGZKQDx4JFVMHeFID0rH2swqChs7eQLWFrzLoWN_ZtEC1-MxMWZh_DeqmPoM5XP3flbaQAmUbfJc4JMLIyxZezORtYpmR0Py8uHcAGE5kQ8dBfskOX1g=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3140
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
200 OK 6.5 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1264)
Hash 30af015884191ce4fe52ce1e707baed9
faa1418efa036704d31eb90f4fbd82de456b81b7
0456cf81299c957c8e54dabb00b4d6d96b76be729b1e112d478b34ba56d8059d
GET /static/v1/jsbin/3262169375-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 14:54:37 GMT
expires: Sat, 09 Sep 2023 14:54:37 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Sep 2022 15:01:24 GMT
content-type: text/javascript
age: 420216
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 89c8b660533d50ff8fa94d712071f9f7
09e8b2f00a9c830f1c00a37db7a8d859ef4bda8a
1f6cf1978a51d7555d3f3f6466d3c7d20cd0b7714f780da821db0b3eb805d307
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b7e665b6b70fa840ee6a1417da402132
658fa05afcf7752e8cb02979c28874efb0f4ddd8
9905cee109c441b937300b368ceccd186877a0923164bf3e1eb0971a2a224400
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.shopify.com/s/files/1/0285/7700/5701/products/ProductMain_Vivo4_Pic2_ad9198e5-042a-4d36-bf10-1a5c6c0e9593.jpg?v=1620304268
404 Not Found 1.9 kB URL HTTP/2 cdn.shopify.com/s/files/1/0285/7700/5701/products/ProductMain_Vivo4_Pic2_ad9198e5-042a-4d36-bf10-1a5c6c0e9593.jpg?v=1620304268
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1195)
Hash b23e932d2a9bb5e70952ca413247b152
0eff34f3b9316a43b18875657a63af7bfb530db3
08aee7e3bb011637f265a8d8dc4ccea861b1570d56916eff1e6dfbc7db2b2315
GET /s/files/1/0285/7700/5701/products/ProductMain_Vivo4_Pic2_ad9198e5-042a-4d36-bf10-1a5c6c0e9593.jpg?v=1620304268 HTTP/1.1
Host: cdn.shopify.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Wed, 14 Sep 2022 11:38:13 GMT
content-type: text/html; charset=utf-8
vary: Accept-Encoding
access-control-allow-origin: *
cache-control: public, max-age=30
server-timing: imagery;dur=26.951, imageryFetch;dur=26.678
timing-allow-origin: *
x-content-type-options: nosniff
x-request-id: d8f7de52-6e2a-4318-8dee-c7373c2362ba
x-xss-protection: 1; mode=block
strict-transport-security: max-age=15552000; includeSubDomains; preload
x-dc: gcp-us-east1,us-east1
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6CcWAfMMn2235L17dOaIYKOsywtJnm0ydWIMPkR7o2KfOdBI4stG%2B1SDn8kOGLrygSHkg1txI4kMVbH%2BvMA6WOR1IJs5h2lS6EVDacJ1YnkyDKURoX7XVRIifGjMDssFag%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74a8d5ca4c38b50f-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3c62ece93a427b0cc98d2aec5ba0fa51
af03042435a9731f7cc169fa678712d76e9bf2b1
7103b87d9dab758e9a20cafb41610be1106ead51ff1bf9627ba10a32daaf82d4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/dyn-css/authorization.css?targetBlogID=7923237181056527874&zx=69808bcb-d50c-41b7-b501-9541301cfa9e
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=7923237181056527874&zx=69808bcb-d50c-41b7-b501-9541301cfa9e
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=7923237181056527874&zx=69808bcb-d50c-41b7-b501-9541301cfa9e HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 14 Sep 2022 11:38:13 GMT
last-modified: Wed, 14 Sep 2022 11:38:13 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1rK-FP4c5UojmxCwPl45Otw7wFRf69HbrxbtdD89FR-FS5cb4175uMNwXC0MLNm1QellPd8ajmfghliHyQF2l4LCBW2Hc1DpOK4ld6YYE2bp3NUC_6p84VLG2DbZOSfIJrbc6zgw02s_Mk=w72-h72-p-k-no-nu
200 OK 3.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1rK-FP4c5UojmxCwPl45Otw7wFRf69HbrxbtdD89FR-FS5cb4175uMNwXC0MLNm1QellPd8ajmfghliHyQF2l4LCBW2Hc1DpOK4ld6YYE2bp3NUC_6p84VLG2DbZOSfIJrbc6zgw02s_Mk=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 2c62b751ca6d02a2691add676d1cb4ea
016a617b5664af27147b696b1961d78c252e41e4
dce2c75963659c698ba7ebf0cdb0bcd957f84a04fc3f80266e31ae1b48d63274
GET /blogger_img_proxy/ANbyha1rK-FP4c5UojmxCwPl45Otw7wFRf69HbrxbtdD89FR-FS5cb4175uMNwXC0MLNm1QellPd8ajmfghliHyQF2l4LCBW2Hc1DpOK4ld6YYE2bp3NUC_6p84VLG2DbZOSfIJrbc6zgw02s_Mk=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 6d4f4e95f7fa5c73ba923617c60d4814
dac6cb0c3374b442fe396190844d44cbaf4644e0
2d43e8f3eaf6ef9a9c0815187c2266c99a6e46fbfe67b0318e8c559f74260fef
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 11:38:13 GMT
Last-Modified: Wed, 14 Sep 2022 09:54:14 GMT
Server: ECS (bsa/EB13)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: SDGwQpVe3gzMIEsP9twmgL1H6dooYIlrxpdCmDYoJfcjWY1ianasRw==
Age: 6239
lh3.googleusercontent.com/blogger_img_proxy/ANbyha31EsB2Or22jpAUHiBh6E5RYIp1l9TUbNZDZZBaX6P-88sFHxyfe9GGaH1-fyWt2t55Z5gPDKyrQwSXWN2R4iz2tZxoJ4oyuYzdbKFovIWL5hcXnPAUxDzUKpxZQeivATONU7ojHZa5mrYflD7KeV0F8Zw8bshfnz-WajDZImNLEurixvSQqQTR0oZWkg=w72-h72-p-k-no-nu
200 OK 3.6 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha31EsB2Or22jpAUHiBh6E5RYIp1l9TUbNZDZZBaX6P-88sFHxyfe9GGaH1-fyWt2t55Z5gPDKyrQwSXWN2R4iz2tZxoJ4oyuYzdbKFovIWL5hcXnPAUxDzUKpxZQeivATONU7ojHZa5mrYflD7KeV0F8Zw8bshfnz-WajDZImNLEurixvSQqQTR0oZWkg=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 64d11f2b49f772ff9599a46404e52052
4d69d870a48425949aad3295dc9045bec41255d5
c18d0471aa5042e567eace50d3ca7e2f40171dc66cd18c466a8b3383d4a7d119
GET /blogger_img_proxy/ANbyha31EsB2Or22jpAUHiBh6E5RYIp1l9TUbNZDZZBaX6P-88sFHxyfe9GGaH1-fyWt2t55Z5gPDKyrQwSXWN2R4iz2tZxoJ4oyuYzdbKFovIWL5hcXnPAUxDzUKpxZQeivATONU7ojHZa5mrYflD7KeV0F8Zw8bshfnz-WajDZImNLEurixvSQqQTR0oZWkg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3645
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2X9g2cpYvCOhKx0wP7hXTPtPGIsmOopi5rAWJ6nc6soOw_SSy_y_Neyu5eukwKvOKTy2CboY_c2JkYfz456cYYzRoT45dv8lcmje0xHB_pMp9RAG_9zYt9UnFa4qNq2xP1IR30szO6yW5ClWKOgPhHD2m5lKfauda6HiGl_6juMXNzQsT3TwjWljW75Q9nQXhNH5MAY5OM3XT7fZ-KvlzUHfWXG4FjbMQ=w72-h72-p-k-no-nu
200 OK 3.3 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2X9g2cpYvCOhKx0wP7hXTPtPGIsmOopi5rAWJ6nc6soOw_SSy_y_Neyu5eukwKvOKTy2CboY_c2JkYfz456cYYzRoT45dv8lcmje0xHB_pMp9RAG_9zYt9UnFa4qNq2xP1IR30szO6yW5ClWKOgPhHD2m5lKfauda6HiGl_6juMXNzQsT3TwjWljW75Q9nQXhNH5MAY5OM3XT7fZ-KvlzUHfWXG4FjbMQ=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash a6f4d5318bbb587d6786871aae4d5d48
c3f52612c9170ff8842e58846e85b42dbcfadd54
272a9014b9c463cd895a542f4bb61ac168132b6923f9ef73783c4d109208c0e0
GET /blogger_img_proxy/ANbyha2X9g2cpYvCOhKx0wP7hXTPtPGIsmOopi5rAWJ6nc6soOw_SSy_y_Neyu5eukwKvOKTy2CboY_c2JkYfz456cYYzRoT45dv8lcmje0xHB_pMp9RAG_9zYt9UnFa4qNq2xP1IR30szO6yW5ClWKOgPhHD2m5lKfauda6HiGl_6juMXNzQsT3TwjWljW75Q9nQXhNH5MAY5OM3XT7fZ-KvlzUHfWXG4FjbMQ=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3343
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha17iy4Swv9quu_e_H70uLTILrkIqPErZK6pC_HIIBtyYND0pF16qsvTE0tGURbMLgpymtQI8ReLshTZEsB4oQdtX70pV8hpq78hBsDJHc837ar6NRpiGHMCm0pGg0uvl7NUnm32gpcBKgFJsUg13ijNZ2YERyoaQHPqZkPaCZV8MhLkTWM=w72-h72-p-k-no-nu
200 OK 2.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha17iy4Swv9quu_e_H70uLTILrkIqPErZK6pC_HIIBtyYND0pF16qsvTE0tGURbMLgpymtQI8ReLshTZEsB4oQdtX70pV8hpq78hBsDJHc837ar6NRpiGHMCm0pGg0uvl7NUnm32gpcBKgFJsUg13ijNZ2YERyoaQHPqZkPaCZV8MhLkTWM=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 03e0601329dc145e2991b2b983a0513c
a7654e361d19ff697fe740512fb3038de9db85e4
216ccb41cc3d7aed79bb675df612b2e05f5c3dd34a68ef040fe2737fd8f9d384
GET /blogger_img_proxy/ANbyha17iy4Swv9quu_e_H70uLTILrkIqPErZK6pC_HIIBtyYND0pF16qsvTE0tGURbMLgpymtQI8ReLshTZEsB4oQdtX70pV8hpq78hBsDJHc837ar6NRpiGHMCm0pGg0uvl7NUnm32gpcBKgFJsUg13ijNZ2YERyoaQHPqZkPaCZV8MhLkTWM=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 2802
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2xsQIgPF7YQE6WpeXNBXEt2HDu-4DvFP225GoxB1_hb5QJHm_6PW5JlOmIKAr0Yh1b1Llq3p5ntkt957q1LxXwn7qj_dRTjdDJ-ebGVkJTN0zrQseK1pFoha1OYxYHF_S_50kVVmMLlFao169EYxJItODYew=w72-h72-p-k-no-nu
200 OK 3.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2xsQIgPF7YQE6WpeXNBXEt2HDu-4DvFP225GoxB1_hb5QJHm_6PW5JlOmIKAr0Yh1b1Llq3p5ntkt957q1LxXwn7qj_dRTjdDJ-ebGVkJTN0zrQseK1pFoha1OYxYHF_S_50kVVmMLlFao169EYxJItODYew=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 5ef3c2f618306fb8f9ad138dc4af1ff1
68b8b252c51caac62795bedd2ca0a6df2b58fe6e
2528dc848282a821febd161b0229c52ca925c4be5ed6bf1fda544e63caeb128b
GET /blogger_img_proxy/ANbyha2xsQIgPF7YQE6WpeXNBXEt2HDu-4DvFP225GoxB1_hb5QJHm_6PW5JlOmIKAr0Yh1b1Llq3p5ntkt957q1LxXwn7qj_dRTjdDJ-ebGVkJTN0zrQseK1pFoha1OYxYHF_S_50kVVmMLlFao169EYxJItODYew=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3746
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1sh1VGTKBwPpMNkmtL2ru6dL05WvB_poTBKAkvGEq9GS35yQsZ5LGsCXFHiPHOWcyN0swDLMcyZH7bRIA_nNybAJ1DVr9_8j-r4cgQDqy6eetJ-Bo4dYt9RSOPIKPQ3gr9ZeIy8VUIZQsQL8Uh=w72-h72-p-k-no-nu
200 OK 3.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1sh1VGTKBwPpMNkmtL2ru6dL05WvB_poTBKAkvGEq9GS35yQsZ5LGsCXFHiPHOWcyN0swDLMcyZH7bRIA_nNybAJ1DVr9_8j-r4cgQDqy6eetJ-Bo4dYt9RSOPIKPQ3gr9ZeIy8VUIZQsQL8Uh=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 892c606ea8d3cc6f9ec2298b97a668a6
617da828a3aa5ebcdd3a5f16f8f4b65e0e875a98
bbba2228fd14660851a60dfc5ebe4d6896934833ccec1ec9a66d4393c23ca5e7
GET /blogger_img_proxy/ANbyha1sh1VGTKBwPpMNkmtL2ru6dL05WvB_poTBKAkvGEq9GS35yQsZ5LGsCXFHiPHOWcyN0swDLMcyZH7bRIA_nNybAJ1DVr9_8j-r4cgQDqy6eetJ-Bo4dYt9RSOPIKPQ3gr9ZeIy8VUIZQsQL8Uh=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 3879
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha33Cwjj0CN2WiYOAdLb9oNsL9iN5rYx0lx9L8vPo_XlX02y4vnTrnmHF5drocIKkBkuLdBfUs8R51GFfwjEUSaSv4mTisYQaK0_tMMEfMtsLudp0QaywXeWjt76tFEL_qIHdzJR86jme_pVbB49VMs=w72-h72-p-k-no-nu
200 OK 2.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha33Cwjj0CN2WiYOAdLb9oNsL9iN5rYx0lx9L8vPo_XlX02y4vnTrnmHF5drocIKkBkuLdBfUs8R51GFfwjEUSaSv4mTisYQaK0_tMMEfMtsLudp0QaywXeWjt76tFEL_qIHdzJR86jme_pVbB49VMs=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash df2999360cc4d2652beda0408860897e
7de56f450c66bc7573a61577b421d7c2aa81cde5
1ee1b0509178790ae10ac44643ac288bc5c2974a2a920ad755310639cccab30a
GET /blogger_img_proxy/ANbyha33Cwjj0CN2WiYOAdLb9oNsL9iN5rYx0lx9L8vPo_XlX02y4vnTrnmHF5drocIKkBkuLdBfUs8R51GFfwjEUSaSv4mTisYQaK0_tMMEfMtsLudp0QaywXeWjt76tFEL_qIHdzJR86jme_pVbB49VMs=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 2676
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0XINyVq2hpzufaDtmSy_7S564H3kpQ_2Rn27CYsrgGtFFhfLbzJSKD2GdwZUiT7CDjx0gV3TYcY-cxN5VUeXIUc1-K0b0_hJybTV02UbqCcCRzNnT0AHQlbKd6RUihHuzTB6fO2cJUow=w72-h72-p-k-no-nu
200 OK 2.6 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0XINyVq2hpzufaDtmSy_7S564H3kpQ_2Rn27CYsrgGtFFhfLbzJSKD2GdwZUiT7CDjx0gV3TYcY-cxN5VUeXIUc1-K0b0_hJybTV02UbqCcCRzNnT0AHQlbKd6RUihHuzTB6fO2cJUow=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash ab02c8e2b3279859fb48430889b15621
18ff25a7ab369eedc8ccf2736511dbba0436a3f7
ea13acade371cac478c4df290738b340ca2e5a355e6c66224e8e35ad7ea7fe6c
GET /blogger_img_proxy/ANbyha0XINyVq2hpzufaDtmSy_7S564H3kpQ_2Rn27CYsrgGtFFhfLbzJSKD2GdwZUiT7CDjx0gV3TYcY-cxN5VUeXIUc1-K0b0_hJybTV02UbqCcCRzNnT0AHQlbKd6RUihHuzTB6fO2cJUow=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:13 GMT
server: fife
content-length: 2585
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.dcrainmaker.com/images/2012/04/the-soleus-2-0-gps-running-watch-in-depth-review-57.jpg
200 OK 178 kB URL HTTP/2 media.dcrainmaker.com/images/2012/04/the-soleus-2-0-gps-running-watch-in-depth-review-57.jpg
IP
ASN #34989 ServeTheWorld AS
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 1024x684, components 3\012- data
Size 178 kB (177929 bytes)
Hash ffb5829efbebfd99bb3d747ea075dda2
c4d40a6770a1735b68a72e9e1d0771659aa84c7f
39a8ece6fbbd8bb32256ce9cf3a101e59c6a22b9d9037b2f777db3af3b67c25c
GET /images/2012/04/the-soleus-2-0-gps-running-watch-in-depth-review-57.jpg HTTP/1.1
Host: media.dcrainmaker.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:13 GMT
content-type: image/jpeg
content-length: 177929
server: BunnyCDN-NO-830
cdn-pullzone: 111972
cdn-uid: f15c75ec-7809-4d49-86e7-cc317f769297
cdn-requestcountrycode: NO
cache-control: public, max-age=2592000
last-modified: Tue, 25 Jun 2013 12:56:16 GMT
cdn-cachedat: 09/14/2022 11:38:13
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
link: <https://www.dcrainmaker.com/images/2012/04/the-soleus-2-0-gps-running-watch-in-depth-review-57.jpg>; rel="canonical"
cdn-status: 200
cdn-requestid: 5326dd29c0b59dcb06369b1eef452f96
cdn-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
s3.amazonaws.com/www.irunfar.com/wp-content/uploads/2012/10/16145732/Highgear-XT7-ALTI-GPS1.jpg
200 OK 42 kB URL HTTP/1.1 s3.amazonaws.com/www.irunfar.com/wp-content/uploads/2012/10/16145732/Highgear-XT7-ALTI-GPS1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 600x400, components 3\012- data
Hash 49dbeb4bb921201d613046411084b38e
1f05a988a9912432741949b63b43882c648dd786
40b476b15ee24cd703d4b90419d223dc9cf65187b59e78897f9a528c6ab17449
GET /www.irunfar.com/wp-content/uploads/2012/10/16145732/Highgear-XT7-ALTI-GPS1.jpg HTTP/1.1
Host: s3.amazonaws.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: dYFpyfOW2JiQO2YqeFbaSaMAYy8UFfyW+YFNPfQ1+ULyx+sbmm7oW2RV8p0UPgEXbJm3aN7Pabs=
x-amz-request-id: TN07C9PD05KR02DC
Date: Wed, 14 Sep 2022 11:38:14 GMT
Last-Modified: Wed, 16 Jun 2021 20:57:33 GMT
ETag: "49dbeb4bb921201d613046411084b38e"
Cache-Control: max-age=31536000
Expires: Thu, 16 Jun 2022 20:57:32 GMT
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 42249
lh3.googleusercontent.com/blogger_img_proxy/ANbyha25UORin271Rgz6j5xrJyeg-t9d-JTGs_X-cVKW9cR6CeaD1__y3HExErEj_PakmeYNf4bjl1KVYtUlTV3j00hAZFfz4Yjz4B16TcemkOIHCIf_onz_ZONv4QG_9LYrXyL9Big3Ozd0wMQ-is2DbcCLJN6tYDyNBPU-hhWS38-LUaXKRBcp0YqS4EC1A7hn2vWUsXuc8qRI8zG15bD3wRnpdNwxjExmT6LiYdgXWIEh1afAjq37=w72-h72-p-k-no-nu
200 OK 4.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha25UORin271Rgz6j5xrJyeg-t9d-JTGs_X-cVKW9cR6CeaD1__y3HExErEj_PakmeYNf4bjl1KVYtUlTV3j00hAZFfz4Yjz4B16TcemkOIHCIf_onz_ZONv4QG_9LYrXyL9Big3Ozd0wMQ-is2DbcCLJN6tYDyNBPU-hhWS38-LUaXKRBcp0YqS4EC1A7hn2vWUsXuc8qRI8zG15bD3wRnpdNwxjExmT6LiYdgXWIEh1afAjq37=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 217a9a26931b252ec16e399137f5afb1
caffd47af7bb937f84f167465493811b8e0f68ec
f6bb1451813faee281ea12c03e15206ef841fbf0cd6e7a3c3103ae309debf690
GET /blogger_img_proxy/ANbyha25UORin271Rgz6j5xrJyeg-t9d-JTGs_X-cVKW9cR6CeaD1__y3HExErEj_PakmeYNf4bjl1KVYtUlTV3j00hAZFfz4Yjz4B16TcemkOIHCIf_onz_ZONv4QG_9LYrXyL9Big3Ozd0wMQ-is2DbcCLJN6tYDyNBPU-hhWS38-LUaXKRBcp0YqS4EC1A7hn2vWUsXuc8qRI8zG15bD3wRnpdNwxjExmT6LiYdgXWIEh1afAjq37=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 15 Sep 2022 11:38:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 14 Sep 2022 11:38:14 GMT
server: fife
content-length: 4928
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7368
Expires: Wed, 14 Sep 2022 13:41:02 GMT
Date: Wed, 14 Sep 2022 11:38:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7368
Expires: Wed, 14 Sep 2022 13:41:02 GMT
Date: Wed, 14 Sep 2022 11:38:14 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7368
Expires: Wed, 14 Sep 2022 13:41:02 GMT
Date: Wed, 14 Sep 2022 11:38:14 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f2157f7cfbdeb607f28ae51eb090f2c3
33d0dcadaa42179b2eae914c8ad16c9c088afbc9
135cd89c2c82f0f5e53d2612d5eac868c175b28a567a07e63a2073942e36a066
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6b4d822c-5153-4c55-bcb3-aa6ee72e3b62.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6078
x-amzn-requestid: e09c099f-5a2d-49d7-b6ab-e16f09c28bd0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YavJEEM5IAMFreQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f8a0-0fbb7b3d0cd6fbfa04f5a5d2;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:39:44 GMT
x-amz-cf-pop: SEA73-P2, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: Ur-HTN2DS8b3ojSQldJOZi6YW2wtCwRfbGqxg49ZUJ_00hC_rFxYEw==
via: 1.1 9b21fd56256eda6d1379e32829c4c446.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:05:07 GMT
age: 48787
etag: "33d0dcadaa42179b2eae914c8ad16c9c088afbc9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg
200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fef8234ab83f6f8f8b29665f592cbc9f
a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7
569c8c9736026fc310e148d4d74081e96a86245baaa1f784280d44a1cbd25ed0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F16b1b829-b672-479c-964a-2f636f65f91e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14151
x-amzn-requestid: d5bc9be4-af3a-40fd-bfc9-1ac4769d2d3c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4GhboAMF2dA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-375df72d2d67582635b9e4ae;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CZRpgjU_AxNYoyeSTOwhJhONl2DS4pvCLJ62RgAFp0flw-kPz3GkpQ==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 22:06:54 GMT
etag: "a3e706d6309e4a9d7b293f2b9255f1550ba5e9b7"
content-type: image/jpeg
age: 48680
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0789404fdbe3613d465d8fa89a63d7b8
0617d2e513097ca415a1d07cd39b1cb64d832ecf
80e55e383f354113c3694bbcc00fd1c544a97079bd3c462f1b90e952c0634bac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8cb650f7-1b0f-4a3d-898f-97b846afe9db.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10138
x-amzn-requestid: bdf798d9-6729-4363-a900-f32c4041d0c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YU5qsGZ-oAMFQ1Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ea311-7b146c0620a83d5c00446f87;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 03:10:09 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OM9K72ukk0cuyR1ZcV5xWXnEd8U9OgeQi7bkCe0Pzn3BfdLMvSdSXg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 01147dcc35d57fc0238a3c1700c13f16.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 03:09:32 GMT
age: 30522
etag: "0617d2e513097ca415a1d07cd39b1cb64d832ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3d8bcb1-416c-44eb-ac9e-6196bed61280.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3d8bcb1-416c-44eb-ac9e-6196bed61280.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0119f7d5458bbad12e972d04221e49ea
f05c46d74d8dfdd7fee763ec1e80e498399fffd2
eaefac45720584447a601fd90300464fbca5092117a670ac73be3b47884ba7fe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3d8bcb1-416c-44eb-ac9e-6196bed61280.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8005
x-amzn-requestid: 63121855-7f9b-4c3f-b9d3-0c3bc06c700d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X3yx5HN3oAMFxxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6312fe72-7edeec96509ac24b442836cb;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 07:12:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: MjYVR_YRfhLgchDlWjHka0Ggdp-upZ10LFrJSMjtVnsGe4oqxSnepg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 28390a4d24ed4fdccd685d99cd06cf4e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Sep 2022 11:09:54 GMT
age: 1700
etag: "f05c46d74d8dfdd7fee763ec1e80e498399fffd2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b20499b3b8ef7b8ee73bd8b27e8c0c16
744a852e9357455d55e72809841411258fec44a9
457c8a9e4974a9529fa852b37f7ffc083e0eac987fe47aaebda808bf9f9f2941
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faf118ca5-e4f8-4e97-a3c2-87e36a56e609.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9270
x-amzn-requestid: bba505a1-bbba-4d14-ad3a-1f72c028cc43
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YLj-YGaOIAMFeOw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ae6c2-08d743cc73070f6653991180;Sampled=0
x-amzn-remapped-date: Fri, 09 Sep 2022 07:09:54 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: vGRrbI4hDMlyKh7qDB3mVRNKJW6vqpnJR94CU6lZVyTzNqjmI0hrpA==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 23:11:58 GMT
age: 44776
etag: "744a852e9357455d55e72809841411258fec44a9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 56811a1a20a467464e1f3da171ef8b14
366b2090d409d694b72b4b4131df46dd65d69c5a
4c208fb88884166adf4ecc5882f75948b4a87d85c76ad6e7137e8edbd125c996
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2b71bb0-fd92-43d0-8cd0-b426d0b88ee8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15547
x-amzn-requestid: a78f7d90-84c3-4198-88bf-1d722c37f09f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yauv4EUDoAMF13A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6320f7ff-49535e5525606250306488ba;Sampled=0
x-amzn-remapped-date: Tue, 13 Sep 2022 21:37:03 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: CWzE6n2U7hSFcSIHX5z76DPIid9pvbOqM6ikOlegBxzbuRThMeLKZA==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 1481cc55c02c3a782ad420b6bac2cb32.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 21:46:14 GMT
etag: "366b2090d409d694b72b4b4131df46dd65d69c5a"
content-type: image/jpeg
age: 49920
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash f9d2dd13cb765ae8078c949a2b97660d
2375e5525042533296cdfc0ab7fcce0ebb4cdcae
4606ee31996e190d41cf502dc5b93e1313d781911c821323ab35c48bdfa3baf2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4606EE31996E190D41CF502DC5B93E1313D781911C821323AB35C48BDFA3BAF2"
Last-Modified: Tue, 13 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2128
Expires: Wed, 14 Sep 2022 12:13:42 GMT
Date: Wed, 14 Sep 2022 11:38:14 GMT
Connection: keep-alive
www.variouscreativeformats.com/9f0de11e5fd48835de6964cc4939507c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.variouscreativeformats.com/9f0de11e5fd48835de6964cc4939507c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26939), with no line terminators
Hash 0e67d13720775c9b92d9c6bbe8add723
3c62553fc8ded741adfb1a6d6dd0c2c5e26f7a1b
7d71e70cfbc3966865145546550b3c22c17878c381f94a6172a628f7f87c59f8
Analyzer Verdict Alert quad9 Sinkholed
GET /9f0de11e5fd48835de6964cc4939507c/invoke.js HTTP/1.1
Host: www.variouscreativeformats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 14 Sep 2022 11:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1c9deeebb4ff88210e8d962a38902be6
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2
200 OK 8.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 8668, version 1.0\012- data
Hash a242ba0df3a128a2cab929a8c45d5056
d70e2c70b21cbb66cd883ae56e2dedacefd81c7c
50d0c1742d80ac71f4cde20e8c04d41a24806af342831f479938b527fbff0972
GET /s/poppins/v20/pxiGyp8kv8JHgFVrJJLucHtA.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 8668
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:53:36 GMT
expires: Thu, 07 Sep 2023 19:53:36 GMT
cache-control: public, max-age=31536000
age: 575078
last-modified: Wed, 27 Apr 2022 16:07:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
200 OK 7.7 kB URL HTTP/2 fonts.gstatic.com/s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 7748, version 1.0\012- data
Hash a09f2fccfee35b7247b08a1a266f0328
0da2d17e738f46d2a09e6fb7969da451719a9820
cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446
GET /s/poppins/v20/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 7748
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Sep 2022 19:30:59 GMT
expires: Thu, 07 Sep 2023 19:30:59 GMT
cache-control: public, max-age=31536000
age: 576435
last-modified: Wed, 27 Apr 2022 16:21:30 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 9.4 kB URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (30837)
Hash 48bb714aed8ba31ee9c442a17b32c6cc
ff4aa09fadf953a7133a60a8bf6a9a175ae73b16
7537032b57dc71b43adbb45df63c981036810d16c16b413125b192ba0400c2c4
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:13 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 8602247
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74a8d5c9afe7b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://stackpath.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 08/17/2022 18:20:14
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 628e7c6030a3017e2a446fb769ae38fc
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74a8d5d1bdb21c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT
200 OK 2.3 kB URL HTTP/2 encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x183, components 3\012- data
Hash 9bef96c7479adb40f793c7b0f4f2c33d
aff2b02e9af3e14faa9d22677eda1e2e6bd481cc
fcf9fdd5ab81da78cbca3ca589d8ff4c608a00f3d90665f2dc1aa8b9636998d9
GET /images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 2347
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 18:56:29 GMT
expires: Wed, 13 Sep 2023 18:56:29 GMT
cache-control: public, max-age=31536000
age: 60105
last-modified: Tue, 22 Dec 2015 19:19:47 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 2fc3b5eb9085eca43e4d88936932d44c
e59ae2e54c872725e60eb6d333a716be9677fba3
199fc94cedc302abb9b72051981be93564893258027f7e821646766f0ce1fb9c
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Wed, 14 Sep 2022 11:38:14 GMT
Last-Modified: Wed, 14 Sep 2022 10:35:04 GMT
Server: ECS (nyb/1D13)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fZekYoqlj-rEKNB9z2YkLSgNvZSJw8fYEb7Ec0xtjIgtqrrq2hoLCw==
Age: 3790
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d9e68c1ee081df4dd230fb9537938980
af36830f130d85e63a861a73f0d832ae4107250a
2b9fc78454023c327c41141fecd3705e0e0927bb1a9f2be0b3542d8168b18899
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://c639peggyriley.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=766c18b4-96ec-4b94-be79-a957322db812:2:1; expires=Sat, 11 Sep 2032 11:38:14 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.variouscreativeformats.com/9f0de11e5fd48835de6964cc4939507c/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.variouscreativeformats.com/9f0de11e5fd48835de6964cc4939507c/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26951), with no line terminators
Hash 2ac9f6c660555a6224de3762d7946dd9
ca21f1e15a73469f8d99a5f8310c6f6803ef2418
63c4522f200f6e6af8dcff2c398b02cdd1d9daab847a66a963c056cca4eee9ff
Analyzer Verdict Alert quad9 Sinkholed
GET /9f0de11e5fd48835de6964cc4939507c/invoke.js HTTP/1.1
Host: www.variouscreativeformats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Wed, 14 Sep 2022 11:38:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: c0ce2f0a9179511b1e5a023b284aea84
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash d9e68c1ee081df4dd230fb9537938980
af36830f130d85e63a861a73f0d832ae4107250a
2b9fc78454023c327c41141fecd3705e0e0927bb1a9f2be0b3542d8168b18899
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Cookie: uid_id2=766c18b4-96ec-4b94-be79-a957322db812:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://c639peggyriley.blogspot.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 536a12e60dac6720d7fc71366dace8bc
68627a5fed1401e2104e9f73c24c870d94284406
e2f75ff8c657dbd4c9e0851642f3c9d2a69019134c368d014c600a996351803f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5684
Cache-Control: max-age=163676
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Etag: "6321834f-1d7"
Expires: Fri, 16 Sep 2022 09:06:11 GMT
Last-Modified: Wed, 14 Sep 2022 07:31:27 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
200 OK 2.7 kB URL HTTP/2 snapwidget.com/js/embed.main.min.b61fafc5de1ae792.js
IP
File type ASCII text, with very long lines (2862), with no line terminators
Hash 0d96acd375b160966dba010b08e31dec
41b5a620d33ed80a98a936396f2d11048ede1129
c10f91c96b7bcaa4c324693c664d1ed42c21602dc67d58eefe36927e9f4e30e6
GET /js/embed.main.min.b61fafc5de1ae792.js HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: application/javascript; charset=utf-8
cf-bgj: minify
etag: W/"63034249-b2e"
last-modified: Mon, 22 Aug 2022 08:46:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1361128
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sYw1j59dbF%2FLV5JLmkJDOHitP0mmgcOTYni5P0EO7s%2FMpnqnNWZzAOpznHF4hM0fXzsHXiNytOxZ0O85Z3Ris2%2BXT2dcUc5Qiz3r7ZXQSh7vDxLbcKHgnCLui5c%2FXn06"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d36f22b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3e80e25cd2f62776337af6df560b95fd
588d000c658214820cc9063d118b60437bc03152
41afd36104d30803eb2fae472a09e0254312557f37bb65216a46139b1365ce59
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "41AFD36104D30803EB2FAE472A09E0254312557F37BB65216A46139B1365CE59"
Last-Modified: Sun, 11 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4799
Expires: Wed, 14 Sep 2022 12:58:14 GMT
Date: Wed, 14 Sep 2022 11:38:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 536a12e60dac6720d7fc71366dace8bc
68627a5fed1401e2104e9f73c24c870d94284406
e2f75ff8c657dbd4c9e0851642f3c9d2a69019134c368d014c600a996351803f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5684
Cache-Control: max-age=163676
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Etag: "6321834f-1d7"
Expires: Fri, 16 Sep 2022 09:06:11 GMT
Last-Modified: Wed, 14 Sep 2022 07:31:27 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
s10.histats.com/js15_as.js
200 OK 4.4 kB URL HTTP/2 s10.histats.com/js15_as.js
IP
File type HTML document, ASCII text, with very long lines (11440), with no line terminators
Hash ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1
GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:34:46 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 217516406
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.grid.min.4069f6f840f9102b.css
200 OK 87 kB URL HTTP/2 snapwidget.com/stylesheets/embed.grid.min.4069f6f840f9102b.css
IP
File type ASCII text, with very long lines (2201), with no line terminators
Hash d71162e65f501c0478d4713292502645
5e29382dc8483431f3fb3e85556a4894cecd3140
78abd8f5936c38ea843056b7d8fe51a9746d64e4f0251628bf31bce8b280eb7f
GET /stylesheets/embed.grid.min.4069f6f840f9102b.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/css
cf-bgj: minify
etag: W/"63034249-899"
last-modified: Mon, 22 Aug 2022 08:46:01 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1827995
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nNeOx8H8E%2BwW5XwP4ML6umaDHDTezx3F0iWRrK%2BNn6gqhnGNZRydSh2THL0yGSkabjezPuwL4dE3XNMa4XcNudqgSXfZNlVPmbGPckzFG%2BArjawwXmDqKwD3mOxklkWd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d36f1bb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.pinimg.com/736x/53/f4/64/53f464b91a3b6222cd5042da0e86e066--location-finder-q.jpg
200 OK 43 kB URL HTTP/2 i.pinimg.com/736x/53/f4/64/53f464b91a3b6222cd5042da0e86e066--location-finder-q.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 638x640, components 3\012- data
Hash cee18ba01175dd60305d7d7d3a4c2d04
1bb94d38c4f542a78a58d83976ebeeb9960f8839
e75ae516fca99159486a4b049d5adb0657a74e0bb53b564f0078324f0fe51a04
GET /736x/53/f4/64/53f464b91a3b6222cd5042da0e86e066--location-finder-q.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:15 GMT
content-type: image/jpeg
content-length: 42843
cf-ray: 74a8d5d3d8beb4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "cee18ba01175dd60305d7d7d3a4c2d04"
vary: Origin, Accept-Encoding
edge-start: 1663155495017
origin-latency: 161
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
snapwidget.com/embed/956730
200 OK 57 kB URL HTTP/2 snapwidget.com/embed/956730
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (26629)
Hash c04a324bf1f8bd69a41829379a6d9ad3
30be1f8d3bfca0545d9521f51c50a3130e373852
0bcad1ac783ba842b5a4c7d5582da821b72a836f77b6c937aafa80349b38dcf7
GET /embed/956730 HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
cache-control: public, max-age=300
expires: Wed, 14 Sep 2022 11:39:12 GMT
x-robots-tag: all
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
last-modified: Wed, 14 Sep 2022 11:37:12 GMT
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cnPsDeNN6iVpdERsWQtUPG1bFjm2XZ27q6dy7mPO7q%2FcwVM6LQijejs%2FVymbiwyhzwE0Js6JxRLvyKO7uaCE2Wpy4GDam9zcw78vpT353jutZ9yqt3KQbc7tUXrkqc5I"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d20d2cb4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
snapwidget.com/images/icons/facebook.png
200 OK 648 B URL HTTP/2 snapwidget.com/images/icons/facebook.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 54e9168996419eada721e6ca83b9866e
9a98cbd3f57f7cb3017e0ed1a4c4356094c0c2fb
4d1a80126c4bacaa62d2c046fd95b1378b5b874582f0ac4a7c453ff5cd1d33d7
GET /images/icons/facebook.png HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:15 GMT
content-type: image/webp
content-length: 648
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2222
content-disposition: inline; filename="facebook.webp"
vary: Accept
etag: "62f664ed-8ae"
last-modified: Fri, 12 Aug 2022 14:34:21 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 2364549
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RDlHKUREidjBi3cMYwTFCuCbi0sP%2Be1iuDtXYbV5V4thFUdlTgTvS4gWYtPSGOLvLxCJHNDKl2uFP3%2BEMVGyipLbgeU7jNrgTWKFzpUtBvnY6A9vEsCTliJwjCf8MW9z"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d50972b4f4-OSL
X-Firefox-Spdy: h2
snapwidget.com/images/icons/twitter.png
200 OK 716 B URL HTTP/2 snapwidget.com/images/icons/twitter.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 557dcf13a6c64edb6327ca8092bfa6fe
1a6de39ca44d62562f6b41d4c11d93e6e600505f
2308c6bccc5ec728fb77bc14121b7d154206d45de5754875b60d1690dad2af07
GET /images/icons/twitter.png HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:15 GMT
content-type: image/webp
content-length: 716
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2371
content-disposition: inline; filename="twitter.webp"
vary: Accept
etag: "63171a66-943"
last-modified: Tue, 06 Sep 2022 10:01:10 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 485102
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=I7uKXE6e4mSlYenUQzqvWTraO2UCG2utWPLfosrr4q8B8t2DRWxe%2BhfgfsU70L9fnjgcD5LDJcl1kDSKmr%2B67cDFbKhBo%2BHiVxDtYIItxKZkvjtLLm9C2mcsww3QmJCk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d50976b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 56f5d7f608e25d64207135f045f988cb
901eb59372ae330ae85e1384da93479b21ae1082
1910daea79e5a9d04829a91e432dfa56f45a80a3e14a8cf667fec73af9fd3d29
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20006
date: Wed, 14 Sep 2022 10:41:12 GMT
expires: Wed, 14 Sep 2022 12:41:12 GMT
cache-control: public, max-age=7200
age: 3423
last-modified: Wed, 13 Apr 2022 21:02:38 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c79a6d9219e52788c0288a4288601f0b
a55c74c35279d08872bb4b0805d3f8ff684bc322
345482ec25a567e189a52a824fa13f6bbcfa8ce636c40f3619232b9cff65fa6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
js-agent.newrelic.com/nr-1216.min.js
200 OK 14 kB URL HTTP/2 js-agent.newrelic.com/nr-1216.min.js
IP
File type ASCII text, with very long lines (32022)
Hash b7c09cc097b2847f9edc784adba62dcb
5aa648623cf5e3b4b215fe5d068a7904c59f2925
6da450b6a3ba53bdab36f6529e987a245cdfca9a37b77790f06dfd8d5797bdaa
GET /nr-1216.min.js HTTP/1.1
Host: js-agent.newrelic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Vf9xsFZHH0UI6bmTnW+KeBzegICGOxvtMLIWtbljNKoJtdkUEk/MfmbYPFui+bgtiUf/4lC5dk8=
x-amz-request-id: 4AV5AVKCCR961CNG
last-modified: Thu, 14 Apr 2022 16:45:57 GMT
etag: "9f533d8cd24b2c5e3b4dc886ecbd43e8"
x-amz-version-id: mHHzJIqOizHibcYt0xqAszRr0gQRiNYy
content-type: application/javascript
server: AmazonS3
cache-control: public, max-age=7200, stale-if-error=604800
content-encoding: gzip
accept-ranges: bytes
date: Wed, 14 Sep 2022 11:38:15 GMT
via: 1.1 varnish
x-served-by: cache-bma1645-BMA
x-cache: HIT
x-cache-hits: 569
x-timer: S1663155495.362542,VS0,VE0
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
content-length: 14391
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4b5e538e511e4c5e232c607be537dffb
bec268be641b81f8b7ed531724237b8915db03cc
b7fade5a096f8adcf21ecc4dc05a4d49ae993f701e1fd49c69be2c4562525c88
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B7FADE5A096F8ADCF21ECC4DC05A4D49AE993F701E1FD49C69BE2C4562525C88"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8318
Expires: Wed, 14 Sep 2022 13:56:53 GMT
Date: Wed, 14 Sep 2022 11:38:15 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 78f8bae58862d8be3437cfe9e927011d
fb01a9cfd346f2c9b7694276c72a76e213887b06
389d233aa4b3ea23315c9d6e8d72d96fb2f802e227d24199c788a5a89e96a19e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
phosphatepossible.com/watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 phosphatepossible.com/watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1 HTTP/1.1
Host: phosphatepossible.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Wed, 14 Sep 2022 11:38:15 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://c639peggyriley.blogspot.com
Access-Control-Allow-Origin: https://c639peggyriley.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://phosphatepossible.com/watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=619d50e1664dd6a10b8f3f4ba2fa3fa2986eef42cc748c1b5b57c32905fe6c92ce2786e5dddfebb0829d7b04532b9b673d1ed47b9651757cd95744be0b5e22c191417744f57ba7f33649886bda9ba19d831935ef3a6f447b1f47d2c79307e3&pst=1663155555&rmtc=t
Set-Cookie: u_pl=16266998; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.hbyOt2EPPqsosl17icfytPr-y9Ca1or-4nTrKAnF-2g; expires=Wed, 14 Sep 2022 11:39:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 50954cbba3d54e3cf51db5ea39c431cb
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6094
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 09:56:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 670 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 24fb827545f0df82ba9ce873507284b7
9b19dbdd1f7e262643f5c8937bd71b8b4bbf51e9
8c9289a263ad355d61c55a414ea621a8019e6355e2532825d03d39e0e59292b0
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 14 Sep 2022 11:38:15 GMT
date: Wed, 14 Sep 2022 11:38:15 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 670
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6094
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 09:56:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9f54ffdf3fd13e7fd8027660a5c12954
627498b680a0e15fcd7c3948c02f7745f26d2765
9384cf9d45d468f82ce0caface0d020e67769e60a517800675a5e824c4f0abc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9384CF9D45D468F82CE0CAFACE0D020E67769E60A517800675A5E824C4F0ABC1"
Last-Modified: Tue, 13 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11834
Expires: Wed, 14 Sep 2022 14:55:29 GMT
Date: Wed, 14 Sep 2022 11:38:15 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6094
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 09:56:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4036
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 10:30:59 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4036
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 10:30:59 GMT
Server: ECS (ska/F719)
X-Cache: HIT
Content-Length: 471
scontent.cdninstagram.com/v/t51.2885-15/242747775_3064430333842459_4612651904784165094_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeFBZ5ESIyeseoH2yph60q0cnJFevsoTYX2ckV6-yhNhfVHy6TNabWjoJwutN8zGjVQ&_nc_ohc=Jh0eKGH3HgkAX_4iAZf&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT9fllIrKygROa6TSGQdw93KqkDT9Y9LabAoOQ-cdSbRCA&oe=63265D3C
200 OK 132 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/242747775_3064430333842459_4612651904784165094_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeFBZ5ESIyeseoH2yph60q0cnJFevsoTYX2ckV6-yhNhfVHy6TNabWjoJwutN8zGjVQ&_nc_ohc=Jh0eKGH3HgkAX_4iAZf&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT9fllIrKygROa6TSGQdw93KqkDT9Y9LabAoOQ-cdSbRCA&oe=63265D3C
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 132 kB (132332 bytes)
Hash 5c1d94ad84f2d47f8af1fa615cf5d1be
dbe9f311922b89ab4a1b9a5148efa651ac96715c
87def0fb20ac6792d6810afa862eae437bea61e5463d981027827ccf74fd81e9
GET /v/t51.2885-15/242747775_3064430333842459_4612651904784165094_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeFBZ5ESIyeseoH2yph60q0cnJFevsoTYX2ckV6-yhNhfVHy6TNabWjoJwutN8zGjVQ&_nc_ohc=Jh0eKGH3HgkAX_4iAZf&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT9fllIrKygROa6TSGQdw93KqkDT9Y9LabAoOQ-cdSbRCA&oe=63265D3C HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Sat, 25 Sep 2021 03:14:15 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 2803065861
x-needle-checksum: 2191033377
content-digest: adler32=2191033377
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 132332
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
200 OK 157 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js
IP
File type ASCII text, with very long lines (539)
Size 157 kB (157166 bytes)
Hash 026df0dfed2314af108e700900288961
51c2a55bca7d65c549ef138d1294cac2aa98dd96
24eefc59f5d298ce40bdd33c8157ad14631984159fca8e5980037366c44c2b34
GET /recaptcha/releases/g8G8cw32bNQPGUVoDvt680GA/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 157166
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Sep 2022 17:23:20 GMT
expires: Wed, 13 Sep 2023 17:23:20 GMT
cache-control: public, max-age=31536000
age: 65695
last-modified: Tue, 06 Sep 2022 00:04:24 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 43580c6b45d56a54f84779f3a43bc295
2e2913202cf1a91282be72bd47c52f3692cc3091
b568aa3605aeaf3a9c86ffca7414a8639f77b95a3edce2b1006bf7e4c5810ed4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6094
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Last-Modified: Wed, 14 Sep 2022 09:56:41 GMT
Server: ECS (ska/F718)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b743089bdff5635e2f7c38d20c1910f6
f1874493bc88c2d9ba4a95a43e810da1cb452abd
3a60895d54c86a3e46a3dbcacfc07f3fae4ba79add296b16d0938baacc8d462a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
scontent.cdninstagram.com/v/t51.2885-15/306772431_2173143222863449_7278280663831954741_n.jpg?_nc_cat=101&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEvG70__E4nLlFfvqCA_YY-sSArlx7buROxICuXHtu5E7rLk5_pOCpdAL5iLzoJYoM&_nc_ohc=Fmzhhka01LAAX9kqJ3P&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-A56fYi7ouWfHuAIlZ-qEFRMGiKQ42N68BcR07TQxmyg&oe=6325E272
200 OK 201 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/306772431_2173143222863449_7278280663831954741_n.jpg?_nc_cat=101&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEvG70__E4nLlFfvqCA_YY-sSArlx7buROxICuXHtu5E7rLk5_pOCpdAL5iLzoJYoM&_nc_ohc=Fmzhhka01LAAX9kqJ3P&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-A56fYi7ouWfHuAIlZ-qEFRMGiKQ42N68BcR07TQxmyg&oe=6325E272
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 201 kB (201172 bytes)
Hash fed02588e27720fe9728e82af2048f69
257a51910e1536803fdea6c2a4ad58f89df9243e
9f6eb68aaff795ccd01dc5e0eb2d128321d763c7883c560b08728c7fea5e2d7f
GET /v/t51.2885-15/306772431_2173143222863449_7278280663831954741_n.jpg?_nc_cat=101&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEvG70__E4nLlFfvqCA_YY-sSArlx7buROxICuXHtu5E7rLk5_pOCpdAL5iLzoJYoM&_nc_ohc=Fmzhhka01LAAX9kqJ3P&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-A56fYi7ouWfHuAIlZ-qEFRMGiKQ42N68BcR07TQxmyg&oe=6325E272 HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Wed, 14 Sep 2022 00:44:10 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 12436044
x-needle-checksum: 2397077507
content-digest: adler32=2397077507
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 201172
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
phosphatepossible.com/watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=619d50e1664dd6a10b8f3f4ba2fa3fa2986eef42cc748c1b5b57c32905fe6c92ce2786e5dddfebb0829d7b04532b9b673d1ed47b9651757cd95744be0b5e22c191417744f57ba7f33649886bda9ba19d831935ef3a6f447b1f47d2c79307e3&pst=1663155555&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 phosphatepossible.com/watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=619d50e1664dd6a10b8f3f4ba2fa3fa2986eef42cc748c1b5b57c32905fe6c92ce2786e5dddfebb0829d7b04532b9b673d1ed47b9651757cd95744be0b5e22c191417744f57ba7f33649886bda9ba19d831935ef3a6f447b1f47d2c79307e3&pst=1663155555&rmtc=t
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2633)
Hash dd7382b1c882f2f750b45c07bedc85f1
93a43232f21af47dfd4836604d01497b46c0e998
745163ee0fc23a88c93373c59bf01cd9c19b56b345fc268889103a83ddea6ed6
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.646024936256.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=619d50e1664dd6a10b8f3f4ba2fa3fa2986eef42cc748c1b5b57c32905fe6c92ce2786e5dddfebb0829d7b04532b9b673d1ed47b9651757cd95744be0b5e22c191417744f57ba7f33649886bda9ba19d831935ef3a6f447b1f47d2c79307e3&pst=1663155555&rmtc=t HTTP/1.1
Host: phosphatepossible.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Referer: https://c639peggyriley.blogspot.com/
Connection: keep-alive
Cookie: u_pl=16266998; ain=eyJhbGciOiJIUzI1NiJ9.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.hbyOt2EPPqsosl17icfytPr-y9Ca1or-4nTrKAnF-2g
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 14 Sep 2022 11:38:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://c639peggyriley.blogspot.com
Access-Control-Allow-Origin: https://c639peggyriley.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766c18b4-96ec-4b94-be79-a957322db812:2:1; expires=Wed, 21 Sep 2022 11:38:15 GMT; secure; SameSite=None
iprc7832b5617a30bc3a809875a91e672be7=3569808; expires=Wed, 14 Sep 2022 15:38:15 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
uncs=1; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
pdhtkv23=true; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
uncs23=1; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bee87d484b654c89fd26ca9ac8d191d9
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
scontent.cdninstagram.com/v/t51.2885-15/242515716_212926190828592_5543576737853126124_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHZsDG-0aWT8t_80xh8gGAypx_KV9kitCinH8pX2SK0KJtssghaI_P0FjYgZTefqm8&_nc_ohc=IXFJ48yL7sgAX-YeSPS&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-ie32ifFaHWOLRJU_WEsN5uEWGt2xGndbG6xClvEWxrg&oe=63265134
200 OK 209 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/242515716_212926190828592_5543576737853126124_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHZsDG-0aWT8t_80xh8gGAypx_KV9kitCinH8pX2SK0KJtssghaI_P0FjYgZTefqm8&_nc_ohc=IXFJ48yL7sgAX-YeSPS&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-ie32ifFaHWOLRJU_WEsN5uEWGt2xGndbG6xClvEWxrg&oe=63265134
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 209 kB (209216 bytes)
Hash fce6b4e4087b3104ff7d8c3538f5962a
50f7a861a2767702f7264ac9ca93362c1d3b2e99
5357077237594384cd703be0e1d14f88b23c18c05ea562a973a2870eb098b023
GET /v/t51.2885-15/242515716_212926190828592_5543576737853126124_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHZsDG-0aWT8t_80xh8gGAypx_KV9kitCinH8pX2SK0KJtssghaI_P0FjYgZTefqm8&_nc_ohc=IXFJ48yL7sgAX-YeSPS&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-ie32ifFaHWOLRJU_WEsN5uEWGt2xGndbG6xClvEWxrg&oe=63265134 HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Fri, 24 Sep 2021 16:16:04 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 1709114294
x-needle-checksum: 3611653328
content-digest: adler32=3611653328
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 209216
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/v/t51.2885-15/244052366_242723337818957_487001981621570713_n.jpg?_nc_cat=107&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEtaTgkZ8wXBlu-YL4c8VuVEAx6B4XSJkcQDHoHhdImR3AAm9zgV6zDOYIzm9CiYu0&_nc_ohc=nnlIwUFNWwEAX9NTGqk&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-_x990ShwDujk6vqMcndmvK1P2cI2aN2pmRlo4vjKmCA&oe=63268F5F
200 OK 173 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/244052366_242723337818957_487001981621570713_n.jpg?_nc_cat=107&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEtaTgkZ8wXBlu-YL4c8VuVEAx6B4XSJkcQDHoHhdImR3AAm9zgV6zDOYIzm9CiYu0&_nc_ohc=nnlIwUFNWwEAX9NTGqk&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-_x990ShwDujk6vqMcndmvK1P2cI2aN2pmRlo4vjKmCA&oe=63268F5F
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 173 kB (172726 bytes)
Hash 302dae2eb8ddcd13f322a4d485960049
f8e0419f41a234335029d49410dc7fc56524da2d
b3f40f0428d938013319a075526d995822884ebb9bdb1c1368a9ab50cee29a5b
GET /v/t51.2885-15/244052366_242723337818957_487001981621570713_n.jpg?_nc_cat=107&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeEtaTgkZ8wXBlu-YL4c8VuVEAx6B4XSJkcQDHoHhdImR3AAm9zgV6zDOYIzm9CiYu0&_nc_ohc=nnlIwUFNWwEAX9NTGqk&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT-_x990ShwDujk6vqMcndmvK1P2cI2aN2pmRlo4vjKmCA&oe=63268F5F HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Fri, 01 Oct 2021 10:43:36 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 388708087
x-needle-checksum: 2911320566
content-digest: adler32=2911320566
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 172726
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/v/t51.2885-15/269751951_277845444315548_3618974636877083108_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHwyf9ST6KTSa4NFnWyNwVjquLJe-1AOJ2q4sl77UA4nVhF9E7xOI5zWX0-2_sfUCY&_nc_ohc=IT5hUoPevfIAX8u1scy&_nc_oc=AQnY15nxXrjGe9rGQn7ROCIl6ZLwHon6LJBjim-xnoVVgNnclO3WzkQduIKmXagM-S8&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT85dhr75jfPsVQhXIwiPNSh9Qkedb7x4rGH8z-hezuXEw&oe=63274C67
200 OK 198 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/269751951_277845444315548_3618974636877083108_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHwyf9ST6KTSa4NFnWyNwVjquLJe-1AOJ2q4sl77UA4nVhF9E7xOI5zWX0-2_sfUCY&_nc_ohc=IT5hUoPevfIAX8u1scy&_nc_oc=AQnY15nxXrjGe9rGQn7ROCIl6ZLwHon6LJBjim-xnoVVgNnclO3WzkQduIKmXagM-S8&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT85dhr75jfPsVQhXIwiPNSh9Qkedb7x4rGH8z-hezuXEw&oe=63274C67
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 198 kB (198291 bytes)
Hash 864f7647d5439c9c330c9331ea94bf0c
fa6395a4b4fe5f92ffb999f3d801a650c3fe2c36
4cdaed13602d43c54018b0b91b75b33b48749d8ec92aa7c673337ce990815c56
GET /v/t51.2885-15/269751951_277845444315548_3618974636877083108_n.jpg?_nc_cat=105&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHwyf9ST6KTSa4NFnWyNwVjquLJe-1AOJ2q4sl77UA4nVhF9E7xOI5zWX0-2_sfUCY&_nc_ohc=IT5hUoPevfIAX8u1scy&_nc_oc=AQnY15nxXrjGe9rGQn7ROCIl6ZLwHon6LJBjim-xnoVVgNnclO3WzkQduIKmXagM-S8&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT85dhr75jfPsVQhXIwiPNSh9Qkedb7x4rGH8z-hezuXEw&oe=63274C67 HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:206:HS_ESUCCESS
last-modified: Sun, 19 Dec 2021 15:39:33 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 549129686
x-needle-checksum: 3585315655
content-digest: adler32=3585315655
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 198291
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/v/t51.2885-15/306047190_605023417750987_2209349381291975566_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHiYApyAp7N7por4leFUdpus_aH00G9_byz9ofTQb39vNq9v1c-Esvn9_qL1joLCOs&_nc_ohc=4GbwEI-tt0QAX9ABqsJ&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT8bDw8eWrlOY5Kg9JOp_Y7GRkjKLUfhhY6a8A37A3C4Qg&oe=6326E4E3
200 OK 227 kB URL HTTP/2 scontent.cdninstagram.com/v/t51.2885-15/306047190_605023417750987_2209349381291975566_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHiYApyAp7N7por4leFUdpus_aH00G9_byz9ofTQb39vNq9v1c-Esvn9_qL1joLCOs&_nc_ohc=4GbwEI-tt0QAX9ABqsJ&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT8bDw8eWrlOY5Kg9JOp_Y7GRkjKLUfhhY6a8A37A3C4Qg&oe=6326E4E3
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1080x1080, components 3\012- data
Size 227 kB (226690 bytes)
Hash 40c6e0f989fd04dd2557d54be26c72e2
d1b3521947de29d617ff397485232575481151c4
79f91b7c681a5dc2bcdd5ce9642dbe060cd390c3e539adff93a1f5e57429554b
GET /v/t51.2885-15/306047190_605023417750987_2209349381291975566_n.jpg?_nc_cat=108&ccb=1-7&_nc_sid=8ae9d6&_nc_eui2=AeHiYApyAp7N7por4leFUdpus_aH00G9_byz9ofTQb39vNq9v1c-Esvn9_qL1joLCOs&_nc_ohc=4GbwEI-tt0QAX9ABqsJ&_nc_ht=scontent.cdninstagram.com&edm=AM6HXa8EAAAA&oh=00_AT8bDw8eWrlOY5Kg9JOp_Y7GRkjKLUfhhY6a8A37A3C4Qg&oe=6326E4E3 HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-storage-error-category: dfs:none;hs_p:200:HS_ESUCCESS
last-modified: Sat, 10 Sep 2022 16:29:40 GMT
content-type: image/jpeg
x-haystack-needlechecksum: 2592134114
x-needle-checksum: 743166225
content-digest: adler32=743166225
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
cache-control: max-age=1209600, no-transform
content-length: 226690
x-fb-trip-id: 1679558926
date: Wed, 14 Sep 2022 11:38:15 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 865e489610a9aca58f1144d8b71ca793
c8f976066478ed67886202484d9389b6f9483321
aa26bf12832acda08d8a19d7530b4acf44ee9d8eaa9d45e7e8515906d6036b2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 865e489610a9aca58f1144d8b71ca793
c8f976066478ed67886202484d9389b6f9483321
aa26bf12832acda08d8a19d7530b4acf44ee9d8eaa9d45e7e8515906d6036b2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 14 Sep 2022 11:38:15 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+536; expires=Fri, 13-Sep-2024 11:38:15 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 14 Sep 2022 11:38:15 GMT
cache-control: private
X-Firefox-Spdy: h2
grandsupple.com/watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 grandsupple.com/watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1 HTTP/1.1
Host: grandsupple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.9
Date: Wed, 14 Sep 2022 11:38:15 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://c639peggyriley.blogspot.com
Access-Control-Allow-Origin: https://c639peggyriley.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://grandsupple.com/watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=90aedf42bcd4f516a5c6806bbeb1369b81431af2a1fb6b73831b84240fdfcc3f0709b500f7d2e234f145faa3a193155145564d7fc9314d05a17b7574754360854924bc0f0f820db6b7029aa42baef980ddd316ae&pst=1663155555&rmtc=t
Set-Cookie: u_pl=16266998; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.hbyOt2EPPqsosl17icfytPr-y9Ca1or-4nTrKAnF-2g; expires=Wed, 14 Sep 2022 11:39:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: fe4b1b63b546e3e6cc8e67e9622bba37
Strict-Transport-Security: max-age=0; includeSubdomains
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2974
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 14 Sep 2022 11:38:15 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+685; expires=Fri, 13-Sep-2024 11:38:15 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 14 Sep 2022 11:38:15 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 865e489610a9aca58f1144d8b71ca793
c8f976066478ed67886202484d9389b6f9483321
aa26bf12832acda08d8a19d7530b4acf44ee9d8eaa9d45e7e8515906d6036b2a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 14 Sep 2022 11:38:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=457&ck=1&ref=https://snapwidget.com/embed/956730&ap=54&be=60&fe=233&dc=131&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663155481087,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:0,%22rp%22:0,%22rpe%22:0,%22dl%22:48,%22di%22:127,%22ds%22:131,%22de%22:131,%22dc%22:232,%22l%22:232,%22le%22:234%7D,%22navigation%22:%7B%7D%7D&fcp=123&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
200 OK 68 B URL HTTP/1.1 bam.nr-data.net/1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=457&ck=1&ref=https://snapwidget.com/embed/956730&ap=54&be=60&fe=233&dc=131&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663155481087,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:0,%22rp%22:0,%22rpe%22:0,%22dl%22:48,%22di%22:127,%22ds%22:131,%22de%22:131,%22dc%22:232,%22l%22:232,%22le%22:234%7D,%22navigation%22:%7B%7D%7D&fcp=123&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken
IP
File type ASCII text, with no line terminators
Hash a63df29d6e0417cc1d00d8743d0ae34c
4fe2dc626d476e9a32c8982587e33fbc8aaf7b0b
025635a81f1246880710db88c48cd051393836cfd7016eb9f4aac7ac7b739a4e
GET /1/a53393d12f?a=453137&v=1216.487a282&to=ZlNSMUNXWBcFW0FRCV8ZcQZFX1kKS3lFSDp5QkQVbXVZChBKWlQKVERDOXRbVAEAe1pWEkNZXAlURHYXDFdCbRVURHUIU1NS&rst=457&ck=1&ref=https://snapwidget.com/embed/956730&ap=54&be=60&fe=233&dc=131&af=err,xhr,stn,ins&perf=%7B%22timing%22:%7B%22of%22:1663155481087,%22n%22:0,%22f%22:0,%22dn%22:0,%22dne%22:0,%22c%22:0,%22s%22:0,%22ce%22:0,%22rq%22:0,%22rp%22:0,%22rpe%22:0,%22dl%22:48,%22di%22:127,%22ds%22:131,%22de%22:131,%22dc%22:232,%22l%22:232,%22le%22:234%7D,%22navigation%22:%7B%7D%7D&fcp=123&at=ShRRRwtNSxk%3D&jsonp=NREUM.setToken HTTP/1.1
Host: bam.nr-data.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 11:38:15 GMT
Content-Type: text/javascript
Transfer-Encoding: chunked
Connection: keep-alive
CF-Ray: 74a8d5d8c90eb500-OSL
Access-Control-Allow-Origin: *
Set-Cookie: JSESSIONID=a2ef9219781ac091; Path=/; Domain=.nr-data.net; Secure; SameSite=None
CF-Cache-Status: DYNAMIC
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, PUT, HEAD, OPTIONS
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Server: cloudflare
Content-Encoding: gzip
grandsupple.com/watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=90aedf42bcd4f516a5c6806bbeb1369b81431af2a1fb6b73831b84240fdfcc3f0709b500f7d2e234f145faa3a193155145564d7fc9314d05a17b7574754360854924bc0f0f820db6b7029aa42baef980ddd316ae&pst=1663155555&rmtc=t
200 OK 2.0 kB URL HTTP/1.1 grandsupple.com/watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=90aedf42bcd4f516a5c6806bbeb1369b81431af2a1fb6b73831b84240fdfcc3f0709b500f7d2e234f145faa3a193155145564d7fc9314d05a17b7574754360854924bc0f0f820db6b7029aa42baef980ddd316ae&pst=1663155555&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document, ASCII text, with very long lines (2465)
Hash fe153548d160105d35edc51a1417bacb
e3e0211412c8790ab5a7cc6af794621ad8d6524c
401e4aac55050caea0c0a736e1481f69a4868cdc9e49e6886ce3286692e49594
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.229027303407.js?key=9f0de11e5fd48835de6964cc4939507c&kw=%5B%22schwinn%22%2C%22gps%22%2C%22watch%22%2C%22software%22%2C%22download%22%5D&refer=https%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&tz=0&dev=r&res=12.31&uuid=766c18b4-96ec-4b94-be79-a957322db812%3A2%3A1&shu=90aedf42bcd4f516a5c6806bbeb1369b81431af2a1fb6b73831b84240fdfcc3f0709b500f7d2e234f145faa3a193155145564d7fc9314d05a17b7574754360854924bc0f0f820db6b7029aa42baef980ddd316ae&pst=1663155555&rmtc=t HTTP/1.1
Host: grandsupple.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://c639peggyriley.blogspot.com
Referer: https://c639peggyriley.blogspot.com/
Connection: keep-alive
Cookie: u_pl=16266998; ain=eyJhbGciOiJIUzI1NiJ9.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.hbyOt2EPPqsosl17icfytPr-y9Ca1or-4nTrKAnF-2g
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Wed, 14 Sep 2022 11:38:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://c639peggyriley.blogspot.com
Access-Control-Allow-Origin: https://c639peggyriley.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=766c18b4-96ec-4b94-be79-a957322db812:2:1; expires=Wed, 21 Sep 2022 11:38:15 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
uncs=1; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
pdhtkv23=true; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
uncs23=1; expires=Thu, 15 Sep 2022 11:38:15 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d41d4180b00f3202de273ffb2142d7d8
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Sep 2022 12:31:58 GMT
expires: Sun, 10 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 342378
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Sep 2022 00:48:31 GMT
expires: Sat, 09 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 470985
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s4.histats.com/stats/0.php?4571949&@f16&@g1&@h1&@i1&@j1663155481200&@k0&@l1&@mSchwinn%20Gps%20Watch%20Software%20Download&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:26951292&@b3:1663155481&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&@w
200 OK 51 B URL HTTP/1.1 s4.histats.com/stats/0.php?4571949&@f16&@g1&@h1&@i1&@j1663155481200&@k0&@l1&@mSchwinn%20Gps%20Watch%20Software%20Download&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:26951292&@b3:1663155481&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&@w
IP
File type ASCII text, with no line terminators
Hash d7c519d47f9e31e873d1d2466521838f
360cc85ce490149269b887f8a6bcd2f6738fbdea
1828f621ac4789fbb09f64f0f64a34455d2e575c9292cc46348a9b94bf3a7ca3
GET /stats/0.php?4571949&@f16&@g1&@h1&@i1&@j1663155481200&@k0&@l1&@mSchwinn%20Gps%20Watch%20Software%20Download&@n0&@o1000&@q0&@r0&@s0&@ten-US&@u1280&@b1:26951292&@b3:1663155481&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fc639peggyriley.blogspot.com%2F2022%2F07%2Fschwinn-gps-watch-software-download.html&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 14 Sep 2022 11:38:16 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 51
Connection: close
www.for-sale.co.uk/sh-img/710ESaHzmUL._SY355__dog%2Bgrooming%2Bbath.jpg
200 OK 16 kB URL HTTP/2 www.for-sale.co.uk/sh-img/710ESaHzmUL._SY355__dog%2Bgrooming%2Bbath.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 426x426, components 3\012- data
Hash 0d97929b10e0302f8c8ea6b5c11b386c
b78685cd5acf54ecc86d9c030431acaa44c7fe05
c621112cc7ded91e8df6c27fdcb9e42bef473664b49340f83026243c156c0289
GET /sh-img/710ESaHzmUL._SY355__dog%2Bgrooming%2Bbath.jpg HTTP/1.1
Host: www.for-sale.co.uk
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: nvkCA3o4htlGZ9coS27U2TWJwXa8Rn3aSNZwiGnodFlCtzopf1kxMz7kNBIsd5LgduvK/dpgaFk=
x-amz-request-id: DGNXH127BG0B1BC8
date: Mon, 29 Aug 2022 21:31:46 GMT
last-modified: Fri, 24 Sep 2021 16:20:04 GMT
etag: "0d97929b10e0302f8c8ea6b5c11b386c"
content-type: image/jpeg
content-length: 16420
x-backend: S3
cache-control: public, max-age=2592000
x-ttl: 2592000.000
x-varnish: 372888439 259583656
age: 1346790
via: 1.1 varnish (Varnish/6.0)
strict-transport-security: max-age=31536000; includeSubDomains
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: origin-when-cross-origin
x-cache: HIT
x-cache-hits: 76
accept-ranges: bytes
X-Firefox-Spdy: h2
i.pinimg.com/736x/8b/3f/9e/8b3f9e031947a5721f773abb4333a02d.jpg
200 OK 58 kB URL HTTP/2 i.pinimg.com/736x/8b/3f/9e/8b3f9e031947a5721f773abb4333a02d.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 37x37, segment length 16, progressive, precision 8, 736x1104, components 3\012- data
Hash c9a72ac3c0e29ee1e29aabf525225541
239e2dd6dc981857664ba2152f6ffecc52207dd2
1c3bb832cde26cc14c6705beca6ea2fed53cd49a33c810e73834f9bbe5535fad
GET /736x/8b/3f/9e/8b3f9e031947a5721f773abb4333a02d.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 57754
cf-ray: 74a8d5dba98bb4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "c9a72ac3c0e29ee1e29aabf525225541"
vary: Origin, Accept-Encoding
edge-start: 1663155496269
origin-latency: 151
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
i.pinimg.com/originals/08/82/d4/0882d4b0c3c0a458194a9a1b968a46a7.jpg
200 OK 26 kB URL HTTP/2 i.pinimg.com/originals/08/82/d4/0882d4b0c3c0a458194a9a1b968a46a7.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 393x500, components 3\012- data
Hash 4ab1f9531563d4285e6fac223c35942f
647c545ce307f992f7ac0d13576dc78a5f7afcb7
71de8dea73ad1eac1fe2e67bf0b580aac98b21d7816c24076bccb300c03c06b1
GET /originals/08/82/d4/0882d4b0c3c0a458194a9a1b968a46a7.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 26364
cf-ray: 74a8d5dba992b4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "4ab1f9531563d4285e6fac223c35942f"
vary: Origin, Accept-Encoding
edge-start: 1663155496271
origin-latency: 168
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09ba627272befd0f5ff19db41767b0c4
e262f240ad6e9c4036a1469b5e1d8b9552806ec0
d5c2c3f9401d006b7e078d210c9760789889abd6d6fca60072e6c57f18c82fa6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5C2C3F9401D006B7E078D210C9760789889ABD6D6FCA60072E6C57F18C82FA6"
Last-Modified: Mon, 12 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7754
Expires: Wed, 14 Sep 2022 13:47:30 GMT
Date: Wed, 14 Sep 2022 11:38:16 GMT
Connection: keep-alive
i.pinimg.com/474x/7e/32/37/7e3237333b6688e186b2792fdd2acd57.jpg
200 OK 16 kB URL HTTP/2 i.pinimg.com/474x/7e/32/37/7e3237333b6688e186b2792fdd2acd57.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 317x500, components 3\012- data
Hash 3fd9f8f47cb795cbf18567f42b92319a
fea39f227f2f65b059d27e9e97447ac713e3e35a
374bf7e76c4f592ad0eee44e64efac69ad953c1bd9d718db90fef55e49cbe422
GET /474x/7e/32/37/7e3237333b6688e186b2792fdd2acd57.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 15556
cf-ray: 74a8d5dba991b4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "3fd9f8f47cb795cbf18567f42b92319a"
vary: Origin, Accept-Encoding
edge-start: 1663155496270
origin-latency: 183
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
i.pinimg.com/originals/12/1e/cd/121ecd48129065ca340a494b214b8403.jpg
200 OK 81 kB URL HTTP/2 i.pinimg.com/originals/12/1e/cd/121ecd48129065ca340a494b214b8403.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1001x1001, components 3\012- data
Hash aec5fe4a98c7025f550b471986451540
ed4bf5d1ebd01553ce44bb0454147b89ea9f29b0
de072ec9e2af8bb0d6a44ab54acbaaa8d22de9e56f0e37365f6483a537ce4b41
GET /originals/12/1e/cd/121ecd48129065ca340a494b214b8403.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 81173
cf-ray: 74a8d5dba98db4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "aec5fe4a98c7025f550b471986451540"
vary: Origin, Accept-Encoding
edge-start: 1663155496272
origin-latency: 205
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
i.pinimg.com/originals/08/bf/5b/08bf5b4eb3b63fbce5a1433ca957efd6.jpg
200 OK 69 kB URL HTTP/2 i.pinimg.com/originals/08/bf/5b/08bf5b4eb3b63fbce5a1433ca957efd6.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1000x1500, components 3\012- data
Hash 81a03c5d4eb0a4ba77f03123014586df
aedd70a79738f9f846268fad3b547eb5a255ee0e
e0273b3f5593c4a948f1e6ab8b317637d9f51c6e3db316ff573a74fd840f7354
GET /originals/08/bf/5b/08bf5b4eb3b63fbce5a1433ca957efd6.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 68965
cf-ray: 74a8d5dba990b4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "81a03c5d4eb0a4ba77f03123014586df"
vary: Origin, Accept-Encoding
edge-start: 1663155496271
origin-latency: 212
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
i.ebayimg.com/thumbs/images/g/aYcAAOSwty5bCB4-/s-l300.jpg
200 OK 11 kB URL HTTP/2 i.ebayimg.com/thumbs/images/g/aYcAAOSwty5bCB4-/s-l300.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 300x300, components 3\012- data
Hash 31e8e1ece67ceac0f8eb82d4827dd87e
7311dc9c7532b12bd7a21c325a5042c9cfd062e6
6870f2da5565846d5f114a4028feb99e89946de6c2e8b5bfbcbda00a8df50ebd
GET /thumbs/images/g/aYcAAOSwty5bCB4-/s-l300.jpg HTTP/1.1
Host: i.ebayimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
rlogid: t6q4%7Cjfaofpse%3D9vjdq4%7Cjfaofpse*u%3Cl1p%28rbpv6775-17ea7f07b6c-0x14b
x-ebay-c-version: 1.0.0
last-modified: Fri, 25 May 2018 14:31:26 GMT
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
expires: Sun, 29 Jan 2023 22:24:22 GMT
content-type: image/jpeg
content-length: 10634
server: ebay-proxy-server
x-envoy-upstream-service-time: 18
x-ebay-pop-id: UFES2-DUS-zoe-anycast
date: Wed, 14 Sep 2022 11:38:16 GMT
strict-transport-security: max-age=31536000
x-cdn: AKAMAI
akamai-grn: 0.044f2417.1663155496.1682263
X-Firefox-Spdy: h2
i.ebayimg.com/thumbs/images/g/WpcAAOSwp~dfK78r/s-l300.jpg
200 OK 20 kB URL HTTP/2 i.ebayimg.com/thumbs/images/g/WpcAAOSwp~dfK78r/s-l300.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, comment: "Processed By eBay with ImageMagick, z1.1.0. ||B2", progressive, precision 8, 300x300, components 3\012- data
Hash 9e09e305c7c96524749a63687ef3b3b2
34f3a93eb8764fe339decde57f586417498a39ec
404e69d8e81e5dfc6fa71019e86313e07af2672c8b585e73de9b3218d543d1b4
GET /thumbs/images/g/WpcAAOSwp~dfK78r/s-l300.jpg HTTP/1.1
Host: i.ebayimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
rlogid: t6q4%7Cjfaofpse%3D9vjdq4%7Cjfaofpse*ns226%28rbpv6612-17e6929e2ca-0x117
x-ebay-c-version: 1.0.0
last-modified: Thu, 06 Aug 2020 08:28:25 GMT
access-control-allow-origin: *
cache-control: public,max-age=31536000,immutable
expires: Tue, 17 Jan 2023 17:51:01 GMT
content-type: image/jpeg
content-length: 20227
server: ebay-proxy-server
x-envoy-upstream-service-time: 16
x-ebay-pop-id: UFES2-DUS-zoe-anycast
date: Wed, 14 Sep 2022 11:38:16 GMT
strict-transport-security: max-age=31536000
x-cdn: AKAMAI
akamai-grn: 0.044f2417.1663155496.1682271
X-Firefox-Spdy: h2
i.pinimg.com/originals/3f/85/4e/3f854e949050e307387f66867e3cb072.jpg
200 OK 302 kB URL HTTP/2 i.pinimg.com/originals/3f/85/4e/3f854e949050e307387f66867e3cb072.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 2000x3000, components 3 DIY-Thermocam raw data\012- (Lepton 3.x), scale 32592--418, spot sensor temperature 0.000000, unit celsius, color scheme 0, calibration: offset 0.000000, slope 747129163782255804416.000000\012- data
Size 302 kB (302123 bytes)
Hash e7731180b4bc45d52635579cb9768859
5afcb99255784495e24c68959e3bf403df02cd07
4ced2dcc4e0db49f99dcd6626880db5c7f54cfa6c0073087fc20647ad8789d49
GET /originals/3f/85/4e/3f854e949050e307387f66867e3cb072.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 302123
cf-ray: 74a8d5dba994b4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "e7731180b4bc45d52635579cb9768859"
vary: Origin, Accept-Encoding
edge-start: 1663155496273
origin-latency: 223
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
i.pinimg.com/originals/03/5a/47/035a4790e7b38725ca5caa8e61442448.gif
200 OK 129 kB URL HTTP/2 i.pinimg.com/originals/03/5a/47/035a4790e7b38725ca5caa8e61442448.gif
IP
File type GIF image data, version 89a, 237 x 302\012- data
Size 129 kB (129275 bytes)
Hash 184c48c0fcfd99ece4efde92c50b8da4
9dd415af5ff54519a32b5a67d02ae9901e9fc57f
cca736772cbd3550b781a0cdf505edf7ce5f276b20bc2ee48aa0299bc5bf438b
GET /originals/03/5a/47/035a4790e7b38725ca5caa8e61442448.gif HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/gif
content-length: 129275
cf-ray: 74a8d5dc8adab4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "184c48c0fcfd99ece4efde92c50b8da4"
vary: Origin, Accept-Encoding
edge-start: 1663155496412
origin-latency: 126
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/2d/b6/63/2db663e5deceb7de358c86c322799240/1663059916.png
200 OK 95 kB URL HTTP/2 cdn.cloudimagesb.com/cti/2d/b6/63/2db663e5deceb7de358c86c322799240/1663059916.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 728 x 90, 8-bit/color RGB, non-interlaced\012- data
Hash b26a15c967a614bcd2b700f52ad963bf
81d1d1fe976b282311f45f001c8648d066efdbea
b838cb91f099f21146bb103191799f9f363c3a06b19382d8d8b4c4bbb811f9da
GET /cti/2d/b6/63/2db663e5deceb7de358c86c322799240/1663059916.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/png
content-length: 94697
server: nginx/1.17.6
last-modified: Tue, 13 Sep 2022 09:05:24 GMT
etag: "632047d4-171e9"
expires: Fri, 16 Sep 2022 11:38:16 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
combinatronics.com/apriasmoro/ngiklan/main/banner728.js
200 OK 17 kB URL HTTP/2 combinatronics.com/apriasmoro/ngiklan/main/banner728.js
IP
Hash 8b459a90d9f5b37b6e2f70cb66800bfe
4b14caa1f24542a5d307edc35e0787bba5f58ac0
56eeb05fb0d52ff03f4e14b41d47ae1c10bd1e5adc3240f29236b9c5007c132f
GET /apriasmoro/ngiklan/main/banner728.js HTTP/1.1
Host: combinatronics.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:13 GMT
content-type: text/javascript; charset=utf-8
cache-control: max-age=3600
cf-cache-status: EXPIRED
last-modified: Tue, 13 Sep 2022 18:56:23 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VgkIr5WqODvVUTNsqLhHV8rrAHqb5HkVwa%2F6cSwsORumzrX1BQv20100NeHdFDWu%2BxwQGApCT2s7I1DXfoGuC%2B5ItEjUyeL69%2BYVDJ8srRe35CjSCpi7fjddwKi5%2BF%2BdxVLSYQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a8d5ca595e0afa-OSL
content-encoding: br
X-Firefox-Spdy: h2
i.pinimg.com/736x/54/88/70/548870460e18b56b3d62ef49188005d8.jpg
200 OK 84 kB URL HTTP/2 i.pinimg.com/736x/54/88/70/548870460e18b56b3d62ef49188005d8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 736x545, components 3\012- data
Hash 18f966fe593b700b792a7cbc8e50738b
2e031383ac14aa10fe2edda55ff3d23ad9d3d754
1b62c212392f4be0b5a5f28e9f1d600e23f130bc7d4e8466f7c13b041bea175d
GET /736x/54/88/70/548870460e18b56b3d62ef49188005d8.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:16 GMT
content-type: image/jpeg
content-length: 83789
cf-ray: 74a8d5dc8ad8b4f9-OSL
accept-ranges: bytes
cache-control: max-age=31536000, immutable
etag: "18f966fe593b700b792a7cbc8e50738b"
vary: Origin, Accept-Encoding
edge-start: 1663155496411
origin-latency: 301
x-cdn: cloudflare
server: cloudflare
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Poppins:400,400i,500,500i,600,600i,700,700i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Poppins:400,400i,500,500i,600,600i,700,700i
IP
GET /css?family=Poppins:400,400i,500,500i,600,600i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://c639peggyriley.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 14 Sep 2022 11:38:13 GMT
date: Wed, 14 Sep 2022 11:38:13 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
snapwidget.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 snapwidget.com/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 388
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:21 GMT
content-type: text/plain
access-control-allow-origin: https://snapwidget.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 74a8d5f9394bb4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
snapwidget.com/cdn-cgi/rum?
200 OK 0 B URL HTTP/2 snapwidget.com/cdn-cgi/rum?
IP
POST /cdn-cgi/rum? HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-NewRelic-ID: VQICUlZUGwcFV1BRAA==
newrelic: eyJ2IjpbMCwxXSwiZCI6eyJ0eSI6IkJyb3dzZXIiLCJhYyI6IjE0NTMwNyIsImFwIjoiNDUzMTUwIiwiaWQiOiJiY2YwMzFhZTQxZmYxYTZlIiwidHIiOiIwZmJiODIwMzE0MjZmZTVhY2Y3ZTMxNTZmMzY5NTg4OSIsInRpIjoxNjYzMTU1NDgxMzI2fX0=
traceparent: 00-0fbb82031426fe5acf7e3156f3695889-bcf031ae41ff1a6e-01
tracestate: 145307@nr=0-1-145307-453150-bcf031ae41ff1a6e----1663155481326
content-type: application/json
Content-Length: 3131
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:15 GMT
content-type: text/plain
access-control-allow-origin: https://snapwidget.com
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 74a8d5d59a5cb4f4-OSL
x-frame-options: DENY
x-content-type-options: nosniff
content-encoding: gzip
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
200 OK 0 B URL HTTP/2 snapwidget.com/stylesheets/embed.style.min.307799cd3bc5b2ee.css
IP
GET /stylesheets/embed.style.min.307799cd3bc5b2ee.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/css
cf-bgj: minify
cf-polished: origSize=15975
etag: W/"62f0b6a9-3e67"
last-modified: Mon, 08 Aug 2022 07:09:29 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1828016
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r4mLrSh1juUF5Cqmy30Wn3T%2FY0U5S%2Bw3NG9nBoJO69pu5CLI3qRxKWrydGSMAlTGviyaLKNZRps1nz3Nof%2BOWnCJ1Vhw2QhdMeRMPsd13Cfe87o8MCJUVtDSMdOY9N3R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d36f15b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
200 OK 0 B URL HTTP/2 static.cloudflareinsights.com/beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194
IP
GET /beacon.min.js/v652eace1692a40cfa3763df669d7439c1639079717194 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://snapwidget.com
Connection: keep-alive
Referer: https://snapwidget.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:15 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2021.12.0
last-modified: Thu, 09 Dec 2021 19:55:17 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 74a8d5d38fe61c16-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
snapwidget.com/stylesheets/embed.vendor.min.760717b3f565c387.css
200 OK 0 B URL HTTP/2 snapwidget.com/stylesheets/embed.vendor.min.760717b3f565c387.css
IP
GET /stylesheets/embed.vendor.min.760717b3f565c387.css HTTP/1.1
Host: snapwidget.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://snapwidget.com/embed/956730
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 14 Sep 2022 11:38:14 GMT
content-type: text/css
cf-bgj: minify
etag: W/"62f0b6de-937"
last-modified: Mon, 08 Aug 2022 07:10:22 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
cache-control: max-age=31536000
cf-cache-status: HIT
age: 1828016
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tdjRv90srrUWUEpnfCY%2FOz7uH9ZOxE%2BPIKjg0kErQrUIpbHk2t9zA1UvpvrfvM8z5neVGN%2FAAPE%2BgApPWZpzGtdAueviLPZBtyqgrp8zPFi3UQDFqFqh0wIKQW1rhpEg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=2592000
server: cloudflare
cf-ray: 74a8d5d36f0db4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
142.250.74.161
23.36.76.226
52.28.172.243
151.101.86.137
145.239.255.55
104.16.254.71
192.99.0.58
93.184.220.29
157.240.200.63