finnhood.blogspot.com/2022/01/t11-wella-toner-chart-before-and-after.html
301 Moved Permanently 216 B URL HTTP/1.1 finnhood.blogspot.com/2022/01/t11-wella-toner-chart-before-and-after.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 9469b9b77883dd233436a81ffe70d4c6
73938e5a62fe0d445f9433e066ae177bae07a246
97c272530e2c151dfc20710cbe6d7bb376b0ca439a587d3c2402ad780f21cbe4
GET /2022/01/t11-wella-toner-chart-before-and-after.html HTTP/1.1
Host: finnhood.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://finnhood.blogspot.com/2022/01/t11-wella-toner-chart-before-and-after.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Mon, 28 Nov 2022 09:50:41 GMT
Expires: Mon, 28 Nov 2022 09:50:41 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 216
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 55028e02d617be499f547453dfd58d50
99a19dd3723bc6c613fdf45a013e5cb5b39e447b
8c5c9231bed3272d5d286fc999e920f1befec2568bf6504cbf61ea57ea1c069b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8C5C9231BED3272D5D286FC999E920F1BEFEC2568BF6504CBF61EA57EA1C069B"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9921
Expires: Mon, 28 Nov 2022 12:36:02 GMT
Date: Mon, 28 Nov 2022 09:50:41 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cdbad2434b7d127a4fc769807a9dc3e7
fa98cd9fc2309ab4423f33f683d17bdb17d76713
560cbbb751ab2884024da3b93fba6bc45c6434797dba72a98c05e7fc2bb94bc1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "560CBBB751AB2884024DA3B93FBA6BC45C6434797DBA72A98C05E7FC2BB94BC1"
Last-Modified: Sat, 26 Nov 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9119
Expires: Mon, 28 Nov 2022 12:22:40 GMT
Date: Mon, 28 Nov 2022 09:50:41 GMT
Connection: keep-alive
getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
200 OK 44 kB URL HTTP/2 getpocket.cdn.mozilla.net/v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 99448b8d86f3da756e3dfbde7264ae71
ab724e1eca316a6cf07eeac27d0a3d5df56f30c1
3638ea6541d29efe3079affdec0b9467b2b5c2cd20e844ef36218f037e08320b
GET /v3/firefox/global-recs?version=3&consumer_key=40249-e88c401e1b1f2242d9e441c4&locale_lang=en-US®ion=NO&count=30 HTTP/1.1
Host: getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
vary: Accept-Encoding
content-location: global-recs.php
tcn: choice
x-frame-options: SAMEORIGIN
status: 200 OK
x-source: Pocket
pragma: cache
p3p: policyref="/w3c/p3p.xml", CP="ALL CURa ADMa DEVa OUR IND UNI COM NAV INT STA PRE"
x-cache: Hit from cloudfront
x-amz-cf-pop: SEA73-P2
x-amz-cf-id: sxFNv5SQCr6-Vce1ZSXJOaLgC_YquZBS9WrhsTiJ521lK4oqoEA3dQ==
content-encoding: gzip
via: 1.1 27f6faf9790b5a2877fb528fa31f7922.cloudfront.net (CloudFront), 1.1 google
content-length: 43736
date: Mon, 28 Nov 2022 09:40:16 GMT
age: 670
content-type: application/json
cache-control: s-maxage=900,public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 71f9c681a82440fd55e76c780a20e55d
3147768cfbcdd06e0c6e69684292e68e99917a80
5ea71ce6dd9e927f9bb3f97f59cc1ac7dc25a949024815965b29bc5835614786
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5EA71CE6DD9E927F9BB3F97F59CC1AC7DC25A949024815965B29BC5835614786"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7823
Expires: Mon, 28 Nov 2022 12:01:04 GMT
Date: Mon, 28 Nov 2022 09:50:41 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: eMM4MegFox72mVKiDOs2vgTGxsm/7Gi2QlchMQdZYQY06/i2oEM3mkibkEn7hxXXdN12mbDn2c4=
x-amz-request-id: WTWSCXZMWC80D23T
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 28 Nov 2022 09:42:00 GMT
age: 521
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 636ab52e8412c404c27b203b7dde8958
adcaadc8107cf64e0bf312f21b78cf0db5a8d72a
8551d69b33cdb90d88ac0f282c8c1e3fd7a28f697d326ecf68627a5ac7761060
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 64b2a23eab6e5ae8c010ec7242be930c
0673e4385ba01a5a245711bab96cafc34f765793
64751d193f7af72431e9689581faffcae1a30ff50ea425697b2b80ff61c87909
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3822
Cache-Control: max-age=92654
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:41 GMT
Etag: "63833c71-1d7"
Expires: Tue, 29 Nov 2022 11:34:55 GMT
Last-Modified: Sun, 27 Nov 2022 10:31:13 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 567df7db606cf5d0871aa5bc9311b6da
4263faac7cbab2fcaf6661911dcad5091c06be17
e9650e1fdc46fc8678708ddcc37ab369c7a6d50489a004be896f20c7a3a644b0
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 28 Nov 2022 09:19:32 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1869
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: ETag, Content-Type, Content-Length, Last-Modified, Alert, Backoff, Pragma, Expires, Retry-After, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 28 Nov 2022 09:08:55 GMT
cache-control: public,max-age=3600
age: 2507
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
finnhood.blogspot.com/2022/01/t11-wella-toner-chart-before-and-after.html
200 OK 34 kB URL HTTP/2 finnhood.blogspot.com/2022/01/t11-wella-toner-chart-before-and-after.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6175)
Hash d642d59de43aaa83d5069d5e13daa529
e0200f68bd38674bdbfe8bcffe7d30c354b4b998
95fde2932f1ed60ada01636d8ba7aac2d1a864df4eedb3638c08538daa0e2578
GET /2022/01/t11-wella-toner-chart-before-and-after.html HTTP/1.1
Host: finnhood.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Mon, 28 Nov 2022 09:50:42 GMT
date: Mon, 28 Nov 2022 09:50:42 GMT
cache-control: private, max-age=0
last-modified: Sun, 27 Nov 2022 11:14:35 GMT
etag: W/"d1df8c595040996d8ae94ad2bb1ee13ae3790763f60f22fa974c7f1f5203ce53"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 34520
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 636ab52e8412c404c27b203b7dde8958
adcaadc8107cf64e0bf312f21b78cf0db5a8d72a
8551d69b33cdb90d88ac0f282c8c1e3fd7a28f697d326ecf68627a5ac7761060
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 13c870f9d0256a3e5dd72fc47aea94e9
55b39d22353b9f020626c9ad5067adbb4e0a4761
a7af66142920ccb78d06c97456b0c48fc4596b853bf3f5eef60940857bcd6fd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b4620c230107c4a41a550936ae73d30
41c55d76d7fec5f9e9b6b41c63be76039ab51d7b
84323dcb2bf41d37624d351e7102832e267b2af6772e06575f52012d510ebacb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4579
Cache-Control: max-age=167214
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Etag: "63845cbd-116"
Expires: Wed, 30 Nov 2022 08:17:36 GMT
Last-Modified: Mon, 28 Nov 2022 07:01:17 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:12:52 GMT
expires: Wed, 22 Nov 2023 18:12:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 18:53:15 GMT
content-type: text/css
age: 488270
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 7ab2ef968cb6a3078f4b9cb2dda813d4
e669116047ca058a2c1b2999ff0ea8682719162c
6ddecf0b21c44f3851da8efeb6ecdc6c8e9b83d7681153c31952b4ec8c23c940
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1543
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Last-Modified: Mon, 28 Nov 2022 09:24:59 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
content-type: text/javascript
age: 582519
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.2/jquery.min.js
IP
File type ASCII text, with very long lines (32029)
Hash a5b25f19a6a491f4d4de5a8777b97459
ff8c134995ee13f12875de0daec8fe3139e2269d
85dc8a6ea561bf0b30b582d096cbb36b39f2482f6358d9b18dea1f03d1d1cf64
GET /ajax/libs/jquery/1.12.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 34009
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 17:03:10 GMT
expires: Tue, 21 Nov 2023 17:03:10 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 578852
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:59:43 GMT
expires: Wed, 22 Nov 2023 18:59:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 19:52:12 GMT
content-type: text/javascript
age: 485459
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9f2751b862f1815bef2869dc411f6021
cf001bd30b74c30190683c05ac81c97e5ccd9c3e
464e9f5b8f9e6a87b46b2cde3f4b554ff3641732f1506c2f2a6edf40dd972d6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/i.pinimg.com/originals/e6/8a/bd/e68abda9d5fed0164e3e30bf1abdf327.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/e6/8a/bd/e68abda9d5fed0164e3e30bf1abdf327.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/e6/8a/bd/e68abda9d5fed0164e3e30bf1abdf327.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/e6/8a/bd/e68abda9d5fed0164e3e30bf1abdf327.jpg
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b4620c230107c4a41a550936ae73d30
41c55d76d7fec5f9e9b6b41c63be76039ab51d7b
84323dcb2bf41d37624d351e7102832e267b2af6772e06575f52012d510ebacb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4579
Cache-Control: max-age=167214
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Etag: "63845cbd-116"
Expires: Wed, 30 Nov 2022 08:17:36 GMT
Last-Modified: Mon, 28 Nov 2022 07:01:17 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 278
i0.wp.com/s-media-cache-ak0.pinimg.com/236x/a5/2f/c9/a52fc93b8233d929958074107e1fc8de--wella-color-charm-toner-perfect-blonde.jpg
200 OK 7.1 kB URL HTTP/2 i0.wp.com/s-media-cache-ak0.pinimg.com/236x/a5/2f/c9/a52fc93b8233d929958074107e1fc8de--wella-color-charm-toner-perfect-blonde.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 236x235, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 69dc9b97a48bac2652e4068d467b970d
f4cdb93a41ae93d06b01dff200fe078ed479bdc0
8abf0359dfe8c2afffa5f197e9785198e33cc7affc4e2d7be5fc3122c40b62ac
GET /s-media-cache-ak0.pinimg.com/236x/a5/2f/c9/a52fc93b8233d929958074107e1fc8de--wella-color-charm-toner-perfect-blonde.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: image/webp
content-length: 7140
last-modified: Mon, 28 Nov 2022 09:50:42 GMT
expires: Wed, 27 Nov 2024 21:50:42 GMT
cache-control: public, max-age=63115200
link: <http://s-media-cache-ak0.pinimg.com/236x/a5/2f/c9/a52fc93b8233d929958074107e1fc8de--wella-color-charm-toner-perfect-blonde.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8dbf7a3ecb90929c"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Mon, 28 Nov 2022 09:50:42 GMT
expires: Mon, 28 Nov 2022 09:50:42 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 13c870f9d0256a3e5dd72fc47aea94e9
55b39d22353b9f020626c9ad5067adbb4e0a4761
a7af66142920ccb78d06c97456b0c48fc4596b853bf3f5eef60940857bcd6fd9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dfc6d93c89faf83ac654cd676c02764d
ce10d3ff46b50f22f7f79a7df65b0b7a6ddb741d
83947c7c69062338e3712fe76a493a2798aa2d1f63709eac14ba908d71080dd0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i1.wp.com/i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: text/html
content-length: 138
location: https://i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5011c3ae54f0ee02e53eee57d47da352
ad893bb5928ff835231652809cc9af62d5219f0a
d840efa1d29eff50fc07c0c31315c004f60db98e7da8c8a232e40e3595bba0a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash cd0a5be4865b85e858cfcaafa90f8dca
122569d314b0900b1f5e5f58cdad0d9fc16b7e1b
624aa7cc70d5c36d732f15cdeb8de3854f30240cb770108dd88103f13393428d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/fjallaone/v13/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2
200 OK 17 kB URL HTTP/2 fonts.gstatic.com/s/fjallaone/v13/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 16588, version 1.0\012- data
Hash 6a93e73463e9f1b7c7b41c52c93843c5
48d5ed2bcc9c9c5c4182ae8957e5cef207cdfcbc
54eb546ba2203d87ad9a38ffdb92fdfed9733e08239dbea692a1ca059a287480
GET /s/fjallaone/v13/Yq6R-LCAWCX3-6Ky7FAFrOF6kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://finnhood.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 16588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:30:47 GMT
expires: Fri, 24 Nov 2023 21:30:47 GMT
cache-control: public, max-age=31536000
age: 303595
last-modified: Thu, 21 Apr 2022 16:38:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/archivonarrow/v24/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
200 OK 10 kB URL HTTP/2 fonts.gstatic.com/s/archivonarrow/v24/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10116, version 1.0\012- data
Hash b5dbdda8786a7217df0b90912e2f6991
94bf8611be20feb3c9241806e87511bd73758a2b
0fe6376419d1b2b5b3114da291dbbb4bdf1165bc7a17dcc7b5322befc738e26a
GET /s/archivonarrow/v24/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://finnhood.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 21:57:14 GMT
expires: Thu, 23 Nov 2023 21:57:14 GMT
cache-control: public, max-age=31536000
age: 388408
last-modified: Fri, 24 Jun 2022 19:03:13 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
200 OK 23 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23040, version 1.0\012- data
Hash de69cf9e514df447d1b0bb16f49d2457
2ac78601179c3a63ba3f3f3081556b12ddcaf655
c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49
GET /s/lato/v23/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://finnhood.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:11:39 GMT
expires: Sun, 26 Nov 2023 21:11:39 GMT
cache-control: public, max-age=31536000
age: 131943
last-modified: Tue, 26 Apr 2022 15:56:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
200 OK 24 kB URL HTTP/2 fonts.gstatic.com/s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 23580, version 1.0\012- data
Hash e1b3b5908c9cf23dfb2b9c52b9a023ab
fcd4136085f2a03481d9958cc6793a5ed98e714c
918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537
GET /s/lato/v23/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://finnhood.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 23580
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 17:10:21 GMT
expires: Wed, 22 Nov 2023 17:10:21 GMT
cache-control: public, max-age=31536000
age: 492021
last-modified: Tue, 26 Apr 2022 15:48:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
maxcdn.bootstrapcdn.com/font-awesome/4.6.1/css/font-awesome.min.css
200 OK 7.0 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.6.1/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (28596)
Hash ff88fd9c9a105c33933714455be907e6
eb5d55cc7f1432400797ac94c0f02613b2d8dc3d
2f9acffb26a4bd1f3e975060c470ce3e3063c69f7904b7d3b57d55e2351b006a
GET /font-awesome/4.6.1/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: SE
cdn-edgestorageid: 722, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-03-10 20:26:25
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: 9f906bfe8a0a96b9156c7a4ed4664168
cdn-cache: HIT
cf-cache-status: HIT
age: 18939831
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 7712336b7f010b31-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2i_U4Czfva37gVeK-OFPkd41aBrbayATfH8v4TvCp0kIkTWuYtoDYgp1j14nJ1p2LMEXY9HYElY8ApxeJRXjqvQwbVNbdw_4lizWQzE_eKn30
200 OK 5.0 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha2i_U4Czfva37gVeK-OFPkd41aBrbayATfH8v4TvCp0kIkTWuYtoDYgp1j14nJ1p2LMEXY9HYElY8ApxeJRXjqvQwbVNbdw_4lizWQzE_eKn30
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 120x90, components 3\012- data
Hash 582978ba0c488705ddb8787ddeaaee22
7276890d4fd644a6dc9cc6babeb1bf7ba7ce6692
5ce51beb5530be3bc152b435bdb8468a3f21c958cb18d1b1b9c6c85e52d41e23
GET /blogger_img_proxy/ANbyha2i_U4Czfva37gVeK-OFPkd41aBrbayATfH8v4TvCp0kIkTWuYtoDYgp1j14nJ1p2LMEXY9HYElY8ApxeJRXjqvQwbVNbdw_4lizWQzE_eKn30 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Tue, 29 Nov 2022 09:50:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Mon, 28 Nov 2022 09:50:42 GMT
server: fife
content-length: 4966
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: emaYdtbuZ5HOFExrZY7kYg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: gVquOJVohnS/lh7XYKFOX+BgKFk=
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2734f94ccee461103a4c42296934948d
57af4a7dfbc298f14e47d9cf98c1a33c8f9078ae
e067ad8019cd032e033758f033c9eaa9e8dd7250a79b7c750f24cdc055a3ec87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i0.wp.com/i.ebayimg.com/images/g/eYUAAOSwmQNe96KV/s-l400.jpg
200 OK 18 kB URL HTTP/2 i0.wp.com/i.ebayimg.com/images/g/eYUAAOSwmQNe96KV/s-l400.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x361, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash af099c9049e87a756fe461316f755c99
bd885a6729bc93d0741b84c4e9b776162b5e0b8b
5f79187bc05aa41bc6f4005121a4da99ea0d8dcd67651a0dec6e65b57780399e
GET /i.ebayimg.com/images/g/eYUAAOSwmQNe96KV/s-l400.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: image/webp
content-length: 17576
last-modified: Mon, 28 Nov 2022 09:50:42 GMT
expires: Wed, 27 Nov 2024 21:50:42 GMT
cache-control: public, max-age=63115200
link: <http://i.ebayimg.com/images/g/eYUAAOSwmQNe96KV/s-l400.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "fb105e5f1d4102d7"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Sun, 27 Nov 2022 10:13:37 GMT
expires: Sun, 11 Dec 2022 10:13:37 GMT
cache-control: public, max-age=1209600
age: 85025
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5011c3ae54f0ee02e53eee57d47da352
ad893bb5928ff835231652809cc9af62d5219f0a
d840efa1d29eff50fc07c0c31315c004f60db98e7da8c8a232e40e3595bba0a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg
200 OK 31 kB URL HTTP/2 i.ytimg.com/vi/ienTmcGIMno/hqdefault.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Hash 9fd353af2c698cafa282cfcda9cd93b1
81702c656f9f1dad87709c172876a2cb7dd4db3e
ed656dea544fc3c558987166ca142483c3d5dc2be65d140ddf5132d4655befed
GET /vi/ienTmcGIMno/hqdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finnhood.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 31190
date: Mon, 28 Nov 2022 09:50:42 GMT
expires: Mon, 28 Nov 2022 11:50:42 GMT
cache-control: public, max-age=7200
etag: "1474860485"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fb9963af5b3c525d68d5c87f0da8025b
c8d1f50313dddb0cea04745d762dac01718a026f
231ef2bc126d4f0cf0910147608f65ec32ee15f3cfdb6981f5fae66f33cfc519
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2734f94ccee461103a4c42296934948d
57af4a7dfbc298f14e47d9cf98c1a33c8f9078ae
e067ad8019cd032e033758f033c9eaa9e8dd7250a79b7c750f24cdc055a3ec87
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 03ad9fc0b00b5df3165dc2fb1e3b0a3e
f8243335a8bc24d989bddd346048a055e1d0bdeb
366b28d491f7fd632e31c1ce97f939555f7dcee14bb6875737ed2d3e96fa32ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 279 B IP
Hash 4d2945edc428f947947ba6c2a86ad9c2
3e886c79d9391fe8732fc7d7bc0921e12217bbe4
35bc46d87a29951a7a0c2eaa607b49ed625e1eed6a6d294c4e1ec40cced05a6d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 793
Cache-Control: max-age=157639
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:43 GMT
Etag: "63844621-117"
Expires: Wed, 30 Nov 2022 05:38:02 GMT
Last-Modified: Mon, 28 Nov 2022 05:24:49 GMT
Server: ECS (amb/6B85)
X-Cache: HIT
Content-Length: 279
www.blogger.com/dyn-css/authorization.css?targetBlogID=3079812163846035523&zx=2ebbd66c-b40b-4d52-9a78-8d17c46cb8e6
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3079812163846035523&zx=2ebbd66c-b40b-4d52-9a78-8d17c46cb8e6
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3079812163846035523&zx=2ebbd66c-b40b-4d52-9a78-8d17c46cb8e6 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 28 Nov 2022 09:50:43 GMT
last-modified: Mon, 28 Nov 2022 09:50:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 34e37af4d526255a20a2056cd5f4addf
bcac186d6a49539e69a3f67aa08d0188966f5623
51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 28 Nov 2022 09:50:43 GMT
date: Mon, 28 Nov 2022 09:50:43 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 21:26:04 GMT
expires: Sun, 26 Nov 2023 21:26:04 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 131079
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/cdn2.stylecraze.com/wp-content/uploads/2018/12/Everything-You-Need-To-Know-About-Wella-Color-Charm-Permanant-Liquid-Hair-Toners-624x702.jpg
200 OK 61 kB URL HTTP/2 i0.wp.com/cdn2.stylecraze.com/wp-content/uploads/2018/12/Everything-You-Need-To-Know-About-Wella-Color-Charm-Permanant-Liquid-Hair-Toners-624x702.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 624x702, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f8527211210cb63c3ed0cae1ffdc8893
049c9b4a0e31ee1b6ec24c88d7e89ab3b8774167
14ee46da2d0dbdacb3266a1a601249d89bbbe4cd3ed17a4344c98702428e68f3
GET /cdn2.stylecraze.com/wp-content/uploads/2018/12/Everything-You-Need-To-Know-About-Wella-Color-Charm-Permanant-Liquid-Hair-Toners-624x702.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:43 GMT
content-type: image/webp
content-length: 61142
last-modified: Mon, 28 Nov 2022 09:50:43 GMT
expires: Wed, 27 Nov 2024 21:50:43 GMT
cache-control: public, max-age=63115200
link: <http://cdn2.stylecraze.com/wp-content/uploads/2018/12/Everything-You-Need-To-Know-About-Wella-Color-Charm-Permanant-Liquid-Hair-Toners-624x702.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b63c31c6e91e05a4"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7207a5076b63fb5f39b9436ced9fb18f
cdd84ecfe85882601e81f11783d9f63b30084de3
6d4543402df8135d5860ecd47dd52d96d66d2e1ac6feec11accb5f43f2da7d0d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 28 Nov 2022 09:50:43 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+756; expires=Wed, 27-Nov-2024 09:50:43 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 28 Nov 2022 09:50:43 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2975
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 28 Nov 2022 09:50:43 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+406; expires=Wed, 27-Nov-2024 09:50:43 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 28 Nov 2022 09:50:43 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 4d2945edc428f947947ba6c2a86ad9c2
3e886c79d9391fe8732fc7d7bc0921e12217bbe4
35bc46d87a29951a7a0c2eaa607b49ed625e1eed6a6d294c4e1ec40cced05a6d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 793
Cache-Control: max-age=157639
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:43 GMT
Etag: "63844621-117"
Expires: Wed, 30 Nov 2022 05:38:02 GMT
Last-Modified: Mon, 28 Nov 2022 05:24:49 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 279
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 26 Nov 2022 12:31:58 GMT
expires: Sun, 26 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 163125
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 302667
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i1.wp.com/img.makeupalley.com/4/0/9/5/2443427.JPG
200 OK 105 kB URL HTTP/2 i1.wp.com/img.makeupalley.com/4/0/9/5/2443427.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 720x663, components 3\012- data
Size 105 kB (104908 bytes)
Hash d166af8176aec9a09243ebe389098a38
13712862c098bcd4122fc192309eaf2c201c5fcc
934a1c625f03341285642b627ec0b66e3457ecbf4ed90d9a95a07ff1e2d9af26
GET /img.makeupalley.com/4/0/9/5/2443427.JPG HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:43 GMT
content-type: image/jpeg
content-length: 104908
last-modified: Mon, 28 Nov 2022 09:50:43 GMT
expires: Wed, 27 Nov 2024 21:50:43 GMT
cache-control: public, max-age=63115200
link: <http://img.makeupalley.com/4/0/9/5/2443427.JPG>; rel="canonical"
x-content-type-options: nosniff
etag: "97e56aff0b4757b9"
x-bytes-saved: 11262
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5593
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:50:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5593
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:50:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5593
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:50:44 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aebda342a81ad83f60d2523f54ccda67
e590d9326e4a283e0929a8ffccb13cc4308af0e6
bd123fe3fce93216e2635f9dbc356f081b7599784fb6b67984032f11d82bc7cb
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD123FE3FCE93216E2635F9DBC356F081B7599784FB6B67984032F11D82BC7CB"
Last-Modified: Sat, 26 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5593
Expires: Mon, 28 Nov 2022 11:23:57 GMT
Date: Mon, 28 Nov 2022 09:50:44 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78b1389f425425d0450c94d900404dc4
53b12a8702f7c5b7cc697e2a24da824d9434be65
0c1659ab3afc6e45f9e3acb12f8865bb99e4668f7df4501b1cc740e53f5b62ed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F36d8942f-c540-4112-a5a9-c7ac53a00a23.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6376
x-amzn-requestid: 25b82353-9c15-44c0-ada5-55f4697de935
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_KGeaoAMFb_Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d860-71711cca7c063030292c5e47;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:32 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: odmAWkNyUMevvXStu7zRJyckokhyBjUwu7-JSvj8by-JWJ9eAm9P5Q==
via: 1.1 0aebf3fe433ff96e68d785fad4ea4c0e.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 42538
etag: "53b12a8702f7c5b7cc697e2a24da824d9434be65"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
200 OK 9.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f434933b5bd6377d299ada22d1ae7ef
075531f525e625b117b2497f31139c9824d0e9c5
b587a3249e4f20112088608e3651c2ccbc44225a5c9d88d3bf5884d7f0e9029c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F165667de-df17-4cc6-832c-94f49703bdf2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9430
x-amzn-requestid: 454ca8bd-a256-45f2-8b41-feee86c5af82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR7wyGCIIAMFhgw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d99e-1488f8ce71a91ebc3ad6b7e0;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:41:50 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NMMuQ1NNks65LJK_HDAK69MfCJ3pS0Y6VzBs8_5Oku64v4FSWADCdw==
via: 1.1 8f22423015641505b8c857a37450d6c0.cloudfront.net (CloudFront), 1.1 476c2ba6d9f6cd69dbcedbd65688cbc0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:01:46 GMT
age: 42538
etag: "075531f525e625b117b2497f31139c9824d0e9c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3a1a4e00f1f15827cf651f373863c379
70c2a238f06ca7e56ef80c83738e081bf0de3330
3d936e1f0c96297f121faece12d6f8173e12eed5087165cd4eefc0fab368419f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8f2e6328-f3c1-4a69-b0b6-73920b885144.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8885
x-amzn-requestid: 71b8367f-f79f-42a7-bcb8-c441a154babf
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cGDTEFSeIAMF3rg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637f18e0-631b775d3430a8c30c3b4420;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 07:10:24 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: jsmd6yxjJxLMEgv1jDa87iEoZXL2OuALsmUZ9Nxx1rUN-xOTdtN1-A==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 559326ad73233233a9e52cb9e8601ede.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 10:15:53 GMT
age: 84891
etag: "70c2a238f06ca7e56ef80c83738e081bf0de3330"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f20d5c4b208740dd4c737b9d95c0e1d0
c843c5422499736a83a80c2b07475a8dbbb8860f
f8d048a2c911aaedfa53b7d6e134638e8c36db0700a874fe99e0d8f847970a1b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbfe1c9b5-b323-496c-a65c-09c1511f882f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12555
x-amzn-requestid: 2d9827ba-fc88-4deb-9844-f5b42764b2e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR6_MHPWIAMFQMg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d861-42986aeb284115943c849306;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:36:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: up0DWugUp4S0jAtsA-KBRapBAHtcHCdTwWJock-y22fqyL6_YVFeqg==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:09 GMT
age: 43175
etag: "c843c5422499736a83a80c2b07475a8dbbb8860f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a4e0bb1e2748bdce6bbf685a910f0fc
5b97bfd787afcb912cdbef0f137f78a059082992
a7bc9adeb22cb57675e907bd961a6f554e6b7a46414ed782bcc9b53d68b1c328
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa915ba56-f7bc-48fc-b725-b932389634d5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15639
x-amzn-requestid: 98e846b4-287f-4698-9529-25bcc2727a4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR78dGReoAMFiDw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383d9e9-62c41b2717bd8e6f3b3797da;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:43:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: AhbL-wXc_eYsgxdjf0DIEJD7Z3XfXMjXwDC52Bz_SnvmmWAhl3g99A==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 21:51:38 GMT
age: 43146
etag: "5b97bfd787afcb912cdbef0f137f78a059082992"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg
200 OK 6.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1bb306213437ea24ab879adc9e3b6da4
771d38e18cdfa54052f7cb150b73c03154eb4368
d4cce7533fd59ef11fb8fec4bc114d5be0bacaa9134e3f1536e0d6bac1f58ffb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74165307-11fe-455f-9c90-106d24a6495f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6498
x-amzn-requestid: 2499eb0e-74c9-4c04-ba58-3e65fc452c34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cR8IwHU4oAMFaAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6383da37-12f14e7a30bc1a75499cb272;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 21:44:23 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WaCfMUy6EtOLWvJy1jFbKp9KQzG5v7nq27sIo7d8gFeGesFd4uWdEw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Sun, 27 Nov 2022 22:24:14 GMT
age: 41190
etag: "771d38e18cdfa54052f7cb150b73c03154eb4368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 80423577bb8ca66350f796c228ae9152
39a9a538873e91016bec486f0a39a8f5decf276c
b97b4d704efc28d3c9e1839cc5d08b9663f3f56654d42124e0ec19377a1a9084
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3458
Cache-Control: max-age=136917
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:44 GMT
Etag: "6383eac7-1d7"
Expires: Tue, 29 Nov 2022 23:52:41 GMT
Last-Modified: Sun, 27 Nov 2022 22:55:03 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash 88e404307df39916c9020c63e8723e7e
646f115d789dabdd3dd614c619b5c6105b56e5f9
acf1eca8fe5a6fea6d3f4f59262b2e3ff32a5e0617480bbc820e3a94d1c85f3f
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4408155e32a21c1f5c9a2d8c097a0bd3
etag: "dddefe1f096177e776cdeaa02200b5c9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Mon, 28 Nov 2022 10:03:54 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: iOQEMH3zmRbJAgxj6HI+fg==
x-fb-debug: 4PP4WO69OmQKKVqA9tpW3+ivgoEQBTM7ZtGjCraToRRP9iL3IFMf07cCAKfDvZBswUALuWWPHb7/KsIcrgSOwg==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Mon, 28 Nov 2022 09:50:44 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pop.dojo.cc/5648.js
200 OK 86 kB IP
File type HTML document, ASCII text, with very long lines (6341)
Hash 9c6e5c1ebeb3cd675e970272afde4395
6c0dff411015e717c3c6fc7692f73a46b8ebb057
7dde6b458d687682f7370f6962c17bcf2c41491825ecbe221da21f80c213bf88
GET /5648.js HTTP/1.1
Host: pop.dojo.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finnhood.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:44 GMT
content-type: application/javascript; charset=utf-8
vary: Accept-Encoding
cache-control: no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yjQCHhEwSXFGxbrk6oYBDCIRzvFU%2ByThI%2B6jdaRBzU91nzX%2FLuOxuh8ytSNa5L0aMa3x53JJvZKhMrLuKXKmnjXplHEWix5NpYiuxFfCEauTDOGw7Mb3siW%2BPFrE5A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77123372093cb50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 80423577bb8ca66350f796c228ae9152
39a9a538873e91016bec486f0a39a8f5decf276c
b97b4d704efc28d3c9e1839cc5d08b9663f3f56654d42124e0ec19377a1a9084
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3458
Cache-Control: max-age=136917
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:44 GMT
Etag: "6383eac7-1d7"
Expires: Tue, 29 Nov 2022 23:52:41 GMT
Last-Modified: Sun, 27 Nov 2022 22:55:03 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 273603a3f74a104fb413fa4a4f1b1d11
58ce2d10556c152c4644dbb6e67b231be9850da2
d4a2264b3e486e7bbdd4b654cf521d346e08ebbea0b76ecb844d3003247306f1
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6296
Cache-Control: max-age=150915
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:44 GMT
Etag: "6384165f-1d7"
Expires: Wed, 30 Nov 2022 03:45:59 GMT
Last-Modified: Mon, 28 Nov 2022 02:01:03 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
i0.wp.com/m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png
403 Forbidden 87 kB URL HTTP/2 i0.wp.com/m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png
IP
Hash 85f1d19eef15268792d78664b9dbb481
d686b8e732e9a23b67868f9b14355e4efe46082a
f62699f5c22b4c02e1508daa31e66f2b617bf15e0489c0bdeb59e07c65f09f2f
GET /m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 28 Nov 2022 09:50:44 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 8
X-Firefox-Spdy: h2
i0.wp.com/eforms.com/images/2016/01/texas-eviction-notice-to-quit-form.png?fit=1600%2C2070&ssl=1
200 OK 62 kB URL HTTP/2 i0.wp.com/eforms.com/images/2016/01/texas-eviction-notice-to-quit-form.png?fit=1600%2C2070&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash feff92bf704da0a13e4d18e146cff392
2726323f358a0fcd09ff6ba5568c29dbd2891913
c0820fd4f506fb817b2ed5acd872b1116b499218b94a4bba41f0061a9c4604c0
GET /eforms.com/images/2016/01/texas-eviction-notice-to-quit-form.png?fit=1600%2C2070&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 62018
last-modified: Sat, 26 Nov 2022 17:35:51 GMT
expires: Tue, 26 Nov 2024 05:35:51 GMT
cache-control: public, max-age=63115200
link: <https://eforms.com/images/2016/01/texas-eviction-notice-to-quit-form.png>; rel="canonical"
x-content-type-options: nosniff
etag: "45fb5aed1e05a203"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/originals/b0/c5/4e/b0c54e9160c227fcaa0129407a2dd04b.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/originals/b0/c5/4e/b0c54e9160c227fcaa0129407a2dd04b.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/b0/c5/4e/b0c54e9160c227fcaa0129407a2dd04b.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/b0/c5/4e/b0c54e9160c227fcaa0129407a2dd04b.jpg
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/originals/f3/ec/cf/f3eccf90d84c768dece38d2603690dfa.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/originals/f3/ec/cf/f3eccf90d84c768dece38d2603690dfa.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/f3/ec/cf/f3eccf90d84c768dece38d2603690dfa.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/f3/ec/cf/f3eccf90d84c768dece38d2603690dfa.jpg
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/eforms.com/images/2016/01/Oregon-Eviction-Notice-to-Quit.png?fit=2550%2C3301&ssl=1
200 OK 54 kB URL HTTP/2 i1.wp.com/eforms.com/images/2016/01/Oregon-Eviction-Notice-to-Quit.png?fit=2550%2C3301&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ba6b46b29e75a7a3f883a4b1308b672c
190bce3c6620474df58d05b3d03bc09be1d176b8
d41b152f67241bc4ed762d3f82da11e1d1a25d94ef88150f41da49034e6cdf51
GET /eforms.com/images/2016/01/Oregon-Eviction-Notice-to-Quit.png?fit=2550%2C3301&ssl=1 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 53536
last-modified: Thu, 24 Nov 2022 11:53:25 GMT
expires: Sat, 23 Nov 2024 23:53:25 GMT
cache-control: public, max-age=63115200
link: <https://eforms.com/images/2016/01/Oregon-Eviction-Notice-to-Quit.png>; rel="canonical"
x-content-type-options: nosniff
etag: "d55bfa74af118908"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/eforms.com/images/2016/01/Florida-Eviction-Notice-to-Quit-Form.png?fit=255%2C330&ssl=1
200 OK 15 kB URL HTTP/2 i0.wp.com/eforms.com/images/2016/01/Florida-Eviction-Notice-to-Quit-Form.png?fit=255%2C330&ssl=1
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 78f51a64cd7fd942cd1f3254a8442dd2
0671309cb18f83e3f1f1631b995db4b9f0915c82
c86015fd141a186c83e1a98f92c2f814c385c11b8f94913aee514ae36245519c
GET /eforms.com/images/2016/01/Florida-Eviction-Notice-to-Quit-Form.png?fit=255%2C330&ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 15036
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <https://eforms.com/images/2016/01/Florida-Eviction-Notice-to-Quit-Form.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ae272bdf28a26af1"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/fr.web.img2.acsta.net/videothumbnails/19/04/02/18/00/5463297.jpg
200 OK 53 kB URL HTTP/2 i0.wp.com/fr.web.img2.acsta.net/videothumbnails/19/04/02/18/00/5463297.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 960x540, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 60ac5d295bbf4b44f3ffd874f3338dec
9187107c7dd39942f9e0068fcc0b64d5289a9929
a370001b393ac6615a8307d4ccdfa0fc417a4d6013a1f431c60510e4935a36cb
GET /fr.web.img2.acsta.net/videothumbnails/19/04/02/18/00/5463297.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 53162
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://fr.web.img2.acsta.net/videothumbnails/19/04/02/18/00/5463297.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f96a9ccf0222e984"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/4a/0e/37/4a0e372996ae7e771d13b6b12b89c0ac.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/4a/0e/37/4a0e372996ae7e771d13b6b12b89c0ac.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/4a/0e/37/4a0e372996ae7e771d13b6b12b89c0ac.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/4a/0e/37/4a0e372996ae7e771d13b6b12b89c0ac.jpg
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.filmtv.it/imgbank/SPLASH/R202105/UnTourChezMaFille_06.jpg
200 OK 79 kB URL HTTP/2 i0.wp.com/www.filmtv.it/imgbank/SPLASH/R202105/UnTourChezMaFille_06.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1120x360, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8315a5edee4a6856a49634b5c2568a08
ea2ce7542661ce1dbf028dca202977f07dfbe05d
621d0f756e157dbd012450f123bc3eb2e596d9e0fb438d48761b60197239c26c
GET /www.filmtv.it/imgbank/SPLASH/R202105/UnTourChezMaFille_06.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 79412
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://www.filmtv.it/imgbank/SPLASH/R202105/UnTourChezMaFille_06.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "251ed14a14e3bb2e"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.sortiesdvd.com/affiche/10647.jpg
200 OK 166 kB URL HTTP/2 i0.wp.com/www.sortiesdvd.com/affiche/10647.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x1086, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 166 kB (166468 bytes)
Hash 4080da3a612349d5244c37813f5c086e
d6ec940707d51fa036374713126117119f9fd3b5
ccd8bec9f64b59dc64cfd7dc5f0b14971a78d8116328b4f6a3c66f95e6f8a5d6
GET /www.sortiesdvd.com/affiche/10647.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 166468
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://www.sortiesdvd.com/affiche/10647.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9e91353c0c57b205"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
images.examples.com/wp-content/uploads/2017/05/Resident-30-Day.jpg
200 OK 74 kB URL HTTP/2 images.examples.com/wp-content/uploads/2017/05/Resident-30-Day.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x730, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bf183ed87125edbe637c134775ee55a6
68bc74733d8aacf93dddb9a896c91c1ac3b1e5d4
20522bcd401ac1dc03902bbfa4d0f253c37998a7a566daadc69dfe295896e6c9
GET /wp-content/uploads/2017/05/Resident-30-Day.jpg HTTP/1.1
Host: images.examples.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: image/webp
etag: "Q7JvlIHy/QSp0dkDfCAob02i7zJHBfA3zIMVS2btAJY"
expires: Thu, 06 May 2027 12:55:15 +0000
fastly-io-info: ifsz=76384 idim=600x730 ifmt=jpeg ofsz=74384 odim=600x730 ofmt=webp
fastly-stats: io=1
server: AmazonS3
x-amz-id-2: 9Xtn6HU3okMQmaCFTnnO4sLgVL/C9ABDtInhVUVk/O09B0PwS1ux1sAOCWaBUlS46sMWPjzohPA=
x-amz-request-id: SP7CFEVDJFEVBFT2
x-amz-version-id: ytBrD_7pARgW74U2UpXWaDBeiU9xpVBj
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:45 GMT
age: 939066
x-served-by: cache-ewr18161-EWR, cache-bma1675-BMA
x-cache: HIT, MISS
x-cache-hits: 12, 0
x-timer: S1669629046.683124,VS0,VE89
vary: Accept
content-length: 74384
X-Firefox-Spdy: h2
i1.wp.com/www.allbusinesstemplates.com/thumbs/c91193a7-be42-4eda-9d8e-0bebbb46df27_1.png
200 OK 63 kB URL HTTP/2 i1.wp.com/www.allbusinesstemplates.com/thumbs/c91193a7-be42-4eda-9d8e-0bebbb46df27_1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9988d7facca055e079c9ff5fcd354519
71b694faf2ecb184731d4c0c96eb80b3e11a3503
9c90c9e9a9172bdd456d969afb8c4a4309a5e224b0e312308ae33bc0ad0e4c68
GET /www.allbusinesstemplates.com/thumbs/c91193a7-be42-4eda-9d8e-0bebbb46df27_1.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 62686
last-modified: Thu, 24 Nov 2022 11:53:24 GMT
expires: Sat, 23 Nov 2024 23:53:24 GMT
cache-control: public, max-age=63115200
link: <http://www.allbusinesstemplates.com/thumbs/c91193a7-be42-4eda-9d8e-0bebbb46df27_1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "95111c183de69ed5"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.pdffiller.com/preview/406/981/406981635/large.png
302 Found 138 B URL HTTP/2 www.pdffiller.com/preview/406/981/406981635/large.png
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /preview/406/981/406981635/large.png HTTP/1.1
Host: www.pdffiller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html
content-length: 138
server: nginx
location: https://form-preview-cdn.pdffiller.com/no_prev_large.png
forwarded-request-id: 2e7bb6077aff541b777fe258fddabcfe
cache-control: max-age=86400
expires: Tue, 29 Nov 2022 09:50:45 GMT
date: Mon, 28 Nov 2022 09:50:45 GMT
set-cookie: AWSALBAPP-0=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-1=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-2=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-3=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
ak_bmsc=D94B870C26DB5485B80E3A66D968DCD3~000000000000000000000000000000~YAAQDk8kF9OkxqGEAQAAN2ylvRF4D5MzNyGlERtsKgt6cZKAck2qawBX7ScKryHeM7UBSDHUbrirHnT/NTYQtaVWiG5BW1A6KyJ8gRmimGMvnDIyrpBFBgrOHUrFvlW1ufH5WlLGzQlkDljy8mZkYexfc+7b6cf9sLo20HlkYbV8CofbF4rUal9zVULSKDLWJBPcovFE52tYoCfSai/kbjJ7uHvTD2USlGCC2dhIQrbshxTILs/wd1b2aN5FCOvCMU3mqokaRYix6uJpvdp/E8QQ7IzzD8v5MGze6Dk1dtavCdquTcmNKioN6fMAcAUdfiB2pgfUDXxMMsXa5XzWrIP9UvnjxrmjW76PrrSKdSpg3QbvIFH3H8BvoEujMWLgcT+Xt7xvdah5bZk7; Domain=.pdffiller.com; Path=/; Expires=Mon, 28 Nov 2022 11:50:45 GMT; Max-Age=7200; HttpOnly
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/564x/ae/fc/3e/aefc3ea26baf29e926620b2146d1df38--louisiana-flipping.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/564x/ae/fc/3e/aefc3ea26baf29e926620b2146d1df38--louisiana-flipping.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/564x/ae/fc/3e/aefc3ea26baf29e926620b2146d1df38--louisiana-flipping.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/564x/ae/fc/3e/aefc3ea26baf29e926620b2146d1df38--louisiana-flipping.jpg
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
images.examples.com/wp-content/uploads/2017/05/30-Day-Notice-to-Increase-Rent.jpg
200 OK 71 kB URL HTTP/2 images.examples.com/wp-content/uploads/2017/05/30-Day-Notice-to-Increase-Rent.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Created with GIMP", progressive, precision 8, 600x730, components 3\012- data
Hash 80b12fea3120d0f038cf90af5ecdd4ab
554fdfc78ca1de8f256765e1126e752de8b35359
31d4b59ba3728ceb2c5e3237f71c907486e6e2096313b5f341231f86680ac03a
GET /wp-content/uploads/2017/05/30-Day-Notice-to-Increase-Rent.jpg HTTP/1.1
Host: images.examples.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: image/webp
etag: "0ivadGj6eCHGOEJDcpulhksmtYc9V0ifDj8BAfMiEsw"
expires: Thu, 06 May 2027 13:03:55 +0000
fastly-io-info: ifsz=70737 idim=600x730 ifmt=jpeg ofsz=70737 odim=600x730 ofmt=webp
fastly-io-warning: Failed to shrink image
fastly-stats: io=1
server: AmazonS3
x-amz-id-2: C3NvtKP9ijC8EnhE+qxyNy+Q8azYhwr3UQX6dwq5Laoa92ydqKAKfXCAIwqM6ER72h4OP12GvPQ=
x-amz-request-id: 45SZ8P273J7QQ9SG
x-amz-version-id: S1l_VW1vSuJx4LNMh.oSLIBJfv.m2oXG
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:45 GMT
age: 1289594
x-served-by: cache-ewr18146-EWR, cache-bma1675-BMA
x-cache: HIT, MISS
x-cache-hits: 6, 0
x-timer: S1669629046.746268,VS0,VE97
vary: Accept
content-length: 70737
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/35/78/8a/35788aa8fd90c7c5b6e3130f5cb1ea16.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/35/78/8a/35788aa8fd90c7c5b6e3130f5cb1ea16.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/35/78/8a/35788aa8fd90c7c5b6e3130f5cb1ea16.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/35/78/8a/35788aa8fd90c7c5b6e3130f5cb1ea16.jpg
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.wordtemplatesonline.net/wp-content/uploads/Ten-10-Day-Eviction-Notice-Template-710x856.jpg
200 OK 65 kB URL HTTP/2 i0.wp.com/www.wordtemplatesonline.net/wp-content/uploads/Ten-10-Day-Eviction-Notice-Template-710x856.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 710x856, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9c1bc6a09677b7cce67da356818f9bb8
1df005bb93a5d24b5bc12fb712b45eb217c8f023
9abe11a0ce17b8b83379a0cfd6bf4db34727ba70f5e3a671bef4acd8047f2528
GET /www.wordtemplatesonline.net/wp-content/uploads/Ten-10-Day-Eviction-Notice-Template-710x856.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 65172
last-modified: Thu, 24 Nov 2022 11:53:16 GMT
expires: Sat, 23 Nov 2024 23:53:16 GMT
cache-control: public, max-age=63115200
link: <http://www.wordtemplatesonline.net/wp-content/uploads/Ten-10-Day-Eviction-Notice-Template-710x856.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f0c5bb03cdf91fee"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.ezlandlordforms.com/media/doc_samples/14477@2x.gif
200 OK 280 kB URL HTTP/2 i0.wp.com/www.ezlandlordforms.com/media/doc_samples/14477@2x.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 280 kB (279652 bytes)
Hash a900e467ed194683c0c49b48458ad75d
80b64aee5f1cbaea64dea7785d5877374afc427e
0fbc607ccc781dfdd735054a823be508d7c91124e8a42a90b9113b1372326f04
GET /www.ezlandlordforms.com/media/doc_samples/14477@2x.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 279652
last-modified: Mon, 28 Nov 2022 04:40:20 GMT
expires: Wed, 27 Nov 2024 16:40:20 GMT
cache-control: public, max-age=63115200
link: <http://www.ezlandlordforms.com/media/doc_samples/14477@2x.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "580f0709599105a4"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.coloriageetdessins.com/images/sport/logo-de-foot/l-equipe-de-stade-rennais-23377-660x400.jpg
200 OK 36 kB URL HTTP/2 i0.wp.com/www.coloriageetdessins.com/images/sport/logo-de-foot/l-equipe-de-stade-rennais-23377-660x400.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 560x750, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 41c1dd086365c4a6d5ab377abf8b2e6d
cf6d56eecafafc180c70e479d800a0484c432600
407255f674a2495bd95f100d6745b08ef0a86afd596b8095625a098758c4efd3
GET /www.coloriageetdessins.com/images/sport/logo-de-foot/l-equipe-de-stade-rennais-23377-660x400.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 36522
last-modified: Wed, 23 Nov 2022 13:28:04 GMT
expires: Sat, 23 Nov 2024 01:28:04 GMT
cache-control: public, max-age=63115200
link: <http://www.coloriageetdessins.com/images/sport/logo-de-foot/l-equipe-de-stade-rennais-23377-660x400.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "4417b1a4ffa24f59"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.coloriageetdessins.com/images/sport/logo-de-foot/losc-lille-club-de-foot-22967-660x400.jpg
200 OK 18 kB URL HTTP/2 i0.wp.com/www.coloriageetdessins.com/images/sport/logo-de-foot/losc-lille-club-de-foot-22967-660x400.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 560x750, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash e0f26fea255fb0ff80311c156463ad25
cdf4f079ec4c06006f3d08886b92b9b17c012620
f3a335c5b2893722bd744c13d44319b35e1a0351684e2b9eb19f6f5924ffb40d
GET /www.coloriageetdessins.com/images/sport/logo-de-foot/losc-lille-club-de-foot-22967-660x400.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 17948
last-modified: Sun, 27 Nov 2022 15:20:37 GMT
expires: Wed, 27 Nov 2024 03:20:37 GMT
cache-control: public, max-age=63115200
link: <http://www.coloriageetdessins.com/images/sport/logo-de-foot/losc-lille-club-de-foot-22967-660x400.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "e256582f07484f9e"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/736x/50/27/9a/50279aed995b15579ce62a7a447ea365--phonics-activities-preschool-worksheets.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/736x/50/27/9a/50279aed995b15579ce62a7a447ea365--phonics-activities-preschool-worksheets.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/50/27/9a/50279aed995b15579ce62a7a447ea365--phonics-activities-preschool-worksheets.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/50/27/9a/50279aed995b15579ce62a7a447ea365--phonics-activities-preschool-worksheets.jpg
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i2.wp.com/viralcovert.com/wp-content/uploads/2018/11/california-tenant-30-day-notice-to-vacate-form.jpg
200 OK 40 kB URL HTTP/2 i2.wp.com/viralcovert.com/wp-content/uploads/2018/11/california-tenant-30-day-notice-to-vacate-form.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 627x757, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1c6338f4e409ada023cf8e2cbf344831
4069f77dc3b68f6115667e1b932b4767c0f472ab
954c641f48b2c0d7c27b5db152ea3270361170f59446e88c53398555706d3b70
GET /viralcovert.com/wp-content/uploads/2018/11/california-tenant-30-day-notice-to-vacate-form.jpg HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 40332
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://viralcovert.com/wp-content/uploads/2018/11/california-tenant-30-day-notice-to-vacate-form.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1abfaf9a2963951b"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short1.gif
200 OK 25 kB URL HTTP/2 i0.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short1.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3ef1814f11fe84aafc71639401fd791e
3309cd28f65a127c0e310b196f2ef60b8a6e5d07
ec6e3e42cc72bdb8ba92c0d811f87cb15c7213d267d737d5f0f1fe343738f207
GET /www.kidzone.ws/kindergarten/vowels/vowel-short1.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 25358
last-modified: Wed, 23 Nov 2022 09:51:52 GMT
expires: Fri, 22 Nov 2024 21:51:52 GMT
cache-control: public, max-age=63115200
link: <http://www.kidzone.ws/kindergarten/vowels/vowel-short1.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "f2208eea3e8c5433"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/736x/dd/29/52/dd2952e1a0fd3cc06a1371099281c8ad.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/736x/dd/29/52/dd2952e1a0fd3cc06a1371099281c8ad.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/dd/29/52/dd2952e1a0fd3cc06a1371099281c8ad.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/dd/29/52/dd2952e1a0fd3cc06a1371099281c8ad.jpg
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short3.gif
200 OK 12 kB URL HTTP/2 i0.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short3.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c30d97453f03d91afc40586553fbb095
441003cfc5c6fc19f3ecebfee692bfd7b7d19c64
b270ea44786f137ffaa8174b3c8db75dcb54b8b286e7701e370049e410a73b6a
GET /www.kidzone.ws/kindergarten/vowels/vowel-short3.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 12490
last-modified: Wed, 23 Nov 2022 08:41:00 GMT
expires: Fri, 22 Nov 2024 20:41:00 GMT
cache-control: public, max-age=63115200
link: <http://www.kidzone.ws/kindergarten/vowels/vowel-short3.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "5ad6200711e3c89e"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052434/Live/DocumentImages/40554/df2d8675-11a4-4abd-9265-1b5adcf5d9e5
200 OK 29 kB URL HTTP/2 res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052434/Live/DocumentImages/40554/df2d8675-11a4-4abd-9265-1b5adcf5d9e5
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x906, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 764bb88da4f96be75de684de7656bd83
19f85b97ca2b3e70a3f43333a7d58281d97ff3a6
3f899ba1bc5e0675d03d471ea42b367a386f5ef5a9bf7aee549cde42c6c79666
GET /ezlf/image/upload/f_auto,q_auto,w_700/v1619052434/Live/DocumentImages/40554/df2d8675-11a4-4abd-9265-1b5adcf5d9e5 HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-disposition: inline; filename="df2d8675-11a4-4abd-9265-1b5adcf5d9e5.webp"
content-type: image/webp
etag: "764bb88da4f96be75de684de7656bd83"
last-modified: Mon, 10 May 2021 20:54:52 GMT
date: Mon, 28 Nov 2022 09:50:45 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=165;cpu=0;start=2022-11-28T09:50:45.746Z;desc=miss,rtt;dur=24,cloudinary;dur=71;start=2022-11-28T09:50:45.794Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 29170
X-Firefox-Spdy: h2
i0.wp.com/besthqwallpapers.com/Uploads/31-10-2019/110014/thumb-losc-lille-golden-logo-ligue-1-red-metal-background-football.jpg
200 OK 9.7 kB URL HTTP/2 i0.wp.com/besthqwallpapers.com/Uploads/31-10-2019/110014/thumb-losc-lille-golden-logo-ligue-1-red-metal-background-football.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 400x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 44d2a7e3c5fb266aa6c02c45b2aad6dc
766dad095a142d45066c08babac8d652caa84674
0bb394bfd8eed9759c132575caa637fdd0b28f85282bace683ca4fa6492db5e6
GET /besthqwallpapers.com/Uploads/31-10-2019/110014/thumb-losc-lille-golden-logo-ligue-1-red-metal-background-football.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 9728
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://besthqwallpapers.com/Uploads/31-10-2019/110014/thumb-losc-lille-golden-logo-ligue-1-red-metal-background-football.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "0bf69791190373a7"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/736x/77/94/0e/77940e9bcc8b86cb418c4d825e3e1bea.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/736x/77/94/0e/77940e9bcc8b86cb418c4d825e3e1bea.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/77/94/0e/77940e9bcc8b86cb418c4d825e3e1bea.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/77/94/0e/77940e9bcc8b86cb418c4d825e3e1bea.jpg
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-4031440-1620078481/original-4031440-2.jpg
200 OK 18 kB URL HTTP/2 i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-4031440-1620078481/original-4031440-2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash bdd6647e9892aed838a0e7c8decb58fb
6aa6f7b8eaff1f42660128a11dfea0ee17480f67
6497f29a8734c0761f42811abee72377bfebe4703ac52ec145ebc49f692d4677
GET /ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-4031440-1620078481/original-4031440-2.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 17684
last-modified: Mon, 28 Nov 2022 08:29:20 GMT
expires: Wed, 27 Nov 2024 20:29:20 GMT
cache-control: public, max-age=63115200
link: <http://ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-4031440-1620078481/original-4031440-2.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "228b680df1101bec"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052435/Live/DocumentImages/3738/6c4bfe02-2bfb-474e-8adc-d646c3140ac2
200 OK 40 kB URL HTTP/2 res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052435/Live/DocumentImages/3738/6c4bfe02-2bfb-474e-8adc-d646c3140ac2
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 700x906, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c1eb43c133310314bbc02f053ff79b49
b1080c85afaddfa885445ccc931799a388ec3bd7
39d20e129b795181e5e6c03882ca40d9dd5a1e16b4bf5feabb0c11af5ecfa386
GET /ezlf/image/upload/f_auto,q_auto,w_700/v1619052435/Live/DocumentImages/3738/6c4bfe02-2bfb-474e-8adc-d646c3140ac2 HTTP/1.1
Host: res.cloudinary.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-disposition: inline; filename="6c4bfe02-2bfb-474e-8adc-d646c3140ac2.webp"
content-type: image/webp
etag: "c1eb43c133310314bbc02f053ff79b49"
last-modified: Mon, 10 May 2021 21:36:42 GMT
date: Mon, 28 Nov 2022 09:50:45 GMT
vary: Save-Data
strict-transport-security: max-age=604800
cache-control: private, no-transform, immutable, max-age=2592000
server-timing: fastly;dur=260;cpu=1;start=2022-11-28T09:50:45.680Z;desc=miss,rtt;dur=27,cloudinary;dur=73;start=2022-11-28T09:50:45.728Z
server: Cloudinary
timing-allow-origin: *
access-control-allow-origin: *
accept-ranges: bytes
x-content-type-options: nosniff
access-control-expose-headers: Content-Length,Content-Disposition,ETag,Server-Timing,Vary,X-Content-Type-Options
content-length: 40202
X-Firefox-Spdy: h2
i0.wp.com/englishlinx.com/images/Short-Vowel-Sounds-Worksheet.png
200 OK 177 kB URL HTTP/2 i0.wp.com/englishlinx.com/images/Short-Vowel-Sounds-Worksheet.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 177 kB (176886 bytes)
Hash 7be9c21a1d601fb4cfd488ad305a1f06
3cf8061f1a704f07e1d42ac7df88830b662a48a8
b67f9f0842e5a8a996a223aa0888176389d9f260cea53b3ac736b21fa7e7f707
GET /englishlinx.com/images/Short-Vowel-Sounds-Worksheet.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 176886
last-modified: Tue, 22 Nov 2022 18:34:00 GMT
expires: Fri, 22 Nov 2024 06:34:00 GMT
cache-control: public, max-age=63115200
link: <http://englishlinx.com/images/Short-Vowel-Sounds-Worksheet.png>; rel="canonical"
x-content-type-options: nosniff
etag: "86dd7cbb676a4f4e"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/image.isu.pub/110908141427-3a9ff00567964a009ed020e012c7fa1a/jpg/page_1.jpg
200 OK 31 kB URL HTTP/2 i0.wp.com/image.isu.pub/110908141427-3a9ff00567964a009ed020e012c7fa1a/jpg/page_1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1159x1500, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c8efee71453d7dbc1d56ae3e11e0314d
df3e021a1c81183ee772a10266ef256295ed35b9
33ebc3b0b4763186754e10c833bbe2f14a8a694a0cce7756895f14a8111004ef
GET /image.isu.pub/110908141427-3a9ff00567964a009ed020e012c7fa1a/jpg/page_1.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 31404
last-modified: Thu, 24 Nov 2022 09:08:58 GMT
expires: Sat, 23 Nov 2024 21:08:58 GMT
cache-control: public, max-age=63115200
link: <http://image.isu.pub/110908141427-3a9ff00567964a009ed020e012c7fa1a/jpg/page_1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "849eecafa7201b84"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/736x/a2/35/07/a23507084bcda8563592d2f00118c6cc.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/736x/a2/35/07/a23507084bcda8563592d2f00118c6cc.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/a2/35/07/a23507084bcda8563592d2f00118c6cc.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/a2/35/07/a23507084bcda8563592d2f00118c6cc.jpg
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/s1.static-footeo.com/uploads/us-saint-omer/news/losc-logo__p0nbzt.jpg
200 OK 16 kB URL HTTP/2 i1.wp.com/s1.static-footeo.com/uploads/us-saint-omer/news/losc-logo__p0nbzt.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 640x480, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 273b2056770434acc3368c0b03fca0e4
9c3ffb21742ccab72dba60790fbefa2be377ca65
42b52b5066c573d80cf1e02cdd6b37afcdb3a5a421e712868779138f3ac2d1e4
GET /s1.static-footeo.com/uploads/us-saint-omer/news/losc-logo__p0nbzt.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 15596
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://s1.static-footeo.com/uploads/us-saint-omer/news/losc-logo__p0nbzt.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "8f59118e7a11b319"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.kindergartenworksheets.net/images/worksheets/thanksgiving/what-letters-are-vowels-worksheet-printable.png
200 OK 62 kB URL HTTP/2 i0.wp.com/www.kindergartenworksheets.net/images/worksheets/thanksgiving/what-letters-are-vowels-worksheet-printable.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e63dda8e806ad07dc97b42d5d539ad56
96e419b5762835707e621807ff2e2df758c08a72
85cad246c442bea15b4a36706385a6ffb4dc09724635ea249f297755d52902d9
GET /www.kindergartenworksheets.net/images/worksheets/thanksgiving/what-letters-are-vowels-worksheet-printable.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 61958
last-modified: Thu, 24 Nov 2022 09:08:58 GMT
expires: Sat, 23 Nov 2024 21:08:58 GMT
cache-control: public, max-age=63115200
link: <http://www.kindergartenworksheets.net/images/worksheets/thanksgiving/what-letters-are-vowels-worksheet-printable.png>; rel="canonical"
x-content-type-options: nosniff
etag: "9f94f9f03e3210e5"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/images.examples.com/wp-content/uploads/2019/07/Sample-30-Day-Notice-to-Vacate.jpg
200 OK 55 kB URL HTTP/2 i0.wp.com/images.examples.com/wp-content/uploads/2019/07/Sample-30-Day-Notice-to-Vacate.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 390x505, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f155bf23c2cd406cd6cdeac5bda4f892
ea309ccd5474dc1bc2cbedf104e748d82f794cdd
1c5b4414b0ef0466da42e0e53bbc5714be9a3126c095734cebeec74cd1478c44
GET /images.examples.com/wp-content/uploads/2019/07/Sample-30-Day-Notice-to-Vacate.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 55180
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://images.examples.com/wp-content/uploads/2019/07/Sample-30-Day-Notice-to-Vacate.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "34892d792ed04442"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 47d85a01da7269ff9671f0f3d8b54733
51d9a2ef6ae30119efc630d28b063b41fb2e8cc6
900941cbade0d4274e46c1686d916e9eb7308613d7a50808950686c5101b2d1a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 09:50:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 21:03:43 GMT
Expires: Mon, 28 Nov 2022 21:03:43 GMT
ETag: "51d9a2ef6ae30119efc630d28b063b41fb2e8cc6"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
i1.wp.com/images.sampleforms.com/wp-content/uploads/2017/01/Printable-30-Day-Eviction-Notice-Form1.jpg
200 OK 51 kB URL HTTP/2 i1.wp.com/images.sampleforms.com/wp-content/uploads/2017/01/Printable-30-Day-Eviction-Notice-Form1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 390x475, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ffd04221faa78a4d520bce71af8d3b4b
997ebcccad973ff9d8321d04bb02af5cf13960d1
c9949f259bcedee03efdacd1a1c919eaa6be024903a30a76003c9417e84a881f
GET /images.sampleforms.com/wp-content/uploads/2017/01/Printable-30-Day-Eviction-Notice-Form1.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 51442
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://images.sampleforms.com/wp-content/uploads/2017/01/Printable-30-Day-Eviction-Notice-Form1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "295e3f85f6bf83fa"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/1b/56/07/1b5607ea4b7e7ddba0d4bcb147b33375.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/1b/56/07/1b5607ea4b7e7ddba0d4bcb147b33375.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/1b/56/07/1b5607ea4b7e7ddba0d4bcb147b33375.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/1b/56/07/1b5607ea4b7e7ddba0d4bcb147b33375.jpg
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.pdffiller.com/preview/100/101/100101326/large.png
200 OK 15 kB URL HTTP/2 i1.wp.com/www.pdffiller.com/preview/100/101/100101326/large.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d199aaffe3005a45be6fac3b0c3788b3
9dcc200abcf7d909338dbb9b184b4ba861a8c67e
503ed5bc5a3fafa9ade61afb1971414b4c1cd93d224cac1b68461f932e276f39
GET /www.pdffiller.com/preview/100/101/100101326/large.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 14884
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/100/101/100101326/large.png>; rel="canonical"
x-content-type-options: nosniff
etag: "d0ae0d6fc13234d2"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.allbusinesstemplates.com/thumbs/1db24507-37f4-4b19-8ec5-094c9bb5be40_1.png
200 OK 20 kB URL HTTP/2 i1.wp.com/www.allbusinesstemplates.com/thumbs/1db24507-37f4-4b19-8ec5-094c9bb5be40_1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 360b43851e72a43e2bbebe8de921b0da
48bc2ca02f714fce37c0c9a049d93371c1e10c7d
f3a7275fb0b7c162da4272ef972f113d1ea92ae4856ed88346f8a27caeef191e
GET /www.allbusinesstemplates.com/thumbs/1db24507-37f4-4b19-8ec5-094c9bb5be40_1.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 19532
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://www.allbusinesstemplates.com/thumbs/1db24507-37f4-4b19-8ec5-094c9bb5be40_1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ba3198471be2706b"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/legaltemplates.net/wp-content/uploads/documents/eviction-notice/california-30-day-eviction-notice-month-to-month.png
200 OK 26 kB URL HTTP/2 i1.wp.com/legaltemplates.net/wp-content/uploads/documents/eviction-notice/california-30-day-eviction-notice-month-to-month.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash eab589ccc348c6fca8f930fb97701d38
20db186760ab8a1ca1f4d90e5d45766a7386a099
51ad91e788e8d47e8e004b6ce92d0dad0d28c522fb7400195bada8c1222a3813
GET /legaltemplates.net/wp-content/uploads/documents/eviction-notice/california-30-day-eviction-notice-month-to-month.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 25632
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://legaltemplates.net/wp-content/uploads/documents/eviction-notice/california-30-day-eviction-notice-month-to-month.png>; rel="canonical"
x-content-type-options: nosniff
etag: "0f58accccd6483d3"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/static.wixstatic.com/media/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png/v1/fill/w_930,h_1196,al_c/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png
200 OK 70 kB URL HTTP/2 i1.wp.com/static.wixstatic.com/media/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png/v1/fill/w_930,h_1196,al_c/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bca6a6bf09dfff1af3afa51def9c69b0
3a4959741c6b66314f9e783ec7ebfec9048a164b
6cab08202b63f0604fda4ea57db34c88d983e83a0e8237656a05d8df1e7eff31
GET /static.wixstatic.com/media/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png/v1/fill/w_930,h_1196,al_c/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: image/webp
content-length: 70448
last-modified: Sun, 20 Nov 2022 09:49:28 GMT
expires: Tue, 19 Nov 2024 21:49:28 GMT
cache-control: public, max-age=63115200
link: <http://static.wixstatic.com/media/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png/v1/fill/w_930,h_1196,al_c/c0a4df_441698abbdf04a64a67f2f73032f4687~mv2.png>; rel="canonical"
x-content-type-options: nosniff
etag: "3627dfd50ae5345d"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/736x/ac/eb/cc/acebccd9cb633cc3ad5989a03a6682e0--free-short-vowel-worksheets-short-vowel-activities.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/736x/ac/eb/cc/acebccd9cb633cc3ad5989a03a6682e0--free-short-vowel-worksheets-short-vowel-activities.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/ac/eb/cc/acebccd9cb633cc3ad5989a03a6682e0--free-short-vowel-worksheets-short-vowel-activities.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/ac/eb/cc/acebccd9cb633cc3ad5989a03a6682e0--free-short-vowel-worksheets-short-vowel-activities.jpg
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/23/fa/1a/23fa1a2d9d559fcd1459c2c11ed800fd.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/23/fa/1a/23fa1a2d9d559fcd1459c2c11ed800fd.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/23/fa/1a/23fa1a2d9d559fcd1459c2c11ed800fd.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/23/fa/1a/23fa1a2d9d559fcd1459c2c11ed800fd.jpg
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/736x/96/a5/7d/96a57d43c19013f30c100597e0ffb22e--phonics-worksheets-phonics-activities.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/736x/96/a5/7d/96a57d43c19013f30c100597e0ffb22e--phonics-worksheets-phonics-activities.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/736x/96/a5/7d/96a57d43c19013f30c100597e0ffb22e--phonics-worksheets-phonics-activities.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/736x/96/a5/7d/96a57d43c19013f30c100597e0ffb22e--phonics-worksheets-phonics-activities.jpg
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/b7/a5/3f/b7a53f3759401c0dfeba3612c605a148.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/b7/a5/3f/b7a53f3759401c0dfeba3612c605a148.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/b7/a5/3f/b7a53f3759401c0dfeba3612c605a148.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/b7/a5/3f/b7a53f3759401c0dfeba3612c605a148.jpg
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash b451933f0d9aade5e0eb48d76aed2452
9a4757d103408717f3881b40f1afa7fc274a39b4
ef06c2921732fe32e0621869f17c475774dd759ea50a50988ec85e83193a33f9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:45 GMT
Server: ECS (amb/6B85)
Content-Length: 279
i0.wp.com/cdn.cocodoc.com/cocodoc-form/png/514883207--Download-Texas-Eviction-Notice-Forms-wikiDownload--x-01.png
200 OK 16 kB URL HTTP/2 i0.wp.com/cdn.cocodoc.com/cocodoc-form/png/514883207--Download-Texas-Eviction-Notice-Forms-wikiDownload--x-01.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 48c48008e830bd1d061501ee8c2194da
79ddf7b81df7b2e5148c9dc98a9452c8e6c5ac3e
d4adebfceba7c4dcd2469a0a4101f89cd48991f10d8f1468a8c52521e38a0897
GET /cdn.cocodoc.com/cocodoc-form/png/514883207--Download-Texas-Eviction-Notice-Forms-wikiDownload--x-01.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 15990
last-modified: Mon, 28 Nov 2022 09:50:45 GMT
expires: Wed, 27 Nov 2024 21:50:45 GMT
cache-control: public, max-age=63115200
link: <http://cdn.cocodoc.com/cocodoc-form/png/514883207--Download-Texas-Eviction-Notice-Forms-wikiDownload--x-01.png>; rel="canonical"
x-content-type-options: nosniff
etag: "a9ab12747cd6558d"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/93/c3/6a/93c36a2df94940ceddae0806ea88fabe.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/93/c3/6a/93c36a2df94940ceddae0806ea88fabe.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/93/c3/6a/93c36a2df94940ceddae0806ea88fabe.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/93/c3/6a/93c36a2df94940ceddae0806ea88fabe.jpg
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
images.sampleforms.com/wp-content/uploads/2019/10/30-Day-Eviction-Notice-Form-Template.jpg
200 OK 34 kB URL HTTP/2 images.sampleforms.com/wp-content/uploads/2019/10/30-Day-Eviction-Notice-Form-Template.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 390x502, components 3\012- data
Hash f2b5bf1db49f81872735a79402f4ecb3
427c4cf67a7cf8c67de891bc64ab9b0b17f65b65
ce77baa2a86fac87ecf836a2d2230dae9b12ef5cb7fa08ea530599ad8044a41e
GET /wp-content/uploads/2019/10/30-Day-Eviction-Notice-Form-Template.jpg HTTP/1.1
Host: images.sampleforms.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=31536000
content-type: image/webp
etag: "YxneA6iBqo+Yv/xaZLT8Nm1jxlIyKNYKhd0JHEV+fmI"
expires: Thu, 04 Oct 2029 01:33:59 +0000
fastly-io-info: ifsz=33834 idim=390x502 ifmt=jpeg ofsz=33834 odim=390x502 ofmt=webp
fastly-io-warning: Failed to shrink image
fastly-stats: io=1
server: AmazonS3
x-amz-id-2: 4LtlNe10y0jfG7iBxQK2E93UC5U9+4sfGGhTqjwy6i+oNBAUGryfRyuUFpojkCQD9ynb/dndri8=
x-amz-request-id: KPVJT2GPVZDWATR2
x-amz-version-id: 7vCPdhHP15QqnfH0.m5SQ.QseXrhSCxa
via: 1.1 varnish, 1.1 varnish
access-control-allow-origin: *
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
age: 1170487
x-served-by: cache-ewr18148-EWR, cache-bma1675-BMA
x-cache: HIT, MISS
x-cache-hits: 11, 0
x-timer: S1669629046.015517,VS0,VE104
vary: Accept
content-length: 33834
X-Firefox-Spdy: h2
i1.wp.com/www.greatschools.org/gk/wp-content/uploads/2015/04/22574.gif
200 OK 10 kB URL HTTP/2 i1.wp.com/www.greatschools.org/gk/wp-content/uploads/2015/04/22574.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 02b4bef619e6045827047a70562ee882
4183d9383143ebf3d63692d3a4a0579b6bdda8ef
c29cd40ee81f703482dc67cdbe4bae9fb0987ac9efbe7fcb1782b7cf8d0e12bc
GET /www.greatschools.org/gk/wp-content/uploads/2015/04/22574.gif HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 10038
last-modified: Thu, 24 Nov 2022 09:08:58 GMT
expires: Sat, 23 Nov 2024 21:08:58 GMT
cache-control: public, max-age=63115200
link: <http://www.greatschools.org/gk/wp-content/uploads/2015/04/22574.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "0e2e2c273dbfd019"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 0f55ab593387ed74c68bf8611fdef6fa
65e45bff44a518a40f5e8bdc06b83fdaa1469037
e945faad14379bc6200bfb5f096c2e8a488d57302da23c747513bf94b5794c30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=130946
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:46 GMT
Etag: "6383e0f8-117"
Expires: Tue, 29 Nov 2022 22:13:12 GMT
Last-Modified: Sun, 27 Nov 2022 22:13:12 GMT
Server: nginx
Content-Length: 279
i0.wp.com/www.k5learning.com/worksheets/kindergarten/kindergarten-vowels.gif
200 OK 16 kB URL HTTP/2 i0.wp.com/www.k5learning.com/worksheets/kindergarten/kindergarten-vowels.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 10b486d0cdef4150356ea2a12391f3c2
76647bcec8fad1d1003be18981cff3d5053d95cb
50bec79115484e2e8c634d08d2d3addd2c54fb8d34a8ab6e3029f14bcbb789f4
GET /www.k5learning.com/worksheets/kindergarten/kindergarten-vowels.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 16476
last-modified: Thu, 24 Nov 2022 05:38:08 GMT
expires: Sat, 23 Nov 2024 17:38:08 GMT
cache-control: public, max-age=63115200
link: <http://www.k5learning.com/worksheets/kindergarten/kindergarten-vowels.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "8e2774c048e91ecf"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052438/Live/DocumentImages/14477/8b5e3efa-08d3-47e7-8be3-9150177d44be
200 OK 96 kB URL HTTP/2 i0.wp.com/res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052438/Live/DocumentImages/14477/8b5e3efa-08d3-47e7-8be3-9150177d44be
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 700x906, components 3\012- data
Hash 02ad38e640ee9cb91ec30a44a41d75f9
c1a6e6f4f6e72f633da0096f5428588a1156bd8b
e4627207aa357c6952db6bfcba0b76cea2daa9a2d7ec484e3e798b1d91268b9e
GET /res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052438/Live/DocumentImages/14477/8b5e3efa-08d3-47e7-8be3-9150177d44be HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/jpeg
content-length: 96488
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://res.cloudinary.com/ezlf/image/upload/f_auto,q_auto,w_700/v1619052438/Live/DocumentImages/14477/8b5e3efa-08d3-47e7-8be3-9150177d44be>; rel="canonical"
x-content-type-options: nosniff
etag: "6b1f195bdfa8c269"
x-bytes-saved: 16187
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/gaelicgameseurope.com/wp-content/uploads/lille-gaa-logo.png
200 OK 34 kB URL HTTP/2 i0.wp.com/gaelicgameseurope.com/wp-content/uploads/lille-gaa-logo.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 2d3668b750198a1679e889279c472ee5
6dd8316d40ce6193e64eb8f6f8b2d22f0bf13111
de78ab0ef478d88f8847fd5f8a8f38f0aecf03d4265130fec90428667e8d8b29
GET /gaelicgameseurope.com/wp-content/uploads/lille-gaa-logo.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 34530
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://gaelicgameseurope.com/wp-content/uploads/lille-gaa-logo.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b67e49cb9dc7cf8a"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/s-media-cache-ak0.pinimg.com/736x/34/93/30/349330fe6da0acae58cf0a58bcd54cc0--phonics-worksheets-kindergarten-worksheets.jpg
200 OK 16 kB URL HTTP/2 i0.wp.com/s-media-cache-ak0.pinimg.com/736x/34/93/30/349330fe6da0acae58cf0a58bcd54cc0--phonics-worksheets-kindergarten-worksheets.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash fa3fb9a8f0a7c5887f353da44da67cb8
43ec23ea24277e7247b30511520de422dbf824f9
b6f26cba805c245f68b102af53666eedcffa83012e4353c2557288a98dba97cf
GET /s-media-cache-ak0.pinimg.com/736x/34/93/30/349330fe6da0acae58cf0a58bcd54cc0--phonics-worksheets-kindergarten-worksheets.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 15882
last-modified: Mon, 28 Nov 2022 08:29:15 GMT
expires: Wed, 27 Nov 2024 20:29:15 GMT
cache-control: public, max-age=63115200
link: <http://s-media-cache-ak0.pinimg.com/736x/34/93/30/349330fe6da0acae58cf0a58bcd54cc0--phonics-worksheets-kindergarten-worksheets.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9e114411eaeaa050"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/i.pinimg.com/originals/41/84/01/418401ceaae3ad4b21397b736ca3a36a.jpg
302 Found 138 B URL HTTP/2 i1.wp.com/i.pinimg.com/originals/41/84/01/418401ceaae3ad4b21397b736ca3a36a.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/41/84/01/418401ceaae3ad4b21397b736ca3a36a.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/41/84/01/418401ceaae3ad4b21397b736ca3a36a.jpg
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.myteachingstation.com/vault/2599/web/articles/Short-Vowel-Review-Write-Missing-Vowel-III.jpg
200 OK 14 kB URL HTTP/2 i0.wp.com/www.myteachingstation.com/vault/2599/web/articles/Short-Vowel-Review-Write-Missing-Vowel-III.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 90361c965630c8c87f458fb56854280f
6863556a071484944bb37410c9f0aa5b26732d85
6b8e9594e6b51eb2a59464ac28cd58de313e799a0b76ace87108c49b0385c3db
GET /www.myteachingstation.com/vault/2599/web/articles/Short-Vowel-Review-Write-Missing-Vowel-III.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 14386
last-modified: Thu, 24 Nov 2022 05:38:08 GMT
expires: Sat, 23 Nov 2024 17:38:08 GMT
cache-control: public, max-age=63115200
link: <http://www.myteachingstation.com/vault/2599/web/articles/Short-Vowel-Review-Write-Missing-Vowel-III.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "cf024bb2244cf95c"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/be/30/45/be30457145cddcbcb6a4b0190b8d49ee.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/be/30/45/be30457145cddcbcb6a4b0190b8d49ee.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/be/30/45/be30457145cddcbcb6a4b0190b8d49ee.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/be/30/45/be30457145cddcbcb6a4b0190b8d49ee.jpg
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 2e585f112c0c56315a34e35d1eb6fc19
cfaf08f1764407792bb4b16ce826f14e2c15fecb
a4e3c33f8158c37131e3570239f28afe1acbf49bb61d020e748168aad4046bc4
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 09:50:45 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 19:57:12 GMT
Expires: Mon, 28 Nov 2022 19:57:12 GMT
ETag: "cfaf08f1764407792bb4b16ce826f14e2c15fecb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
i0.wp.com/i.pinimg.com/originals/af/bf/90/afbf90df5bce32991811da342ad5d2fd.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/af/bf/90/afbf90df5bce32991811da342ad5d2fd.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/af/bf/90/afbf90df5bce32991811da342ad5d2fd.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/af/bf/90/afbf90df5bce32991811da342ad5d2fd.jpg
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.pdffiller.com/preview/100/115/100115259.png
200 OK 5.8 kB URL HTTP/2 www.pdffiller.com/preview/100/115/100115259.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 298 x 386, 4-bit colormap, non-interlaced\012- data
Hash b6c6153dec9b1b28a0c5f9985bf998de
074c76d77815c025f839b6e3abd74b87e037c626
6285c8eaa0ca447d2f593cf1d31dc142447c62fdd71168df1a483559f8e02f29
GET /preview/100/115/100115259.png HTTP/1.1
Host: www.pdffiller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 5807
server: nginx
last-modified: Sun, 03 May 2020 21:50:41 GMT
etag: "b6c6153dec9b1b28a0c5f9985bf998de"
accept-ranges: bytes
x-amz-cf-pop: IAD89-C3
x-amz-cf-id: hsKVcBTlXUMeYVUXC-agiUziKrdZFjtcEF_1k1qLnCmlG_oO5hBMrA==
x-img-cache: MISS
forwarded-request-id: 38ce094d772edb1afce2df8a7b360726
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 09:50:46 GMT
date: Mon, 28 Nov 2022 09:50:46 GMT
set-cookie: AWSALBAPP-0=_remove_; Expires=Mon, 05 Dec 2022 09:50:46 GMT; Path=/
AWSALBAPP-1=_remove_; Expires=Mon, 05 Dec 2022 09:50:46 GMT; Path=/
AWSALBAPP-2=_remove_; Expires=Mon, 05 Dec 2022 09:50:46 GMT; Path=/
AWSALBAPP-3=_remove_; Expires=Mon, 05 Dec 2022 09:50:46 GMT; Path=/
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 0f55ab593387ed74c68bf8611fdef6fa
65e45bff44a518a40f5e8bdc06b83fdaa1469037
e945faad14379bc6200bfb5f096c2e8a488d57302da23c747513bf94b5794c30
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 917
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:46 GMT
Last-Modified: Mon, 28 Nov 2022 09:35:29 GMT
Server: ECS (amb/6B85)
X-Cache: HIT
Content-Length: 279
i0.wp.com/evictionnotice.com/wp-content/uploads/NM-30-Day-Notice.png
200 OK 22 kB URL HTTP/2 i0.wp.com/evictionnotice.com/wp-content/uploads/NM-30-Day-Notice.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 35a017bedf08a7b55ddf7b93dc64b70a
2988346712301d1f57ece69a8c10b9ae146196cf
ce5d51955e3be8ab9495d868c115e6737e4bd002f40dd96559b04ca7bcd48563
GET /evictionnotice.com/wp-content/uploads/NM-30-Day-Notice.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 21940
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://evictionnotice.com/wp-content/uploads/NM-30-Day-Notice.png>; rel="canonical"
x-content-type-options: nosniff
etag: "637148881fdb4fb2"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.kindergartenworksheets.net/images/worksheets/thanksgiving/short-vowel-sounds-worksheet-printable.png
200 OK 31 kB URL HTTP/2 i0.wp.com/www.kindergartenworksheets.net/images/worksheets/thanksgiving/short-vowel-sounds-worksheet-printable.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8ab5c96917d8a0777d1525ab111f0b49
603f09eed7cffc0f908132475778625c8a7bd583
e1d067107037ff6fc1f0cba117d5cf67db48dc93f8e029192821c7290b3223cf
GET /www.kindergartenworksheets.net/images/worksheets/thanksgiving/short-vowel-sounds-worksheet-printable.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 31018
last-modified: Thu, 24 Nov 2022 09:08:58 GMT
expires: Sat, 23 Nov 2024 21:08:58 GMT
cache-control: public, max-age=63115200
link: <http://www.kindergartenworksheets.net/images/worksheets/thanksgiving/short-vowel-sounds-worksheet-printable.png>; rel="canonical"
x-content-type-options: nosniff
etag: "5aa9fff9a0968a1b"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.pdffiller.com/preview/100/108/100108261/large.png
200 OK 285 kB URL HTTP/2 www.pdffiller.com/preview/100/108/100108261/large.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 770 x 1024, 16-bit/color RGB, non-interlaced\012- data
Size 285 kB (284754 bytes)
Hash ad31b055cd7ee474e9762bcea4c4ceed
85fc3a5e042d1881ae13f9e97afc876e0987691a
2e986e777bacbd6f93ae358b90f251c2a00410004c10abe0144a53ca6dfb4232
GET /preview/100/108/100108261/large.png HTTP/1.1
Host: www.pdffiller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 284754
server: nginx
last-modified: Sun, 03 May 2020 19:05:56 GMT
etag: "ad31b055cd7ee474e9762bcea4c4ceed"
accept-ranges: bytes
x-amz-cf-pop: IAD12-P2
x-amz-cf-id: ip7FgG3y2ZsVqlw6k7hTxWv8ITzyDhhwUbC-zBjg-WRFetIyiUH-Pg==
x-img-cache: MISS
forwarded-request-id: d4461397660639f4eb4f93588a59324a
cache-control: public, max-age=604800
expires: Mon, 05 Dec 2022 09:50:45 GMT
date: Mon, 28 Nov 2022 09:50:45 GMT
set-cookie: AWSALBAPP-0=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-1=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-2=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
AWSALBAPP-3=_remove_; Expires=Mon, 05 Dec 2022 09:50:45 GMT; Path=/
X-Firefox-Spdy: h2
i0.wp.com/3.bp.blogspot.com/-FSQ3U_Mcopo/UzGeUGOYNgI/AAAAAAAABBU/DPoIwi9mjhk/s1600/Spring+Medial+Vowel+Sounds.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/3.bp.blogspot.com/-FSQ3U_Mcopo/UzGeUGOYNgI/AAAAAAAABBU/DPoIwi9mjhk/s1600/Spring+Medial+Vowel+Sounds.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /3.bp.blogspot.com/-FSQ3U_Mcopo/UzGeUGOYNgI/AAAAAAAABBU/DPoIwi9mjhk/s1600/Spring+Medial+Vowel+Sounds.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://3.bp.blogspot.com/-FSQ3U_Mcopo/UzGeUGOYNgI/AAAAAAAABBU/DPoIwi9mjhk/s1600/Spring+Medial+Vowel+Sounds.jpg
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.havefunteaching.com/wp-content/uploads/2014/07/short-vowels-worksheet-3.jpg
200 OK 63 kB URL HTTP/2 i1.wp.com/www.havefunteaching.com/wp-content/uploads/2014/07/short-vowels-worksheet-3.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d67acffbd274bbb5a5913b70709435ba
b891e9eb0775f61a2bf7d3c9118f026e7a6dbd02
c3695bad10327b68a3d8e066c4f4705f1bc3afc1e76eedef2b980b6a4122280c
GET /www.havefunteaching.com/wp-content/uploads/2014/07/short-vowels-worksheet-3.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 62696
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.havefunteaching.com/wp-content/uploads/2014/07/short-vowels-worksheet-3.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "3ded8141069c1a9d"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.pdffiller.com/preview/5/716/5716116.png
200 OK 7.3 kB URL HTTP/2 i1.wp.com/www.pdffiller.com/preview/5/716/5716116.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 54c2fef144d368c317f20982d1f66a0b
0fbce9826428ec6a36f09270d933dd63afa03cd7
de568a50d4b3fe7d90fe45ccb62a708b98395e327d8b3807c30779ee65b542bb
GET /www.pdffiller.com/preview/5/716/5716116.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 7340
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/5/716/5716116.png>; rel="canonical"
x-content-type-options: nosniff
etag: "cae9360f95a1363f"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/lofrev.net/wp-content/photos/2014/08/LOSC-Lille-Symbol-e1407825378709.jpg
200 OK 51 kB URL HTTP/2 i1.wp.com/lofrev.net/wp-content/photos/2014/08/LOSC-Lille-Symbol-e1407825378709.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1899x882, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash a0c62f71f62e17262ed236b12ea4bc4b
fe0368405d3aadaf01bad89a66b936d1d77a6a6b
e4d16d0a5edd1704a4d47626b8747f57f56149b3dec8674f58903b741c55f85e
GET /lofrev.net/wp-content/photos/2014/08/LOSC-Lille-Symbol-e1407825378709.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 51046
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://lofrev.net/wp-content/photos/2014/08/LOSC-Lille-Symbol-e1407825378709.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "a06015b8ab8362ae"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/evictionnotice.com/wp-content/uploads/NM-Substantial-Violation.png
200 OK 31 kB URL HTTP/2 i0.wp.com/evictionnotice.com/wp-content/uploads/NM-Substantial-Violation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 521dc6c0b09e9f0ed427ec874b6318b6
5e02ff32d5020d75bc3ba903ff3b3ff8675f6756
1934b3f6da32d71d61138ae96c79f1b2aebadf91ece4a3e43dc768eb10dcbad6
GET /evictionnotice.com/wp-content/uploads/NM-Substantial-Violation.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 31214
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://evictionnotice.com/wp-content/uploads/NM-Substantial-Violation.png>; rel="canonical"
x-content-type-options: nosniff
etag: "124f84e1b2db1a3e"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.pinimg.com/originals/67/3c/ae/673cae3e6bc2667b3448904d3e1b8683.jpg
302 Found 138 B URL HTTP/2 i0.wp.com/i.pinimg.com/originals/67/3c/ae/673cae3e6bc2667b3448904d3e1b8683.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash aff950cab4c0265e21d401db15f1026d
f03e18461817f7a6546c8bf8fa8d686d7e30aca0
753e0dd54f28c4f7009b9c0b18a68aed175416bd8b7d134858264586eaac56f0
GET /i.pinimg.com/originals/67/3c/ae/673cae3e6bc2667b3448904d3e1b8683.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html
content-length: 138
location: https://i.pinimg.com/originals/67/3c/ae/673cae3e6bc2667b3448904d3e1b8683.jpg
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-eviction-notice-14-day-pay-rent-or-quit.png
200 OK 20 kB URL HTTP/2 i0.wp.com/legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-eviction-notice-14-day-pay-rent-or-quit.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4009d5374022bcff0010c1046db163a8
b8a9bc20f3ed7f0b1251802ed048218bb50ec22e
7d282fb7ab3dd7727c9aeb8576df42acaa6a16c0e6ddceabee19a46a261a2f07
GET /legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-eviction-notice-14-day-pay-rent-or-quit.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 19550
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-eviction-notice-14-day-pay-rent-or-quit.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b1552da0764f9ec4"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.thebalancesmb.com/thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png
301 Moved Permanently 0 B URL HTTP/2 www.thebalancesmb.com/thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png HTTP/1.1
Host: www.thebalancesmb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: Varnish
retry-after: 0
location: https://www.thebalancemoney.com/thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
via: 1.1 varnish
x-served-by: cache-bma1628-BMA
x-cache: HIT
x-cache-hits: 0
x-timer: S1669629046.380962,VS0,VE0
nel: {"report_to":"network-errors","max_age":2592000,"success_fraction":0,"failure_fraction":1.0, "include_subdomains": true}
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://r.3gl.net/hawklogserver/556/re.p"}]}
content-length: 0
X-Firefox-Spdy: h2
i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-AEIOU-CVC-Word-Searches-Complete-Set-1535551760/original-592094-2.jpg
200 OK 9.2 kB URL HTTP/2 i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-AEIOU-CVC-Word-Searches-Complete-Set-1535551760/original-592094-2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 225x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8097851dea1775a752ba785cc042bbb6
ae8fe267d10e309aad3a6c98fe917c0dc9864c9c
1b6164da8150fd048c521e70cf777b31b800874881aef211a72fb2bf6eca6c33
GET /ecdn.teacherspayteachers.com/thumbitem/Short-AEIOU-CVC-Word-Searches-Complete-Set-1535551760/original-592094-2.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 9244
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://ecdn.teacherspayteachers.com/thumbitem/Short-AEIOU-CVC-Word-Searches-Complete-Set-1535551760/original-592094-2.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "75d88e150d0eca0b"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.pdffiller.com/preview/100/81/100081789/large.png
200 OK 31 kB URL HTTP/2 i0.wp.com/www.pdffiller.com/preview/100/81/100081789/large.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 168090fae4407192aaeab34a5dd9ee72
a8113be5e8c640e81edc66bbc551717b8754758c
e379207c6953dbf1079bfcf6abe25f265c9c9d4eafabef1285f3f8981801d125
GET /www.pdffiller.com/preview/100/81/100081789/large.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 31278
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/100/81/100081789/large.png>; rel="canonical"
x-content-type-options: nosniff
etag: "00c5c0e303b5d7e8"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.rocketlawyer.com/binaries/content/gallery/document-preview/us/sample-eviction-notice-ca-template.png
200 OK 129 kB URL HTTP/2 www.rocketlawyer.com/binaries/content/gallery/document-preview/us/sample-eviction-notice-ca-template.png
IP
File type PNG image data, 816 x 1056, 8-bit/color RGB, non-interlaced\012- data
Size 129 kB (128576 bytes)
Hash 41c56e690775f797f19d7d95ed917ff7
377354452f55d17cd73106bb7edd0aa76b23afb7
4a411007ef18c639164a07dc5d080a787d70173c6b755dea010d5e0f16181bb4
GET /binaries/content/gallery/document-preview/us/sample-eviction-notice-ca-template.png HTTP/1.1
Host: www.rocketlawyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-rld: xy01
last-modified: Thu, 11 Feb 2021 19:22:16 GMT
expires: Fri, 23 Aug 2024 08:28:39 GMT
cache-control: max-age=14400, s-maxage=2592000
etag: "1639978114429"
content-type: image/png;charset=UTF-8
strict-transport-security: max-age=864000
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-security-policy: frame-ancestors 'self' file: filesystem: ionic: http://localhost:8080;
via: 1.1 google, 1.1 varnish, 1.1 varnish
x-rld-origin-name: 6eAM9EebfbbAYUddsCnA64--F_EU_Site
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
age: 892518
x-served-by: cache-ams12765-AMS, cache-bma1644-BMA
x-cache: HIT, HIT
x-cache-hits: 60, 1
x-timer: S1669629046.380231,VS0,VE2
vary: Origin,logged-in, x-prerenderable,logged-in, x-prerenderable
server: rl
access-control-allow-origin: https://www.rocketlawyer.net
content-length: 128576
X-Firefox-Spdy: h2
i0.wp.com/www.allbusinesstemplates.com/thumbs/12441a10-7985-4d6f-be44-5705f832d968_1.png
200 OK 128 kB URL HTTP/2 i0.wp.com/www.allbusinesstemplates.com/thumbs/12441a10-7985-4d6f-be44-5705f832d968_1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 128 kB (128050 bytes)
Hash 3e6fe53fb3d64e413713b9bc2fa73347
18012affc1974f6509cc530fcef9c9a57a8aaa3c
bac6784461fd4186035777ffb2576dce4973d3426daaaffc806020f8869b88c1
GET /www.allbusinesstemplates.com/thumbs/12441a10-7985-4d6f-be44-5705f832d968_1.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 128050
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.allbusinesstemplates.com/thumbs/12441a10-7985-4d6f-be44-5705f832d968_1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "f9f703e566a89e5f"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 4a13a1bf87a47f739545cf994eb17632
807348969d997465d528914cf286fd0aa918866b
762f7fb9b5e15907e96f13d0d7709f8f58a4f4ca914324c5c9fcc8c69c5a9b92
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "762F7FB9B5E15907E96F13D0D7709F8F58A4F4CA914324C5C9FCC8C69C5A9B92"
Last-Modified: Sat, 26 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3721
Expires: Mon, 28 Nov 2022 10:52:47 GMT
Date: Mon, 28 Nov 2022 09:50:46 GMT
Connection: keep-alive
i0.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1554211055/original-2928199-2.jpg
200 OK 9.8 kB URL HTTP/2 i0.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1554211055/original-2928199-2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 02d08375e7a0593e00fb71ceabb5d1c6
814150712ac991896b65428278c9c49ab86e5a65
1f0e14731faddf9e1fe9099296cfc8b622d995b027a19275135faf2a616769b4
GET /ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1554211055/original-2928199-2.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 9802
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1554211055/original-2928199-2.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7824809ddb593f5e"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.signnow.com/preview/5/716/5716080.png
200 OK 12 kB URL HTTP/2 www.signnow.com/preview/5/716/5716080.png
IP
File type PNG image data, 298 x 386, 4-bit colormap, non-interlaced\012- data
Hash 4e2ec66eb057d8519db4a5014c3a451b
e25df9bf1d624b28519fdc1d95fb7e6eb3ae8579
358192a5eb4f62aee259d3f26358654fc2bab6032ddbe89168b85c0af1ff0a6c
GET /preview/5/716/5716080.png HTTP/1.1
Host: www.signnow.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 11938
server: openresty
last-modified: Sat, 02 May 2020 13:24:44 GMT
etag: "4e2ec66eb057d8519db4a5014c3a451b"
accept-ranges: bytes
expires: Mon, 05 Dec 2022 09:50:46 GMT
cache-control: max-age=604800, public
x-img-cache: MISS
X-Firefox-Spdy: h2
www.allbusinesstemplates.com/thumbs/53300a28-7d1f-4e25-a06a-1f3fa0ca9bca_2.png
200 OK 46 kB URL HTTP/2 www.allbusinesstemplates.com/thumbs/53300a28-7d1f-4e25-a06a-1f3fa0ca9bca_2.png
IP
File type PNG image data, 816 x 1056, 8-bit/color RGBA, non-interlaced\012- data
Hash 87abf4cfdd9718ce6697a254646df67d
6b8f20e2bc3ecc665f406b06082894a67a61fa79
cf9a5a8cfb3fddb31ce1d57815f7fe6567f9d96e04d3ac3bd4f00520e15c0cff
GET /thumbs/53300a28-7d1f-4e25-a06a-1f3fa0ca9bca_2.png HTTP/1.1
Host: www.allbusinesstemplates.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 46475
cache-control: max-age=2592000
last-modified: Sun, 31 Jan 2021 05:30:41 GMT
etag: "b11e333792f7d61:0"
x-frame-options: ALLOW-FROM https://docs.google.com
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HUwkzykrrqimyy25OTDBcGCf3IVE7E5fFqGshpAG8FeDk8yDNz4SEQJYYtdV5ymKcWuyLblldK9wTqgZLYdHsC8zNteSboozwYRx1puSLNLITMk9rppbHW2gdJNS7G6znzVkUAAoixrWEEOYyT0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123382895bb52d-OSL
X-Firefox-Spdy: h2
i1.wp.com/www.sortiraparis.com/images/62/77381/639410-un-tour-chez-ma-fille-la-suite-de-retour-chez-ma-mere-avec-josiane-balasko-le-te.jpg
200 OK 90 kB URL HTTP/2 i1.wp.com/www.sortiraparis.com/images/62/77381/639410-un-tour-chez-ma-fille-la-suite-de-retour-chez-ma-mere-avec-josiane-balasko-le-te.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 624x847, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f25de9cd1312a93211f92e9f75f10ecf
efea548a76d8d7f0d29e0e8a19cea588d49dafff
b85cfd320b8922ea9acdb3299954f83048f6a3c0b657c0bb1ba56c9c9ab087d7
GET /www.sortiraparis.com/images/62/77381/639410-un-tour-chez-ma-fille-la-suite-de-retour-chez-ma-mere-avec-josiane-balasko-le-te.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 90462
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.sortiraparis.com/images/62/77381/639410-un-tour-chez-ma-fille-la-suite-de-retour-chez-ma-mere-avec-josiane-balasko-le-te.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "69f3ebe31ec4f578"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/s-media-cache-ak0.pinimg.com/736x/d9/bd/2e/d9bd2ef6a8a7bf7518f2ea909d6020ab--kindergarten-vowel-worksheets-free-short-vowel-worksheets.jpg
200 OK 16 kB URL HTTP/2 i1.wp.com/s-media-cache-ak0.pinimg.com/736x/d9/bd/2e/d9bd2ef6a8a7bf7518f2ea909d6020ab--kindergarten-vowel-worksheets-free-short-vowel-worksheets.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 42e0c140358956de48d84ac26662a3e3
91d39b87cae508f5fa83002525fb0959e2a9a336
c8254b6d3125f193ffe419f50e8d59cc3495e229b167e09140e23d6ab57894d7
GET /s-media-cache-ak0.pinimg.com/736x/d9/bd/2e/d9bd2ef6a8a7bf7518f2ea909d6020ab--kindergarten-vowel-worksheets-free-short-vowel-worksheets.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 16448
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://s-media-cache-ak0.pinimg.com/736x/d9/bd/2e/d9bd2ef6a8a7bf7518f2ea909d6020ab--kindergarten-vowel-worksheets-free-short-vowel-worksheets.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "1ce98353ebe473a2"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.myteachingstation.com/vault/2599/web/articles/Short-Vowels-Pictures.jpg
200 OK 18 kB URL HTTP/2 i1.wp.com/www.myteachingstation.com/vault/2599/web/articles/Short-Vowels-Pictures.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x400, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 48b877c3a9e06fccb29ef82188aac6dd
4e0b3500e633413d3633a605df6e8fe64ba30755
1d3813629b688bfc9e22893b230824d29e630fb9bced445ce85569fd5dc2d5e2
GET /www.myteachingstation.com/vault/2599/web/articles/Short-Vowels-Pictures.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 17452
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.myteachingstation.com/vault/2599/web/articles/Short-Vowels-Pictures.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "cd30b02f73ccfb6b"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.austade.fr/wp-content/uploads/2019/11/logo-losc-football.jpg
200 OK 19 kB URL HTTP/2 i0.wp.com/www.austade.fr/wp-content/uploads/2019/11/logo-losc-football.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1170x700, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 614adb95a041ca7147efa4bc0c60ef96
9decc2f60b3ae635188ca6a3de314d48aad23731
274e4259e2e2ccf6e0be6eaffe31cecec5f2af736c66fd5ebc2b521c30dfc284
GET /www.austade.fr/wp-content/uploads/2019/11/logo-losc-football.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 19356
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.austade.fr/wp-content/uploads/2019/11/logo-losc-football.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f0abb0cae9765850"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.allbusinesstemplates.com/thumbs/6ef9f5dc-3ce7-4618-9165-d56c80c6f9be_1.png
200 OK 29 kB URL HTTP/2 i0.wp.com/www.allbusinesstemplates.com/thumbs/6ef9f5dc-3ce7-4618-9165-d56c80c6f9be_1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash eee2868b34f4715102a8c57169085cdb
d7691035298c399d5f462f8838177e26db2e8e74
22140d23597b2d7413373a4b36713e294751ccebe731ebdd55289118586a2a2c
GET /www.allbusinesstemplates.com/thumbs/6ef9f5dc-3ce7-4618-9165-d56c80c6f9be_1.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 28746
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.allbusinesstemplates.com/thumbs/6ef9f5dc-3ce7-4618-9165-d56c80c6f9be_1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "4decc93c3ddf339f"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/i.etsystatic.com/15358138/r/il/998341/2425172013/il_340x270.2425172013_sepp.jpg
200 OK 8.4 kB URL HTTP/2 i0.wp.com/i.etsystatic.com/15358138/r/il/998341/2425172013/il_340x270.2425172013_sepp.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 81b3b0bd0a49530a2968111d030ccf31
236c06368e12181e433ae62668dd1d7bf2e1ded5
d69a5cbb742b98aebf12dabd5e2c2d260c0f865ac71d1440df7b3f1dd39a5bd9
GET /i.etsystatic.com/15358138/r/il/998341/2425172013/il_340x270.2425172013_sepp.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 8370
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://i.etsystatic.com/15358138/r/il/998341/2425172013/il_340x270.2425172013_sepp.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "08cefb18a986acf3"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/cinentreprise.azureedge.net/Attachments/NewItems/UN%20TOUR%20CHEZ%20MA%20FILLE%20Poster_20210720181740_0.jpg?w=750&q=70
200 OK 108 kB URL HTTP/2 i0.wp.com/cinentreprise.azureedge.net/Attachments/NewItems/UN%20TOUR%20CHEZ%20MA%20FILLE%20Poster_20210720181740_0.jpg?w=750&q=70
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 600x887, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 108 kB (108320 bytes)
Hash ba3982de8539323dcd08203998cd7292
dffd7643cf35c3ae2ea005083f15fc357251c224
b1736d42ef83db6481e13d3ac638f5c9bd3cbbe15e171e20654a7289b31714b5
GET /cinentreprise.azureedge.net/Attachments/NewItems/UN%20TOUR%20CHEZ%20MA%20FILLE%20Poster_20210720181740_0.jpg?w=750&q=70 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 108320
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cinentreprise.azureedge.net/Attachments/NewItems/UN%20TOUR%20CHEZ%20MA%20FILLE%20Poster_20210720181740_0.jpg?70>; rel="canonical"
x-content-type-options: nosniff
etag: "41e11e54b3013b26"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Game-Boards-AEIOU-1500873673/original-401421-2.jpg
200 OK 18 kB URL HTTP/2 i0.wp.com/ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Game-Boards-AEIOU-1500873673/original-401421-2.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 350x270, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3afce4abac4e0cb571ed315b58948c25
7b02a45c8e4c574d1a52d1990e973e3e50da002e
d493f2ddf2341c3eb48fd1bd094669e28377d124ff77dab6dd99b2ac201a54e7
GET /ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Game-Boards-AEIOU-1500873673/original-401421-2.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 18538
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Game-Boards-AEIOU-1500873673/original-401421-2.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "970237958f25dea3"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.allbusinesstemplates.com/thumbs/73661535-9560-4489-82de-b37fd93fd3af_1.png
200 OK 97 kB URL HTTP/2 i1.wp.com/www.allbusinesstemplates.com/thumbs/73661535-9560-4489-82de-b37fd93fd3af_1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ee338175a50d2925a743e6a928128284
a339b25f79d6ba6e2f03dec64dccada49e0d45ec
db47d1636d8b2464371996efacdccba57c6c26507c79edf947a57b5a6581dc37
GET /www.allbusinesstemplates.com/thumbs/73661535-9560-4489-82de-b37fd93fd3af_1.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 96882
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.allbusinesstemplates.com/thumbs/73661535-9560-4489-82de-b37fd93fd3af_1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "b48a5e3d74b0ea71"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/evictionnotice.com/wp-content/uploads/NM-3-Day-Notice.png
200 OK 19 kB URL HTTP/2 i0.wp.com/evictionnotice.com/wp-content/uploads/NM-3-Day-Notice.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e4688c8805da728a8a249e883e6aabbe
087450fdc1e280b18925271f35e0ee29c0daad58
96ce360b192027f1f860e940092a4b1bea5dec7a90cf00c0a4049cf7612ac731
GET /evictionnotice.com/wp-content/uploads/NM-3-Day-Notice.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 19426
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://evictionnotice.com/wp-content/uploads/NM-3-Day-Notice.png>; rel="canonical"
x-content-type-options: nosniff
etag: "09fce144f202052a"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
oag.dc.gov/sites/default/files/styles/max_325x325/public/2019-11/Tenant%20for%20social.jpg?itok=VBrJ37wM
200 OK 12 kB URL HTTP/2 oag.dc.gov/sites/default/files/styles/max_325x325/public/2019-11/Tenant%20for%20social.jpg?itok=VBrJ37wM
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 75", baseline, precision 8, 325x211, components 3\012- data
Hash 10181d987b392c50a75f842e91f9e59a
048571f79b6bf056f0d054a301dac2dd27e0810b
168cdac3cba07153e9498e18f6f0ff354608664a55bd202841abb4da5041c420
GET /sites/default/files/styles/max_325x325/public/2019-11/Tenant%20for%20social.jpg?itok=VBrJ37wM HTTP/1.1
Host: oag.dc.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
last-modified: Thu, 21 Nov 2019 17:34:47 GMT
etag: "5dd6cab7-2f6e"
cache-control: max-age=2628001
x-lagoon: amazeeio-us2>ingress-nginx>dcoag01-f2-live:nginx>nginx-77b59cc988-7qdbf
x-frame-options: SameOrigin
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
referrer-policy: same-origin
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
age: 378183
expect-ct: enforce,max-age=86400
strict-transport-security: max-age=31557600
content-length: 12142
X-Firefox-Spdy: h2
i0.wp.com/www.k5learning.com/worksheets/kindergarten/vowel-worksheets.gif
200 OK 13 kB URL HTTP/2 i0.wp.com/www.k5learning.com/worksheets/kindergarten/vowel-worksheets.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 35cae7492f681f6b89e2837264047eec
3ecaa7302834076bb2a9773db74a86d067ad6955
75110522f255e6d9468e405a4cdcb2b8475905b9890f0cf45bf43c20acf9cb62
GET /www.k5learning.com/worksheets/kindergarten/vowel-worksheets.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 13060
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.k5learning.com/worksheets/kindergarten/vowel-worksheets.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "dda85e120e3a934e"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.pdffiller.com/preview/100/66/100066916.png
200 OK 2.5 kB URL HTTP/2 i0.wp.com/www.pdffiller.com/preview/100/66/100066916.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d7fa256c1a838781457abb98630cd544
6f2d943b08adfe7766c7ec79d1db83155528dfd5
67cb199cb88ef361c526583a3547c7277eebb9f0bee829e9c8f81d477298b178
GET /www.pdffiller.com/preview/100/66/100066916.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 2468
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/100/66/100066916.png>; rel="canonical"
x-content-type-options: nosniff
etag: "8cc4075eb6dbf46e"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Long-Vowels-a-e-i-o-u-Fill-in-the-Blanks-Kindergarten-Vowels-Sight-Words-1141027-1555185347/original-1141027-1.jpg
200 OK 6.7 kB URL HTTP/2 i1.wp.com/ecdn.teacherspayteachers.com/thumbitem/Long-Vowels-a-e-i-o-u-Fill-in-the-Blanks-Kindergarten-Vowels-Sight-Words-1141027-1555185347/original-1141027-1.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 270x350, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 6f8a709ed1972ce421ab4b133ee27ba9
bceb28a5c0024feb7e929bdf8ae67bc7f83ed0a0
28433e6ff221b7d833c5658687daf71f5a6d2ad7124fdafe5bc8e3e360b3eb13
GET /ecdn.teacherspayteachers.com/thumbitem/Long-Vowels-a-e-i-o-u-Fill-in-the-Blanks-Kindergarten-Vowels-Sight-Words-1141027-1555185347/original-1141027-1.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 6654
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://ecdn.teacherspayteachers.com/thumbitem/Long-Vowels-a-e-i-o-u-Fill-in-the-Blanks-Kindergarten-Vowels-Sight-Words-1141027-1555185347/original-1141027-1.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9c34f13a0973127a"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/evictionnotice.com/wp-content/uploads/Wisconsin-28-Day-Eviction-Notice-Image.png
200 OK 37 kB URL HTTP/2 i0.wp.com/evictionnotice.com/wp-content/uploads/Wisconsin-28-Day-Eviction-Notice-Image.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bc7832c41a2ab45fad8b31aaa41d0988
c5eccd235c440558ed2129a4b6b42d7ca89c357a
8ed7256ac6da558e1741fe8b13cbaedfd2f9798a1990932c162083c5ca7f95a0
GET /evictionnotice.com/wp-content/uploads/Wisconsin-28-Day-Eviction-Notice-Image.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 37182
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://evictionnotice.com/wp-content/uploads/Wisconsin-28-Day-Eviction-Notice-Image.png>; rel="canonical"
x-content-type-options: nosniff
etag: "6d380417d9a90ceb"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/450239836--printable-roommate-eviction-notice-tx-lq8rd94xmv-mypi--x-01.png
200 OK 33 kB URL HTTP/2 i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/450239836--printable-roommate-eviction-notice-tx-lq8rd94xmv-mypi--x-01.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 44880478b3b2047ed459a9d4ebc612d4
50d9dbe606112b50c8180e73cc4996f43e29011f
641a1b56c16169484b51151cf3535374db135a546924de64e5163d761eed80fa
GET /cdn.cocodoc.com/cocodoc-form/png/450239836--printable-roommate-eviction-notice-tx-lq8rd94xmv-mypi--x-01.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 32670
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cdn.cocodoc.com/cocodoc-form/png/450239836--printable-roommate-eviction-notice-tx-lq8rd94xmv-mypi--x-01.png>; rel="canonical"
x-content-type-options: nosniff
etag: "6d89696d0bd3327e"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/498841755--30-day-eviction-notice-forms-printable-orange-county-california-op-melanigardner--x-01.png
200 OK 26 kB URL HTTP/2 i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/498841755--30-day-eviction-notice-forms-printable-orange-county-california-op-melanigardner--x-01.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 695eece72fcb79ab6459a5b7e8107955
3dbabc841b285b6a912b718de19aeea8041b141e
b51884d8ad5fd0a07544d6074481a1c8354246c9374a4eb14ea03ad81678a780
GET /cdn.cocodoc.com/cocodoc-form/png/498841755--30-day-eviction-notice-forms-printable-orange-county-california-op-melanigardner--x-01.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 25690
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cdn.cocodoc.com/cocodoc-form/png/498841755--30-day-eviction-notice-forms-printable-orange-county-california-op-melanigardner--x-01.png>; rel="canonical"
x-content-type-options: nosniff
etag: "fbc01eff04c3f303"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.pdffiller.com/preview/6/694/6694283/large.png
200 OK 51 kB URL HTTP/2 i0.wp.com/www.pdffiller.com/preview/6/694/6694283/large.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 431ba2560a38f3ae9fa4802243136402
a6bb3398bc89802710399babea76ff9959936089
9a6cc2fbaab53e2dc80418cc40af04860423161bdbfe06294c7be905b53b2942
GET /www.pdffiller.com/preview/6/694/6694283/large.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 50734
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/6/694/6694283/large.png>; rel="canonical"
x-content-type-options: nosniff
etag: "867323585b7afbea"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.pdffiller.com/preview/406/981/406981635.png
200 OK 18 kB URL HTTP/2 i0.wp.com/www.pdffiller.com/preview/406/981/406981635.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9753afa9c4a7deab7fc35543a36c0c07
166723abf24ce9a8b0a1bbcf52a252745c58647f
bd2f0b1a9ffa0ca8bd1d4ec95026fe115673dc817bcbb98cffd7cacfb3740d47
GET /www.pdffiller.com/preview/406/981/406981635.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 17872
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.pdffiller.com/preview/406/981/406981635.png>; rel="canonical"
x-content-type-options: nosniff
etag: "116b936803abc437"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/vignette.wikia.nocookie.net/conling/images/f/f9/Vowels_Chart.gif/revision/latest?cb=20151231094925
200 OK 50 kB URL HTTP/2 i1.wp.com/vignette.wikia.nocookie.net/conling/images/f/f9/Vowels_Chart.gif/revision/latest?cb=20151231094925
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 394x532, components 3\012- data
Hash 546ab3e0704fbc8f0b94af588756416f
420cc2d8cb5fc0a40c81640785ddeed894d22411
c3433435673f4d61c65979cfdb80f64482224d183886b654bfc605cd13d6be5a
GET /vignette.wikia.nocookie.net/conling/images/f/f9/Vowels_Chart.gif/revision/latest?cb=20151231094925 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/jpeg
content-length: 50122
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://vignette.wikia.nocookie.net/conling/images/f/f9/Vowels_Chart.gif/revision/latest>; rel="canonical"
x-content-type-options: nosniff
etag: "870eb9a4927c4663"
x-bytes-saved: 5095
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/eforms.com/images/2019/03/California-14-Day-Notice-to-Quit-Domestic-Violence-550x712.png
200 OK 38 kB URL HTTP/2 i0.wp.com/eforms.com/images/2019/03/California-14-Day-Notice-to-Quit-Domestic-Violence-550x712.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 621a537ffb38fdb0f56ed0ac91225155
e468b73520eb8b43f5df85845488ff1659fe3e98
1bf2fde0a6d087feb48a476d29928305f9470fb29dced96eaed21bfe226ba547
GET /eforms.com/images/2019/03/California-14-Day-Notice-to-Quit-Domestic-Violence-550x712.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 37872
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://eforms.com/images/2019/03/California-14-Day-Notice-to-Quit-Domestic-Violence-550x712.png>; rel="canonical"
x-content-type-options: nosniff
etag: "76ba3098c09b2ea5"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.cocodoc.com/cocodoc-form/png/inf-1105-x-01.png
200 OK 139 kB URL HTTP/2 cdn.cocodoc.com/cocodoc-form/png/inf-1105-x-01.png
IP
File type PNG image data, 428 x 554, 8-bit/color RGBA, non-interlaced\012- data
Size 139 kB (139080 bytes)
Hash 94a494f3e8885deb7f9e6a8dad4f5f94
515294a24932687ca4025b983a39c1f78f83a544
b10f3d440c11ab9f894c86e77e2a770072132cccac317fc2b5fe60b691675461
GET /cocodoc-form/png/inf-1105-x-01.png HTTP/1.1
Host: cdn.cocodoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 139080
last-modified: Thu, 08 Apr 2021 10:17:23 GMT
etag: "94a494f3e8885deb7f9e6a8dad4f5f94"
x-amz-version-id: null
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=coZZ4SmVMWTMtI3v49XEcbKkyM4MGQuNznoMJl0P6RORJdv6g2e8LMMXodmG2yjaXSddOpPOizBrqmkJgMnIQjEehyy9812qZGVVd5ZukspqB8qW1QkzZzoBmK8%2F6%2BH9dVE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123380ef2bfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 52bde75ca3d9cc4b1bd8bae3ecfdda2d
83580317445e0fa0aa29ec5464fa96934207bcb5
9135c5f30e897abf7f43653698c0156cd929a12bacd51c63a4c0ccbd65bc1bb2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:46 GMT
Etag: "6381c662-1d7"
Server: ECS (amb/6B85)
Content-Length: 471
i0.wp.com/cdn.thepennyhoarder.com/wp-content/uploads/2018/11/09150119/evict_letter.jpg
200 OK 105 kB URL HTTP/2 i0.wp.com/cdn.thepennyhoarder.com/wp-content/uploads/2018/11/09150119/evict_letter.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1200x800, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 105 kB (104700 bytes)
Hash ae39ab96161adce0bbfdf7da2f0a6fd4
bd85172cef88dff33e7ed83f39c68b89a5a5a860
8f0ef6912f4ecff6c03ad463cb8863cb90be4b938116fcf911afc2f227c59eff
GET /cdn.thepennyhoarder.com/wp-content/uploads/2018/11/09150119/evict_letter.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 104700
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cdn.thepennyhoarder.com/wp-content/uploads/2018/11/09150119/evict_letter.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "7fc2c79be705021d"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/data.templateroller.com/pdf_docs_html/116/1165/116503/24-hour-notice-eviction-template_print_big.png
200 OK 63 kB URL HTTP/2 i1.wp.com/data.templateroller.com/pdf_docs_html/116/1165/116503/24-hour-notice-eviction-template_print_big.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 950x1241, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash cd896a6a1593c04febf9afa3846f0f8c
b782cf2a266904aefe797d95f44b21b69e90a758
f7d007bddc6ef450498ab261956a818da2f1d857d1a6103846da88ef188c0d67
GET /data.templateroller.com/pdf_docs_html/116/1165/116503/24-hour-notice-eviction-template_print_big.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 63266
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://data.templateroller.com/pdf_docs_html/116/1165/116503/24-hour-notice-eviction-template_print_big.png>; rel="canonical"
x-content-type-options: nosniff
etag: "2ee962d35869f74a"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template.png
200 OK 9.9 kB URL HTTP/2 i1.wp.com/data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 190x257, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 9777459b37c281539e24fc858e597817
4dcaf8ddc091d7fc31562c0cac5eaccea72e5253
bcdd0498f7dafdf04f29e6610fe6f4ec4c8e5a3ac0fa64f605db0984e26ba1da
GET /data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 9896
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template.png>; rel="canonical"
x-content-type-options: nosniff
etag: "184caf19f6d7f46f"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_1-791x1024.jpg
200 OK 116 kB URL HTTP/2 i0.wp.com/www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_1-791x1024.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 791x1024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 116 kB (116308 bytes)
Hash d78bb975c6bac53485163fd81b6d1749
10837760d77af610dbe8c8535dd221eceb33ebdc
934e6c3308c56eb8224d406637c94cdf2ef0fca116ed831e320152e313e2823f
GET /www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_1-791x1024.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 116308
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_1-791x1024.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "b1bdfaed928e2786"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/499207614--30-day-eviction-notice-forms-printable-orange-county-california--x-01.png
200 OK 54 kB URL HTTP/2 i1.wp.com/cdn.cocodoc.com/cocodoc-form/png/499207614--30-day-eviction-notice-forms-printable-orange-county-california--x-01.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fb4246a2b4606357a6eb765567304395
d2d763eae3ff9bca415ec631b0375c7896ffe3c7
cc82f49338a2e591cab4360f56f7778aa5ee4556850b44ab35d1385b6259b63b
GET /cdn.cocodoc.com/cocodoc-form/png/499207614--30-day-eviction-notice-forms-printable-orange-county-california--x-01.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 53946
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cdn.cocodoc.com/cocodoc-form/png/499207614--30-day-eviction-notice-forms-printable-orange-county-california--x-01.png>; rel="canonical"
x-content-type-options: nosniff
etag: "bd84054f72ae8f5c"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/content.lessonplanet.com/resources/thumbnails/69670/large/bwluav9tywdpy2symde3mdmymy0xotg3nc0xzg5mbtlnlmpwzw.jpg?1490285217
200 OK 9.2 kB URL HTTP/2 i0.wp.com/content.lessonplanet.com/resources/thumbnails/69670/large/bwluav9tywdpy2symde3mdmymy0xotg3nc0xzg5mbtlnlmpwzw.jpg?1490285217
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 212x300, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2a1768de63639cbbfe8de250e1a527c0
42e6638c80440db194f2167025fe113ec8fbe835
369a52afed8ff14b0d58d503aeb735d3e59c9ec81a9a1cf7b1d4d7fabfa2bb1a
GET /content.lessonplanet.com/resources/thumbnails/69670/large/bwluav9tywdpy2symde3mdmymy0xotg3nc0xzg5mbtlnlmpwzw.jpg?1490285217 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 9244
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://content.lessonplanet.com/resources/thumbnails/69670/large/bwluav9tywdpy2symde3mdmymy0xotg3nc0xzg5mbtlnlmpwzw.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "75d88e150d0eca0b"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.cocodoc.com/cocodoc-form/png/bexar-county-notice-to-vacate-form-x-01.png
200 OK 129 kB URL HTTP/2 cdn.cocodoc.com/cocodoc-form/png/bexar-county-notice-to-vacate-form-x-01.png
IP
File type PNG image data, 428 x 705, 8-bit/color RGBA, non-interlaced\012- data
Size 129 kB (129439 bytes)
Hash b69c89822ad880035c77f2bfd5e79d98
8d1e4e26fc464b96fe2605588efb63c539d2313f
bc507fa5bc32e57ab1f41bf1e76a4c20a453c531f37072339fbd009c092c53d5
GET /cocodoc-form/png/bexar-county-notice-to-vacate-form-x-01.png HTTP/1.1
Host: cdn.cocodoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 129439
last-modified: Thu, 08 Apr 2021 08:58:14 GMT
etag: "b69c89822ad880035c77f2bfd5e79d98"
x-amz-version-id: null
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BQL7xNAmKY9Vo%2F30XQcomdIzU6qNnfDHabt8iYNtknFImAtpI9Lws7S3KnLalvzEgD4ceZbfno8%2FuQAXa1VjpGjnuHMDd8EwovWaIiRUJzkI7vwwIpXDbD7njB2wV163Veo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123380ef2dfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/www.blumberg.com/cluster_images/204-landlords-notice-to-enter-premises.jpg
200 OK 28 kB URL HTTP/2 i0.wp.com/www.blumberg.com/cluster_images/204-landlords-notice-to-enter-premises.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1000x1000, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash b389b246de9198529961631cf3353278
9cc5f9e136e3678a07c066242e5078b51637f8e1
79820cb2af16130e0ad9c80db4c152a4d5ccbdacbad800cbdf99e553746e0f73
GET /www.blumberg.com/cluster_images/204-landlords-notice-to-enter-premises.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 28520
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.blumberg.com/cluster_images/204-landlords-notice-to-enter-premises.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2697dd63dc2baeb1"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
cdn.cocodoc.com/cocodoc-form/png/129875713--Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-dca-ca--x-01.png
200 OK 141 kB URL HTTP/2 cdn.cocodoc.com/cocodoc-form/png/129875713--Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-dca-ca--x-01.png
IP
File type PNG image data, 428 x 554, 8-bit/color RGBA, non-interlaced\012- data
Size 141 kB (140963 bytes)
Hash b97ae06c6b37f7e25e16c519287e6c13
da5e392170ef5ad724a9f61d7cb55e4fe8aa14d3
12d97c9eec15fa8ab741573386165df4fc9a103fc6f9d41d5471d54123d41c7e
GET /cocodoc-form/png/129875713--Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-Department-of-Consumer-Affairs-California-Civil-Code-Section-29248-dca-ca--x-01.png HTTP/1.1
Host: cdn.cocodoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 140963
last-modified: Sat, 10 Apr 2021 03:07:05 GMT
etag: "b97ae06c6b37f7e25e16c519287e6c13"
x-amz-version-id: null
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GNCTXnaPBLmM9uZK7BO%2Bnox4OnDr%2FiHJ5hkK5n13s3amhR7eqb4VyvED45%2Bc8y91xiGfvMWzfEsroA2dC%2BG1E43WplsIguUsaXq8ybk%2FNEGZ0kTRU5BuqRTUgsgfU4hZblo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123380ef2cfab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 346 B IP
ASN #20940 Akamai International B.V.
Hash cbbd196148aefc5ce23b83868f5c161d
591fee858f38eb53b20ae5a55c14b39da48bf414
bb86640b99248623ae35caeef833b74d5daf086093c10a31aa6ddd685e10c231
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "BB86640B99248623AE35CAEEF833B74D5DAF086093C10A31AA6DDD685E10C231"
Last-Modified: Sun, 27 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21563
Expires: Mon, 28 Nov 2022 15:50:09 GMT
Date: Mon, 28 Nov 2022 09:50:46 GMT
Connection: keep-alive
i1.wp.com/www.kindergartenteacherresources.com/wp-content/uploads/2013/05/short-vowel-worksheets-9-1.png
200 OK 11 kB URL HTTP/2 i1.wp.com/www.kindergartenteacherresources.com/wp-content/uploads/2013/05/short-vowel-worksheets-9-1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash c12d6abf125522d5fa437d90fbca7fec
36e5f54e2d2badcf49df7446ce5760380a6a8bff
125e86960fe791c5493c554eaea9f8bd0621f04d86a8324886622ee5ecf8caf8
GET /www.kindergartenteacherresources.com/wp-content/uploads/2013/05/short-vowel-worksheets-9-1.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 11038
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.kindergartenteacherresources.com/wp-content/uploads/2013/05/short-vowel-worksheets-9-1.png>; rel="canonical"
x-content-type-options: nosniff
etag: "c7bc1dfa6709a63e"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_print_big.png
200 OK 146 kB URL HTTP/2 i1.wp.com/data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_print_big.png
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 950x1284, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 146 kB (146060 bytes)
Hash bbb9ee7b45d3155dbc9b727c5a30cde4
9b0192a3c1e1db5b2214d28163f58c90856c949f
f2b8b82376ad41abc0c5d042b1952c8e1d78cc62ad73f0e09f9ec57e51fab4cf
GET /data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_print_big.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 146060
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_print_big.png>; rel="canonical"
x-content-type-options: nosniff
etag: "a9aab4a389ac5d0f"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/cevictionp.wpengine.com/wp-content/uploads/2011/01/5day6.jpg
200 OK 74 kB URL HTTP/2 i1.wp.com/cevictionp.wpengine.com/wp-content/uploads/2011/01/5day6.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 2049x932, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 3a18f57b6c9ba83edc03994807c7d794
8ae02c325568c79ca9057d97bf87687013ed8064
a2ca36fc24e971dbc7dc07c3e9f10d7f597017ce14f6a073dc8643aedc848367
GET /cevictionp.wpengine.com/wp-content/uploads/2011/01/5day6.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 74024
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://cevictionp.wpengine.com/wp-content/uploads/2011/01/5day6.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "d17ba44dd4d27e5d"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.disabilityrightsca.org/system/files/images/7168_01_pdf.png
200 OK 44 kB URL HTTP/2 i1.wp.com/www.disabilityrightsca.org/system/files/images/7168_01_pdf.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e63a3ab817ba04f28ac0ead93efb068d
517bbb4f016aaeb3858eddcb2e2750f5bab3f5b9
a67ea87cbffdae075219999b98a74641eda13bae228625d3d144c14402a6f8d9
GET /www.disabilityrightsca.org/system/files/images/7168_01_pdf.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 43982
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.disabilityrightsca.org/system/files/images/7168_01_pdf.png>; rel="canonical"
x-content-type-options: nosniff
etag: "102ece419dbf4070"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash db1b147c74d6df6a215977adc1a509fc
fe2a64da05f8cc6addd1cec8e4570439db1c9e42
a448d308969a9b00a68541e639832460cf4095feb187d60d2a2163850f8a31d0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A448D308969A9B00A68541E639832460CF4095FEB187D60D2A2163850F8A31D0"
Last-Modified: Sat, 26 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Mon, 28 Nov 2022 15:50:46 GMT
Date: Mon, 28 Nov 2022 09:50:46 GMT
Connection: keep-alive
www.allbusinesstemplates.com/thumbs/41c97396-6f0c-43f6-bf2e-fd5068f97abd_1.png
200 OK 456 kB URL HTTP/2 www.allbusinesstemplates.com/thumbs/41c97396-6f0c-43f6-bf2e-fd5068f97abd_1.png
IP
File type PNG image data, 2550 x 3300, 8-bit/color RGBA, non-interlaced\012- data
Size 456 kB (456407 bytes)
Hash 59fda26cb25e97f6006f7a8e1e4bdcc8
4bd4c96421984dbfd14e05bd6e304e8d81956296
66a59958a8320bcd79e9e5539ae8ede23bc040e1cf93540610b81848f7696d63
GET /thumbs/41c97396-6f0c-43f6-bf2e-fd5068f97abd_1.png HTTP/1.1
Host: www.allbusinesstemplates.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 456407
cache-control: max-age=2592000
last-modified: Tue, 09 Apr 2019 07:25:41 GMT
etag: "be7fa16fa5eed41:0"
x-frame-options: ALLOW-FROM https://docs.google.com
strict-transport-security: max-age=31536000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Nnn%2FI03QQuVchjsbuLy1l8YMuxKBvxYgsjthf04eYETsnDMHOxWeVwF1yAiaSQ6QtT9uILoy10C47UyDqigz1z9WsKXlq0xPWT5yFDyYt%2FZIJ68KU0X6LQVVeY5d0%2BYHMBafU4nxogj5PQEIKw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123383aa89b52d-OSL
X-Firefox-Spdy: h2
i1.wp.com/www.myprintableworksheet.com/wp-content/uploads/2020/01/MissingVowelsWorksheet21-724x1024.png
200 OK 87 kB URL HTTP/2 i1.wp.com/www.myprintableworksheet.com/wp-content/uploads/2020/01/MissingVowelsWorksheet21-724x1024.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c88e69933d78074ce9c54c2efd00fcb
00cd1e17bd925daa0f82e929d266e3e811534db8
98a9e4cf925538de16dede190f27ca29d63c663962f7a80f835a583d5d5f86fb
GET /www.myprintableworksheet.com/wp-content/uploads/2020/01/MissingVowelsWorksheet21-724x1024.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 87198
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.myprintableworksheet.com/wp-content/uploads/2020/01/MissingVowelsWorksheet21-724x1024.png>; rel="canonical"
x-content-type-options: nosniff
etag: "5b815712c176dc72"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/images.squarespace-cdn.com/content/v1/54179ca4e4b0b0c7bc710d3d/1629486185969-XFEN7XHJ51RPCXKK9EPM/2021.08.19.Evictions+Resource+ENG+Print.png?format=1000w
200 OK 423 kB URL HTTP/2 i1.wp.com/images.squarespace-cdn.com/content/v1/54179ca4e4b0b0c7bc710d3d/1629486185969-XFEN7XHJ51RPCXKK9EPM/2021.08.19.Evictions+Resource+ENG+Print.png?format=1000w
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 423 kB (423138 bytes)
Hash 4dfe9c65ac3d0e6601a6b4b96c40106c
c58edbdfe9c624c81a3d0260dbc731b0b6b3720a
ef453eff11faaccf627fa42fc1c69dc3c0317677cc375a779f9e68c0bba39a5b
GET /images.squarespace-cdn.com/content/v1/54179ca4e4b0b0c7bc710d3d/1629486185969-XFEN7XHJ51RPCXKK9EPM/2021.08.19.Evictions+Resource+ENG+Print.png?format=1000w HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 423138
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://images.squarespace-cdn.com/content/v1/54179ca4e4b0b0c7bc710d3d/1629486185969-XFEN7XHJ51RPCXKK9EPM/2021.08.19.Evictions+Resource+ENG+Print.png>; rel="canonical"
x-content-type-options: nosniff
etag: "03a206caa16978b4"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 9a1ac609fe6495a4573be1a9fc84b681
e70280e444f139210b229ad5c1841fa76384c4a5
8cc0922f92956ad46910eb32da3fb57a314890eba9f4821d719355880dd0ef29
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 00:11:57 GMT
Expires: Fri, 02 Dec 2022 00:11:56 GMT
Etag: "e70280e444f139210b229ad5c1841fa76384c4a5"
Cache-Control: max-age=310269,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712338639a6b503-OSL
www.k5learning.com/worksheets/kindergarten/vowels-identify-1.gif
200 OK 9.4 kB URL HTTP/2 www.k5learning.com/worksheets/kindergarten/vowels-identify-1.gif
IP
File type GIF image data, version 87a, 359 x 463\012- data
Hash 505a47cdb030cfd60da97d4b8c8c0333
ffe43091ffdbb604e4adba2aca765049c26c1f07
c03c256cb7ae3ffbf9f879838cdc4918a70002431c5757dbbaa448c4393b3a91
GET /worksheets/kindergarten/vowels-identify-1.gif HTTP/1.1
Host: www.k5learning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
last-modified: Sat, 13 Mar 2021 06:47:05 GMT
etag: "604c5fe9-24c8"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
age: 0
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669629046.493587,VS0,VE326
strict-transport-security: max-age=31557600
content-length: 9416
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.dsx8SHIG0QvxiYiT-HM8XQHaCz&pid=15.1
200 OK 9.3 kB URL HTTP/1.1 tse2.mm.bing.net/th?id=OIP.dsx8SHIG0QvxiYiT-HM8XQHaCz&pid=15.1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x179, components 3\012- data
Hash 4b2a6492a0bb20dc66a29cd760f3f0d6
3c736fde153d1093a5d3bb3ddff97f7dd0fd57df
75afb88466a9d122b8c0b1ae537bc42f7669e3420e255b6c4b0e7f7e0e21061a
GET /th?id=OIP.dsx8SHIG0QvxiYiT-HM8XQHaCz&pid=15.1 HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Cache-Control: public, max-age=1209600
Content-Length: 9330
Content-Type: image/jpeg
X-Cache: TCP_MISS
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Timing-Allow-Origin: *
Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-MSEdge-Ref: Ref A: 6F270083970844C18EAA0D3303F6EAC5 Ref B: OSL30EDGE0116 Ref C: 2022-11-28T09:50:46Z
Date: Mon, 28 Nov 2022 09:50:46 GMT
tse1.mm.bing.net/th?id=OIP.2GjTMsZYmwr38mBoEVnNQAHaDq&pid=15.1
200 OK 15 kB URL HTTP/1.1 tse1.mm.bing.net/th?id=OIP.2GjTMsZYmwr38mBoEVnNQAHaDq&pid=15.1
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x234, components 3\012- data
Hash 1af3bb95234681bbd7dfd275bbc9c6af
c97c78fc9e153e66189ca588df50b0fd239d6f87
0514b03a8c6b5cf78017e2c8ec6852305fc402c44dfcaba684433740d8414249
GET /th?id=OIP.2GjTMsZYmwr38mBoEVnNQAHaDq&pid=15.1 HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Cache-Control: public, max-age=1209600
Content-Length: 14624
Content-Type: image/jpeg
X-Cache: TCP_MISS
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: *
Timing-Allow-Origin: *
Report-To: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
NEL: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
X-MSEdge-Ref: Ref A: 7C048346793348E0B3309322CF48CDC8 Ref B: OSL30EDGE0208 Ref C: 2022-11-28T09:50:46Z
Date: Mon, 28 Nov 2022 09:50:46 GMT
ocsp.digicert.com/
200 OK 279 B IP
Hash 87e348afbf1ceb6812d6c57a08a52228
d63e6c46c8946317e86cdc1210db9659b4d4acd5
44f57d4643334a1a2a2affe07f764b6a5818ef10154ae96a626c53a112ec8249
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2360
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:46 GMT
Last-Modified: Mon, 28 Nov 2022 09:11:26 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 279
legaltemplates.net/wp-content/uploads/documents/eviction-notice/georgia-eviction-notice-to-pay-rent-or-quit.png
200 OK 27 kB URL HTTP/2 legaltemplates.net/wp-content/uploads/documents/eviction-notice/georgia-eviction-notice-to-pay-rent-or-quit.png
IP
File type PNG image data, 680 x 880, 8-bit colormap, non-interlaced\012- data
Hash 253c9440338bf1bc69df159911423b4a
4d17212469787e2568cc5a9533037223223bc0de
4ccfba9d3517c0a8781e9885206f680781ca2106da7d913a4cb4288be156661f
GET /wp-content/uploads/documents/eviction-notice/georgia-eviction-notice-to-pay-rent-or-quit.png HTTP/1.1
Host: legaltemplates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 26985
last-modified: Thu, 16 Jul 2020 09:36:11 GMT
etag: "5f101f8b-6969"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 771233822e5db51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.jotfor.ms/form-templates/screenshots/pdf/425x575_20200063706517044/30-day-notice-to-landlord.png
200 OK 75 kB URL HTTP/2 cdn.jotfor.ms/form-templates/screenshots/pdf/425x575_20200063706517044/30-day-notice-to-landlord.png
IP
File type PNG image data, 425 x 575, 8-bit/color RGB, non-interlaced\012- data
Hash 5e15c027425cbf88e254d68c2c05622d
7bee19b8176c21b27fa49ddd5da095db538a8cbd
33267fe0b0e5bb3224d32aeb11cf4b75d2cc4e8cf6acf822af904ff09c6fc009
GET /form-templates/screenshots/pdf/425x575_20200063706517044/30-day-notice-to-landlord.png HTTP/1.1
Host: cdn.jotfor.ms
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 75290
x-amz-id-2: YEzv1uoFKCY6sXmQRAdwmqFquCP1QnTbS0VhKEvliGXb2KIAXrDD+vL3cLUPAB8DJMrIJytGiRw=
x-amz-request-id: SEGBC3AWGFZ9WFM5
last-modified: Tue, 07 Jan 2020 15:05:04 GMT
etag: "5e15c027425cbf88e254d68c2c05622d"
x-amz-version-id: yQTRNH8u5k4aN4ye.kNcuZx9sewFRvgp
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
via: 1.1 google
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123384994509a5-ARN
X-Firefox-Spdy: h2
i0.wp.com/www.kidzone.ws/kindergarten/vowels/a-as-begins-sf.gif
200 OK 18 kB URL HTTP/2 i0.wp.com/www.kidzone.ws/kindergarten/vowels/a-as-begins-sf.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b9be4138409e174e2df6648f8c4f0ed9
8c2f3759ca2ed2df4ed5fcbcd7c84af3b1029085
ebf3ebd92541e2e7df07e1368140680b2aadd26407e4f9e2e6238e102157b6d7
GET /www.kidzone.ws/kindergarten/vowels/a-as-begins-sf.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 17718
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://www.kidzone.ws/kindergarten/vowels/a-as-begins-sf.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "f7d46db3f1d162fd"
vary: Accept
x-nc: MISS arn 1
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ipropertymanagement.com/wp-content/uploads/7842/Arizona-5-Day-Eviction-Notice-Form-Template-Nonpayment-Rent-pdf-791x1024.webp
200 OK 25 kB URL HTTP/1.1 ipropertymanagement.com/wp-content/uploads/7842/Arizona-5-Day-Eviction-Notice-Form-Template-Nonpayment-Rent-pdf-791x1024.webp
IP
ASN #14061 DIGITALOCEAN-ASN
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 791x1024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 8519e701430effaa0ec6ac421a837701
47e8d7a4e447e4b6ae8104fdfe067d52d3b99924
61e1300a746f9db92ea5a4e8ddc31fcd0d566f28ebc4e343f61a68f80be25b56
GET /wp-content/uploads/7842/Arizona-5-Day-Eviction-Notice-Form-Template-Nonpayment-Rent-pdf-791x1024.webp HTTP/1.1
Host: ipropertymanagement.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: image/webp
Content-Length: 25196
Last-Modified: Wed, 09 Feb 2022 15:35:55 GMT
Connection: keep-alive
ETag: "6203df5b-626c"
Expires: Wed, 16 Feb 2022 15:35:55 GMT
Pragma: public
Vary: Accept-Encoding
Cache-Control: no-cache, public
Accept-Ranges: bytes
cdn.cocodoc.com/cocodoc-form/png/351368496--3-Day-Notice-Eviction-Notice-Wholesale-Home-Sales--x-01.png
200 OK 66 kB URL HTTP/2 cdn.cocodoc.com/cocodoc-form/png/351368496--3-Day-Notice-Eviction-Notice-Wholesale-Home-Sales--x-01.png
IP
File type PNG image data, 428 x 554, 8-bit/color RGBA, non-interlaced\012- data
Hash 6d31b6bf46dab01a392e1993b086c9e6
7a3b41a55a82203b0b7a66faf5310c0538b214ae
abba7779d57d60ce609481be8a0025f32b3052e8e8120b3976a05fe2ae76ad80
GET /cocodoc-form/png/351368496--3-Day-Notice-Eviction-Notice-Wholesale-Home-Sales--x-01.png HTTP/1.1
Host: cdn.cocodoc.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/png
content-length: 66338
last-modified: Sat, 10 Apr 2021 08:02:46 GMT
etag: "6d31b6bf46dab01a392e1993b086c9e6"
x-amz-version-id: null
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VnLaIcH%2FCgDqNqkpGXSXMFUZIMAHDX4Wab8BfjBPa7G5NMOff9LOuNIvE6tMI4O4aXL1MkRZX7fURSbW9yIPa7L%2Bl0ZfPK1YK0Nzc5pZ5Yfn%2Ba9zoIuzDfkws7w7pR1auK4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123383b8defab8-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
images.sample.net/wp-content/uploads/2019/11/Thirty-Day-Notice-of-Termination-Form.jpg
200 OK 42 kB URL HTTP/2 images.sample.net/wp-content/uploads/2019/11/Thirty-Day-Notice-of-Termination-Form.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 320x455, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 4d5fac05a6d607656f983ab54e53f1ce
e179bd1fadbe3ec5a8f315a02031fe15ae2b9c5a
c60f4529e30636f273b799bbeebb979d004338cc6cfa22d4c272e9ab77d4be5d
GET /wp-content/uploads/2019/11/Thirty-Day-Notice-of-Termination-Form.jpg HTTP/1.1
Host: images.sample.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
etag: "U5p6sQyVlm9T8PcJ35NPzYqcCaYnZJiNt7WD0RvLsMI"
expires: Sat, 17 Nov 2029 06:38:06 +0000
fastly-io-info: ifsz=50295 idim=320x455 ifmt=jpeg ofsz=41806 odim=320x455 ofmt=webp
fastly-stats: io=1
server: AmazonS3
x-amz-id-2: oxw+/HSo/werSFF9B7/1WDTffkPqHfO4re4MvBFEqTACgM6yMEOitz6Y0v9jiyYOrXj8CM24jck=
x-amz-request-id: N1T57595WX9XMCSD
x-amz-version-id: VkWUQaQwA7lJN3n.IDkCgObb7AQpJAxn
via: 1.1 varnish, 1.1 varnish
cache-control: max-age=31536000, public
access-control-allow-origin: *
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:46 GMT
age: 2305451
x-served-by: cache-iad-kjyo7100044-IAD, cache-bma1641-BMA
x-cache: HIT, MISS
x-cache-hits: 32, 0
x-timer: S1669629047.842432,VS0,VE94
vary: Accept
content-length: 41806
X-Firefox-Spdy: h2
i0.wp.com/evictionnotice.com/wp-content/uploads/California-3-Day-Notice-to-Pay-or-Quit-600x815.png
200 OK 251 kB URL HTTP/2 i0.wp.com/evictionnotice.com/wp-content/uploads/California-3-Day-Notice-to-Pay-or-Quit-600x815.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 251 kB (250598 bytes)
Hash 92c7b390bb8b564799d261571ccce444
edb4dcdc078efbc9dc002e90203e75892974bddd
b2cf478c066b55de47c1d30352241ff161d74488895f696c45358887ca809c2f
GET /evictionnotice.com/wp-content/uploads/California-3-Day-Notice-to-Pay-or-Quit-600x815.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/webp
content-length: 250598
last-modified: Mon, 28 Nov 2022 09:50:46 GMT
expires: Wed, 27 Nov 2024 21:50:46 GMT
cache-control: public, max-age=63115200
link: <http://evictionnotice.com/wp-content/uploads/California-3-Day-Notice-to-Pay-or-Quit-600x815.png>; rel="canonical"
x-content-type-options: nosniff
etag: "c2ffa1d2651023f3"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash fbf8b86f39a2e228df928b4aca6a7037
24b5e2c1c77f93a47fee6d88f5e1d90dc6febc1a
589b4c8f851a3d7e389e7e35fa1ee3b9bad7b711f5aff5856a00b282a27832d7
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 20:24:33 GMT
Expires: Mon, 28 Nov 2022 20:24:33 GMT
ETag: "24b5e2c1c77f93a47fee6d88f5e1d90dc6febc1a"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 4b8dfcec0959145f67053c0f2a7ff28c
fcb73cc2c93e61e235f0195a072d96b68151b059
280514b457f3fc28340e794d008db5f38d09e000562ed5d967530a586daca6a6
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 02 Dec 2022 07:01:46 GMT
ETag: "fcb73cc2c93e61e235f0195a072d96b68151b059"
Last-Modified: Mon, 28 Nov 2022 07:01:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712338418350b3d-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash adb75922efa7885040f7581cda07779d
84a23385c9adcabcf9026ec836c597f748c57c5e
0974f22e39ef2ec5cc49ff545dc3ec5eff8ba27e97d1a34f834853549292957c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 846
Cache-Control: max-age=153041
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "638433fa-117"
Expires: Wed, 30 Nov 2022 04:21:27 GMT
Last-Modified: Mon, 28 Nov 2022 04:07:22 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 279
i2.wp.com/www.thn.org/wp-content/uploads/2020/07/Tenant-Flyer-NHLP-NAHRO-page-001.jpg?resize=384%2C497&ssl=1
200 OK 38 kB URL HTTP/2 i2.wp.com/www.thn.org/wp-content/uploads/2020/07/Tenant-Flyer-NHLP-NAHRO-page-001.jpg?resize=384%2C497&ssl=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 384x497, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 412c4d9f31caad56545c426d2a992c80
4c9dabcca66eda98c3c6df1f9eaef80f302592b3
f5acc7eadae3d64129c7d7e110807acf03af9e43ca46586d28f5a17aaf671bd2
GET /www.thn.org/wp-content/uploads/2020/07/Tenant-Flyer-NHLP-NAHRO-page-001.jpg?resize=384%2C497&ssl=1 HTTP/1.1
Host: i2.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 38422
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <https://www.thn.org/wp-content/uploads/2020/07/Tenant-Flyer-NHLP-NAHRO-page-001.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "fbdb4a36bc599382"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 195409e23b6d9c763046c60172a888fd
5801e3c7af03586be398975c9af3894175e2fd36
12989add15f423f019b3af78c6c7632a48a650dffcfe3d531f09e1602e1e76f4
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4376
Cache-Control: max-age=129526
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "6383ca55-117"
Expires: Tue, 29 Nov 2022 21:49:33 GMT
Last-Modified: Sun, 27 Nov 2022 20:36:37 GMT
Server: ECS (amb/6B9F)
X-Cache: HIT
Content-Length: 279
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 4b8dfcec0959145f67053c0f2a7ff28c
fcb73cc2c93e61e235f0195a072d96b68151b059
280514b457f3fc28340e794d008db5f38d09e000562ed5d967530a586daca6a6
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 02 Dec 2022 07:01:46 GMT
ETag: "fcb73cc2c93e61e235f0195a072d96b68151b059"
Last-Modified: Mon, 28 Nov 2022 07:01:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 771233849bce0afe-OSL
www.simplifyem.com/forms/download/colorado_notice_to_vacate_screenshot.jpg
200 OK 257 kB URL HTTP/1.1 www.simplifyem.com/forms/download/colorado_notice_to_vacate_screenshot.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 1000x1000, components 3\012- data
Size 257 kB (257318 bytes)
Hash ec3989cde94056a1202cde461a7dbf98
483725af20923617cf23fe7b1ef60c1d7abfd4e6
b7c0e25256790b37f89fcec27ee14ee9025cd8bed2b27d48d1393dbfb1abcfde
GET /forms/download/colorado_notice_to_vacate_screenshot.jpg HTTP/1.1
Host: www.simplifyem.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: image/jpeg
Content-Length: 257318
Connection: keep-alive
Last-Modified: Sat, 14 Mar 2020 05:12:48 GMT
ETag: "3ed26-5a0c9a31bf262"
Accept-Ranges: bytes
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 4b8dfcec0959145f67053c0f2a7ff28c
fcb73cc2c93e61e235f0195a072d96b68151b059
280514b457f3fc28340e794d008db5f38d09e000562ed5d967530a586daca6a6
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 02 Dec 2022 07:01:46 GMT
ETag: "fcb73cc2c93e61e235f0195a072d96b68151b059"
Last-Modified: Mon, 28 Nov 2022 07:01:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77123384af74b4e8-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash cb6a7aedf5fdf0c593f1cba9de3ddfa3
8187553317a0785afc8f6ada7cb68610699c192c
de4e1e58066cb868e8320ec80a0c884f1b2d5c00eda69f49130fdb2034f36ab7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "6382313e-116"
Server: ECS (amb/6B7B)
Content-Length: 279
i1.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short2.gif
200 OK 40 kB URL HTTP/2 i1.wp.com/www.kidzone.ws/kindergarten/vowels/vowel-short2.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c97b4c0b7ce1a465c4cc98d46a56a88
a3cfe1d5a9ae0e0fec76b4a2c3afbe7f3677d558
b4ae22254d8da02e97c2a24998cf5813938eec6374e4b24f57fc01f72fd369ae
GET /www.kidzone.ws/kindergarten/vowels/vowel-short2.gif HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 40116
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.kidzone.ws/kindergarten/vowels/vowel-short2.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "d4d1a569755c6a4b"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.signnow.com/preview/100/269/100269833/large.png
200 OK 82 kB URL HTTP/2 i1.wp.com/www.signnow.com/preview/100/269/100269833/large.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 428deb7453f70d413dde0b5d4c36e9c0
770a97696413578c46ce44d5ca27c6fec9b24797
7ebdb61983f2ac98a11bf4b24c9390dcb69095dd57d5221ea586bd8568763666
GET /www.signnow.com/preview/100/269/100269833/large.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 81896
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.signnow.com/preview/100/269/100269833/large.png>; rel="canonical"
x-content-type-options: nosniff
etag: "74d9b1712a2c92c5"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
www.gpb.org/sites/default/files/styles/three_two_702x468/public/2021-08/eviction-notice_1_0.jpg?h=199d8c1f&itok=Bvi5cqiq
200 OK 59 kB URL HTTP/2 www.gpb.org/sites/default/files/styles/three_two_702x468/public/2021-08/eviction-notice_1_0.jpg?h=199d8c1f&itok=Bvi5cqiq
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 702x468, components 3\012- data
Hash 874dd2ab9e1c6db573162d21cb858e7b
6db8201fdb9efc6692717da4fc40241aa59d599a
4a221612374a03c5086be4a5f0b6bc9481312f7b4b5c8b6f10afb826d6fba9da
GET /sites/default/files/styles/three_two_702x468/public/2021-08/eviction-notice_1_0.jpg?h=199d8c1f&itok=Bvi5cqiq HTTP/1.1
Host: www.gpb.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/jpeg
content-length: 59104
x-content-type-options: nosniff
last-modified: Mon, 02 Aug 2021 14:01:27 GMT
cache-control: max-age=1209600
expires: Mon, 12 Dec 2022 04:21:20 GMT
x-request-id: v-1c09149e-6ed4-11ed-bd82-cf52f228e7c1
x-ah-environment: prod
age: 19766
via: varnish
x-cache: HIT
x-cache-hits: 1
accept-ranges: bytes
X-Firefox-Spdy: h2
i1.wp.com/www.99worksheets.com/wp-content/uploads/2020/07/write_the_missing_vowels_for_the_nouns_2.jpg
200 OK 379 kB URL HTTP/2 i1.wp.com/www.99worksheets.com/wp-content/uploads/2020/07/write_the_missing_vowels_for_the_nouns_2.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 379 kB (378820 bytes)
Hash e7018e945a4b6cb75803e678f8c9d228
a410df245cb41c66443e7d21525900938a12ca27
1b983d9642e82f9aa8dc55272dd34a1b99fb8a2fa57b869a59f8607cfedc631f
GET /www.99worksheets.com/wp-content/uploads/2020/07/write_the_missing_vowels_for_the_nouns_2.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 378820
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.99worksheets.com/wp-content/uploads/2020/07/write_the_missing_vowels_for_the_nouns_2.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "f70fa6b7db5bcdfe"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
rentallease.com/wp-content/uploads/texas-3-day-nonpayment-of-rent.jpg
200 OK 289 kB URL HTTP/2 rentallease.com/wp-content/uploads/texas-3-day-nonpayment-of-rent.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2], baseline, precision 8, 930x1282, components 3\012- data
Size 289 kB (289169 bytes)
Hash 030e50f21a816bb4b0cc918f2771ac69
eb3e8917df48fe5b0c5490ac1ebfe9ebf4473bad
cafb45dca9072bbe91508efbde589513119469190f3d6da8aedee46ae675623b
GET /wp-content/uploads/texas-3-day-nonpayment-of-rent.jpg HTTP/1.1
Host: rentallease.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: image/jpeg
content-length: 289169
cache-control: public, max-age=31536000
expires: Tue, 28 Nov 2023 09:50:46 GMT
last-modified: Sat, 11 Oct 2014 15:50:24 GMT
vary: User-Agent, Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,POST,OPTIONS,DELETE,PUT
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TmPc5PqqnIgHihyfKrQ%2BfMuR7wUt77QndfKcvPuAqYJrerfaimso0vxVPuEAmirczBxpfcWyBFfOi9PU%2Btu8%2FJzMOYVq2PjrZKKQW0X5SqjnRUDL8FobN%2B5Ou5WwBksB8zY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771233826f2ab4f7-OSL
X-Firefox-Spdy: h2
i1.wp.com/gotilo.org/wp-content/uploads/2020/08/free__notice_to_vacate_forms_in_pdf_5.jpeg
200 OK 221 kB URL HTTP/2 i1.wp.com/gotilo.org/wp-content/uploads/2020/08/free__notice_to_vacate_forms_in_pdf_5.jpeg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 221 kB (220606 bytes)
Hash c7c56e41a38dc5ca37ab0655f6b85538
6f2c1c35c39e5a3c9ec4ee10c5834bec69d3a124
7772eb0ce06f00b7b252568edc17d0520677a8f0531e0e3e7abc0496a57ad6b8
GET /gotilo.org/wp-content/uploads/2020/08/free__notice_to_vacate_forms_in_pdf_5.jpeg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 220606
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://gotilo.org/wp-content/uploads/2020/08/free__notice_to_vacate_forms_in_pdf_5.jpeg>; rel="canonical"
x-content-type-options: nosniff
etag: "2401182668204b62"
vary: Accept
x-nc: MISS arn 6
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
legaltemplates.net/wp-content/uploads/documents/eviction-notice/texas-3-day-eviction-notice-nonpayment.png
200 OK 25 kB URL HTTP/2 legaltemplates.net/wp-content/uploads/documents/eviction-notice/texas-3-day-eviction-notice-nonpayment.png
IP
File type PNG image data, 680 x 880, 8-bit colormap, non-interlaced\012- data
Hash a9080fc1b9742e6fc16e02432f7494ef
62cb2057b1e7bea87bce05b0dafaf750510689d5
5146899568e0d27735ea7a8c271f561832cec50c6e6ad3239621c3160468c4d0
GET /wp-content/uploads/documents/eviction-notice/texas-3-day-eviction-notice-nonpayment.png HTTP/1.1
Host: legaltemplates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/png
content-length: 25155
last-modified: Thu, 09 Jul 2020 07:44:35 GMT
etag: "5f06cae3-6243"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 77123383c8b8b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 47c746c6448e44dff40586c115050d10
fcc98aeea9e94666f4bcd9d3ef122eca0a9c43cb
580e98a8688def37e296b530d7b5a5e6287e825a937efac99fff43e35bb64cfa
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 21:36:37 GMT
Expires: Mon, 28 Nov 2022 21:36:37 GMT
ETag: "fcc98aeea9e94666f4bcd9d3ef122eca0a9c43cb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp2.globalsign.com/gsalphasha2g2
200 OK 1.4 kB URL HTTP/1.1 ocsp2.globalsign.com/gsalphasha2g2
IP
Hash 4b8dfcec0959145f67053c0f2a7ff28c
fcb73cc2c93e61e235f0195a072d96b68151b059
280514b457f3fc28340e794d008db5f38d09e000562ed5d967530a586daca6a6
POST /gsalphasha2g2 HTTP/1.1
Host: ocsp2.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 1423
Connection: keep-alive
Expires: Fri, 02 Dec 2022 07:01:46 GMT
ETag: "fcb73cc2c93e61e235f0195a072d96b68151b059"
Last-Modified: Mon, 28 Nov 2022 07:01:47 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77123385495ab51d-OSL
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash bb3f88c18912293d70f5450bcac5ecbd
1a0a05cb534df6e28159bd9420052e59e8cbcb48
372df26c5fa0a3d22c8429c5ce1b3809a26f142acf9ccff5658836d02d82465e
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=104800
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "63836ad2-1d7"
Expires: Tue, 29 Nov 2022 14:57:27 GMT
Last-Modified: Sun, 27 Nov 2022 13:49:06 GMT
Server: ECS (bsa/EB24)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _XrhoXMlcHucNvcMW4ypBcnRdS81t4qizoX97U9NlHbE9-jzrY2eEw==
Age: 4101
i0.wp.com/www.lsnjlaw.org/Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-1.jpg
403 Forbidden 7.6 kB URL HTTP/2 i0.wp.com/www.lsnjlaw.org/Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-1.jpg
IP
Hash b19ae211932d3698e6c0abe753b5c2f8
5de24936b9c6c49945ade34bd2b89bf54eebcb78
e7e7ff1cdc9eb610818866cd588d4512c6eec2f4455d2ccf405955f9d8719698
GET /www.lsnjlaw.org/Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-1.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 2
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 20d1c4c5f092b77dbae2f0e83e2665fb
1a1e77dfeae93ed09da51709fd62ced0b10b06ec
99cbf3a6760e9b6b298e7877ee7b2f09c9143cd69ad7f6b9c7b2d6d09c9e2e90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1797
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Last-Modified: Mon, 28 Nov 2022 09:20:50 GMT
Server: ECS (amb/6B73)
X-Cache: HIT
Content-Length: 279
www.blumberg.com/cluster_images/119-New-York-notice-to-tenant-non-payment-of-rent-English-and-Spanish.jpg.full.jpg
200 OK 18 kB URL HTTP/2 www.blumberg.com/cluster_images/119-New-York-notice-to-tenant-non-payment-of-rent-English-and-Spanish.jpg.full.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash cf7a77a8394b2d2558d5a8d4d468c603
dd6e58a5dc45282ce6f245b3425961a2be3ab395
daaa24363166ee3a7ca499ceafbbddf0a263e86f635dff6dd91fab6130a0534c
GET /cluster_images/119-New-York-notice-to-tenant-non-payment-of-rent-English-and-Spanish.jpg.full.jpg HTTP/1.1
Host: www.blumberg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.2.15 (CentOS)
content-type: image/jpeg
p3p: CP="NON CURa OUR NOR ONL COM NAV DEM STA",policyref="http://www.blumberg.com/w3c/p3p.xml"
date: Mon, 28 Nov 2022 09:50:47 GMT
accept-ranges: bytes
etag: "5b0b7-4795-56f8d70e9ddc0"
last-modified: Tue, 26 Jun 2018 15:49:19 GMT
content-length: 18325
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 47c746c6448e44dff40586c115050d10
fcc98aeea9e94666f4bcd9d3ef122eca0a9c43cb
580e98a8688def37e296b530d7b5a5e6287e825a937efac99fff43e35bb64cfa
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Mon, 28 Nov 2022 09:50:46 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 27 Nov 2022 21:36:37 GMT
Expires: Mon, 28 Nov 2022 21:36:37 GMT
ETag: "fcc98aeea9e94666f4bcd9d3ef122eca0a9c43cb"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.sectigo.com/
200 OK 471 B IP
Hash 01afa847dd32f6a25f2ce6317bf1e5bb
180a7f43e5feb59d01e5a10e2f6ea82cb345121a
5acca38d8795a08161dedc2fb7fb3d919a144a8244a34f8ecdc3d5d916e15ff1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 08:16:26 GMT
Expires: Sat, 03 Dec 2022 08:16:25 GMT
Etag: "180a7f43e5feb59d01e5a10e2f6ea82cb345121a"
Cache-Control: max-age=425737,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771233890d20b503-OSL
legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-30-day-lease-termination.png
200 OK 26 kB URL HTTP/2 legaltemplates.net/wp-content/uploads/documents/eviction-notice/tennessee-30-day-lease-termination.png
IP
File type PNG image data, 680 x 880, 8-bit colormap, non-interlaced\012- data
Hash a5c9239e7765da2e70efd9cf0cf11f69
da6a4bbef70863ba1aa2a9eeb6988056991938b1
330709bf4460685bb3387f6c9f4968dbe22c4f50abf66ff0ca66d6920064c7c3
GET /wp-content/uploads/documents/eviction-notice/tennessee-30-day-lease-termination.png HTTP/1.1
Host: legaltemplates.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/png
content-length: 26443
last-modified: Wed, 05 Aug 2020 08:07:18 GMT
etag: "5f2a68b6-674b"
cache-control: public, max-age=31536000
vary: Accept-Encoding
access-control-allow-origin: *
cf-cache-status: MISS
accept-ranges: bytes
strict-transport-security: max-age=15552000; includeSubDomains; preload
server: cloudflare
cf-ray: 771233847a48b51b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 48c7f95eedc73136cd86683b07000619
ebeed66ab2cc43343b54b10619316e7b0ae838ac
680c115f9fbd03cfba91f5b625c0be66b749e748c26ebd7ec3072fd341933958
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4978
Cache-Control: max-age=104597
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "6383669a-1d7"
Expires: Tue, 29 Nov 2022 14:54:04 GMT
Last-Modified: Sun, 27 Nov 2022 13:31:06 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash af7b884ad98474e9a7346f13429e2fc0
47c2c7793fc507b556ad741c1c16951f81506eba
30c04e79c49d31e122c508451da91b50330d2d33288947046aa0069497ccc631
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=153613
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "63843984-117"
Expires: Wed, 30 Nov 2022 04:31:00 GMT
Last-Modified: Mon, 28 Nov 2022 04:31:00 GMT
Server: nginx
Content-Length: 279
ocsp.digicert.com/
200 OK 471 B IP
Hash be89eb2878663e720afc41ce412a0dca
35c7856b521eeeab8c4411f5852fabb50c09d72f
59f08de4486046039e82d777cf50a7bb39f77f38bba1e46a42d7fd1b4ad0e002
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2782
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Last-Modified: Mon, 28 Nov 2022 09:04:25 GMT
Server: ECS (ska/F704)
X-Cache: HIT
Content-Length: 471
media.madebyteachers.com/wp-content/uploads/2018/03/25020557/St-Patrick-Circle-Short-Vowels.png
200 OK 54 kB URL HTTP/2 media.madebyteachers.com/wp-content/uploads/2018/03/25020557/St-Patrick-Circle-Short-Vowels.png
IP
File type PNG image data, 399 x 532, 8-bit/color RGBA, non-interlaced\012- data
Hash d5a9702c676d7161fecd0083165413fd
cd3a7614a6672072fea569b18aff897cc0a5d4d3
8b01d29d3d2b652fa36d78a10ac45374757bc24a8cc0ccb4a022b439fbde6cfc
GET /wp-content/uploads/2018/03/25020557/St-Patrick-Circle-Short-Vowels.png HTTP/1.1
Host: media.madebyteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/png
content-length: 54219
x-amz-id-2: rFZ9aczJTXG7gM2aSLFWoY67WY1W9XutQ8Vb2I5RF2Gp0nj1IwJriAXj7poPnYtUe3deMCmmuIo=
x-amz-request-id: ZZKVVGQZXN7C776H
last-modified: Thu, 25 Apr 2019 09:33:53 GMT
etag: "d5a9702c676d7161fecd0083165413fd"
cache-control: max-age=31536000
expires: Fri, 24 Apr 2020 09:33:52 GMT
x-amz-version-id: null
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 771233886f89b52d-OSL
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Printable-Vowel-Tracing-Worksheet-4704138-1563310395/original-4704138-1.jpg
200 OK 15 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Printable-Vowel-Tracing-Worksheet-4704138-1563310395/original-4704138-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x350, components 1\012- data
Hash 6f84d870a090f863885fe7f3b7ced243
b79f6a91e5515297ca1da8c9080c99cc7eac940f
60685e4cfc2d57c86fd2db0d97a98eb20e1e747a4f056356256d88154703b30e
GET /thumbitem/Printable-Vowel-Tracing-Worksheet-4704138-1563310395/original-4704138-1.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "6f84d870a090f863885fe7f3b7ced243"
last-modified: Wed, 17 Jul 2019 00:53:15 GMT
server: nginx/1.23.1
x-amz-id-2: D6pig+d5bSGc3XHJbTr+kPvaHqHlE1VVSLOdVF2EFgm1WWT7tFFw5SNZkw5BnncVLPmldJwR498=
x-amz-request-id: ZZKYDK7QEM070533
x-amz-version-id: S9D5EF9BUsJQuHMKGfscajvZFG51M.JM
content-length: 15028
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=25, origin; dur=124
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.funfonix.com/book1/ffonix_book1_2.gif
200 OK 73 kB URL HTTP/2 i0.wp.com/www.funfonix.com/book1/ffonix_book1_2.gif
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8f1f82f9a499fcae46e10a285dd76d50
7909dc71c26d95b618676c3b31db7ca521651459
c7b05c99045677f036881151e1a0f6499dcd6749da2d421619f7d214e3e356eb
GET /www.funfonix.com/book1/ffonix_book1_2.gif HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 72712
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.funfonix.com/book1/ffonix_book1_2.gif>; rel="canonical"
x-content-type-options: nosniff
etag: "054ca0aa535dba3a"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Vowels-791x1024.png
200 OK 181 kB URL HTTP/2 i0.wp.com/www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Vowels-791x1024.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 181 kB (181164 bytes)
Hash 343779c82b59b34720048f8fc6aaa03f
fe910d88af205d1330f5a2e3dd5ffcc8c8287703
354f979967b19b231a06e142f2706e1421d7d4b1032664817cafc43c9a5ccdc2
GET /www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Vowels-791x1024.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 181164
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Vowels-791x1024.png>; rel="canonical"
x-content-type-options: nosniff
etag: "ebcdbaeacbd63679"
vary: Accept
x-nc: MISS arn 4
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSL7-Hq5U2ceMN4PYfg3A-n3YLMMPpryZje9Q&usqp=CAU
200 OK 12 kB URL HTTP/2 encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcSL7-Hq5U2ceMN4PYfg3A-n3YLMMPpryZje9Q&usqp=CAU
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x264, components 3\012- data
Hash fcfd998a1319ba396e007980bedd542f
4f5ddb39c53ded03afbc84d5f4df442629fd8d39
f6704da020350d151f1c9957d8e94097154fe447f1494c2bc1550bfd94b0e3af
GET /images?q=tbn:ANd9GcSL7-Hq5U2ceMN4PYfg3A-n3YLMMPpryZje9Q&usqp=CAU HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 11761
date: Mon, 28 Nov 2022 09:50:47 GMT
expires: Tue, 28 Nov 2023 09:50:47 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 16 May 2021 10:31:25 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
media.madebyteachers.com/wp-content/uploads/2018/03/25020515/April-Color-the-Short-Vowels.png
200 OK 57 kB URL HTTP/2 media.madebyteachers.com/wp-content/uploads/2018/03/25020515/April-Color-the-Short-Vowels.png
IP
File type PNG image data, 404 x 533, 8-bit/color RGBA, non-interlaced\012- data
Hash 46b2a6bf4c6a9511c808a56ef85f4d12
75276f28f6273c789391a89cd022538d47337945
109517001807aa150d359601994bbfa487a7fc965e2b6766f21001f6346f5afc
GET /wp-content/uploads/2018/03/25020515/April-Color-the-Short-Vowels.png HTTP/1.1
Host: media.madebyteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/png
content-length: 57065
x-amz-id-2: TcypEg+1YzkoRWTHAiDMpQkkZVKiJuapKP1ue1fCyvx3kJdWH8I831Gbklu2s2y7AlRuwuUDsjo=
x-amz-request-id: ZZKREMW3J3QBBR9T
last-modified: Thu, 25 Apr 2019 09:32:17 GMT
etag: "46b2a6bf4c6a9511c808a56ef85f4d12"
cache-control: max-age=31536000
expires: Fri, 24 Apr 2020 09:32:15 GMT
x-amz-version-id: null
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123388bfd5b52d-OSL
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a986683bf1a302555ffc01838a1a7036
71e8606079736390c2a35119585add418ba7c3aa
93b9ac41eea299ff946ecdf13fe8816299a3f5a752c5551a208feb2b970fdbd2
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=164830
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "6384623d-1d7"
Expires: Wed, 30 Nov 2022 07:37:57 GMT
Last-Modified: Mon, 28 Nov 2022 07:24:45 GMT
Server: ECS (dcb/7F3C)
X-Cache: Miss from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Ql6Z_7wx3qBzraJZ9iJ_LOYy2NDe2lSc-oR0yrdPgs1kxDwup2VqVA==
Age: 792
i0.wp.com/en.islcollective.com/wuploads/preview_new/big_22403_long_vowels_1.jpg
404 Not Found 67 kB URL HTTP/2 i0.wp.com/en.islcollective.com/wuploads/preview_new/big_22403_long_vowels_1.jpg
IP
Hash b9b36542bc44221a679ae49612affd4a
b03ed2f8d88841aa584791f773a60b58e2fd67fe
f893d0c2b1c9308ea823c0d333deb8bb6a01dae65053bbd561cc1c475aae53a2
GET /en.islcollective.com/wuploads/preview_new/big_22403_long_vowels_1.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 6
X-Firefox-Spdy: h2
encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTwAUErWLoV3X4IRS1eTJxu2p54qNFLTShdtw&usqp=CAU
200 OK 10 kB URL HTTP/2 encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcTwAUErWLoV3X4IRS1eTJxu2p54qNFLTShdtw&usqp=CAU
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 191x264, components 3\012- data
Hash ef3ef56375f6fea78a1f71fe6f01c3e8
bd50d7233c04f43cec416aab08c193cb9f3b1160
3308f5bccf3784d2f196a979e73438b442283637171e1c94873db8a299bd70f5
GET /images?q=tbn:ANd9GcTwAUErWLoV3X4IRS1eTJxu2p54qNFLTShdtw&usqp=CAU HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 10302
date: Mon, 28 Nov 2022 09:50:47 GMT
expires: Tue, 28 Nov 2023 09:50:47 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Jun 2021 16:18:43 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
form-preview-cdn.pdffiller.com/no_prev_large.png
200 OK 60 kB URL HTTP/2 form-preview-cdn.pdffiller.com/no_prev_large.png
IP
File type PNG image data, 769 x 995, 8-bit colormap, non-interlaced\012- data
Hash 43436b189d9d0b43d5d03009abf69cc9
9d684f236e85b1443cbcf622f3bdcb0466a80955
686e13d93881ead7a64d27834a5f384ef07ac2d7f8ebb2f1f5f66be30ff22248
GET /no_prev_large.png HTTP/1.1
Host: form-preview-cdn.pdffiller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finnhood.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
content-length: 59465
date: Sun, 27 Nov 2022 20:30:16 GMT
last-modified: Mon, 18 Jan 2021 07:30:12 GMT
etag: "43436b189d9d0b43d5d03009abf69cc9"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 98794c1dec0d4e7b10ddf0faa094cf94.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: EP3SvGbAE27wof6NZY1L6rMv4R3yerokLeKj1jDrVeaTWfIbcQ9L_Q==
age: 48032
X-Firefox-Spdy: h2
i1.wp.com/516744.smushcdn.com/669276/wp-content/uploads/2014/03/California-60-Day-Notice-to-Vacate-Form-as-of-2013-768x994.jpg?lossy=1&strip=1&webp=1
200 OK 64 kB URL HTTP/2 i1.wp.com/516744.smushcdn.com/669276/wp-content/uploads/2014/03/California-60-Day-Notice-to-Vacate-Form-as-of-2013-768x994.jpg?lossy=1&strip=1&webp=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 768x994, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 277ffcae62f2ed9290193383e4fdab7e
230d4b7d7deec8a4d4b0383e470ad70e0956431a
c7cc8e23c40546429babc50f77220fa4654c7f23c2641c5661f65733d42d0ca0
GET /516744.smushcdn.com/669276/wp-content/uploads/2014/03/California-60-Day-Notice-to-Vacate-Form-as-of-2013-768x994.jpg?lossy=1&strip=1&webp=1 HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 64246
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://516744.smushcdn.com/669276/wp-content/uploads/2014/03/California-60-Day-Notice-to-Vacate-Form-as-of-2013-768x994.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "cce233c9f1088885"
vary: Accept
x-nc: MISS arn 3
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1508454683/original-2928199-4.jpg
200 OK 29 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1508454683/original-2928199-4.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 270x350, components 1\012- data
Hash fd7a2cecc5b1b33fe0ee1bfd3528e2de
4fbe8b7ac251d20ecceea45ccdf347569282dbed
1be2ef4a9947a6ce96fc403d91be7313c11e082f80dc81c57135fd1102b6eff6
GET /thumbitem/Short-Vowel-Worksheets-A-E-I-O-U-2928199-1508454683/original-2928199-4.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "fd7a2cecc5b1b33fe0ee1bfd3528e2de"
last-modified: Thu, 22 Dec 2016 01:26:16 GMT
server: nginx/1.23.1
x-amz-id-2: lgfyVuea7Oihz5hb9dX5DOSjcqJUEAKOYWgeTM3K/GqHmHIilMi0BjgKgYcNFpoaGFL36QBPbAA=
x-amz-request-id: ZZKYKY7NVTDHAE9B
x-amz-version-id: null
content-length: 28884
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=23, origin; dur=124
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
ocsp.comodoca.com/
200 OK 472 B IP
Hash 95033d1fbf6ad0233b2d52616d453de4
4a23fea37fc8fe5f3a2779c57b6984d75e0aca69
cba69b02eab6cd3e6f75b22605cfabf199650220b1eaaf7497d7285221b5edc0
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 15:23:58 GMT
Expires: Fri, 02 Dec 2022 15:23:57 GMT
Etag: "4a23fea37fc8fe5f3a2779c57b6984d75e0aca69"
Cache-Control: max-age=603634,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: HIT
Age: 488
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7712338a6e8db500-OSL
i0.wp.com/www.manyworksheets.com/wp-content/uploads/2019/09/Short-vowel-i-worksheet-4.jpg
400 Bad Request 55 kB URL HTTP/2 i0.wp.com/www.manyworksheets.com/wp-content/uploads/2019/09/Short-vowel-i-worksheet-4.jpg
IP
Hash d5311779aa3edd0f2d4bfeabf505de40
3e0bd76df7327c0bf5e1560672f44772eebaab86
6f38a64fc183def7810fad6d9d02a64d40b47a9baa1c70eff1870842918e2307
GET /www.manyworksheets.com/wp-content/uploads/2019/09/Short-vowel-i-worksheet-4.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 7
X-Firefox-Spdy: h2
www.eslprintables.com/previews/410332_1-AEIOU.jpg
200 OK 221 kB URL HTTP/2 www.eslprintables.com/previews/410332_1-AEIOU.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 821x1169, components 3\012- data
Size 221 kB (221284 bytes)
Hash 77220d4cbd944f9ad45b865cdfbc95aa
b18f2d26de9ea0e10a62349b544bbf1890e54e10
bfdce581fbd0f4404e96fb2102edcb2309d33c7f4c1fb4db67de056ea8c10a2a
GET /previews/410332_1-AEIOU.jpg HTTP/1.1
Host: www.eslprintables.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 221284
last-modified: Mon, 23 Apr 2018 23:24:38 GMT
etag: "c2d5983f5adbd31:0"
x-powered-by: ASP.NET
x-powered-by-plesk: PleskWin
cache-control: max-age=14400
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5%2FFIYeQ%2FQt4sjLfcafShis19ywwajDAzblRiZku5GS%2BmVSllVnZNMgh4sk5khUZPQ%2BE%2Bsx9OTC8RQcprYd2VJJZbUPDIIMWa8x2yfc11O4oNa3TEW9uidR%2BU4dnzWKLaOeWkY0jf1g%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 771233880aaeb4f3-OSL
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.Rciolj3X1PcOx8XnrJc__gHaKd&pid=Api
200 OK 31 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.Rciolj3X1PcOx8XnrJc__gHaKd&pid=Api
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x669, components 3\012- data
Hash 7cf39c9ed7400c96d857d74b4d47c139
bd9e0b4d51cc3c7b4fe9fb86e2965b1653bf062e
956cf54b011a14cf8a8cd8352164bf17992f85914c746d309a6e383baf1682bc
GET /th?id=OIP.Rciolj3X1PcOx8XnrJc__gHaKd&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 30673
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: C2A37B43545F404EB842F2915AB514BC Ref B: OSL30EDGE0517 Ref C: 2022-11-28T09:50:47Z
date: Mon, 28 Nov 2022 09:50:46 GMT
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Vowels-Tracing-Worksheet-3424760-1507223624/original-3424760-1.jpg
200 OK 16 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Vowels-Tracing-Worksheet-3424760-1507223624/original-3424760-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 350x288, components 3\012- data
Hash 5ee1949db6ca7ce48fa40a7a39903a42
1946ac6314e71508719eb893714bb33220a5fecc
b1dc5c50dfa34c0b1ea524094c44184eda80a328f208fdb786fcda9a19d816b6
GET /thumbitem/Vowels-Tracing-Worksheet-3424760-1507223624/original-3424760-1.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "5ee1949db6ca7ce48fa40a7a39903a42"
last-modified: Thu, 05 Oct 2017 21:13:45 GMT
server: nginx/1.23.1
x-amz-id-2: k3i41xlJLIg5hOy1BhqVg0Iq3DJxArAgQljL09fxrNiqsLGSanO1H+85B6sH+q7rr79i3boULhY=
x-amz-request-id: ZZKH0F8BKYT61JHC
x-amz-version-id: 4btYjrlVh4I9.yxGFt1pGW7FOgupnqlh
content-length: 16067
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=25, origin; dur=137
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.thebalancemoney.com/thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png
200 OK 775 kB URL HTTP/2 www.thebalancemoney.com/thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png
IP
File type PNG image data, 3000 x 1687, 8-bit colormap, non-interlaced\012- data
Size 775 kB (774909 bytes)
Hash ea7b4264d745103b77ec4a11c776b1ba
8ada9a00d58820840be16c964255ffad746c3a93
9eabf7ab1e61addbebe98a8250122835ce3e7b30a825aed0f347feb31325e2a3
GET /thmb/YMUx8Ol_T7zH4Qk_T3nD5hW9iZY=/3000x1687/smart/filters:no_upscale()/sample-notice-of-rent-increase-month-to-month-tenants-2125043_final-0000d6fa182a484f86da54a34d67dc1a.png HTTP/1.1
Host: www.thebalancemoney.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finnhood.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
via: 1.1 varnish, 1.1 varnish, 1.1 varnish
etag: "ea7b4264d745103b77ec4a11c776b1ba"
last-modified: Thu, 30 Jan 2020 19:00:14 GMT
server: AmazonS3
cache-control: max-age=31536000,public,no-transform
nel: {"report_to":"network-errors","max_age":2592000,"success_fraction":0,"failure_fraction":1.0, "include_subdomains": true}
report-to: {"group":"network-errors","max_age":2592000,"endpoints":[{"url":"https://r.3gl.net/hawklogserver/553/re.p"}]}
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:47 GMT
age: 3437803
x-served-by: cache-iad-kcgs7200158-IAD, cache-iad-kcgs7200139-IAD, cache-bma1656-BMA
x-cache: MISS, HIT, HIT
x-cache-hits: 0, 16, 1
x-timer: S1669629047.392637,VS0,VE24
content-length: 774909
X-Firefox-Spdy: h2
files.liveworksheets.com/def_files/2020/6/7/607035011274441/607035011274441001.jpg
200 OK 145 kB URL HTTP/2 files.liveworksheets.com/def_files/2020/6/7/607035011274441/607035011274441001.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1000x1413, components 3\012- data
Size 145 kB (145154 bytes)
Hash bfdc43bf14174820e589203b735675e3
821b2bcce463f8451ff9b8004f1f9be8e12cb4c5
d198fdcf33676fe822ada6b482774d71b75be00abffa1ec4dc6ea5a7d3cd6546
GET /def_files/2020/6/7/607035011274441/607035011274441001.jpg HTTP/1.1
Host: files.liveworksheets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 145154
x-guploader-uploadid: ADPycduiSKfiI8vudnyMq9KHf1dQNFXO86EAPwFCO-CsIzV8bBAIU0E_Awpb8AfIoZAn8r9VMhWKmI92dsUv3GEraCbML9u8M82l
expires: Mon, 28 Nov 2022 10:50:47 GMT
cache-control: public, max-age=14400
last-modified: Sun, 07 Jun 2020 02:00:25 GMT
etag: "bfdc43bf14174820e589203b735675e3"
x-goog-generation: 1591495225213458
x-goog-metageneration: 1
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 145154
x-goog-hash: crc32c=7FUkIg==, md5=v9xDvxQXSCDliSA7c1Z14w==
x-goog-storage-class: STANDARD
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CcfxN%2BteV1FXKD3Xgr5X8U7UdtcmTgh30H89LXF00aW9mntgkh0elKIVSzuqOho7H23MNkQ8zAHRrtskLhJycJnIJ4pGUnJnLTBadjbU53DzHuFYBpJNGRSv6p6vQmMkqfIXyh0ybn2OpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123387da69b4f3-OSL
X-Firefox-Spdy: h2
db-excel.com/wp-content/uploads/2019/09/jolly-phonics-worksheets-printables-jackpotprintco.jpg
200 OK 1.5 MB URL HTTP/2 db-excel.com/wp-content/uploads/2019/09/jolly-phonics-worksheets-printables-jackpotprintco.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 100", baseline, precision 8, 2550x3300, components 3\012- data
Size 1.5 MB (1526997 bytes)
Hash a61706d2f6754e1b12176a8799a2886c
2398f285fe2f7de0d1cc161648b7296bad9317eb
74e7275688bb8ed7a196f5884f3c0e339acbc86c0de8bb94d6c02e098c1e84c3
GET /wp-content/uploads/2019/09/jolly-phonics-worksheets-printables-jackpotprintco.jpg HTTP/1.1
Host: db-excel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 1526997
last-modified: Fri, 06 Sep 2019 03:31:17 GMT
etag: "5d71d305-174cd5"
expires: Wed, 28 Dec 2022 09:50:47 GMT
cache-control: max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Qk2ZmtUgyvoGNTKwnXCVpxurZIllWMyWCNCghoz5Rtlj3QwkjMgzmrtDEGd7eM%2FqKvZaiJqpsHwsUIb5fA249UsKtHS7Dw4A%2FXANlNp7d48YiEubmc%2F8Z5pOW9RORIw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712338998c8b50c-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Short-Vowels-WORKSHEETS-Fill-in-the-Blanks-1436294376/original-651191-1.jpg
200 OK 13 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Short-Vowels-WORKSHEETS-Fill-in-the-Blanks-1436294376/original-651191-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 247x350, components 3\012- data
Hash 0fc4783abbc08634ce940e81c01ce6ff
76122c296e96335d99203f216bd1f9bfe8e324d7
79e6aaa859e29889924133c0ed1307c63061377680f506ea0fd4888e9779770d
GET /thumbitem/Short-Vowels-WORKSHEETS-Fill-in-the-Blanks-1436294376/original-651191-1.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "0fc4783abbc08634ce940e81c01ce6ff"
last-modified: Tue, 12 Apr 2016 05:40:01 GMT
server: nginx/1.23.1
x-amz-id-2: m5TWx+FQTTSbhsHn1clOHyJcEj+I/e6ju7EoGSwCeM490BnamaerMyWSyDFS8Xfd7jTF2JMWtLI=
x-amz-request-id: ZZKS7P9PTD3389X2
x-amz-version-id: null
content-length: 13329
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=24, origin; dur=101
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.illinoislegalaid.org/sites/default/files/eviction_notice_papers_keys.jpg
200 OK 297 kB URL HTTP/2 www.illinoislegalaid.org/sites/default/files/eviction_notice_papers_keys.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=10, orientation=upper-left, xresolution=134, yresolution=142, resolutionunit=2, software=Adobe Photoshop CC 2015 (Windows), datetime=2016:07:27 14:53:24, copyright=(c) Mjlp4337 | Dreamstime.com], baseline, precision 8, 831x554, components 3\012- data
Size 297 kB (297246 bytes)
Hash 809f087072f33ee8b6957fec6b5e0b98
160e7cf64f9478198c6740106709905f2ac55de8
418c1c98d91de1ad654c207f23c41335e99172940eaa5a9abf896ddb015ef9df
GET /sites/default/files/eviction_notice_papers_keys.jpg HTTP/1.1
Host: www.illinoislegalaid.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 297246
x-content-type-options: nosniff
last-modified: Sun, 24 May 2020 18:29:36 GMT
cache-control: max-age=1209600
expires: Mon, 12 Dec 2022 09:50:47 GMT
x-request-id: v-220c8e1a-6f02-11ed-a89d-0e2788e22893
x-ah-environment: prod
age: 0
via: varnish
x-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2
data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_big.png
200 OK 63 kB URL HTTP/2 data.templateroller.com/pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_big.png
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 530x717, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c9a2f52a387280ef889da6a3c1d72b0d
abd320d81b29c239550d5ef48d72e0e875c559fa
4994fd7a3f8a1d767e18a3f21e692a09b90c24318dabc494d1b006458130722d
GET /pdf_docs_html/344/3441/344167/30-day-notice-to-vacate-template_big.png HTTP/1.1
Host: data.templateroller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.2
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 62700
last-modified: Wed, 23 Nov 2022 03:47:49 GMT
etag: "f4ec-5ee1b27020fe8"
accept-ranges: bytes
cache-control: max-age=31536000
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Long-Vowel-AEIOU-Clipart-BUNDLE-Color-BW-077186200-1379308285-1500873386/original-876068-2.jpg
200 OK 44 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Long-Vowel-AEIOU-Clipart-BUNDLE-Color-BW-077186200-1379308285-1500873386/original-876068-2.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 1x1, segment length 16, baseline, precision 8, 270x350, components 3\012- data
Hash 6975b91559285c16a35f03bf3ea4ab15
e7e08ef57b09dd74c34a590d2d11d6da430e5afe
3c168ee149ffedf4dadc182e1088d0300ead4139d18896cf544a044b5897638f
GET /thumbitem/Long-Vowel-AEIOU-Clipart-BUNDLE-Color-BW-077186200-1379308285-1500873386/original-876068-2.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "6975b91559285c16a35f03bf3ea4ab15"
last-modified: Wed, 13 Apr 2016 13:14:29 GMT
server: nginx/1.23.1
x-amz-id-2: 880mv41ZWfLGRdVWliDZXlBHoTj4w1/O3cwbFKybTv0jl1CHbqPEsNtm7vBLVNT10FU7RS9aTa0=
x-amz-request-id: ZZKK024ZQCADDER1
x-amz-version-id: null
content-length: 44523
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=24, origin; dur=135
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.Hgu2mCs1SrWdoeBIKvLARQHaJ4&pid=Api
404 Not Found 1.2 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.Hgu2mCs1SrWdoeBIKvLARQHaJ4&pid=Api
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.Hgu2mCs1SrWdoeBIKvLARQHaJ4&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DD29C8FED2124B9799E005E4DB42E034 Ref B: OSL30EDGE0517 Ref C: 2022-11-28T09:50:47Z
date: Mon, 28 Nov 2022 09:50:46 GMT
X-Firefox-Spdy: h2
www.blumberg.com/cluster_images/308-Ten-day-notice-to-quit-where-no-landlord-and-tenant-relationship-exists.jpg
200 OK 110 kB URL HTTP/2 www.blumberg.com/cluster_images/308-Ten-day-notice-to-quit-where-no-landlord-and-tenant-relationship-exists.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x1000, components 3\012- data
Size 110 kB (109854 bytes)
Hash 526bd78b684f58d420b1e82a6e4a828b
cc47d676447d1dd1e9de82e5a1238a29f5965bcc
fc77fc8ab849045eb868a8f4692b61627ad51e808e00a88a77a121ac992187ba
GET /cluster_images/308-Ten-day-notice-to-quit-where-no-landlord-and-tenant-relationship-exists.jpg HTTP/1.1
Host: www.blumberg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.2.15 (CentOS)
content-type: image/jpeg
p3p: CP="NON CURa OUR NOR ONL COM NAV DEM STA",policyref="http://www.blumberg.com/w3c/p3p.xml"
date: Mon, 28 Nov 2022 09:50:47 GMT
accept-ranges: bytes
etag: "5b0cc-1ad1e-57be8992c4e00"
last-modified: Fri, 30 Nov 2018 21:36:56 GMT
content-length: 109854
X-Firefox-Spdy: h2
ecdn.teacherspayteachers.com/thumbitem/Vowel-chart-a-e-i-o-u--2634164-1485039084/original-2634164-1.jpg
200 OK 60 kB URL HTTP/2 ecdn.teacherspayteachers.com/thumbitem/Vowel-chart-a-e-i-o-u--2634164-1485039084/original-2634164-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 247x350, components 3\012- data
Hash 35b4d0986d95ca47119956253c8e3879
bf72b6ad55bdfb8973437f6317cf0e8f92dce585
6d6a0e016e4a796ef3d27d9f4e970b9d769514f80151cbeb1050e7a20585a656
GET /thumbitem/Vowel-chart-a-e-i-o-u--2634164-1485039084/original-2634164-1.jpg HTTP/1.1
Host: ecdn.teacherspayteachers.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
etag: "35b4d0986d95ca47119956253c8e3879"
last-modified: Sat, 09 Jul 2016 00:23:02 GMT
server: nginx/1.23.1
x-amz-id-2: 7rxgb0Cr6mmYnU8ouFJXuv7MF+LfFc7bDSR1ZhmS6HM8VUYWhBrpQ+dt+te5X8AUNx6K8mHbMKI=
x-amz-request-id: ZZKRYN5Q2GWR75DT
x-amz-version-id: null
content-length: 59546
date: Mon, 28 Nov 2022 09:50:47 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=23, origin; dur=152
access-control-allow-methods: GET
access-control-allow-origin: *
X-Firefox-Spdy: h2
www.myteachingstation.com/vault/2599/web/articles/Long-Vowels-Pictures.jpg
200 OK 53 kB URL HTTP/2 www.myteachingstation.com/vault/2599/web/articles/Long-Vowels-Pictures.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=957, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=718], baseline, precision 8, 300x400, components 3\012- data
Hash f12e2639bb0ff66468d306b451b71534
ba5bdde4e57ebdec916a27e4c966d188cfc3ca9a
d136cd3fb62de2fe8fd928ec8faa20483b46e90d36b1286d80b3c992c37ab53d
GET /vault/2599/web/articles/Long-Vowels-Pictures.jpg HTTP/1.1
Host: www.myteachingstation.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 53434
access-control-allow-methods: GET, POST, PUT, HEAD, ACCEPT, OPTIONS
access-control-allow-headers: Access-Control-Allow-Headers, Origin,Accept, X-Requested-With, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers
last-modified: Fri, 15 May 2015 12:47:19 GMT
etag: "d0ba-5161e3ea689b1"
access-control-allow-origin: *
cf-cache-status: MISS
expires: Wed, 14 Dec 2022 09:50:47 GMT
cache-control: public, max-age=1382400
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 771233893e4ab51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash e028baed3de6fe6d22926c908cf68edf
156f5b53437e860ce328e035ed9a1ec3d9d73662
32363f5bc4601a62aa8921443cc2bf782ed6c438e66f1b04d85af203a3b16b6c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Fri, 25 Nov 2022 13:11:46 GMT
Expires: Fri, 02 Dec 2022 13:11:45 GMT
Etag: "156f5b53437e860ce328e035ed9a1ec3d9d73662"
Cache-Control: max-age=357057,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 771233897d98b503-OSL
ocsp.entrust.net/
200 OK 1.6 kB IP
Hash 078f8d38ac422e2aa21dd131ed2f9508
0dc9d56a4d4cd7238f93cbdc7497f60686a611c1
a506a27fff0b45379fd4d09a46f17cd4f4c1847eabdc5e4b20ef138017021e4b
POST / HTTP/1.1
Host: ocsp.entrust.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
ETag: "A506A27FFF0B45379FD4D09A46F17CD4F4C1847EABDC5E4B20EF138017021E4B"
Last-Modified: Mon, 28 Nov 2022 02:00:00 UTC
Content-Length: 1588
Cache-Control: public, no-transform, must-revalidate, max-age=3600
Expires: Mon, 28 Nov 2022 10:50:47 GMT
Date: Mon, 28 Nov 2022 09:50:47 GMT
Connection: keep-alive
www.blumberg.com/cluster_images/216-New-York-eviction-notice-postcard-Civil-Court.jpg
200 OK 121 kB URL HTTP/2 www.blumberg.com/cluster_images/216-New-York-eviction-notice-postcard-Civil-Court.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x1000, components 3\012- data
Size 121 kB (120818 bytes)
Hash 26861b8730e114d8ff43e954aef0f6e1
114612d35a61334e297fe9f1a4f055a182929efa
39c477846b5ffd474a67868718877e1843f83661881cbdb6ffb5c79d1073a3bb
GET /cluster_images/216-New-York-eviction-notice-postcard-Civil-Court.jpg HTTP/1.1
Host: www.blumberg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.2.15 (CentOS)
content-type: image/jpeg
p3p: CP="NON CURa OUR NOR ONL COM NAV DEM STA",policyref="http://www.blumberg.com/w3c/p3p.xml"
date: Mon, 28 Nov 2022 09:50:47 GMT
accept-ranges: bytes
etag: "5b0c9-1d7f2-56f8d72f0aa40"
last-modified: Tue, 26 Jun 2018 15:49:53 GMT
content-length: 120818
X-Firefox-Spdy: h2
www.blumberg.com/cluster_images/212-New-York-eviction-notice-postcard-holdover-Civil-Court.jpg
200 OK 134 kB URL HTTP/2 www.blumberg.com/cluster_images/212-New-York-eviction-notice-postcard-holdover-Civil-Court.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x1000, components 3\012- data
Size 134 kB (133586 bytes)
Hash 0bdd0c63d88cbc1dc1c807acd5853631
86f9455f846bf51c25a5eeee0eb9a75d961f9f1e
10820d98168e2325498d04e4a45580eb08a9b2defacfff07ead06fa0751b5d3f
GET /cluster_images/212-New-York-eviction-notice-postcard-holdover-Civil-Court.jpg HTTP/1.1
Host: www.blumberg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: Apache/2.2.15 (CentOS)
content-type: image/jpeg
p3p: CP="NON CURa OUR NOR ONL COM NAV DEM STA",policyref="http://www.blumberg.com/w3c/p3p.xml"
date: Mon, 28 Nov 2022 09:50:47 GMT
accept-ranges: bytes
etag: "5b0bc-209d2-56f8d72675600"
last-modified: Tue, 26 Jun 2018 15:49:44 GMT
content-length: 133586
X-Firefox-Spdy: h2
i1.wp.com/www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC_covid_eviction_moratirum_090420.jpg
200 OK 115 kB URL HTTP/2 i1.wp.com/www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC_covid_eviction_moratirum_090420.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1700x2200, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 115 kB (114592 bytes)
Hash 30ea3db8d3a69b67dbf853a884035389
d8a48a67c3667b019ca86ee9444b25c1b3178106
1289ee7f51a05fe7be5e8ce301da0aec29864c231b4783dd5b3631a3d824753e
GET /www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC_covid_eviction_moratirum_090420.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 114592
last-modified: Mon, 28 Nov 2022 09:50:47 GMT
expires: Wed, 27 Nov 2024 21:50:47 GMT
cache-control: public, max-age=63115200
link: <http://www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC_covid_eviction_moratirum_090420.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "2298207c8a0744c1"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash af7b884ad98474e9a7346f13429e2fc0
47c2c7793fc507b556ad741c1c16951f81506eba
30c04e79c49d31e122c508451da91b50330d2d33288947046aa0069497ccc631
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=153613
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "63843984-117"
Expires: Wed, 30 Nov 2022 04:31:00 GMT
Last-Modified: Mon, 28 Nov 2022 04:31:00 GMT
Server: nginx
Content-Length: 279
www.kindergartenworksheets.net/images/worksheets/phonics/phonic-worksheets-for-beginners-printable.png
200 OK 43 kB URL HTTP/1.1 www.kindergartenworksheets.net/images/worksheets/phonics/phonic-worksheets-for-beginners-printable.png
IP
File type PNG image data, 800 x 1035, 8-bit colormap, non-interlaced\012- data
Hash 5ebb8bb34c52e1adb6934fb1b2e96ab1
735a4590c8ca67e288b1b3058f8f48913baa45e3
e0dcb1cb869bb14ed270f63368b191c29de29c4308bba586416160b22ced5b6b
GET /images/worksheets/phonics/phonic-worksheets-for-beginners-printable.png HTTP/1.1
Host: www.kindergartenworksheets.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Server: Apache
Last-Modified: Fri, 21 Aug 2020 05:41:02 GMT
Accept-Ranges: bytes
Content-Length: 42574
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
data.templateroller.com/pdf_docs_html/1877/18771/1877136/form-cn11006-appendix-xi-g-warrant-of-removal-new-jersey-english-spanish_print_big.png
200 OK 151 kB URL HTTP/2 data.templateroller.com/pdf_docs_html/1877/18771/1877136/form-cn11006-appendix-xi-g-warrant-of-removal-new-jersey-english-spanish_print_big.png
IP
ASN #39572 DataWeb Global Group B.V.
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 950x1241, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size 151 kB (150600 bytes)
Hash a1e19caabed95a10d77c4a356b2e2896
283a45e2dc2f178f02371e10b8605ac4b4084b45
1a8fd96f69e22f5eb6eea519f03dddf6f1dc24bca73310fe5eebf860cbbf21b0
GET /pdf_docs_html/1877/18771/1877136/form-cn11006-appendix-xi-g-warrant-of-removal-new-jersey-english-spanish_print_big.png HTTP/1.1
Host: data.templateroller.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.2
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/webp
content-length: 150600
last-modified: Wed, 23 Nov 2022 15:50:53 GMT
etag: "24c48-5ee2540e0b992"
accept-ranges: bytes
cache-control: max-age=31536000
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.NAswG7M9nyDq61VnWzmVZwHaKe&pid=Api
200 OK 46 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.NAswG7M9nyDq61VnWzmVZwHaKe&pid=Api
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x670, components 3\012- data
Hash b408348112ff2d1a733a75e1fa76a060
5ed4b10dfb4dd3d610faf54c4e28f90a0469cd5e
0ee283cbb9500346b8875d208591ed90c865f88d77b870adf9fd1da15fd2abcc
GET /th?id=OIP.NAswG7M9nyDq61VnWzmVZwHaKe&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 45506
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9DA93FD2E98B442983235EFBD6EBA7F7 Ref B: OSL30EDGE0210 Ref C: 2022-11-28T09:50:47Z
date: Mon, 28 Nov 2022 09:50:46 GMT
X-Firefox-Spdy: h2
static.wixstatic.com/media/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg/v1/fill/w_720,h_1040,al_c,q_90/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg
200 OK 82 kB URL HTTP/2 static.wixstatic.com/media/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg/v1/fill/w_720,h_1040,al_c,q_90/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 720x1040, components 3\012- data
Hash b4627ae03fb49d6c7bf25e9bb2e23f85
6f3b879cc184119bed55c52cc06fe7e74ad8887b
9745cb1ac7f5027f3c76117002f0d0010c01ece16012ef188c08dd630ad6bcdc
GET /media/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg/v1/fill/w_720,h_1040,al_c,q_90/c4eb8e_ded23b2e64b2444f90ed3ad59cf6f2d8~mv2.jpg HTTP/1.1
Host: static.wixstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty/1.21.4.1
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/jpeg
content-length: 81965
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
wix-tracer: 2IAevl6Q4S9i2niGA0vXWDNU3ez
x-seen-by: image-manipulator-77c4b7b444-kcmkn
timing-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
agportal-s3bucket.s3.amazonaws.com/uploadedfiles/Another/Office_Initiatives/Worksheet%20Cover.JPG
200 OK 71 kB URL HTTP/1.1 agportal-s3bucket.s3.amazonaws.com/uploadedfiles/Another/Office_Initiatives/Worksheet%20Cover.JPG
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 120x120, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4], baseline, precision 8, 610x789, components 3\012- data
Hash cfcde1be24e3cd3c29ba66461389996e
723c0a3e4bfbbf4fed96116dd30011a83b560810
b221290953e0b274e22689451570e99c9b49e3b7ce3f2a1916a4a8e7cc6a9e7b
GET /uploadedfiles/Another/Office_Initiatives/Worksheet%20Cover.JPG HTTP/1.1
Host: agportal-s3bucket.s3.amazonaws.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
x-amz-id-2: ARl740n0rnQ4a1RzFPgnYjCAZHBeTJ5+Pa03mmu+90j9tpz38hYDjkJG2H0RzwCxo5wlnpcBmzA=
x-amz-request-id: ZZKGCQCA0R20TP5M
Date: Mon, 28 Nov 2022 09:50:48 GMT
Last-Modified: Wed, 03 Jun 2020 20:53:14 GMT
ETag: "cfcde1be24e3cd3c29ba66461389996e"
x-amz-version-id: null
Accept-Ranges: bytes
Content-Type: image/jpeg
Server: AmazonS3
Content-Length: 71291
www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_8-791x1024.jpg
200 OK 138 kB URL HTTP/2 www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_8-791x1024.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 791x1024, components 1\012- data
Size 138 kB (138059 bytes)
Hash 61615b08b457fa25a46d7c926cbc5f7b
54cbf9d4c213e1e6da5540ba37dae532847b577d
dc29b449a58fa8cee2fe202730b95c82e1b6982c1f41f2eaf1a4e64b29b04548
GET /wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_8-791x1024.jpg HTTP/1.1
Host: www.tenants-rights.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
server: Apache
last-modified: Mon, 01 Feb 2021 23:00:26 GMT
etag: "21b4b-5ba4e51d8d2fd"
accept-ranges: bytes
content-length: 138059
cache-control: max-age=2592000
expires: Wed, 28 Dec 2022 09:50:47 GMT
vary: User-Agent
content-type: image/jpeg
X-Firefox-Spdy: h2
www.k5learning.com/worksheets/kindergarten/blending-vowels-1.gif
200 OK 18 kB URL HTTP/2 www.k5learning.com/worksheets/kindergarten/blending-vowels-1.gif
IP
File type GIF image data, version 87a, 359 x 463\012- data
Hash 2aad1f8b63772c9bc582be35f04bfa5f
0b7754c0596d1043465fdc2bd48ab6a3ed4ac98e
67be2c07517f687f6884f4c4a0c74820d3b3df87fc89996fa75329e914b71a81
GET /worksheets/kindergarten/blending-vowels-1.gif HTTP/1.1
Host: www.k5learning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/gif
last-modified: Sat, 13 Mar 2021 06:46:28 GMT
etag: "604c5fc4-4492"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
accept-ranges: bytes
date: Mon, 28 Nov 2022 09:50:47 GMT
age: 0
x-served-by: cache-bma1631-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1669629047.344248,VS0,VE433
strict-transport-security: max-age=31557600
content-length: 17554
X-Firefox-Spdy: h2
www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_2-791x1024.jpg
200 OK 96 kB URL HTTP/2 www.tenants-rights.org/wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_2-791x1024.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, baseline, precision 8, 791x1024, components 3\012- data
Hash 11634045e74ed90490a24d45e542bc7f
37f225d1dae998dbc4cd0cb77119e79de35f3a49
f49b649d78730aa186037c9e36ec745ce1a1fb99d880e1dcf01289ebbd709d59
GET /wp-content/uploads/2021/02/The-Year-of-Covid-final-0121_Page_2-791x1024.jpg HTTP/1.1
Host: www.tenants-rights.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
server: Apache
last-modified: Mon, 01 Feb 2021 22:58:47 GMT
etag: "17879-5ba4e4be81464"
accept-ranges: bytes
content-length: 96377
cache-control: max-age=2592000
expires: Wed, 28 Dec 2022 09:50:47 GMT
vary: User-Agent
content-type: image/jpeg
X-Firefox-Spdy: h2
www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Worksheets.gif
200 OK 12 kB URL HTTP/2 www.bestcoloringpagesforkids.com/wp-content/uploads/2019/01/Kindergarten-Phonics-Worksheets.gif
IP
File type GIF image data, version 89a, 718 x 957\012- data
Hash 9049b53b02990da0924870c233a24120
662c9a2ad9fbd42780c4ff3281cc263c4838ada4
577368fe14d793ad9b4d24c6c1e004e4340c7d026b1e5a2a20e1588490589607
GET /wp-content/uploads/2019/01/Kindergarten-Phonics-Worksheets.gif HTTP/1.1
Host: www.bestcoloringpagesforkids.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.21.6
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/gif
content-length: 12298
last-modified: Wed, 16 Jan 2019 14:24:35 GMT
etag: "5c3f3ea3-300a"
expires: Mon, 05 Dec 2022 09:50:47 GMT
cache-control: max-age=604800, public, must-revalidate
x-proxy-cache: STATIC/TYPE
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 20d1c4c5f092b77dbae2f0e83e2665fb
1a1e77dfeae93ed09da51709fd62ced0b10b06ec
99cbf3a6760e9b6b298e7877ee7b2f09c9143cd69ad7f6b9c7b2d6d09c9e2e90
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=86316
Content-Type: application/ocsp-response
Date: Mon, 28 Nov 2022 09:50:47 GMT
Etag: "638332a3-117"
Expires: Tue, 29 Nov 2022 09:49:23 GMT
Last-Modified: Sun, 27 Nov 2022 09:49:23 GMT
Server: nginx
Content-Length: 279
ocsp.sectigo.com/
200 OK 471 B IP
Hash 01afa847dd32f6a25f2ce6317bf1e5bb
180a7f43e5feb59d01e5a10e2f6ea82cb345121a
5acca38d8795a08161dedc2fb7fb3d919a144a8244a34f8ecdc3d5d916e15ff1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 26 Nov 2022 08:16:26 GMT
Expires: Sat, 03 Dec 2022 08:16:25 GMT
Etag: "180a7f43e5feb59d01e5a10e2f6ea82cb345121a"
Cache-Control: max-age=425737,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7712338bd909b503-OSL
myresourcestationkindergarten.weebly.com/uploads/1/1/9/5/119543891/short-vowel-a-e-i-o-u-booklet-1.jpg
200 OK 67 kB URL HTTP/1.1 myresourcestationkindergarten.weebly.com/uploads/1/1/9/5/119543891/short-vowel-a-e-i-o-u-booklet-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 618x800, components 1\012- data
Hash fc11bbb07440ac19dbfd5a54b140fa30
2c628e88edd2beae78d1c11fb0a78de89b37f919
4df42920fa202f5c251091c0e5bf459b1004c866604870ce76fa50541bf28220
GET /uploads/1/1/9/5/119543891/short-vowel-a-e-i-o-u-booklet-1.jpg HTTP/1.1
Host: myresourcestationkindergarten.weebly.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 28 Nov 2022 09:50:47 GMT
Content-Type: image/jpeg
Content-Length: 66576
Connection: keep-alive
Last-Modified: Mon, 17 Aug 2020 15:36:57 GMT
x-rgw-object-type: Normal
ETag: "fc11bbb07440ac19dbfd5a54b140fa30"
x-amz-request-id: tx00000000000003bf2977f-0063848477-c669cc6-sfo1
X-Storage-Bucket: z4df4
X-Storage-Object: 4df42920fa202f5c251091c0e5bf459b1004c866604870ce76fa50541bf28220
X-Host: blu47.sf2p.intern.weebly.net
Accept-Ranges: bytes, bytes
tse3.mm.bing.net/th?id=OIP.tiUsFAJWGL8Ah7edBDRopwHaKe&pid=Api
200 OK 58 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.tiUsFAJWGL8Ah7edBDRopwHaKe&pid=Api
IP
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x670, components 3\012- data
Hash 35930461a0914a89e7171e6077a75e7d
9700f6c7cf8967e10f250218962696c5fa262ee2
c523ccc256ad6d37ef2515a8d2ac3abe432fb0f4d2081f66784ec060ecbaa471
GET /th?id=OIP.tiUsFAJWGL8Ah7edBDRopwHaKe&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 58207
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 4060E5B5597D40EEA472EEECC4CE4617 Ref B: OSL30EDGE0210 Ref C: 2022-11-28T09:50:47Z
date: Mon, 28 Nov 2022 09:50:47 GMT
X-Firefox-Spdy: h2
en.islcollective.com/wuploads/preview_new/big_islcollective_worksheets_beginner_prea1_kindergarten_listening_reading_speaking_grammar_drills_oneonone_tutoring_mentori_128990617953c7ab923c76e1_37098125_1.jpg
404 Not Found 76 kB URL HTTP/2 en.islcollective.com/wuploads/preview_new/big_islcollective_worksheets_beginner_prea1_kindergarten_listening_reading_speaking_grammar_drills_oneonone_tutoring_mentori_128990617953c7ab923c76e1_37098125_1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (60011)
Hash 07ba235eca7919fff795aa42be7361b1
6634413ffe68a672e08e87af3c78b03a1ae5a60b
5d03d88af2cb3633325d65b55c3e6b9201d8b4182a96dc2d92d0a693a35e9275
GET /wuploads/preview_new/big_islcollective_worksheets_beginner_prea1_kindergarten_listening_reading_speaking_grammar_drills_oneonone_tutoring_mentori_128990617953c7ab923c76e1_37098125_1.jpg HTTP/1.1
Host: en.islcollective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
content-language: en
vary: Accept-Encoding
cf-cache-status: BYPASS
set-cookie: next-i18next=en; Path=/; Expires=Tue, 28 Nov 2023 09:50:47 GMT; SameSite=Strict
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CNXFCfdNcIr9XmszsFUjMPH9ubR1LEOMwCTL88XVW5Iu4WSe0CrkIiJqPQdDlIsNTFXvvHayT5oqtzokaabBfcYEZaqiBd%2FomDM19yzQjT5pXFD%2BLs28tDXX6skUq%2FRdmJTbGH1i"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77123389be28b517-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC-eviction-moratorium-012921.png
200 OK 73 kB URL HTTP/1.1 www.tn.gov/content/dam/tn/health/documents/healthy-places/healthy-homes/CDC-eviction-moratorium-012921.png
IP
File type PNG image data, 688 x 884, 8-bit/color RGB, non-interlaced\012- data
Hash 1c69c6f8cc9c8b04ae0e7663f570d7d5
7b579c2a0c154279fc5c45c8327e6b836c6f4a72
8525b29341cf531984c9660436efeb83d5b8742d7806fea1bd2f2e894ab4c44d
GET /content/dam/tn/health/documents/healthy-places/healthy-homes/CDC-eviction-moratorium-012921.png HTTP/1.1
Host: www.tn.gov
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Server: Apache
Strict-Transport-Security: max-age=63072000
X-Frame-Options: SAMEORIGIN, SAMEORIGIN
Content-Security-Policy: 'frame-ancestors' http://localhost:8100 https://*.tn.gov
X-Dispatcher: PROD_LW119.NORTH_Ext_Dispatcher_443
X-Content-Type-Options: nosniff, nosniff
Age: 0
Last-Modified: Wed, 03 Feb 2021 16:09:10 GMT
ETag: "11e2b-5ba70ceab7580"
Accept-Ranges: bytes
Content-Length: 73259
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
Set-Cookie: Session_ID=!yLcxT/PgN43f9gYg5yJI4XRsGkDHTkkZyZB0xdEqj11gjf+jU3kZH/HMROUh+mN58fNLcNxTT5C5ffc=; expires=Mon, 28-Nov-2022 10:00:47 GMT; path=/; Httponly; Secure
i0.wp.com/printableshub.com/wp-content/uploads/2021/03/long-vowels.jpg
200 OK 55 kB URL HTTP/2 i0.wp.com/printableshub.com/wp-content/uploads/2021/03/long-vowels.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 657x1082, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 894a6fd30fc7206e401f2a9b2c3892f7
ea6f9e8a8d8e2f5d89f3c368705f9b8ad834287d
dfa20e4405b6d9d20cf86a755d1c6fbf59e1e5d19a994e2e17ad04f1f4817201
GET /printableshub.com/wp-content/uploads/2021/03/long-vowels.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 28 Nov 2022 09:50:48 GMT
content-type: image/webp
content-length: 54794
last-modified: Mon, 28 Nov 2022 09:50:48 GMT
expires: Wed, 27 Nov 2024 21:50:48 GMT
cache-control: public, max-age=63115200
link: <http://printableshub.com/wp-content/uploads/2021/03/long-vowels.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "204dab0581869ba6"
vary: Accept
x-nc: MISS arn 5
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i1.wp.com/www.1989generationinitiative.org/j/2020/05/phonics-cvce-sound-it-out-kindergarten-first-grade-worksheets-for-making-amounts-of-money-692x923.jpg
400 Bad Request 12 kB URL HTTP/2 i1.wp.com/www.1989generationinitiative.org/j/2020/05/phonics-cvce-sound-it-out-kindergarten-first-grade-worksheets-for-making-amounts-of-money-692x923.jpg
IP
Hash ffb5cdd54595a278fc7304f3c6548ea0
e990838fffe053c6f7856db95881aff4a6077279
ec4ee74c9934083fa2dd3d73343cd5137bb959ca1c61c03841193fbf11c1bd2b
GET /www.1989generationinitiative.org/j/2020/05/phonics-cvce-sound-it-out-kindergarten-first-grade-worksheets-for-making-amounts-of-money-692x923.jpg HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 5
X-Firefox-Spdy: h2
cdn.teachercreated.com/covers/7701.png
200 OK 2.1 MB URL HTTP/1.1 cdn.teachercreated.com/covers/7701.png
IP
File type PNG image data, 1545 x 2000, 8-bit/color RGBA, non-interlaced\012- data
Size 2.1 MB (2089036 bytes)
Hash f85081545df3c20f6e19dea363d873a3
554779efcea62beea9cd38d2fe7def704399621b
19d1e1dd2e3b5373d20356f2c1c7aa5edfbf0d691aed405c3da325200f9cdb68
GET /covers/7701.png HTTP/1.1
Host: cdn.teachercreated.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Mon, 28 Nov 2022 09:50:47 GMT
Server: Apache
Last-Modified: Fri, 01 May 2015 21:40:10 GMT
Accept-Ranges: bytes
Content-Length: 2089036
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/png
en.islcollective.com/preview/201109/f/very-young-learners-short-vowels-test-fun-activities-games_10732_1.jpg
200 OK 176 kB URL HTTP/2 en.islcollective.com/preview/201109/f/very-young-learners-short-vowels-test-fun-activities-games_10732_1.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (59152)
Size 176 kB (176269 bytes)
Hash 1e54187c21a48bd4350a9edb2734bb95
04b1274aee0b232e8b88ab2399e27415cfcdc6ac
d99a499f0ff6932626dd8400e42f7409dfe748c482c4cb22ba8eb97b15a18bee
GET /preview/201109/f/very-young-learners-short-vowels-test-fun-activities-games_10732_1.jpg HTTP/1.1
Host: en.islcollective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
content-language: en
cache-control: private, no-cache, no-store, max-age=0, must-revalidate
vary: Accept-Encoding
cf-cache-status: BYPASS
set-cookie: next-i18next=en; Path=/; Expires=Tue, 28 Nov 2023 09:50:47 GMT; SameSite=Strict
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FBah9RtLWB%2FdCZZaZXrN4reVkbJrokKbDWt1XymvR%2F4xxwwfV0bfNFuMbsRPSuRyZoWj%2B0Gf2NQ6QuYSaDZ1EqEUtt%2FC1EfNzmNR4DcuQMtxoRdyvCYtbY13LQGHUWS6lBDDHME6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771233894d9db517-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Fjalla+One|Lato:400,400italic,700,700italic|Archivo+Narrow
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Fjalla+One|Lato:400,400italic,700,700italic|Archivo+Narrow
IP
GET /css?family=Fjalla+One|Lato:400,400italic,700,700italic|Archivo+Narrow HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 28 Nov 2022 09:50:42 GMT
date: Mon, 28 Nov 2022 09:50:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i0.wp.com/tse4.mm.bing.net/th?id=OIP.SzwnzfARo9i95y7-W27otQHaEl&pid=15.1
400 Bad Request 0 B URL HTTP/2 i0.wp.com/tse4.mm.bing.net/th?id=OIP.SzwnzfARo9i95y7-W27otQHaEl&pid=15.1
IP
GET /tse4.mm.bing.net/th?id=OIP.SzwnzfARo9i95y7-W27otQHaEl&pid=15.1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 400 Bad Request
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: text/html; charset=utf-8
x-nc: HIT arn 1
X-Firefox-Spdy: h2
i1.wp.com/www.losc.fr/sites/default/files/styles/losc_style_default/public/news/14811_0.jpg?itok=00j_XU3f
404 Not Found 0 B URL HTTP/2 i1.wp.com/www.losc.fr/sites/default/files/styles/losc_style_default/public/news/14811_0.jpg?itok=00j_XU3f
IP
GET /www.losc.fr/sites/default/files/styles/losc_style_default/public/news/14811_0.jpg?itok=00j_XU3f HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 6
X-Firefox-Spdy: h2
bloximages.newyork1.vip.townnews.com/telegraphherald.com/content/tncms/assets/v3/editorial/f/e9/fe914e30-8b10-11ea-8201-1f16facba431/5eab1a09b3ad6.image.png?resize=400%2C196
200 OK 0 B URL HTTP/2 bloximages.newyork1.vip.townnews.com/telegraphherald.com/content/tncms/assets/v3/editorial/f/e9/fe914e30-8b10-11ea-8201-1f16facba431/5eab1a09b3ad6.image.png?resize=400%2C196
IP
GET /telegraphherald.com/content/tncms/assets/v3/editorial/f/e9/fe914e30-8b10-11ea-8201-1f16facba431/5eab1a09b3ad6.image.png?resize=400%2C196 HTTP/1.1
Host: bloximages.newyork1.vip.townnews.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: image/png
last-modified: Thu, 30 Apr 2020 18:33:45 GMT
etag: "c70ba78814e595e15d85a77f8880294b"
strict-transport-security: max-age=604800
expires: Tue, 28 Nov 2023 09:50:47 GMT
cache-control: public, max-age=31536000
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-robots-tag: noarchive
x-vcache: MISS
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 77123389980cb50b-OSL
X-Firefox-Spdy: h2
delanja.com/1.js
301 Moved Permanently 0 B IP
GET /1.js HTTP/1.1
Host: delanja.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Mon, 28 Nov 2022 09:50:43 GMT
content-type: text/html; charset=UTF-8
location: https://pop.dojo.cc/1.js
pragma: no-cache
expires: Mon, 28 Nov 2022 10:50:42 GMT
cache-control: max-age=3600
x-redirect-by: redirection
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: BYPASS
set-cookie: PHPSESSID=t6rthgh3pnvaqfhad0l25k24m3; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qLeOgIQux32FfEJN8k%2Fm8TkGGkesuXMsVbVvu22pzYyKPk9wndEe9aOtvt18Eqlaf3FufyI9qplKCxxNMOZ3mn%2F1ikYAJ%2BT8fx6hYqLfqiqaj3wPWnIV1WUGx%2BJihw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712336bdb531c16-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png
403 Forbidden 0 B URL HTTP/2 i0.wp.com/m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png
IP
GET /m.media-amazon.com/images/S/aplus-media/vc/e4f9378b-e38c-4bc1-ab36-37ecfdfafa66.__CR0,0,970,600_PT0_SX970_V1___.png HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
server: nginx
date: Mon, 28 Nov 2022 09:50:42 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 8
X-Firefox-Spdy: h2
pop.dojo.cc/1.js
302 Found 0 B IP
Analyzer Verdict Alert fortinet Malware
GET /1.js HTTP/1.1
Host: pop.dojo.cc
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://finnhood.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Mon, 28 Nov 2022 09:50:43 GMT
content-type: text/html; charset=UTF-8
location: https://pop.dojo.cc/5648.js
cache-control: no-cache, private
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6JGtcwhAE%2BQqoWl5qMx60sod1l5os5AXTMjgq4nArk4PCzC02cnlfn8iksoD91gJd%2Fd%2BeiS45nsuzC1mwabr5LPmHlXbxCjaX6SPcchVRjXx77GfxWoY%2BNVRBYMnDw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7712336fce00b50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i1.wp.com/rentallease.com/wp-content/uploads/California-Three-Day-Notice-to-Quit.png
404 Not Found 0 B URL HTTP/2 i1.wp.com/rentallease.com/wp-content/uploads/California-Three-Day-Notice-to-Quit.png
IP
GET /rentallease.com/wp-content/uploads/California-Three-Day-Notice-to-Quit.png HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 28 Nov 2022 09:50:45 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 6
X-Firefox-Spdy: h2
i0.wp.com/en.islcollective.com/wuploads/preview_new/big_9923_cvc_words_medial_sounds_1.jpg
404 Not Found 0 B URL HTTP/2 i0.wp.com/en.islcollective.com/wuploads/preview_new/big_9923_cvc_words_medial_sounds_1.jpg
IP
GET /en.islcollective.com/wuploads/preview_new/big_9923_cvc_words_medial_sounds_1.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 4
X-Firefox-Spdy: h2
en.islcollective.com/wuploads/preview_new/big_22520_short_vowels_a_e_i_o_u_1.jpg
404 Not Found 0 B URL HTTP/2 en.islcollective.com/wuploads/preview_new/big_22520_short_vowels_a_e_i_o_u_1.jpg
IP
GET /wuploads/preview_new/big_22520_short_vowels_a_e_i_o_u_1.jpg HTTP/1.1
Host: en.islcollective.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Mon, 28 Nov 2022 09:50:47 GMT
content-type: text/html; charset=utf-8
x-powered-by: Next.js
content-language: en
vary: Accept-Encoding
cf-cache-status: BYPASS
set-cookie: next-i18next=en; Path=/; Expires=Tue, 28 Nov 2023 09:50:47 GMT; SameSite=Strict
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QfImd6ylVYLO81hHx%2BFnJI97tJw%2FeRweRGdavYU1Jti6qJq%2F0XTdy%2BOiGiht1Y1Fg5ehXylO55b%2B7Ebmwc9G1%2B%2Ft024D3ay7Zst98MIZjWf3OGBze0G54KajalwPpoa7r7XRxML4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 771233871affb517-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.lsnjlaw.org/Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-2.jpg
403 Forbidden 0 B URL HTTP/2 www.lsnjlaw.org/Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-2.jpg
IP
GET /Housing/Landlord-Tenant/Evictions/PublishingImages/Warrant-of-Removal-2.jpg HTTP/1.1
Host: www.lsnjlaw.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
vary: Accept-Encoding
strict-transport-security: max-age=15552000; preload
x-content-type-options: nosniff
server: cloudflare
cf-ray: 771233854e0509ab-ARN
content-encoding: gzip
X-Firefox-Spdy: h2
i1.wp.com/www.losc.fr/sites/default/files/styles/losc_style_default/public/news/150720_Partouche_02.jpg?itok=i_Ypccoj
404 Not Found 0 B URL HTTP/2 i1.wp.com/www.losc.fr/sites/default/files/styles/losc_style_default/public/news/150720_Partouche_02.jpg?itok=i_Ypccoj
IP
GET /www.losc.fr/sites/default/files/styles/losc_style_default/public/news/150720_Partouche_02.jpg?itok=i_Ypccoj HTTP/1.1
Host: i1.wp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://finnhood.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Mon, 28 Nov 2022 09:50:46 GMT
content-type: text/html; charset=utf-8
x-nc: MISS arn 6
X-Firefox-Spdy: h2
142.250.74.161
23.38.200.36
104.16.133.24
151.101.86.56
93.184.220.29