Overview

URLgnula.nu/drama/ver-ma-ma-2015-online/
IP 185.178.208.130 (Russia)
ASN#57724 Ddos-guard Ltd
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-03 21:19:51 UTC
StatusLoading report..
IDS alerts0
Blocklist alert5
urlquery alerts No alerts detected
Tags None

Domain Summary (39)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
datatechonert.com (1) 46154 2021-12-24 16:44:17 UTC 2022-12-03 20:47:24 UTC 37.48.68.71
stats.g.doubleclick.net (1) 96 2013-06-10 20:21:11 UTC 2022-12-03 17:49:58 UTC 64.233.165.155
mc.yandex.ru (2) 2672 2012-05-21 09:38:30 UTC 2022-12-03 18:36:50 UTC 87.250.250.119
gnula.nu (85) 289721 2013-07-11 16:51:48 UTC 2022-12-03 15:58:45 UTC 185.178.208.130
my.rtmark.net (1) 9054 2017-08-22 14:11:49 UTC 2022-12-03 20:47:24 UTC 139.45.195.8
ssl.gstatic.com (1) 0 2015-12-03 08:40:31 UTC 2022-12-03 18:55:37 UTC 142.250.74.99 Domain (gstatic.com) ranked at: 540
ocsp.sectigo.com (1) 487 2019-11-29 11:50:24 UTC 2021-09-17 20:05:40 UTC 172.64.155.188
ocsp.digicert.com (7) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
apis.google.com (1) 105 2013-05-30 23:17:44 UTC 2020-05-14 13:59:47 UTC 172.217.21.174
www.google.es (1) 16747 2015-06-11 17:49:34 UTC 2022-12-03 05:10:51 UTC 142.250.74.67
ajax.googleapis.com (1) 12905 2013-08-16 09:51:31 UTC 2022-12-03 20:04:05 UTC 142.250.74.106
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 44.238.202.79
e1.o.lencr.org (4) 6159 No data No data 23.36.77.32
polldaddy.com (4) 103561 2012-05-21 07:12:01 UTC 2022-12-02 22:42:52 UTC 192.0.123.248
r3.o.lencr.org (11) 344 No data No data 23.36.76.226
www.google.no (1) 25607 2016-04-05 19:50:59 UTC 2022-12-03 17:56:03 UTC 142.250.74.67
www.facebook.com (1) 99 2012-05-21 00:23:41 UTC 2021-06-08 06:38:51 UTC 157.240.240.35
grunoaph.net (3) 0 2022-08-31 19:18:02 UTC 2022-12-03 20:03:36 UTC 139.45.197.238 Unknown ranking
hangersbozal.com (1) 0 2022-07-28 22:20:03 UTC 2022-12-01 21:10:14 UTC 23.109.248.182 Unknown ranking
www.google-analytics.com (1) 40 2012-10-03 01:04:21 UTC 2022-12-03 18:03:33 UTC 216.239.34.178
syndication.twitter.com (2) 833 2013-09-20 01:46:47 UTC 2022-12-03 17:14:20 UTC 104.244.42.136
ocsp.pki.goog (17) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
www.google.com (1) 7 2016-03-22 03:56:07 UTC 2022-12-03 17:21:24 UTC 216.58.207.228
tzegilo.com (1) 0 2022-01-14 15:27:15 UTC 2022-12-03 20:47:30 UTC 104.21.84.149 Unknown ranking
accounts.google.com (1) 81 2016-03-20 12:44:49 UTC 2022-12-03 20:03:22 UTC 216.58.211.13
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-12-03 18:42:52 UTC 216.58.211.3 Domain (gstatic.com) ranked at: 540
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-03 17:13:43 UTC 34.117.237.239
ocsp.globalsign.com (4) 2075 2012-07-20 17:46:16 UTC 2020-05-02 20:58:10 UTC 104.18.21.226
ok.ru (10) 3812 2017-01-30 05:01:21 UTC 2022-12-03 09:48:24 UTC 217.20.147.1
st.mycdn.me (2) 31534 2013-04-18 12:24:26 UTC 2022-12-03 10:23:44 UTC 217.20.155.82
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-03 17:15:13 UTC 34.102.187.140
murkilyergots.com (2) 0 2022-03-28 15:06:16 UTC 2022-12-01 21:10:14 UTC 142.91.159.134 Unknown ranking
platform.twitter.com (4) 597 2012-05-21 03:34:05 UTC 2020-05-03 05:23:23 UTC 93.184.220.66
videoplayer.ru (1) 0 2015-04-29 13:39:59 UTC 2022-12-03 01:51:35 UTC 188.114.96.1 Unknown ranking
img-getpocket.cdn.mozilla.net (6) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
s3.multipulter.com (1) 0 2022-06-14 01:40:03 UTC 2022-11-20 02:31:41 UTC 46.61.151.250 Unknown ranking
player.vimple.ru (1) 0 2016-10-29 08:41:54 UTC 2022-11-30 19:23:26 UTC 172.67.134.240 Domain (vimple.ru) ranked at: 382989
www.googletagmanager.com (1) 75 2013-05-22 02:07:37 UTC 2022-12-03 19:25:05 UTC 142.250.74.168

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-03 2 videoplayer.ru/ru/player/spruto/sp.js?v=3.0.0.0 Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
Scan Date Severity Indicator Comment
2022-12-03 2 grunoaph.net Sinkholed
2022-12-03 2 datatechonert.com Sinkholed
2022-12-03 2 grunoaph.net Sinkholed
2022-12-03 2 grunoaph.net Sinkholed


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 185.178.208.130
Date UQ / IDS / BL URL IP
2023-01-30 07:45:17 +0000 0 - 0 - 19 f-3ru.xyz/f/VNXv/?id=61014raxa 185.178.208.130
2023-01-16 09:33:06 +0000 0 - 0 - 9 f-3ru.xyz/f/avk/?id=49607 185.178.208.130
2023-01-15 07:50:55 +0000 0 - 0 - 8 f-3ru.xyz/f/aavk/?id=58859 185.178.208.130
2023-01-14 23:26:15 +0000 0 - 0 - 5 gnula.nu/ 185.178.208.130
2023-01-12 03:21:18 +0000 0 - 0 - 45 ibradome.com/tag/skye 185.178.208.130


Last 5 reports on ASN: Ddos-guard Ltd
Date UQ / IDS / BL URL IP
2023-02-01 15:03:59 +0000 0 - 4 - 0 monofaktyra.ru/ 185.215.4.47
2023-02-01 12:31:13 +0000 0 - 2 - 0 www.garanttraining.ru/ 185.215.4.16
2023-02-01 11:45:37 +0000 0 - 3 - 0 pgl.at.ua/PPD/distancijna_osvita_2014-2015.doc 195.216.243.31
2023-02-01 11:20:25 +0000 0 - 2 - 0 home-rent-vr-sim.ru/ 185.215.4.25
2023-02-01 09:02:35 +0000 0 - 0 - 1 win7.ucoz.es/Egyebek/blank_icon.zip 195.216.243.40


Last 5 reports on domain: gnula.nu
Date UQ / IDS / BL URL IP
2023-01-14 23:26:15 +0000 0 - 0 - 5 gnula.nu/ 185.178.208.130
2022-12-18 08:22:54 +0000 0 - 0 - 5 gnula.nu/documental/ver-only-the-dead-2015-online/ 185.178.208.130
2022-12-17 05:12:50 +0000 0 - 0 - 4 gnula.nu/comedia-gamberra/ver-21-and-over-201 (...) 185.178.208.130
2022-12-03 21:19:51 +0000 0 - 0 - 5 gnula.nu/drama/ver-ma-ma-2015-online/ 185.178.208.130
2022-12-01 21:10:18 +0000 0 - 0 - 6 gnula.nu/http:/gnula.nu/wp-content/uploads/20 (...) 185.178.208.130


No other reports with similar screenshot

JavaScript

Executed Scripts (54)

Executed Evals (2)
#1 JavaScript::Eval (size: 143) - SHA256: 366c52323eefba1304519c6027e6da1dc5dab80d3104de4f93f706d8604cd3a4
if (typeof PDRTJS_6422202_post_157200 == 'undefined') {
    PDRTJS_6422202_post_157200 = new PDRTJS_RATING(PDRTJS_settings_6422202_post_157200);
}
#2 JavaScript::Eval (size: 1665) - SHA256: a752d0ea0fa42e7c609c31cdf7b5bfbc9a9eed0ba5c3e6d052caef932d7a9fdf
Scroller = {
    speed: 10,
    offsetParent: function(d) {
        offsetParent = d.offsetTop;
        if (d.offsetParent) {
            while (d = d.offsetParent) {
                offsetParent += d.offsetTop
            }
        }
        return offsetParent
    },
    scrollTop: function() {
        body = document.body;
        d = document.documentElement;
        if (body && body.scrollTop) {
            return body.scrollTop
        }
        if (d && d.scrollTop) {
            return d.scrollTop
        }
        if (window.pageYOffset) {
            return window.pageYOffset
        }
        return 0
    },
    attachEvent: function(a, b, d) {
        if (a.addEventListener) {
            return a.addEventListener(b, d, false)
        }
        if (a.attachEvent) {
            return a.attachEvent("on" + b, d)
        }
    },
    end: function(e) {
        if (window.event) {
            window.event.cancelBubble = true;
            window.event.returnValue = false;
            return
        }
        if (e.preventDefault && e.stopPropagation) {
            e.preventDefault();
            e.stopPropagation()
        }
    },
    scroll: function(d) {
        i = window.innerHeight || document.documentElement.clientHeight;
        h = document.body.scrollHeight;
        a = Scroller.scrollTop();
        if (d > a) {
            if (h - d > i) {
                a += Math.ceil((d - a) / Scroller.speed)
            } else {
                a += Math.ceil((d - a - (h - d)) / Scroller.speed)
            }
        } else {
            a = a + (d - a) / Scroller.speed
        }
        window.scrollTo(0, a);
        if (a == d || Scroller.offsetTop == a) {
            clearInterval(Scroller.interval)
        }
        Scroller.offsetTop = a
    },
    init: function() {
        Scroller.attachEvent(window, "load", Scroller.load)
    },
    load: function() {
        a = document.getElementsByTagName("a");
        Scroller.end(this);
        window.onscroll;
        for (i = 0; i < a.length; i++) {
            l = a[i];
            d = location.pathname;
            if (l.href && l.href.indexOf("#") != -1 && (l.pathname == d || "/" + l.pathname == d)) {
                Scroller.attachEvent(l, "click", Scroller.end);
                l.onclick = function() {
                    Scroller.end(this);
                    l = this.hash.substr(1);
                    a = document.getElementsByTagName("a");
                    for (i = 0; i < a.length; i++) {
                        if (a[i].name == l) {
                            clearInterval(Scroller.interval);
                            Scroller.interval = setInterval("Scroller.scroll(" + Scroller.offsetParent(a[i]) + ")", 10)
                        }
                    }
                }
            }
        }
    }
};
Scroller.init()

Executed Writes (0)


HTTP Transactions (188)


Request Response
                                        
                                            GET /drama/ver-ma-ma-2015-online/ HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         185.178.208.130
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf8
                                        
Server: ddos-guard
Date: Sat, 03 Dec 2022 21:19:38 GMT
Connection: keep-alive
Keep-Alive: timeout=60
Location: https://gnula.nu/drama/ver-ma-ma-2015-online/
Content-Length: 568


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (564), with no line terminators
Size:   568
Md5:    2761b98db33884ab29711096ab315edb
Sha1:   8cea6e53464aea178b72e06a906205d040f14ca5
Sha256: 9f7a07f69d9b9a5af186a79159ccea18935ab4103128ca967e3f3f8ae45fb3ee
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6035871C0DE6FF2D120921461207CFA32BC286E1FE78849CE74815FFBB9FF950"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2206
Expires: Sat, 03 Dec 2022 21:56:25 GMT
Date: Sat, 03 Dec 2022 21:19:39 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3452
Cache-Control: max-age=137345
Date: Sat, 03 Dec 2022 21:19:39 GMT
Etag: "638b2570-1d7"
Expires: Mon, 05 Dec 2022 11:28:44 GMT
Last-Modified: Sat, 03 Dec 2022 10:31:12 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "39F6BB64420BCFC8F0B010168FD35B67732984CD0698409F04D5AE40410422AA"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3371
Expires: Sat, 03 Dec 2022 22:15:50 GMT
Date: Sat, 03 Dec 2022 21:19:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 03 Dec 2022 21:18:17 GMT
cache-control: public,max-age=3600
age: 82
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    30db107dcf4380cef05efea409c2e6a3
Sha1:   96e6a306fbc07299aba64e5c14e2bfca35872fa9
Sha256: b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: meg+Zug0iEcGvmXj+ByL7V31I1BN8MlGapLmWRbVhCGoSeAtHIzKvmwzzM5tgVWv2c/UMOx+Jes=
x-amz-request-id: HVED37K0MQDFFXQ3
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 03 Dec 2022 20:47:16 GMT
age: 1943
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    9ebddc2b260d081ebbefee47c037cb28
Sha1:   492bad62a7ca6a74738921ef5ae6f0be5edebf39
Sha256: 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "67E5ECD86C5416B82A56F9AE467D283CA4A6D1599E9DCA41A503E08ADC0128DD"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=1278
Expires: Sat, 03 Dec 2022 21:40:57 GMT
Date: Sat, 03 Dec 2022 21:19:39 GMT
Connection: keep-alive

                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sat, 03 Dec 2022 21:19:39 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 03 Dec 2022 21:08:58 GMT
cache-control: public,max-age=3600
age: 641
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /drama/ver-ma-ma-2015-online/ HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
set-cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo; Domain=.gnula.nu; HttpOnly; Path=/; Expires=Sun, 03-Dec-2023 21:19:39 GMT
date: Sat, 03 Dec 2022 21:19:39 GMT
content-length: 34465
link: <https://gnula.nu/wp-json/>; rel="https://api.w.org/", <https://gnula.nu/wp-json/wp/v2/posts/157200>; rel="alternate"; type="application/json", <https://gnula.nu/?p=157200>; rel=shortlink
vary: Accept-Encoding
content-encoding: gzip
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (49421)
Size:   34465
Md5:    acdb46cd97de2eb3ef9a6fad1feb5b7e
Sha1:   bcbf4393dafd0c074f2a8dc692b6eb897209045a
Sha256: e2c190a38041bf761edd58405d6d24521f92cd1a9103eca510c0e3aa2b0cc7b9
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3450
Cache-Control: 'max-age=158059'
Date: Sat, 03 Dec 2022 21:19:39 GMT
Last-Modified: Sat, 03 Dec 2022 20:22:09 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/drama/ver-ma-ma-2015-online/
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: text/css
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 15:00:28 GMT
last-modified: Wed, 14 Jul 2021 22:04:26 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 8930
ddg-cache-status: HIT,HIT
etag: W/"60ef5f6a-e33b"
expires: Fri, 02 Dec 2022 17:49:03 GMT
age: 281951
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (29677)
Size:   8930
Md5:    c787c06ec6de64a26274c2335677bf93
Sha1:   61d65d871722227622a19026f4c546ec1819df14
Sha256: 3689099f7cfc2d806fe0660c9c031d1bffbd642b9c7c3f278192055c901dbdab
                                        
                                            GET /wp-content/themes/charcoal2/style.css HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/drama/ver-ma-ma-2015-online/
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: text/css
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 15:13:06 GMT
last-modified: Sun, 21 Feb 2021 22:32:04 GMT
cache-control: max-age=604800
content-encoding: gzip
content-length: 6165
ddg-cache-status: HIT,HIT
etag: W/"6032df64-9af4"
expires: Fri, 02 Dec 2022 18:01:50 GMT
age: 281193
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (1067)
Size:   6165
Md5:    523060523e8538a5ce44511e3f6857f0
Sha1:   dfd9a769e7f8cbc18799af4180ce662570e5b51f
Sha256: 4295c27a0291af314f33273ae7a76d13b3556bb29e50d49cd7925169223fb8ba
                                        
                                            GET /wp-content/plugins/akismet/_inc/form.js HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/drama/ver-ma-ma-2015-online/
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: application/javascript
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 12:22:02 GMT
last-modified: Wed, 14 Jul 2021 20:59:01 GMT
cache-control: max-age=604800
content-encoding: gzip
ddg-cache-status: HIT,HIT
etag: "60ef5015-2bc"
expires: Mon, 28 Nov 2022 16:53:21 GMT
age: 464257
content-length: 318
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   318
Md5:    9981fd8493ac6b5c99634815c9aef030
Sha1:   15e922eda1c62a37bce0aea182535530889a044e
Sha256: 66780daa2edc073e9067f4b12f75d41c58bea33d1455d788b72b0e1853cca132
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sat, 03 Dec 2022 21:19:39 GMT
expires: Sat, 03 Dec 2022 21:19:39 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "34fae0e5dab49917"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1279)
Size:   20984
Md5:    327d33b72373a953dc7ddef0c6463b48
Sha1:   2fd9b26cb459ff01c3a1dd3507f1c7484cce6ce4
Sha256: 1f9becca80520826519f7908eff9bc2cdf551f9afc5d2a276f9d3c4a55a0e79c
                                        
                                            GET /cse/brand?form=cse-search-box&lang=es HTTP/1.1 
Host: www.google.es
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.67
HTTP/2 301 Moved Permanently
content-type: text/html; charset=UTF-8
                                        
location: https://www.gstatic.com/prose/brandjs.js
x-content-type-options: nosniff
server: sffe
content-length: 237
x-xss-protection: 0
date: Sat, 03 Dec 2022 21:13:26 GMT
expires: Sat, 03 Dec 2022 21:43:26 GMT
cache-control: public, max-age=1800
age: 373
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Size:   237
Md5:    bda0dec939809d66ff8388fe5c716412
Sha1:   d768e1edcca0d64e15c1a26978d19c8fdfbd4e4f
Sha256: 334f05a39cdb64bac9f876dd2a2011649d08d578f6d751460c91ca294f3304cd
                                        
                                            GET /gtag/js?id=UA-144276616-1 HTTP/1.1 
Host: www.googletagmanager.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.168
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
                                        
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 03 Dec 2022 21:19:39 GMT
expires: Sat, 03 Dec 2022 21:19:39 GMT
cache-control: private, max-age=900
last-modified: Sat, 03 Dec 2022 21:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43579
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1921)
Size:   43579
Md5:    a85dfdf6ce0c266ac46d594b59d06b2d
Sha1:   ff07969d81e6d88f3e05b414201d69120413b9c9
Sha256: fb34507a89449ad1cb0d7a66f8439ea10ff1a975dbb9507f69ad9815acc246ac
                                        
                                            GET /wp-includes/js/wp-embed.min.js HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/drama/ver-ma-ma-2015-online/
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: application/javascript
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 00:23:14 GMT
last-modified: Mon, 15 Feb 2021 03:38:18 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: W/"6029ecaa-592"
expires: Mon, 05 Dec 2022 07:35:12 GMT
age: 334585
content-encoding: br
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1391)
Size:   6622
Md5:    7c64180d1167f27e151a20f71128086a
Sha1:   b693690b9687eff0d34a0fec57544221aca74f46
Sha256: 6c339d89ff0093aa004b70253a07a655beabcbfdf5a6d754e6605a01f0b4c47b
                                        
                                            GET /wp-content/uploads/2022/06/Super_heros_malgre_lui3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 16:08:48 GMT
content-length: 5933
last-modified: Sun, 19 Jun 2022 08:21:04 GMT
etag: "62aedc70-172d"
expires: Sat, 10 Dec 2022 16:08:48 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 18651
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5933
Md5:    1162693ee59b6484d43e48cf5f9b757e
Sha1:   ed070bc6f68545eb2a8cc54af3b9e42316632961
Sha256: 1ed1c0ec12f12354305d7efb59b9cac424c51521a9468361e97592b22a0414fd
                                        
                                            GET /wp-content/uploads/2022/12/Troll3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 15:53:28 GMT
content-length: 6006
last-modified: Sat, 03 Dec 2022 15:46:26 GMT
etag: "638b6f52-1776"
expires: Sat, 10 Dec 2022 15:53:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 19571
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6006
Md5:    3e78d3bfe669ce2f11478594ce575e32
Sha1:   f57569ff4c99d07e516e48924ffa7f87f66afa14
Sha256: ea48664e670d7c705abe8064a330a35c017525f6aaa37658581d8c5a7a7ea8ee
                                        
                                            GET /wp-content/uploads/2022/12/Um_Natal_Cheio_de_Graca3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 15:44:53 GMT
content-length: 6051
last-modified: Sat, 03 Dec 2022 15:36:47 GMT
etag: "638b6d0f-17a3"
expires: Sat, 10 Dec 2022 15:44:53 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 20086
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6051
Md5:    4bf1b6d0f320fde907f5acf66c6c6278
Sha1:   50811aa07afc47fb921d48d11c5dcc6d135d2126
Sha256: b865100e5c7af1ec2348d830a11eef443d2d733106eb88fffcee307cb6af9137
                                        
                                            GET /wp-content/uploads/2022/12/A_Christmas_Proposal3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 16:14:41 GMT
content-length: 6012
last-modified: Thu, 01 Dec 2022 16:10:53 GMT
etag: "6388d20d-177c"
expires: Thu, 08 Dec 2022 16:14:41 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 191098
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6012
Md5:    2aae52439631c45b3d7a0b0999b680d0
Sha1:   c7894829da138a68b9dde5bde6111e777b8e2b18
Sha256: dcdf11d0604c32e3b6c83b49acb3e80de4dff8de2f40a630fe37efc9ff500338
                                        
                                            GET /wp-content/uploads/2022/12/Zhanym_ty_ne_poverish3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 15:27:56 GMT
content-length: 5191
last-modified: Sat, 03 Dec 2022 15:23:39 GMT
etag: "638b69fb-1447"
expires: Sat, 10 Dec 2022 15:27:56 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 21103
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5191
Md5:    e86a370875ca05aac2d13227ac1e2a0c
Sha1:   847efd8ef8e310193c472b4ae31dfc6b3c577878
Sha256: 7bd6433c080f029395b2cddea754e64347c3f39dc056facb39eb9989469aef3f
                                        
                                            GET /wp-content/uploads/2022/12/Action_Pack_Saves_Christmas3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 16:08:33 GMT
content-length: 5579
last-modified: Thu, 01 Dec 2022 16:06:13 GMT
etag: "6388d0f5-15cb"
expires: Thu, 08 Dec 2022 16:08:33 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 191466
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5579
Md5:    c05563f32b946f8aec6ca504e070db82
Sha1:   dc6e8bbd59840f47478d1d2b13cf2a97430b832f
Sha256: 3ecbd6a663afb4f76c7c0d0aace66d4d3772f9d31f997aa1104e1f3a5d7d2543
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "3875154752BF6CDB2118E242143BA72294EEB3C21FB8A15397F13E68E69E82E7"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18139
Expires: Sun, 04 Dec 2022 02:21:58 GMT
Date: Sat, 03 Dec 2022 21:19:39 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/uploads/2022/12/Huracan3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 15:53:35 GMT
content-length: 4006
last-modified: Thu, 01 Dec 2022 15:48:05 GMT
etag: "6388ccb5-fa6"
expires: Thu, 08 Dec 2022 15:53:35 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 192364
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   4006
Md5:    1c8f66e7ed125099172ec23e41ad775b
Sha1:   9e6106ace6da5fe6767535007e6812ad6abffb47
Sha256: dc82e3a64c6205b44e77f14f7cf31c9caa37b6530c4c52a03252a5f7563dd0fb
                                        
                                            GET /wp-content/uploads/2022/12/Fly3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 16:01:44 GMT
content-length: 5572
last-modified: Thu, 01 Dec 2022 15:55:57 GMT
etag: "6388ce8d-15c4"
expires: Thu, 08 Dec 2022 16:01:44 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 191875
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5572
Md5:    186bb477bb4c80dd3bf971e3c2afd716
Sha1:   2ce526e11718d48d17e604b223508e627dc890fa
Sha256: 8591017c0b3e1cbc547ffc56934ece47bdab81367828d4fa457c73be861d7c85
                                        
                                            GET /wp-content/uploads/2022/10/Lyle_Lyle_Crocodile3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 01:17:39 GMT
content-length: 5922
last-modified: Sat, 22 Oct 2022 16:25:45 GMT
etag: "63541989-1722"
expires: Wed, 07 Dec 2022 01:17:39 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 331320
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5922
Md5:    fb9b29914900b0e9ad8060743a0a5ad5
Sha1:   9bab6f093f0f915114e865222a9d6cc7fa4e5e92
Sha256: c25ada41eccdad2304339754f4ca77c5711298dafc974943118f54c2fff54d7c
                                        
                                            GET /wp-content/uploads/2022/12/Lecciones_para_canallas3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 15:43:13 GMT
content-length: 5660
last-modified: Thu, 01 Dec 2022 15:39:52 GMT
etag: "6388cac8-161c"
expires: Thu, 08 Dec 2022 15:43:13 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 192986
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5660
Md5:    41b41abc305b0ac37cb0d104b7de127e
Sha1:   075907355267f34ec6237be8e93185e016ec8bfa
Sha256: 884bae18afc90b83e06a704d165768e7efba2d54ba864cd0494ac67111005ec6
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/11/Under_Wraps-2m3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 01:01:10 GMT
content-length: 6067
last-modified: Tue, 01 Nov 2022 22:33:28 GMT
etag: "63619eb8-17b3"
expires: Wed, 07 Dec 2022 01:01:10 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 332309
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6067
Md5:    dd995f2960bc92b987b96ea362923291
Sha1:   6a59b3d5b0b35899f5753ec94f9bfe69a1f30fd7
Sha256: bcc550187576ca3ff1dae85f934b6381f129bd1090caac121070748f58d98509
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/09/Beast2m4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 14:46:31 GMT
content-length: 41074
last-modified: Thu, 08 Sep 2022 18:35:12 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "631a35e0-a072"
expires: Sat, 10 Dec 2022 14:46:31 GMT
age: 23588
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   41074
Md5:    c15b04077a1988ceab4d1ea6905d7520
Sha1:   922c0aa0e66d16b61c058e81e6721f4ec7589de8
Sha256: 63e990da95df43fa16d4cd816e4f0b4f3078d6921c3094eab0af218ac118c91e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/11/The_Woman_King4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 07:50:33 GMT
content-length: 44520
last-modified: Wed, 23 Nov 2022 01:43:51 GMT
etag: "637d7ad7-ade8"
expires: Wed, 07 Dec 2022 07:50:33 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 307746
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   44520
Md5:    3290f6c4940858e881cb31838fdfb891
Sha1:   6920d3ca37cf1681f8a2208004912ad73a58f4e6
Sha256: 66218423811df26cf62257ea934e4543de60c4d37b6ec1a00c6cee6bd6785031
                                        
                                            GET /wp-content/uploads/2022/11/Confessions3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 15:58:28 GMT
content-length: 5424
last-modified: Tue, 29 Nov 2022 15:54:49 GMT
etag: "63862b49-1530"
expires: Tue, 06 Dec 2022 15:58:28 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 364871
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5424
Md5:    532d08d9351e4fe424c5106d7fb00de3
Sha1:   d218e23e6574411c55cb70532622e0464b3e4811
Sha256: 612681fb176cc4c4df090cda57aeee5514a731b378eb49c269a028f89839cad8
                                        
                                            GET /wp-content/uploads/2022/12/Un_hombre_de_accion3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 15:35:38 GMT
content-length: 5765
last-modified: Sat, 03 Dec 2022 15:30:12 GMT
etag: "638b6b84-1685"
expires: Sat, 10 Dec 2022 15:35:38 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 20641
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5765
Md5:    3d7abe6c6c179ea3208eed21b8c57a3f
Sha1:   f7018d90b1932266989f80ede2013f6c87b701c4
Sha256: 9c9c43ed2ad958b707354f81833f13a0b601b30d42570c9ea2d7e1339a1cc7d8
                                        
                                            GET /wp-content/uploads/2021/11/La_fracture3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 15:28:14 GMT
content-length: 5104
last-modified: Mon, 29 Nov 2021 14:16:45 GMT
etag: "61a4e0cd-13f0"
expires: Tue, 06 Dec 2022 15:28:14 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 366685
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5104
Md5:    6071a88502aec64d4055e4be8a8a0dcc
Sha1:   896b3a7a3b28acd15cfcd9e62aa4a62a180d6f0f
Sha256: be0a5e80eef5685a401a3b6b09514ef5d78481780588e6dbcf5b0efa7db01678
                                        
                                            GET /ajax/libs/jquery/1.6/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 32222
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 27 Nov 2022 15:10:06 GMT
expires: Mon, 27 Nov 2023 15:10:06 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 540574
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32769)
Size:   32222
Md5:    beb03c9ee6d13748648309584590d515
Sha1:   a491b316cdd4df32dabb7a3a1d85919681911dda
Sha256: acec62a91cdd6d2b03731fcc7e988094b3c38c9269276f09f9a842e6433ee008
                                        
                                            GET /wp-content/uploads/2022/11/Holiday_Harmony3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Nov 2022 19:58:03 GMT
content-length: 6112
last-modified: Sun, 27 Nov 2022 19:46:26 GMT
etag: "6383be92-17e0"
expires: Sun, 04 Dec 2022 19:58:03 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 523297
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6112
Md5:    bfe788053262070657aae84fbd190baf
Sha1:   32956f3f220c06c290b7b668e72437cac2eaed13
Sha256: 9ad72369ce41c95a4d1aa2c26a4d20185c5d519175f143ffcdcebe61660166de
                                        
                                            GET /wp-content/uploads/2022/09/Three_Thousand_Years_of_Longing3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 16:03:26 GMT
content-length: 5443
last-modified: Mon, 12 Sep 2022 01:50:30 GMT
etag: "631e9066-1543"
expires: Sat, 10 Dec 2022 16:03:26 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 18973
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5443
Md5:    6b1ad319df63296def7c5024f80bdf55
Sha1:   310a9fbf118153313d8f16b0231822f65972f72e
Sha256: c3841ad557ac2a13fff4e01e767227cdfa386bcc4dcdc5e0ab323f1ce8ae5f8f
                                        
                                            GET /wp-content/uploads/2021/12/The_Fight_Before_Christmas3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 15:51:39 GMT
content-length: 5340
last-modified: Mon, 20 Dec 2021 22:10:21 GMT
etag: "61c0ff4d-14dc"
expires: Tue, 06 Dec 2022 15:51:39 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 365280
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5340
Md5:    b76f93d67bb1255b3c0d805642638ec8
Sha1:   b76ca1e73796420de299d29a5078170cb5d72cbf
Sha256: 5fc9839f5adf000196af632eb7925fe237d116931e73e2d1513dce445e534048
                                        
                                            GET /wp-content/uploads/2022/10/L_ombre_d_un_mensonge3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 16:22:41 GMT
content-length: 5810
last-modified: Fri, 21 Oct 2022 03:57:31 GMT
etag: "635218ab-16b2"
expires: Sat, 10 Dec 2022 16:22:41 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 17820
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5810
Md5:    7ae8ec0e336f9aaa971475ef3bdcebad
Sha1:   8e20e532524f3edec5770aed04106638557c5834
Sha256: f6239b2f98338979ce64dc0e48eec965e72fe3ed005185a4d8cf0df4f67ddd21
                                        
                                            GET /wp-content/uploads/2022/11/A_Christmas_Mystery3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Nov 2022 22:52:35 GMT
content-length: 6108
last-modified: Sun, 27 Nov 2022 20:17:52 GMT
etag: "6383c5f0-17dc"
expires: Sun, 04 Dec 2022 22:52:35 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 512824
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6108
Md5:    3ff5f4128f0470f5ebfa8b4f03003c16
Sha1:   cc2ddb5d16d119848ccad6553a1492dd49294551
Sha256: c5d27158f2caa59633d531235f0a93dea62aade6db06a815a056635778cb9c67
                                        
                                            GET /wp-content/uploads/2022/12/Matando_el_tiempo3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 16:18:57 GMT
content-length: 5236
last-modified: Sat, 03 Dec 2022 16:16:03 GMT
etag: "638b7643-1474"
expires: Sat, 10 Dec 2022 16:18:57 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 18042
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5236
Md5:    8a85cfd32cca9be44909f205fc0c37bb
Sha1:   4298e23d195d63ab04869bcad66ce4f563a57890
Sha256: e7ed50bca961b0985d435ef28a4d3166c6dd9dfdb877762d86e3b556e296e95d
                                        
                                            GET /wp-content/uploads/2022/11/The_Guardians_of_the_Galaxy_Holiday_Special3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 01:10:00 GMT
content-length: 6060
last-modified: Wed, 30 Nov 2022 01:08:06 GMT
etag: "6386acf6-17ac"
expires: Wed, 07 Dec 2022 01:10:00 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 331779
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6060
Md5:    1988137b91ec2b295d09b6da44d19250
Sha1:   cb3786235a4afa872818b42f11a8df44ffcc092c
Sha256: 414f86a0804fe42278070ea20e728aecec7bb3a6e1b0137fc101e6a2dc48e8e2
                                        
                                            GET /wp-content/uploads/2022/11/Le_patient3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 15:36:38 GMT
content-length: 4597
last-modified: Tue, 29 Nov 2022 15:31:08 GMT
etag: "638625bc-11f5"
expires: Tue, 06 Dec 2022 15:36:38 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 366181
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   4597
Md5:    25a14218f4079a0c23dd3a7858c11c66
Sha1:   fffa95e7387f7b66d3083f8df9e540b0ab5683cf
Sha256: d035c413026017e267bd6a9e60889240a9dc446c1a5c7bc7b3aa46ee1ab04514
                                        
                                            GET /wp-content/uploads/2022/11/Du_som_er_i_himlen3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 15:44:24 GMT
content-length: 5093
last-modified: Tue, 29 Nov 2022 15:39:12 GMT
etag: "638627a0-13e5"
expires: Tue, 06 Dec 2022 15:44:24 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 365715
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5093
Md5:    96b3aaa21b2a66ff8173f4714c80c300
Sha1:   a2698f051e1798ac07c1444e14d29f80e8aee347
Sha256: e8b05ff6dcd7dc282f87d73f1cc0067de1822b96db876453bfec053b63495e68
                                        
                                            GET /wp-content/uploads/2021/05/Spasti_Leningrad3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 16:13:32 GMT
content-length: 6128
last-modified: Wed, 19 May 2021 19:28:53 GMT
etag: "60a566f5-17f0"
expires: Sat, 10 Dec 2022 16:13:32 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 18367
ddg-cache-status: HIT,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6128
Md5:    41e9deb62f697900e48052a22565990b
Sha1:   1b9082d86573de7627dbe283f0119f8f23b07000
Sha256: 85cccc98a13e79b0aeced05b77fd1c3429d8cde7205cab4fbe505bd7b350a16a
                                        
                                            GET /wp-content/uploads/2022/07/Mr_Malcolms_List3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 02:25:26 GMT
content-length: 5820
last-modified: Sat, 23 Jul 2022 17:23:30 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "62dc2e92-16bc"
expires: Thu, 08 Dec 2022 06:13:21 GMT
age: 154453
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5820
Md5:    1ea5f12206607c6177d54ce8e8178a05
Sha1:   f4fa65805bf687f7e6755be57ed9a30582502680
Sha256: a3df9c2bbf3b1d1887b0019333de473455bbbdf4044cc6634a43e17873dc54d6
                                        
                                            GET /wp-content/uploads/2022/07/Cop_Secret3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 16:35:46 GMT
content-length: 6241
last-modified: Sun, 10 Jul 2022 22:18:51 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "62cb504b-1861"
expires: Thu, 08 Dec 2022 11:11:37 GMT
age: 103433
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   6241
Md5:    6eaaa5ed44cfc32cbe2a66c2f0f88738
Sha1:   30e987d3d2dbdeeae32e717e7e8887db2faf603e
Sha256: 6b772380ef0f32dbd6109e98d60fa4d3d164f87039c179d7e85d8f448a1c2e42
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gcgLKdwzr0hh/33424 HTTP/1.1 
Host: murkilyergots.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.91.159.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 03 Dec 2022 21:19:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://gnula.nu
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sun, 04-Dec-2022 21:19:40 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Sun, 04-Dec-2022 21:19:40 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
                                        
                                            GET /wp-content/uploads/2022/11/Black_Adam5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 02:24:40 GMT
content-length: 33635
last-modified: Wed, 23 Nov 2022 02:20:29 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "637d836d-8363"
expires: Wed, 07 Dec 2022 02:24:40 GMT
age: 327299
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   33635
Md5:    cc449cf16222716cab5d0792042b7c4f
Sha1:   60d4beb0a0fe383d8763287786892ee6c2cab395
Sha256: dd45a20cf17c45159382a965ae8ae5f9f9db9b330d71048a9ca594dc559139ee
                                        
                                            GET /wp-content/uploads/2022/08/Nope4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 14:04:56 GMT
content-length: 40845
last-modified: Thu, 25 Aug 2022 17:12:40 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "6307ad88-9f8d"
expires: Thu, 08 Dec 2022 14:04:56 GMT
age: 198883
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   40845
Md5:    3938804975796ef88f10bfdc13098f7c
Sha1:   6c228c84d8867f44d5b61ce39dcdf7e5ae520aa8
Sha256: 385a0d28d4855873ad6f61d07464f23613249bad88579d60123392deb6bf3364
                                        
                                            GET /wp-content/uploads/2022/11/My_Policeman4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 16:57:37 GMT
content-length: 38299
last-modified: Mon, 07 Nov 2022 16:34:47 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "636933a7-959b"
expires: Sat, 03 Dec 2022 11:19:41 GMT
age: 447722
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   38299
Md5:    ee49875136f6a4e0f36b1b090ce32bdf
Sha1:   5fb4e22a36354d52309bd32877f4d043eaa66a1f
Sha256: 0d0fa87c67b46606b66c108106059e35792c45f1727d28e592d8d77b149213e3
                                        
                                            GET /wp-content/uploads/2022/10/Dont_Worry_Darling4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 09:57:45 GMT
content-length: 33362
last-modified: Wed, 26 Oct 2022 03:28:42 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6358a96a-8252"
expires: Sat, 03 Dec 2022 15:15:23 GMT
age: 127314
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   33362
Md5:    784bc6da36153189895b958af63c648c
Sha1:   5c0ae88ad3d2720921dfb6954809ba8ac5cfcbf3
Sha256: 81c22b8799def0e5e82cbc13abaf6643752c4f522c9eaa9c9edf1d79be3b58ad
                                        
                                            GET /wp-content/uploads/2022/11/Amsterdam4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 17:44:48 GMT
content-length: 35652
last-modified: Tue, 15 Nov 2022 17:40:37 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6373cf15-8b44"
expires: Fri, 02 Dec 2022 15:53:24 GMT
age: 358491
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   35652
Md5:    4b04ddab75cd6fad617b3081e254dcb1
Sha1:   e5b90f90cac25fecb04f1219e6dd041880cd05da
Sha256: 568a0bb4135b099a04325fbb7b83aa0e383151d07b48abc14dedaf0abbd1c9e4
                                        
                                            GET /wp-content/uploads/2022/10/Amsterdam3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 17:44:48 GMT
content-length: 5709
last-modified: Sat, 08 Oct 2022 17:23:49 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "6341b225-164d"
expires: Tue, 06 Dec 2022 17:44:48 GMT
age: 358491
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5709
Md5:    e08d1bec5792451d510bf2efb80daadb
Sha1:   8be5a8f98a884d544e32934c1928fb2cc4f14e79
Sha256: 8af00b372faefda02acece4f341150f627021e3f51dbc69e9e5fbba1c6614778
                                        
                                            GET /wp-content/uploads/2022/09/One_Way3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 09:16:45 GMT
content-length: 5861
last-modified: Mon, 19 Sep 2022 14:30:48 GMT
etag: "63287d18-16e5"
expires: Thu, 08 Dec 2022 09:16:45 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 216175
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5861
Md5:    55b72fe1f1d8e1846314fa1fcc87dea8
Sha1:   c1bfdd45a5e721e48399f585269a31d52a7014d8
Sha256: 6e90a7779701b8a95f079f9c3130fb6ca3f4f4dd3188311ca396ed89703f7762
                                        
                                            GET /wp-content/uploads/2022/08/Heroes_de_barrio3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 20:38:11 GMT
content-length: 4229
last-modified: Tue, 02 Aug 2022 15:34:13 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "62e943f5-1085"
expires: Wed, 07 Dec 2022 20:38:11 GMT
age: 261689
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   4229
Md5:    1625270919acbbbd379d863032ead032
Sha1:   3371037a16245c21cb7115d1692c4ea11c36e604
Sha256: 1af653a6e03cef278b0014030130095200a5eef0c2d80a7867c387dc80867d6c
                                        
                                            GET /wp-content/uploads/2022/04/Alien_Sniperess3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 08:29:59 GMT
content-length: 5892
last-modified: Sun, 24 Apr 2022 14:36:21 GMT
etag: "62656065-1704"
expires: Wed, 07 Dec 2022 08:29:59 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 305381
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5892
Md5:    75b11d4892ea988b5ff56b1ce2cbace4
Sha1:   eb6cbd3e52a5d8f48f41ecf579e77161406a1df7
Sha256: 5c456caafe5226c7c5a8790612f11b1dcafb7593b7221965493821903dafc050
                                        
                                            GET /wp-content/uploads/2022/10/Black_Adam3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 05:27:02 GMT
content-length: 5534
last-modified: Fri, 21 Oct 2022 16:05:07 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6352c333-159e"
expires: Thu, 01 Dec 2022 09:12:23 GMT
age: 316358
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5534
Md5:    f0815d060cd741cafab682ef66685ccd
Sha1:   de94b36510ecf2885830da3b98b22c4acaeda228
Sha256: 951a26bfb9bc27131224510fe3b08c2a3e95ab62e75add8acdbaf50b3f99b56a
                                        
                                            GET /wp-content/uploads/2022/02/In_the_Forest3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 10:40:00 GMT
content-length: 4809
last-modified: Fri, 11 Feb 2022 03:54:17 GMT
etag: "6205dde9-12c9"
expires: Sat, 10 Dec 2022 10:40:00 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 38380
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   4809
Md5:    8c2a023a78634f35eec674641ac73f16
Sha1:   f9bdd3129d0497c1b09663f848b6d0db50d968fd
Sha256: 2bd0cb23775fa0da6bd30cd3ccf738318a8b5f206d3fd6b9e14464e7f8aabaac
                                        
                                            GET /wp-content/uploads/2022/11/Halloween_Ends5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 07:45:04 GMT
content-length: 34140
last-modified: Sat, 05 Nov 2022 06:08:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6365fde4-855c"
expires: Fri, 09 Dec 2022 16:57:01 GMT
age: 48875
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   34140
Md5:    f2dd6502043b71b245120730a5a17d4f
Sha1:   6f065d619730f0bccf081593f7897dc20a8fd5cd
Sha256: e6cbf20a531d2fab7f96ffa775df952618075fcf48dd269f5617b9e88d308107
                                        
                                            GET /wp-content/uploads/2022/10/Ticket_to_Paradise4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 01:23:43 GMT
content-length: 39962
last-modified: Wed, 26 Oct 2022 17:48:25 GMT
etag: "635972e9-9c1a"
expires: Wed, 07 Dec 2022 01:23:43 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 330956
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   39962
Md5:    4a47cd3f95966d4db09b4fd2b2ab14d9
Sha1:   64ed404d8c68bd19665942fd8b240f1d79fdb875
Sha256: c2df865684570f7a418c18f742ae6015c38da34b97b2bbb0c8d93ed705880797
                                        
                                            GET /wp-content/uploads/2022/10/Barbarian4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 06:04:25 GMT
content-length: 41791
last-modified: Wed, 26 Oct 2022 03:48:42 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6358ae1a-a33f"
expires: Sat, 03 Dec 2022 12:04:58 GMT
age: 314114
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   41791
Md5:    5aa098f15c8ac21cc203f05c75af0330
Sha1:   ee108a687a23dd4c0f349ea8b4f1ffe95b2d9e37
Sha256: 03f7d8ffe3833b47abf1eb36272f733a76046dce23af4d8788e5203edaa63095
                                        
                                            GET /wp-content/uploads/2022/11/Black_Panther_Wakanda_Forever_new.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 16:35:44 GMT
content-length: 45858
last-modified: Fri, 11 Nov 2022 13:46:34 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "636e523a-b322"
expires: Sat, 03 Dec 2022 06:55:06 GMT
age: 103435
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 23.4 (Macintosh), datetime=2022:11:11 08:46:24], baseline, precision 8, 215x279, components 3\012- data
Size:   45858
Md5:    cbdcc426447d906834ab0cb1f6839f4c
Sha1:   63c346a64a9bfe1c785f074da118685817162cda
Sha256: f29c23376bb7749318f13a3f424bca07c279a84c320558cc70ce4e291ba02278
                                        
                                            GET /wp-content/uploads/2022/08/Minions_The_Rise_of_Gru4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 11:24:29 GMT
content-length: 40272
last-modified: Tue, 02 Aug 2022 14:00:46 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "62e92e0e-9d50"
expires: Sun, 04 Dec 2022 22:12:51 GMT
age: 294911
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   40272
Md5:    e77f0b8630fddaa60f4af4a3a38b1224
Sha1:   7b49bd428fbc28c1ca7acac32ce6aca443053eab
Sha256: ceb169c22fda9f4739637944673372e7d2d2476778075b689eda5f292cad951d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/09/Three_Thousand_Years_of_Longing4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 14:07:24 GMT
content-length: 39834
last-modified: Mon, 19 Sep 2022 19:00:03 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6328bc33-9b9a"
expires: Sat, 03 Dec 2022 16:01:38 GMT
age: 198736
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   39834
Md5:    defa4b7e5b78b3f54bb63e7971fb128c
Sha1:   f9df4b5376e03cf9672efed4b0415d597b4b61da
Sha256: 11e203114231734a55a865581b268b738a7ff79cea4da8bc0750cca58bfb8366
                                        
                                            GET /wp-content/uploads/2022/09/Fall5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 14:01:59 GMT
content-length: 36342
last-modified: Fri, 02 Sep 2022 14:32:42 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6312140a-8df6"
expires: Sat, 03 Dec 2022 08:55:13 GMT
age: 458261
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   36342
Md5:    9e1d07d1fcda9b4db2b23ffd054d6640
Sha1:   0e389380b0628fb2a99944804b88b7019370e65c
Sha256: 03be235a9ddabb7abf9b38eee6387311d1ba8aa398d0f8f74bbc89535fbbfc2b
                                        
                                            GET /prose/brandjs.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://gnula.nu/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.211.3
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 5807
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 14:22:24 GMT
expires: Sun, 04 Dec 2022 14:22:24 GMT
cache-control: public, max-age=86400
age: 25036
last-modified: Tue, 06 Apr 2021 15:14:29 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1352)
Size:   5807
Md5:    10aa07ab4f7de5535f4cafe167ca4fa7
Sha1:   6c804574a29f9d8a77ed2823a7879e56dbc42c22
Sha256: d111484a9bceee10b129b20ebd4ead4639b5d7dd78117522249195fb84db3cf0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2022/07/Lightyear4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 22:16:57 GMT
content-length: 33003
last-modified: Thu, 14 Jul 2022 16:51:11 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "62d0497f-80eb"
expires: Sat, 03 Dec 2022 12:05:05 GMT
age: 342163
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   33003
Md5:    bc414fdcadd43283ba463097b1de3d92
Sha1:   bff73ee95800371b3e50dee1fbdd691095dddd92
Sha256: 11232c7a182b06dd91a0d706fd48d0cea7fa9f3817ea606c368d1320cf0490b5
                                        
                                            GET /wp-content/uploads/2021/09/Free_Guy5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 12:33:06 GMT
content-length: 40539
last-modified: Wed, 29 Sep 2021 04:25:52 GMT
etag: "6153ead0-9e5b"
expires: Wed, 07 Dec 2022 12:33:06 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 290794
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   40539
Md5:    a46cc3cd01e9889ea09d14ec81ad1fbe
Sha1:   d462507245493576e505040bf0de984f2e490a4f
Sha256: 652a376a1bef35a690e3ca8a3ad646f5d71d291b4e430f09a7f7589575e0244a
                                        
                                            GET /wp-content/uploads/2021/09/Dear_Evan_Hansen4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 17:25:46 GMT
content-length: 33142
last-modified: Mon, 20 Sep 2021 02:11:32 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6147edd4-8176"
expires: Wed, 07 Dec 2022 00:26:42 GMT
age: 273234
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   33142
Md5:    dce8ec7cdeee2deca8a5de066915e400
Sha1:   abb2f56e5f7c7a9c7d43762f73f2579d9fbc026d
Sha256: 3a7a5f3ce2f8e0930b9813442c60e2b04c701f713bb390061d424acf5560c3f1
                                        
                                            GET /wp-content/uploads/2021/01/The_Croods_A_New_Age5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 13:20:55 GMT
content-length: 27011
last-modified: Sat, 02 Jan 2021 14:04:12 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ff07d5c-6983"
expires: Thu, 01 Dec 2022 08:50:18 GMT
age: 460725
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   27011
Md5:    86a76e72f8f96c44d0347bdda79d056d
Sha1:   8007d4a92aafc7a13956c4cbb02d3a0020cb6026
Sha256: cf784b3c1dda6a1870ccfa4902b760f53a063f44e8f3d7374d1db1852938c2c2
                                        
                                            GET /wp-content/uploads/2021/05/Chaos_Walking5.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 05:05:05 GMT
content-length: 35478
last-modified: Sat, 08 May 2021 22:27:16 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "60971044-8a96"
expires: Thu, 08 Dec 2022 11:11:36 GMT
age: 144875
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   35478
Md5:    8cbe83232e067e85f193643cff4733db
Sha1:   0b6476a4dbf52899cf9dc3b1b36743cfafcbbfa0
Sha256: 416115705b0e961e14f589b577a4b9096cf4c8bdb5f31ca3edb61b90b4947cac
                                        
                                            GET /wp-content/uploads/2021/01/Promising_Young_Woman6.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 10:44:10 GMT
content-length: 31093
last-modified: Fri, 15 Jan 2021 01:35:34 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6000f166-7975"
expires: Thu, 01 Dec 2022 19:35:37 GMT
age: 210930
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   31093
Md5:    4f4d7e501b001996cf36e22084e3dc36
Sha1:   5a20254f715aea63e3af30da9e5968660cdb5b8e
Sha256: f1f91761b558400b145c7672943ae3e766e3491b5015e6a120bc260528e6dba7
                                        
                                            GET /wp-content/uploads/2022/11/The_Visitor3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 21:22:37 GMT
content-length: 5802
last-modified: Tue, 15 Nov 2022 19:06:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "6373e327-16aa"
expires: Mon, 05 Dec 2022 21:22:37 GMT
age: 431823
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5802
Md5:    1eb7a81e9491bd7780833a3d0672ee8f
Sha1:   06779becf1b6233fb09f6d902396c10778ebea65
Sha256: 25fa513dedd0a8240aa0f5964ea539e220b32b4ba44fded90a254e53f42c097b
                                        
                                            GET /wp-content/uploads/2022/10/The_Woman_King3.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 01:47:22 GMT
content-length: 5570
last-modified: Fri, 07 Oct 2022 22:06:53 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6340a2fd-15c2"
expires: Mon, 05 Dec 2022 20:46:12 GMT
age: 329538
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 54 x 83\012- data
Size:   5570
Md5:    6b21b5a7c2f695941e5081b6c5ea31ce
Sha1:   8b8012f9fd20d9f94cb1dd7350b6b4c42a0282bd
Sha256: c762380096001a240b1bf07e458d3b6bb814e5c4a2447c866bd293a7fcf7a9b7
                                        
                                            GET /wp-content/uploads/2022/11/Black_Adam4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 05:27:01 GMT
content-length: 32715
last-modified: Wed, 16 Nov 2022 04:54:50 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "63746d1a-7fcb"
expires: Thu, 01 Dec 2022 09:12:27 GMT
age: 316359
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   32715
Md5:    eeb25bdd8c538037b393efbb6cbf9ec7
Sha1:   0f2013a4a0f5ff16b71dd49191727b6ec79f9204
Sha256: 487eb2a86630f85ced8acde914c76eae0cfce18dd8f8e8dcd6b4f832bfa09590
                                        
                                            GET /wp-content/uploads/2022/11/Bodies_Bodies_Bodies4.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 08:05:23 GMT
content-length: 35488
last-modified: Wed, 02 Nov 2022 05:15:08 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "6361fcdc-8aa0"
expires: Thu, 01 Dec 2022 15:09:08 GMT
age: 220457
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 215 x 269\012- data
Size:   35488
Md5:    609af1aca0b86df61decea3888097441
Sha1:   8d04bc59beaa1da770ebb5002cfc05d58f5553f2
Sha256: aecdf6e59f70749c2be0a890a73f40750a149a20034de1ef850837b51d1453d6
                                        
                                            GET /wp-content/themes/charcoal2/images/li2.gif HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/gif
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 19:16:38 GMT
content-length: 2043
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-7fb"
expires: Wed, 07 Dec 2022 19:00:31 GMT
age: 266582
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 210 x 25\012- data
Size:   2043
Md5:    dd9cca90bdfe16a9a85b6e46f57bb97f
Sha1:   c1a797f881f789f111df30455369e05439856211
Sha256: 54f6772dc8d1466e269ea4da0435d09751b740226bcb57e336abf066459e484a
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1106
Cache-Control: public, max-age=1800
Date: Sat, 03 Dec 2022 21:19:40 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with very long lines (33915)
Size:   29221
Md5:    7899fffaf0046efb7f9be2495d9dc928
Sha1:   d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
Sha256: 07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 9j0uopBMzFl2eqAUxQYKBA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         44.238.202.79
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3BuJ12gemdVgmVJ0DcqH4+wlHGw=

                                        
                                            GET /wp-content/uploads/2014/04/heada.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 13:50:50 GMT
content-length: 89782
last-modified: Wed, 20 May 2020 00:18:30 GMT
cache-control: max-age=604800
accept-ranges: bytes
etag: "5ec47756-15eb6"
expires: Tue, 06 Dec 2022 13:50:50 GMT
age: 372531
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 16:36:42], progressive, precision 8, 1200x116, components 3\012- data
Size:   89782
Md5:    50f9a92c99bb8560a4108909327f1314
Sha1:   3b964b1dd35ae34c5c0bbc931a3e650e47546061
Sha256: da7095ec43fb09c4c5fde2546ac40a15fca9ad785a44a5bd00cf1963128243ac
                                        
                                            GET /wp-content/uploads/2014/04/headb.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Nov 2022 16:25:27 GMT
content-length: 45487
last-modified: Wed, 20 May 2020 00:18:31 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,MISS
etag: "5ec47757-b1af"
expires: Sun, 04 Dec 2022 16:25:27 GMT
age: 536054
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 16:48:18], progressive, precision 8, 1200x65, components 3\012- data
Size:   45487
Md5:    a464117e8d7a6e49becab8e33d3ef73c
Sha1:   39d4580fb9e397dc824075dc0100a5973ca4e2a7
Sha256: b158e64c80b09edb16ca4ad107d62dbf4aa81e5bb684bd81dbdfb38447b2f241
                                        
                                            GET /gcgLKdwzr0hh/33424 HTTP/1.1 
Host: murkilyergots.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.91.159.134
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 03 Dec 2022 21:19:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://gnula.nu
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
                                        
                                            GET /wp-content/themes/charcoal2/images/title2.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sun, 27 Nov 2022 09:31:52 GMT
content-length: 12871
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-3247"
expires: Sat, 03 Dec 2022 12:06:32 GMT
age: 560868
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=80, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=733], progressive, precision 8, 733x80, components 3\012- data
Size:   12871
Md5:    7e3bba5148383e024e7c60df9f45f50e
Sha1:   fdda5141ebad4e113e7474978a8b7f243b399488
Sha256: 69e8a33827a670237dddcabf6be05afa3de58f0bc4be2c19baa6840a033ef4fc
                                        
                                            GET /wp-content/themes/charcoal2/images/cover.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 17:20:47 GMT
content-length: 7863
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-1eb7"
expires: Sat, 03 Dec 2022 12:05:12 GMT
age: 359933
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 18:36:21], progressive, precision 8, 733x1, components 3\012- data
Size:   7863
Md5:    c112f3224ed14bb42edf832fb372b7ed
Sha1:   b8fa50269e145cdff0e133e9200240881409affa
Sha256: 3ef5c51a9b84f59b50fa0b4bcf5f007a7f431d0b1ad305d1488a108341d3ea97
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "74F68F9BE470497E2D7562847F771F827459B39BF2AFDCE3DC846004D968A02D"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5634
Expires: Sat, 03 Dec 2022 22:53:34 GMT
Date: Sat, 03 Dec 2022 21:19:40 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "998AB7F762E84B83B3630B40ADF19704A73C39FF10D06B3EB8CD8595DAD2773A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10473
Expires: Sun, 04 Dec 2022 00:14:13 GMT
Date: Sat, 03 Dec 2022 21:19:40 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/uploads/2014/11/netulogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 20:52:19 GMT
content-length: 2533
last-modified: Wed, 20 May 2020 00:18:34 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4775a-9e5"
expires: Fri, 09 Dec 2022 18:56:08 GMT
age: 1641
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 120x25, components 3\012- data
Size:   2533
Md5:    cba3b20095c24b7e63db7d30bd0363ea
Sha1:   0139eb1665459191ff8105af0e813d0c1c138098
Sha256: 62c10396f5fd6183a81b17b06966f56901afad810556da133074567af9a5eee1
                                        
                                            GET /wp-content/uploads/2016/04/flashx_logo_icono.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 17:14:22 GMT
content-length: 11168
last-modified: Wed, 20 May 2020 00:18:39 GMT
etag: "5ec4775f-2ba0"
expires: Fri, 09 Dec 2022 17:14:22 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 101118
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPCM), density 28x28, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS4 Windows, datetime=2016:04:11 17:09:47], baseline, precision 8, 120x25, components 3\012- data
Size:   11168
Md5:    c073fc25099ef5094828a0c34ad66c3b
Sha1:   e1d0ab286599c17f2c158177dbe63e5ddcaf3639
Sha256: c257d3c45420e52298688db59195c1bfc456dfd219f66b7fc99563331a419e94
                                        
                                            GET /wp-content/uploads/2014/03/streamlogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 15:14:25 GMT
content-length: 10955
last-modified: Wed, 20 May 2020 00:18:35 GMT
etag: "5ec4775b-2acb"
expires: Sat, 10 Dec 2022 15:14:25 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 21915
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:29 20:20:02], progressive, precision 8, 120x25, components 3\012- data
Size:   10955
Md5:    aa76e27b50dc1f64b3b86965865a938f
Sha1:   909bb632995d0ed0e9488bddb58db08997855fcb
Sha256: 6a9785c81021e3f738d420bb27c23228c0eb0922ac7f047d4fe5c3ffd6afcc99
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EEAAFF8B246DF4CE669E53D866EDAF351B1C5348CD713CEF632D2039605CD867"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2964
Expires: Sat, 03 Dec 2022 22:09:04 GMT
Date: Sat, 03 Dec 2022 21:19:40 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/uploads/2014/08/higefileslogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 11:20:43 GMT
content-length: 13174
last-modified: Wed, 20 May 2020 00:18:36 GMT
etag: "5ec4775c-3376"
expires: Fri, 09 Dec 2022 11:20:43 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 122338
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS5 Windows, datetime=2014:08:07 12:16:59], progressive, precision 8, 120x25, components 3\012- data
Size:   13174
Md5:    a8e4a7a20dec940ebe12382c3270f489
Sha1:   64146cada702a8ec9110ae97c4c0a240640b8f85
Sha256: 9da91d97c88a63a7291f70107be399aa69971f976c9fed7d5f5293844ee7cb41
                                        
                                            GET /wp-content/uploads/2014/11/uptoboxlogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 02:30:08 GMT
content-length: 14655
last-modified: Wed, 20 May 2020 00:18:34 GMT
etag: "5ec4775a-393f"
expires: Wed, 07 Dec 2022 02:30:08 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 326972
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS5 Windows, datetime=2014:11:09 16:09:18], baseline, precision 8, 120x25, components 3\012- data
Size:   14655
Md5:    b1293684b940b0a121cd5fef371bf248
Sha1:   ef2f3785dfd4a95159c53981bf16e9dc620068e4
Sha256: fef8a80115e0dc42784d442204536dc7085770193c4549ca7cb070ca69c4cb04
                                        
                                            GET /wp-content/uploads/2014/08/powvideologo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Mon, 28 Nov 2022 19:03:04 GMT
content-length: 12692
last-modified: Wed, 20 May 2020 00:18:36 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4775c-3194"
expires: Thu, 01 Dec 2022 12:04:13 GMT
age: 440196
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2014:08:07 12:24:51], progressive, precision 8, 120x25, components 3\012- data
Size:   12692
Md5:    b5a70ab6f979625d56428f38845b0585
Sha1:   722a725e9079675de26f4819a2ea355af5bcb365
Sha256: a70828377c541df6d2f61b16bb705e200795a643816ee9eb5218d3c3cc4c10e3
                                        
                                            GET /wp-content/uploads/2016/01/ma_ma_poster_espa%C3%B1ol.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 21:19:40 GMT
content-length: 173974
last-modified: Wed, 20 May 2020 00:18:45 GMT
etag: "5ec47765-2a796"
expires: Sat, 10 Dec 2022 21:19:40 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 0
ddg-cache-status: MISS,MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2016:01:15 14:10:50], baseline, precision 8, 394x512, components 3\012- data
Size:   173974
Md5:    79febb81f8c99a30bab93d25291fc741
Sha1:   932aca4c12db23f04d3fbf24a961e2ca21733ac0
Sha256: 9dcd1143879aa34b8f1435bddea1ccbe7c19c6c8650f60fabba6f3b78048af5a
                                        
                                            GET /wp-content/uploads/2014/03/logouplonee.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 13:49:30 GMT
content-length: 11951
last-modified: Wed, 20 May 2020 00:18:35 GMT
etag: "5ec4775b-2eaf"
expires: Wed, 07 Dec 2022 13:49:30 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 286210
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:26 10:57:01], progressive, precision 8, 120x25, components 3\012- data
Size:   11951
Md5:    986778606a0fe42fb4c7634297518f12
Sha1:   b1d1b78683e7a6ba7197af4b8615239dd38247d5
Sha256: 3a364228f9e7852095a9f96fe04532684a1fc3146d9481e1c2a33e20449708d7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EEAAFF8B246DF4CE669E53D866EDAF351B1C5348CD713CEF632D2039605CD867"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2964
Expires: Sat, 03 Dec 2022 22:09:04 GMT
Date: Sat, 03 Dec 2022 21:19:40 GMT
Connection: keep-alive

                                        
                                            GET /wp-content/uploads/2014/03/teelogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 13:31:14 GMT
content-length: 1869
last-modified: Wed, 20 May 2020 00:18:35 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec4775b-74d"
expires: Thu, 01 Dec 2022 14:54:30 GMT
age: 373706
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa], baseline, precision 8, 120x25, components 3\012- data
Size:   1869
Md5:    79aa34a85d291706678d412586288e69
Sha1:   a49e3d3f00afa76d8752f3ac354e5923516b87a9
Sha256: f2542be2bbff5095b6a0458ffd7b9f81dbe35cbe4663d558af58b6fdd75311c8
                                        
                                            GET /wp-content/themes/charcoal2/images/meta2.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Tue, 29 Nov 2022 13:30:21 GMT
content-length: 10093
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-276d"
expires: Mon, 05 Dec 2022 15:12:15 GMT
age: 373759
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=12, height=36, bps=0, PhotometricIntepretation=RGB, orientation=upper-left, width=733], progressive, precision 8, 733x36, components 3\012- data
Size:   10093
Md5:    d4ff51ac76dfed6d096597e3df76dd53
Sha1:   456558d04e04ea784a950ea752d35411e6b98bde
Sha256: 29c63951fe970b00a8d5da4c56da57e1b225abf9f5fc4e62fae7e6d40659a5c8
                                        
                                            GET /wp-content/uploads/2015/03/openloadlogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 11:16:11 GMT
content-length: 10776
last-modified: Wed, 20 May 2020 00:19:18 GMT
etag: "5ec47786-2a18"
expires: Thu, 08 Dec 2022 11:16:11 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 209010
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2015:03:29 15:15:09], baseline, precision 8, 120x25, components 3\012- data
Size:   10776
Md5:    15d4e6f382ee94b9d9230920c881b6e7
Sha1:   fb5a6daf812dd9c971bee24004aba6e76777d2cb
Sha256: 9178ee0072e9a0f0c2c3f4c74dd9af0a6a9b9fd3c128b3e63d2eb1a457ccd1ce
                                        
                                            GET /wp-content/uploads/2014/08/almmylogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 19:24:15 GMT
content-length: 12268
last-modified: Wed, 20 May 2020 00:18:36 GMT
etag: "5ec4775c-2fec"
expires: Fri, 09 Dec 2022 19:24:15 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 93325
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:25 20:57:39], progressive, precision 8, 120x25, components 3\012- data
Size:   12268
Md5:    c2f199bfdb5750b5da2d48234eca492e
Sha1:   3abb99bebf52cc711e5dcb387e1151eba29844bf
Sha256: 787f40391d749e3d4abf707476d833ce3703d2fbef0f4cebacb51a43d4b667a8
                                        
                                            GET /wp-content/themes/charcoal2/images/footer.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/wp-content/themes/charcoal2/style.css
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Wed, 30 Nov 2022 17:25:46 GMT
content-length: 11906
last-modified: Tue, 19 May 2020 23:50:09 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec470b1-2e82"
expires: Wed, 07 Dec 2022 00:26:43 GMT
age: 273234
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2012:10:22 19:48:35], progressive, precision 8, 1200x72, components 3\012- data
Size:   11906
Md5:    2c6aad12cf0fdab93b1e0a1829e16e32
Sha1:   0920b41cd4d2f0f2b8fb42d992dfdddbc51ea67f
Sha256: ab6ff958174c2bbf87bebd765f638b90904f63f31c85ce3e0159b67ca489d3b5
                                        
                                            GET /flRBO2UBwE6d/27199 HTTP/1.1 
Host: hangersbozal.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.109.248.182
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Sat, 03 Dec 2022 21:19:40 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://gnula.nu
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Sun, 04-Dec-2022 21:19:40 GMT; Max-Age=86400; path=/; secure; SameSite=None GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Sun, 04-Dec-2022 21:19:40 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   26
Md5:    4e5d65669f8dcd928dad06adf883f025
Sha1:   d771713d758c3348dd7e5b38bb40c7935399ae46
Sha256: 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
                                        
                                            GET /wp-content/uploads/2015/07/streaminlogo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Fri, 02 Dec 2022 19:24:16 GMT
content-length: 10761
last-modified: Wed, 20 May 2020 00:19:20 GMT
etag: "5ec47788-2a09"
expires: Fri, 09 Dec 2022 19:24:16 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 93325
ddg-cache-status: HIT,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=3, software=Adobe Photoshop CS5 Windows, datetime=2015:07:10 13:13:03], baseline, precision 8, 120x25, components 3\012- data
Size:   10761
Md5:    1a984b3a5a5f82ab7521e636e4eb9c2f
Sha1:   d854c8118c4da80e5c1aed184d733d8d85745626
Sha256: 3f22eb1fa2f3c037be6d2b473c462cb9870b67dffc0b5e9d1b7003b70121c9db
                                        
                                            GET /wp-content/uploads/2017/01/uploading_logo.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 02:26:10 GMT
content-length: 12327
last-modified: Wed, 20 May 2020 00:18:26 GMT
etag: "5ec47752-3027"
expires: Sat, 10 Dec 2022 02:26:10 GMT
cache-control: max-age=604800
accept-ranges: bytes
age: 68010
ddg-cache-status: MISS,HIT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS4 Windows, datetime=2017:01:29 12:39:26], baseline, precision 8, 120x25, components 3\012- data
Size:   12327
Md5:    55cfa643550bc78b6c9228e8d0245e60
Sha1:   66eab303d1724435cefb3eaadf92cf25ed548e49
Sha256: 92ec3c61164e8770692e92ad9b018ce454de0b15b0905da856fab2698cbaf394
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6153
Cache-Control: max-age=170304
Date: Sat, 03 Dec 2022 21:19:40 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:38:04 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 07 Dec 2022 20:17:39 GMT
ETag: "cbcd6f16f4d3d785ea3d0a329133eaf9aee18f48"
Last-Modified: Sat, 03 Dec 2022 20:17:40 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 682
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 773f57853b90b524-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    b787b831f02ec8a24b1dd3f2f9e04c3c
Sha1:   cbcd6f16f4d3d785ea3d0a329133eaf9aee18f48
Sha256: 9d98404fabb2472e0ec8eb3e4f9dfe6ac531cb4a6682ce85f607f4858a542c16
                                        
                                            GET /tag.min.js HTTP/1.1 
Host: grunoaph.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         139.45.197.238
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
                                        
server: nginx
date: Sat, 03 Dec 2022 21:19:40 GMT
content-length: 23393
content-encoding: br
x-trace-id: 8e6d6ea57a6ed521baafdb8ce3c1225d
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0
accept-ranges: bytes
last-modified: Fri, 02 Dec 2022 10:19:16 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 11 Jan 1994 10:00:00 GMT
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (65536), with no line terminators
Size:   23393
Md5:    391a9fe961c74a035ed5ac424bfc5fb2
Sha1:   65bf15f254531c80c76212bb6d3c5f33d6a501ee
Sha256: 73f16b3e042c5e5f34570279688fb08577d95105d0707d1a21b11c0c1524dcfb

Alerts:
  Blocklists:
    - quad9: Sinkholed
                                        
                                            GET /plugins/like.php?href=https%3A%2F%2Fgnula.nu%2Fdrama%2Fver-ma-ma-2015-online%2F&layout=button_count&show_faces=false&width=100&action=like&colorscheme=light HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         157.240.240.35
HTTP/2 200 OK
content-type: text/html;charset=utf-8
                                        
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: JvAUUGkqJ6duVKqGBi4aYMSz1FSqc89/krUnHUmlcO0HzZ/YYQuAN9FIzulobQsMFEWyN50lwiyQo/MBMcCvpg==
content-length: 0
date: Sat, 03 Dec 2022 21:19:40 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            HEAD /drama/ver-ma-ma-2015-online/ HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/drama/ver-ma-ma-2015-online/
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Sat, 03 Dec 2022 21:19:40 GMT
link: <https://gnula.nu/wp-json/>; rel="https://api.w.org/", <https://gnula.nu/wp-json/wp/v2/posts/157200>; rel="alternate"; type="application/json", <https://gnula.nu/?p=157200>; rel=shortlink
content-encoding: gzip
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 6153
Cache-Control: max-age=170304
Date: Sat, 03 Dec 2022 21:19:40 GMT
Etag: "638b9ba3-1d7"
Expires: Mon, 05 Dec 2022 20:38:04 GMT
Last-Modified: Sat, 03 Dec 2022 18:55:31 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=https%3A%2F%2Fgnula.nu HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 229304
Cache-Control: public, max-age=315360000
Date: Sat, 03 Dec 2022 21:19:40 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size:   105445
Md5:    2b4968b185495eddda0d85b2351ebb71
Sha1:   c665785ca0f4039f8c71d94631cd50a879d866b5
Sha256: eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.239.34.178
HTTP/2 200 OK
content-type: text/javascript
                                        
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Sat, 03 Dec 2022 20:46:55 GMT
expires: Sat, 03 Dec 2022 22:46:55 GMT
cache-control: public, max-age=7200
age: 1965
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1325)
Size:   20039
Md5:    47e6f374ca946fddd5b59871b325736c
Sha1:   baa9282efc8785e84d247c3bff518eaa45f101c4
Sha256: 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2015/06/natsu_incono_gnula.jpg HTTP/1.1 
Host: gnula.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Cookie: __ddg1_=WBPTtIqE65GxGDTTpjVo
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         185.178.208.130
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: ddos-guard
content-security-policy: upgrade-insecure-requests;
date: Thu, 01 Dec 2022 16:30:03 GMT
content-length: 2761
last-modified: Wed, 20 May 2020 00:19:16 GMT
cache-control: max-age=604800
accept-ranges: bytes
ddg-cache-status: HIT,HIT
etag: "5ec47784-ac9"
expires: Thu, 08 Dec 2022 15:46:02 GMT
age: 190177
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 59x45, components 3\012- data
Size:   2761
Md5:    00a0e9802138dd13d3433dc8a8892dc5
Sha1:   27f4b2b80e9fc682d63953d08ef14457dd8ae6ac
Sha256: ad0ebb72ed8394e48ffaf5ef59244ccfe0f5af7a43df06fd7061b068f4a91df2
                                        
                                            GET /cse/static/images/1x/es/branding.png HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://gnula.nu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.228
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/prose-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="prose-team"
report-to: {"group":"prose-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/prose-team"}]}
content-length: 1404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 16:51:26 GMT
expires: Sat, 02 Dec 2023 16:51:26 GMT
cache-control: public, max-age=31536000
age: 102494
last-modified: Mon, 25 May 2020 08:30:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 132 x 15, 8-bit/color RGBA, non-interlaced\012- data
Size:   1404
Md5:    5cde6b1e2022536bb6bad42206b592e6
Sha1:   d5f8b090cdf01d307543e4adc439c5b450725ef6
Sha256: 6034e5ee0510f90b538cb59205702151396dda15fc431432b7fc95e4ecde8886
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 5989
Cache-Control: max-age=131948
Date: Sat, 03 Dec 2022 21:19:40 GMT
Etag: "638b0674-117"
Expires: Mon, 05 Dec 2022 09:58:48 GMT
Last-Modified: Sat, 03 Dec 2022 08:19:00 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /res/js/lib/require-2.1.11_1ae533d5.js HTTP/1.1 
Host: ok.ru
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://ok.ru/videoembed/39334316660
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         217.20.147.1
HTTP/2 200 OK
content-type: application/javascript
                                        
server: apache
date: Sat, 03 Dec 2022 21:19:40 GMT
content-length: 5789
last-modified: Wed, 30 Nov 2022 09:31:00 GMT
vary: Accept-Encoding
content-encoding: br
expires: Sun, 03 Dec 2023 21:19:40 GMT
cache-control: max-age=31536000
timing-allow-origin: *
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (16739)
Size:   5789
Md5:    07e62c9cf1f95e62ea829b62dd9b669b
Sha1:   f3413232a12f65a0cca1fee0694a370dd65e8784
Sha256: 1445394e2f42ae01eaf7724ec39ee5a1ba3fb7bbd14378e7b2389b8730cce93d
                                        
                                            POST / HTTP/1.1 
Host: e1.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 345
ETag: "998AB7F762E84B83B3630B40ADF19704A73C39FF10D06B3EB8CD8595DAD2773A"
Last-Modified: Thu, 01 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10473
Expires: Sun, 04 Dec 2022 00:14:13 GMT
Date: Sat, 03 Dec 2022 21:19:40 GMT
Connection: keep-alive

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sat, 03 Dec 2022 21:19:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accep