r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 50ffd49bee3840941f9fc33baca23aad
2ff715abc76ea138eff267a64f26eb2dc6365b4a
ff8709095d9b5a7d90ff10b31a6a9d2e071b42e215641d30dce6de6a782bffd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "FF8709095D9B5A7D90FF10B31A6A9D2E071B42E215641D30DCE6DE6A782BFFD6"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11082
Expires: Mon, 20 Feb 2023 08:12:54 GMT
Date: Mon, 20 Feb 2023 05:08:12 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash fc5f224fada7077c68971b7760c8df69
2eb6371b1666860a1c7656d8a3de7ac84f4cb359
0c60b1781c2bfd8a23c813767aa0cb3469ed185b795554aa4e63bf3839afdcf5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0C60B1781C2BFD8A23C813767AA0CB3469ED185B795554AA4E63BF3839AFDCF5"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17998
Expires: Mon, 20 Feb 2023 10:08:10 GMT
Date: Mon, 20 Feb 2023 05:08:12 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b44c4b5daa307a355e7bab1c83c1ca82
dbd14cd873f1dd4502f277b3f51cb7bc8da0c080
fd4604461cfa002c8a261bb14eb8dda56817db231b9012b2eb38d6dbc2674df5
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 20 Feb 2023 04:53:32 GMT
content-type: application/json
age: 880
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5539e12eac82ed8486057f67e18231d3
866778ccdac94dbeff9bc217d4a057079ee71b2a
d82a876ba46480f2caa20e2112941bfb461bdb03e882949b347abb9e8006705f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D82A876BA46480F2CAA20E2112941BFB461BDB03E882949B347ABB9E8006705F"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19507
Expires: Mon, 20 Feb 2023 10:33:19 GMT
Date: Mon, 20 Feb 2023 05:08:12 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: PjDv9twqPJIwOHNZvAg8m895fvbnoa12NzeT/zO8b3edAVKD+wXWql6Asj0b3jp9H4hJff2N4oHcIRd1YVPSnQ==
x-amz-request-id: 1VE4PYA77RF2E4DV
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
via: 1.1 google
date: Mon, 20 Feb 2023 04:51:55 GMT
age: 977
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
content-length: 5348
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 20 Feb 2023 05:08:12 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Content-Type, Alert, Content-Length, Backoff, ETag, Cache-Control, Retry-After, Last-Modified, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 20 Feb 2023 04:20:34 GMT
age: 2858
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 6964eabceb8fea1d79acb5165e84a912
a271fb7984244fc5c1580a938b4bd21aae37f888
8685404068a6bbe7cb726b81f7ba84e6fbf4597dc99803d186280f94635663ab
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8685404068A6BBE7CB726B81F7BA84E6FBF4597DC99803D186280F94635663AB"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2850
Expires: Mon, 20 Feb 2023 05:55:42 GMT
Date: Mon, 20 Feb 2023 05:08:12 GMT
Connection: keep-alive
sarafan2.blogspot.com/search/label/DWTS%20Week%209%20Semi%20Finals
216.58.207.193200 OK 40 kB URL HTTP/1.1 sarafan2.blogspot.com/search/label/DWTS%20Week%209%20Semi%20Finals
IP 216.58.207.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1634)
Hash 1cde7c57f386a132202842fc9c31d71d
32222fbaf1ab33c6811a0f85ed86476f96ff4dbe
f3854499cd7c300f2a360e9eef6fc738af0036132bf338d17d25c8bb925512d4
Analyzer Verdict Alert fortinet Phishing
GET /search/label/DWTS%20Week%209%20Semi%20Finals HTTP/1.1
Host: sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 20 Feb 2023 05:08:12 GMT
Date: Mon, 20 Feb 2023 05:08:12 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 13 Feb 2023 10:52:58 GMT
ETag: W/"7a97e40ec925fd86b267e63666ccdfca6b9afb5374901c117149ad85594f54ee"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 40256
Server: GSE
www.statcounter.com/counter/counter.js
104.20.218.77200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter.js
IP 104.20.218.77:0
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 17 Feb 2023 17:41:43 GMT
ETag: W/"aa70-5f4e8d39f1d2b"
Cache-Control: max-age=43200
Expires: Mon, 20 Feb 2023 12:08:45 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 17966
Server: cloudflare
CF-RAY: 79c4b91c8c24b4f4-OSL
static.addtoany.com/menu/page.js
172.67.39.148301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/page.js
IP 172.67.39.148:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:12 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:12 GMT
Location: https://static.addtoany.com/menu/page.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79c4b91c9e9db529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.statcounter.com/counter/counter_xhtml.js
104.20.218.77200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP 104.20.218.77:0
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:12 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 17 Feb 2023 17:41:43 GMT
ETag: W/"aa70-5f4e8d3a0942b"
Cache-Control: max-age=43200
Expires: Mon, 20 Feb 2023 06:40:32 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 37660
Server: cloudflare
CF-RAY: 79c4b91d1c5eb4f4-OSL
pagead2.googlesyndication.com/pagead/show_ads.js
142.250.74.66200 OK 36 kB URL HTTP/1.1 pagead2.googlesyndication.com/pagead/show_ads.js
IP 142.250.74.66:0
File type ASCII text, with very long lines (4137)
Hash 5c4373d2c2d8e3a249a7182e8a774383
f4ac0a16327854e189b203063bb621632547846b
a2048d7c21e1b2b08b8edba9b806ac8e6090b75e1d2e3087983c11840c5ea959
GET /pagead/show_ads.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Mon, 20 Feb 2023 05:08:13 GMT
Expires: Mon, 20 Feb 2023 05:08:13 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 1447314339622308431
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 35951
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 1a798bdf1849b1f679943e04889dadfa
8a9acb4c1b664ad030be9bb0c150a9a6f450339c
3dd9ce15729f02ecff360e90d8c751b5cd42d0d11341b6b3bba65f39d76cc6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash 1c6c74ecd9c820d7739e27593d629c51
fdab5a898a927cf0031bb135860b38e2bfe051cf
a2fe1652839a250c14812b8df08d0697a1c40509e60559b5ed7d1ea0eef63efa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
54.149.156.115101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 54.149.156.115:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p1ddC961Y6lkmihcVTh2ow==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: bNDuaF7m4ph1sGFDRfKJyv7+QhY=
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
142.250.74.41200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 142.250.74.41:0
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 14:09:04 GMT
expires: Sat, 17 Feb 2024 14:09:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 09:59:37 GMT
content-type: text/css
vary: Accept-Encoding
age: 226749
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
142.250.74.46200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.46:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Mon, 20 Feb 2023 05:08:13 GMT
expires: Mon, 20 Feb 2023 05:08:13 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i166.photobucket.com/albums/u83/jst8761/gd/th_d0202.gif
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i166.photobucket.com/albums/u83/jst8761/gd/th_d0202.gif
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/u83/jst8761/gd/th_d0202.gif HTTP/1.1
Host: i166.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i166.photobucket.com/albums/u83/jst8761/gd/th_d0202.gif
X-Cache: Redirect from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kE-0lGPFaWrMytS9CtaifPq-GmbieFo8VX0rbGfi0sOydXj-MEoZZg==
Vary: Origin
sarafan2.blogspot.com/js/cookienotice.js
216.58.207.193200 OK 2.0 kB URL HTTP/1.1 sarafan2.blogspot.com/js/cookienotice.js
IP 216.58.207.193:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Phishing
GET /js/cookienotice.js HTTP/1.1
Host: sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/search/label/DWTS%20Week%209%20Semi%20Finals
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Mon, 20 Feb 2023 05:08:13 GMT
Expires: Mon, 27 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 19 Feb 2023 21:50:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/1518138593-widgets.js
142.250.74.41200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1518138593-widgets.js
IP 142.250.74.41:0
File type ASCII text, with very long lines (2221)
Hash 450b4d4e3afa13e88e43d9bacb89fcf1
9abc5f782fe9012a70fba5206111e5ed97d9dd14
bb9fe26fae3c2b1487106944adee38c4c55f196d85ab023d08145076584a78f9
GET /static/v1/widgets/1518138593-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56501
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 11:20:34 GMT
expires: Sat, 17 Feb 2024 11:20:34 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 16 Feb 2023 19:53:07 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 236859
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.66200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.66:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sun, 19 Feb 2023 13:22:53 GMT
Expires: Sun, 05 Mar 2023 13:22:53 GMT
Cache-Control: public, max-age=1209600
Age: 56720
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
s7.addthis.com/js/250/addthis_widget.js
23.38.200.123308 Permanent Redirect 171 B URL HTTP/1.1 s7.addthis.com/js/250/addthis_widget.js
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3c417e9efbcaeb3bf7e7df75cf3b22fd
00465aec6b8ec302eae8abb99678fc5c09c3f343
21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571
GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/250/addthis_widget.js
Date: Mon, 20 Feb 2023 05:08:13 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
142.250.74.46200 OK 61 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP 142.250.74.46:0
File type ASCII text, with very long lines (1448)
Hash 62f98a42acaa85f40e228f65e5ee2361
a41c1755a6a2708340b74638f11ebdeed8e977db
54acbd2f18406888cbe8ee3fc76b512081c7c1c0102a4b1f7eef6cd11fc60f15
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60741
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 22:33:50 GMT
expires: Fri, 16 Feb 2024 22:33:50 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 282863
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
picketfenceblogs.com/button/standard/2857
188.114.96.1403 Forbidden 3.7 kB URL HTTP/1.1 picketfenceblogs.com/button/standard/2857
IP 188.114.96.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1241)
Hash ca1754212c3f233dea87c15e2f6f589d
d3fa0528f13dc6ad616b10c9805ac45d42962250
b67f000608c3193d99347222689873ed8a3c9bd38d15b299d24149b16ec52149
GET /button/standard/2857 HTTP/1.1
Host: picketfenceblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
Permissions-Policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
Referrer-Policy: same-origin
X-Frame-Options: SAMEORIGIN
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8ZUpOwB6Rrw5%2B99y3YynqeA7SCazI3LfX%2BLhB1EEBUy4rVmQ79LmSUL26srLytum0KIAqoCVLBE4FoMwlvNKQ11HCBgMx3y2zlB9yE1ug5XPvq9ZzL4gAbrwN2eeke16auRSa8nEAg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b91f8ea00b41-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
s7.addthis.com/js/250/addthis_widget.js
23.38.200.123200 OK 116 kB URL HTTP/2 s7.addthis.com/js/250/addthis_widget.js
IP 23.38.200.123:0
File type ASCII text, with very long lines (54602)
Size 116 kB (116326 bytes)
Hash 059926d46e16e89dcedf50ed90a5866e
3c418a1b52b0e62e3d07ac2cf435eb94d3ba87d0
f378a60cba395231f31f959f575f014dddc8e6eb786294b5aadf7862dd250404
GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116326
date: Mon, 20 Feb 2023 05:08:13 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2
3.bp.blogspot.com/_jwnFeuGjHog/SoqwamS8TlI/AAAAAAAABUc/4y8FgZ256h0/s400/subButton.jpg
142.250.74.161200 OK 6.4 kB URL HTTP/1.1 3.bp.blogspot.com/_jwnFeuGjHog/SoqwamS8TlI/AAAAAAAABUc/4y8FgZ256h0/s400/subButton.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 125x125, components 3\012- data
Hash f77f4541d03cc506e9ccf638a7fe9814
d2fa56293e29a93eceff72ebd0249eaf6d824ff7
775272e39cc027364912021e52000d698e193707db31d6d5af38ec849cedae36
GET /_jwnFeuGjHog/SoqwamS8TlI/AAAAAAAABUc/4y8FgZ256h0/s400/subButton.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="subButton.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6419
X-XSS-Protection: 0
Date: Mon, 20 Feb 2023 05:08:13 GMT
Expires: Mon, 20 Feb 2023 02:30:37 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v547"
Content-Type: image/jpeg
Vary: Origin
Age: 0
www.quick-counter.net/aip.php?tp=bd&tz=US%2FEastern
109.123.196.144200 OK 305 B URL HTTP/1.1 www.quick-counter.net/aip.php?tp=bd&tz=US%2FEastern
IP 109.123.196.144:0
ASN #15685 CASABLANCA INT a.s.
File type PNG image data, 88 x 31, 4-bit colormap, non-interlaced\012- data
Hash 035d5c370f1fc6ced641b5582e928f10
450d6e0b870d92113be51e956e066d2710799d2b
c8bfcf89a214702e8b2603923431793ae076bd050988905ec6a63e5a2c2188d2
GET /aip.php?tp=bd&tz=US%2FEastern HTTP/1.1
Host: www.quick-counter.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: Apache/2.4.41 (Ubuntu)
Pragma: no-cache
Cache-Control: no-store
Content-Length: 305
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png;name=aip.png
blogcounter.com/js.php?user=Sarafan2&style=1
52.200.100.0200 OK 1.6 kB URL HTTP/1.1 blogcounter.com/js.php?user=Sarafan2&style=1
IP 52.200.100.0:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash a0129d5fb9b96b97eb03784ec29d3cd1
c659bd8570bfdbcf16ada97348cb518778fac358
bc3e0b8daa0dc447f3f455a1b1a0c86c9e3d7a8c2570b5cfe74699878f0ed405
GET /js.php?user=Sarafan2&style=1 HTTP/1.1
Host: blogcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
twittercounter.com/embed/Sarafan2/ffffff/111111
209.182.199.7404 Not Found 179 B URL HTTP/1.1 twittercounter.com/embed/Sarafan2/ffffff/111111
IP 209.182.199.7:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
GET /embed/Sarafan2/ffffff/111111 HTTP/1.1
Host: twittercounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.23.2
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
twittercounter.com/embed/?username=Sarafan2&style=bird
209.182.199.7404 Not Found 179 B URL HTTP/1.1 twittercounter.com/embed/?username=Sarafan2&style=bird
IP 209.182.199.7:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
GET /embed/?username=Sarafan2&style=bird HTTP/1.1
Host: twittercounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.23.2
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
4.bp.blogspot.com/_GF9ffMDWP9A/S04oZrBNkMI/AAAAAAAAAFs/qCPQwg3S4Gw/S220-s80/108_2233.JPG
142.250.74.161200 OK 3.0 kB URL HTTP/1.1 4.bp.blogspot.com/_GF9ffMDWP9A/S04oZrBNkMI/AAAAAAAAAFs/qCPQwg3S4Gw/S220-s80/108_2233.JPG
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 60x80, components 3\012- data
Hash 31a2407461a8c801c90fabb19d39a17c
be1f027e4b634fce320b2ebd26ea0a78017f2385
b0f612befd5f2e60e63793983d238d8814322d45621dc39915c3048d1c49b0d0
GET /_GF9ffMDWP9A/S04oZrBNkMI/AAAAAAAAAFs/qCPQwg3S4Gw/S220-s80/108_2233.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v5b"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="108_2233.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 3043
X-XSS-Protection: 0
4.bp.blogspot.com/-8lz_6heJuTo/TWHD3ZbrwdI/AAAAAAAAA30/KPRDYYZx-Rs/s241/purex-insiders-web_badge125.png
142.250.74.161200 OK 11 kB URL HTTP/1.1 4.bp.blogspot.com/-8lz_6heJuTo/TWHD3ZbrwdI/AAAAAAAAA30/KPRDYYZx-Rs/s241/purex-insiders-web_badge125.png
IP 142.250.74.161:0
File type PNG image data, 125 x 124, 8-bit/color RGBA, non-interlaced\012- data
Hash 12b96048ddfc328d5dcfd0e9fb6d954d
211f4c4899d9d579add359f747e4df33bd069c80
222a9140297f2432c83e23069cb4735ddb99d1e3bcaeea2e406074450531a12a
GET /-8lz_6heJuTo/TWHD3ZbrwdI/AAAAAAAAA30/KPRDYYZx-Rs/s241/purex-insiders-web_badge125.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v37d"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="purex-insiders-web_badge125.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 10616
X-XSS-Protection: 0
3.bp.blogspot.com/_GF9ffMDWP9A/TU9O2o-P2gI/AAAAAAAAA1M/LrokpTGkN70/s241/prizey_member_blue.gif
142.250.74.161200 OK 1.9 kB URL HTTP/1.1 3.bp.blogspot.com/_GF9ffMDWP9A/TU9O2o-P2gI/AAAAAAAAA1M/LrokpTGkN70/s241/prizey_member_blue.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 160 x 60\012- data
Hash 8925a48358d94b532c5e33238739a994
d6ea112becfb749449774eba8b8a71e0227858d2
4828b13d6576859526903ecf85e0198300fe4eade5b415f3769866862e0623f3
GET /_GF9ffMDWP9A/TU9O2o-P2gI/AAAAAAAAA1M/LrokpTGkN70/s241/prizey_member_blue.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vd0b"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="prizey_member_blue.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 1947
X-XSS-Protection: 0
4.bp.blogspot.com/_GF9ffMDWP9A/TIA2udEYLhI/AAAAAAAAAZg/nnPR7KmEls8/S241/MK-flatirons-125x125.gif
142.250.74.161200 OK 10 kB URL HTTP/1.1 4.bp.blogspot.com/_GF9ffMDWP9A/TIA2udEYLhI/AAAAAAAAAZg/nnPR7KmEls8/S241/MK-flatirons-125x125.gif
IP 142.250.74.161:0
File type PNG image data, 125 x 125, 8-bit/color RGB, non-interlaced\012- data
Hash 75ff2200a1dc6e8e1c8cf61a11a39bc5
fb5cf52600436a567445eb72b95e7d986fdc3311
9994d3737adc1c447f7db25f48ef21c1a3e8e3d1e6cdef6fe476ba6a0bfa44c2
GET /_GF9ffMDWP9A/TIA2udEYLhI/AAAAAAAAAZg/nnPR7KmEls8/S241/MK-flatirons-125x125.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v198"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MK-flatirons-125x125.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 10257
X-XSS-Protection: 0
i216.photobucket.com/albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i216.photobucket.com/albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg HTTP/1.1
Host: i216.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i216.photobucket.com/albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8NGQQRK2zHXC4TGcaJqM1q66FzeEjzB98M9Q-wWneQQHPHnSNbIPRA==
Vary: Origin
3.bp.blogspot.com/-d0cEXsB_4TI/Tsnkka82HNI/AAAAAAAABgo/zW4e-4PU1dk/s400/imagesCAFB37LF.jpg
142.250.74.161200 OK 15 kB URL HTTP/1.1 3.bp.blogspot.com/-d0cEXsB_4TI/Tsnkka82HNI/AAAAAAAABgo/zW4e-4PU1dk/s400/imagesCAFB37LF.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 268x188, components 3\012- data
Hash 7d66ebd0ef883cfe12a9aeef5baee936
944a44076b0b210d6153e5c623223ccd918eb3b4
fa53a89768df9984437f6aa5727a6e46b9a51ae6c6c2dee34156446db1944707
GET /-d0cEXsB_4TI/Tsnkka82HNI/AAAAAAAABgo/zW4e-4PU1dk/s400/imagesCAFB37LF.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v60a"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="imagesCAFB37LF.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 15349
X-XSS-Protection: 0
img36.imageshack.us/img36/8002/postsiggie1.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img36.imageshack.us/img36/8002/postsiggie1.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img36/8002/postsiggie1.png HTTP/1.1
Host: img36.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
3.bp.blogspot.com/-dxZwun2pxYA/ToU4DrFB33I/AAAAAAAABUw/aFJDJzfW7i0/s220/freschetta.png
142.250.74.161200 OK 20 kB URL HTTP/1.1 3.bp.blogspot.com/-dxZwun2pxYA/ToU4DrFB33I/AAAAAAAABUw/aFJDJzfW7i0/s220/freschetta.png
IP 142.250.74.161:0
File type PNG image data, 120 x 121, 8-bit/color RGBA, non-interlaced\012- data
Hash a0a229389f0c5bbfde9e616619e2e2aa
153acfc8325feb8274ca0654a1271e22f6a4c01c
eac5580ed7d0ec8af95905dd878447d33d96beeb5512c4984c068e9f6659e48a
GET /-dxZwun2pxYA/ToU4DrFB33I/AAAAAAAABUw/aFJDJzfW7i0/s220/freschetta.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v54c"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="freschetta.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 19611
X-XSS-Protection: 0
3.bp.blogspot.com/-XX-faHOGGpo/TsnihFL1lYI/AAAAAAAABgg/iTQoDGwSAx8/s400/77.bmp
142.250.74.161200 OK 13 kB URL HTTP/1.1 3.bp.blogspot.com/-XX-faHOGGpo/TsnihFL1lYI/AAAAAAAABgg/iTQoDGwSAx8/s400/77.bmp
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 255x198, components 3\012- data
Hash 086ebec5832c31e6508a8a286be24e6d
66be0c9997d0d0a956eddcfd3a203b6325571583
56e0b3f55834abd78c81ed49e317198bc3e6a8efa578f08737b17c656db8d94b
GET /-XX-faHOGGpo/TsnihFL1lYI/AAAAAAAABgg/iTQoDGwSAx8/s400/77.bmp HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v608"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="77.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 13111
X-XSS-Protection: 0
3.bp.blogspot.com/-88y4g3B70bc/Tsng1pgB8WI/AAAAAAAABgY/yITF9q1Ekfw/s400/999.jpg
142.250.74.161200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-88y4g3B70bc/Tsng1pgB8WI/AAAAAAAABgY/yITF9q1Ekfw/s400/999.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 292x173, components 3\012- data
Hash f90273c1101648a7617180c80ef7b656
bbb6ceb5050179299e9a08d2c080f7d764a3816e
01eb640c300ec57111b3886923cfeb59b555619caff14606d8cf9e680ca1577f
GET /-88y4g3B70bc/Tsng1pgB8WI/AAAAAAAABgY/yITF9q1Ekfw/s400/999.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v606"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="999.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 11236
X-XSS-Protection: 0
2.bp.blogspot.com/_GF9ffMDWP9A/S-wWEOGL1rI/AAAAAAAAASc/M006oVHiSVU/S269/dolphin.jpg
142.250.74.161200 OK 19 kB URL HTTP/1.1 2.bp.blogspot.com/_GF9ffMDWP9A/S-wWEOGL1rI/AAAAAAAAASc/M006oVHiSVU/S269/dolphin.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 173x226, components 3\012- data
Hash c71547437d1675047bebcadb25ee97ec
1fde5ce3deb929e507eb1377bc1f7578d113c5f6
906d1d7d54d78d5c29a09fcfae02dccc69b9b1327962852d35c32252a7f1c466
GET /_GF9ffMDWP9A/S-wWEOGL1rI/AAAAAAAAASc/M006oVHiSVU/S269/dolphin.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v127"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="dolphin.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 18594
X-XSS-Protection: 0
4.bp.blogspot.com/_HWXIEBEBxAg/Szz0N6sSJ4I/AAAAAAAABUQ/2vVpdIJAvH4/s200/ThriftyGrl+Button.bmp
142.250.74.161200 OK 10 kB URL HTTP/1.1 4.bp.blogspot.com/_HWXIEBEBxAg/Szz0N6sSJ4I/AAAAAAAABUQ/2vVpdIJAvH4/s200/ThriftyGrl+Button.bmp
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 165x158, components 3\012- data
Hash 4c1e33e13b57786c1b02e6a1f57a6682
58fe11552efca701144bb7ddec9181d9e1bcd4d4
eff78c89e6925e9dbfe03d2cd63f0d66450a3e8eea823f7dc1514ab092c647ee
GET /_HWXIEBEBxAg/Szz0N6sSJ4I/AAAAAAAABUQ/2vVpdIJAvH4/s200/ThriftyGrl+Button.bmp HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v544"
Expires: Tue, 21 Feb 2023 05:08:13 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ThriftyGrl Button.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: fife
Content-Length: 10454
X-XSS-Protection: 0
i845.photobucket.com/albums/ab13/jacquiblogger/button-2.png
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i845.photobucket.com/albums/ab13/jacquiblogger/button-2.png
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ab13/jacquiblogger/button-2.png HTTP/1.1
Host: i845.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i845.photobucket.com/albums/ab13/jacquiblogger/button-2.png
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A_PRJxzWDP12MPhVj3bDPY2pRl-w9S4qVggn0_U8Mtg1mBRoWZHBKQ==
Vary: Origin
i845.photobucket.com/albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i845.photobucket.com/albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png HTTP/1.1
Host: i845.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i845.photobucket.com/albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png
X-Cache: Redirect from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bH1ZSOrMmTySvyBp4eMDMuPgy2QkZ1pe8Majt1P0spZtsY2AzrUPZw==
Vary: Origin
kevinandamanda.com/buttons/freehandwritingfonts.jpg
188.114.97.1301 Moved Permanently 0 B URL HTTP/1.1 kevinandamanda.com/buttons/freehandwritingfonts.jpg
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /buttons/freehandwritingfonts.jpg HTTP/1.1
Host: kevinandamanda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:13 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:13 GMT
Location: https://kevinandamanda.com/buttons/freehandwritingfonts.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPDAreU6Eyl6M2GXHe7DLU71swGc%2FKWftNk%2Bbx1gkITJC6hRrPwESR5ycbXqbiMnoGfU8MLurk%2FYwti9hDfeQfi8r%2FwU59dDDks0BPvm6807gF3SykqM161DQpjLwJdDvltRdOw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b9223eb3b4ee-OSL
alt-svc: h2=":443"; ma=60
i231.photobucket.com/albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i231.photobucket.com/albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg HTTP/1.1
Host: i231.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i231.photobucket.com/albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hhx5cPIPb7v-RixprY__Ex01MH-BTH97NTqZtontfqt35pxaEn6B9g==
Vary: Origin
i231.photobucket.com/albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i231.photobucket.com/albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png HTTP/1.1
Host: i231.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i231.photobucket.com/albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hA6YR6cMfW1S3MOq6S_LbucudT85oz-K4zxTpPIRnFEcki8b5KuPDg==
Vary: Origin
cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
45.33.30.197200 OK 157 B URL HTTP/1.1 cdn.widgetserver.com/syndication/subscriber/InsertWidget.js
IP 45.33.30.197:0
Hash 67e216a27dda24bdcb086c2385b0cb99
17141c80f5d32bec3691c5ab24741d8b7dd5f0c6
9dc433b2142d3ba0803fcffa53f19d34da26996d20c829df6d694bc887325dd7
GET /syndication/subscriber/InsertWidget.js HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 20 Feb 2023 05:08:13 GMT
content-type: application/javascript
content-length: 157
last-modified: Tue, 10 Jan 2023 21:36:12 GMT
etag: "63bdda4c-9d"
accept-ranges: bytes
connection: close
www.blogger.com/dyn-css/authorization.css?targetBlogID=6714507904501781009&zx=f55f9fe4-ef5a-4420-bd53-f22832796f95
142.250.74.41200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=6714507904501781009&zx=f55f9fe4-ef5a-4420-bd53-f22832796f95
IP 142.250.74.41:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=6714507904501781009&zx=f55f9fe4-ef5a-4420-bd53-f22832796f95 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 20 Feb 2023 05:08:13 GMT
last-modified: Mon, 20 Feb 2023 05:08:13 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/navbar.g?targetBlogID=6714507904501781009&blogName=Sarafan2&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sarafan2.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://sarafan2.blogspot.com/&vt=6859641710715129592&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
142.250.74.41200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=6714507904501781009&blogName=Sarafan2&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sarafan2.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://sarafan2.blogspot.com/&vt=6859641710715129592&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
IP 142.250.74.41:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash ad87cb232ea9075284b9fb310c8f0f09
ad1f140619aaeca3c509721ec13a3083cf680f19
61479a1dec9cca59dca50ff4a358d8f6b42d8474c9d1907430e24af327060284
GET /navbar.g?targetBlogID=6714507904501781009&blogName=Sarafan2&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://sarafan2.blogspot.com/search&blogLocale=en&v=2&homepageUrl=http://sarafan2.blogspot.com/&vt=6859641710715129592&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 20 Feb 2023 05:08:13 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2558
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform:gapi.iframes.style.common.js
142.250.74.46200 OK 21 kB URL HTTP/2 apis.google.com/js/platform:gapi.iframes.style.common.js
IP 142.250.74.46:0
File type ASCII text, with very long lines (1429)
Hash eb1d12f632b489080577377bf9deb08b
2ce8d059c1a7b717b40280fc380745500319c805
58c8f5569695f851b0319332019116d5362fd63de9c836594e185923cea90563
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20960
date: Mon, 20 Feb 2023 05:08:14 GMT
expires: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "cd99eb5425d8c161"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i383.photobucket.com/albums/oo271/momfuse/mfpopblogger.gif
54.230.111.3200 OK 12 kB URL HTTP/1.1 i383.photobucket.com/albums/oo271/momfuse/mfpopblogger.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 125 x 127\012- data
Hash 2fed040ea9145c87695679433ef6686c
c5e86e36f32dd65c2b0f43d4b129ae6c51dda0a2
31d924dd6f59f732deaea67423c028ecdbbb788f9313e275d40208a1a0cae976
GET /albums/oo271/momfuse/mfpopblogger.gif HTTP/1.1
Host: i383.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 12145
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:13 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="mfpopblogger.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:13 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003d-210496185a73229130d6b436
X-Request-Id: Jo11Fl_ubIwiyJkpig_9h
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SXoKGZfghPQxY42DLUKF3BsH51uzcRtCnpgcPiKyiBNgC403mnw9mQ==
www.cute-counter.com/en/webc.php?d=2&c=14508
157.7.144.96200 OK 356 B URL HTTP/1.1 www.cute-counter.com/en/webc.php?d=2&c=14508
IP 157.7.144.96:0
ASN #7506 GMO Internet,Inc
File type HTML document, ASCII text
Hash c0a9a081d9d93493011035f75ceeb942
6ca45ab6b918753286e3919448e3cd3fc46dfc1a
c422bcb3455f2d42b5eba19652fb4811f9d2e1cc8f39de4533869390e64bdcf5
GET /en/webc.php?d=2&c=14508 HTTP/1.1
Host: www.cute-counter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.giveawayscout.com/badge/js/
172.104.4.142301 Moved Permanently 707 B URL HTTP/1.1 www.giveawayscout.com/badge/js/
IP 172.104.4.142:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 1304294c0823ca486542ba408ed761e3
b2a70fb2d810ca13985882e6981f33998823e83e
3bbe72f3baa8ec61de17a1d767fca58704769684b7abe9161d0c4eaf4c8f0982
GET /badge/js/ HTTP/1.1
Host: www.giveawayscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
content-length: 707
date: Mon, 20 Feb 2023 05:08:11 GMT
server: LiteSpeed
location: https://www.giveawayscout.com/badge/js/
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
www.linkytools.com/basic_linky_include.aspx?id=35613
144.208.108.94200 OK 138 B URL HTTP/1.1 www.linkytools.com/basic_linky_include.aspx?id=35613
IP 144.208.108.94:0
File type ASCII text, with CRLF line terminators
Hash 8d9a12ed8f323c77b879f083438a5f78
2c5e14807f38a78096463afdda4cd8f8575149e2
4407cd3cd438f7469ec8f75f5a90004e65120489fb5ec20f3a01cc64590a4cdb
GET /basic_linky_include.aspx?id=35613 HTTP/1.1
Host: www.linkytools.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Cache-Control: private
Content-Type: text/html; charset=utf-8
Server: Microsoft-IIS/8.5
Set-Cookie: LinkyTools_ASP.NET_SessionId=gowwixqmm3mbe2ov1uj0eflv; path=/; HttpOnly; SameSite=Lax
X-AspNet-Version: 4.0.30319
X-Powered-By: ASP.NET
Date: Mon, 20 Feb 2023 05:08:10 GMT
Content-Length: 138
pub29.bravenet.com/counter/code.php?id=410015&usernum=2472230615&cpv=2
65.39.176.102200 OK 287 B URL HTTP/1.1 pub29.bravenet.com/counter/code.php?id=410015&usernum=2472230615&cpv=2
IP 65.39.176.102:0
File type ASCII text, with CRLF line terminators
Hash d8d73c5f06a7ae643c676c95fbc8793e
7e58ea82fd06ce27a50776505aa3ac80faac6e2a
1dfaff0b8f8a17ee99dbf1b30886df7890d193daefb8c3008ae87586c319c35d
GET /counter/code.php?id=410015&usernum=2472230615&cpv=2 HTTP/1.1
Host: pub29.bravenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:13 GMT
Server: Apache
Set-Cookie: BNU=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.bravenet.com
BNP=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.bravenet.com
BNETSESSID=taohcbq6tvpqpsisbmdkc3g8f7; path=/; domain=.bravenet.com
ETag: PUB29-6903c63af8ddfc40aaa7cb115845b3c2d496d7c0-1676869693.985
Last-Modified: Mon, 20 Feb 2023 05:08:03 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP LAW NID PSA ADM OUR IND NAV COM"
Content-Length: 287
Content-Type: text/html; charset=UTF-8
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
142.250.74.46200 OK 45 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP 142.250.74.46:0
File type ASCII text, with very long lines (1448)
Hash e109643c6c3b1b66def84e3a7c3bd6a7
3eb8ca5c8d01b789b986da9ee9fd5c5d9cac095c
9005c29bc089e7bf687c6ba4c556bb08aaddfa96a5592e9c4f4d03b87523d5f9
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 45340
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Feb 2023 12:55:28 GMT
expires: Thu, 15 Feb 2024 12:55:28 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 403966
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
api.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
208.82.16.81301 Moved Permanently 164 B URL HTTP/1.1 api.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
IP 208.82.16.81:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0ddfe38fe52729401ec28b0c671ff9cc
168fb534ee60922a73876b99d57259cb09a5be73
639762e638bc698ac208f1a8d5f5af04901e9df719978deb315e9e6c7b817f9a
GET /files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png HTTP/1.1
Host: api.ning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://www.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
Server: Unknown
i1190.photobucket.com/albums/z451/hyanne/Templates/button-2.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i1190.photobucket.com/albums/z451/hyanne/Templates/button-2.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/z451/hyanne/Templates/button-2.png HTTP/1.1
Host: i1190.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1190.photobucket.com/albums/z451/hyanne/Templates/button-2.png
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: k1wjo99Hkgergq9M-_wYJoCO0I9nr8ULvHZxNC-eMFKKpHvRltKS7Q==
Vary: Origin
1.bp.blogspot.com/__S0xCdOrOOE/SdJV8bSLm8I/AAAAAAAACOg/GP17MwKYvWM/S150/champagne-button.jpg
142.250.74.161200 OK 7.8 kB URL HTTP/1.1 1.bp.blogspot.com/__S0xCdOrOOE/SdJV8bSLm8I/AAAAAAAACOg/GP17MwKYvWM/S150/champagne-button.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 125x125, components 3\012- data
Hash dea0917d65afdd04fdd66dce8acb8288
451a4f2f1b7bc999172fba20eae850615c6d1f75
b970ad14dfcedef52db587a9625ad752972ce963bea406b2ef2b9772ebc683fe
GET /__S0xCdOrOOE/SdJV8bSLm8I/AAAAAAAACOg/GP17MwKYvWM/S150/champagne-button.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8e8"
Expires: Tue, 21 Feb 2023 05:08:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="champagne-button.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: fife
Content-Length: 7800
X-XSS-Protection: 0
www.bzzagent.com/images/v4_1/bzzagent_badge.png
34.117.168.233301 Moved Permanently 0 B URL HTTP/1.1 www.bzzagent.com/images/v4_1/bzzagent_badge.png
IP 34.117.168.233:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/v4_1/bzzagent_badge.png HTTP/1.1
Host: www.bzzagent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Length: 0
location: https://www.bzzagent.com/images/v4_1/bzzagent_badge.png
strict-transport-security: max-age=3600
x-wix-request-id: 1676869694.1211085224324501
Age: 0
X-Seen-By: GXNXSWFXisshliUcwO20NXdyD4zpCpFzpCPkLds0yMfQ2HhMVEri37Sb7Imry/mc,qquldgcFrj2n046g4RNSVOEcKTWnPkUHK4qOWpouMik=,2d58ifebGbosy5xc+FRalk+l1CXRO3IRNb7/nj/1ZWl0wh4z1OS8anpx0AvE67QN3QpI/ucnHvfrUjeESIoVenX7xJ/wyo5H3OuaOQo2PHM=,2UNV7KOq4oGjA5+PKsX47F5BsGrV9wopHJr0QwUp44Wa46R9xNIlpQ4eUPYpBuqs,7npGRUZHWOtWoP0Si3wDp4PPbz12F+qOGZgmNI2Xb0s=,xTu8fpDe3EKPsMR1jrheEJaKnH7t1Z8fisqAoImMGOM=,WDMzHiyOL7uW518fW2Byrz3s7JEFt/WnIzEV0IYnJ8Lix8sOol/rSyHKx9NnnkFCWIHlCalF7YnfvOr2cMPpyw==
Cache-Control: no-cache
server-timing: cache;desc=miss, varnish;desc=miss, dc;desc=eun1_g
X-Content-Type-Options: nosniff
Server: Pepyaka/1.19.10
Via: 1.1 google
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/1.1 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/plain; charset=utf-8
Content-Length: 0
Connection: keep-alive
Cache-Control: public, max-age=86400
Location: https://www.sweepsadvantage.com/eleven.js
Vary: Accept-Encoding
X-Middleton-Display: redirect
CF-Cache-Status: MISS
Server-Timing: cf-q-config;dur=4.000001354143e-06
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M2Q1JjoNp2r%2BakbiYGDxqSvrpQnJWLvHZrcPhxPioOTF0eNKTdeaoWofWbmeFqmqeYVwNlieQ4kWW%2Fx3ZD1%2F8EooOi2nmzUPB%2FTd6Mfg7%2BdKrYs%2BHTO%2FnboLrvhjovyPRh630%2FglC7Do"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79c4b9241e37b506-OSL
alt-svc: h2=":443"; ma=60
2.bp.blogspot.com/_lGAvET_j0kI/SwaDwkK_pOI/AAAAAAAAAMY/ye5ZNckBRqk/s400/motherhoodavie.jpg
142.250.74.161200 OK 7.8 kB URL HTTP/1.1 2.bp.blogspot.com/_lGAvET_j0kI/SwaDwkK_pOI/AAAAAAAAAMY/ye5ZNckBRqk/s400/motherhoodavie.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x150, components 3\012- data
Hash 07c1fe9b731170ef715cbcf980901f31
96c4f3bf53f8f77b26b1cc6c6321238d699bd6a1
f102c97743e096c6317d4b4676d0885c7cce0c91b66c612982785318de77584d
GET /_lGAvET_j0kI/SwaDwkK_pOI/AAAAAAAAAMY/ye5ZNckBRqk/s400/motherhoodavie.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="motherhoodavie.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7801
X-XSS-Protection: 0
Date: Mon, 20 Feb 2023 05:08:14 GMT
Expires: Mon, 20 Feb 2023 00:50:36 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vc6"
Content-Type: image/jpeg
Vary: Origin
Age: 0
2.bp.blogspot.com/_YFZMxcAl8CQ/S43i-f5VyJI/AAAAAAAAAFI/f5IeLrGdtoU/s320/ratsandmore.jpg
142.250.74.161200 OK 5.8 kB URL HTTP/1.1 2.bp.blogspot.com/_YFZMxcAl8CQ/S43i-f5VyJI/AAAAAAAAAFI/f5IeLrGdtoU/s320/ratsandmore.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 125x125, components 3\012- data
Hash 4d3f2e0d1c84ec3ba7f76396d4edd18f
71b73839a33da5198e1bd1dcb5abba61e1c12204
6fab831acb0d698bfb6aa908e27d43f3a5c346db076968e5dec25f9e2d9b52cf
GET /_YFZMxcAl8CQ/S43i-f5VyJI/AAAAAAAAAFI/f5IeLrGdtoU/s320/ratsandmore.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v52"
Expires: Tue, 21 Feb 2023 05:08:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ratsandmore.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: fife
Content-Length: 5820
X-XSS-Protection: 0
poshonabudget.com/wp-content/uploads/2010/11/iam.png
3.33.152.147404 Not Found 125 B URL HTTP/1.1 poshonabudget.com/wp-content/uploads/2010/11/iam.png
IP 3.33.152.147:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 2995357b538ef792ce59b1b7cca539c4
d33d8ce38719b45d0731f075f71593351023318c
aef27e8433e35954afe1798da5bde96145b020160cc2f16b1424425253fb545b
GET /wp-content/uploads/2010/11/iam.png HTTP/1.1
Host: poshonabudget.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 125
Connection: keep-alive
Server: ip-100-74-3-20.eu-west-2.compute.internal
X-Request-Id: b3ebb3f2-0f2d-4407-ba9d-aa43be7460bc
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=uLJfIk5%2BOHdcHYG7clAI3mJJAVl1hGf9qFn3Aa%2FBhx4TIC8A%2BtpdG%2BHm12Tj7DNL5zYLJnjuqb6Q2MDsPkfkfiMKXxQrnBPmOxB%2FKODJ2HvmtGH9oWiREg9koRXyCW9kYKuyxGzHXkzh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9254d7bb515-OSL
X-Firefox-Spdy: h2
i198.photobucket.com/albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i198.photobucket.com/albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg HTTP/1.1
Host: i198.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i198.photobucket.com/albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KA_1sIhM6bbHMV3wCIdnZx3ffBxqqNd84jxmeUzX_l-qJdm9elrdUg==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tAEFcUv0k7BIxRsPcnQitfEcnFC6QvgQ4Au8fEz%2F%2BxVAsgMShy4D2FSmkH59cTdOZyZNkST6vPWqYGLd3x2SqxuZ4WExgDuGuIeQQr3Bo72f5D82hzfyid8KyUaLdvt383Y3ub8uy5Er"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9256d8db515-OSL
X-Firefox-Spdy: h2
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hlLeX6JNszzkyI4UatQ4CFz17eTQbCxll%2B4hlOn5CHehGMbfiPafNMtUsS8ELsqi8CaxAXDBGuUmmfI5tOv%2FaRA7ItBse9oHes8Gx2MmcjHV4Qe5BGVRKGATljTZCfBfub%2Fa6QiQ%2BFrh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9258d9bb515-OSL
X-Firefox-Spdy: h2
i1197.photobucket.com/albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i1197.photobucket.com/albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png HTTP/1.1
Host: i1197.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1197.photobucket.com/albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YezAMHUF0uPMVeYXQDYyM7XDKu_ennfyUe8ZwCM_dG1jI-KcLfE1rA==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FbimOx8iXuupLUaiUJdoZMwpgw4dh03KRJYygY9%2BHS6WM%2Bu3BP%2FSj2EHzu5SIiJdjc1sDr%2FfNWlvNyG%2F5L%2BLj%2B67%2Bvx6dmGcBfoHNH11U662o%2FzVpj1VzhneV0W6p2VS1%2B7MPCgTCPKo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b925ada6b515-OSL
X-Firefox-Spdy: h2
www.sarafan2.blogspot.com/chgoto.js
216.58.207.193301 Moved Permanently 184 B URL HTTP/1.1 www.sarafan2.blogspot.com/chgoto.js
IP 216.58.207.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 2241df54a49d0e51df1f6e5578ed44bc
669b96230a3e08473891296e41127cd73d216d91
424389b23532c924e3836bef182529c2b635410dbd890dfbddd7233bc57c8176
Analyzer Verdict Alert fortinet Phishing
GET /chgoto.js HTTP/1.1
Host: www.sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: http://sarafan2.blogspot.com/chgoto.js
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 20 Feb 2023 05:08:14 GMT
Expires: Mon, 20 Feb 2023 05:08:14 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 184
Server: GSE
www.blogger.com/img/icon18_edit_allbkg.gif
142.250.74.41200 OK 162 B URL HTTP/1.1 www.blogger.com/img/icon18_edit_allbkg.gif
IP 142.250.74.41:0
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 162
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 17 Feb 2023 11:27:26 GMT
Expires: Fri, 24 Feb 2023 11:27:26 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 17 Feb 2023 08:51:44 GMT
Content-Type: image/gif
Age: 236448
www.momdot.com/wp-content/uploads/2009/11/ethicalhorizontal2.png
172.67.130.189301 Moved Permanently 0 B URL HTTP/1.1 www.momdot.com/wp-content/uploads/2009/11/ethicalhorizontal2.png
IP 172.67.130.189:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2009/11/ethicalhorizontal2.png HTTP/1.1
Host: www.momdot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:14 GMT
Location: https://www.momdot.com/wp-content/uploads/2009/11/ethicalhorizontal2.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HfMs1L8YZb4QDhdmGxvOZaagy1wXKy18%2Fq5KMyuy0DEgEJrdfEt%2Bla8HpSwLULvVlQqhSyOuzAc39y%2B55nDA3mIWdi0CwtbtC2Sqcdg7gXznM1QDlQO0UMsCgM7sWNg31w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b925d8e70b45-OSL
alt-svc: h2=":443"; ma=60
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9iHjo5j4lZwkuQJW1BXkJrdPaKndTdTm7YmQ75%2B%2F5dxh8baF3BaVPRHweHoM6ealodjuMGyVxo8cyQa7npsBkv4jh%2BqV2YDa1GPDBvhpY1klLiq7YiS9iNY6XATD9vTiEHZtmHeP4qXD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b925fdc3b515-OSL
X-Firefox-Spdy: h2
www.blogwithintegrity.com/badges/BWI_125sq.jpg
23.229.213.9200 OK 5.4 kB URL HTTP/1.1 www.blogwithintegrity.com/badges/BWI_125sq.jpg
IP 23.229.213.9:0
ASN #398101 GO-DADDY-COM-LLC
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 125x125, components 3\012- data
Hash 5f4e37e034ee33ebe21890b21e2b8746
441aa14e8b7c00da40de52dba55aa0f583bca3c4
2b88aef9a0fceadc4a7b87c87aac1e2c8eeadc9e080dedc037149af0821eead3
GET /badges/BWI_125sq.jpg HTTP/1.1
Host: www.blogwithintegrity.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Mon, 28 Aug 2017 21:55:44 GMT
ETag: "b822cd1-151d-557d75b404925"
Accept-Ranges: bytes
Content-Length: 5405
Keep-Alive: timeout=5
Content-Type: image/jpeg
i789.photobucket.com/albums/yy177/slcmommy/button.gif
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i789.photobucket.com/albums/yy177/slcmommy/button.gif
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/yy177/slcmommy/button.gif HTTP/1.1
Host: i789.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i789.photobucket.com/albums/yy177/slcmommy/button.gif
X-Cache: Redirect from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BvcGDDMGT5WB-Q54y9HLhkSvsqTwnp8S8pbbTz8-OMtsfhtqkSIbZw==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xb1yIEe4crhm0pjMknTwcogltzY%2F6cbyH44ARShaM4qUAUfgVhmNdPgOdxuQTM4Rg1wh1UzDMj9DLXT%2BMUE42h1dBnWT7iql6lLhby%2BUFYuPtcBSGtCTcvpeeovc9HC28L3cRCgoGncm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9261dd2b515-OSL
X-Firefox-Spdy: h2
i933.photobucket.com/albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i933.photobucket.com/albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950 HTTP/1.1
Host: i933.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i933.photobucket.com/albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950
X-Cache: Redirect from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: MMI593rrWqGIe3K99BMxbLV9Os4zPS1AuKraNi9kydTlYVAdpbQKsA==
Vary: Origin
stilettomedia.com/wp-content/uploads/2011/07/Stiletto-Media-Blogger-150-x-150.jpg
64.111.101.80200 OK 12 kB URL HTTP/1.1 stilettomedia.com/wp-content/uploads/2011/07/Stiletto-Media-Blogger-150-x-150.jpg
IP 64.111.101.80:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 150x150, components 3\012- data
Hash db8fae43a6c2fdd03a0952d96f7c7fa9
8a2bd636e68dfee27c47075156718ca669cc291d
aafb3731f8fa6b9b5ef39bb1cae45ed88bdccc4140bdb8ca6c52197ffc466817
GET /wp-content/uploads/2011/07/Stiletto-Media-Blogger-150-x-150.jpg HTTP/1.1
Host: stilettomedia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: Apache
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 05 Jul 2011 01:17:46 GMT
ETag: "2ed2-4a748405a8280"
Accept-Ranges: bytes
Content-Length: 11986
Cache-Control: max-age=2592000
Expires: Wed, 22 Mar 2023 05:08:14 GMT
Vary: User-Agent
Keep-Alive: timeout=2, max=100
Content-Type: image/jpeg
img231.imageshack.us/img231/4821/buttonimage1w.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img231.imageshack.us/img231/4821/buttonimage1w.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img231/4821/buttonimage1w.png HTTP/1.1
Host: img231.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=m7lS%2BvcmTGrS4PlwTBYXjnd5BwNx3I3HNmXxKp883ruqxAxC3QPqOHzLqCjm8fZqOlw%2Fbd%2BDfmnwFYKC7MNNAXxSQemDCWduYFcImksJPPiXsXZumfjWncHJkhATBGeWENXsPbCWVuFt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9265de1b515-OSL
X-Firefox-Spdy: h2
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eHs6Ti1BoNlIXb%2FGV%2Bo%2BIr3A1uCcsRqVPyh%2BSTOThMaknZeFibvhHYmAu2bMGwS07HEa3Gf2%2Bskwiw5WFElnjFVVJkKbnXxsnzULpO9e4NVbu87%2FOS2VPuJZKlSXZTNlq35qKlYIVWeg"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9268df9b515-OSL
X-Firefox-Spdy: h2
static.addtoany.com/buttons/share_save_171_16.png
172.67.39.148301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/buttons/share_save_171_16.png
IP 172.67.39.148:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /buttons/share_save_171_16.png HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:14 GMT
Location: https://static.addtoany.com/buttons/share_save_171_16.png
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79c4b9268c00b529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
2.bp.blogspot.com/_cfj9Ixyq128/S5Ji-Tx4veI/AAAAAAAAAN4/E7JDYPTKSCM/s320/showme-button.gif
142.250.74.161200 OK 23 kB URL HTTP/1.1 2.bp.blogspot.com/_cfj9Ixyq128/S5Ji-Tx4veI/AAAAAAAAAN4/E7JDYPTKSCM/s320/showme-button.gif
IP 142.250.74.161:0
File type PNG image data, 125 x 127, 8-bit/color RGB, non-interlaced\012- data
Hash 133e6c62d9c8009a7e741df5d39230e9
27f7ab8932d3a5197557a829445dcc63789af847
058d82381a5205e9bf217edff1a415baae6bbb79c1b476cbd914dc3af4357c0c
GET /_cfj9Ixyq128/S5Ji-Tx4veI/AAAAAAAAAN4/E7JDYPTKSCM/s320/showme-button.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vde"
Expires: Tue, 21 Feb 2023 05:08:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="showme-button.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: fife
Content-Length: 22898
X-XSS-Protection: 0
2.bp.blogspot.com/-ENZ6V6X0nW8/Tsnf02EFcnI/AAAAAAAABgQ/6KMErd_yQB8/s400/imagesCACXX2H3.jpg
142.250.74.161200 OK 8.9 kB URL HTTP/1.1 2.bp.blogspot.com/-ENZ6V6X0nW8/Tsnf02EFcnI/AAAAAAAABgQ/6KMErd_yQB8/s400/imagesCACXX2H3.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 299x169, components 3\012- data
Hash 3fb2e920a582808b4081b58dc88f5372
aa513ddff81a1c92bd3c28b59a8f61822a8e850f
73aa9d88eeecaddffcd24f9af573a485e6f83096131a7aeb69beaf21e02ec3de
GET /-ENZ6V6X0nW8/Tsnf02EFcnI/AAAAAAAABgQ/6KMErd_yQB8/s400/imagesCACXX2H3.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v604"
Expires: Tue, 21 Feb 2023 05:08:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="imagesCACXX2H3.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: fife
Content-Length: 8885
X-XSS-Protection: 0
i528.photobucket.com/albums/dd329/crissyren/mimibutton.gif
54.230.111.17200 OK 9.2 kB URL HTTP/1.1 i528.photobucket.com/albums/dd329/crissyren/mimibutton.gif
IP 54.230.111.17:0
File type GIF image data, version 89a, 150 x 150\012- data
Hash 9706c5a6df99ac50c557ed2f30e6d57c
baa21e96aeaaead7a876f8d1ca276569e6dbdd20
0ca8669bfa5d8b7ce3c2ac3d7a453a2f32936fe690f7c99d42965f995ee521a1
GET /albums/dd329/crissyren/mimibutton.gif HTTP/1.1
Host: i528.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 9200
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="mimibutton.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-3df1b0df1127e83b7bc02613
X-Request-Id: 7wpzotNjW2B8u9aRSz0ue
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Cw8_BHPl1hVXNf_4dCakxgiY3A7zSPwkCX0dLGfJckLHE1bw--jh5g==
static.addtoany.com/buttons/share_save_171_16.png
172.67.39.148200 OK 1.7 kB URL HTTP/2 static.addtoany.com/buttons/share_save_171_16.png
IP 172.67.39.148:0
File type PNG image data, 171 x 16, 8-bit colormap, non-interlaced\012- data
Hash a9951636f4e162bbe9997b13099c3697
e7711c0e4056a64f5b96d3fbc542cf124f3f5f03
2bd00c5fbf0d687a1dab7f7874c1a57ed73b855813f313ac4e1ec274c58eaa29
GET /buttons/share_save_171_16.png HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: image/png
content-length: 1657
cache-control: max-age=315360000, immutable
cf-bgj: imgq:100,h2pri
cf-polished: origSize=2572
etag: "a0c-4ddea93a51d00"
last-modified: Thu, 30 May 2013 07:37:56 GMT
via: e3s
cf-cache-status: HIT
age: 2795265
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79c4b926de18b515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ffEJuX6O%2BncuzfSO%2Fj6z9gB7oKNc6pmOJD2Wl%2FKXX%2FKoD2Q%2Fi%2BNXmkLZAy89TpMrdTWQXqxoJXmjThzKaG8HsXmpb4wCtp4GfMBCiAVbHxLdvzNfXChr82p35iOVz491eubaUL8wsvkE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b926de17b515-OSL
X-Firefox-Spdy: h2
i196.photobucket.com/albums/aa231/Elaineizwriting/150REDO2JPEG.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i196.photobucket.com/albums/aa231/Elaineizwriting/150REDO2JPEG.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/aa231/Elaineizwriting/150REDO2JPEG.jpg HTTP/1.1
Host: i196.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i196.photobucket.com/albums/aa231/Elaineizwriting/150REDO2JPEG.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 07d5d44815808d5d5a6f43984a987698.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CibfCCiyjr8s4kMBWcKSMPBgDgj0w51aAaqN93PPeRtLEk6bwB48EQ==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w%2FB0QmA7UGv5kenvD5ts0rFp2NPKViUwkiK7eLgFccD0vq14z%2F9F51z46Moi1L0j8UbFPW9NAd5ivFMofOzfos7rXAxHWx8pjw9tLm1qrf0P6sKI8SbCcORulGFuXmsb5aVH%2Bhd61j6%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9271e36b515-OSL
X-Firefox-Spdy: h2
2.bp.blogspot.com/_GF9ffMDWP9A/TS83nFm0B_I/AAAAAAAAAwM/8V2Bf9YfUYc/S241/preferredblogger.jpg
142.250.74.161200 OK 7.1 kB URL HTTP/1.1 2.bp.blogspot.com/_GF9ffMDWP9A/TS83nFm0B_I/AAAAAAAAAwM/8V2Bf9YfUYc/S241/preferredblogger.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 174x82, components 3\012- data
Hash 59fcb34692f36d3aecaa26443ef38553
ce6d003b8f9db659dce789f0c8d46a5aaf6e45b1
ce0932ad07ae96deef55f5f1946e725c2b782a8d4d8cce4fd2fcb6b1073d1cab
GET /_GF9ffMDWP9A/TS83nFm0B_I/AAAAAAAAAwM/8V2Bf9YfUYc/S241/preferredblogger.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v303"
Expires: Tue, 21 Feb 2023 05:08:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="preferredblogger.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: fife
Content-Length: 7103
X-XSS-Protection: 0
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x7qc%2FmdoIV%2FKGFtjfM0QbdjiIKzhzDy3WEmbuGWqiApTqgrTaQjvXnW7BlAtaUF2l7GGTLGfabQcqT2tj%2FG7lMQn76UxSWV8kS7pO5fDsUjnlIgvWJGVAPxrhYwGZRGoUEbt%2B04M8H3Y"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9273e4bb515-OSL
X-Firefox-Spdy: h2
i231.photobucket.com/albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png
54.230.111.3200 OK 8.2 kB URL HTTP/2 i231.photobucket.com/albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b85d94043f1d97c11894c081c8d804ca
389a3a94a0f6ff6d89d4e909d2896079a602ef47
84569104a374f968693d95229cb8dd6d4f889ba1212d82d665da2d268822fed4
GET /albums/ee180/juliewuliee/buttons/LeelouFreeLinkbuttonEATcopy.png HTTP/1.1
Host: i231.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8166
date: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="LeelouFreeLinkbuttonEATcopy.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:14 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-0350ed551a99b4187f39c299
x-request-id: ccJOLszKb__Wt3O9k0cmF
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UN0zyyAappy11_YhO2t3hXrfGbNoq8xL2HN8dQd-apmMTQB4y5rWdQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i933.photobucket.com/albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i933.photobucket.com/albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/ad174/tatahmar/STEPHANIE02%20blog/nbtt.jpg?t=1260876950 HTTP/1.1
Host: i933.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ptyJxykvkPZyCFTI5klEb897dhyaPhK0hWh_5tP2UODkO6fCfQbLPg==
age: 61889
X-Firefox-Spdy: h2
img.photobucket.com/albums/v22/mallrat/button.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v22/mallrat/button.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v22/mallrat/button.png HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v22/mallrat/button.png
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: F_bJe_t6FrJO_V5wUpwxAZ-KwjbVcj8_N0dnUPSXdOBDOFt3lzVz3Q==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PIu2RxBO8DHL41RddTYa%2BK4v%2FBjsg5Xb1Lo%2BzJzu2briVOSizEqmn7VX2oJmuO5KWV%2BjdjijBf2jYu7byG%2B5eAA06r1X0CDLoPmWPzshKGXE1VISv2%2Bv6OSFqEG15fNDfEgg%2B01p5YWD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9275e5eb515-OSL
X-Firefox-Spdy: h2
i198.photobucket.com/albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg
54.230.111.3200 OK 6.3 kB URL HTTP/2 i198.photobucket.com/albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 75b46c4ac2294bd89496adf71aa651fe
eab3a62cc74360709b4865364bc3c52b14136101
7747ebf3004ed19f932422aa5968ae15c4c8fc158013f9db2e6c38b37e70fa38
GET /albums/aa250/skyecaitlin88/154946_10150117185854992_784109991_7787644_7829352_s.jpg HTTP/1.1
Host: i198.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 6308
date: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="154946_10150117185854992_784109991_7787644_7829352_s.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:14 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-520861320bed94bd0f489c32
x-request-id: 3vsg_0zPZ3PDQpXoaELYg
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v9ZE3SfQJdyXihmlJDn0EmYICfaeoAwzI-fzGA_1aWclvDF1LWPP_g==
vary: Accept, Origin
X-Firefox-Spdy: h2
i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif HTTP/1.1
Host: i902.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif
X-Cache: Redirect from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RXjeKGpFLLTdqIQDYVjbUugod4WdJsMVi8SkBaeV5MttZiu8Unapcw==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S%2FD8nhUCp9ngyh73j2iyzLTXL9hz4uNz4ayAX0aeyZVlkJh4r5%2BwBwieJRiIgt2%2B9GkqNQVww4go6YGOjc%2FEUwkNNrHH8%2FyP1bLRrGny9e5ordz0cGKXDw8ePPwoeyQkMe5B74Vj97gn"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9278e6eb515-OSL
X-Firefox-Spdy: h2
i201.photobucket.com/albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i201.photobucket.com/albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg HTTP/1.1
Host: i201.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i201.photobucket.com/albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 54D9yXRamSKttTP0XF8rNfFGp-F7tuAMeTc0OHloHzNU-8Uo5Aoyxg==
Vary: Origin
i201.photobucket.com/albums/aa116/melbieaz/melbutton-2.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i201.photobucket.com/albums/aa116/melbieaz/melbutton-2.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/aa116/melbieaz/melbutton-2.jpg HTTP/1.1
Host: i201.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i201.photobucket.com/albums/aa116/melbieaz/melbutton-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SYnEBKieHy1qwEQBVJh_ixXTS131y8JXrYy3323HBfBBkH8ZQdRlXQ==
Vary: Origin
i86.photobucket.com/albums/k115/katiehare223/th_retrr-3.gif
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i86.photobucket.com/albums/k115/katiehare223/th_retrr-3.gif
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/k115/katiehare223/th_retrr-3.gif HTTP/1.1
Host: i86.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i86.photobucket.com/albums/k115/katiehare223/th_retrr-3.gif
X-Cache: Redirect from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ac0374Gk7GGm9aAKryV8Hufba8pI3JaAY4dDg7Mnv37zJbqLC7FkXw==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=H0pBUnI4n1E%2Fg26Nh%2Bgyokrwn%2FqU8ZJfzyWgiqNzJZXmu3vgR9Hc8KHH2zr3WHjI5XAtKsaFwAcHsbC9Lz570lOTUD6gMFAmOK1yeEM1soc8sDnwxomhob2BzmJkwDmrZDOzRpT9fjB%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b927ae7fb515-OSL
X-Firefox-Spdy: h2
i789.photobucket.com/albums/yy177/slcmommy/button.gif
54.230.111.3200 OK 8.3 kB URL HTTP/2 i789.photobucket.com/albums/yy177/slcmommy/button.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash 299122eac8a24edecf6edc7ae0889df1
5a269220c4da17460d97f7ee3b071f04310e348f
4336d3882bb6707a09e1efe02d614236091c20336befb2ce0f741fb5950e3ac7
GET /albums/yy177/slcmommy/button.gif HTTP/1.1
Host: i789.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 8276
date: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:14 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-3c169a14633328876ac5ae7e
x-request-id: f3hKj8CgDztLKcTtDIWBX
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: lXBvbDwumzcB8LQnoD9p-alc197eyz-rCM5Ii5zzJy67OogwpiPeig==
vary: Accept, Origin
X-Firefox-Spdy: h2
i621.photobucket.com/albums/tt296/leahmwilliams/button.jpg
54.230.111.17200 OK 4.6 kB URL HTTP/1.1 i621.photobucket.com/albums/tt296/leahmwilliams/button.jpg
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dd6218fea8aa6b351f883ad4dadc31c6
46b3eb24938de9cc5b57f34b047b84db44794665
cc9f0c58e38323ecbb4435526313073b197d59666e0c0993dbf2056513b3bee5
GET /albums/tt296/leahmwilliams/button.jpg HTTP/1.1
Host: i621.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4564
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-62ae2f8b02fc73512813da2f
X-Request-Id: 1eIbzHyKWe566BX19PMZN
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -isAIMeZtNBdRfxylDnrMzpmYYSsm3Exdrz0lkjP1KIwCyxYWSQ6NQ==
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=81zyee1mt1HxkLaKFwK6XNvoeT7hNszCogMCJMPB%2B3zdEy%2FHxerF4CF7Ss7r1UdCF%2FnGrFhqVRu7rT90VT%2FlzuiYHa0Sy0p%2BbQrHQrc6haYnWm9msAyupqOBg5ISg%2FCXGMKQGaJWps7R"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b927ce8cb515-OSL
X-Firefox-Spdy: h2
i4.photobucket.com/albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i4.photobucket.com/albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg HTTP/1.1
Host: i4.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i4.photobucket.com/albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: r8FSaYUokk77jOFPyX_1FxNVhiA2OAjNLlSYJQRUwQdPwCqT6N0ktg==
Vary: Origin
frugalplus.com/wp-content/uploads/2010/11/fp_blogbutton150.png
52.20.84.62404 Not Found 150 B URL HTTP/1.1 frugalplus.com/wp-content/uploads/2010/11/fp_blogbutton150.png
IP 52.20.84.62:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 597ba0d4396e9c906225140ce907092c
28ae2ba65ccdb583d79f85b8cc9509fae697493b
ee1a27178227546d3dcc49e611a6d72e4f1c30080ee4493ae4085b58a49e28e6
GET /wp-content/uploads/2010/11/fp_blogbutton150.png HTTP/1.1
Host: frugalplus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: openresty
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=INXsEDMmWEB3mbMfwHMgbMoFPEA%2B3JgFKgOKpzjDt6wwmWdSrLvdOK7Slvg5Qt6Ui3FWMlnp80htSIMjV%2Fy1SJgzA%2FOgQCc4do1abVgwDYNbaJ6p6j%2FwlXIovc4GcWywxHMtG1U4sAWI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b927ee9eb515-OSL
X-Firefox-Spdy: h2
i1215.photobucket.com/albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i1215.photobucket.com/albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg HTTP/1.1
Host: i1215.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1215.photobucket.com/albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LNNk4U1Nm-n30x55QisuF5ufPRCc3ynSqOTioebbchsWkRusOz6E5Q==
Vary: Origin
i653.photobucket.com/albums/uu257/Ravish30/chics2.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i653.photobucket.com/albums/uu257/Ravish30/chics2.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/uu257/Ravish30/chics2.jpg HTTP/1.1
Host: i653.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i653.photobucket.com/albums/uu257/Ravish30/chics2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NRgxilGSey9PlQ8Ce-y75SxXf0v9OQDkAGkLEI_a1URsrXkcgTqakA==
Vary: Origin
static.addtoany.com/menu/page.js
172.67.39.148200 OK 1.5 kB URL HTTP/2 static.addtoany.com/menu/page.js
IP 172.67.39.148:0
File type ASCII text, with very long lines (3076), with no line terminators
Hash 3401327dfdc2e540d32c193a0fe3240d
52a1467e849867e41519e2621d2465dc9ad6f062
2fb32e0e02af312d05a9b0501c183521ebeb9711022b318eb412e2686cfed962
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 13919
etag: W/"c04-5f1f2ae2e431b"
last-modified: Wed, 11 Jan 2023 01:11:30 GMT
vary: Accept-Encoding
via: e1s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79c4b925edbbb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.sweeptight.com/wp-content/uploads/2010/06/button.png
104.21.23.57301 Moved Permanently 162 B URL HTTP/1.1 www.sweeptight.com/wp-content/uploads/2010/06/button.png
IP 104.21.23.57:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2010/06/button.png HTTP/1.1
Host: www.sweeptight.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://amagicalmess.com/wp-content/uploads/2010/06/button.png
X-Powered-By: centminmod
X-Hosted-By: BigScoots
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d3%2Bw78UqQNI9%2B0t2a9EV%2BsO3jFCzYpJok%2FAsWWAeuMUb5VqK%2Bx4UWNgEWw4I4dorsZcbxD46Y4Ni5nvSRrMXUgEFXVk7NOp6%2BfMIpQds4j5BgtC1rAlCLNy04pnNrcGz%2BmPCcsU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b9268d02b52d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
i514.photobucket.com/albums/t342/robynwins/ROWbutton.png
54.230.111.17200 OK 4.8 kB URL HTTP/1.1 i514.photobucket.com/albums/t342/robynwins/ROWbutton.png
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e42fd3eb88e4ac3c9628f7633953ea4
2f87da7abbac636272999d24fd50f34ee8ac7e11
3b61277f1e7be433969494118425b422699c88429c2c56ad7ea0b85eece07a90
GET /albums/t342/robynwins/ROWbutton.png HTTP/1.1
Host: i514.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4844
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="ROWbutton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-58e3c87121359c9f28049ba4
X-Request-Id: mlHP_rYF_z3EIwsTXBi26
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zsNax1yYXsPKAXitD-aljyXFN2fOgvIDVh_RwiJPK3n_cpz0TwDe7Q==
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9PYzWrRoeGtnzAmtOKnrM7xiMguIu0A5GEHMtzih4PDcL3%2FzMcIPpwRiAOfqyWWauTzl1yuvcXTFNiAmAFAmzkiPsku0eRDiLcdmUQnA7WCVsCnR425kBQF7T4AsLnVfXz%2FecBAH0KtW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9281ec9b515-OSL
X-Firefox-Spdy: h2
i44.tinypic.com/2aflbpv.jpg
54.230.111.52301 Moved Permanently 0 B URL HTTP/1.1 i44.tinypic.com/2aflbpv.jpg
IP 54.230.111.52:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2aflbpv.jpg HTTP/1.1
Host: i44.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Sun, 19 Feb 2023 17:38:54 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pHBJo5q6fienWu2p_cyn5rsELMNY6scTUqzpbHh8t2WyGKgPRgnPuw==
Age: 41361
i305.photobucket.com/albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i305.photobucket.com/albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif HTTP/1.1
Host: i305.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i305.photobucket.com/albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif
X-Cache: Redirect from cloudfront
Via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z6mexAj07asC2mNU-mbJBFY-sBvL3qFSV3szyOXt-9sgCZbR6OfUlA==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KdQ0lF7Q926jpnaf06%2BHvjM6ntzLtFJ01mlJWa4zImY78M%2BcwPnMnMpO0eeTjzTlV6VV8axaUo6cp52GHj6G%2F8WW7gBJbPyfADkkrMQ9bFvSYQiSR0%2BeCewcn7S%2FeoJRkK6Wiheb8PXs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9283edcb515-OSL
X-Firefox-Spdy: h2
dealiciousmom.com/wp-content/uploads/2010/04/button.png
35.209.18.71301 Moved Permanently 162 B URL HTTP/1.1 dealiciousmom.com/wp-content/uploads/2010/04/button.png
IP 35.209.18.71:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /wp-content/uploads/2010/04/button.png HTTP/1.1
Host: dealiciousmom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://dealiciousmom.com/wp-content/uploads/2010/04/button.png
Host-Header: 8441280b0c35cbc1147f8ba998a563a7
X-HTTPS-Enforce: 1
X-Proxy-Cache-Info: DT:1
www.giveawayscout.com/badge/js/
172.104.4.142301 Moved Permanently 0 B URL HTTP/2 www.giveawayscout.com/badge/js/
IP 172.104.4.142:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /badge/js/ HTTP/1.1
Host: www.giveawayscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
x-powered-by: PHP/7.4.33
expires: Mon, 20 Feb 2023 06:08:12 GMT
cache-control: max-age=3600
x-litespeed-tag: c77_HTTP.301,c77_HTTP.301
x-redirect-by: redirection
location: /
x-litespeed-cache-control: no-cache
content-type: text/html; charset=UTF-8
content-length: 0
date: Mon, 20 Feb 2023 05:08:12 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
i711.photobucket.com/albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i711.photobucket.com/albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg HTTP/1.1
Host: i711.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i711.photobucket.com/albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lx7FHqTZUgUFrqhDef2qJLjQJAGmFD0PqDO-OuTa2nSSA6PIcWGrWw==
Vary: Origin
i711.photobucket.com/albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i711.photobucket.com/albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif HTTP/1.1
Host: i711.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i711.photobucket.com/albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: w5PRpDy8PP5EQECb_nBsmsE-zlF4UtRzxzrw09zCLisHAvssjM4hpw==
Vary: Origin
www.sweepsadvantage.com/eleven.js
104.26.0.8301 Moved Permanently 0 B URL HTTP/2 www.sweepsadvantage.com/eleven.js
IP 104.26.0.8:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /eleven.js HTTP/1.1
Host: www.sweepsadvantage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:14 GMT
content-type: text/plain; charset=utf-8
content-length: 0
location: https://www.sweepsadvantage.com/eleven.js
cache-control: public, max-age=86400
vary: Accept-Encoding
x-middleton-display: redirect
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=74jCIfHRCgO9bYq%2F9fo5Bc0SJH8Mmsf98MMzo5YWfBfXB3%2BrdteaWxDuAun9Qe%2BoG2J9CfyfeP3G9n09S4svYKtgNTLraQ8rMj%2BIjei7LkAJTwzNeRQ%2B0Xoq5apQJRJBYRTQ3Xn2viPw"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9285efbb515-OSL
X-Firefox-Spdy: h2
i402.photobucket.com/albums/pp104/frugalgal/new%20blog%20design/frugalbutton.png
54.230.111.106200 OK 7.5 kB URL HTTP/1.1 i402.photobucket.com/albums/pp104/frugalgal/new%20blog%20design/frugalbutton.png
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 427db4acfcca155a58711d886bd10d0a
977043449ba0ab05d411204d605ee1366ab63b81
5747d9b34d79b208228953ffcaa9900ccb358865136f1e4bbe7acda212bf43d0
GET /albums/pp104/frugalgal/new%20blog%20design/frugalbutton.png HTTP/1.1
Host: i402.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 7510
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="frugalbutton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-1493eca54d1e8c0d09d2a0fe
X-Request-Id: ETbhGlUC1s6M6OqneSYLW
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: I7Fa9F2n8jksNNsJOh20VPrt-2vpJffIJlRiuKy1SBcn8l0PavGl0g==
i790.photobucket.com/albums/yy181/hiptips4u/Amy-butler-fabric-3-1.jpg
54.230.111.106200 OK 7.4 kB URL HTTP/1.1 i790.photobucket.com/albums/yy181/hiptips4u/Amy-butler-fabric-3-1.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 34c56e983092876fcc1990bc529837ca
b9f7287e68b753cad23457ffe1115d354fcb9dc4
f38a0b8969af25755ace2018f24b791e801aa6b6949de3ba72d55ce684d32212
GET /albums/yy181/hiptips4u/Amy-butler-fabric-3-1.jpg HTTP/1.1
Host: i790.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 7434
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="Amy-butler-fabric-3-1.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-6dba885239d790a004ddf784
X-Request-Id: JDqhPWHG5sCHQ8GavgNm1
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Wzn9GJa_nLgSZPgiNDuQ3LcgLILUyDszUg4rPAiy9lP6HwRW-unxUw==
i201.photobucket.com/albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg
54.230.111.3200 OK 4.9 kB URL HTTP/2 i201.photobucket.com/albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c6c76fcf4ffd6658b4893c0405dc02d3
0b0a369f0d123ac67538d5907eea502aa4ed7abc
5aef020176c73cdb03c6ca4f289b18fd3f68ebf571049a075d9be8e0ef3f39ba
GET /albums/aa116/melbieaz/Blog%20Buttons/melbutton.jpg HTTP/1.1
Host: i201.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4934
date: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="melbutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:14 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-237f96a76d7710665f6527a9
x-request-id: mds-lo5G73_qVNrpOT9uI
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FZ02w3ZR9aV0sVZ9K0h3iwZeYIJw0IuOf2FMhaUNZJJoanLNlnvpjw==
vary: Accept, Origin
X-Firefox-Spdy: h2
s616.photobucket.com/albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif
54.230.111.84301 Moved Permanently 167 B URL HTTP/1.1 s616.photobucket.com/albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif
IP 54.230.111.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif HTTP/1.1
Host: s616.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://s616.photobucket.com/albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif
X-Cache: Redirect from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: j9ILHDgLn7mpoD9dPCHIaHd0j6QPqIzhYI7lQujqQC9yAcXN3LMWzw==
Cache-Control: no-cache
server: Photobucket
Vary: Origin
s616.photobucket.com/albums/tt242/sbclientlayoutimages/middayescapades/button.png
54.230.111.84301 Moved Permanently 167 B URL HTTP/1.1 s616.photobucket.com/albums/tt242/sbclientlayoutimages/middayescapades/button.png
IP 54.230.111.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt242/sbclientlayoutimages/middayescapades/button.png HTTP/1.1
Host: s616.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://s616.photobucket.com/albums/tt242/sbclientlayoutimages/middayescapades/button.png
X-Cache: Redirect from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2-tiukxzenLyMsYSfOqlbxFnWixdGkizXnpTM9lC27ujyooqEc4Byg==
Cache-Control: no-cache
server: Photobucket
Vary: Origin
i.imgur.com/xQwdY.gif
151.101.244.193301 Moved Permanently 0 B IP 151.101.244.193:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xQwdY.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://i.imgur.com/xQwdY.gif
Accept-Ranges: bytes
Date: Mon, 20 Feb 2023 05:08:14 GMT
X-Served-By: cache-hel1410025-HEL
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1676869695.833456,VS0,VE0
Strict-Transport-Security: max-age=300
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Server: cat factory 1.0
i370.photobucket.com/albums/oo148/audreyscountrycrafts/AGB%20graphics/175.jpg
54.230.111.3200 OK 7.2 kB URL HTTP/1.1 i370.photobucket.com/albums/oo148/audreyscountrycrafts/AGB%20graphics/175.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2bfe6ecd2f6b045be11a7ef85fb3e64a
ad1a3dc27c2e00b70d04d04167e4e8ad29d47382
5dff8f79854f4da67e5524cb128042e51bd1f0c7d0956fb19bdcb7ced3873596
GET /albums/oo148/audreyscountrycrafts/AGB%20graphics/175.jpg HTTP/1.1
Host: i370.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 7248
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="175.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:14 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003e-73bff2574c90941139e4024c
X-Request-Id: hFYylsUCrvHrUIo6JG7wW
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xT66sI4BbUJiOd8i1U5O_WBvqA2J-b2SB7Oy6cJ3QmM8sqtaGsVCmQ==
i290.photobucket.com/albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i290.photobucket.com/albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png HTTP/1.1
Host: i290.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i290.photobucket.com/albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png
X-Cache: Redirect from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: GcjJc0fe3PVv_Yv3GeAh1UzKa7m2rWWv9ShJKPf9kGP8KGS8V4rG5g==
Vary: Origin
www.thesuburbanmom.com/wp-content/themes/Organic/images/thesuburbanmom_button.png
104.18.6.55301 Moved Permanently 0 B URL HTTP/1.1 www.thesuburbanmom.com/wp-content/themes/Organic/images/thesuburbanmom_button.png
IP 104.18.6.55:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/themes/Organic/images/thesuburbanmom_button.png HTTP/1.1
Host: www.thesuburbanmom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:14 GMT
Location: https://www.thesuburbanmom.com/wp-content/themes/Organic/images/thesuburbanmom_button.png
Set-Cookie: __cf_bm=IcgaABeZ9ufgGs.nfgbe0bnq0zBs0dW9AJmk1o5k5q0-1676869694-0-Aa1xSJ2g/57yxmEgpcCJ5KVbnn5OdGCewAeI2//a9hut7ICrC1XGQeI6CapcmEpMBn8Om578l5sdwTRM016pfKQ=; path=/; expires=Mon, 20-Feb-23 05:38:14 GMT; domain=.www.thesuburbanmom.com; HttpOnly; SameSite=None
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79c4b928fa39b503-OSL
alt-svc: h2=":443"; ma=60
i201.photobucket.com/albums/aa116/melbieaz/melbutton-2.jpg
54.230.111.3200 OK 4.2 kB URL HTTP/2 i201.photobucket.com/albums/aa116/melbieaz/melbutton-2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 15b055e86c0ad3528e0f82810d0a8d6e
7c711506d8bbe79d6f0e21af209e68a58c2d774a
604f44e54da3613579685f5eff01a5193abc959d311a90f39a8e07aa1014c3cd
GET /albums/aa116/melbieaz/melbutton-2.jpg HTTP/1.1
Host: i201.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4204
date: Mon, 20 Feb 2023 05:08:14 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="melbutton-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:14 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-1a44f765083ff1561c4d7d29
x-request-id: vE5IZYXnl2mNrSv1TyMhu
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -sWFdu-2i3cocdmc4kYS8eY8quzgdD77wd0a70vkGRx6H3VuxZpl4g==
vary: Accept, Origin
X-Firefox-Spdy: h2
i107.photobucket.com/albums/m300/linder4/over40button3-3.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i107.photobucket.com/albums/m300/linder4/over40button3-3.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/m300/linder4/over40button3-3.jpg HTTP/1.1
Host: i107.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i107.photobucket.com/albums/m300/linder4/over40button3-3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -aulBZBi9M_CmLsWXubQF6TAOXyHQu3bL1w-RBLqiaqlmkp_c5WYIg==
Vary: Origin
img163.imageshack.us/img163/8426/tnrbutton.gif
38.99.77.16404 Not Found 168 B URL HTTP/1.1 img163.imageshack.us/img163/8426/tnrbutton.gif
IP 38.99.77.16:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img163/8426/tnrbutton.gif HTTP/1.1
Host: img163.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
www.linkreferral.com/images/linkreferal/linkbutton.gif
167.114.57.160404 Not Found 231 B URL HTTP/1.1 www.linkreferral.com/images/linkreferal/linkbutton.gif
IP 167.114.57.160:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 93f34028d003c9e64874abbb21743cea
5f3f41ef614e3600996158934deb0b72b48e5c6c
2d3dba476391f322c5f43acb52b82ba60d71084c773bb1524c13c6bf873015bd
GET /images/linkreferal/linkbutton.gif HTTP/1.1
Host: www.linkreferral.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 231
Connection: keep-alive
i107.photobucket.com/albums/m300/linder4/over40pic3-2.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i107.photobucket.com/albums/m300/linder4/over40pic3-2.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/m300/linder4/over40pic3-2.jpg HTTP/1.1
Host: i107.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i107.photobucket.com/albums/m300/linder4/over40pic3-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _CH6cLSEiYDf0hOVboWgECty6FDnWaTxTZIfUiQaX9jWeqdodtkMnw==
Vary: Origin
i598.photobucket.com/albums/tt66/shimmermeblue/125.jpg
54.230.111.3403 Forbidden 275 B URL HTTP/1.1 i598.photobucket.com/albums/tt66/shimmermeblue/125.jpg
IP 54.230.111.3:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash 8adc7e1e3472ad053a9a94b730e459be
55ee63b23f27c6a8c5fb380384995209d3459f83
1918538125458ddd26365a30f6ceabbd55064961eaffa845cce4d3016c51a61d
GET /albums/tt66/shimmermeblue/125.jpg HTTP/1.1
Host: i598.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KUV-091NDLzgG7PCxlPbCpvSD5HlCQCYOcxtFQ7yZKvPxJTF1UqJrg==
marvelousmommy.com/wp-content/uploads/Button/MM_Button.gif
162.144.28.62301 Moved Permanently 274 B URL HTTP/1.1 marvelousmommy.com/wp-content/uploads/Button/MM_Button.gif
IP 162.144.28.62:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c94117ae43864ef68644fc5d051f48c1
df8dd49d4cc683e13d561345d7dd4458eb5cbef8
a05b7377a070e6c88ddd7a2730ed30d612e5901a927812751fc9ced965c5d40a
GET /wp-content/uploads/Button/MM_Button.gif HTTP/1.1
Host: marvelousmommy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: Apache
Location: https://marvelousmommy.com/wp-content/uploads/Button/MM_Button.gif
Content-Length: 274
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
i1090.photobucket.com/albums/i369/disney5274/AD-5.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i1090.photobucket.com/albums/i369/disney5274/AD-5.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/i369/disney5274/AD-5.png HTTP/1.1
Host: i1090.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1090.photobucket.com/albums/i369/disney5274/AD-5.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Phzln6jhT1ND_FGgiNRe8k6F7ZvhZ6gY8D9Oc0vNIJr8IL2hcleX2g==
Vary: Origin
i867.photobucket.com/albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i867.photobucket.com/albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg HTTP/1.1
Host: i867.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i867.photobucket.com/albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jiDM9qwUVfTnlV11s6sTJOTxCnV9IqVP5tyVJLgxbHgOWSYPZAxF4w==
Vary: Origin
www.giveawayscout.com/
172.104.4.142200 OK 16 kB IP 172.104.4.142:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (45635), with CRLF, LF line terminators
Hash aeec2868f94379eba890cdcaf90cdb9e
5c27dc56de6e0357a587a140a698d5fa7e1d2d2f
a7a0f900335e91e543f389af3bf504b3b1eb09982bb9061ca09133142e4ff567
GET / HTTP/1.1
Host: www.giveawayscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
x-powered-by: PHP/7.4.33
content-type: text/html; charset=UTF-8
link: <https://www.giveawayscout.com/wp-json/>; rel="https://api.w.org/", <https://www.giveawayscout.com/wp-json/wp/v2/pages/18>; rel="alternate"; type="application/json", <https://www.giveawayscout.com/>; rel=shortlink
etag: "61731-1676343990;br"
x-litespeed-cache: hit
content-encoding: br
vary: Accept-Encoding
content-length: 15552
date: Mon, 20 Feb 2023 05:08:12 GMT
server: LiteSpeed
strict-transport-security: max-age=63072000; includeSubDomains; preload
content-security-policy: upgrade-insecure-requests
X-Firefox-Spdy: h2
i254.photobucket.com/albums/hh95/snowbabe81/th_MamaSnowDrift.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i254.photobucket.com/albums/hh95/snowbabe81/th_MamaSnowDrift.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/hh95/snowbabe81/th_MamaSnowDrift.jpg HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i254.photobucket.com/albums/hh95/snowbabe81/th_MamaSnowDrift.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ea_YUVbPBqw1VKi8MZ9S4obB6quk6Fe_jVOBi9ficwsK_MsrINYntA==
Vary: Origin
simplybeingmommy.com/wp-content/uploads/2010/10/SBM-Button.png
67.225.188.97301 Moved Permanently 278 B URL HTTP/1.1 simplybeingmommy.com/wp-content/uploads/2010/10/SBM-Button.png
IP 67.225.188.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1dba691831b5966bf2f69ccfd5d473f7
effbfc9320dca40c879073ef3701f2862affa86b
b13ca6036b0981bda6bb4ac2ed9f34edae4cd2f80492860e1e3bca4104c8e7ba
GET /wp-content/uploads/2010/10/SBM-Button.png HTTP/1.1
Host: simplybeingmommy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:14 GMT
Server: Apache
Location: https://simplybeingmommy.com/wp-content/uploads/2010/10/SBM-Button.png
Cache-Control: max-age=600
Expires: Mon, 20 Feb 2023 05:18:14 GMT
Content-Length: 278
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
s3.postimage.org/1t47mi.jpg
46.229.175.90301 Moved Permanently 0 B URL HTTP/1.1 s3.postimage.org/1t47mi.jpg
IP 46.229.175.90:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1t47mi.jpg HTTP/1.1
Host: s3.postimage.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://s3.postimg.cc/m6rkx6l9r/1t47mi.jpg
www.blogoversary.com/button.php?born_date=2009-10-20
104.21.46.241302 Found 611 B URL HTTP/1.1 www.blogoversary.com/button.php?born_date=2009-10-20
IP 104.21.46.241:0
File type HTML document text\012- exported SGML document, ASCII text
Hash 0bcc9d1ee9d42d66d70b79056dc4b9c3
0dd27d2400f0b92a7ea0c6a4d30cc1ad4b9c0abf
269177195ef2eb70701c373af30f330aff24534bb5a60f03ccb88403da908807
GET /button.php?born_date=2009-10-20 HTTP/1.1
Host: www.blogoversary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 302 Found
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
x-powered-by: PHP/7.4.33
location: /
vary: Accept-Encoding
cache-control: no-cache, no-store, must-revalidate, max-age=0
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rp5honF87Qz5tJSniGF2etVCc%2BpoHZqBJ5hFvn%2BAMetbG2Qhn46EXlG6ScL3oN3LKE9uPeQivr8%2Bbr%2BS8jv1AR3oVwhZfEqtJc2aN8IM0xzwzta%2Ft5ze22DjdRyxYt64RctFxjC1qA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79c4b9274e850b65-OSL
alt-svc: h2=":443"; ma=60
i254.photobucket.com/albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i254.photobucket.com/albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i254.photobucket.com/albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IvSoqAw0MG7a2mNOFWtSQ7y8ALe-wrt7jSSHDjbih7AyXp_0RIq5jg==
Vary: Origin
i110.photobucket.com/albums/n120/dragonfly101201/Album%202/button-1-3.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i110.photobucket.com/albums/n120/dragonfly101201/Album%202/button-1-3.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/n120/dragonfly101201/Album%202/button-1-3.jpg HTTP/1.1
Host: i110.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i110.photobucket.com/albums/n120/dragonfly101201/Album%202/button-1-3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5ZEkxQOcZUoosLViPV5lzHdH1gS0AmAkrwkNi281CLsi2aYHMlso_Q==
Vary: Origin
i777.photobucket.com/albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i777.photobucket.com/albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png HTTP/1.1
Host: i777.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i777.photobucket.com/albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LKvaid7UvH-W6RqZoHYILVMC4UaaLfiboebgVOb_huUI3zkJcTDTyA==
Vary: Origin
i565.photobucket.com/albums/ss91/sheake_dub/gs2.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i565.photobucket.com/albums/ss91/sheake_dub/gs2.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ss91/sheake_dub/gs2.png HTTP/1.1
Host: i565.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i565.photobucket.com/albums/ss91/sheake_dub/gs2.png
X-Cache: Redirect from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hWICIvJBQ0Sjz3bqwVAEM3NEg-rFA2qw-Ogk4qgE5UiDFYuS7f3WwA==
Vary: Origin
i988.photobucket.com/albums/af5/Massholemommy/button-1.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i988.photobucket.com/albums/af5/Massholemommy/button-1.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/af5/Massholemommy/button-1.png HTTP/1.1
Host: i988.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i988.photobucket.com/albums/af5/Massholemommy/button-1.png
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R9PGHDorsmX1fZhURaSKYZxUFwmlTAqDjvSaDrqEnhQImi90PCJghQ==
Vary: Origin
i270.photobucket.com/albums/jj112/crystalpw/blue2.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i270.photobucket.com/albums/jj112/crystalpw/blue2.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/jj112/crystalpw/blue2.jpg HTTP/1.1
Host: i270.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i270.photobucket.com/albums/jj112/crystalpw/blue2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: TX1cvsfa8uESOvZrFHtCott4NSdK6qpxubpnvtEH3gZZC0-3sjCUBA==
Vary: Origin
i231.photobucket.com/albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg
54.230.111.3200 OK 4.2 kB URL HTTP/2 i231.photobucket.com/albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 18e0c94582691e867a63bd05542e7295
737e725a410b40e14bae27e9cd0cbe79cc9e8a22
cf9c4838e6c9b4ac0a7810676e806df08ab7ffa072d372d2c13c93d935139736
GET /albums/ee180/juliewuliee/Headers%202/stay%20calm/link.jpg HTTP/1.1
Host: i231.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 4214
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="link.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-30d4b16d447693280f75f0b3
x-request-id: e7oHxd9rcqc8YidSLac4D
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: G9efOK85rA7NXtTkAdYAmBCWT6xRZ0bJVX8YC-u7p2tUpVomUv3Www==
vary: Accept, Origin
X-Firefox-Spdy: h2
i107.photobucket.com/albums/m300/linder4/over40button3-3.jpg
54.230.111.3200 OK 4.7 kB URL HTTP/2 i107.photobucket.com/albums/m300/linder4/over40button3-3.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 808c67d53ae9bb3a22f0ce0d68e273e3
e4d3b584a7f5fc7c34029707cae85ed5458fed15
7c51bda0f9c7d291b41dc91950503878b26a951ec09a911c45f3894bdd6766e3
GET /albums/m300/linder4/over40button3-3.jpg HTTP/1.1
Host: i107.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4736
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="over40button3-3.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-67027b5e7fcc8b564e08cfdf
x-request-id: IFyoQw2QzR69PpYry5kEq
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o4Kxtga9QoaHmqoo0hyGEtUgG2JRuuB8-oHyztjKW5UtMV3Ae1GLvg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i270.photobucket.com/albums/jj104/lgtoews/mommombutton.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i270.photobucket.com/albums/jj104/lgtoews/mommombutton.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/jj104/lgtoews/mommombutton.png HTTP/1.1
Host: i270.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i270.photobucket.com/albums/jj104/lgtoews/mommombutton.png
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: c3wQnskeiOQEurZsL7pp7-u1Ax968vfz-MOFd-Eb6YgzyoecpXZCPA==
Vary: Origin
i830.photobucket.com/albums/zz226/cutesieblogs/linkiebutton.png
54.230.111.17200 OK 6.4 kB URL HTTP/1.1 i830.photobucket.com/albums/zz226/cutesieblogs/linkiebutton.png
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7069f6f83cfbe1fe3c92cadd01b176c8
aabec67b84feea156c708fd4f02ab997326fe56c
7815927751ebe449e926077eb6094b880cff166ada9ae2b44db2b70c6b223ab2
GET /albums/zz226/cutesieblogs/linkiebutton.png HTTP/1.1
Host: i830.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 6366
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="linkiebutton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-702d33af63007e8a6d23747e
X-Request-Id: IsLP8mpknQ4PzRxEMNP7M
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KZl-IeRCIdxsJHuZ3y3_QKn2KPtx1Hkfb3s75nHwqNPVTnGEVxKE5A==
i107.photobucket.com/albums/m300/linder4/over40pic3-2.jpg
54.230.111.3200 OK 8.7 kB URL HTTP/2 i107.photobucket.com/albums/m300/linder4/over40pic3-2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4f6bb2b8e66e7b21bdff40f5c644326f
b89dbfe65f688a3fe49789172c654462a3c556d3
730e0b30a61d62015295009c9284cbf5ca60b714859f02d4fe4d8d460c0310a8
GET /albums/m300/linder4/over40pic3-2.jpg HTTP/1.1
Host: i107.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8726
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="over40pic3-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003e-0a49a5c358e83f3b67407df9
x-request-id: wIZWZNwY0OP6fRcIcIbzQ
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cI7pO1vy5vG5_F7fUTSuKhBOC9nMJTRCCCxSt6hvcqNzxIHUZ--0Pg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i607.photobucket.com/albums/tt155/ahappyhippy/ahappyhippymombutton.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i607.photobucket.com/albums/tt155/ahappyhippy/ahappyhippymombutton.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt155/ahappyhippy/ahappyhippymombutton.png HTTP/1.1
Host: i607.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i607.photobucket.com/albums/tt155/ahappyhippy/ahappyhippymombutton.png
X-Cache: Redirect from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9K8ccaA-Yl9yvf5-uCub2TpQT-yrZ6SmIun33SUhPMzzf9SEnJYJaQ==
Vary: Origin
img.photobucket.com/albums/v502/akalten/hoidayguide.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v502/akalten/hoidayguide.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v502/akalten/hoidayguide.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v502/akalten/hoidayguide.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: c-gan4skm3ORpnOxKbgCYgGij3Cy7_mM_0JQuQd7ifwDHpP6OFqM2w==
Vary: Origin
img.photobucket.com/albums/v502/akalten/OMSMButton2.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v502/akalten/OMSMButton2.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v502/akalten/OMSMButton2.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v502/akalten/OMSMButton2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SXb1rCXQZHYfDHQyNrkmupb9axtTJTeawJgErSsd20Up3QsM2zb0oQ==
Vary: Origin
i254.photobucket.com/albums/hh95/snowbabe81/th_MamaSnowDrift.jpg
54.230.111.3200 OK 5.6 kB URL HTTP/2 i254.photobucket.com/albums/hh95/snowbabe81/th_MamaSnowDrift.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7e4001d725ae701d2a0db5535d9d2237
52d8804a078b2904f8268bf7dad4046bb34773a2
4be445909595716eea69dfe21961bd8ffae2b0fd59a65e7bed484a3586053429
GET /albums/hh95/snowbabe81/th_MamaSnowDrift.jpg HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5624
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="MamaSnowDrift.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-1fad64291af5a0e853968504
x-request-id: Lr72KNTEYEGrerIjKGwM_
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z3QQJKZY3WO31ZIq3xy33c3YN-kx1HLo5WQehdMPfRGe00hO47kNGA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i73.photobucket.com/albums/i222/clairebear2323/blog%20design/365button.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i73.photobucket.com/albums/i222/clairebear2323/blog%20design/365button.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/i222/clairebear2323/blog%20design/365button.jpg HTTP/1.1
Host: i73.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i73.photobucket.com/albums/i222/clairebear2323/blog%20design/365button.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AWMzKoPv9ec0M3tNbwYoxH9p-polzxBVYm4F7438dZd5shQEXDeJqA==
Vary: Origin
img.photobucket.com/albums/v69/MomtoKennedy/shawnssharings.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v69/MomtoKennedy/shawnssharings.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v69/MomtoKennedy/shawnssharings.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v69/MomtoKennedy/shawnssharings.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4GMS4iysGBlb1ZAIti7eVpNGExvVTMzfzBzHHXYLiBZjKMfjpeUbwA==
Vary: Origin
i601.photobucket.com/albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i601.photobucket.com/albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png HTTP/1.1
Host: i601.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i601.photobucket.com/albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png
X-Cache: Redirect from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: A2_-p3Nv-43jY-ceQy4wnlZLHoV7OAH9UsdV2Z5NVJsWO2w87fCVXA==
Vary: Origin
img.photobucket.com/albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: RVdioly_gT4rqbjditsn4iW8YW8fG7Qs_iGWI8gD38FDFMU-Qci-4A==
Vary: Origin
i565.photobucket.com/albums/ss91/sheake_dub/gs2.png
54.230.111.3200 OK 4.9 kB URL HTTP/2 i565.photobucket.com/albums/ss91/sheake_dub/gs2.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5e69d649f21fa7d40b294b35a00db372
b9712970e1a4208a5241756403b351778270c5b6
2de1bb3a70d9fcdab0c37a68f683b959e4a305d34cdf37e75e52fddd77617c17
GET /albums/ss91/sheake_dub/gs2.png HTTP/1.1
Host: i565.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4894
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="gs2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-1b9ffb0955a72c3520fa1310
x-request-id: nGw4vJoAT_yTY4hKVVLXL
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y4j8CTWZrKuqhyjA4pO3RQ7M9U5I_k71ei6-kjUlJ67UMLkAUS6ckQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
img.photobucket.com/albums/v491/firecracker05/nightcap.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v491/firecracker05/nightcap.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v491/firecracker05/nightcap.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v491/firecracker05/nightcap.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cEf0zXR5T6jgo82h8hh-r5nVUhIoYaiFW6X_oEjU6P6Q0hBBB3iTjg==
Vary: Origin
i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png HTTP/1.1
Host: i902.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png
X-Cache: Redirect from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -odZvIzEZl9539lJ40r1OKPUA6CwMFnvlviBHwP8UCKmzEqJi0utRQ==
Vary: Origin
i448.photobucket.com/albums/qq207/abgk007/OBOBOBButtonSm.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i448.photobucket.com/albums/qq207/abgk007/OBOBOBButtonSm.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/qq207/abgk007/OBOBOBButtonSm.png HTTP/1.1
Host: i448.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i448.photobucket.com/albums/qq207/abgk007/OBOBOBButtonSm.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a0f63864791329e89a4b233ec4c3a36.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: SL6JK9DMQcpkS7vicuzHBwlxsoGuj-TfLzHzK8pxGCY1P8tdrm76PA==
Vary: Origin
img64.imageshack.us/img64/2517/buttonimage.jpg
38.99.77.16404 Not Found 168 B URL HTTP/1.1 img64.imageshack.us/img64/2517/buttonimage.jpg
IP 38.99.77.16:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img64/2517/buttonimage.jpg HTTP/1.1
Host: img64.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
i848.photobucket.com/albums/ab48/kayeshayne21/my%20photo%20shots/pink-background-with-film-clips-1.jpg
54.230.111.82200 OK 5.8 kB URL HTTP/1.1 i848.photobucket.com/albums/ab48/kayeshayne21/my%20photo%20shots/pink-background-with-film-clips-1.jpg
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1847ed86bc27296a0aa089e539f66509
7d6bb4df246aa125ebf3b75e1e05cf9df79efdc9
dc024dc40ffdcd559c895204e53a1acedb967edc683bf7410b8a5c9657fd8523
GET /albums/ab48/kayeshayne21/my%20photo%20shots/pink-background-with-film-clips-1.jpg HTTP/1.1
Host: i848.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5834
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="pink-background-with-film-clips-1.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-23f79d14266372237a37b0c4
X-Request-Id: 0V-B2yrqjoweOmU64xWFA
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 8o3lGjyRwUUfJZbNhILzbzGb3Xrlvrk1rCSxfUTjI3W3yNwCQ5GpVQ==
i254.photobucket.com/albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i254.photobucket.com/albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/hh91/customblogdesigns/SS/palmer/momstateofmind.png HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DlTMwWvlIPgvOmPPetBlPlP48GXANk6NBq1he5se0tpp2_TSaeNMwg==
age: 61890
X-Firefox-Spdy: h2
img.photobucket.com/albums/v22/mallrat/button.png
54.230.111.3200 OK 8.4 kB URL HTTP/2 img.photobucket.com/albums/v22/mallrat/button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash de93491eab665a6885c99553e0b4b52f
8117a404471c58e631e0ae642260ce73c46cf4bc
69553a91dc86b91102c886e1b972a4efa02c70025b850dcff27dac903847d4c7
GET /albums/v22/mallrat/button.png HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8414
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-1bc986423855c9b9178942d6
x-request-id: EFDVBtl4eiLzPBsdeqsGZ
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: peNigLu4ul8M0EuS8CD_E8Au30RNtGMTlyYeJz9Grgtk9WlqbQ5gQw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i988.photobucket.com/albums/af5/Massholemommy/button-1.png
54.230.111.3200 OK 3.9 kB URL HTTP/2 i988.photobucket.com/albums/af5/Massholemommy/button-1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f1cbd2a9de8b00970fd9b379f531acea
49f5ee08bcab064e89bd7dd40cb1871fe0057730
b5d0090e4d1ccb0fdc67b7e60e2da3ae9bc815b0942a5f986dd66bbe0cd6bd49
GET /albums/af5/Massholemommy/button-1.png HTTP/1.1
Host: i988.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3936
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-6d39da913ebc938903ae082c
x-request-id: PGIp-1ZDRHooNqfcTOeTV
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TCfUlGJHCvXUPzkpYRwJjZPIiJ8hIkyHISkP3jrQV43O98ZPG7uyGQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i743.photobucket.com/albums/xx75/dddiva62/blogbutton.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i743.photobucket.com/albums/xx75/dddiva62/blogbutton.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/xx75/dddiva62/blogbutton.jpg HTTP/1.1
Host: i743.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i743.photobucket.com/albums/xx75/dddiva62/blogbutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7pAKZMHt8_8wrWCM6tMSXFe-Sm4MbR9u-SbRngW7_1ElUYAYcVLKbQ==
Vary: Origin
strosgirldesigns.com/blogs/ppp/pppgr_button_atc.png
142.111.62.70200 OK 3.3 kB URL HTTP/1.1 strosgirldesigns.com/blogs/ppp/pppgr_button_atc.png
IP 142.111.62.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (2638), with CRLF line terminators
Hash 00b78a61888097b4d39d588721c0250f
417b99dfd9405a770606d599151fd0080035a5a4
6e2e3c0f9f2d3659ef45c014ebad5b93ef6e60b3098817719bec010236f29351
GET /blogs/ppp/pppgr_button_atc.png HTTP/1.1
Host: strosgirldesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: image/png
Content-Length: 3318
Last-Modified: Thu, 14 Oct 2021 00:53:34 GMT
Connection: keep-alive
ETag: "61677f8e-cf6"
Expires: Sat, 25 Feb 2023 05:08:13 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
strosgirldesigns.com/blogs/202lb/202lb_button_atc.jpg
142.111.62.70200 OK 3.3 kB URL HTTP/1.1 strosgirldesigns.com/blogs/202lb/202lb_button_atc.jpg
IP 142.111.62.70:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 (with BOM) text, with very long lines (2638), with CRLF line terminators
Hash 00b78a61888097b4d39d588721c0250f
417b99dfd9405a770606d599151fd0080035a5a4
6e2e3c0f9f2d3659ef45c014ebad5b93ef6e60b3098817719bec010236f29351
GET /blogs/202lb/202lb_button_atc.jpg HTTP/1.1
Host: strosgirldesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 20 Feb 2023 05:08:13 GMT
Content-Type: image/jpeg
Content-Length: 3318
Last-Modified: Thu, 14 Oct 2021 00:53:59 GMT
Connection: keep-alive
ETag: "61677fa7-cf6"
Expires: Sat, 25 Feb 2023 05:08:13 GMT
Cache-Control: max-age=432000
Accept-Ranges: bytes
opipdesigns.com/blogs/pip2/button.png
190.2.139.23200 OK 20 B URL HTTP/1.1 opipdesigns.com/blogs/pip2/button.png
IP 190.2.139.23:0
ASN #49981 WorldStream B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /blogs/pip2/button.png HTTP/1.1
Host: opipdesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
i785.photobucket.com/albums/yy138/aitmama/JustAnotherNewBlog.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i785.photobucket.com/albums/yy138/aitmama/JustAnotherNewBlog.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/yy138/aitmama/JustAnotherNewBlog.jpg HTTP/1.1
Host: i785.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i785.photobucket.com/albums/yy138/aitmama/JustAnotherNewBlog.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mSWFljpsWegTLHTRE5RtPUR7CRA03SLP7Z9D6jzzV5A3XPUv0ISyWw==
Vary: Origin
i250.photobucket.com/albums/gg242/yayaboutique/banner_130x130.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i250.photobucket.com/albums/gg242/yayaboutique/banner_130x130.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/gg242/yayaboutique/banner_130x130.jpg HTTP/1.1
Host: i250.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i250.photobucket.com/albums/gg242/yayaboutique/banner_130x130.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sbC9ZYrounuI1nzS2oCiGVaqjCljsfGeBOIIo7qbg4Rc3O0izDeE8Q==
Vary: Origin
img.photobucket.com/albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg
54.230.111.3200 OK 3.8 kB URL HTTP/2 img.photobucket.com/albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f8117e21f02e0c208546ca0e6e81b7db
9a0627f4a2985a6d16df66c84e21b47c245c21ba
4e38f0a35a2bf4a3a1b5024f3552d7d06732990be9629a9af4c718c4efa4738b
GET /albums/v357/luvlife26/blog/RedSoxMommyButtoncopy.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3762
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="RedSoxMommyButtoncopy.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-465d3659638fb68a21eabc63
x-request-id: fH-e3xpaCRwmsagxfIsee
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8-kRR8ULBDlTBLShmMQC83o_O_JCHhVYQTNy3wG14dvJXsUUjKX6ZQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i694.photobucket.com/albums/vv302/csblog711/FMMLogo125x125.png
54.230.111.3200 OK 5.5 kB URL HTTP/1.1 i694.photobucket.com/albums/vv302/csblog711/FMMLogo125x125.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1a4367fa3553a02b9e74185744fb365
e6a2c8a50903b57edfd2358dbe8b5927e0e01753
baf36488de2f41e3c6ace12ab81e391fec5d3dc596f7f3e8837e3e96ae50988c
GET /albums/vv302/csblog711/FMMLogo125x125.png HTTP/1.1
Host: i694.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5534
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="FMMLogo125x125.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-62ac2c58534948b23463b55b
X-Request-Id: TZ6ZaxWxD1C7LUpCgIE3d
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: OivA3RZkGjVeiW_B2AMqG_b-0GbSpRvSE4VdqYPR2ksuYU22-NHp1Q==
opipdesigns.com/blogs/cct/button.png
190.2.139.23200 OK 20 B URL HTTP/1.1 opipdesigns.com/blogs/cct/button.png
IP 190.2.139.23:0
ASN #49981 WorldStream B.V.
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /blogs/cct/button.png HTTP/1.1
Host: opipdesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
i783.photobucket.com/albums/yy116/menonewmom/mnmbutton.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i783.photobucket.com/albums/yy116/menonewmom/mnmbutton.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/yy116/menonewmom/mnmbutton.png HTTP/1.1
Host: i783.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i783.photobucket.com/albums/yy116/menonewmom/mnmbutton.png
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6QbGzsXcjgWUEbBi44KAsDQHIYADuU1734hHQrJI89DhTpamVo-2GQ==
Vary: Origin
img.photobucket.com/albums/v491/firecracker05/nightcap.jpg
54.230.111.3200 OK 4.1 kB URL HTTP/2 img.photobucket.com/albums/v491/firecracker05/nightcap.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4da11e937333b96b88582d9d45a93018
627617154a431631735b8a18c56c981e8df730e7
1af883755e20ff5db44062eeebf0640f226998418913ecbaf3224ffc64f6bdca
GET /albums/v491/firecracker05/nightcap.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4138
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="nightcap.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-31e527b43b4a53104b3cc612
x-request-id: 09ruwdth_qPRzUCn9hKb8
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: jip8AJ2l-PWuhMt6Dmr4BQJC1YtXOiGzAiX0OVSlRCcrVwONSavKTw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i919.photobucket.com/albums/ad33/fefemarie09/buttonn.png
54.230.111.82403 Forbidden 243 B URL HTTP/1.1 i919.photobucket.com/albums/ad33/fefemarie09/buttonn.png
IP 54.230.111.82:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash ef9eeb845c2c373c9251c025801cc226
547957d518441f7d5a7a1f43a6a4351144caaa82
6e394adc6784259cfbd1054a0bf7cf58e90ae8d7372d696731157662d015dca9
GET /albums/ad33/fefemarie09/buttonn.png HTTP/1.1
Host: i919.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CF2z0fay4Z38y53b0ZGzw3Mkcb7uvqRGydpE575tfnfO57hRwZleYQ==
i472.photobucket.com/albums/rr82/deniseweber/Grab_button.png
54.230.111.106200 OK 6.0 kB URL HTTP/1.1 i472.photobucket.com/albums/rr82/deniseweber/Grab_button.png
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6478d019126f295d525473582af23521
0d0041476f2db7b4950d5cafe6d4e955636982fd
78642d2866b92337993f918cc26874beee62f4fedb60243e0019ea65013f6d2a
GET /albums/rr82/deniseweber/Grab_button.png HTTP/1.1
Host: i472.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5960
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="Grab_button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-5d6d55d03f94dcb15381f4c4
X-Request-Id: wPen6CG7mERmR27rzHy8h
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vCkCy1sSAUAa0hfrovZJu2ZbcTRidauH4QbkPn1O2zCYdpubc92s2w==
i45.tinypic.com/9a7qty.jpg
54.230.111.108301 Moved Permanently 0 B URL HTTP/1.1 i45.tinypic.com/9a7qty.jpg
IP 54.230.111.108:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /9a7qty.jpg HTTP/1.1
Host: i45.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: z3zO94vNe0NM3D0WR-sY_kgutopoChDDjbQBUtFYsBUD91nGKdE7Hw==
i668.photobucket.com/albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i668.photobucket.com/albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg HTTP/1.1
Host: i668.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i668.photobucket.com/albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: x_AY0HoVOxk0nw928cCHQ-9FSYa-77j_CBdws0fjF0KoFDqkxc1tIg==
Vary: Origin
i954.photobucket.com/albums/ae28/MyFourMonkeys_photo/buttonnew.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i954.photobucket.com/albums/ae28/MyFourMonkeys_photo/buttonnew.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ae28/MyFourMonkeys_photo/buttonnew.jpg HTTP/1.1
Host: i954.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i954.photobucket.com/albums/ae28/MyFourMonkeys_photo/buttonnew.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p5TOZ0kbqJSM96aStr-Q5qDD8VB8zISVcp_CslPCLgtweTD5-ak6iA==
Vary: Origin
img.photobucket.com/albums/v502/akalten/OMSMButton2.jpg
54.230.111.3200 OK 5.7 kB URL HTTP/2 img.photobucket.com/albums/v502/akalten/OMSMButton2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7448b8c8c6daefea1779c78dad550153
10349fa33a9e02dec5334116dbdd54e7490c4cd1
6d2281f8be116187f3560cb4989deb0699d7f21499b94999e8e8d89435918ad9
GET /albums/v502/akalten/OMSMButton2.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5712
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="OMSMButton2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-6739662c33ab72a353161986
x-request-id: ihViLe4p09SotQYRGSJqK
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Es7s3igxNUwJG_7mXeBCa-67cnQFEYcXyxSXqoVSLH7FM5Ljen4ycw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i601.photobucket.com/albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i601.photobucket.com/albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/tt94/memoriesbydesign/Money%20Saving%20Maine/BlogButton.png HTTP/1.1
Host: i601.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QNPzV8le0PLJnuiXnWRYUXin5vjlWgAQQff1UVFckyneMZ2ZU0KkjQ==
age: 61890
X-Firefox-Spdy: h2
img.photobucket.com/albums/v69/MomtoKennedy/shawnssharings.jpg
54.230.111.3200 OK 5.3 kB URL HTTP/2 img.photobucket.com/albums/v69/MomtoKennedy/shawnssharings.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a8bd11c21d3ad83d06a85ca823000a3a
c31bcfb96204e8e50b8dc68903dfac2cfae3c912
987d8064f3d16d7f379a0308f780da82a61559eeb5a790b3d5ee73c61e357126
GET /albums/v69/MomtoKennedy/shawnssharings.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5250
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="shawnssharings.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-1abfb2861ce2dd0a08e64694
x-request-id: Ad_krPcWTCVZisQ_srcN2
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ns3xyuXantmq53LgzKIY4pYAttFb_PcQNdz9fZlTTBp_TV3Q_JbLZw==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.thesitewizard.com/images/tsw88x31pow.gif
69.5.9.180301 Moved Permanently 327 B URL HTTP/1.1 www.thesitewizard.com/images/tsw88x31pow.gif
IP 69.5.9.180:0
ASN #22915 FUTUREQUEST-INC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 213f50d942404d9d18d1cc0d11bc7299
d45c4095c86a4b073852186dd82d67df0d438a9c
90e37c3833a4efa1e8832a6f969bf426fa2e35cc76cd71498ad1b3be35429a9f
GET /images/tsw88x31pow.gif HTTP/1.1
Host: www.thesitewizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Location: https://www.thesitewizard.com/images/tsw88x31pow.gif
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=iso-8859-1
i449.photobucket.com/albums/qq217/simplyandreah/button.png
54.230.111.17200 OK 3.9 kB URL HTTP/1.1 i449.photobucket.com/albums/qq217/simplyandreah/button.png
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 13106d1fcbb184e0f1ee21d0b64b5b8e
389c4dabe13dbe9c4f8ed74aa3ce08afd9da7959
fc384381473b485d7000e1ec3f003506d0829b67617af6d068d8759627c90cfc
GET /albums/qq217/simplyandreah/button.png HTTP/1.1
Host: i449.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3912
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-20561235667c89c7537b94d0
X-Request-Id: 2gCXTvoG9rIFX5R8uHV-i
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qPXoHjFSfuAh74vrMf_ujZn957yOOJQ3hRLqytFUN_gu653usokRsg==
i871.photobucket.com/albums/ab277/cutepea/Button.jpg
54.230.111.106200 OK 3.5 kB URL HTTP/1.1 i871.photobucket.com/albums/ab277/cutepea/Button.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 578d75fff5ed23a768e98544946d1cf8
8b2df10f71843b980498ebe0bff5c754732bfac7
a076e3563d99e6e0079b0e9cc38e9fc2208d0f2d39b017d19b428257b14675bc
GET /albums/ab277/cutepea/Button.jpg HTTP/1.1
Host: i871.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3450
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="Button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-14bcda174383bc4025d3a483
X-Request-Id: OlrK2zMuCWTsk4wWtx3or
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: B8jY_gC1926BTLisCzfWa2ogtjAzWEmwpZdKp5i4h8QjxCWVb3J0yw==
i40.tinypic.com/16ia87c.jpg
54.230.111.108301 Moved Permanently 0 B URL HTTP/1.1 i40.tinypic.com/16ia87c.jpg
IP 54.230.111.108:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /16ia87c.jpg HTTP/1.1
Host: i40.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 2Ts-nuZAmvStLAuNbd6TTvnNJKMj2Pw5-9ySSzxaNBhQNqdjNexbhg==
i595.photobucket.com/albums/tt37/mjblog09/energizerbunnybutton.gif
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i595.photobucket.com/albums/tt37/mjblog09/energizerbunnybutton.gif
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt37/mjblog09/energizerbunnybutton.gif HTTP/1.1
Host: i595.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i595.photobucket.com/albums/tt37/mjblog09/energizerbunnybutton.gif
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jtF_J5vbooG35VCHa3188onAb4Jcx8uqPyFz4NPqbsA5o8taB3zdAg==
Vary: Origin
i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/ac224/neuffj/Completed%20Desgnz/Button-24.gif HTTP/1.1
Host: i902.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4ol6gZcNxRZKLV_Eb1X0N-0zJdd8_pnkuD4mAVGZyWnMZrM4GmxZ5g==
age: 61890
X-Firefox-Spdy: h2
i649.photobucket.com/albums/uu213/thewannabewahm/bella_button.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i649.photobucket.com/albums/uu213/thewannabewahm/bella_button.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/uu213/thewannabewahm/bella_button.png HTTP/1.1
Host: i649.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i649.photobucket.com/albums/uu213/thewannabewahm/bella_button.png
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -Rpp0XknDl4-MO_7y57qAeJvfnFzm3gs2KwO8nKr-3y_6RuWJ6-hQA==
Vary: Origin
i150.photobucket.com/albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i150.photobucket.com/albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg HTTP/1.1
Host: i150.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i150.photobucket.com/albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: xz4zlgXgxXn4oBYDzhDZwof5aeT9RiOl6GvWLmUqIuS61pZP5UCDiQ==
Vary: Origin
i117.photobucket.com/albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i117.photobucket.com/albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg HTTP/1.1
Host: i117.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i117.photobucket.com/albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DTzsoUi3RRchoCQCpxbRp4xCuYGbAhpnIDGFDx4zlJ4CX-avBMIzvg==
Vary: Origin
i689.photobucket.com/albums/vv256/fairyblogmotherblog/LOGO/spoilyourfamily.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i689.photobucket.com/albums/vv256/fairyblogmotherblog/LOGO/spoilyourfamily.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/vv256/fairyblogmotherblog/LOGO/spoilyourfamily.jpg HTTP/1.1
Host: i689.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i689.photobucket.com/albums/vv256/fairyblogmotherblog/LOGO/spoilyourfamily.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sveAuykvD8KNnBI8PJlaECXtDMACE-LNxxq7Fvc0h5WCXzbYyptJXQ==
Vary: Origin
i915.photobucket.com/albums/ac357/internationalgiveaways/international-giveaways-button.gif
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i915.photobucket.com/albums/ac357/internationalgiveaways/international-giveaways-button.gif
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ac357/internationalgiveaways/international-giveaways-button.gif HTTP/1.1
Host: i915.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i915.photobucket.com/albums/ac357/internationalgiveaways/international-giveaways-button.gif
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Jn7O6kutmtd3jZXxkyPZQgKEwm4rUABPGA81fWY3v0zG1BOi22k4Bg==
Vary: Origin
www.thebrandambassador.com/wp-content/uploads/2010/09/Brand-ambassador-button-copy.png
54.161.222.85404 Not Found 9.4 kB URL HTTP/1.0 www.thebrandambassador.com/wp-content/uploads/2010/09/Brand-ambassador-button-copy.png
IP 54.161.222.85:0
Hash 3fd3e560ce5f98cc523889b25e36b2e6
bf2ba6af9733e635e16fafe7420c5acb1d939554
8df3678dde413f65bd68ad3c0da12bd7a7951406dc7b2b95c6bc89d47da41fcb
GET /wp-content/uploads/2010/09/Brand-ambassador-button-copy.png HTTP/1.1
Host: www.thebrandambassador.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
i863.photobucket.com/albums/ab197/kellymalinowski/betweenthelines.png
54.230.111.82200 OK 3.8 kB URL HTTP/1.1 i863.photobucket.com/albums/ab197/kellymalinowski/betweenthelines.png
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d1783ca4f74bc54ecee42b434dbec857
7878dc62de7babf6e4a8fc790c5cd29f8ab6982b
74d8ab957b9b3710416943dc68450fe7467d432e8c2a4d02e0c143ea687f76f6
GET /albums/ab197/kellymalinowski/betweenthelines.png HTTP/1.1
Host: i863.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3826
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="betweenthelines.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-4c4d29783610425d43f51c47
X-Request-Id: 2drZSQI3nzrhNkmmyPsB9
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4P3AqfKpYUzZBkm3YIzxSc7CX0R-xzvKRegnNAVOgxH7InaQDEIbgQ==
i593.photobucket.com/albums/tt14/lacadazy/Button-3.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i593.photobucket.com/albums/tt14/lacadazy/Button-3.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/tt14/lacadazy/Button-3.jpg HTTP/1.1
Host: i593.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i593.photobucket.com/albums/tt14/lacadazy/Button-3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vnRkTuLwhLB5OdHZGF6HGkjUxvZB7dZH281bmHL7VnKqhnoiWxTQDg==
Vary: Origin
i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png
54.230.111.3200 OK 8.6 kB URL HTTP/2 i902.photobucket.com/albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4474c40e0c40925922adcaa06152eb9b
dc0e6a10d14d4123352e2bcb82f6ed1396969d69
52102d75e631cb036c2034686bbb56cd5df34238943c8a12d6a036b9429bcf3e
GET /albums/ac224/neuffj/Completed%20Desgnz/Won-Button.png HTTP/1.1
Host: i902.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 8620
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Won-Button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-44c6cb437a84b9875808b175
x-request-id: eMDyy_APmZjot0jEMajBl
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: MfUjEup0juiaeHyAvFlQzRuoBS2hXHfu4Hpp5w3jbzCrt1dlSIo0LA==
vary: Accept, Origin
X-Firefox-Spdy: h2
lh3.ggpht.com/_6K1OQ_P-m1A/S-RusT6ZdcI/AAAAAAAACec/TFM_pbcM_1w/s800/Frugal-Creativity.jpg
142.250.74.161404 Not Found 832 B URL HTTP/1.1 lh3.ggpht.com/_6K1OQ_P-m1A/S-RusT6ZdcI/AAAAAAAACec/TFM_pbcM_1w/s800/Frugal-Creativity.jpg
IP 142.250.74.161:0
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_6K1OQ_P-m1A/S-RusT6ZdcI/AAAAAAAACec/TFM_pbcM_1w/s800/Frugal-Creativity.jpg HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
lh5.ggpht.com/_RfisH60dwTc/SyF5mGO3mMI/AAAAAAAAAiY/gKGJfzZKuQY/button.jpg
142.250.74.161200 OK 21 kB URL HTTP/1.1 lh5.ggpht.com/_RfisH60dwTc/SyF5mGO3mMI/AAAAAAAAAiY/gKGJfzZKuQY/button.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 125x125, components 3\012- data
Hash d0c5e260c8a80c753a749a51d1d590c7
c5e9c8094efe620a826a858856ed48bba208200f
c5c5018a850ec44ca7c37b046ac82bacaf637b9548647977f2530e4295c61aec
GET /_RfisH60dwTc/SyF5mGO3mMI/AAAAAAAAAiY/gKGJfzZKuQY/button.jpg HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="button.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 21029
X-XSS-Protection: 0
Date: Mon, 20 Feb 2023 05:08:15 GMT
Expires: Sat, 18 Feb 2023 00:56:02 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v226"
Content-Type: image/jpeg
Vary: Origin
Age: 0
img.photobucket.com/albums/v502/akalten/hoidayguide.jpg
54.230.111.3200 OK 44 kB URL HTTP/2 img.photobucket.com/albums/v502/akalten/hoidayguide.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1ff8aef0ef44c66b5293ee2826a08192
d5468729410676ded1237ff89d9e8e18a65e514d
9dc25a534be8c9a8b906882342edbca0e68920c3163cf1145652bb52e0ea05f0
GET /albums/v502/akalten/hoidayguide.jpg HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 43926
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="hoidayguide.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-505e0f3c3877966934669027
x-request-id: 0jM8T2rqH17wpdCLUWkek
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BhfkCO4iGOEropH4Ez-BpnWlYyGVqYlpyGILQLv51pHMTCvdqD4mwA==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.angelavinezdesigns.com/weeshare125.jpg
192.185.225.47500 Internal Server Error 695 B URL HTTP/1.1 www.angelavinezdesigns.com/weeshare125.jpg
IP 192.185.225.47:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b352ba73159f215da043a28638813742
e04683ca52a306c0bd7fdc61439b2ebcbdbc066d
e13407cf1f9f879518f741cef11c4bc58e8e844088bf05c7865166eef68fb5c9
GET /weeshare125.jpg HTTP/1.1
Host: www.angelavinezdesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 500 Internal Server Error
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Content-Length: 695
Connection: close
Content-Type: text/html; charset=iso-8859-1
i972.photobucket.com/albums/ae209/tberbells/Custom%20Blog%20Design/tammysbutton.gif
54.230.111.3200 OK 7.6 kB URL HTTP/1.1 i972.photobucket.com/albums/ae209/tberbells/Custom%20Blog%20Design/tammysbutton.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 160 x 160\012- data
Hash cf4f6c498a3d58cc11a7fc76a0dd1c07
4f900ecfc40c108656f47e36ace4f872aa7efd30
192be2113ee6c50de7889e1e792733b0bf282a8eff51592658c828b3f6d68d4a
GET /albums/ae209/tberbells/Custom%20Blog%20Design/tammysbutton.gif HTTP/1.1
Host: i972.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 7565
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="tammysbutton.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-558d507b76bb96fd6671838f
X-Request-Id: kxrsG4oZKuMdu5ku4EyTF
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7QWRAGB7CkYk06O0djLauiJC6U6NKotHygkhiM327uJ4KH9B3g2clw==
i650.photobucket.com/albums/uu227/StephHolmes/button.jpg
54.230.111.106200 OK 5.0 kB URL HTTP/1.1 i650.photobucket.com/albums/uu227/StephHolmes/button.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6ff27a5ea1edde871a17a3171a4b3290
dd85bcc90ab3c235578261633782049c6f4f4c53
c2e5ed050f2f95d068769cba0bb48b786c27d0e743f9c1cf06a37d14bb493268
GET /albums/uu227/StephHolmes/button.jpg HTTP/1.1
Host: i650.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5036
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-633ec5975e06679155a499ed
X-Request-Id: ewUgUAB-355vKOL-XCrmJ
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eM6ptIEETNtdWZjka_1SrbflW_RnVgJZcH4S0cP9mI-GSQts7JsMBQ==
i743.photobucket.com/albums/xx75/dddiva62/blogbutton.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i743.photobucket.com/albums/xx75/dddiva62/blogbutton.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/xx75/dddiva62/blogbutton.jpg HTTP/1.1
Host: i743.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _Ndkswc9Uon9ULLe8dO2Q7c11tE-aZRHbWnBqWzZ-2XFFTv57vtmMw==
age: 61890
X-Firefox-Spdy: h2
i569.photobucket.com/albums/ss137/pinkdandyshop/pinkdandychatterbutton.jpg
54.230.111.106200 OK 5.1 kB URL HTTP/1.1 i569.photobucket.com/albums/ss137/pinkdandyshop/pinkdandychatterbutton.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 66a68fa19ef525ed38abc26a1045e224
fb0a150c6ff89e00d8ca768aec3c44a6a9bc540d
7e00c13fbf4bed8fcb4c4409db2420927d1221aeef4187bd422d6bb969f1a5a5
GET /albums/ss137/pinkdandyshop/pinkdandychatterbutton.jpg HTTP/1.1
Host: i569.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5054
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="pinkdandychatterbutton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-381efa8845d6fc5f5f56765c
X-Request-Id: wJ7TgLYKmG61YaFewP_2X
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: a0uK8A3vW8mN5368ab3L8B2tTejfaRjr7_4H8lrlTHdYRTBzVx07XA==
angelavinezdesigns.com/foodie125.jpg
192.185.225.47500 Internal Server Error 695 B URL HTTP/1.1 angelavinezdesigns.com/foodie125.jpg
IP 192.185.225.47:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b352ba73159f215da043a28638813742
e04683ca52a306c0bd7fdc61439b2ebcbdbc066d
e13407cf1f9f879518f741cef11c4bc58e8e844088bf05c7865166eef68fb5c9
GET /foodie125.jpg HTTP/1.1
Host: angelavinezdesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 500 Internal Server Error
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Content-Length: 695
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.angelavinezdesigns.com/melindajoy125.jpg
192.185.225.47500 Internal Server Error 695 B URL HTTP/1.1 www.angelavinezdesigns.com/melindajoy125.jpg
IP 192.185.225.47:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b352ba73159f215da043a28638813742
e04683ca52a306c0bd7fdc61439b2ebcbdbc066d
e13407cf1f9f879518f741cef11c4bc58e8e844088bf05c7865166eef68fb5c9
GET /melindajoy125.jpg HTTP/1.1
Host: www.angelavinezdesigns.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 500 Internal Server Error
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Content-Length: 695
Connection: close
Content-Type: text/html; charset=iso-8859-1
i632.photobucket.com/albums/uu50/wishingpenny/WishingPennyButton.png
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i632.photobucket.com/albums/uu50/wishingpenny/WishingPennyButton.png
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/uu50/wishingpenny/WishingPennyButton.png HTTP/1.1
Host: i632.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i632.photobucket.com/albums/uu50/wishingpenny/WishingPennyButton.png
X-Cache: Redirect from cloudfront
Via: 1.1 c2b101e67ac25a2f0013450d56ecac38.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: JadMwOyu_ql_Km31X8l8gaG-Jw4yvTy9W_QQbjf7dsB1VThZJy47bg==
Vary: Origin
www.skinmdnatural.com/affiliates/image.php?bid=46&mid=241
35.209.145.68301 Moved Permanently 162 B URL HTTP/1.1 www.skinmdnatural.com/affiliates/image.php?bid=46&mid=241
IP 35.209.145.68:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /affiliates/image.php?bid=46&mid=241 HTTP/1.1
Host: www.skinmdnatural.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.skinmdbotanical.com
Host-Header: 8441280b0c35cbc1147f8ba998a563a7
X-Proxy-Cache-Info: DT:1
i814.photobucket.com/albums/zz61/xmasdolly/Decorated%20images/th_retromusic1-1.gif
54.230.111.3200 OK 15 kB URL HTTP/1.1 i814.photobucket.com/albums/zz61/xmasdolly/Decorated%20images/th_retromusic1-1.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 159 x 159\012- data
Hash b36a0cf7fc484aa7287666af41e05570
3e95f8ac3c5a7fe3536de025c62de19c728809bd
197d28545a075d826fd9e515f0b518d2ab0cec777aa6247ba0172ee443909bf8
GET /albums/zz61/xmasdolly/Decorated%20images/th_retromusic1-1.gif HTTP/1.1
Host: i814.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 15321
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="retromusic1-1.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-44d7c8f468c3210a698ceb0d
X-Request-Id: _Q2otsbAL2imna3InSfRq
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 66-Hxa6hGeaQ1z3i6f0KiQjDbuBt_EuLoaWRwsb_wRddyRvpTwkLxQ==
i167.photobucket.com/albums/u134/supabisha/TWButton1.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i167.photobucket.com/albums/u134/supabisha/TWButton1.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/u134/supabisha/TWButton1.jpg HTTP/1.1
Host: i167.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i167.photobucket.com/albums/u134/supabisha/TWButton1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: aGZiowmcdBaytGQ1r8GwAVKqdohfeSDnvW7A-A0uERNmLWTtZCheQQ==
Vary: Origin
i807.photobucket.com/albums/yy359/LaDeDaaDesigns/buttoncopy-1.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i807.photobucket.com/albums/yy359/LaDeDaaDesigns/buttoncopy-1.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/yy359/LaDeDaaDesigns/buttoncopy-1.png HTTP/1.1
Host: i807.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i807.photobucket.com/albums/yy359/LaDeDaaDesigns/buttoncopy-1.png
X-Cache: Redirect from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nA5kNpQV-g7RcAAVvilvyeYZVrSa44-J1IiOommM7jMGGzad-9-fLQ==
Vary: Origin
i250.photobucket.com/albums/gg242/yayaboutique/banner_130x130.jpg
54.230.111.3200 OK 4.8 kB URL HTTP/2 i250.photobucket.com/albums/gg242/yayaboutique/banner_130x130.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2c97f46979c535ed3b91f569b7df774a
61b417e3ecc7b75c5f0e3aa7f01aadc57bfa861a
ddaa0608f9df5e401850b7fa7eab53154de3b33b0dd798a4b3f552e1592d5d3f
GET /albums/gg242/yayaboutique/banner_130x130.jpg HTTP/1.1
Host: i250.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4840
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="banner_130x130.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-7a984763702998e652d45620
x-request-id: EuTInRzAYr1P9xtzYvnBV
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _KpXUnjhVTdJjeICIKrt49BwwZ_j2OAQYRh2StgE1RiOMJ_C1-aQuA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i783.photobucket.com/albums/yy116/menonewmom/mnmbutton.png
54.230.111.3200 OK 9.3 kB URL HTTP/2 i783.photobucket.com/albums/yy116/menonewmom/mnmbutton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dc8f7b76f1288d66104f47facbacbb16
d1f270a467b54057eece45aedd0cbada20c0f22d
d2b72c872c2bf505d0b2e703c7cb2e2ef83b17bd2d31cacdf6beac4838eb5796
GET /albums/yy116/menonewmom/mnmbutton.png HTTP/1.1
Host: i783.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 9264
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="mnmbutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-49c7e48015d0cf6d3494a1fe
x-request-id: uKAfgwv_7g8V3pKhFsmAy
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s1ZHja4kgKc6oko-RdZzZoXMcGdH725Es7vqxyYPsbO51xLuYZCuTw==
vary: Accept, Origin
X-Firefox-Spdy: h2
simplybeingmommy.com/wp-content/uploads/2010/10/SBM-Button.png
67.225.188.97200 OK 16 kB URL HTTP/2 simplybeingmommy.com/wp-content/uploads/2010/10/SBM-Button.png
IP 67.225.188.97:0
File type PNG image data, 125 x 125, 8-bit/color RGBA, non-interlaced\012- data
Hash 5a8007f7c326f242ba9baca84c792e71
61c96293ea751d48ec61163d50026f23fb321e70
b55c415fe22f527e7833cf0bea7f50ad7623e00823f08762dc5cb2a81220d859
GET /wp-content/uploads/2010/10/SBM-Button.png HTTP/1.1
Host: simplybeingmommy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 13 Oct 2010 05:00:00 GMT
accept-ranges: bytes
content-length: 15602
cache-control: max-age=2592000
expires: Wed, 22 Mar 2023 05:08:15 GMT
content-type: image/png
date: Mon, 20 Feb 2023 05:08:15 GMT
server: Apache
X-Firefox-Spdy: h2
i1236.photobucket.com/albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i1236.photobucket.com/albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg HTTP/1.1
Host: i1236.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1236.photobucket.com/albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 4bN1ucFjC93rnVohW9sh_Ag5e0pRtrQWfPaU_LbA-nfeIGVIDKpiTQ==
Vary: Origin
boobiesbabiesandablog.webs.com/bbbutton.png
104.16.140.31301 Moved Permanently 0 B URL HTTP/1.1 boobiesbabiesandablog.webs.com/bbbutton.png
IP 104.16.140.31:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bbbutton.png HTTP/1.1
Host: boobiesbabiesandablog.webs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:15 GMT
Location: https://boobiesbabiesandablog.webs.com/bbbutton.png
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b92e2ccdb500-OSL
i675.photobucket.com/albums/vv116/tally2525/blogdesign/aubutbutton.png
54.230.111.82403 Forbidden 243 B URL HTTP/1.1 i675.photobucket.com/albums/vv116/tally2525/blogdesign/aubutbutton.png
IP 54.230.111.82:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash 735f4dc03d040ac6fd8e7c42897a3ea7
bc919030b2332d016248466f0b2d81878263ee62
2edd1c9c6f0d3eaf7245446e4f548be675cd224c82e17f06979decea24431b49
GET /albums/vv116/tally2525/blogdesign/aubutbutton.png HTTP/1.1
Host: i675.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vq_F8I2ndcQ48UlCylWpVILtuEndMwVxxiSHAJMJNPuY5A5WHa_erg==
i785.photobucket.com/albums/yy138/aitmama/JustAnotherNewBlog.jpg
54.230.111.3200 OK 3.3 kB URL HTTP/2 i785.photobucket.com/albums/yy138/aitmama/JustAnotherNewBlog.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5a921b8a9dc490f2a6f6cd660e52786a
0f52bb7ed6c3bfb5487360fb62f4882af30b4f82
58350e815fd3b62f99b2b13a0f215e19950a639fc42169d4b109615f5ff01efe
GET /albums/yy138/aitmama/JustAnotherNewBlog.jpg HTTP/1.1
Host: i785.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3334
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="JustAnotherNewBlog.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-10966646455ff494315efb1c
x-request-id: RkJCIdRVW3qYoAt1-oIOy
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: uz7OXSq80Vt-0n187vPGo_MevcdLXKGQCiQr8D_-KXVXtvtrIG9DGg==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.mommyssweetthings.com/images/mst_125banner.gif
104.21.96.139404 Not Found 4.9 kB URL HTTP/1.1 www.mommyssweetthings.com/images/mst_125banner.gif
IP 104.21.96.139:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (4070)
Hash e941db6610a0dd3f67093b402067c45f
d2ad6e90cdcbfcacd7ff59b2afcc060a9dfff369
13130f79ce87cbda3a9764c92c6051c17e103238cd4f07f0ad84117937e8a56d
GET /images/mst_125banner.gif HTTP/1.1
Host: www.mommyssweetthings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EA2C9UHNOIQl64TQJNmqnxHwKlAbFmQQvbluB0vAas21aTOfQLgGPeC%2FkVIpvXwhweFBrDct%2Be9VtX5TyoY4G4OpmKaobFfZJclDs4a1n%2FBlbB5wjlBetKnEjhcll5%2BKBSDcPJ0uPPyiIwDy"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 79c4b92c0e190b49-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
i186.photobucket.com/albums/x209/our2gr8kids/GetAttachment.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i186.photobucket.com/albums/x209/our2gr8kids/GetAttachment.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/x209/our2gr8kids/GetAttachment.jpg HTTP/1.1
Host: i186.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i186.photobucket.com/albums/x209/our2gr8kids/GetAttachment.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _ejcs_vedbv9ynIKQSOy4Z5YWSWFMGwJ2jtXs4DpIS9zqWdK5k-MEg==
Vary: Origin
i813.photobucket.com/albums/zz53/mandz81/FotoFlexer_Photobutton.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i813.photobucket.com/albums/zz53/mandz81/FotoFlexer_Photobutton.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/zz53/mandz81/FotoFlexer_Photobutton.jpg HTTP/1.1
Host: i813.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i813.photobucket.com/albums/zz53/mandz81/FotoFlexer_Photobutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Bfnzw2bHQY9fbsJy65TucoRx_K-LMBITdBE8GtpAdz8jdltO3GIVwQ==
Vary: Origin
i595.photobucket.com/albums/tt37/mjblog09/energizerbunnybutton.gif
54.230.111.3200 OK 13 kB URL HTTP/2 i595.photobucket.com/albums/tt37/mjblog09/energizerbunnybutton.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 165 x 159\012- data
Hash 67951d897fcb2934224e8b8545291311
7c015a75fab4f028e52a5b6e4ca0fcc39e25d3c3
51a9374d059105df87b9a58ddc2fce889db74d675cde28d0e5b18f185d84f80e
GET /albums/tt37/mjblog09/energizerbunnybutton.gif HTTP/1.1
Host: i595.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 12801
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="energizerbunnybutton.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-15ce12ad5c0fb5091205bf74
x-request-id: mU1yFgeMTryu50DwDUkrV
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O_qLzILWVA5c7m_KTj2PASvqx89XYXyMZWuj46Re--aZtUeT8tdstw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i256.photobucket.com/albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i256.photobucket.com/albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif HTTP/1.1
Host: i256.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i256.photobucket.com/albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PbMLGKs9u62kW54eoWxUsdEhGLAe0kkmc44s2FZsdtTZgnxClQ9bpg==
Vary: Origin
i871.photobucket.com/albums/ab277/cutepea/103418_l.jpg
54.230.111.106200 OK 3.4 kB URL HTTP/1.1 i871.photobucket.com/albums/ab277/cutepea/103418_l.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 599b53dd1738b2f5730dcadf1857f98d
5bb9d208b85d9c4e2175bc0285a02e95e2b3e466
fddd243a0f0f193999b51f2aa120f217ab3fb1ad415bd32c9ac6e05352b6fad6
GET /albums/ab277/cutepea/103418_l.jpg HTTP/1.1
Host: i871.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3412
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="103418_l.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-19031d19044a1762749bdb5b
X-Request-Id: 3yheLF5tmSJ_YS-29CRfq
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ReIb4PSbayawnXNGDTuRM7BmuUrOxNOy0lDTVhoAPYdg6hwG0R8lbg==
i836.photobucket.com/albums/zz288/jmgersh/guessing.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i836.photobucket.com/albums/zz288/jmgersh/guessing.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/zz288/jmgersh/guessing.jpg HTTP/1.1
Host: i836.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i836.photobucket.com/albums/zz288/jmgersh/guessing.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Ki4IZEHy5Ju-Y6CqufIvkkYHC1H8ml-SYjyDAEGtcLCWJ1TuLgQfeQ==
Vary: Origin
i593.photobucket.com/albums/tt14/lacadazy/Button-3.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i593.photobucket.com/albums/tt14/lacadazy/Button-3.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/tt14/lacadazy/Button-3.jpg HTTP/1.1
Host: i593.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yjBf7_z8TwJyxEBdzwAHiTylvqpQTy2RRp_1T9OK8MklYCCQmpQ6qA==
age: 61890
X-Firefox-Spdy: h2
i19.photobucket.com/albums/b154/atandrade1/mom-1.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i19.photobucket.com/albums/b154/atandrade1/mom-1.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/b154/atandrade1/mom-1.jpg HTTP/1.1
Host: i19.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i19.photobucket.com/albums/b154/atandrade1/mom-1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Xy_Xb757YCu42VQu-sD8MnCx0ihknvkHv76oanV32cehqf4Xy5VaxQ==
Vary: Origin
i150.photobucket.com/albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg
54.230.111.3200 OK 5.2 kB URL HTTP/2 i150.photobucket.com/albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3c6ce1b0719dd7ca5bcade5ac47aaacf
fe92ed7c409498328f44fc1bf51c22a2212fd666
71b46b8ca418a7f44d43c23181e2b5406e07426a43ab6911d4c21e0b82bcc547
GET /albums/s85/RebeccaJEstep/AhotaeiloaButton2.jpg HTTP/1.1
Host: i150.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5218
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="AhotaeiloaButton2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-06b94a6d4a178ac00a96eef1
x-request-id: OjEdTDzaFUAqI2Psrc51r
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: s0Vx2FbuzmLIuBbjTpS6A2BwMFDeTZViTd9h1ubJjyYVtDNpkE66cA==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.one2onenetwork.com/Userfiles/O2O_logo-150-orange.png
104.198.231.76404 Not Found 3.6 kB URL HTTP/1.1 www.one2onenetwork.com/Userfiles/O2O_logo-150-orange.png
IP 104.198.231.76:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3994)
Hash 65a5f3362bc168e071250496e6b38c76
eb3bbd81c6a47e8661ce775505d970e961b2740b
8aee98bba04932da62f4a546505b5c2edcb781723860fa46956cd5cd70fb092b
GET /Userfiles/O2O_logo-150-orange.png HTTP/1.1
Host: www.one2onenetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Vary: Accept-Encoding
ETag: W/"5e3e254b-1703"
Content-Encoding: gzip
i224.photobucket.com/albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i224.photobucket.com/albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png HTTP/1.1
Host: i224.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i224.photobucket.com/albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png
X-Cache: Redirect from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VvSHKbzYRgy459OxAm8WVEDH4UKAfzZ-WdwIZqQEBK92l_SUAY563A==
Vary: Origin
i921.photobucket.com/albums/ad54/jamielz1/cakeclipart.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i921.photobucket.com/albums/ad54/jamielz1/cakeclipart.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ad54/jamielz1/cakeclipart.jpg HTTP/1.1
Host: i921.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i921.photobucket.com/albums/ad54/jamielz1/cakeclipart.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mBpOTMx_rE5_1-xB2qmgBZvhAJ-vnWuicf-GQ7C49ptK9jTBc6P7wg==
Vary: Origin
i211.photobucket.com/albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i211.photobucket.com/albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg HTTP/1.1
Host: i211.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i211.photobucket.com/albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NFN6fEKFtNF44LqsmCwNune5B37AAoOU-BXsYagfa8BOw3TgtfQjGw==
Vary: Origin
i48.photobucket.com/albums/f214/MommyMandy/amandabutton.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i48.photobucket.com/albums/f214/MommyMandy/amandabutton.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/f214/MommyMandy/amandabutton.jpg HTTP/1.1
Host: i48.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i48.photobucket.com/albums/f214/MommyMandy/amandabutton.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46773a8236e136c4f6648dd79a7af8e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: O2gRVRMQSp8mT4jfKjTHtdjHHYPihcTpFDWi4HRYLoUMgSbHneQE_w==
Vary: Origin
hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
172.67.177.179301 Moved Permanently 0 B URL HTTP/1.1 hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
IP 172.67.177.179:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0 HTTP/1.1
Host: hitwebcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:15 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:15 GMT
Location: https://hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BHf071vULkRUyPAv7BVYxLXpwwEzaOO5gwCB59s48tNvUAvbUnL7GS%2BaGmUsOL6YM5LVU%2BTOTBuJE6Vs9gWnbHp%2FtFvda2SqIRvRXQDwNsPHtiB1I3SzDclaTMPctsYpCA1O2A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b92edc520b39-OSL
alt-svc: h2=":443"; ma=60
i1040.photobucket.com/albums/b401/BrittanyZanyDezines/SSbutton2.png
54.230.111.17200 OK 9.3 kB URL HTTP/1.1 i1040.photobucket.com/albums/b401/BrittanyZanyDezines/SSbutton2.png
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 31368adbd7693e3953208995c8194212
5371194b81345faaf958f4aec91f03ffd51464de
7b1bae994d7d23c0669c48e2af86890450086cba2359d7e201456fa14dcc3ea0
GET /albums/b401/BrittanyZanyDezines/SSbutton2.png HTTP/1.1
Host: i1040.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 9264
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="SSbutton2.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-1ea6c0923141459643cc3266
X-Request-Id: F_fltWcOEivXcA90lE1w5
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: rlHbwqcBDUoFUjFI_iEJ4WUhgm5so1WOI8DDtCT0W4YgeHNZOT26Bg==
i145.photobucket.com/albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i145.photobucket.com/albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg HTTP/1.1
Host: i145.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i145.photobucket.com/albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 1DsmPlKlLHv4-R-hGIqOyyOmltozJVIA5EOY0h_U1dduGXSb-SXLnw==
Vary: Origin
www.laughinglindsay.com/laughinglindsay_125.jpg
192.254.234.76301 Moved Permanently 263 B URL HTTP/1.1 www.laughinglindsay.com/laughinglindsay_125.jpg
IP 192.254.234.76:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 42f06a0af69d453aedfd14cebbca6ad4
df4832bee0b256e209db92e346806dbcb8216d15
dae080d2adeb31280645b5172851472e89cf3d2b9335f8a81c936ffbabd814c9
GET /laughinglindsay_125.jpg HTTP/1.1
Host: www.laughinglindsay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Location: https://www.laughinglindsay.com/laughinglindsay_125.jpg
Content-Length: 263
Keep-Alive: timeout=5, max=75
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
1.bp.blogspot.com/_GF9ffMDWP9A/TEehFHPrBTI/AAAAAAAAAXA/FCfjO_LQpQ4/S241/MBSWebButton.jpg
142.250.74.161200 OK 10 kB URL HTTP/1.1 1.bp.blogspot.com/_GF9ffMDWP9A/TEehFHPrBTI/AAAAAAAAAXA/FCfjO_LQpQ4/S241/MBSWebButton.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 241x112, components 3\012- data
Hash d6263a6e6fe8f71e95f5189aaceebe08
e9243f6656465fefd53e073ece72859139c92ce4
9a5d22319474db70ba22f055eb909776c2ec5dbd6fc8ac2222a1325bb8dcb62d
GET /_GF9ffMDWP9A/TEehFHPrBTI/AAAAAAAAAXA/FCfjO_LQpQ4/S241/MBSWebButton.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v170"
Expires: Tue, 21 Feb 2023 05:08:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MBSWebButton.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: fife
Content-Length: 10213
X-XSS-Protection: 0
i458.photobucket.com/albums/qq306/sugarpopribbons/SugarPopRibbonsButton.jpg
54.230.111.17200 OK 9.8 kB URL HTTP/1.1 i458.photobucket.com/albums/qq306/sugarpopribbons/SugarPopRibbonsButton.jpg
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 540f0cd7cc7b4a970c12c57176715d6f
c4130c7dfa31ad639a041626167307cabaa0544c
a8c3455233e88ca67d1e8791f1691daee3f36cde7fead1be6ba0acaf7b1c765d
GET /albums/qq306/sugarpopribbons/SugarPopRibbonsButton.jpg HTTP/1.1
Host: i458.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 9806
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="SugarPopRibbonsButton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-0985d6e00f847cc87ecff67f
X-Request-Id: Fr1XEw0n2TOzWXdmdgZj4
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: s4HgvDTAtzeRQbWD2S02ggnAX2YAojHYiSz0GXmvEAfmCzrx3w467g==
vas5ww.blu.livefilestore.com/y1pW-toWBo-sqid51QQHSSrIPmUbMMOJMFgYZjyhzeVlrer9EHZwD_Wm5w8uteWBAtV49GPg-TV00Pec-UObqudiHAQOW_0-HST/button.jpg
13.107.42.12404 Not Found 0 B URL HTTP/1.1 vas5ww.blu.livefilestore.com/y1pW-toWBo-sqid51QQHSSrIPmUbMMOJMFgYZjyhzeVlrer9EHZwD_Wm5w8uteWBAtV49GPg-TV00Pec-UObqudiHAQOW_0-HST/button.jpg
IP 13.107.42.12:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /y1pW-toWBo-sqid51QQHSSrIPmUbMMOJMFgYZjyhzeVlrer9EHZwD_Wm5w8uteWBAtV49GPg-TV00Pec-UObqudiHAQOW_0-HST/button.jpg HTTP/1.1
Host: vas5ww.blu.livefilestore.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Accept-Ranges: bytes
P3P: CP="BUS CUR CONo FIN IVDo ONL OUR PHY SAMo TELo"
X-MSNSERVER: BL4PPF5245B94F7
Strict-Transport-Security: max-age=31536000; includeSubDomains
MS-CV: ah5jsNKFiUGSoaUJgtx7Eg.0
X-QosStats: {"ApiId":0,"ResultType":2,"SourcePropertyId":0,"TargetPropertyId":42}
X-ThrowSite: 5433.1999
X-ClientErrorCode: ItemDoesNotExist
X-ErrorCodeChain: ItemNotFound
X-AsmVersion: UNKNOWN; 19.1091.203.2008
X-Cache: CONFIG_NOCACHE
X-MSEdge-Ref: Ref A: 51AF146BE0164E39BE6A2EC512019FC4 Ref B: OSL30EDGE0218 Ref C: 2023-02-20T05:08:15Z
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Length: 0
i51.photobucket.com/albums/f390/kaiyasmom06/seeryusmama/banner12.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i51.photobucket.com/albums/f390/kaiyasmom06/seeryusmama/banner12.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/f390/kaiyasmom06/seeryusmama/banner12.png HTTP/1.1
Host: i51.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i51.photobucket.com/albums/f390/kaiyasmom06/seeryusmama/banner12.png
X-Cache: Redirect from cloudfront
Via: 1.1 c26775cc34c23943f6f5cfc9a3da9b4a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QgQEjtKG421ldSaZMNnYMD_ZtzDHY8uqgu5zndHbgi5olsQUnEdBxA==
Vary: Origin
i279.photobucket.com/albums/kk148/BloggerBoutique/Tammi/button.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i279.photobucket.com/albums/kk148/BloggerBoutique/Tammi/button.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/kk148/BloggerBoutique/Tammi/button.jpg HTTP/1.1
Host: i279.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i279.photobucket.com/albums/kk148/BloggerBoutique/Tammi/button.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: jhCkzfuOHird1e5uKrSNyTAG5aMJ5pDdi11rKGuaYgrLr3KZmQcZzA==
Vary: Origin
i22.photobucket.com/albums/b330/usachan/button.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i22.photobucket.com/albums/b330/usachan/button.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/b330/usachan/button.png HTTP/1.1
Host: i22.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i22.photobucket.com/albums/b330/usachan/button.png
X-Cache: Redirect from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: mD5pmjA-nR0yHwiuOOM2anA5e2g15uhIqESsCl_L1uUsaxGraJQDuA==
Vary: Origin
i807.photobucket.com/albums/yy359/LaDeDaaDesigns/buttoncopy-1.png
54.230.111.3200 OK 4.7 kB URL HTTP/2 i807.photobucket.com/albums/yy359/LaDeDaaDesigns/buttoncopy-1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash df2b8bfb1b991ee6e9a5d10f670d4686
06af4e57c579b03fcbfd8262e9d8ebe303915bd3
238bddbebed6e112894ef12f35b572e9db6acec43338d8a31ffc56e3e4706375
GET /albums/yy359/LaDeDaaDesigns/buttoncopy-1.png HTTP/1.1
Host: i807.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4696
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="buttoncopy-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-2396cae80c39881e2fb0761d
x-request-id: zj2Rbi6dJA3J7NxFPV0Ta
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Oqe1YJ8C9x5O-yWFuXLW-GHPnEFMSfW9Wzw9M3MB3d_PV7kXi0v0wQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i537.photobucket.com/albums/ff339/Weazeyme/even-smaller-1.png
54.230.111.82200 OK 4.2 kB URL HTTP/1.1 i537.photobucket.com/albums/ff339/Weazeyme/even-smaller-1.png
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 360c1fe8ec66732eb94dc50ee798c0b2
b478545cc0a888cd7b5bb3b837c9422254c85e9e
3d74e02242903ccf4a9a1d433a6468512dd077511ab4bd9fd351e07bb52ba516
GET /albums/ff339/Weazeyme/even-smaller-1.png HTTP/1.1
Host: i537.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4160
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="even-smaller-1.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-30fcdf016a28a19c24591323
X-Request-Id: ZSLK62dk59CCgFQp9eyho
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: canUxsbknqcY1usvlF3xblMDhxIYvTQyFGK6s-PeZZ0r0xh2R9dJJg==
i279.photobucket.com/albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i279.photobucket.com/albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg HTTP/1.1
Host: i279.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i279.photobucket.com/albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 312oYyzMgnmLyq4I6WNel1oBOhbQIkejFiKUf06HpQLIskOgEkMAyA==
Vary: Origin
i632.photobucket.com/albums/uu50/wishingpenny/WishingPennyButton.png
54.230.111.3200 OK 5.6 kB URL HTTP/2 i632.photobucket.com/albums/uu50/wishingpenny/WishingPennyButton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 72c425e7596bd450deb3448a92db657d
50025f6cf5499b4dd35d42f505e19bf76762b332
4110cc345264a97039b79636bd83ec18441b0c4520c11680000f94e18cdafc26
GET /albums/uu50/wishingpenny/WishingPennyButton.png HTTP/1.1
Host: i632.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5550
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="WishingPennyButton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-1545b0bf101495544d5bd58a
x-request-id: AeFekT31NHSeI5QXXWP7-
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: teySfrZGweK9J9HOUgK6YdfyEgRp7txVWSM22TKMdirSdGItRetRCw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i515.photobucket.com/albums/t357/sitsgirls/SS_150x150_button.png
54.230.111.106403 Forbidden 243 B URL HTTP/1.1 i515.photobucket.com/albums/t357/sitsgirls/SS_150x150_button.png
IP 54.230.111.106:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash 17d299d3ad4a9a93ca3688551a2bb1ec
6a510348977f6970292ff992033af934a2f08acb
d6228dc5001941638373f64d20c3877bc2a86d59f7319eb903fbbbb12eaefe0c
GET /albums/t357/sitsgirls/SS_150x150_button.png HTTP/1.1
Host: i515.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 0H2zHNuRZC4_--iu6Mn5jGy7bZ5EqAxsDSb8KUJ-YLQdW561QzbW0g==
i585.photobucket.com/albums/ss294/2thousandthings/TTTNEWLOGO.jpg
54.230.111.106200 OK 3.1 kB URL HTTP/1.1 i585.photobucket.com/albums/ss294/2thousandthings/TTTNEWLOGO.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 853f33025a5961b8262329ea027a7c1d
e4caec9ade070c2076d890b1dd25210d6f3abc1f
a3366afd898443a912bd1e37b5b0d17745fea2e3c98d9c0f97006166fe129924
GET /albums/ss294/2thousandthings/TTTNEWLOGO.jpg HTTP/1.1
Host: i585.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3050
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="TTTNEWLOGO.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-33f4d0d61557a71113b406d9
X-Request-Id: QZRU8q-NaRtdw_TP818zr
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pg5Ico5np7exP7rhgWv7cCEGYx4p5-2wSRZWst953LDeOIzUDmF7DA==
i808.photobucket.com/albums/zz6/jrhammlett/bbutton2-1.jpg
54.230.111.17200 OK 5.1 kB URL HTTP/1.1 i808.photobucket.com/albums/zz6/jrhammlett/bbutton2-1.jpg
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ecdff6971edcb296bf4f55f93b7b1b3
df1f22871bee9117c10b8ef3392db7010f594f43
c5b6346edb06de16d1fe7a73d560a1dc066a4cad8c67217758f285a12533cdbc
GET /albums/zz6/jrhammlett/bbutton2-1.jpg HTTP/1.1
Host: i808.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5052
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="bbutton2-1.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-284aec034e5dd7243252cbc9
X-Request-Id: 8hV22KKrS8NV2iNEmJDEp
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KqSshvFc5sTRRyhIbqaUJExGabmu8oyNCEfa0h9akkB-glN8WE-VEA==
couponsaregreat.net/img/cagbutton.jpg
192.3.201.105200 OK 9.4 kB URL HTTP/1.1 couponsaregreat.net/img/cagbutton.jpg
IP 192.3.201.105:0
ASN #36352 AS-COLOCROSSING
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 125x125, components 3\012- data
Hash 98eaa4d4bae7947f6e7a4c52083f5e27
84792a788f75266828aef30d1f63cfba2de534ba
184c733f01b62f5f6eb331f077f733fe2283771f44de577ddb359a8cd7d36801
GET /img/cagbutton.jpg HTTP/1.1
Host: couponsaregreat.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=604800
expires: Mon, 27 Feb 2023 05:08:15 GMT
content-type: image/jpeg
last-modified: Sun, 09 May 2010 19:00:30 GMT
accept-ranges: bytes
content-length: 9403
date: Mon, 20 Feb 2023 05:08:15 GMT
server: LiteSpeed
i287.photobucket.com/albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i287.photobucket.com/albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg HTTP/1.1
Host: i287.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i287.photobucket.com/albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: utDMaa_QvUlwmRQWkYFcHsWQjlhZZ6n_7IcuwjYAzPsrOLugSpwZBw==
Vary: Origin
i813.photobucket.com/albums/zz53/mandz81/FotoFlexer_Photobutton.jpg
54.230.111.3200 OK 4.3 kB URL HTTP/2 i813.photobucket.com/albums/zz53/mandz81/FotoFlexer_Photobutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash bc91de76d3ac77fb5b8dd02e1c6cdebf
b538a1942448d1223af2f8e53690820501e4b261
7f39b36b4bd7685d55fb8973623e77104917635612e1388ecceadca29181c125
GET /albums/zz53/mandz81/FotoFlexer_Photobutton.jpg HTTP/1.1
Host: i813.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4264
date: Mon, 20 Feb 2023 05:08:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="FotoFlexer_Photobutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-452130265122e20212e2aaa6
x-request-id: l-G9u5jynWiz_l4GzbMdH
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y7e1Gydl-BdcMmP07kzcNR202wsEq2S_8pPs94y63y_PiXe57ShRPQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i566.photobucket.com/albums/ss107/angelacisco/AngelasBits4-1.jpg
54.230.111.3200 OK 4.9 kB URL HTTP/1.1 i566.photobucket.com/albums/ss107/angelacisco/AngelasBits4-1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 99a630f66c7cba000ddf9dda0cf45208
df70ae70e26e13a35783e13da129aaa264d0e227
8c6386a256c601d23bbc429502be51be7a6ec75ea1995f203cb93216d99c0abb
GET /albums/ss107/angelacisco/AngelasBits4-1.jpg HTTP/1.1
Host: i566.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4928
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="AngelasBits4-1.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-732c6b7a5e991cf567d62e22
X-Request-Id: E9UGTgcwQQz6S9IqAJwXx
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uZdkbE6XLgdkeAgRBRBuINB5OKrT-d5bTKMJ_eJXoqf4077ZrkHSqA==
i616.photobucket.com/albums/tt242/sbclientlayoutimages/Carolyn%20at%20The%20Art%20of%20Random/button.png
54.230.111.106200 OK 4.4 kB URL HTTP/1.1 i616.photobucket.com/albums/tt242/sbclientlayoutimages/Carolyn%20at%20The%20Art%20of%20Random/button.png
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5da9a6416d66a9e9dc79b93f68c2ad05
5027dc26eec42ad3987cce53991651a898f1a1dd
9e502b25388f98707464a3cdc31b87e10e03cc73c1965a28269a650cf52272d9
GET /albums/tt242/sbclientlayoutimages/Carolyn%20at%20The%20Art%20of%20Random/button.png HTTP/1.1
Host: i616.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4394
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-676a797b0c6a4f336d7b50c3
X-Request-Id: 6ZAoGfCZVFBcenJNJJnBo
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yvplB02ls36jE-6iJ0mDSAhT-3Pp9kFrZ1toj1tO2U3WFx3yJ4K9iA==
i409.photobucket.com/albums/pp178/sneakymomma/buttonflwr4dcopy.jpg
54.230.111.106200 OK 5.5 kB URL HTTP/1.1 i409.photobucket.com/albums/pp178/sneakymomma/buttonflwr4dcopy.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash ad1ccafea70ac950ecc955c253bd372a
b9b2a6b733067bd37dc010b1ed30ea2faf27eff7
63581856b89c6b629cb265fc7082f554caf70df857594d13c60cc0db4498954b
GET /albums/pp178/sneakymomma/buttonflwr4dcopy.jpg HTTP/1.1
Host: i409.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5472
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="buttonflwr4dcopy.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-67dd860b30a2df840cc98974
X-Request-Id: nurE3bTIxl6IyWeNtcS9q
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lmVqhLxZTdqSZX3YBZxT9nckuRLBfn4bAarD3iL5OCAsTiWP10nhHw==
i409.photobucket.com/albums/pp178/sneakymomma/buttonblrs.jpg
54.230.111.106200 OK 7.1 kB URL HTTP/1.1 i409.photobucket.com/albums/pp178/sneakymomma/buttonblrs.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8585dd6838ed20f97f2de32451749719
342179916f1d980134542e5595088e8c583147c1
5a111ae0b0fe34d38b7f5fe1853102106cf20fa4fefe082a850dc6d9548a7df6
GET /albums/pp178/sneakymomma/buttonblrs.jpg HTTP/1.1
Host: i409.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 7132
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="buttonblrs.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:15 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-7483c8fa4ef5dc38775268e4
X-Request-Id: NKaDOKK8CmVPAaBoxvfmI
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: p8qM1Jac7uxpvPfr6dpNMnsF-MhNRaTaZ88gGtRaLPM-LWG_fsyT_A==
i1115.photobucket.com/albums/k560/gmmaddox20/Button1.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i1115.photobucket.com/albums/k560/gmmaddox20/Button1.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/k560/gmmaddox20/Button1.png HTTP/1.1
Host: i1115.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i1115.photobucket.com/albums/k560/gmmaddox20/Button1.png
X-Cache: Redirect from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: NITHmgPPhjl9eapgi27W-s9soVmwDAWBIqBzdzBuqahtgJTuhobY4w==
Vary: Origin
i145.photobucket.com/albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i145.photobucket.com/albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/r208/jennisajoy/OUAB/bittersweet2copy.jpg HTTP/1.1
Host: i145.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RspjsRk0PC8Oy0KxUD-yoWaN2qbJSkD0jiR1uVaLUUBEVrNkFVi8_g==
age: 61891
X-Firefox-Spdy: h2
leslielovesveggies.net/wp-content/uploads/2010/09/leslie_veg_125.png
104.21.55.229301 Moved Permanently 0 B URL HTTP/1.1 leslielovesveggies.net/wp-content/uploads/2010/09/leslie_veg_125.png
IP 104.21.55.229:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2010/09/leslie_veg_125.png HTTP/1.1
Host: leslielovesveggies.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:16 GMT
Location: https://leslielovesveggies.net/wp-content/uploads/2010/09/leslie_veg_125.png
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nb2WqyY7%2BiCo7A%2FKCBz%2BHZYjxuj%2Fou%2FNu8seBt%2BxLrblQSr1CfuIrYIGTBK%2FhKH2%2F%2FGhHs6G5Y3e6wVYSkndQGRzvjyinZOaQwZ0mOjfpLhZh05vIBG6uLUG5kxZ4ClN4c2hR7ZLexs7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b9304d9e1c0a-OSL
alt-svc: h2=":443"; ma=60
i1236.photobucket.com/albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg
54.230.111.3200 OK 11 kB URL HTTP/2 i1236.photobucket.com/albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a47c9a730b63cf62108b3dba2841f516
b0fe0f7985d60d0132b5fcf9c68065c2948b7603
29964a3d05326b8e445752966a154603a71988bdb466aa40eed261a6a62d941b
GET /albums/ff456/KimberlyRichter/PixieDustedMousebutton.jpg HTTP/1.1
Host: i1236.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 10892
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="PixieDustedMousebutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f3003f-13b9ab765f662e00444b6e2b
x-request-id: _2EB8Fi0Jsr6O-QoQEbvr
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 32Qok-zW7w_1oYJWfxpokNSskUteW7KafnaE-_U4Ikl8YnXkKPQvtg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i409.photobucket.com/albums/pp176/suestmarie/susan_button.jpg
54.230.111.106200 OK 3.9 kB URL HTTP/1.1 i409.photobucket.com/albums/pp176/suestmarie/susan_button.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash fb2104bcfd5282149843281fb94e5e18
30dfa8309aba413466ba110b722a6e8179d67ee7
c5120c325d136656c2b60a876a8c3d0d2ba8de355dd339f65992e4370961072b
GET /albums/pp176/suestmarie/susan_button.jpg HTTP/1.1
Host: i409.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3936
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="susan_button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f3003f-7258c3f04f0b4f9d6e16f930
X-Request-Id: NXZy0PKyI59WbyQACe2Sz
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CCBpgEbhTz-OEMb0BgQ66tkWIWSEuR3miIKPTVkaZrKFaWqIsCxprQ==
i12.photobucket.com/albums/a214/HeatherAvrech/BlogButton-1.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i12.photobucket.com/albums/a214/HeatherAvrech/BlogButton-1.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/a214/HeatherAvrech/BlogButton-1.jpg HTTP/1.1
Host: i12.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i12.photobucket.com/albums/a214/HeatherAvrech/BlogButton-1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: gXNV_rqsYhsuxj9bxJyuX-zT6mzsa8Xy-oHPRyLJrhXfzemYqK_EjQ==
Vary: Origin
i631.photobucket.com/albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i631.photobucket.com/albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg HTTP/1.1
Host: i631.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i631.photobucket.com/albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZCX_BsLxe-1GoAWSBP_Dc1AJoBoGrAMYUssP39mkCQQvNnCM5NINcg==
Vary: Origin
pr.prchecker.info/getpr.php?codex=aHR0cDovL3d3dy5zYXJhZmFuMi5ibG9nc3BvdC5jb20=&tag=2
67.227.215.171301 Moved Permanently 310 B URL HTTP/1.1 pr.prchecker.info/getpr.php?codex=aHR0cDovL3d3dy5zYXJhZmFuMi5ibG9nc3BvdC5jb20=&tag=2
IP 67.227.215.171:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1c07823871d1419149d63412c0be5719
3c4c52310b3c26c2ad2e0bd5cde14f5a96ed7e23
16a840c0e19bd8440168bfbb3e3b1b9dd05ad5d3552442902ada662910d823b7
GET /getpr.php?codex=aHR0cDovL3d3dy5zYXJhZmFuMi5ibG9nc3BvdC5jb20=&tag=2 HTTP/1.1
Host: pr.prchecker.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 310
Connection: keep-alive
Location: https://pr.prchecker.info/buts/image2.gif?codex=aHR0cDovL3d3dy5zYXJhZmFuMi5ibG9nc3BvdC5jb20=&tag=2
Expires: Fri, 21 Apr 2023 05:08:17 GMT
Cache-Control: max-age=5184000
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Nginx-Upstream-Cache-Status: MISS
X-Server-Powered-By: Engintron
i279.photobucket.com/albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg
54.230.111.3200 OK 4.6 kB URL HTTP/2 i279.photobucket.com/albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5e17d7ade0d08610cf47121e034412f6
c96c957378a604efc657f640b02405a3d60f635c
9ae9efbffa1d50a7efec1cce8743ae9e3ace34e58669ea650e753bb0b8ec3add
GET /albums/kk148/BloggerBoutique/Stacie/buttoncopy.jpg HTTP/1.1
Host: i279.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4558
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="buttoncopy.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-75df8152158951783bb7d647
x-request-id: 6UE4DePLCMcYtX8BC-ptL
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 3g1-I7lGCZ9MBWGl6q56HHfnc6ZtQXFXAokZzOFunjnbPkL3rTUXMw==
vary: Accept, Origin
X-Firefox-Spdy: h2
resources.blogblog.com/img/navbar/arrows-light.png
142.250.74.41200 OK 117 B URL HTTP/2 resources.blogblog.com/img/navbar/arrows-light.png
IP 142.250.74.41:0
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 25c2b0cfe0ad4dcda4a0e3727d091d80
b9d16f4311e64648b7970baf00cb9841e3c3351b
bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
GET /img/navbar/arrows-light.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 117
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 17 Feb 2023 14:12:36 GMT
expires: Fri, 24 Feb 2023 14:12:36 GMT
cache-control: public, max-age=604800
last-modified: Fri, 17 Feb 2023 08:51:44 GMT
content-type: image/png
age: 226540
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i279.photobucket.com/albums/kk148/BloggerBoutique/Tammi/button.jpg
54.230.111.3200 OK 4.9 kB URL HTTP/2 i279.photobucket.com/albums/kk148/BloggerBoutique/Tammi/button.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e033b438aebd64eefbdaf6e0c57f69d3
b8c9816b8ce9fd3eee858a1d094656226459c8fb
b0ca979df9962bb1add015018f2a97dcd6cc40a7253b29c15fbde66120cda676
GET /albums/kk148/BloggerBoutique/Tammi/button.jpg HTTP/1.1
Host: i279.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4876
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-6f08ed71117430ff0930d8f4
x-request-id: 4-__4OXI6IKHXgjMFdg5a
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4trftmkdpQHV9cAOkbUZ2Q3RPLJgUVECjeuxI6ayU47GbDsFbPtrzw==
vary: Accept, Origin
X-Firefox-Spdy: h2
resources.blogblog.com/img/navbar/icons_peach.png
142.250.74.41200 OK 907 B URL HTTP/2 resources.blogblog.com/img/navbar/icons_peach.png
IP 142.250.74.41:0
File type PNG image data, 46 x 20, 8-bit colormap, non-interlaced\012- data
Hash 3718077fe5eb689b0ded987a52881d06
f0ce5596ef43f850c400cbbc0556697fb3e7b232
72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
GET /img/navbar/icons_peach.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 907
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Feb 2023 19:46:33 GMT
expires: Thu, 23 Feb 2023 19:46:33 GMT
cache-control: public, max-age=604800
last-modified: Thu, 16 Feb 2023 00:22:37 GMT
content-type: image/png
age: 292903
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i690.photobucket.com/albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i690.photobucket.com/albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png HTTP/1.1
Host: i690.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i690.photobucket.com/albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png
X-Cache: Redirect from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: erhMhl0lv5H4PE1GvOG3FNjhP3nMu6Y2zc4Ad_l8JZ9TwwnPRje7AA==
Vary: Origin
www.lifewithlisa.com/wp-content/uploads/2010/05/button.png
67.225.142.73301 Moved Permanently 274 B URL HTTP/1.1 www.lifewithlisa.com/wp-content/uploads/2010/05/button.png
IP 67.225.142.73:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1afee872f9b97028de92537048a543dc
236b2f545c6d0ff0eed80fa4516790bc118cd279
09ac05066cd64d4bb346a50a06a6e7403f89fc1aa960dc95633ac3aab5e210fc
GET /wp-content/uploads/2010/05/button.png HTTP/1.1
Host: www.lifewithlisa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache
Location: https://www.lifewithlisa.com/wp-content/uploads/2010/05/button.png
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:16 GMT
Content-Length: 274
Keep-Alive: timeout=2, max=750
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
www.nicolesnickels.com/wp-content/uploads/2010/03/Nicoles_Nickels_New_Button.jpg
135.148.169.28301 Moved Permanently 0 B URL HTTP/1.1 www.nicolesnickels.com/wp-content/uploads/2010/03/Nicoles_Nickels_New_Button.jpg
IP 135.148.169.28:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/2010/03/Nicoles_Nickels_New_Button.jpg HTTP/1.1
Host: www.nicolesnickels.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.nicolesnickels.com/wp-content/uploads/2010/03/Nicoles_Nickels_New_Button.jpg
x-litespeed-cache: hit
content-length: 0
date: Mon, 20 Feb 2023 05:08:16 GMT
server: LiteSpeed
x-frame-options: sameorigin
strict-transport-security: max-age=31536000
i51.photobucket.com/albums/f390/kaiyasmom06/seeryusmama/banner12.png
54.230.111.3200 OK 3.6 kB URL HTTP/2 i51.photobucket.com/albums/f390/kaiyasmom06/seeryusmama/banner12.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 27691fa837017fa2aad3f53e7a9ff415
5dcd18a4686a5e0cd83a7ac0edadf70a9a05abd3
a5066c6a9af8821699fe530096645217de97be02f3d88b8f800407cccca0ee67
GET /albums/f390/kaiyasmom06/seeryusmama/banner12.png HTTP/1.1
Host: i51.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3586
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="banner12.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-54cc08b67db003890e78d3cf
x-request-id: jTj0jcApHDyTE7WFyzOGH
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: yYmfvlsiICaRoMg0PlSz_VUM7v2G1e8T2pE1zoAnbyFwqRwdJg60wQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
static.addtoany.com/menu/modules/core.26680508.js
172.67.39.148301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/modules/core.26680508.js
IP 172.67.39.148:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/modules/core.26680508.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Origin: http://sarafan2.blogspot.com
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:16 GMT
Location: https://static.addtoany.com/menu/modules/core.26680508.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79c4b9314c50b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
static.addtoany.com/menu/eso.26680508.js
172.67.39.148301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/eso.26680508.js
IP 172.67.39.148:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/eso.26680508.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:16 GMT
Location: https://static.addtoany.com/menu/eso.26680508.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 79c4b9317aeab529-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 698e79a883950886c11cdf544d96857e
93f241dac8955d299116a7075083f82d2f168fe2
7f9d511d52f0b47c75b762ed82bdccd83e2275e12e342ca13dccd968c868d7b3
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=130742
Date: Mon, 20 Feb 2023 05:08:16 GMT
Etag: "63f24d75-1d7"
Expires: Tue, 21 Feb 2023 17:27:18 GMT
Last-Modified: Sun, 19 Feb 2023 16:25:25 GMT
Server: ECS (nyb/1D1D)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BeJnHiCpdJ1zFNtPAg_zQ7McFd0TLqn7F9TrwwjXqtUREQu4NMeLAw==
Age: 3713
i144.photobucket.com/albums/r193/coricarpenter/WildPinkLinkButton.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i144.photobucket.com/albums/r193/coricarpenter/WildPinkLinkButton.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/r193/coricarpenter/WildPinkLinkButton.png HTTP/1.1
Host: i144.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i144.photobucket.com/albums/r193/coricarpenter/WildPinkLinkButton.png
X-Cache: Redirect from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: pn7kTPPSWe0EMQGmn9RvNC6M2CvCEYynXOL7Ajo8O1XZ9cqiuTMhJQ==
Vary: Origin
www.caring.com/candle/cc.js
54.210.23.207301 Moved Permanently 178 B URL HTTP/1.1 www.caring.com/candle/cc.js
IP 54.210.23.207:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /candle/cc.js HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.caring.com/candle/cc.js
Strict-Transport-Security: max-age=31536000; includeSubdomains
i290.photobucket.com/albums/ll251/shaunach/Pan-1.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i290.photobucket.com/albums/ll251/shaunach/Pan-1.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ll251/shaunach/Pan-1.jpg HTTP/1.1
Host: i290.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i290.photobucket.com/albums/ll251/shaunach/Pan-1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zl0B2SyGU6S7ROm3GZjR3xMIV6PE2re4dK3qcb1q54btTpHFonKYuw==
Vary: Origin
www.topmommyblogs.com/directory/images/banners/150-tmb.gif
66.96.149.23404 Not Found 867 B URL HTTP/1.1 www.topmommyblogs.com/directory/images/banners/150-tmb.gif
IP 66.96.149.23:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 51627b75044cd829ffa17961bdd92314
1d67b6bfb031475ffc7c7fdc079f6d686c32a95c
dc4ca971c4c7df50c5aaee10082c75563151e4cabff67b0890156b4ea90379e0
GET /directory/images/banners/150-tmb.gif HTTP/1.1
Host: www.topmommyblogs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 867
Connection: keep-alive
Server: Apache/2
Last-Modified: Fri, 10 Jan 2020 16:05:10 GMT
Accept-Ranges: bytes
Age: 0
momsbalancingact.freehostia.com/MBA.js
198.23.57.43404 Not Found 1.1 kB URL HTTP/1.1 momsbalancingact.freehostia.com/MBA.js
IP 198.23.57.43:0
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 76d9d34a24aa37d8accef67b47c165af
8eef027076504e2aae92ae56e3395de6617d17b3
81653e87a57238b12a9676112648315d964323149582b00757842ee8255027e4
GET /MBA.js HTTP/1.1
Host: momsbalancingact.freehostia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache
Vary: accept-language,accept-charset,User-Agent
Accept-Ranges: bytes
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=utf-8
Content-Language: en
s877.photobucket.com/albums/ab336/BusyWorkingMama/IMAGE.png
54.230.111.84301 Moved Permanently 167 B URL HTTP/1.1 s877.photobucket.com/albums/ab336/BusyWorkingMama/IMAGE.png
IP 54.230.111.84:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ab336/BusyWorkingMama/IMAGE.png HTTP/1.1
Host: s877.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://s877.photobucket.com/albums/ab336/BusyWorkingMama/IMAGE.png
X-Cache: Redirect from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KGfd9Kok-u6_Wd4yGnCmJZvSC_Hq7yr7UW51QfpXoJDkxuKKXDlrVQ==
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5b1775b8f4f9ebbac7a1572afa4e4f92
7c7c748730a9422b0f5f9bcdde36a91c9639c595
a1685273829a7672a3fa089525b959f1f95f11c0a5c0d09fbbf1f4667b3f7946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4085
Expires: Mon, 20 Feb 2023 06:16:21 GMT
Date: Mon, 20 Feb 2023 05:08:16 GMT
Connection: keep-alive
i68.photobucket.com/albums/i15/jerimax/logo-button-300dpi-125x125-1.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i68.photobucket.com/albums/i15/jerimax/logo-button-300dpi-125x125-1.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/i15/jerimax/logo-button-300dpi-125x125-1.png HTTP/1.1
Host: i68.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i68.photobucket.com/albums/i15/jerimax/logo-button-300dpi-125x125-1.png
X-Cache: Redirect from cloudfront
Via: 1.1 a343e36742f64defd0a2caf1f96ff772.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: eysLwxCZDOMG81vGEaEvtHRg_iieNlkVEIxJNut3wnr-ruakw05dMA==
Vary: Origin
i538.photobucket.com/albums/ff345/momspark/newmomsparkbutton.jpg
54.230.111.17200 OK 2.7 kB URL HTTP/1.1 i538.photobucket.com/albums/ff345/momspark/newmomsparkbutton.jpg
IP 54.230.111.17:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9c7c48a59fe784d3a9196cd1bbb7e159
22ca971390853bed27c91777c60380cbff17e407
88a6147b7845466f0e028d3552750d0eac0bf0368666c70ecab4a623c34a9f4f
GET /albums/ff345/momspark/newmomsparkbutton.jpg HTTP/1.1
Host: i538.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 2660
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="newmomsparkbutton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-22759fd92ee9ea9046b7be92
X-Request-Id: Uw7fZ-4Wn5fSSp-Kmj5A1
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: yksxLSCw5koxbFevZxdOHEC7rnTxDvGBh9fuN3UAp_BF__fx18KNZg==
i690.photobucket.com/albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png
54.230.111.3200 OK 3.4 kB URL HTTP/2 i690.photobucket.com/albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 371023230695c26d88032dee6f6aef06
b916c71e5909ef73347e72bcd92102a0f354d466
78294d0aff720a7d92f24b2dcb4e35477d4c5d45184acb0b3a6be99dd0e973e1
GET /albums/vv268/astheygrowup/Blog%20Layout%20Graphics/button.png HTTP/1.1
Host: i690.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3430
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-20e99116157159095848b8b7
x-request-id: MJhfYkBV4F2em_XT1hxqS
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RgHLIf1U19pPv9HFj9I6ExjUaPds1GJyO7WqY6wEesDcNsjU4QU05w==
vary: Accept, Origin
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa636a1bf-e68a-4293-92f4-a3d1413ed4c7.jpeg
34.120.237.76200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa636a1bf-e68a-4293-92f4-a3d1413ed4c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75551065a5464d8c6c8f36b1644c9574
a94e26e5d1acbedecf30dbbaded3e2b2383e3e73
352c224720a3b01ad823397bfaedb1e1891323fd64b38891aca8acf10d7796cf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa636a1bf-e68a-4293-92f4-a3d1413ed4c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6393
x-amzn-requestid: 4c15f18a-51e7-4e5c-bc3e-e9ae9a20054c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxkCHFzIAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29619-4f42feb4175b6b60705e3847;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:35:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YFTOJfLW6rmNuI2TF8mCNt5x1HBaxeD-yJfe1OguJBZUalQaQRGsaA==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 22:19:34 GMT
age: 24522
etag: "a94e26e5d1acbedecf30dbbaded3e2b2383e3e73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
theclevernetwork.com/_clevergirls/badges/?a=c&c=pink&s=square&u=http://www.sarafan2.blogspot.com&n=sarafan2
74.220.199.6200 OK 4.7 kB URL HTTP/1.1 theclevernetwork.com/_clevergirls/badges/?a=c&c=pink&s=square&u=http://www.sarafan2.blogspot.com&n=sarafan2
IP 74.220.199.6:0
ASN #46606 UNIFIEDLAYER-AS-1
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (493)
Hash 6e56d935a6c6b26ab32f4667cd3a6f51
79717e5f8985a7dac5e2fb0fa8e404ad1440fa71
a1350cd14bfdb0449a3e5cac541cfaa5739a7afad6efc191836c199346eb7934
GET /_clevergirls/badges/?a=c&c=pink&s=square&u=http://www.sarafan2.blogspot.com&n=sarafan2 HTTP/1.1
Host: theclevernetwork.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache/2.2.31 (CentOS)
Connection: close
Transfer-Encoding: chunked
Content-Type: text/html; charset=ISO-8859-1
img51.imageshack.us/img51/3176/63026644.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img51.imageshack.us/img51/3176/63026644.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img51/3176/63026644.png HTTP/1.1
Host: img51.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1fb795dc1da607d7abd375588fd5b870
2d2ac3b1203a7256bd9f425ec32e569f262547dd
ed323b2ee3701a082f9016d13c6fb34d7df2a208407d4d10d0d70cdeddac14e7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fac021e56-1cda-4705-942f-fd658890b5e1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 7153
x-amzn-requestid: e923bb08-b66c-4a50-a40e-f77d3afdd11c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxiPHJtoAMFofA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f2960e-2f12021e701506482d3d08d7;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:35:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: gMWvjEN4BqskX30D30eQj_CF5p6siHb13JO7QpE8YPt6YsaMy9jlNg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:41:25 GMT
etag: "2d2ac3b1203a7256bd9f425ec32e569f262547dd"
content-type: image/jpeg
age: 26811
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef0b7b2c-eec0-4235-8942-451d77774fa4.jpeg
34.120.237.76200 OK 5.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef0b7b2c-eec0-4235-8942-451d77774fa4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8660c33f35d01cd6327a5c566594e9bb
571faa37b5fab6255204072fd770c31512b09265
780fd27b92d714d8b2f7a1b674bf7595e054b43d5701a0ebe31c588a02721a23
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fef0b7b2c-eec0-4235-8942-451d77774fa4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5545
x-amzn-requestid: af5a6bba-0236-46f8-8ff2-530229b8ec21
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmyNkFe5IAMFrkQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29723-0db4b05356cf207f0f58334d;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:39:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mjZEAFFIUMPOgFycQEaWQtZcP4WHDu0i9XmxKp7vRHyF6PRJ3whOaA==
via: 1.1 00f0a41f749793b9dd653153037c957e.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 21:44:01 GMT
age: 26655
etag: "571faa37b5fab6255204072fd770c31512b09265"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e60104db998ac91d382708a10169a348
7ca99ed68c938e67ff19a7ad6b86aadda8f66701
d039faba58498f62413f416bf012c28371ebd461a3a8556c5fb83164220147c0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8b808831-2e6e-4d7f-98ef-5fa5f424c7e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10094
x-amzn-requestid: 90e53283-a295-425c-b41b-e28994a1ab3d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxjvHU9IAMFScw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f29617-0f84463d4d7e23f45f316db3;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:35:19 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 4YKSjPUgnEXXWq-xOapHwnIRarkKHh24HkOh_hex5GiQpkKQVf9d9w==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 22:04:00 GMT
etag: "7ca99ed68c938e67ff19a7ad6b86aadda8f66701"
content-type: image/jpeg
age: 25456
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i811.photobucket.com/albums/zz34/prissy89/SmallButton.jpg
54.230.111.82200 OK 12 kB URL HTTP/1.1 i811.photobucket.com/albums/zz34/prissy89/SmallButton.jpg
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 64d9068cff518808d984d3e097071556
5e5b29f38e6fc9df71dbe4fd9bc9bdb6e28b533f
03f719a60fdb3c6a825fc2f5fece82c3c2942c48e37d08ee1fadc06aa83834cb
GET /albums/zz34/prissy89/SmallButton.jpg HTTP/1.1
Host: i811.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 12478
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="SmallButton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-7f54c67c46d4444c38ebb7ef
X-Request-Id: ES7YZBh3SQ9tGtdUU3F2p
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: -153uiMIbmOPToIou0TyYOyhF0QvSe74YhT7VmvsJEQ0fbT0SnvB8g==
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc82b7a98-4bbd-407e-9f08-777657d1789e.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc82b7a98-4bbd-407e-9f08-777657d1789e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b2a5eccb9764c2a35707bbd83f3fde5c
b97c2f382e105b5979af22ddfd4654bc1758d273
e2f388fb467d4bfd53a7c75a8894215a9585338707fd397cab661f3afe84b046
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc82b7a98-4bbd-407e-9f08-777657d1789e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12285
x-amzn-requestid: ec824f48-910b-4920-80e8-608cba96f394
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: AmxceFRyoAMF-9w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63f295e9-79bec7395e5c202e4276d451;Sampled=0
x-amzn-remapped-date: Sun, 19 Feb 2023 21:34:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: q34kxN4Do6qEs_pC6mVgCMkMVNjWIY8nvE7qdTSkFCzlM2peMLBf2w==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 22:16:33 GMT
etag: "b97c2f382e105b5979af22ddfd4654bc1758d273"
content-type: image/jpeg
age: 24703
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i811.photobucket.com/albums/zz34/prissy89/Untitled.jpg
54.230.111.82200 OK 8.7 kB URL HTTP/1.1 i811.photobucket.com/albums/zz34/prissy89/Untitled.jpg
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7e50c5648aa3212e1a0c9d02b2c55ee7
befcc8b018fccafb4318c26dd56baca288ffbd8a
85145d228097611676902fc7730db910c343e3acb76590ce9fe530d38d26c9bf
GET /albums/zz34/prissy89/Untitled.jpg HTTP/1.1
Host: i811.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 8688
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="Untitled.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-516be6fc1a76f60b031e13f3
X-Request-Id: cb3JMM_wCpYE08yR6-g6s
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: P3MEpYeWk1bdIm3BOhDxSu69c-ax52Ryv2_HBTrZMe_BNKUtJKfogg==
i691.photobucket.com/albums/vv279/supercoupongirl/contest_corner_border.gif
54.230.111.106200 OK 3.0 kB URL HTTP/1.1 i691.photobucket.com/albums/vv279/supercoupongirl/contest_corner_border.gif
IP 54.230.111.106:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash 080c65132643fcc1918f757218a911e5
f62a181c3739e9020ae31e272d2abdbb9dcef788
78d4239e92c0d0678a093593d6ae066bd8b96616a799c55ff0a5760143a23ac9
GET /albums/vv279/supercoupongirl/contest_corner_border.gif HTTP/1.1
Host: i691.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 2976
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="contest_corner_border.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-5cbfddf37272374d1c059860
X-Request-Id: MylAJ00z3Thh03EAPqzuc
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 9_6gommaBSRln_GyQv9WwRkTkmc4Mh5jEBRoBD-m5hrGZxJb5R5kjg==
i193.photobucket.com/albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i193.photobucket.com/albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png HTTP/1.1
Host: i193.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i193.photobucket.com/albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: dyzidmHvy9FYawovtKz-ftbo05jxRoOdJ5MeiA9TK9wukoN2v-MCgA==
Vary: Origin
i693.photobucket.com/albums/vv300/cblanchard76/AdayInTheLife-2.jpg
54.230.111.3301 Moved Permanently 167 B URL HTTP/1.1 i693.photobucket.com/albums/vv300/cblanchard76/AdayInTheLife-2.jpg
IP 54.230.111.3:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/vv300/cblanchard76/AdayInTheLife-2.jpg HTTP/1.1
Host: i693.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i693.photobucket.com/albums/vv300/cblanchard76/AdayInTheLife-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: ZshyT45xXgB9VbPMPHOFhQJ_4h39mWQh0_rMutri1B1XhvWQXwW0lw==
Vary: Origin
i484.photobucket.com/albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i484.photobucket.com/albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg HTTP/1.1
Host: i484.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i484.photobucket.com/albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Yh0Wb3G8yHFV0anwgKy_jYcdicgZ2yL0_HxZRM403lA5zFE8tjKvTw==
Vary: Origin
theblogfrog.com/widgets/bfsupporterswforum.js
67.205.57.36301 Moved Permanently 261 B URL HTTP/1.1 theblogfrog.com/widgets/bfsupporterswforum.js
IP 67.205.57.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1c0c92d8c76960e327a9022274591871
64ce6f005dd15187604f2b2632d69f8b2dfcdff9
f6e2eade5c8ff4e9884481e9eecc92b57fa460a886c43ec3e1e749b05b7b9121
GET /widgets/bfsupporterswforum.js HTTP/1.1
Host: theblogfrog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache
Location: https://theblogfrog.com/widgets/bfsupporterswforum.js
Content-Length: 261
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
theblogfrog.com/widgets/blogfrogstyle.js
67.205.57.36301 Moved Permanently 256 B URL HTTP/1.1 theblogfrog.com/widgets/blogfrogstyle.js
IP 67.205.57.36:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1e07ff7c45418aade2feb37f338bdf4e
07ea1c3d89d3a62af41d117ed89d8adcd49663f0
c2f171fd8d180f5995c692b3d84d67bc757b8899fc9798fdaba68ad3eab3ced0
GET /widgets/blogfrogstyle.js HTTP/1.1
Host: theblogfrog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache
Location: https://theblogfrog.com/widgets/blogfrogstyle.js
Content-Length: 256
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
img801.imageshack.us/img801/6008/holidaygiftguidebutton2.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img801.imageshack.us/img801/6008/holidaygiftguidebutton2.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img801/6008/holidaygiftguidebutton2.png HTTP/1.1
Host: img801.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
s01.flagcounter.com/count/BFc/bg=FFFFFF/txt=000000/border=43C7CC/columns=2/maxflags=12/viewers=0/labels=0/pageviews=0/
66.154.110.210200 OK 9.8 kB URL HTTP/1.1 s01.flagcounter.com/count/BFc/bg=FFFFFF/txt=000000/border=43C7CC/columns=2/maxflags=12/viewers=0/labels=0/pageviews=0/
IP 66.154.110.210:0
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 150 x 129, 8-bit/color RGB, non-interlaced\012- data
Hash 8de2841b05570c0dc9d79f2ab012d503
769d5889e260520c3bdf77125eeac6d5c6b4cda0
3e527268c8270c3940d92b756db781a5431b8e5183009f867f83cdd60a1547a9
GET /count/BFc/bg=FFFFFF/txt=000000/border=43C7CC/columns=2/maxflags=12/viewers=0/labels=0/pageviews=0/ HTTP/1.1
Host: s01.flagcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:17 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Pragma: no-cache
Cache-control: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: image/png
i631.photobucket.com/albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg
54.230.111.3200 OK 6.0 kB URL HTTP/2 i631.photobucket.com/albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 007d41333d48138d2c539e8a77f279c7
e48f490284b8850d10f6735add245aa66e1e94fd
4779db86db78f3583d32683d27b9f0960cdf920d17021bf7385bd8d12c5dc31d
GET /albums/uu35/lovetoshopmom/lovetoshopmombuttonidea-1.jpg HTTP/1.1
Host: i631.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5984
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="lovetoshopmombuttonidea-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-1bf21c0f433f2f46707bc3a9
x-request-id: u0zVx6T_pTXgRJ031IqtO
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: _DDXnXF1gUafoG7Ld7BNhuSc3ElxUFgA925mvG7QSiBYR8e-hTMxgQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i65.photobucket.com/albums/h220/redheadgal23/Blog/button.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i65.photobucket.com/albums/h220/redheadgal23/Blog/button.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h220/redheadgal23/Blog/button.jpg HTTP/1.1
Host: i65.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i65.photobucket.com/albums/h220/redheadgal23/Blog/button.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: CYW-qIIxSp-m410d0I_BQtYzw2iU8XXWyOw_MlbgCkYO-q65t9p9Qw==
Vary: Origin
2.bp.blogspot.com/_Q5JRN3HHvbg/Ss4opT10QBI/AAAAAAAAACU/-a10nFTeFIE/s400/MintGreen3+copy.jpg
142.250.74.161200 OK 8.5 kB URL HTTP/1.1 2.bp.blogspot.com/_Q5JRN3HHvbg/Ss4opT10QBI/AAAAAAAAACU/-a10nFTeFIE/s400/MintGreen3+copy.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 135x135, components 3\012- data
Hash 4b93aadc4244dc3df7a29d013296da6d
ac4952065aa54d5085fc7fff2cfd02888f193664
5ad60a1cac83ba26f0e2c7a8102ed2215f51f3939066bab648ece61872ff919f
GET /_Q5JRN3HHvbg/Ss4opT10QBI/AAAAAAAAACU/-a10nFTeFIE/s400/MintGreen3+copy.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v25"
Expires: Tue, 21 Feb 2023 05:08:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MintGreen3 copy.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: fife
Content-Length: 8450
X-XSS-Protection: 0
i840.photobucket.com/albums/zz325/tiglesia/ascendingbutterflybutton-1.gif
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i840.photobucket.com/albums/zz325/tiglesia/ascendingbutterflybutton-1.gif
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/zz325/tiglesia/ascendingbutterflybutton-1.gif HTTP/1.1
Host: i840.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i840.photobucket.com/albums/zz325/tiglesia/ascendingbutterflybutton-1.gif
X-Cache: Redirect from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lR58hoMunIf-pJlaOLLNf5GuTQzrnSUS7S_c7wjb7BGz6Z_UfpbMOQ==
Vary: Origin
i484.photobucket.com/albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i484.photobucket.com/albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif HTTP/1.1
Host: i484.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i484.photobucket.com/albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: DZo7xe9HhFUTib4Qqg-rOg6DrjYVKMqIBpggbgOk_4GGggURgOddlQ==
Vary: Origin
i129.photobucket.com/albums/p215/Local-Girl-photos/logos/125button.jpg
54.230.111.17301 Moved Permanently 167 B URL HTTP/1.1 i129.photobucket.com/albums/p215/Local-Girl-photos/logos/125button.jpg
IP 54.230.111.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/p215/Local-Girl-photos/logos/125button.jpg HTTP/1.1
Host: i129.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i129.photobucket.com/albums/p215/Local-Girl-photos/logos/125button.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: VsCSJ0IQiAKtZMc5WWcdyIpeQt4lVyrgmBHymZTmzAqXT1h7-aGevQ==
Vary: Origin
i68.photobucket.com/albums/i15/jerimax/logo-button-300dpi-125x125-1.png
54.230.111.3200 OK 4.6 kB URL HTTP/2 i68.photobucket.com/albums/i15/jerimax/logo-button-300dpi-125x125-1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d41bbf1404afddf3aaef95d44f7cbbae
bbd9a717507f24a110f76813e31870731fd61128
338f25cb4156d1f0f7e83150dc0283290ffde57fdec6f98da67567bdc2772efa
GET /albums/i15/jerimax/logo-button-300dpi-125x125-1.png HTTP/1.1
Host: i68.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4566
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="logo-button-300dpi-125x125-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-2d07120a6cc8de746a277345
x-request-id: 9KGE8-P9p4KhwSca7Y0Pl
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oVH2JUTLPrU5Yw9_TdkIWfSvnt96xpw3jcABSoomYkfyj6s5IJoe3g==
vary: Accept, Origin
X-Firefox-Spdy: h2
i392.photobucket.com/albums/pp5/mandyhornbuckle/Other%20people%20stuff/PamButton.png
54.230.111.3200 OK 9.6 kB URL HTTP/1.1 i392.photobucket.com/albums/pp5/mandyhornbuckle/Other%20people%20stuff/PamButton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e84f6affacd0fb60c1e888b258128e0f
5b5a1d43d07cfe49f44564ea1df0e83612641586
a6a8ddf47cf1622365d5e9c759a30e6c79eaa5b0ec96b216abd22318ec9bbeaa
GET /albums/pp5/mandyhornbuckle/Other%20people%20stuff/PamButton.png HTTP/1.1
Host: i392.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 9574
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="PamButton.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-6b859d0321ef23f446d1e934
X-Request-Id: n2sPkc7Gva7PkqqDrjvly
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Si-1ohplhbjFpD_fa4EQeHWBVbFb2awLKFoXsDW19TiTtBJozT8GTw==
2.bp.blogspot.com/__WwFRQzXaqk/ShrDNLapDYI/AAAAAAAABKM/tNEbI9RH-8o/S1600-R/creativewriting101button.jpg
142.250.74.161200 OK 9.2 kB URL HTTP/1.1 2.bp.blogspot.com/__WwFRQzXaqk/ShrDNLapDYI/AAAAAAAABKM/tNEbI9RH-8o/S1600-R/creativewriting101button.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 150x150, components 3\012- data
Hash 12f3c0ccef727810cb842cc0ac5e86e0
0875fa471f14f3e73af707d5e1a928b2a09af51f
644f422dc8d6ef9bb2377aa101c054503c67053c1e7993537885eb68f53292c5
GET /__WwFRQzXaqk/ShrDNLapDYI/AAAAAAAABKM/tNEbI9RH-8o/S1600-R/creativewriting101button.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v4a3"
Expires: Tue, 21 Feb 2023 05:08:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="creativewriting101button.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: fife
Content-Length: 9249
X-XSS-Protection: 0
img.photobucket.com/albums/v664/bduplantis/embutton.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 img.photobucket.com/albums/v664/bduplantis/embutton.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/v664/bduplantis/embutton.png HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v664/bduplantis/embutton.png
X-Cache: Redirect from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: y7g6KkDVolLkSMh3TQ0WiO1mzNt1vpyZeNl7JzFXcm28sJDiG43Hkg==
Vary: Origin
myweeview.com/weebutton.gif
216.239.32.21301 Moved Permanently 218 B URL HTTP/1.1 myweeview.com/weebutton.gif
IP 216.239.32.21:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 7b7ec587691ef524fd1a6a79839134d9
cc3b3f530cc82ad77405a8637bed7a536f31c0b0
b447dd0dfa83929a89ef08cd97a263821f18a182b29fc904036d92672a68225b
GET /weebutton.gif HTTP/1.1
Host: myweeview.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://www.google.ca
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 218
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img707.imageshack.us/img707/5302/buttonfo.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img707.imageshack.us/img707/5302/buttonfo.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img707/5302/buttonfo.png HTTP/1.1
Host: img707.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img204.imageshack.us/img204/2040/backgroundimage1.gif
38.99.77.16404 Not Found 168 B URL HTTP/1.1 img204.imageshack.us/img204/2040/backgroundimage1.gif
IP 38.99.77.16:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img204/2040/backgroundimage1.gif HTTP/1.1
Host: img204.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
i382.photobucket.com/albums/oo266/mtejen_bucket/lesliejanbutton-2.jpg
54.230.111.17403 Forbidden 255 B URL HTTP/1.1 i382.photobucket.com/albums/oo266/mtejen_bucket/lesliejanbutton-2.jpg
IP 54.230.111.17:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash d93352dfed7a0dc7ea093cd8ed2dcbb8
1641615d880a4744b03df8a5084bc405a8e8337d
12dfe1ffd7eb1691f17888caec5428dc98872fc7b14ca738ba1ca700170f58db
GET /albums/oo266/mtejen_bucket/lesliejanbutton-2.jpg HTTP/1.1
Host: i382.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: npKZ-VsUPtbrdY7aw7mwTJMGeRKYxyjDwE7ctzttL85s47zFZJ4zFA==
i537.photobucket.com/albums/ff339/Weazeyme/momstartsavings.jpg
54.230.111.82200 OK 5.2 kB URL HTTP/1.1 i537.photobucket.com/albums/ff339/Weazeyme/momstartsavings.jpg
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 14e2930b3bc5b97e901770b5a2924067
d099537294dc98e4972d9a5ded8926efda66c335
ec07781c77410262091d9933276e9e60cf3b4e306ad98ec0f21f23c7168462fe
GET /albums/ff339/Weazeyme/momstartsavings.jpg HTTP/1.1
Host: i537.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 5224
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="momstartsavings.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-2755aa3713cab8ba577742a2
X-Request-Id: mwX9bCevmIkxGWSFDj4cL
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: C3RVTVB9Vr72y3zndTcqQ1sEDWDD0iiTXwi5HIsxfOpA2Ec1jgiwfg==
i406.photobucket.com/albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i406.photobucket.com/albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png HTTP/1.1
Host: i406.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i406.photobucket.com/albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png
X-Cache: Redirect from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wl1R_NfGSBkRg-OxNjmIPCO5eqBbjAH_nSlz-A0eDiEpRF64jI808A==
Vary: Origin
i254.photobucket.com/albums/hh91/customblogdesigns/angie/simplelife125.jpg
54.230.111.106301 Moved Permanently 167 B URL HTTP/1.1 i254.photobucket.com/albums/hh91/customblogdesigns/angie/simplelife125.jpg
IP 54.230.111.106:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/hh91/customblogdesigns/angie/simplelife125.jpg HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i254.photobucket.com/albums/hh91/customblogdesigns/angie/simplelife125.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: oYSmOYkc72MgJdyys3UnPTP7gMipSousUXXUtRYbstzuQcTNtxGAgA==
Vary: Origin
rockinmama.net/images/button.jpg
172.67.170.174301 Moved Permanently 0 B URL HTTP/1.1 rockinmama.net/images/button.jpg
IP 172.67.170.174:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/button.jpg HTTP/1.1
Host: rockinmama.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:16 GMT
Location: https://rockinmama.net/images/button.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1oWr%2FqWslo%2BgWF1G%2Bw7mhgQxhZBt%2Boi7iHtbMPmToWYql04zJqNEh3LqBBVZ0xc%2Fjt3DGdOg3TytM6FSvmpOtckTV4fJi1PsgRCY0bN0Za2UYHl8%2FSK7AgAYPxfhqvey7g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b9345be20b69-OSL
alt-svc: h2=":443"; ma=60
sarafan2.blogspot.com/search/label/%E2%80%9Dhttp://www.barefootmommies.com/wp-content/uploads/2010/03/Spring-Fling.jpg%E2%80%9D
216.58.207.193404 Not Found 34 kB URL HTTP/1.1 sarafan2.blogspot.com/search/label/%E2%80%9Dhttp://www.barefootmommies.com/wp-content/uploads/2010/03/Spring-Fling.jpg%E2%80%9D
IP 216.58.207.193:0
Hash 6d827e2ecc6d068549c8efd014082c2e
738004e2a31a714f995f649d5414effcca385be1
bbcdb8f11dcb4def90c2ebbac2490886e5c71138fbae2ae7f96e99786df974d1
Analyzer Verdict Alert fortinet Phishing
GET /search/label/%E2%80%9Dhttp://www.barefootmommies.com/wp-content/uploads/2010/03/Spring-Fling.jpg%E2%80%9D HTTP/1.1
Host: sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/search/label/DWTS%20Week%209%20Semi%20Finals
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 36954
Server: GSE
i25.tinypic.com/xds406.jpg
54.230.111.108301 Moved Permanently 0 B URL HTTP/1.1 i25.tinypic.com/xds406.jpg
IP 54.230.111.108:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /xds406.jpg HTTP/1.1
Host: i25.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:17 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: nhHu_8fLfBNCZwRoYDXrT2V7SWRjm53WgHOl-MbIYU8zhpWjjzvLeQ==
i371.photobucket.com/albums/oo154/FeistyFrugalandFab/buttoncopynewnewnew.jpg
54.230.111.106200 OK 3.5 kB URL HTTP/1.1 i371.photobucket.com/albums/oo154/FeistyFrugalandFab/buttoncopynewnewnew.jpg
IP 54.230.111.106:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c7b376d8bb892be04f2cdd457fec9a35
501b59d7abbed65e8aed6eb04160c895a36e401f
f722b141862dac05b2abf436197f079a2f62f95486c7eac2d219667ea95a3369
GET /albums/oo154/FeistyFrugalandFab/buttoncopynewnewnew.jpg HTTP/1.1
Host: i371.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 3534
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="buttoncopynewnewnew.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-76ed618841922de6279433a0
X-Request-Id: yJYgI6yk6-hKB8tOz8Wsj
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 b053873243f91b1bb6dc406ce0c67db4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UFq3DlDYUD5ue2TbCtdOKr-J4kEJf6QkF2SbWP045cOnVOs-OlFPIA==
i291.photobucket.com/albums/ll294/dotcomkari3/button1.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i291.photobucket.com/albums/ll294/dotcomkari3/button1.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/ll294/dotcomkari3/button1.png HTTP/1.1
Host: i291.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i291.photobucket.com/albums/ll294/dotcomkari3/button1.png
X-Cache: Redirect from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: Z8rDyJlg3vy6gvTElSmb2Hu3Kt9Dpmw4_tq5hjY6xLPFivEKBQqmKg==
Vary: Origin
i33.tinypic.com/2ivbeoz.jpg
54.230.111.108301 Moved Permanently 0 B URL HTTP/1.1 i33.tinypic.com/2ivbeoz.jpg
IP 54.230.111.108:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2ivbeoz.jpg HTTP/1.1
Host: i33.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:17 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: d9Gq8b0TjxKNTL9UzPyONg1EhpmqiXO1G0_jVsKALekuN8sSa2sBug==
i749.photobucket.com/albums/xx133/miryfaye/Screenshot2010-05-28at73921PM.png
54.230.111.82301 Moved Permanently 167 B URL HTTP/1.1 i749.photobucket.com/albums/xx133/miryfaye/Screenshot2010-05-28at73921PM.png
IP 54.230.111.82:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/xx133/miryfaye/Screenshot2010-05-28at73921PM.png HTTP/1.1
Host: i749.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i749.photobucket.com/albums/xx133/miryfaye/Screenshot2010-05-28at73921PM.png
X-Cache: Redirect from cloudfront
Via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: opkxJtFLSv5AuU7xUJZxJZmIBVQ-z7u_6jdn07QouD4cnt8HMmZ7lQ==
Vary: Origin
lh4.ggpht.com/_RSgrKHWI2D0/SW4te_9-3zI/AAAAAAAACu4/1kcFikGF_v4/s144/hmw3.jpg
142.250.74.161200 OK 11 kB URL HTTP/1.1 lh4.ggpht.com/_RSgrKHWI2D0/SW4te_9-3zI/AAAAAAAACu4/1kcFikGF_v4/s144/hmw3.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 144x144, components 3\012- data
Hash f45c31e5498c48e8923e7bb53df2960a
5d6ef48b9ae010b6f2799b73fc1a74e572bc3df0
b3c0889cfb6594bb1e32d63bbbbf00b0b768159bcafe4a951363a4f22c9a29fc
GET /_RSgrKHWI2D0/SW4te_9-3zI/AAAAAAAACu4/1kcFikGF_v4/s144/hmw3.jpg HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vaee"
Expires: Tue, 21 Feb 2023 05:08:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="hmw3.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: fife
Content-Length: 10729
X-XSS-Protection: 0
juststopscreaming.com/wp-content/uploads/2009/11/tonibutton.png
178.128.30.1404 Not Found 345 B URL HTTP/1.1 juststopscreaming.com/wp-content/uploads/2009/11/tonibutton.png
IP 178.128.30.1:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 04d90f605b6f720faa0478287c82e33b
e9d46d2fe2787b995d9a1d8069448c33034c0659
614d3728a4fce8a6487c6002b34b8f8a81ab68cdd0ce5fa814a5fb020547bfa8
GET /wp-content/uploads/2009/11/tonibutton.png HTTP/1.1
Host: juststopscreaming.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Content-Type: text/html
Last-Modified: Mon, 05 Nov 2018 10:20:49 GMT
Accept-Ranges: bytes
Content-Encoding: gzip
Vary: Accept-Encoding
Content-Length: 345
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: LiteSpeed
4.bp.blogspot.com/_h4K5t1yZpro/S42MZAoYAAI/AAAAAAAAAmY/VN0V3CYDnj4/s320/444.jpg
142.250.74.161404 Not Found 832 B URL HTTP/1.1 4.bp.blogspot.com/_h4K5t1yZpro/S42MZAoYAAI/AAAAAAAAAmY/VN0V3CYDnj4/s320/444.jpg
IP 142.250.74.161:0
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_h4K5t1yZpro/S42MZAoYAAI/AAAAAAAAAmY/VN0V3CYDnj4/s320/444.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
2.bp.blogspot.com/_vMn5cIVGwZw/S9ikaWIasrI/AAAAAAAAFag/rijqKLKjQKs/s320/button.png
142.250.74.161200 OK 78 kB URL HTTP/1.1 2.bp.blogspot.com/_vMn5cIVGwZw/S9ikaWIasrI/AAAAAAAAFag/rijqKLKjQKs/s320/button.png
IP 142.250.74.161:0
File type PNG image data, 206 x 168, 8-bit/color RGB, non-interlaced\012- data
Hash 457e537e1cb69c357cc429f138f1767c
898c6b0a2c723a070163e3f350f34413f5df5912
8fecc14960c4c308badc62c889356aface7c1cb539f95b06b03b84f7b9f25373
GET /_vMn5cIVGwZw/S9ikaWIasrI/AAAAAAAAFag/rijqKLKjQKs/s320/button.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v15a8"
Expires: Tue, 21 Feb 2023 05:08:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="button.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: fife
Content-Length: 78495
X-XSS-Protection: 0
i806.photobucket.com/albums/yy349/ckachelmuss/button.png
54.230.111.3200 OK 4.2 kB URL HTTP/1.1 i806.photobucket.com/albums/yy349/ckachelmuss/button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c58cf8dec5035d9ef5c3651a8e94c67a
8f643aee8a66a0ffa4623931361ad4c014404b78
7bf2fed1d48ba35c261448c31acb0c26595fb4caaf214a721feaacda765429aa
GET /albums/yy349/ckachelmuss/button.png HTTP/1.1
Host: i806.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4212
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="button.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-56409f974eb6adfb7f7318bd
X-Request-Id: MnLIto_brjHhP6BluLJol
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: FMzuXNt6WfLZ6MF5hVTmfa035c5iTy3cF9rv-SYVc8WObXuSQtyg_g==
i706.photobucket.com/albums/ww61/gograhamgoads/gggbutton112709.gif
54.230.111.82200 OK 7.8 kB URL HTTP/1.1 i706.photobucket.com/albums/ww61/gograhamgoads/gggbutton112709.gif
IP 54.230.111.82:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash fdcf42f730bb4d5bc0c4076e0b328216
01303b413fff690287c92a15412f3e2b1a053916
1b26ba32c3eb03b7bf98507b21b9514909c822c38fc7d7ebe5ad445329bed6c6
GET /albums/ww61/gograhamgoads/gggbutton112709.gif HTTP/1.1
Host: i706.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 7784
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="gggbutton112709.gif"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-5f23ecaa2f94508879c47bf8
X-Request-Id: EFsGVLEa95RQ0zAoSBeOi
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: EjnuYNvq5bJidD83hzp0avUtAsmXZLH1VyDKRTB7fpUuBH-SXl2dzA==
www.facebook.com/plugins/like.php?href=http://sarafan2.blogspot.com/2011/11/dwts-week-9-semi-finals.html&layout=standard&show_faces=false&width=100&action=like&font=arial&colorscheme=light
157.240.200.35301 Moved Permanently 0 B URL HTTP/1.1 www.facebook.com/plugins/like.php?href=http://sarafan2.blogspot.com/2011/11/dwts-week-9-semi-finals.html&layout=standard&show_faces=false&width=100&action=like&font=arial&colorscheme=light
IP 157.240.200.35:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=http://sarafan2.blogspot.com/2011/11/dwts-week-9-semi-finals.html&layout=standard&show_faces=false&width=100&action=like&font=arial&colorscheme=light HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.facebook.com/plugins/like.php?href=http://sarafan2.blogspot.com/2011/11/dwts-week-9-semi-finals.html&layout=standard&show_faces=false&width=100&action=like&font=arial&colorscheme=light
Content-Type: text/plain
Server: proxygen-bolt
Date: Mon, 20 Feb 2023 05:08:16 GMT
Connection: keep-alive
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a2a464407078b26af3755a9fa4549363
ab3f6dea5928135aebb7c2bc4bf8e25031955ee5
d21bb3b5a45b40bc33191e45a88a40cac7227855f152558400cb9d8ab9c01dde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5398
Cache-Control: max-age=130965
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:16 GMT
Etag: "63f247bf-117"
Expires: Tue, 21 Feb 2023 17:31:01 GMT
Last-Modified: Sun, 19 Feb 2023 16:01:03 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
www.caring.com/candle/img/candle-alzheimers.png
54.210.23.207301 Moved Permanently 178 B URL HTTP/1.1 www.caring.com/candle/img/candle-alzheimers.png
IP 54.210.23.207:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /candle/img/candle-alzheimers.png HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.caring.com/candle/img/candle-alzheimers.png
Strict-Transport-Security: max-age=31536000; includeSubdomains
i432.photobucket.com/albums/qq44/joannabrittain/linkpieceofme125copy.jpg
54.230.111.82200 OK 4.8 kB URL HTTP/1.1 i432.photobucket.com/albums/qq44/joannabrittain/linkpieceofme125copy.jpg
IP 54.230.111.82:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6a797d39850be8b0a4abafe5b16c48bd
b4bb2d95e7606a982b405a80236d9503b000c92d
7a8c9e0fa1a49064ff4b84d0f589da9e5ddecbd9ca729259911648ef84232804
GET /albums/qq44/joannabrittain/linkpieceofme125copy.jpg HTTP/1.1
Host: i432.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Content-Type: image/webp
Content-Length: 4790
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="linkpieceofme125copy.webp"
Content-Security-Policy: script-src 'none'
Expires: Tue, 20 Feb 2024 05:08:16 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-63f30040-7d4058ac1a3ee70e44183597
X-Request-Id: Z8uAMYgm2x6jV1SxYwbF0
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: lXMmN_zNq0BzCbPjLyKxELg7OOOjPxkPmK96jAvadIvbZPjqXW9dxA==
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 1a798bdf1849b1f679943e04889dadfa
8a9acb4c1b664ad030be9bb0c150a9a6f450339c
3dd9ce15729f02ecff360e90d8c751b5cd42d0d11341b6b3bba65f39d76cc6cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i489.photobucket.com/albums/rr258/aryaflower/125x125-2.png
54.230.111.82403 Forbidden 255 B URL HTTP/1.1 i489.photobucket.com/albums/rr258/aryaflower/125x125-2.png
IP 54.230.111.82:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash e488f82c30f0600222e864fe6dcc45b3
b0074642876cdda3f6630e6242e70444c92eb2e7
953a731ba1c7026a6d01dea0ee5dfba84df2ce1ec5e9090f47f285022830cfd0
GET /albums/rr258/aryaflower/125x125-2.png HTTP/1.1
Host: i489.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vz4gG1cgZyBoRkqGg4UGGTGkpAMITj8k2dccoizoDZ_Ac4tWneG2xQ==
www.caring.com/candle/img/caring-logo.gif
54.210.23.207301 Moved Permanently 178 B URL HTTP/1.1 www.caring.com/candle/img/caring-logo.gif
IP 54.210.23.207:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /candle/img/caring-logo.gif HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.caring.com/candle/img/caring-logo.gif
Strict-Transport-Security: max-age=31536000; includeSubdomains
s877.photobucket.com/albums/ab336/BusyWorkingMama/IMAGE.png
54.230.111.84502 Bad Gateway 960 B URL HTTP/2 s877.photobucket.com/albums/ab336/BusyWorkingMama/IMAGE.png
IP 54.230.111.84:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b8390b38efda43d333987fa5bb0b901e
e8520b94985e52c4261dab30dfee2bee5e355d84
6db61445d1cb685b11abba9f7e2fbd8d2dbef83dfeda9fd4870b85c102828567
GET /albums/ab336/BusyWorkingMama/IMAGE.png HTTP/1.1
Host: s877.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 502 Bad Gateway
server: CloudFront
date: Mon, 20 Feb 2023 05:08:16 GMT
content-type: text/html
content-length: 960
x-cache: Error from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LwNaJZCZKCp5LYjGidam4p-c4Zu87S1hS8yiXoy-ZevPYAyCGgkUNQ==
X-Firefox-Spdy: h2
i291.photobucket.com/albums/ll294/dotcomkari3/button1.png
54.230.111.3200 OK 5.2 kB URL HTTP/2 i291.photobucket.com/albums/ll294/dotcomkari3/button1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0ce52127bdd3767f8812f5d75c8cdd4f
ab80d56a7c378e8ea566d8aa9aac2a871e3bf167
4cdfefd874b1d93148c707941c69c65a9f5f2faf06d6e3264baf9fb5dec2fcfb
GET /albums/ll294/dotcomkari3/button1.png HTTP/1.1
Host: i291.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5164
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-0d207d4e5b105e2c04c30b4d
x-request-id: WCUlXU-2CKVnDCRfHmPsY
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 56qWrO1HzNQszVNsqK8_MILnh_FB2VYf7psPcyhp8OPOTwVVbXWuOw==
vary: Accept, Origin
X-Firefox-Spdy: h2
3kidsandus.com/images/3kidsandusbanner.jpg
155.138.175.71301 Moved Permanently 0 B URL HTTP/1.1 3kidsandus.com/images/3kidsandusbanner.jpg
IP 155.138.175.71:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/3kidsandusbanner.jpg HTTP/1.1
Host: 3kidsandus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx-rc
Date: Mon, 20 Feb 2023 05:08:16 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Location: https://3kidsandus.com/images/3kidsandusbanner.jpg
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
www.thesitewizard.com/images/tsw88x31pow.gif
69.5.9.180200 OK 582 B URL HTTP/1.1 www.thesitewizard.com/images/tsw88x31pow.gif
IP 69.5.9.180:0
ASN #22915 FUTUREQUEST-INC
File type GIF image data, version 89a, 88 x 31\012- data
Hash 9c1da9ec0e9054d27924b2708901b5fe
30410e5e25b2ac1ed9c664f28545e3da87acce7f
b40b9b4f0521898419e29b29b3b044fad3c02bc608c0ac50af6600ccc9da4577
GET /images/tsw88x31pow.gif HTTP/1.1
Host: www.thesitewizard.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: Apache
X-UA-Compatible: IE=edge
X-FRAME-OPTIONS: deny
Content-Security-Policy: frame-ancestors 'none';
Last-Modified: Mon, 09 Jul 2001 11:26:42 GMT
ETag: "3a4e93-246-3b4994f2"
Accept-Ranges: bytes
Content-Length: 582
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive
Content-Type: image/gif
i845.photobucket.com/albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png
54.230.111.3200 OK 5.0 kB URL HTTP/2 i845.photobucket.com/albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45c760e9c94520f5d6b6219e178475cb
410f08010d10c755cb5365b4686208c19d686a1d
49a0ebc39221d4c2f11673f9af01d017dd508b6b6981788fe24bf47026013632
GET /albums/ab13/jacquiblogger/wackyjacquisdesigns/button-125.png HTTP/1.1
Host: i845.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5026
date: Mon, 20 Feb 2023 05:08:16 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button-125.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:16 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-558e115e78a76f340d0a257c
x-request-id: Gxe0FXIznDBljH0BynhoL
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: idYDdaii0fE3M_uq8-eiJ2u34vNMdsJu2hSgmhn1EOE4RqDaphjDWw==
vary: Accept, Origin
X-Firefox-Spdy: h2
3.bp.blogspot.com/_GF9ffMDWP9A/TSC1Vh4yEKI/AAAAAAAAAvM/T8zPpYMEC_g/S241/over40pic3-2.jpg
142.250.74.161200 OK 14 kB URL HTTP/1.1 3.bp.blogspot.com/_GF9ffMDWP9A/TSC1Vh4yEKI/AAAAAAAAAvM/T8zPpYMEC_g/S241/over40pic3-2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 182x158, components 3\012- data
Hash 8fb2f76bd409c081076ded57bd0cbb98
db52071ce239b771be2863d57edc17ccdf0ecd8a
4f20940ac74b80495bbc378459dd55d14d2942e9d0fdea5ff0e80b7819821be5
GET /_GF9ffMDWP9A/TSC1Vh4yEKI/AAAAAAAAAvM/T8zPpYMEC_g/S241/over40pic3-2.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2f3"
Expires: Tue, 21 Feb 2023 05:08:17 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="over40pic3-2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:17 GMT
Server: fife
Content-Length: 14494
X-XSS-Protection: 0
i707.photobucket.com/albums/ww76/jenniffer17_photos/33a-Copy-3.jpg
54.230.111.106403 Forbidden 255 B URL HTTP/1.1 i707.photobucket.com/albums/ww76/jenniffer17_photos/33a-Copy-3.jpg
IP 54.230.111.106:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash 487718be9a6958e8c7a10940723a6d18
068b7fa907a8a29ed00d6f64c9272e0be27ed6d0
53cc5ebe39c028bee6781949d2d951660e2825b8c922671e5984c3622aa5d0b7
GET /albums/ww76/jenniffer17_photos/33a-Copy-3.jpg HTTP/1.1
Host: i707.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Mon, 20 Feb 2023 05:08:16 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: LGo24Db_DhrWzAySDtPf77FpoBN3T-pVxTAhosvOsi6I_hnfaoHSGg==
i845.photobucket.com/albums/ab13/jacquiblogger/button-2.png
54.230.111.3200 OK 4.4 kB URL HTTP/2 i845.photobucket.com/albums/ab13/jacquiblogger/button-2.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 945762796dd25d91c22b9e6ea6869419
ff2569b7a0bdfc5ae15ea602f5c4174c9ec5c65b
94f8764fc1d988034ba74a7a4e8a438ce2757a76d67562a92a633594ef255eb0
GET /albums/ab13/jacquiblogger/button-2.png HTTP/1.1
Host: i845.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4354
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-0647e2d90383b1db0848dbd7
x-request-id: LMMOPh3wlI2mkiktnS-iz
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fbh7X6NMHGGD-XrbHPVEuJg2tBo95JrFuHOODrliAE2QxHhkKzLKiw==
vary: Accept, Origin
X-Firefox-Spdy: h2
tinypic.com/images/goodbye.jpg
54.230.111.66200 OK 16 kB URL HTTP/1.1 tinypic.com/images/goodbye.jpg
IP 54.230.111.66:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 32af06ac4b80d728f7e4c8780eb6b6d7
dd3198f4361e94f2c3606474e04a629e42402d02
f610dc2752e938d77dab1c4e9fb1f0f7f53b25e527d130ce4e034b7de09da053
GET /images/goodbye.jpg HTTP/1.1
Host: tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 15616
Connection: keep-alive
Last-Modified: Wed, 18 Sep 2019 21:23:53 GMT
Server: AmazonS3
Date: Sun, 19 Feb 2023 07:01:38 GMT
ETag: "32af06ac4b80d728f7e4c8780eb6b6d7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BrdBm0NxGYrPRrdBUcKPD2adLRXOloe_PE9s21Y-JjgZq4C2pMaVkA==
Age: 79743
i1190.photobucket.com/albums/z451/hyanne/Templates/button-2.png
54.230.111.3200 OK 4.4 kB URL HTTP/2 i1190.photobucket.com/albums/z451/hyanne/Templates/button-2.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1b63b4052fc034dca7d44689e09ce794
67868b2ee5c936c50ac1a912064a1e74996b74a5
ef9f7f37938a5659d1dee7a538b3eb6444f0b5428fe6438ee4474b988b99044c
GET /albums/z451/hyanne/Templates/button-2.png HTTP/1.1
Host: i1190.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4358
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-46ae0d8b531a4f522d417b9f
x-request-id: j9a_TvkFxX2tzPtCIxKJx
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: koLNudPo8xfJ2uF_FlmAZvVquJaMsupX2q7-ElqFnkdDx-Y_FwGDwg==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
208.82.16.81301 Moved Permanently 169 B URL HTTP/2 www.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
IP 208.82.16.81:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd6987d71fad7058a993a9028dc40454
3ed872fa3a00837bb008ad9d201850e2ea57a79f
f0e759f444eb3a324b621f0548919424455e81441d42ea6bc6bcd2b24fce1b92
GET /files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png HTTP/1.1
Host: www.ning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: text/html
content-length: 169
location: https://cdn.ning.com/files/*zB*JGAoJEE8MRthCvsIC5UtqHD3h*C-sxBfKylL7rSrrSFP6nvbXaVyp4vZ6A3xZ4ti0Uwv52xXqOqBj9I5F3o37C-byOEI/bloggymomsbutton.png
server: Unknown
x-request-id: b4d017311f65346b5ef8c36077d2be30
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 670f90cf9362e8bd4bc8b04e7f943496
e97c5eacc56488bd835a180f85f7acf84e154a28
c042ea84e9c11577280f8636960e23ed927a1a045e9c91e9d27cf4786a19c19a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:17 GMT
Etag: "63f1c221-117"
Server: ECS (amb/6B74)
Content-Length: 279
i166.photobucket.com/albums/u83/jst8761/gd/th_d0202.gif
54.230.111.3200 OK 78 kB URL HTTP/2 i166.photobucket.com/albums/u83/jst8761/gd/th_d0202.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 250 x 270\012- data
Hash 1c26a63ed16a08c0f741cabb73a04b49
cbe31aa5bba4152b4f2cca6cae44ffb1cf9b2a81
5adead66a21b0960b024a4ec347719097eaa5a2ce1a712956522cd27dd94f9e8
GET /albums/u83/jst8761/gd/th_d0202.gif HTTP/1.1
Host: i166.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 77760
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="d0202.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-01306bf96ebff2fb6527d6d8
x-request-id: D64d3CNunKmFeuWlZxJZU
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9V8xi_xseCvbe27GMk66fk4bCaZXQMFBKCsCTdoz4IGy4Amnt9C7ww==
vary: Accept, Origin
X-Firefox-Spdy: h2
2.bp.blogspot.com/_GF9ffMDWP9A/TLUCKBIG6OI/AAAAAAAAAkA/MehIl0qK6a8/S241/frito-lay_badge.png
142.250.74.161200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/_GF9ffMDWP9A/TLUCKBIG6OI/AAAAAAAAAkA/MehIl0qK6a8/S241/frito-lay_badge.png
IP 142.250.74.161:0
File type PNG image data, 141 x 132, 8-bit/color RGBA, non-interlaced\012- data
Hash 73ffacd45db5550792bc62f0b02783f6
5160f7fe6aecb7a74755f6df85f467179c8d7975
cdee0384e2b25f7e653a39087d5f0e1d769e2f630f33b4696829db44d9d43c52
GET /_GF9ffMDWP9A/TLUCKBIG6OI/AAAAAAAAAkA/MehIl0qK6a8/S241/frito-lay_badge.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v240"
Expires: Tue, 21 Feb 2023 05:08:17 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="frito-lay_badge.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 20 Feb 2023 05:08:17 GMT
Server: fife
Content-Length: 10659
X-XSS-Protection: 0
i216.photobucket.com/albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg
54.230.111.3200 OK 5.4 kB URL HTTP/2 i216.photobucket.com/albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c95292df49ce5c402de5d8fdecb57fdc
4ead996cb0b12b717c57bac7cf428f664d30d2e5
12b2f09cc5353adf0809b104074f9e16aeba4cc30fccea8b42592664c0b564f9
GET /albums/cc206/BusyBee68/Iheartblogginghopbutton.jpg HTTP/1.1
Host: i216.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5364
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Iheartblogginghopbutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30040-3724e4943d3c846c2af98f0e
x-request-id: nCWUdJb8N6Z2AgoMwuLAB
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: SMBcEqMQX5Lipj0kSh5rzDEsVIXMq38T2BJIqVEfRDBvSHF9fRSb7A==
vary: Accept, Origin
X-Firefox-Spdy: h2
i4.photobucket.com/albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i4.photobucket.com/albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/y108/BrunetteKisses/ObviouslyMarvelousButton2.jpg HTTP/1.1
Host: i4.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nL7UZmTjs8uSu214bWG-WsGmsXQvBJcwylqSh2l8j12Bhr585u9DLA==
age: 61892
X-Firefox-Spdy: h2
i1197.photobucket.com/albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i1197.photobucket.com/albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/aa429/mommyssweetthings/V%20Customers/ValerieClarkButton.png HTTP/1.1
Host: i1197.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f-gTSCLDqxFmI_C72XLnzDTRA0EIM3KRhnhxq8mdqgWCAvkri3kPNA==
age: 61892
X-Firefox-Spdy: h2
i196.photobucket.com/albums/aa231/Elaineizwriting/150REDO2JPEG.jpg
54.230.111.3200 OK 6.8 kB URL HTTP/2 i196.photobucket.com/albums/aa231/Elaineizwriting/150REDO2JPEG.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8a546a4c7c15718529076ee426246889
8b84a86eb4d369e39cd365fc8f3202c7c6bd1f97
caef077256f0aba17b43c84009c2457309e7c6930ccc047184dea84b3a108d4f
GET /albums/aa231/Elaineizwriting/150REDO2JPEG.jpg HTTP/1.1
Host: i196.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6770
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="150REDO2JPEG.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-3547c21d638ce07c4f08366d
x-request-id: V1yzifbpZ948REltcZUou
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EPthLBIH4VV8d4zr26yPiTeNYgQMqkxp73dgeHQs1vSamnBopzk8Hg==
vary: Accept, Origin
X-Firefox-Spdy: h2
img33.imageshack.us/img33/8065/sidebarimage2h.png
38.99.77.16404 Not Found 168 B URL HTTP/1.1 img33.imageshack.us/img33/8065/sidebarimage2h.png
IP 38.99.77.16:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img33/8065/sidebarimage2h.png HTTP/1.1
Host: img33.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
img11.imageshack.us/img11/6261/headerimage4.png
38.99.77.16404 Not Found 168 B URL HTTP/1.1 img11.imageshack.us/img11/6261/headerimage4.png
IP 38.99.77.16:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img11/6261/headerimage4.png HTTP/1.1
Host: img11.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3fd5be4ecf427ee41134ae0126c71d28
4260c0955ffd7f7fc126fdbca66b9b6356b25c3c
7bbe9c4320b1ad50558badd315bc0d8995c36d3fe57924a106fd457bdc009d9f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=134184
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:17 GMT
Etag: "63f26969-116"
Expires: Tue, 21 Feb 2023 18:24:41 GMT
Last-Modified: Sun, 19 Feb 2023 18:24:41 GMT
Server: nginx
Content-Length: 278
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
34.120.237.76200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c5a0bab7d34e51ee6476be179b356ba
87917d3cf520d73b7b1029f44505e7700413d51d
136e727a99409218318247b645558fad485ed84bcd90bd43a5895492cb317d89
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F881c24a9-07ee-4126-b2c3-501b0461ee5e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6879
x-amzn-requestid: 18c46562-f8d9-4f7f-8ea0-1bb46e206f80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ANnahEWgIAMFwYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e885dc-50a7cfe4693b4efb038ce1a7;Sampled=0
x-amzn-remapped-date: Sun, 12 Feb 2023 06:23:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwK1XWOYMXy8qna9sVCV7q__QKMko9KXa8towbYhIj1EolPbqEuIHQ==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Feb 2023 15:50:17 GMT
age: 47880
etag: "87917d3cf520d73b7b1029f44505e7700413d51d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
i86.photobucket.com/albums/k115/katiehare223/th_retrr-3.gif
54.230.111.3200 OK 45 kB URL HTTP/2 i86.photobucket.com/albums/k115/katiehare223/th_retrr-3.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 380 x 333\012- data
Hash eba5f2f675e20862ca0e41c2aac62d00
41374e47fdbd82d8edaed78069d2031281ef3a5e
8dc533acfc0c6086a283bcf78fd6414ec86c040e851460a28ba641df634ae2d4
GET /albums/k115/katiehare223/th_retrr-3.gif HTTP/1.1
Host: i86.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 44574
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="retrr-3.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-6ee42a881dea53b977fd7edc
x-request-id: qumsZcw3oQWJShqC5iqNS
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: CGwQTuCWuiMZFetuqyvAZyjzOd7df7tHsN9tNLZt2QLnxBWVIWCxog==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c9e43ae4b9922d1006760249b8622c53
23dc933cbca30476c3d60eb0561bceb8f7284136
d0f9693caf78d1f9edbe194894c14b5de39612f3056621b5b6a6df967369037b
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 17 Feb 2023 11:52:33 GMT
Expires: Fri, 24 Feb 2023 11:52:32 GMT
Etag: "23dc933cbca30476c3d60eb0561bceb8f7284136"
Cache-Control: max-age=369254,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79c4b9367f0d1c06-OSL
sarafan2.blogspot.com/chgoto.js
216.58.207.193404 Not Found 8.7 kB URL HTTP/1.1 sarafan2.blogspot.com/chgoto.js
IP 216.58.207.193:0
Hash b634d5508c51ec5d0bb19db5eabaac93
61179b750c1702aea6a334634258f10dccb0665d
1b71fca25f4ba2e788c695b5f5ab30e132544fa6dbfe7d131a2cf09c551151d8
Analyzer Verdict Alert fortinet Phishing
GET /chgoto.js HTTP/1.1
Host: sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 36876
Server: GSE
i1215.photobucket.com/albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg
54.230.111.3200 OK 6.4 kB URL HTTP/2 i1215.photobucket.com/albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b391f1dcb9a7aa42bb1baaa017b3830e
6ff24567c9cab09ee879f81ae6fd80798ebf33a7
c0eda7debfe36b1825671186bb53219ee0e657a15eb6e7f955cae689287b4f73
GET /albums/cc505/katherine_bartlett/ShabbyHappyComments.jpg HTTP/1.1
Host: i1215.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6386
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="ShabbyHappyComments.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-387072bf033fbcc87940f804
x-request-id: ZbO4xU_9na4kIGP4uDpw6
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GLPxdfu-laBmn0IexmTcKTvCMktNNmIFqNi60IV6aA9NDGJ55gaO1g==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.blogoversary.com/
104.21.46.241301 Moved Permanently 0 B IP 104.21.46.241:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: www.blogoversary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:17 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 20 Feb 2023 06:08:17 GMT
Location: https://www.blogoversary.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fxZy6FBN2%2FmMK4Z9HcsqV39Uq9y%2BjwF%2FT%2BRltXJAeqCh4IR72fJUAYn4BMTY0QOchyOHkA7LlgW4AFEqMaWKjW%2BTIWRBcD1oXhZ0ozD7WpvT93aeJmz9ulKYrDG6kQub%2FckNRSDgDA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b937bc130b65-OSL
alt-svc: h2=":443"; ma=60
ocsp.sca1b.amazontrust.com/
54.230.245.118200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 54.230.245.118:0
Hash 162d6f9f4388a42d2da500f0e89c525d
fdd55edc5b68b7f17c5faec76f8c6446254a48b3
3adcf86913e6690149d5b29f0112dd4ebf4b58e9299ae66a4b3d9692eb69e2e4
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: 'max-age=158059'
Date: Mon, 20 Feb 2023 05:08:17 GMT
Etag: "63f1016d-1d7"
Server: ECS (dcb/7F3A)
X-Cache: Miss from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kvj7hr-IvPAEHdNu8A74Y8Jaymzqrh56v3gWcm3rQj7yqN-Xp6U5AQ==
i711.photobucket.com/albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i711.photobucket.com/albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/ww111/ShabbyBlogs/CheatDayCafeBlinkie2.gif HTTP/1.1
Host: i711.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: c3m_ywRCHdyiR9lS09Iqd_lhoGfrOre_BKsp38TTJLExFFdTE1z8NA==
age: 61892
X-Firefox-Spdy: h2
i305.photobucket.com/albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i305.photobucket.com/albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/nn226/skinsgaloreandmore/bkg/mopiinewbut.gif HTTP/1.1
Host: i305.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ynNi1ok6BQbUgAnMsF8Ccs3sfL5u9Kq3rWCHyhaCALi0Al3FFLsCAg==
age: 61892
X-Firefox-Spdy: h2
i290.photobucket.com/albums/ll251/shaunach/Pan-1.jpg
54.230.111.3200 OK 6.7 kB URL HTTP/2 i290.photobucket.com/albums/ll251/shaunach/Pan-1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c61ae3ac51e8a16583ff1a4554e28e95
9927a33959f9f7df7bdbbebe3230a66eccee263f
b7b5669c3105422176a9491e1dd5fab34484466aa54e0a2bcc45608a28aed75e
GET /albums/ll251/shaunach/Pan-1.jpg HTTP/1.1
Host: i290.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6690
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Pan-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-52346d9856c1008c30013a40
x-request-id: TBRizkyHqlh1lFO_Zoz-J
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6C-z0IwJCaB05AsxkMblQyILNQjPGGxl5X6d3IbVEOGhfv56mhu5SA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i711.photobucket.com/albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i711.photobucket.com/albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/ww111/ShabbyBlogs/ShabbyBlogsButton2-2.jpg HTTP/1.1
Host: i711.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 14lAtzJsHZ06JqObsHrWRLX_UV3icbIC7WyxopWLqyDpZG3Q68ARkQ==
age: 61892
X-Firefox-Spdy: h2
i290.photobucket.com/albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png
54.230.111.3200 OK 4.4 kB URL HTTP/2 i290.photobucket.com/albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8b30aaccf684d5654b0939f53efc8687
193033b1cb7c65e3bd9aa84e600389f778b834ce
680f5ca96eb15959567ed220da5963836e6cf4a86b35a11f971694f873a3ccf2
GET /albums/ll251/shaunach/Blog%20graphics/LeelouBlogsT2SClink.png HTTP/1.1
Host: i290.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4390
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="LeelouBlogsT2SClink.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-64092648616a538469fe769a
x-request-id: iNuUbsyCA9s9GU1O70W3Y
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: F0cTHBG_DmoDu8DNnubcr7UR4jE80wGbA7YDn-jS-H7j10nevDO27Q==
vary: Accept, Origin
X-Firefox-Spdy: h2
pub29.bravenet.com/counter/show.php?id=410015&usernum=2472230615&cpv=2&ref=
65.39.176.102200 OK 0 B URL HTTP/1.1 pub29.bravenet.com/counter/show.php?id=410015&usernum=2472230615&cpv=2&ref=
IP 65.39.176.102:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /counter/show.php?id=410015&usernum=2472230615&cpv=2&ref= HTTP/1.1
Host: pub29.bravenet.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:17 GMT
Server: Apache
Set-Cookie: BNU=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.bravenet.com
BNP=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; path=/; domain=.bravenet.com
BNETSESSID=f460num4g7ujqsbsrisl4fbrn4; path=/; domain=.bravenet.com
HASCOOKIES=1; expires=Thu, 17-Feb-2033 05:08:17 GMT; path=/; domain=.bravenet.com
ETag: PUB29-b87d537e5fb57f97093c7dd42d552c52b274a467-1676869697.1522
Last-Modified: Mon, 20 Feb 2023 05:08:07 GMT
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Pragma: no-cache
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
P3P: policyref="/w3c/p3p.xml", CP="NOI DSP LAW NID PSA ADM OUR IND NAV"
Content-Length: 0
Content-Type: text/html; charset=UTF-8
i1090.photobucket.com/albums/i369/disney5274/AD-5.png
54.230.111.3200 OK 3.2 kB URL HTTP/2 i1090.photobucket.com/albums/i369/disney5274/AD-5.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash b77abf7183746f37137591bcd3e7cc92
d76363115768a893f42da451392d9d5c852740e1
b46ec4a6b6f030cff0793d807632d623989b222625e0961fcda8020259330a17
GET /albums/i369/disney5274/AD-5.png HTTP/1.1
Host: i1090.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3190
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="AD-5.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-22efd2ed729b97ab63f9dfc4
x-request-id: PyWrZoL9R1ZLyygFLteAR
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: o0LPtQlrcMDOIpZ_RlFIrwhyunPi3wBe65uySVW0uYrbxuKBWqr3mA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i867.photobucket.com/albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg
54.230.111.3200 OK 6.9 kB URL HTTP/2 i867.photobucket.com/albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash d78d47c177a91527e75f0ddaca0e92e9
ba85f624d26020e9c031b4b9ac53e23ca8a0c4c9
9fd1757974ee15e36a5632c058b1161449c66f8c2cdded6a79312c6132971bda
GET /albums/ab237/thcgraphics/Buttons%20Requested/fsranotherbutton.jpg HTTP/1.1
Host: i867.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6880
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="fsranotherbutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-7683ec82660acd706fbae37c
x-request-id: ZP0csWuFVg9skWYsignaT
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: z-BKMXwMHfcY6z7b4q40xGhJugs6BQHrpNWbapoD8LArggguPAFteA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i110.photobucket.com/albums/n120/dragonfly101201/Album%202/button-1-3.jpg
54.230.111.3200 OK 6.9 kB URL HTTP/2 i110.photobucket.com/albums/n120/dragonfly101201/Album%202/button-1-3.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 65ea36dbb5e46571d8eabe27d6aca94b
ec62da6db3238e335ed9cb0f9483e325e671710c
c71528751fe39d6a2fd7b6f912d2ece5945f2daf63a0ae743f231c9f09e3fcd0
GET /albums/n120/dragonfly101201/Album%202/button-1-3.jpg HTTP/1.1
Host: i110.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6910
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button-1-3.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-2b94643f581d83b678de2dd3
x-request-id: p8WNfkb7K0_VYo2g25LzB
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 8dH0JZUOpxElRKSUJQc_S5JTJ8T0RMGVq5Tt8Y1-2Q4l_3xMEp23yA==
vary: Accept, Origin
X-Firefox-Spdy: h2
theblogfrog.com/widgets/blogfrogstyle.js
67.205.57.36301 Moved Permanently 0 B URL HTTP/2 theblogfrog.com/widgets/blogfrogstyle.js
IP 67.205.57.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/blogfrogstyle.js HTTP/1.1
Host: theblogfrog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:17 GMT
server: Apache
expires: Mon, 20 Feb 2023 06:08:17 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
location: https://www.theblogfrog.com/widgets/blogfrogstyle.js
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
i607.photobucket.com/albums/tt155/ahappyhippy/ahappyhippymombutton.png
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i607.photobucket.com/albums/tt155/ahappyhippy/ahappyhippymombutton.png
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/tt155/ahappyhippy/ahappyhippymombutton.png HTTP/1.1
Host: i607.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ME4b_M0eLkcmcn0U5-TKCxaRnIrsZhTLac9du9_HlFb4EeG0MZytNw==
age: 61892
X-Firefox-Spdy: h2
www.storksandmoreva.com/images/HowCindySeesIt.gif
192.185.52.126301 Moved Permanently 0 B URL HTTP/1.1 www.storksandmoreva.com/images/HowCindySeesIt.gif
IP 192.185.52.126:0
ASN #46606 UNIFIEDLAYER-AS-1
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/HowCindySeesIt.gif HTTP/1.1
Host: www.storksandmoreva.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Location: http://storksandmoreva.com/images/HowCindySeesIt.gif
Content-Length: 0
Keep-Alive: timeout=5, max=75
Content-Type: text/html; charset=UTF-8
apis.google.com/js/plusone.js
142.250.74.46200 OK 21 kB URL HTTP/2 apis.google.com/js/plusone.js
IP 142.250.74.46:0
File type ASCII text, with very long lines (1429)
Hash f8971f3ad662af35a2ca6871f8c78482
35a0b814d6ecec8deacc9aea87ce9be62b15d92b
a438d380bab44504b1ff13673a0e041c6ac6645d03926e7f076465d1fe049765
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Mon, 20 Feb 2023 05:08:17 GMT
expires: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "9dea963ca1c75dde"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i777.photobucket.com/albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png
54.230.111.3200 OK 6.5 kB URL HTTP/2 i777.photobucket.com/albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash f40677f1614ec26afd734ac6514d9a03
384633a97b01053aab8c88173e757eaed386d0b3
641a531856579ce4ebc3039817db178130d9b79c2d192193ed0394575fcd1b7e
GET /albums/yy60/LauraJaneDesigns/Life%20of%20Rylie/9aacbaad.png HTTP/1.1
Host: i777.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6532
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="9aacbaad.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-1defdc3565951d5421e93b39
x-request-id: qtBTpEb6iL8NhUmV4NZYT
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qkSroZxut9YVBWPfPM5Buf20vA2YNY6IYPpm6CRmq0FcA5uRjM816g==
vary: Accept, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash d4ac9f801a679b157b91fa677ebb239c
60632a77dced74c69cf8838a690f56e4fe871243
164b3cfe6ca0a111992541d976970670a386a525caaad05ee3856865534f038a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "164B3CFE6CA0A111992541D976970670A386A525CAAAD05EE3856865534F038A"
Last-Modified: Fri, 17 Feb 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21591
Expires: Mon, 20 Feb 2023 11:08:08 GMT
Date: Mon, 20 Feb 2023 05:08:17 GMT
Connection: keep-alive
i270.photobucket.com/albums/jj112/crystalpw/blue2.jpg
54.230.111.3200 OK 4.9 kB URL HTTP/2 i270.photobucket.com/albums/jj112/crystalpw/blue2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash db22a39d91dbe3f6529c208d3547a6d0
cea37aaedddf1dc0eef4efd2a5e02583ae9614a4
6ba91dd165ee7af12b2e4e9ab8fc9d3af419076d6e9924d1d5508968a9446929
GET /albums/jj112/crystalpw/blue2.jpg HTTP/1.1
Host: i270.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4854
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="blue2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-7f1498307d904bbf057f280e
x-request-id: nmFASz55zLOyw0w0Nvuy-
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ThAYjrxMAPZsc4rGYUdMuKhcXWt_WgI8asfnktaj7qeT6sap03cG7g==
vary: Accept, Origin
X-Firefox-Spdy: h2
i.imgur.com/xQwdY.gif
151.101.244.193200 OK 23 kB IP 151.101.244.193:0
File type GIF image data, version 89a, 120 x 125\012- data
Hash 18eab2781088bcd11c7dcc3245a80c69
7c65b6bec3c5111832aa3f763da49b478d7c0a43
a8ee394ae5bbd064135ddd8bb3f20bf5f82c4972ebc6453e609b5397c5b88ee7
GET /xQwdY.gif HTTP/1.1
Host: i.imgur.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Sun, 06 Nov 2011 02:02:08 GMT
etag: "18eab2781088bcd11c7dcc3245a80c69"
content-type: image/gif
cache-control: public, max-age=31536000
accept-ranges: bytes
date: Mon, 20 Feb 2023 05:08:17 GMT
age: 2817377
x-served-by: cache-iad-kjyo7100130-IAD, cache-hel1410024-HEL
x-cache: HIT, MISS
x-cache-hits: 14, 0
x-timer: S1676869697.395931,VS0,VE97
strict-transport-security: max-age=300
access-control-allow-methods: GET, OPTIONS
access-control-allow-origin: *
server: cat factory 1.0
x-content-type-options: nosniff
content-length: 22879
X-Firefox-Spdy: h2
www.conceptdesignstudios.com/images/mom_audience_button.png
188.114.97.1301 Moved Permanently 0 B URL HTTP/1.1 www.conceptdesignstudios.com/images/mom_audience_button.png
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/mom_audience_button.png HTTP/1.1
Host: www.conceptdesignstudios.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: max-age=16070400, must-revalidate
X-Redirect-By: WordPress
Location: http://conceptdesignstudios.com/images/mom_audience_button.png
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NT53EvSVHf3huP4r%2F3tBcs1k0VRA%2FDw2IIFIna58Po9MCYRbhPSFUDsZZubExCrDiifW8ZnwGBj5kpLfySH5aWM6FzMBqmv39m0q9E86KOzXBO%2BS5ENPIl7yYWgFjdsZ29o2GUGz4knAVySWXQ%2BK"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79c4b9305d0e0b39-OSL
alt-svc: h2=":443"; ma=60
i668.photobucket.com/albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg
54.230.111.3200 OK 6.8 kB URL HTTP/2 i668.photobucket.com/albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash c5d89aef14b307653e0ba55f3ba48d60
9c6ce8276c6f7decb11081532b951057fb9a515f
068bd8e20449bccdbedf3abcc5444f157cba447dc350c40d5a33a70aa1cc3cb8
GET /albums/vv43/dewer421421/Blog%20Design/Buttoncopy.jpg HTTP/1.1
Host: i668.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6778
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Buttoncopy.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-20035e4046278ee561f57c01
x-request-id: 7uDdDB63RT3RZNJcM_qDq
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sBVj4SafZY4rNMVOm9_Jt-m4_bJLjNhsp000N71e1pPPTpOJBbmw0w==
vary: Accept, Origin
X-Firefox-Spdy: h2
i73.photobucket.com/albums/i222/clairebear2323/blog%20design/365button.jpg
54.230.111.3200 OK 4.0 kB URL HTTP/2 i73.photobucket.com/albums/i222/clairebear2323/blog%20design/365button.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e5a1dd83267fbd66288d45c7b59a0681
db9a1630691f434ed3ab7db676e328d63c2f9c0b
582bb73456c25e041fc9f0bb17a5be84f3c13999298aa8aea66f942d1eafeb02
GET /albums/i222/clairebear2323/blog%20design/365button.jpg HTTP/1.1
Host: i73.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4034
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="365button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-3e9336b327dc4e2e6df83b58
x-request-id: iypeX4vvNoELMOAIQEGKW
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Y449eOYlUlgj5zMIPDDuIwUhb-LmNZa6wGVYEp-LtmMwIVz_vdUVzw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i954.photobucket.com/albums/ae28/MyFourMonkeys_photo/buttonnew.jpg
54.230.111.3200 OK 4.4 kB URL HTTP/2 i954.photobucket.com/albums/ae28/MyFourMonkeys_photo/buttonnew.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9354d8444aeee29b611ca81b540f1fe3
08b9d201d1fac0a83beb906e6792922f536861b2
bd4a25ce4d6b4e935f86a9692f3f0d090017e32ac1507b20f05c003ede624554
GET /albums/ae28/MyFourMonkeys_photo/buttonnew.jpg HTTP/1.1
Host: i954.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4426
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="buttonnew.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-3b085b175038d8be5ca76a36
x-request-id: HUE2nbg5R2gG33RpV8N2s
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7s9CGmt33GIfsAtJ-WkrfVrkf6hl6QXegn0E5uOkMAVGmWvciCqFCw==
vary: Accept, Origin
X-Firefox-Spdy: h2
www.caring.com/candle/img/candle-alzheimers.png
54.210.23.207200 OK 52 kB URL HTTP/2 www.caring.com/candle/img/candle-alzheimers.png
IP 54.210.23.207:0
File type PNG image data, 200 x 252, 8-bit/color RGBA, non-interlaced\012- data
Hash 24734fabacfbf7ac0245840a893e3b4c
5e8f231a7bcb33ae6eb7c39c12dcd75278710db7
4eb2c643063e9b4c247f0081135741f892958ce784af54d121209c52742d56ac
GET /candle/img/candle-alzheimers.png HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: image/png
content-length: 52420
last-modified: Thu, 26 Jan 2023 21:06:16 GMT
etag: "63d2eb48-ccc4"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
www.caring.com/candle/img/caring-logo.gif
54.210.23.207200 OK 964 B URL HTTP/2 www.caring.com/candle/img/caring-logo.gif
IP 54.210.23.207:0
File type GIF image data, version 89a, 222 x 32\012- data
Hash a9225e062fd172f01b1d4aabcee38869
0c320b7c82ff76a2298902054ab6dae79eeef910
3dc737b064c2219ea76c56ff9f9c027b35eb38f8dd8df5e3fb2755f5e5386b99
GET /candle/img/caring-logo.gif HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: image/gif
content-length: 964
last-modified: Thu, 26 Jan 2023 21:06:16 GMT
etag: "63d2eb48-3c4"
strict-transport-security: max-age=31536000; includeSubdomains
accept-ranges: bytes
X-Firefox-Spdy: h2
i270.photobucket.com/albums/jj104/lgtoews/mommombutton.png
54.230.111.3200 OK 6.2 kB URL HTTP/2 i270.photobucket.com/albums/jj104/lgtoews/mommombutton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a9a5db9cec7ceb229792b26d51cb2298
d6a26edeebe1db76e9b28da989db4c77a0dea1c0
aa9208b0ff6a03da9a73fc53d3d370de8f67da1e7a5920a2fe0d53164044c70a
GET /albums/jj104/lgtoews/mommombutton.png HTTP/1.1
Host: i270.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6158
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="mommombutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-72b80b7f4286a49b6cd68689
x-request-id: F56LrWNcB262KOlPpGqRy
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: mLuf-wa5sz2V6WK3uyFZSCMj4YvXIInynIJ9h4c9L6tKFtaLmcnH4w==
vary: Accept, Origin
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plus,plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_1?le=scs
142.250.74.46200 OK 15 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plus,plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_1?le=scs
IP 142.250.74.46:0
File type ASCII text, with very long lines (1012)
Hash 65f9889c108f8600794e2c3fe16a7756
e5bbb4c921baf017835326a4fe497f47dda8446d
822d94401b3257072345ea25c70995a64613da2b5f216a103833364f6f684e2d
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=plus,plusone/exm=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_1?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 14598
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Feb 2023 14:38:08 GMT
expires: Thu, 15 Feb 2024 14:38:08 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 397809
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plus,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_2?le=scs
142.250.74.46200 OK 28 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plus,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_2?le=scs
IP 142.250.74.46:0
File type ASCII text, with very long lines (2076)
Hash 0d6d68be52cd5a1b950b8fb012d96ef1
9ab3c519b80be4d31f484d694fe2a579fccdcdd5
2287fe530d79582636878f2bde179e0ba5c14b16e3f41f789519c91d70aee449
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plus,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_2?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 27981
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Feb 2023 17:18:34 GMT
expires: Thu, 15 Feb 2024 17:18:34 GMT
cache-control: public, max-age=31536000
age: 388183
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i649.photobucket.com/albums/uu213/thewannabewahm/bella_button.png
54.230.111.3200 OK 6.1 kB URL HTTP/2 i649.photobucket.com/albums/uu213/thewannabewahm/bella_button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4859834f1649b2ab6268c4f5ed773431
d4dd4e322d1c708e388a325e3a48fffa4deccaf5
e1d71aea36f7c19ad6a161910aba9f7f8266b83b9fbdb1d5110ec3f060b32211
GET /albums/uu213/thewannabewahm/bella_button.png HTTP/1.1
Host: i649.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6066
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="bella_button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-0f703f9219aac8092abb82c8
x-request-id: t_sJ7D9NYIXHTmb_v5epy
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sZ5DVzSSpT3ElAHAuRx9q5sq1AiV5vK-JV5MLtzHjYXotwR0vF9KgQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
apis.google.com/u/0/_/widget/render/badge?usegapi=1&origin=http%3A%2F%2Fsarafan2.blogspot.com&url=http%3A%2F%2Fplus.google.com%2F109578420808608700233%3Frel%3Dpublisher&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
142.250.74.46301 Moved Permanently 226 B URL HTTP/2 apis.google.com/u/0/_/widget/render/badge?usegapi=1&origin=http%3A%2F%2Fsarafan2.blogspot.com&url=http%3A%2F%2Fplus.google.com%2F109578420808608700233%3Frel%3Dpublisher&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
IP 142.250.74.46:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 4df07581948280a6e769a24c5d99d775
843a2c95362347eb8894a6acb607f139be65ded4
3561b93a48d81fac116ccd6e60163bd382abb1d594c81240f5718feb1f197f73
GET /u/0/_/widget/render/badge?usegapi=1&origin=http%3A%2F%2Fsarafan2.blogspot.com&url=http%3A%2F%2Fplus.google.com%2F109578420808608700233%3Frel%3Dpublisher&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__ HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
location: http://developers.google.com/
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Mon, 20 Feb 2023 05:08:17 GMT
expires: Mon, 20 Feb 2023 05:38:17 GMT
cache-control: public, max-age=1800
server: sffe
content-length: 226
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
i915.photobucket.com/albums/ac357/internationalgiveaways/international-giveaways-button.gif
54.230.111.3200 OK 20 kB URL HTTP/2 i915.photobucket.com/albums/ac357/internationalgiveaways/international-giveaways-button.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash 811b970c8535d4ceefbe93a054dd09fe
d9c40d44e72b3e3e6d0190fbb2f579063f210969
31814f9107cc73d010eb65c5909f14f37bf8a389f673ff209ac61b8142c0242c
GET /albums/ac357/internationalgiveaways/international-giveaways-button.gif HTTP/1.1
Host: i915.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 20506
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="international-giveaways-button.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-04ceea2125c1df990ec2cfa3
x-request-id: U0TXVU4jXcEsFoEz-tXlw
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TibWk9HNYJTpaPiQ3n5oieRV-kBHQHvfEd2Ulyhj6c3xg2SzQbhvuw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i117.photobucket.com/albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg
54.230.111.3200 OK 6.3 kB URL HTTP/2 i117.photobucket.com/albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7cc80c4c7d62e8a046442eac9bab9272
8f8ed3e0579b40ed67ab6a7cf65c40828e407b62
5f123921e757e4e48e2cb33b061416df14b1e7fa32107df3b735bbc90a3f79fa
GET /albums/o54/cbourlier/6a00d8341c678553ef00e54f6b771e8834-.jpg HTTP/1.1
Host: i117.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6308
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="6a00d8341c678553ef00e54f6b771e8834-.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-3bc4289c5e47991a2aba87a4
x-request-id: ta5AW0r0LL4bh8D2LPMeX
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: XfR6Lk6JVG9yY4vLGEUHiS8EIEM4Po4T1YePpqJGmX1xTnt-Xhiggw==
vary: Accept, Origin
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 52609eaff893b3bde144be67f7e06bf6
f0542b746799ce198fc97f6ee50eeab0215bc4e8
4675d067a97106e390a0f11991a0bb2cc2beb5d5cbdcd47a30a9d25cd407e5f8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4675D067A97106E390A0F11991A0BB2CC2BEB5D5CBDCD47A30A9D25CD407E5F8"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21541
Expires: Mon, 20 Feb 2023 11:07:18 GMT
Date: Mon, 20 Feb 2023 05:08:17 GMT
Connection: keep-alive
i167.photobucket.com/albums/u134/supabisha/TWButton1.jpg
54.230.111.3200 OK 4.4 kB URL HTTP/2 i167.photobucket.com/albums/u134/supabisha/TWButton1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0acc7f59c85ce72c4c3af166137a8775
03c241a6230281cf4e463a1107c8145831d41677
4407595426358d253a116e803a85d1ba3bad7d7de1bc5aa390db92fcfbbe02fd
GET /albums/u134/supabisha/TWButton1.jpg HTTP/1.1
Host: i167.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4378
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="TWButton1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-17cea7fb5d48a94164b5663c
x-request-id: A9oRLRvT--C_v3FHraL1c
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: sth1AbKusrgWYWjXoUpd-Cie3xSVfNjquXSJTH3c9ViSgRnT_WD55w==
vary: Accept, Origin
X-Firefox-Spdy: h2
i186.photobucket.com/albums/x209/our2gr8kids/GetAttachment.jpg
54.230.111.3200 OK 5.2 kB URL HTTP/2 i186.photobucket.com/albums/x209/our2gr8kids/GetAttachment.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e578938e19d41c70d931269c4fac83ef
625c61b31f138132e76a1c1c230910441e297431
de2959f7e06cabb93ec557a005cb8019122a3832529c8f69878b38a7e9f369da
GET /albums/x209/our2gr8kids/GetAttachment.jpg HTTP/1.1
Host: i186.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5180
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="GetAttachment.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-2cfa675b384c63ca21a9d9ba
x-request-id: Vn5O_xoAjYbLDYsWzBZ5i
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: KY5phUkj6mP4xYrtwtec9xzOIU9jvim5xCDGqNuMQdUQjFIePnn_mQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash 3fd5be4ecf427ee41134ae0126c71d28
4260c0955ffd7f7fc126fdbca66b9b6356b25c3c
7bbe9c4320b1ad50558badd315bc0d8995c36d3fe57924a106fd457bdc009d9f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=134184
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:17 GMT
Etag: "63f26969-116"
Expires: Tue, 21 Feb 2023 18:24:41 GMT
Last-Modified: Sun, 19 Feb 2023 18:24:41 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 278
img231.imageshack.us/img231/4821/buttonimage1w.png
38.99.77.17404 Not Found 168 B URL HTTP/1.1 img231.imageshack.us/img231/4821/buttonimage1w.png
IP 38.99.77.17:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img231/4821/buttonimage1w.png HTTP/1.1
Host: img231.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
i256.photobucket.com/albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif
54.230.111.3200 OK 11 kB URL HTTP/2 i256.photobucket.com/albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash 84e8e7a602c1d9c0aa6a0be5afa3c8ca
df25097f7caeedb56ddb334ac016cad8d148da31
656c36bc0b0200109fa1fb19fcbe21f9da230ad2421884ca6fc18332eada1b3e
GET /albums/hh167/curlyq776/Blog%20Social%20Icons/giveawaysandmorebutton2.gif HTTP/1.1
Host: i256.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 10824
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="giveawaysandmorebutton2.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-52dabd5439a1578e7bcbf8bf
x-request-id: SYSdxMvvbsAj7GqKV1zKp
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: JjxI7m6ortBDEytSIK4TwC46065MUOqJz1DkTZ2rVK_lRBxro4e76Q==
vary: Accept, Origin
X-Firefox-Spdy: h2
app.sponsoredtweets.com/images/tweeter_signup_125_2.jpg
3.209.158.110404 Not Found 13 kB URL HTTP/2 app.sponsoredtweets.com/images/tweeter_signup_125_2.jpg
IP 3.209.158.110:0
Hash 2bcbe5dbb0840b0548a360b4a300c5e5
c23ea9879b9afacc386b890bbf4b4cb159a46859
d8c07dbe74a1a45093ebc2869b24dc0a78a8c466f482e09a27b2cb04c2c9f73f
GET /images/tweeter_signup_125_2.jpg HTTP/1.1
Host: app.sponsoredtweets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 20 Feb 2023 05:08:15 GMT
content-type: text/html; charset=UTF-8
set-cookie: AWSALB=iuUKTFzb46IlHXwBxB0P8P1laFQteK17Ew97Ie0acEAY0PMPwKVldtU3+iz0XxnWJnMf4i2qg2KEsq7kzuWNNDonuiJn/T3qqCSHZGyZDWt6OkIetkwa6tNmrFEG; Expires=Mon, 27 Feb 2023 05:08:15 GMT; Path=/
AWSALBCORS=iuUKTFzb46IlHXwBxB0P8P1laFQteK17Ew97Ie0acEAY0PMPwKVldtU3+iz0XxnWJnMf4i2qg2KEsq7kzuWNNDonuiJn/T3qqCSHZGyZDWt6OkIetkwa6tNmrFEG; Expires=Mon, 27 Feb 2023 05:08:15 GMT; Path=/; SameSite=None; Secure
server: nginx
x-request-id: 63946971-045a-4f5e-a596-601921117746
x-runtime: 0.003199
strict-transport-security: max-age=31536000; includeSubDomains
vary: Origin
content-encoding: gzip
X-Firefox-Spdy: h2
i19.photobucket.com/albums/b154/atandrade1/mom-1.jpg
54.230.111.3200 OK 6.7 kB URL HTTP/2 i19.photobucket.com/albums/b154/atandrade1/mom-1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash acbde744d0db89913405203ff10005f7
f0b863d14bd7e32d5dc4b590dd1d05c1c92bb17c
34f62b04f119bd426a0f38f3ee414afa061a8f504e3a01fca51f990b19e31801
GET /albums/b154/atandrade1/mom-1.jpg HTTP/1.1
Host: i19.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6654
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="mom-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-4a5a7e774e5aaf8e57ba40b6
x-request-id: itftzAN5bpRd9pxruyHMl
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EMicKVr3XaTcPBTXAhR4Dg9olJiQBMf0pmWPJyL3sN3CpQ-5SjuRHA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i836.photobucket.com/albums/zz288/jmgersh/guessing.jpg
54.230.111.3200 OK 5.2 kB URL HTTP/2 i836.photobucket.com/albums/zz288/jmgersh/guessing.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 45688593daba3c839c58f5434a5460de
158187cf8fa589d385d4c5e866b98dbe6a239dc7
86b85a22401020af18d05fc8d3608c193b27c809f916b967f2eeeac5fafc3315
GET /albums/zz288/jmgersh/guessing.jpg HTTP/1.1
Host: i836.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5162
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="guessing.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-6d87aa5b6282dffb2a3e98bf
x-request-id: 5tMZNjhhqWpF2K7JKwmOt
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DgetVYHmBVv2Ufa7YOy95F1qwRfANllI7VBZtzDyGQPE1wN509KSZg==
vary: Accept, Origin
X-Firefox-Spdy: h2
theblogfrog.com/widgets/bfsupporterswforum.js
67.205.57.36301 Moved Permanently 0 B URL HTTP/2 theblogfrog.com/widgets/bfsupporterswforum.js
IP 67.205.57.36:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /widgets/bfsupporterswforum.js HTTP/1.1
Host: theblogfrog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:17 GMT
server: Apache
expires: Mon, 20 Feb 2023 06:08:17 GMT
cache-control: max-age=3600
x-redirect-by: WordPress
location: https://www.theblogfrog.com/widgets/bfsupporterswforum.js
vary: User-Agent
content-length: 0
content-type: text/html; charset=UTF-8
X-Firefox-Spdy: h2
www.momdot.com/wp-content/uploads/2009/11/ethicalhorizontal2.png
172.67.130.189404 Not Found 30 kB URL HTTP/2 www.momdot.com/wp-content/uploads/2009/11/ethicalhorizontal2.png
IP 172.67.130.189:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (9716)
Hash 91928d1c4e5ccf7fb983d54d91279dbe
9e82f0f768027e745c098dbb7bfb6a31ccb0c59e
dff97bf36e4098472a031193716713da99dedc22a3078ab0c23c1a2dc38edd3b
GET /wp-content/uploads/2009/11/ethicalhorizontal2.png HTTP/1.1
Host: www.momdot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 20 Feb 2023 05:08:15 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/8.2.1
cache-control: public, max-age=14400
x-ua-compatible: IE=edge
content-security-policy: block-all-mixed-content
link: <https://www.momdot.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding,Origin
wpx: 1
x-turbo-charged-by: LiteSpeed
x-edge-location: WPX CLOUD/NOR01
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Yh%2F21RYcTk0uLqZLXx%2FfbHL8oiNrZ39CjsfqTw8eKFDytJOl%2FZwQrFi%2FD8J1d3aqkDHSKfsXHEf2%2BnP7Fvjd9MQwwPytbVRojTAqewCcnvn%2FTSLTTbkvsK3DvzN9%2FV9Pow%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9268f7ab506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash b0ecfdb4504c72ada029c2badbe03f11
de3f316e012a75fb063c0abede1a38e1105cb49d
6a585b1bdc36586322dc37a119081e24800fa65938b93d7042baa985a5a58538
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6A585B1BDC36586322DC37A119081E24800FA65938B93D7042BAA985A5A58538"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8557
Expires: Mon, 20 Feb 2023 07:30:54 GMT
Date: Mon, 20 Feb 2023 05:08:17 GMT
Connection: keep-alive
twittercounter.com/embed/?username=Sarafan2&style=bird
209.182.199.7404 Not Found 179 B URL HTTP/1.1 twittercounter.com/embed/?username=Sarafan2&style=bird
IP 209.182.199.7:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
GET /embed/?username=Sarafan2&style=bird HTTP/1.1
Host: twittercounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.23.2
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
i224.photobucket.com/albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png
54.230.111.3200 OK 7.6 kB URL HTTP/2 i224.photobucket.com/albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash cda6686e4c320447e17ec37420373289
b8ae5ef6acca0d705af171991b6ba61d2c6777c1
6307f8578bb3fdf1bcd43870100a5a1c95f881cc76482bfdb03234e80891e8cc
GET /albums/dd23/digiscrapper219/Designer%20Blogs/Mail%20Carrier/button125.png HTTP/1.1
Host: i224.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 7586
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button125.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-1cf1dd823968a1371f86e180
x-request-id: StHl-u2EOQWWxZbHZOjyj
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1mEQuTYg2CyXJzqqiIhBg0faWy9KSdtjcitlNaxq3T4GMLbz2zdWoQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/fk-qiWFiXo8
216.58.211.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/fk-qiWFiXo8
IP 216.58.211.3:0
Hash 599a44a59fa970280e8a091fd295f653
2998283cefb8abd06c6fa18a8cdfe52f3e386cb7
a053cd4cc250123b86106dfa1daf363d2bf358de67f38bc6abdb441a04ab9262
POST /s/gts1p5/fk-qiWFiXo8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:17 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i48.photobucket.com/albums/f214/MommyMandy/amandabutton.jpg
54.230.111.3200 OK 4.1 kB URL HTTP/2 i48.photobucket.com/albums/f214/MommyMandy/amandabutton.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3307cfd46d59ff6e301158ba5ff69b94
1b33989bf2f575de113953b49e4a7c1b22d0ca90
83265765bac91a5cf7d7d140429556cb4f720fe91d77351ae96d140bf83d421c
GET /albums/f214/MommyMandy/amandabutton.jpg HTTP/1.1
Host: i48.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4100
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="amandabutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-2e5e04535a4320674ef2fbcf
x-request-id: 2kxFzIROS2NJ0_rzbERGe
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v7gDspmGxSm-tVHlMQcHeDKXw7RGnkTEZS9XNdvsg6baScR3o3LTQg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i211.photobucket.com/albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg
54.230.111.3200 OK 7.5 kB URL HTTP/2 i211.photobucket.com/albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash a55cb091ffedfa421b1f3c6e8f93fdc9
2850ae83a4021d121c04abe8a039c37682c990cc
cff57c7e1566d98fcb6dfcceb009c46b24e833be66353eb7319d00142ffadce4
GET /albums/bb63/joannaonthelake/CopyofMiss_Sherbet_by_Blush_Art-2.jpg HTTP/1.1
Host: i211.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 7530
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="CopyofMiss_Sherbet_by_Blush_Art-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-66d295e72b967ee01f0c99e9
x-request-id: 8WiYEVuHygsBYuN6d9WED
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0bE16j8mPGNCToIcd9py3MXTUJ_2b6iEGaTmStUXuCXwsJjpAc_CMQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i921.photobucket.com/albums/ad54/jamielz1/cakeclipart.jpg
54.230.111.3200 OK 5.9 kB URL HTTP/2 i921.photobucket.com/albums/ad54/jamielz1/cakeclipart.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2bbfbecbaffc5bcd12cf9f779d493ebd
facab9e5c635a399c7e442041c15e38cd82706d4
d7b64a443ce5c745d24d077bfa16924068b6a8511c1835257903fbc7d2a388f7
GET /albums/ad54/jamielz1/cakeclipart.jpg HTTP/1.1
Host: i921.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5878
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="cakeclipart.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-295a03f45a726d1d47974171
x-request-id: Kpt6Kl2JdLy92DI6xe6wp
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LyZZ0lC-hUAyPcYLV25iYU3yCbbgkcwZ-agHnMzpIHNwyp5wGfCmRA==
vary: Accept, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 5b1775b8f4f9ebbac7a1572afa4e4f92
7c7c748730a9422b0f5f9bcdde36a91c9639c595
a1685273829a7672a3fa089525b959f1f95f11c0a5c0d09fbbf1f4667b3f7946
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A1685273829A7672A3FA089525B959F1F95F11C0A5C0D09FBBF1F4667B3F7946"
Last-Modified: Fri, 17 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4084
Expires: Mon, 20 Feb 2023 06:16:21 GMT
Date: Mon, 20 Feb 2023 05:08:17 GMT
Connection: keep-alive
www.linkreferral.com/images/linkreferal/linkbutton.gif
167.114.57.160404 Not Found 231 B URL HTTP/1.1 www.linkreferral.com/images/linkreferal/linkbutton.gif
IP 167.114.57.160:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 93f34028d003c9e64874abbb21743cea
5f3f41ef614e3600996158934deb0b72b48e5c6c
2d3dba476391f322c5f43acb52b82ba60d71084c773bb1524c13c6bf873015bd
GET /images/linkreferal/linkbutton.gif HTTP/1.1
Host: www.linkreferral.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html; charset=iso-8859-1
Content-Length: 231
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash a2a464407078b26af3755a9fa4549363
ab3f6dea5928135aebb7c2bc4bf8e25031955ee5
d21bb3b5a45b40bc33191e45a88a40cac7227855f152558400cb9d8ab9c01dde
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5399
Cache-Control: max-age=130965
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:17 GMT
Etag: "63f247bf-117"
Expires: Tue, 21 Feb 2023 17:31:02 GMT
Last-Modified: Sun, 19 Feb 2023 16:01:03 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
i22.photobucket.com/albums/b330/usachan/button.png
54.230.111.3200 OK 4.2 kB URL HTTP/2 i22.photobucket.com/albums/b330/usachan/button.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5328b13db280e4bd20623cdb403e5f38
2bd7e2a495e01f5e6d5a82d2e643285819593d6a
c4a454ce9deece7334c0ba8990abf106a201d73f94405bb452529252eab92e79
GET /albums/b330/usachan/button.png HTTP/1.1
Host: i22.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4226
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-08444dae4b58ebca5d71fc4c
x-request-id: 9qrhMEwqtAV4xMj58oZdS
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9znwunv3CXKrWQmjEZ5MH7XIPnTlICNoFG5AvSc_9aOnCUgzt9GdEw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i287.photobucket.com/albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg
54.230.111.3200 OK 4.2 kB URL HTTP/2 i287.photobucket.com/albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9c59a16957c6c0343ba4b39e20c0b447
ffdee85c6a1c0310d554928d0a041ec852324616
1dcc3b9a4ffa5bdcb23783f0156cbeb1b5c728f1b639d118eef407f43dc91274
GET /albums/ll160/AJ_Mom/Blog%20Images/BBR.jpg HTTP/1.1
Host: i287.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4228
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="BBR.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-66f5f16b20eba15d015ae111
x-request-id: hkBQmS7utuqRJB9bvKE9p
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RU4DB49liluV1pg_Mp2nnXuaRON8teaivXKQEIA1VzCgYdt6Yhyt-Q==
vary: Accept, Origin
X-Firefox-Spdy: h2
i1115.photobucket.com/albums/k560/gmmaddox20/Button1.png
54.230.111.3200 OK 3.6 kB URL HTTP/2 i1115.photobucket.com/albums/k560/gmmaddox20/Button1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash dfb77d5ebf169c88a27fb964102ecf43
c2df9200e670eb22b3b22424cdb778d2542b4182
c9bd414908a47052c2ba856bac2cec15553004bbd6548c5246f9125447cd7151
GET /albums/k560/gmmaddox20/Button1.png HTTP/1.1
Host: i1115.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3554
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Button1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-4f54fb701a8afa8425a04a52
x-request-id: GyaGtxgUcFam0hcabW4vK
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VRm8FzoenTd3xSYHscHOuwnJaX_lew89PqiCXkDA2XeLLvd4mN8YNg==
vary: Accept, Origin
X-Firefox-Spdy: h2
twittercounter.com/embed/Sarafan2/ffffff/111111
209.182.199.7404 Not Found 179 B URL HTTP/1.1 twittercounter.com/embed/Sarafan2/ffffff/111111
IP 209.182.199.7:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with no line terminators
Hash cce55030d17de7ce56b9249ee06ec29f
9fe3d0385300c0d94ab3bfe0418ecbc4d5c10dae
13797b82fea032924329669eda7aa35ae1bb8380daf4aeb578b05e69cfdca589
GET /embed/Sarafan2/ffffff/111111 HTTP/1.1
Host: twittercounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.23.2
Date: Mon, 20 Feb 2023 05:08:17 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
i12.photobucket.com/albums/a214/HeatherAvrech/BlogButton-1.jpg
54.230.111.3200 OK 4.4 kB URL HTTP/2 i12.photobucket.com/albums/a214/HeatherAvrech/BlogButton-1.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9982b4b07b03ea68d34539762fa98a20
68839a41cf13b43bf5dfdd9c03e0296f9b63c210
3a601814085af11ea4290c263a5d48ffdb8d4b39f99b8f6b4587b63c8e5c6749
GET /albums/a214/HeatherAvrech/BlogButton-1.jpg HTTP/1.1
Host: i12.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4384
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="BlogButton-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-7722b0f16f9758493d7dde4f
x-request-id: qEgfa_hXwIx01HV8_rCva
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BxGiA8Pn_toIfJTTLCiKAzREtlf5X-VFFzSmyFf8Dev8yVeM9W2Pyg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i193.photobucket.com/albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png
54.230.111.3200 OK 5.9 kB URL HTTP/2 i193.photobucket.com/albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5f1a3e3a8134a5a1f9e28b8d78f9dc13
7f61c70238ecdef12ea396a092e9f24a7435b456
7d095a34820e7741cb62ff2995f2c67435a9036d32063420309cee86ee6e85d0
GET /albums/z104/danielle982/2010%20Blogs/Mama%20B/MamaBButton.png HTTP/1.1
Host: i193.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 5852
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="MamaBButton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-5abf0c95741948266a4cc81a
x-request-id: 08StBSPToRFK7h4eLTw3W
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2OW1UcrIoupsFSNEcXNDPGYcO572lzGd4C66NE_uYYBlIzJX_QqxGA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i484.photobucket.com/albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg
54.230.111.3200 OK 6.8 kB URL HTTP/2 i484.photobucket.com/albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 09c84274137d94d2d9b02e7efdee7cbe
5bf949aec61c7ea1ac5f93e24ca396219fd816e7
97dabe783c50dbdfdcc394aae6d480afe2ddf14c5ccbad93dcb035479e866a3e
GET /albums/rr207/CznyDesigns/The%20Nurse%20Mommy/TNM_button.jpg HTTP/1.1
Host: i484.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 6844
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="TNM_button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-42d104f32ff0c8551069bd5c
x-request-id: lX9VHM5dRpReAKFoxLhd4
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BefzyZP8SpapIT5lK5YZVgokELdifYTVGAK9T7UJxWw6esy1G7-xlw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i144.photobucket.com/albums/r193/coricarpenter/WildPinkLinkButton.png
54.230.111.3200 OK 9.5 kB URL HTTP/2 i144.photobucket.com/albums/r193/coricarpenter/WildPinkLinkButton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5bdad4102776956b8fcafd3e2bff22b0
0651dd54ea2db4a6a166c6dc2eafe730dce267b1
2e1924b333416c18458381ad31d35ee6a3a38d807985e4a544030d41e9c064eb
GET /albums/r193/coricarpenter/WildPinkLinkButton.png HTTP/1.1
Host: i144.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 9524
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="WildPinkLinkButton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-1ac75557272cb1707c4f813c
x-request-id: N_jIKDlr2ty8ULpoOn9NS
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VoywtsMOCK9u3ifMVggemAFOC6fHjeZ4kL0j8bfB53mi4egZTP4sug==
vary: Accept, Origin
X-Firefox-Spdy: h2
i693.photobucket.com/albums/vv300/cblanchard76/AdayInTheLife-2.jpg
54.230.111.3200 OK 3.9 kB URL HTTP/2 i693.photobucket.com/albums/vv300/cblanchard76/AdayInTheLife-2.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 6c117913c6de0bfddf55ccfc7b9fa7f0
eba8c9a3df688b88578b43e21dc38e45ab4517cf
0bbb06fff26d668aea23f4cbbce0cd26e741f2f84d27c4ecff2b97265b10812e
GET /albums/vv300/cblanchard76/AdayInTheLife-2.jpg HTTP/1.1
Host: i693.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 3876
date: Mon, 20 Feb 2023 05:08:17 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="AdayInTheLife-2.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:17 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-5f0353c859965b0648017752
x-request-id: tBOKHJYOmyivPNXeoN9vq
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Xpnzh4-NSIhvOKpQv0wjPyk9eqBabxYSZToPsIWDbhYN64tpK3evIQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 471 B IP 172.64.155.188:0
Hash c10348a20d418914b38b8f6cf7fc6f4f
68796c5ca52bc23912b58f190188c7534f9b48a5
b36e03f8c076f8a2e760239454034fbf78f73765c37e1e96a3c2d80b2dac2952
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:18 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 19 Feb 2023 17:06:50 GMT
Expires: Sun, 26 Feb 2023 17:06:49 GMT
Etag: "68796c5ca52bc23912b58f190188c7534f9b48a5"
Cache-Control: max-age=560910,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 79c4b93c890a1c06-OSL
www.blogger.com/img/logo-16.png
142.250.74.41200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP 142.250.74.41:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 17 Feb 2023 01:33:41 GMT
Expires: Fri, 24 Feb 2023 01:33:41 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 16 Feb 2023 09:07:31 GMT
Content-Type: image/png
Age: 272077
www.cute-counter.com/14508.bmp
157.7.144.96200 OK 0 B URL HTTP/1.1 www.cute-counter.com/14508.bmp
IP 157.7.144.96:0
ASN #7506 GMO Internet,Inc
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /14508.bmp HTTP/1.1
Host: www.cute-counter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 20 Feb 2023 05:08:17 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Content-Length: 0
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
i129.photobucket.com/albums/p215/Local-Girl-photos/logos/125button.jpg
54.230.111.3200 OK 4.9 kB URL HTTP/2 i129.photobucket.com/albums/p215/Local-Girl-photos/logos/125button.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 7416b54f3576a5b1e8d42c17aac6f0a4
8bdff878cfb3b9bd32ce0d297899c1a2ec57826b
d8d865ecd4f2e6419f95a3aba4cb8ccda9dc55ae3b0ac98707b77be1ec48538c
GET /albums/p215/Local-Girl-photos/logos/125button.jpg HTTP/1.1
Host: i129.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4916
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="125button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-0c6c850703448d7050e8ad9b
x-request-id: m-VQvDLEwtkZoa5VHruZw
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: TVLFVNaBrC7dvm0pB9E51Zc1lgwVQ4K4mtZ81SaWC844RcB2nNHV9g==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash ac3ab56f097b86bc86f3e19b726dccba
5ef8a60d4bf32a79ec431d8f7b93cec905af9b5d
8376afe14381bee31cb724f0647a6056c9e21d09ee5166e1bf3ef2d2dd623dac
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Server: ECS (amb/6B74)
Content-Length: 278
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash c3fcc2714a120f58ee235b6f2008bf7b
a6da1251e0d98453e6a411fa246c6e6cac56790d
55a9637ac5d1ea18dc0b15b0e8613c32079fae3422a64bc1b7c0665894caefee
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i65.photobucket.com/albums/h220/redheadgal23/Blog/button.jpg
54.230.111.3200 OK 4.3 kB URL HTTP/2 i65.photobucket.com/albums/h220/redheadgal23/Blog/button.jpg
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 197464eecb3b78e7e460b5942506b22a
a71a190548304bdba452725361626c5cc580d9bc
e27f31762f0cfab783857a22838597f0a5ca819c16fc2126f201603d8c262202
GET /albums/h220/redheadgal23/Blog/button.jpg HTTP/1.1
Host: i65.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4310
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-5678e7710f613b7d4c9d78dc
x-request-id: RhX3Bdok1p2EpdTUogSKh
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nxbxwNeDyLnXmtmmP77sAaIQv2Qumj5U07CEQBdCRTTMGmIO59iVnA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i406.photobucket.com/albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png
54.230.111.3200 OK 4.7 kB URL HTTP/2 i406.photobucket.com/albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 66625ce587d23d8a89480ed29caeaa55
5d0d0561193f509eec8551a72762e85456613808
9744d1a9f9d1c942e9d7069ffe3941b91d41723d15a332fce1b421ec998e8715
GET /albums/pp142/5minutesforgiveaways/Buttons/5m4giveawaysbtn2-1.png HTTP/1.1
Host: i406.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4688
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="5m4giveawaysbtn2-1.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30042-393d0b634d7198196b5bd5bb
x-request-id: Twzr7shaG0BVtgls_aQn9
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: S4NL22u7qU4gEO2e7jee_WRVDFsWxJDeTaNZ-dLahehdHq0pzjeYuQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i484.photobucket.com/albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif
54.230.111.3200 OK 8.9 kB URL HTTP/2 i484.photobucket.com/albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 125 x 125\012- data
Hash 602095e4593a1b8e5b887c0d27f9b6b2
61f5800a91b8e148c6baf0e306f3dd647e134c82
1c18c9ed761df61baa49e761c031013c9691bd0039e9247392aa05a61621df24
GET /albums/rr207/CznyDesigns/Minnesota%20Mama/button.gif HTTP/1.1
Host: i484.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 8937
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="button.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-3f430f602ac91920186d3325
x-request-id: FHKlu5ovAdHBL-fNYQP_b
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 94w_gx3_1DhhSpB3df9nfejJOTABqiSPUfFUQJQInGxQVO4c_7hE8g==
vary: Accept, Origin
X-Firefox-Spdy: h2
i840.photobucket.com/albums/zz325/tiglesia/ascendingbutterflybutton-1.gif
54.230.111.3200 OK 21 kB URL HTTP/2 i840.photobucket.com/albums/zz325/tiglesia/ascendingbutterflybutton-1.gif
IP 54.230.111.3:0
File type GIF image data, version 89a, 136 x 160\012- data
Hash 2b09b5972e19593450afe40c31ee921a
941c81f3a41804a009fd8815d2628cbb18daadc2
1339160bf0919cdb449e3f7df07af606060f1553cd0dee3ce7d08b26504bbc73
GET /albums/zz325/tiglesia/ascendingbutterflybutton-1.gif HTTP/1.1
Host: i840.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 21010
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="ascendingbutterflybutton-1.gif"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-5b22daa943cfaabc689505c6
x-request-id: OMPb9fUyVepDy07yNQrq0
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Ywc1lwXpl5JbFDCVG3b9nPBmnolHAj8FHBhOz3Ilmwo1b1ww_JT7lA==
vary: Accept, Origin
X-Firefox-Spdy: h2
img.photobucket.com/albums/v664/bduplantis/embutton.png
54.230.111.3200 OK 4.1 kB URL HTTP/2 img.photobucket.com/albums/v664/bduplantis/embutton.png
IP 54.230.111.3:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9a112f40d314c07f0c3c25e7480cac1e
5b95bb43dbd1310f6468b54a6a5297630cc9d135
2f1182ac0943cdc99ae5d07e5adfc61e1495ad809a1f0710f76a119cf6bde1b2
GET /albums/v664/bduplantis/embutton.png HTTP/1.1
Host: img.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 4064
date: Mon, 20 Feb 2023 05:08:18 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="embutton.webp"
content-security-policy: script-src 'none'
expires: Tue, 20 Feb 2024 05:08:18 GMT
server: photobucket
x-amzn-trace-id: Root=1-63f30041-0b5d9c18664d8d390d747fed
x-request-id: 2nerqgoGLc5OWOW_nvIhi
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: gr5AItJ40qM1gOHB2CbY-AJqpH6jT-dyK0npZwmgKGmzDB-ltIhkYw==
vary: Accept, Origin
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 2a1a654ff8ac67450643a78ed5b5ca52
dad3b90f2c64727709ccdc4fde6149ba0a66825a
ad849f1704e3b7c36ce580d7fe83e12dc432e943c62b716fe89d8e1b37996eba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD849F1704E3B7C36CE580D7FE83E12DC432E943C62B716FE89D8E1B37996EBA"
Last-Modified: Fri, 17 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 20 Feb 2023 11:08:18 GMT
Date: Mon, 20 Feb 2023 05:08:18 GMT
Connection: keep-alive
ocsp.digicert.com/
93.184.220.29200 OK 280 B IP 93.184.220.29:0
Hash 9f99ed88b698a9c4cc02760296ce450c
bc8e364a4723b8aede0e6957fb578af651fa9417
0580cfc27d8858b71ae11b62aaddb1cdb29798a719b656a261aa36b00a4f3ca4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Etag: "63f1b3f9-118"
Server: ECS (amb/6B74)
Content-Length: 280
i254.photobucket.com/albums/hh91/customblogdesigns/angie/simplelife125.jpg
54.230.111.3404 Not Found 7.1 kB URL HTTP/2 i254.photobucket.com/albums/hh91/customblogdesigns/angie/simplelife125.jpg
IP 54.230.111.3:0
File type PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Hash 49e3fff8262f861c9be74931c8c33d34
a25ea738da2c2737c9eec1fdd76c5c21923f021e
f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
GET /albums/hh91/customblogdesigns/angie/simplelife125.jpg HTTP/1.1
Host: i254.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: image/png
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 19 Feb 2023 11:58:14 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PEbVWyBHAkSWOYfZBvt3TRo-9ZqRn-VbPICxILz5d2qx_BhqsPe4fA==
age: 61893
X-Firefox-Spdy: h2
3kidsandus.com/images/3kidsandusbanner.jpg
155.138.175.71301 Moved Permanently 0 B URL HTTP/2 3kidsandus.com/images/3kidsandusbanner.jpg
IP 155.138.175.71:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/3kidsandusbanner.jpg HTTP/1.1
Host: 3kidsandus.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx-rc
date: Mon, 20 Feb 2023 05:08:18 GMT
content-type: text/html; charset=UTF-8
content-length: 0
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: https://www.3kidsandus.com/images/3kidsandusbanner.jpg
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 670f90cf9362e8bd4bc8b04e7f943496
e97c5eacc56488bd835a180f85f7acf84e154a28
c042ea84e9c11577280f8636960e23ed927a1a045e9c91e9d27cf4786a19c19a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Etag: "63f1c221-117"
Last-Modified: Mon, 20 Feb 2023 05:08:17 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/s/gts1p5/fk-qiWFiXo8
216.58.211.3200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/fk-qiWFiXo8
IP 216.58.211.3:0
Hash 599a44a59fa970280e8a091fd295f653
2998283cefb8abd06c6fa18a8cdfe52f3e386cb7
a053cd4cc250123b86106dfa1daf363d2bf358de67f38bc6abdb441a04ab9262
POST /s/gts1p5/fk-qiWFiXo8 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 652e0fa59c5baeae693cb48f05a866fa
7336989ad39144fcdee7397f40dcd4697134c1e5
6b7bb317df6b5abdb2803d133e63ee8b1383d30c6403eb8650e013255c6f0227
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogoversary.com/
104.21.46.241200 OK 11 kB IP 104.21.46.241:0
Hash b08c0661d793cd8670de43b572899eeb
cad0fff241684ee60455b94d872715d4a1a024aa
d12869d68e778ad050bdd363502d2960a7a69001b180e41562a15e2848b28b13
GET / HTTP/1.1
Host: www.blogoversary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dWsI44rqXl6E85b%2FGg9Z7%2B5qVIWQWziOScmYmuVdZe5Ek1ouCYxI3VTxD6w2BeEGvYPFwMz%2FOOQdcpM%2BFS6s6NN0Ph0VjILnTepr5Lx%2FeODlcdbwPrFRvoNJiFLe6rpZ7F7POlm0bg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b93a2cf90b65-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
23.38.200.123200 OK 26 kB URL HTTP/2 s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP 23.38.200.123:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)
Hash 707317ccaabe08d32d1bd781754e6871
bb82dcd3e044c960e0861c2ce878f5504e628f78
d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051
GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Mon, 20 Feb 2023 05:08:18 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 5c12c61352a813ee1deb468530a2dae4
e08667e1fd3e31f221a9b504c16393c8427afd26
3075ed9c2685a7f9f6cb013aff8d617850c1557668b1e04bdb9449562808b780
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 72b8e23a074887f3f69aa87cffda1c82
732c052a19f54d5ce58ead9f440360cf1c2a1883
abc83ebb4fa0ba137c0c70702dcf159ea92cf948ff7190fbae2e836c0a9ceb62
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6572
Cache-Control: max-age=170259
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Etag: "63f2dca9-1d7"
Expires: Wed, 22 Feb 2023 04:25:57 GMT
Last-Modified: Mon, 20 Feb 2023 02:36:25 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 601227710c4016cd949032470a008565
75ba5d0871d61bbb57450214cf058aa88ea3ac17
f1b2f5bd31412f7c6b53e3f21b3497fc405274c8fda80a41f98a13234ab2931a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:18 GMT
Server: ECS (amb/6B74)
Content-Length: 279
e1.o.lencr.org/
23.33.119.27200 OK 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 52609eaff893b3bde144be67f7e06bf6
f0542b746799ce198fc97f6ee50eeab0215bc4e8
4675d067a97106e390a0f11991a0bb2cc2beb5d5cbdcd47a30a9d25cd407e5f8
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "4675D067A97106E390A0F11991A0BB2CC2BEB5D5CBDCD47A30A9D25CD407E5F8"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21540
Expires: Mon, 20 Feb 2023 11:07:18 GMT
Date: Mon, 20 Feb 2023 05:08:18 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 44b226866cbf1e63b9060fb971ea172e
402d6312b393ebdf1ed4fd089261f8fc6d2c5de3
f4be718fa79ba49718fe3e1972a6524323c5dfdacce04db088d53052c17a3d73
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F4BE718FA79BA49718FE3E1972A6524323C5DFDACCE04DB088D53052C17A3D73"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 20 Feb 2023 11:08:18 GMT
Date: Mon, 20 Feb 2023 05:08:18 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 4e424838f6a8187b1008b0af40443188
083e547833b3ee8fe8d1ce81d41d151f7047f38e
44d51d0a8ed9f02f530af301cd5f38ab52b7f7a1f606920816a465e639f60cb9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "44D51D0A8ED9F02F530AF301CD5F38AB52B7F7A1F606920816A465E639F60CB9"
Last-Modified: Fri, 17 Feb 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 20 Feb 2023 11:08:18 GMT
Date: Mon, 20 Feb 2023 05:08:18 GMT
Connection: keep-alive
m.addthis.com/live/red_lojson/300lo.json?si=63f3004115761062&bkl=0&bl=1&pdt=1072&sid=63f3004115761062&pub=sarafan2&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1676869698239&jsl=32768&uvs=63f3004172780dbc000&skipb=1&callback=addthis.cbs.jsonp__93030521244760860
23.38.200.123200 OK 89 B URL HTTP/2 m.addthis.com/live/red_lojson/300lo.json?si=63f3004115761062&bkl=0&bl=1&pdt=1072&sid=63f3004115761062&pub=sarafan2&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1676869698239&jsl=32768&uvs=63f3004172780dbc000&skipb=1&callback=addthis.cbs.jsonp__93030521244760860
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 458d55122908794f32f5dc108877c8ae
bdb3d1debb07cc2de3990c53cfdeabb1b183cf46
f0d2e7b08e85bc1635a1e8becbdd58317dd2eea803b8eca4e010ceab904722f3
GET /live/red_lojson/300lo.json?si=63f3004115761062&bkl=0&bl=1&pdt=1072&sid=63f3004115761062&pub=sarafan2&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&colc=1676869698239&jsl=32768&uvs=63f3004172780dbc000&skipb=1&callback=addthis.cbs.jsonp__93030521244760860 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Mon, 20 Feb 2023 05:08:18 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 2a1a654ff8ac67450643a78ed5b5ca52
dad3b90f2c64727709ccdc4fde6149ba0a66825a
ad849f1704e3b7c36ce580d7fe83e12dc432e943c62b716fe89d8e1b37996eba
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD849F1704E3B7C36CE580D7FE83E12DC432E943C62B716FE89D8E1B37996EBA"
Last-Modified: Fri, 17 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21566
Expires: Mon, 20 Feb 2023 11:07:44 GMT
Date: Mon, 20 Feb 2023 05:08:18 GMT
Connection: keep-alive
cdn.widgetserver.com/
96.126.123.244200 OK 24 kB IP 96.126.123.244:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63177)
Hash 668bf9398d10923fd57671816bb21448
5250eff2ee6731b6a1715006dc72841cbbca7eaf
03763cdac81e0f442f2d309fa782b1f7904e7ba729fb236096c87dc05cec5e60
GET / HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
server: openresty/1.13.6.1
date: Mon, 20 Feb 2023 05:08:18 GMT
content-type: text/html
transfer-encoding: chunked
content-encoding: gzip
connection: close
v1.addthisedge.com/live/boost/sarafan2/_ate.track.config_resp
23.38.200.123200 OK 47 B URL HTTP/2 v1.addthisedge.com/live/boost/sarafan2/_ate.track.config_resp
IP 23.38.200.123:0
File type ASCII text, with no line terminators
Hash 24c668b115f75423506f2ea21d1b49c2
14f956ddb2d9e8b072cd5f605c3f39526490b391
b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16
GET /live/boost/sarafan2/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=60, s-maxage=86400
date: Mon, 20 Feb 2023 05:08:18 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2
m.addthis.com/live/red_lojson/100eng.json?sh=0&ph=4959&ivh=836&dt=0&pdt=1072&ict=&pct=0&perf=widget%7C1072%7C569&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=addtoany&jsfwv=addtoany-unk&al=men&scr=0&scv=0&apiu=0&ba=1&sid=63f3004115761062&rev=v8.28.8-wp&pub=sarafan2&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&pfm=0&icns=
23.38.200.123204 No Content 0 B URL HTTP/2 m.addthis.com/live/red_lojson/100eng.json?sh=0&ph=4959&ivh=836&dt=0&pdt=1072&ict=&pct=0&perf=widget%7C1072%7C569&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=addtoany&jsfwv=addtoany-unk&al=men&scr=0&scv=0&apiu=0&ba=1&sid=63f3004115761062&rev=v8.28.8-wp&pub=sarafan2&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&pfm=0&icns=
IP 23.38.200.123:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /live/red_lojson/100eng.json?sh=0&ph=4959&ivh=836&dt=0&pdt=1072&ict=&pct=0&perf=widget%7C1072%7C569&cmenu=null&ppd=0&ppl=0&fbe=&xmv=0&xms=0&xmlc=0&jsfw=addtoany&jsfwv=addtoany-unk&al=men&scr=0&scv=0&apiu=0&ba=1&sid=63f3004115761062&rev=v8.28.8-wp&pub=sarafan2&dp=sarafan2.blogspot.com&fp=search%2Flabel%2FDWTS%2520Week%25209%2520Semi%2520Finals&pfm=0&icns= HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 0
Origin: http://sarafan2.blogspot.com
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
access-control-allow-credentials: true
access-control-allow-origin: *
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
date: Mon, 20 Feb 2023 05:08:19 GMT
X-Firefox-Spdy: h2
cdn.widgetserver.com/?gp=1&js=1&uuid=1676869698.0086130347&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zYXJhZmFuMi5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
96.126.123.244302 Found 0 B URL HTTP/1.1 cdn.widgetserver.com/?gp=1&js=1&uuid=1676869698.0086130347&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zYXJhZmFuMi5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0=
IP 96.126.123.244:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?gp=1&js=1&uuid=1676869698.0086130347&other_args=eyJ1cmkiOiAiLyIsICJhcmdzIjogIiIsICJyZWZlcmVyIjogImh0dHA6Ly9zYXJhZmFuMi5ibG9nc3BvdC5jb20vIiwgImFjY2VwdCI6ICJ0ZXh0L2h0bWwsYXBwbGljYXRpb24veGh0bWwreG1sLGFwcGxpY2F0aW9uL3htbDtxPTAuOSxpbWFnZS9hdmlmLGltYWdlL3dlYnAsKi8qO3E9MC44In0= HTTP/1.1
Host: cdn.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://cdn.widgetserver.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Mon, 20 Feb 2023 05:08:19 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www6.widgetserver.com/?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0
referrer-policy: no-referrer
x-mtm-path: 3
x-mtm-prov: 1:4.90;70:0.00
x-mtm-rd: 0.06
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1pTyPT:7byN5DOpWsub1cGYy4Ef6fmRTq0; expires=Mon, 20-Feb-2023 06:08:19 GMT; Max-Age=3600; Path=/
connection: close
www6.widgetserver.com/?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0
35.186.238.101200 OK 2.8 kB URL HTTP/1.1 www6.widgetserver.com/?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0
IP 35.186.238.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2830), with no line terminators
Hash 6cfbffcfabf6c7813aadd15f3870ead4
55afaa49568d6f3278a388d96b8672ccbcb1ae70
1b1252c0c6fe647290b76cb491806bc26f1083f7e3ae8962fc7cf1886b71d313
GET /?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0 HTTP/1.1
Host: www6.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 20 Feb 2023 05:08:19 GMT
Content-Type: text/html
Content-Length: 2830
Last-Modified: Tue, 14 Feb 2023 15:45:51 GMT
ETag: "63ebacaf-b0e"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_I00PXXkpd5PvJev80sK/XkrGcBr55iIr4ar3ipbsSdGu3p71qsTUBX4w3+MdXSJ2WNnULDkadduTZlWa/BOAew
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 802dfa5c8d5d5fc162a3850bf53647c0
4b3b90d770557e9803de31d16e55ed8ee10cb75c
a0cbf6cdb36cb16f36d4e3b1652fa3a756a8b428519f736aec12cbe93b6184e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 20 Feb 2023 05:08:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js
23.36.79.16200 OK 57 kB URL HTTP/2 img1.wsimg.com/parking-lander/static/js/1.3fa140ef.chunk.js
IP 23.36.79.16:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash b1a9331d6c0e8a1b66863c6ca8477641
90dfe8b3d4571613ed3e04e53d2503d58684dc03
d21e9a17b3f1a8d15dff4aee534040b740009c16ef74c4185eb151ca52ba1c66
GET /parking-lander/static/js/1.3fa140ef.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www6.widgetserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: OCcGn1JfNBQv6+PedMR9b3qPljuI4WoxpivU6zSOnj5T4ghXWTvCbv6/qtM8SSXELvZkrY2NYI0=
x-amz-request-id: 2FAPK430WR30W4W0
last-modified: Tue, 14 Feb 2023 15:44:40 GMT
etag: "06166eb9b942e7c63d8ee1eba5b3de68"
x-amz-server-side-encryption: AES256
x-amz-version-id: Qm3JNw36qGFoIyTVwvXuxJRglKzwn3oO
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 57353
cache-control: max-age=31536000
expires: Tue, 20 Feb 2024 05:08:20 GMT
date: Mon, 20 Feb 2023 05:08:20 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
www6.widgetserver.com/px.js?ch=1&abp=1
35.186.238.101200 OK 476 B URL HTTP/1.1 www6.widgetserver.com/px.js?ch=1&abp=1
IP 35.186.238.101:0
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=1&abp=1 HTTP/1.1
Host: www6.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www6.widgetserver.com/?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 20 Feb 2023 05:08:20 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Tue, 14 Feb 2023 15:46:05 GMT
ETag: "63ebacbd-1dc"
Accept-Ranges: bytes
Via: 1.1 google
img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js
23.36.79.16200 OK 1.8 kB URL HTTP/2 img1.wsimg.com/parking-lander/static/js/main.727544c3.chunk.js
IP 23.36.79.16:0
ASN #20940 Akamai International B.V.
File type ASCII text, with very long lines (4918)
Hash 4765833f8aa1de1e75804851ab0449f3
b56fc269f045d73338c8dd55f638aa633de28e7d
c42908523310021f78e7a1c65746224723cda12e89730b0efeb24430b84dac1c
GET /parking-lander/static/js/main.727544c3.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www6.widgetserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: G+KwmdDoK2pI6c9DvjEwx8Yd4NOzuYF7PYbj0A+2bVdqnBv06gVVmOL1QEU8ZWzx1R0e+H5Ch2w=
x-amz-request-id: 2FAP39Z2BBAD4Z6V
last-modified: Tue, 14 Feb 2023 15:44:39 GMT
etag: "5fdf5d5d4c43969c55a42e692b95b2c9"
x-amz-server-side-encryption: AES256
x-amz-version-id: K0T3Ca3fAhPnHOiGo0Ai9_inM.KjDWrk
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 1827
cache-control: max-age=31536000
expires: Tue, 20 Feb 2024 05:08:20 GMT
date: Mon, 20 Feb 2023 05:08:20 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
www6.widgetserver.com/px.js?ch=2&abp=1
35.186.238.101200 OK 476 B URL HTTP/1.1 www6.widgetserver.com/px.js?ch=2&abp=1
IP 35.186.238.101:0
Hash d2183968f9080b37babfeba3ccf10df2
24b9cf589ee6789e567fac3ae5acfc25826d00c6
4d9b83714539f82372e1e0177924bcb5180b75148e22d6725468fd2fb6f96bcc
GET /px.js?ch=2&abp=1 HTTP/1.1
Host: www6.widgetserver.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www6.widgetserver.com/?template=ARROW_3&tdfs=0&s_token=1676869699.0492390000&uuid=1676869699.0492390000&term=Europe%20Dedicated%20Servers&term=Norway%20Dedicated%20Servers&term=Oslo%20County%20Dedicated%20Servers&term=Oslo%20Dedicated%20Servers&term=Custom%20Dedicated%20Servers&searchbox=0&showDomain=1&backfill=0
Cookie: caf_ipaddr=91.90.42.154; country=NO; city=""; expiry_partner=
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 20 Feb 2023 05:08:20 GMT
Content-Type: application/javascript
Content-Length: 476
Last-Modified: Tue, 14 Feb 2023 15:45:32 GMT
ETag: "63ebac9c-1dc"
Accept-Ranges: bytes
Via: 1.1 google
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 3bea483bbb28278f82dc003a32416dc7
34f12dfa7805a79d6363575ad7cccd410eb30e96
ce04b3b99a564bd3d95c6b4b14d4941ac6bab286270c2d283113079cae3b9879
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 20 Feb 2023 05:08:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 19 Feb 2023 20:21:38 GMT
Expires: Mon, 20 Feb 2023 20:21:38 GMT
ETag: "34f12dfa7805a79d6363575ad7cccd410eb30e96"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.godaddy.com/
192.124.249.24200 OK 1.8 kB IP 192.124.249.24:0
Hash 3bea483bbb28278f82dc003a32416dc7
34f12dfa7805a79d6363575ad7cccd410eb30e96
ce04b3b99a564bd3d95c6b4b14d4941ac6bab286270c2d283113079cae3b9879
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 20 Feb 2023 05:08:20 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 19 Feb 2023 20:21:38 GMT
Expires: Mon, 20 Feb 2023 20:21:38 GMT
ETag: "34f12dfa7805a79d6363575ad7cccd410eb30e96"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
api.aws.parking.godaddy.com/v1/domains/domain?domain=www6.widgetserver.com&portfolioId=&abp=1
100.26.85.29200 OK 0 B URL HTTP/2 api.aws.parking.godaddy.com/v1/domains/domain?domain=www6.widgetserver.com&portfolioId=&abp=1
IP 100.26.85.29:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /v1/domains/domain?domain=www6.widgetserver.com&portfolioId=&abp=1 HTTP/1.1
Host: api.aws.parking.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: x-request-id
Referer: http://www6.widgetserver.com/
Origin: http://www6.widgetserver.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:20 GMT
content-length: 0
set-cookie: AWSALB=X5T15YXxJ6o4sxlPNMvRoDFW6ZX9a/UyHXQodctfmASFnZj7KgluziWqp7c9ZcapW5kGwR+PSCUSucVXEnAoynllBn3WUgOcTCUiUYJcl6rOlOknAmGzLdh4T4SV; Expires=Mon, 27 Feb 2023 05:08:20 GMT; Path=/
AWSALBCORS=X5T15YXxJ6o4sxlPNMvRoDFW6ZX9a/UyHXQodctfmASFnZj7KgluziWqp7c9ZcapW5kGwR+PSCUSucVXEnAoynllBn3WUgOcTCUiUYJcl6rOlOknAmGzLdh4T4SV; Expires=Mon, 27 Feb 2023 05:08:20 GMT; Path=/; SameSite=None; Secure
access-control-allow-credentials: true
access-control-allow-headers: X-Request-Id
access-control-allow-methods: GET, HEAD, OPTIONS
access-control-allow-origin: http://www6.widgetserver.com
access-control-max-age: 600
x-request-id: EsRpzqYV
X-Firefox-Spdy: h2
www.skinmdbotanical.com/
23.227.38.74301 Moved Permanently 0 B IP 23.227.38.74:0
GET / HTTP/1.1
Host: www.skinmdbotanical.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:18 GMT
content-type: text/html; charset=utf-8
location: https://skinmdbotanical.com/
x-sorting-hat-podid: 152
x-sorting-hat-shopid: 31938642055
x-storefront-renderer-rendered: 1
x-redirect-reason: canonical_host_redirection
x-frame-options: DENY
content-security-policy: block-all-mixed-content; frame-ancestors 'none'; upgrade-insecure-requests;
strict-transport-security: max-age=7889238
x-shopid: 31938642055
x-shardid: 152
vary: Accept
x-shopify-stage: production
x-dc: gcp-europe-north1,gcp-europe-west1,gcp-europe-west1
x-request-id: 9e74fb8c-8551-4342-8eba-063e9351a59c
x-download-options: noopen
x-xss-protection: 1; mode=block
x-permitted-cross-domain-policies: none
x-content-type-options: nosniff
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rrdgw4RTuwY95PRgdVb%2FtMewxoaTxx2pXRl0ay7lVM23FuViI4UHbpvOrBf9BqiSTTp18Y%2FpdoW%2BqH2Kr8anH6KwyiNMEvk8Tjh2Jra6AClid85ptVAsRZhGTAPcdI95k%2FZ%2B%2Bys7n42N"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
server-timing: processing;dur=7, db;dur=3, asn;desc="50304", edge;desc="OSL", country;desc="NO", pageType;desc="index", cfRequestDuration;dur=1654.999971
server: cloudflare
cf-ray: 79c4b93c2dbc0b61-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
chunkybling.com/sites/default/files/banner_build_watch_animated_125_125.gif
172.67.222.33403 Forbidden 0 B URL HTTP/2 chunkybling.com/sites/default/files/banner_build_watch_animated_125_125.gif
IP 172.67.222.33:0
GET /sites/default/files/banner_build_watch_animated_125_125.gif HTTP/1.1
Host: chunkybling.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Mon, 20 Feb 2023 05:08:15 GMT
content-type: text/html; charset=UTF-8
permissions-policy: accelerometer=(),autoplay=(),camera=(),clipboard-read=(),clipboard-write=(),fullscreen=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()
referrer-policy: same-origin
x-frame-options: SAMEORIGIN
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FBTAAhzIdofGPdEJz7AX%2FIwYXsh8fd1%2FSyUGftQBEXvWcioCkEVGk5Et8AYnjnar8rFpnxRSbcM%2FC62OdGCGHj5biDdEAt1J%2F66s1wcB5TPYG46eYaDdhsH1Lq4NYrvQNh0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c4b92f4a14b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s616.photobucket.com/albums/tt242/sbclientlayoutimages/middayescapades/button.png
54.230.111.84200 OK 0 B URL HTTP/2 s616.photobucket.com/albums/tt242/sbclientlayoutimages/middayescapades/button.png
IP 54.230.111.84:0
GET /albums/tt242/sbclientlayoutimages/middayescapades/button.png HTTP/1.1
Host: s616.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Fri, 17 Feb 2023 17:52:00 GMT
server: Photobucket
content-encoding: gzip
date: Sun, 19 Feb 2023 20:20:01 GMT
etag: W/"09eded1ee11382c248abe0f72cfdfb4e"
x-cache: Error from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: UR_xLgt8dxTQ15OgVbVuexq3KVNlL_f_TARoj_yP2sLmxf74f5usiA==
age: 31746
cache-control: no-cache
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
s616.photobucket.com/albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif
54.230.111.84200 OK 0 B URL HTTP/2 s616.photobucket.com/albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif
IP 54.230.111.84:0
GET /albums/tt242/sbclientlayoutimages/mamaof3munchkins/button.gif HTTP/1.1
Host: s616.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Fri, 17 Feb 2023 17:52:00 GMT
server: Photobucket
content-encoding: gzip
date: Sun, 19 Feb 2023 20:20:01 GMT
etag: W/"09eded1ee11382c248abe0f72cfdfb4e"
x-cache: Error from cloudfront
via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BtCyptQiO8CV8wdWVHu2UClNh2-NHY1VZLZY86PysMVVISBftYzeSQ==
age: 31746
cache-control: no-cache
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
www.google.com/adsense/domains/caf.js?abp=1
142.250.74.164200 OK 0 B URL HTTP/2 www.google.com/adsense/domains/caf.js?abp=1
IP 142.250.74.164:0
GET /adsense/domains/caf.js?abp=1 HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www6.widgetserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Mon, 20 Feb 2023 05:08:20 GMT
expires: Mon, 20 Feb 2023 05:08:20 GMT
cache-control: private, max-age=3600
etag: "12622708097953771329"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img1.wsimg.com/parking-lander/static/js/0.40743286.chunk.js
23.36.79.16200 OK 0 B URL HTTP/2 img1.wsimg.com/parking-lander/static/js/0.40743286.chunk.js
IP 23.36.79.16:0
ASN #20940 Akamai International B.V.
GET /parking-lander/static/js/0.40743286.chunk.js HTTP/1.1
Host: img1.wsimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www6.widgetserver.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: f0SGcvFmDtEX/kqsGotSp6Buh7LQtFnodVFgNR7DozUuYF4unhJHIR5WZD92RZWybaw0iBhKDII=
x-amz-request-id: 2FAJDMPCN6W0P945
last-modified: Tue, 14 Feb 2023 15:44:39 GMT
etag: "b068012e619429e22f89192c5175a1e0"
x-amz-server-side-encryption: AES256
x-amz-version-id: gYg2nrvw6dt8CWezF3ZJ_Af3PN3NBmJj
accept-ranges: bytes
content-type: application/javascript
vary: Accept-Encoding
content-encoding: gzip
content-length: 139862
cache-control: max-age=31536000
expires: Tue, 20 Feb 2024 05:08:20 GMT
date: Mon, 20 Feb 2023 05:08:20 GMT
timing-allow-origin: *
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.momspective.com/wp-content/uploads/2009/12/Momspective.gif
208.109.51.85404 Not Found 0 B URL HTTP/1.1 www.momspective.com/wp-content/uploads/2009/12/Momspective.gif
IP 208.109.51.85:0
ASN #398101 GO-DADDY-COM-LLC
GET /wp-content/uploads/2009/12/Momspective.gif HTTP/1.1
Host: www.momspective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 404 Not Found
Date: Mon, 20 Feb 2023 05:08:15 GMT
Server: Apache
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Link: <http://www.momspective.com/wp-json/>; rel="https://api.w.org/"
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Keep-Alive: timeout=5
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
kevinandamanda.com/buttons/freehandwritingfonts.jpg
188.114.97.1301 Moved Permanently 0 B URL HTTP/2 kevinandamanda.com/buttons/freehandwritingfonts.jpg
IP 188.114.97.1:0
GET /buttons/freehandwritingfonts.jpg HTTP/1.1
Host: kevinandamanda.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: text/html
location: https://www.kevinandamanda.com/buttons/freehandwritingfonts.jpg
x-powered-by: centminmod
x-hosted-by: BigScoots
cache-control: max-age=31536000
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lw5hyQA5Js8HjoAZqqS7K%2BBFW19s5YtXtrbZ2tch9NWpxhDyuDfetNrwGaqtC%2B3zbNI0AAZ58M8lqwPbeBFIYVOx3BKVko%2FrIzAU8ItW8sWDwqE3j092b1ChorPAmsk0itg%2Fej0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 79c4b9372d90b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
thattechchick.com/wp-content/uploads/2010/07/button.png
103.224.182.253403 Forbidden 0 B URL HTTP/1.0 thattechchick.com/wp-content/uploads/2010/07/button.png
IP 103.224.182.253:0
ASN #133618 Trellian Pty. Limited
GET /wp-content/uploads/2010/07/button.png HTTP/1.1
Host: thattechchick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.0 403 Forbidden
cache-control: no-cache
content-type: text/html
hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
172.67.177.179301 Moved Permanently 0 B URL HTTP/2 hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
IP 172.67.177.179:0
GET /counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0 HTTP/1.1
Host: hitwebcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.hitwebcounter.com/counter/counter.php?page=160089&style=0043&nbdigits=5&type=ip&initCount=0
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hWWikYxYNrNg50wUhg29%2BzgEjcutjjErGlLbcxtXLFzZAzKHig1wRHSwxKoDAK7R3ViTWqcJuqj5CvUDI0soT8B3KOlOQeg186BDA6sX5WPRanXOPPz9OjG4NGuWbxEtifZKhA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 79c4b9360a87b4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogelina.com/wp-content/uploads/2011/01/blogelina.com-AN-125x125.gif
151.101.66.159401 Restricted 0 B URL HTTP/1.1 www.blogelina.com/wp-content/uploads/2011/01/blogelina.com-AN-125x125.gif
IP 151.101.66.159:0
GET /wp-content/uploads/2011/01/blogelina.com-AN-125x125.gif HTTP/1.1
Host: www.blogelina.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.1 401 Restricted
Connection: close
Content-Length: 114530
Server: Varnish
Retry-After: 0
Content-Type: text/html; charset=utf-8
WWW-Authenticate: Basic realm="The username is 'flywheel'. Please enter your password.", charset="UTF-8"
Accept-Ranges: bytes
Date: Mon, 20 Feb 2023 05:08:14 GMT
X-Served-By: cache-bma1630-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1676869694.265484,VS0,VE156
X-FW-Serve: TRUE
X-FW-Static: NO
X-FW-Type: VISIT
sarafan2.blogspot.com/search/label/%E2%80%9Dhttp://farm3.static.flickr.com/2456/3604710328_92f8da5b23_o.jpg%E2%80%9D
216.58.207.193404 Not Found 0 B URL HTTP/1.1 sarafan2.blogspot.com/search/label/%E2%80%9Dhttp://farm3.static.flickr.com/2456/3604710328_92f8da5b23_o.jpg%E2%80%9D
IP 216.58.207.193:0
Analyzer Verdict Alert fortinet Phishing
GET /search/label/%E2%80%9Dhttp://farm3.static.flickr.com/2456/3604710328_92f8da5b23_o.jpg%E2%80%9D HTTP/1.1
Host: sarafan2.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/search/label/DWTS%20Week%209%20Semi%20Finals
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Mon, 20 Feb 2023 05:08:14 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 36952
Server: GSE
static.addtoany.com/menu/sm.24.html
172.67.39.148200 OK 0 B URL HTTP/2 static.addtoany.com/menu/sm.24.html
IP 172.67.39.148:0
GET /menu/sm.24.html HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:16 GMT
content-type: text/html; charset=utf-8
last-modified: Fri, 18 Nov 2022 00:47:55 GMT
etag: W/"2a5-5edb40e6d10d8"
cache-control: max-age=315360000, immutable
vary: Accept-Encoding
via: e2s
cf-cache-status: HIT
age: 376292
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 79c4b930eb8eb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
babeelove.com/images/babeelove.png
54.209.32.212404 Not Found 0 B URL HTTP/1.0 babeelove.com/images/babeelove.png
IP 54.209.32.212:0
GET /images/babeelove.png HTTP/1.1
Host: babeelove.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://sarafan2.blogspot.com/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
static.addtoany.com/menu/eso.26680508.js
172.67.39.148200 OK 0 B URL HTTP/2 static.addtoany.com/menu/eso.26680508.js
IP 172.67.39.148:0
GET /menu/eso.26680508.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:16 GMT
content-type: application/javascript; charset=utf-8
cache-control: max-age=315360000, immutable
cf-bgj: minify
access-control-allow-origin: *
age: 3469999
etag: W/"13658-5f1f2ae2a2c3b"
last-modified: Wed, 11 Jan 2023 01:11:29 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 79c4b9318bdfb515-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.caring.com/candle/cc.js
54.210.23.207200 OK 0 B URL HTTP/2 www.caring.com/candle/cc.js
IP 54.210.23.207:0
GET /candle/cc.js HTTP/1.1
Host: www.caring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://sarafan2.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 20 Feb 2023 05:08:17 GMT
content-type: application/javascript
last-modified: Thu, 26 Jan 2023 21:06:16 GMT
vary: Accept-Encoding
etag: W/"63d2eb48-2c9e"
strict-transport-security: max-age=31536000; includeSubdomains
content-encoding: gzip
X-Firefox-Spdy: h2