r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 5fe582397f3003b225cb9058e02c2190
68174a54a8f6c4de9247ccea2dcae3c9b76bdb9f
238a2ef5b61d56353d0a5e97ec3092b8f2792cde7cecf40e1a858f8c129d3a9d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "238A2EF5B61D56353D0A5E97EC3092B8F2792CDE7CECF40E1A858F8C129D3A9D"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17605
Expires: Fri, 27 Jan 2023 08:28:01 GMT
Date: Fri, 27 Jan 2023 03:34:36 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 58ffdcb539c3b250fdf31ed761627fc1
5b55b1522ef84c39b5c42f9bbfbc62b806c1269f
eb783cfa8c8544b0574b345abc0bf3c150979d4efce1a013f17b6cd48076fc63
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EB783CFA8C8544B0574B345ABC0BF3C150979D4EFCE1A013F17B6CD48076FC63"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5376
Expires: Fri, 27 Jan 2023 05:04:12 GMT
Date: Fri, 27 Jan 2023 03:34:36 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash dcd75ca6daca51c5e39d431468511793
07f76d3bf23d65c9110d810fa71a994e39e085d3
73672a816da4450fe2c938b08d7ae002d9ca29fdcbd3e29cc97084d826f8b459
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Backoff, Content-Length, Alert, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 27 Jan 2023 02:35:19 GMT
content-type: application/json
age: 3557
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 49049f3c92aad686cd7ff28ecd2a5a4f
9cc2bc9c055450dbc4fae93eabe4ef8509b3ff57
02cf421968192286bb174ff0e6c818a843c4eca61a02cd493e6f95bb58a37015
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "02CF421968192286BB174FF0E6C818A843C4ECA61A02CD493E6F95BB58A37015"
Last-Modified: Wed, 25 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2406
Expires: Fri, 27 Jan 2023 04:14:42 GMT
Date: Fri, 27 Jan 2023 03:34:36 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 3XalnUAWbZSGfoHijarkhj9atze9HKFOCs9IIcQxbU/PyxUb7LDMc1uxUNnkTQEcnAbSI22A7NM=
x-amz-request-id: C0MGWDQ08K4GEJ3B
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 27 Jan 2023 03:20:22 GMT
age: 854
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 27 Jan 2023 03:34:36 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
access-control-expose-headers: content-type
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
glambabes.org/babe/karolina-king
104.21.73.66200 OK 7.0 kB URL HTTP/1.1 glambabes.org/babe/karolina-king
IP 104.21.73.66:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (8047), with CRLF, LF line terminators
Hash 15614bbe5194d93fed19d299169693ee
cb6d8d8d2a4337f1bfcee91291329abb17f4f06e
79285a364d689eee926e0cc8b5d56cac23d51a40ba3bece364e9617aadbb7dde
Analyzer Verdict Alert fortinet Malware
GET /babe/karolina-king HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.22
Expires: Thu, 19 Nov 1981 08:52:00 GMT
Cache-Control: no-store, no-cache, must-revalidate
Pragma: no-cache
Link: <http://glambabes.org/wp-json/>; rel="https://api.w.org/", <http://glambabes.org/wp-json/wp/v2/tags/26>; rel="alternate"; type="application/json"
Set-Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; path=/
fappagec=1; expires=Fri, 27-Jan-2023 04:04:36 GMT; Max-Age=1800; path=/
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jorb93UqFR6fl6bSGpKhbVXp2OGdomyoh3znfGd8IiYIs4Ir6xWAAb6EsO6v6U6upKEFEOQu9T8j2YDyCfCV1yiGTKR%2Bt4nc5a0tj3kO5yH0%2BJFzUFPtjSPSL4I9Miih"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 78fe6efac8a6b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.11.1
142.250.74.42200 OK 33 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.11.1
IP 142.250.74.42:0
File type ASCII text, with very long lines (32086)
Hash 430e927c980ad4079de727fa59dd93f2
891aaada9a55a91292999f6d50fd300439905982
e8728df8617340bd8c10bc8d27d3a725a48871a269c850e8598689938ec6e2ed
GET /ajax/libs/jquery/1.11.1/jquery.min.js?ver=1.11.1 HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33434
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Jan 2023 02:22:11 GMT
Expires: Sat, 27 Jan 2024 02:22:11 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 4345
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 03:34:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
glambabes.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
104.21.73.66200 OK 655 B URL HTTP/1.1 glambabes.org/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js
IP 104.21.73.66:0
File type HTML document, ASCII text, with very long lines (1238)
Hash bc3ba461c8a309acf61b6d9c41cb6236
88482306ecc9258d5e9cbb9ba5314dab223a5db4
31331f1b1519882d2f2fb60367708fd56a7a1ec0bddd0554c635547179c7dc8f
GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 23 Jan 2023 11:05:52 GMT
ETag: W/"63ce6a10-4d7"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iob2cql5TkNkCoiRmFIBaQEbqwksVZiv92kwtGlnytBbqNIUfCT8KHZYKrqpXBVl9Sq87PCYiwEyucIBLBq79Qakl%2Fsu4g9tY0xPw61%2F0Ac5IZsqE0aoHn8qeV4GeXCV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6efe7d950b65-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sun, 29 Jan 2023 03:34:36 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
ads.exoclick.com/ads.js
205.185.216.42200 OK 974 B IP 205.185.216.42:0
File type ASCII text, with very long lines (2476), with no line terminators
Hash 92af51b4341a31ff621022c2a648c05e
3761459319128e7349981f338926abcd89ba58e0
6dd1f44f60b3c9584b3d9a54af5348c3fc36c7e13585f593f205ed42a0fa7e9f
GET /ads.js HTTP/1.1
Host: ads.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://glambabes.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Connection: Keep-Alive
Content-Encoding: gzip
Content-Length: 974
Content-Type: application/javascript
Accept-Ranges: bytes
Cache-Control: max-age=10800
Server: nginx
etag: W/"8f3c7314efe500b41baba9f571b"
X-HW: 1674790476.dop226.sk1.t,1674790476.cds210.sk1.shn,1674790476.dop226.sk1.t,1674790476.cds003.sk1.c
Access-Control-Allow-Origin: *, *
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 2ebcc7cd4c50e87a984668828c1e612e
f693d36335f333e3647f9fb2460e34dd73e17421
27f1d63422ccd02a6af514c2c0a36ac6f4e0d6f74ad6d9fc8c32e8ea487ffe15
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 03:34:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
glambabes.org/wp-content/themes/glambabes_theme/style.css
104.21.73.66200 OK 1.7 kB URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/style.css
IP 104.21.73.66:0
File type ASCII text, with CRLF line terminators
Hash fbadf88c114d908cc0ad9cf5eafc4058
9087ea4ae3428c4dd07cf098062b98c7530638e0
0754d8148fc1be52916a6fd2748d0446a96aac6507d2319a4c5a650d974c8a59
GET /wp-content/themes/glambabes_theme/style.css HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 04:15:43 GMT
ETag: W/"1c53-5265b3a25f9c0"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Tl0ZVEI0IXWJWJ0zmnJ08Whe6NYuKQ2C%2FaR%2BXJllmCM3AeWDGWW5Ocms9jqmQzH%2BJRlYCagowUpUgPEoGPPvbURmMJnvYwspsLQhQNwfw2ywJgxAsPGdAINtBbSl5C0G"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6efde9c2b505-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
glambabes.org/wp-content/themes/glambabes_theme/js/document.ready.js
104.21.73.66200 OK 1.2 kB URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/js/document.ready.js
IP 104.21.73.66:0
Hash d5114eb7e29ed90167196e1acc82939a
87f9d6d6f811267e3d5f08fc4e88ff5b681b0589
a2b97eb6b2e0835a67615452ff2c9a6f9b03c73b6040d212fa35a1aa59537c52
GET /wp-content/themes/glambabes_theme/js/document.ready.js HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 05:18:09 GMT
ETag: W/"d4b-5265c196d6640"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IBv80O2MYf1R8ZV7ltPzvnKTg5soriazgGnK7lN0%2BddT3maGrdVFXgwMVIhleq90O9u2%2F35GD1CxGfwMndpq9p3pxvFdBvNkL0RoZpC5X0PX1PX2twmkmTqCLp3DaWbQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6efe7e05b4fd-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
glambabes.org/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
104.21.73.66200 OK 11 kB URL HTTP/1.1 glambabes.org/wp-includes/css/dist/block-library/style.min.css?ver=5.9.5
IP 104.21.73.66:0
File type ASCII text, with very long lines (39791)
Hash 99a471b6af5080ea12cbce983a15ecbd
55c7ddf88d6b9991f19949eb7157ae808711a276
d8590ab9adb350dcd0102960d164241de39aae9722b660cc7a69e51113997e7a
GET /wp-includes/css/dist/block-library/style.min.css?ver=5.9.5 HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:36 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 05 Apr 2022 20:04:12 GMT
ETag: W/"145db-5dbedbfa63d43"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RvLpUuz3q%2B1TQCZGwWLbZi7hDa1eUlJo%2FbQiXrg8RGpl18K%2B9bkBnxvqYxx0YbbBABXXUqrvZ72pjZgwA9sLISBKXVccPhMhnVwf%2Fep5W2udn9A%2FNSr2%2F4OabRyS0O55"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6efdfcf3b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Last-Modified, ETag, Expires, Backoff, Content-Length, Cache-Control, Alert, Retry-After, Pragma
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 27 Jan 2023 02:49:02 GMT
age: 2734
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Muli:300,400
142.250.74.106200 OK 911 B URL HTTP/2 fonts.googleapis.com/css?family=Muli:300,400
IP 142.250.74.106:0
Hash ee9f7944994822d32023b7ea28ba50b1
76e9dd07842ab724b5f1c56032134a95994b0caa
a140636b87535978ee9bb6e109455e19e596ea3d261acd225eeadb983a024726
GET /css?family=Muli:300,400 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://glambabes.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 27 Jan 2023 03:34:36 GMT
date: Fri, 27 Jan 2023 03:34:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
glambabes.org/wp-content/themes/glambabes_theme/bootstrap/css/bootstrap.min.css
104.21.73.66200 OK 18 kB URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/bootstrap/css/bootstrap.min.css
IP 104.21.73.66:0
File type ASCII text, with very long lines (65177)
Hash 1c78b6b4f64a6c9ac3380ee8e71ff2cf
5ead990a54591f1faffac37303582cf39f8eb8be
06e7fb56379b8536f05a1abdf06c470c0595b3eafd28769cc18b9f0e37dfe7e1
GET /wp-content/themes/glambabes_theme/bootstrap/css/bootstrap.min.css HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/wp-content/themes/glambabes_theme/style.css
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 05:24:06 GMT
ETag: W/"1ab93-5265c2eb4c980"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LGFgUn7SMX4B3Pp3V2yVVrTolSkkEamgvc6VJpBJqdpoyde95u1XTGL57S%2BZO5yQdinl4FooIDIP3rRNVguVv%2B58Tkf%2BRCOPgMfhxEqUMnMuCHzXJd7u%2FDNNdi0T0TQJ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6eff5dc40b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
glambabes.org/wp-content/themes/glambabes_theme/images/logo.png
104.21.73.66200 OK 13 kB URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/images/logo.png
IP 104.21.73.66:0
File type PNG image data, 945 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash 24869f6c2411b82eee0772889ccc110c
cfc9190087cd9e098dc58222e9294af18b888928
884988013255067f5d741eeda247eb44769389c85f09deb451e97554cc1c4474
GET /wp-content/themes/glambabes_theme/images/logo.png HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/png
Content-Length: 13282
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 05:18:08 GMT
ETag: "33e2-5265c195e2400"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=c6SZcYaTmopvdfg5yzTrYenKoHRgiP0IUS8ZYvz%2BCfZvyH7PpkVa1F%2FO3jXRdQDLEe3JAqSNK%2Fb3TRrJ18xNPaVlkVahjIO8r2v7u3i2z74zafenEssP8MyXlPg6Xd30"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f02cb80b505-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 03:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 03:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
216.58.207.227200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 31196, version 1.0\012- data
Hash ea2343c7dccad57360fb611d67204445
b603d9e68bb1ed5e4b33d5e31121160cb4d23452
2a04078f9550381b5148170ceaf5b378a1b31ed8274c6d0094aeba6f599462cc
GET /s/muli/v28/7Auwp_0qiz-afTLGLQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://glambabes.org
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31196
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 10:06:01 GMT
expires: Fri, 26 Jan 2024 10:06:01 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 11 Jul 2022 20:43:05 GMT
content-type: font/woff2
age: 62916
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
34.214.101.241101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 34.214.101.241:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: q6TQfBPwfZRl7g9avqfXdg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: niHMkQBK7VBi9KgKxpyWaOH4bbQ=
syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477168&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.246200 OK 834 B URL HTTP/1.1 syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477168&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1702), with no line terminators
Hash 0187becbbc7bc9fa0c13a7bd2cf4fe42
c3aed5873cbe949f227af2fb0d17ed82ba1a1e4c
47608bc6b4b451b886e1647622df06cad441059fdec5e895f8b770d987a7a1df
GET /ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477168&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d3464d564c81.717886432477411055%22%3B%7D; expires=Sun, 26 Jan 2025 03:34:37 GMT; path=; domain=.exoclick.com;
impressions=oslmrxbrnxgxamcrbalrageicxbmsbcenxgxamcacmxcbgeimmccrbebnxgxamcsmlmxcgeioslmrxbmnxgxamccoexrcgeicxbmsbocnxgxamcmamcaogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamccrrssogeicxbmsboenxgxamcmabaclgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamccxobsegeislsaroornxgxamccolacbgeioslmroemnxgxamcmrmsrmgeioslmrxlsnxgxamcmamcaogeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcxxeselgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamcolcbesgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamcaeexaageimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcosmrlrgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamsmlmlelgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcxsmlxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamcsmlmxcgeimcclsxlbnxgxamcrbalrageimccloscanxgxamcacmxcbgeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamsmmrbmbgeimcclsxsbnxgxamcrbalrageiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamsbroemmgeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamcacmxcbgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamcosaceageimcclsxlanxgxamcosaceageiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbrlcbbcnxgxamcmeaoxbgxcceimaoobbebnxgxamcmemxlmgxcceimxelmbranxgxamcmebrebgxcceimeembesonxgxamcmxxoregxcceimeembescnxgxamcmxxoregxcceimeelaclonogxamcmxxmmmgxcceimmcmerrenxgxamcmxxmmmgxcceimeelaclanxgxamcmxxmmmgxcceimbabolacncgxamcmxacmsgxcceimbsblroanmgxamcmxacmcgxcceimxlbmosonogxamcmxacmcgxcceimcssmlrcnsgxamcmxacmcgxcceiceecmorsnxgxamcmxaascgxcceimbclracbnxgxamcmxaascgxcceixaoosscrnrgxamcmxaascgxcceimaoobseanxgxamcmxlcorgxcceimxlbmoconogxamcmomemegxcceimsrrbxmonxgxamcmsecoogxcceimeemcmaenxgxamcmsecoogxcceimxlbmoabnxgxamcmsecoogxcceimexxlrbenxgxamcmrolecgxcceimmomlxlanxgxamcmrrcmcgxcceimbsmmsconogxamcmrrcmrgxcceimsacexoonxgxamcmrmsrmgxcceimbroosxanogxamcmrmsrmgxcceimxlbalscnogxamcmrmsrmgxcceicbbmelocnxgxamcmrmsrmgxcceimbroosxonogxamcmrmsrbgxcceimbroosxenogxamcmrmsrbgxcceimxlbalsbnogxamcmrmsrbgxcceimbabolaansgxamcmaexsbgxcceimasseslbnxgxamcmaexsbgxcceimclsaoxbncgxamcmaexsbgxcceimoobcoabnxgxamcmaexsbgxcceimoobcobenxgxamcmaexsbgxcceislmbecesnxgxamcmaexsbgxcceimxlbmosanogxamcmaracagxcceimxeemblenxgxamcmaracagxcceimcssmlrensgxamcmaambxgxcceimxlbmoobnogxamcmamcaogxcceiccblrxrbnxgxamcmamcaogxcceiccblrxaanxgxamcmamcaogxcceimxeoxsbenxgxamcmamcaogxcceimcssmlronsgxamcmamcaogxcceimxeoxsacnxgxamcmamcaogxcceimxxrecsanxgxamcmamcasgxcceicloaxxacnxgxamcmamrobgxcceimaooblebnogxamcmamrolgxcceimbxacsacnxgxamcmamrolgxcceimxlbmxlenxgxamcmamrolgxcceicxmecmcanxgxamcmamrolgxcceimbamerlbnxgxamcmabaclgxcceialcaercenxgxamcmabaclgxcceimromobabnxgxamcmabaclgxcceimbrscsxcnxgxamcmalarbgxcceimxlbmxbbnxgxamcmmaoxbgxcceimbroosxcnxgxamcmmbcllgxcceimxlbmxlcnxgxamcmmbcllgxcceialrexeoonxgxamcmbxeclgxcceialrexexbnxgxamcmbxeclgxcceimbamerlcnxgxamcmbxeclgxcceimxlbmxlonxgxamcmbxeclgxcceimsbsocbcnxgxamcmbxeclgxcceimoobcomanxgxamcmbcbaogxcceixaoossalnxgxamcmbaxlcgxcceimeembecenxgxamcmbaxlcgxcceialaroxrcnxgxamcmbamxogxcceimbclraronxgxamcmlecmmgcbe; expires=Sat, 28 Jan 2023 03:34:37 GMT; path=/; domain=.exoclick.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477189&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.246200 OK 831 B URL HTTP/1.1 syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477189&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1694), with no line terminators
Hash 4a08fb3af60deb36d856f4fd2ee14de1
f23ec970199fa43925cb249600e406c87c04ec29
beba94c5ac813907b9ad9196704cbcc266a4532337f271eed213ec0e14b8775e
GET /ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477189&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A32%3A%2263d3464d5d2825.56909339805760664%22%3B%7D; expires=Sun, 26 Jan 2025 03:34:37 GMT; path=; domain=.exoclick.com;
impressions=oslmrxbrnxgxamcrbalrageicxbmsbcenxgxamcacmxcbgeimmccrbebnxgxamcsmlmxcgeioslmrxbmnxgxamccoexrcgeicxbmsbocnxgxamcmamcaogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamccrrssogeicxbmsboenxgxamcmabaclgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamccxobsegeislsaroornxgxamccolacbgeioslmroemnxgxamcmrmsrmgeioslmrxlsnxgxamcmamcaogeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcxxeselgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamcolcbesgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamcaeexaageimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcosmrlrgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamsmlmlelgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcxsmlxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamcsmlmxcgeimcclsxlbnxgxamcrbalrageimccloscanxgxamcacmxcbgeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamsmmrbmbgeimcclsxsbnxgxamcrbalrageiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamsbroemmgeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamcacmxcbgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamcosaceageimcclsxlanxgxamcosaceageiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbrlcbbcnxgxamcmeaoxbgxcceimaoobbebnxgxamcmemxlmgxcceimxelmbranxgxamcmebrebgxcceimeembesonxgxamcmxxoregxcceimeembescnxgxamcmxxoregxcceimeelaclonogxamcmxxmmmgxcceimmcmerrenxgxamcmxxmmmgxcceimeelaclanxgxamcmxxmmmgxcceimbabolacncgxamcmxacmsgxcceimbsblroanmgxamcmxacmcgxcceimxlbmosonogxamcmxacmcgxcceimcssmlrcnsgxamcmxacmcgxcceiceecmorsnxgxamcmxaascgxcceimbclracbnxgxamcmxaascgxcceixaoosscrnrgxamcmxaascgxcceimaoobseanxgxamcmxlcorgxcceimxlbmoconogxamcmomemegxcceimsrrbxmonxgxamcmsecoogxcceimeemcmaenxgxamcmsecoogxcceimxlbmoabnxgxamcmsecoogxcceimexxlrbenxgxamcmrolecgxcceimmomlxlanxgxamcmrrcmcgxcceimbsmmsconogxamcmrrcmrgxcceimsacexoonxgxamcmrmsrmgxcceimbroosxanogxamcmrmsrmgxcceimxlbalscnogxamcmrmsrmgxcceicbbmelocnxgxamcmrmsrmgxcceimbroosxonogxamcmrmsrbgxcceimbroosxenogxamcmrmsrbgxcceimxlbalsbnogxamcmrmsrbgxcceimbabolaansgxamcmaexsbgxcceimasseslbnxgxamcmaexsbgxcceimclsaoxbncgxamcmaexsbgxcceimoobcoabnxgxamcmaexsbgxcceimoobcobenxgxamcmaexsbgxcceislmbecesnxgxamcmaexsbgxcceimxlbmosanogxamcmaracagxcceimxeemblenxgxamcmaracagxcceimcssmlrensgxamcmaambxgxcceimxlbmoobnogxamcmamcaogxcceiccblrxrbnxgxamcmamcaogxcceiccblrxaanxgxamcmamcaogxcceimxeoxsbenxgxamcmamcaogxcceimcssmlronsgxamcmamcaogxcceimxeoxsacnxgxamcmamcaogxcceimxxrecsanxgxamcmamcasgxcceicloaxxacnxgxamcmamrobgxcceimaooblebnogxamcmamrolgxcceimbxacsacnxgxamcmamrolgxcceimxlbmxlenxgxamcmamrolgxcceicxmecmcanxgxamcmamrolgxcceimbamerlbnxgxamcmabaclgxcceialcaercenxgxamcmabaclgxcceimromobabnxgxamcmabaclgxcceimbrscsxcnxgxamcmalarbgxcceimxlbmxbbnxgxamcmmaoxbgxcceimbroosxcnxgxamcmmbcllgxcceimxlbmxlcnxgxamcmmbcllgxcceialrexeoonxgxamcmbxeclgxcceialrexexbnxgxamcmbxeclgxcceimbamerlcnxgxamcmbxeclgxcceimxlbmxlonxgxamcmbxeclgxcceimsbsocbcnxgxamcmbxeclgxcceimoobcomanxgxamcmbcbaogxcceixaoossalnxgxamcmbaxlcgxcceimeembecenxgxamcmbaxlcgxcceialaroxrcnxgxamcmbamxogxcceimbclraronxgxamcmlecmmgcbe; expires=Sat, 28 Jan 2023 03:34:37 GMT; path=/; domain=.exoclick.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash d9bf2793558044193d7e5d27708a9144
5a8f73462cfda6544cc3efe488854c3cd80bb0a7
e1db5ce5f130aa6d6a1bf18da60fee5c6bb76625a26aef0fee67702e7209ef7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 27 Jan 2023 03:34:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477232&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.246200 OK 833 B URL HTTP/1.1 syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477232&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1694), with no line terminators
Hash 2619cc1518546b3f29a89858f1c5e2e2
0a8bb2e2497d54e12110bef40a972000185c5b86
ca85829628047da46988246491402e8be130bc497ad5a372eae61dbbc5faa011
GET /ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477232&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d3464d62e666.584678441263835866%22%3B%7D; expires=Sun, 26 Jan 2025 03:34:37 GMT; path=; domain=.exoclick.com;
impressions=oslmrxbrnxgxamcrbalrageicxbmsbcenxgxamcacmxcbgeimmccrbebnxgxamcsmlmxcgeioslmrxbmnxgxamccoexrcgeicxbmsbocnxgxamcmamcaogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamccrrssogeicxbmsboenxgxamcmabaclgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamccxobsegeislsaroornxgxamccolacbgeioslmroemnxgxamcmrmsrmgeioslmrxlsnxgxamcmamcaogeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcxxeselgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamcolcbesgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamcaeexaageimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcosmrlrgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamsmlmlelgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcxsmlxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamcsmlmxcgeimcclsxlbnxgxamcrbalrageimccloscanxgxamcacmxcbgeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamsmmrbmbgeimcclsxsbnxgxamcrbalrageiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamsbroemmgeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamcacmxcbgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamcosaceageimcclsxlanxgxamcosaceageiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbrlcbbcnxgxamcmeaoxbgxcceimaoobbebnxgxamcmemxlmgxcceimxelmbranxgxamcmebrebgxcceimeembesonxgxamcmxxoregxcceimeembescnxgxamcmxxoregxcceimeelaclonogxamcmxxmmmgxcceimmcmerrenxgxamcmxxmmmgxcceimeelaclanxgxamcmxxmmmgxcceimbabolacncgxamcmxacmsgxcceimbsblroanmgxamcmxacmcgxcceimxlbmosonogxamcmxacmcgxcceimcssmlrcnsgxamcmxacmcgxcceiceecmorsnxgxamcmxaascgxcceimbclracbnogxamcmxaascgxcceixaoosscrnrgxamcmxaascgxcceimaoobseanxgxamcmxlcorgxcceimxlbmoconogxamcmomemegxcceimsrrbxmonxgxamcmsecoogxcceimeemcmaenxgxamcmsecoogxcceimxlbmoabnxgxamcmsecoogxcceimexxlrbenxgxamcmrolecgxcceimmomlxlanxgxamcmrrcmcgxcceimbsmmsconogxamcmrrcmrgxcceimsacexoonxgxamcmrmsrmgxcceimbroosxanogxamcmrmsrmgxcceimxlbalscnogxamcmrmsrmgxcceicbbmelocnxgxamcmrmsrmgxcceimbroosxonogxamcmrmsrbgxcceimbroosxenogxamcmrmsrbgxcceimxlbalsbnogxamcmrmsrbgxcceimbabolaansgxamcmaexsbgxcceimasseslbnxgxamcmaexsbgxcceimclsaoxbncgxamcmaexsbgxcceimoobcoabnxgxamcmaexsbgxcceimoobcobenxgxamcmaexsbgxcceislmbecesnxgxamcmaexsbgxcceimxlbmosanogxamcmaracagxcceimxeemblenxgxamcmaracagxcceimcssmlrensgxamcmaambxgxcceimxlbmoobnogxamcmamcaogxcceiccblrxrbnxgxamcmamcaogxcceiccblrxaanxgxamcmamcaogxcceimxeoxsbenxgxamcmamcaogxcceimcssmlronsgxamcmamcaogxcceimxeoxsacnxgxamcmamcaogxcceimxxrecsanxgxamcmamcasgxcceicloaxxacnxgxamcmamrobgxcceimaooblebnogxamcmamrolgxcceimbxacsacnxgxamcmamrolgxcceimxlbmxlenxgxamcmamrolgxcceicxmecmcanxgxamcmamrolgxcceimbamerlbnxgxamcmabaclgxcceialcaercenxgxamcmabaclgxcceimromobabnxgxamcmabaclgxcceimbrscsxcnxgxamcmalarbgxcceimxlbmxbbnxgxamcmmaoxbgxcceimbroosxcnxgxamcmmbcllgxcceimxlbmxlcnxgxamcmmbcllgxcceialrexeoonxgxamcmbxeclgxcceialrexexbnxgxamcmbxeclgxcceimbamerlcnxgxamcmbxeclgxcceimxlbmxlonxgxamcmbxeclgxcceimsbsocbcnxgxamcmbxeclgxcceimoobcomanxgxamcmbcbaogxcceixaoossalnxgxamcmbaxlcgxcceimeembecenxgxamcmbaxlcgxcceialaroxrcnxgxamcmbamxogxcceimbclraronxgxamcmlecmmgcbe; expires=Sat, 28 Jan 2023 03:34:37 GMT; path=/; domain=.exoclick.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477214&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
95.211.229.246200 OK 830 B URL HTTP/1.1 syndication.exoclick.com/ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477214&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22
IP 95.211.229.246:0
ASN #60781 LeaseWeb Netherlands B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (1694), with no line terminators
Hash 7939e48f9173702d66758284257af3e2
3dc9fce557860a43f747981907195327e4d5eb6e
8a44e47a40dd959b78973c6d7d7dcfaa6d922db2c4b81d7440bf552b27e185f3
GET /ads-iframe-display.php?idzone=1101946&type=300x250&p=http%3A//glambabes.org/babe/karolina-king&dt=1674790477214&sub=&tags=&cookieconsent=true&screen_resolution=1280x1024&el=%22 HTTP/1.1
Host: syndication.exoclick.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Cache-Control: no-cache, must-revalidate
Pragma: no-cache
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Set-Cookie: __uvt=a%3A1%3A%7Bi%3A0%3Bs%3A33%3A%2263d3464d665198.352485083963159113%22%3B%7D; expires=Sun, 26 Jan 2025 03:34:37 GMT; path=; domain=.exoclick.com;
impressions=oslmrxbrnxgxamcrbalrageicxbmsbcenxgxamcacmxcbgeimmccrbebnxgxamcsmlmxcgeioslmrxbmnxgxamccoexrcgeicxbmsbocnxgxamcmamcaogeimmccrlaonxgxamccxobsegeimmccrlacnxgxamccrrssogeicxbmsboenxgxamcmabaclgeioslmrxlrnxgxamslescrogeimmccrbxenxgxamccxobsegeislsaroornxgxamccolacbgeioslmroemnxgxamcmrmsrmgeioslmrxlsnxgxamcmamcaogeicmmsxrbonxgxamsoeamlmgeimmccrlaenxgxamcxxeselgeimmccrbeanxgxamcssabxegeicaocmrmanxgxamolcrcergeimcclsxronxgxamsscrmclgeimcclsxmenxgxamcolcbesgeialbserebnxgxamccrrssogeimcclsxaonxgxamsxsxllxgeicxbmsbxcnxgxamcaeexaageimrblxebenxgxamselmborgeimcclsxconxgxamsbremaegeirbabxabbnxgxamcosmrlrgeimcclsxacnxgxamsscrmclgeicmmsxaeenxgxamcmrmsrmgeialbsereanxgxamsoeabscgeicaxsscmbnxgxamsosomemgeimcclosconxgxamcxbemmxgeimcclsoeonxgxamsmlmlelgeimcclsxlcnxgxamcobecclgeimcclossbnxgxamcscxaesgeimcclsxscnxgxamsmoooeegeimcclsxlenxgxamcxsmlxbgeimaecseaenxgxamsmoooeegeimaecsxcbnxgxamsmoooeegeimcclsxoanxgxamcsmlmxcgeimcclsxlbnxgxamcrbalrageimccloscanxgxamcacmxcbgeiclsmrbsonxgxamsmmrbmbgeiclsmarsenxgxamsmmrbmbgeiccmmllebnxgxamsmmrbmbgeimcclsxsbnxgxamcrbalrageiclsmrbxonxgxamsbebceegeiclsmrbxcnxgxamsbebceegeiclsmarscnxgxamsbebceegeiccmmlmlcnxgxamsbebceegeiclsmarrenxgxamsbebceegeicaormbaonxgxamsbxxbsrgeicaormlrenxgxamcememscgeimcclsxlonxgxamcsmlmxcgeimrblelronxgxamsbremaegeimaecsxobnxgxamsbremaegeiclsmrbrcnxgxamsbroemmgeiclsmrraanxgxamsbroemmgeiclsmrmxbnxgxamsbroemmgeimccloscenxgxamsbmrxregeimcclsxxonxgxamslescrogeimrblelxbnxgxamslescrogeimcclsoeenxgxamcacmxcbgeimrblelmonxgxamcxcrasxgeimrbleloenxgxamcxcrasxgeiclsmrrmanxgxamcxabcxbgeiclsmrbeonxgxamcxabcxbgeiclsmrrcenxgxamcxabcxbgeiclsmrmxanxgxamcxabcxbgeiclsmrbxenxgxamcxabcxbgeiclsmaroonxgxamcxabcxbgeialbserxenxgxamcosraregeimcclsxsenxgxamcosaceageimcclsxlanxgxamcosaceageiccmmlleanxgxamccrrssogeicaormlabnxgxamcrllsmageicaormlconxgxamcrllsmageimbrlcbbcnxgxamcmeaoxbgxcceimaoobbebnxgxamcmemxlmgxcceimxelmbranxgxamcmebrebgxcceimeembesonxgxamcmxxoregxcceimeembescnxgxamcmxxoregxcceimeelaclonogxamcmxxmmmgxcceimmcmerrenxgxamcmxxmmmgxcceimeelaclanxgxamcmxxmmmgxcceimbabolacncgxamcmxacmsgxcceimbsblroanmgxamcmxacmcgxcceimxlbmosonogxamcmxacmcgxcceimcssmlrcnsgxamcmxacmcgxcceiceecmorsnxgxamcmxaascgxcceimbclracbnogxamcmxaascgxcceixaoosscrnrgxamcmxaascgxcceimaoobseanxgxamcmxlcorgxcceimxlbmoconogxamcmomemegxcceimsrrbxmonxgxamcmsecoogxcceimeemcmaenxgxamcmsecoogxcceimxlbmoabnxgxamcmsecoogxcceimexxlrbenxgxamcmrolecgxcceimmomlxlanxgxamcmrrcmcgxcceimbsmmsconogxamcmrrcmrgxcceimsacexoonxgxamcmrmsrmgxcceimbroosxanogxamcmrmsrmgxcceimxlbalscnogxamcmrmsrmgxcceicbbmelocnxgxamcmrmsrmgxcceimbroosxonogxamcmrmsrbgxcceimbroosxenogxamcmrmsrbgxcceimxlbalsbnogxamcmrmsrbgxcceimbabolaansgxamcmaexsbgxcceimasseslbnxgxamcmaexsbgxcceimclsaoxbncgxamcmaexsbgxcceimoobcoabnxgxamcmaexsbgxcceimoobcobenxgxamcmaexsbgxcceislmbecesnxgxamcmaexsbgxcceimxlbmosanogxamcmaracagxcceimxeemblenxgxamcmaracagxcceimcssmlrensgxamcmaambxgxcceimxlbmoobnogxamcmamcaogxcceiccblrxrbnxgxamcmamcaogxcceiccblrxaanxgxamcmamcaogxcceimxeoxsbenxgxamcmamcaogxcceimcssmlronsgxamcmamcaogxcceimxeoxsacnxgxamcmamcaogxcceimxxrecsanxgxamcmamcasgxcceicloaxxacnxgxamcmamrobgxcceimaooblebnogxamcmamrolgxcceimbxacsacnxgxamcmamrolgxcceimxlbmxlenxgxamcmamrolgxcceicxmecmcanxgxamcmamrolgxcceimbamerlbnxgxamcmabaclgxcceialcaercenxgxamcmabaclgxcceimromobabnxgxamcmabaclgxcceimbrscsxcnxgxamcmalarbgxcceimxlbmxbbnxgxamcmmaoxbgxcceimbroosxcnxgxamcmmbcllgxcceimxlbmxlcnxgxamcmmbcllgxcceialrexeoonxgxamcmbxeclgxcceialrexexbnxgxamcmbxeclgxcceimbamerlcnxgxamcmbxeclgxcceimxlbmxlonxgxamcmbxeclgxcceimsbsocbcnxgxamcmbxeclgxcceimoobcomanxgxamcmbcbaogxcceixaoossalnxgxamcmbaxlcgxcceimeembecenxgxamcmbaxlcgxcceialaroxrcnxgxamcmbamxogxcceimbclraronxgxamcmlecmmgcbe; expires=Sat, 28 Jan 2023 03:34:37 GMT; path=/; domain=.exoclick.com;
X-Robots-Tag: noindex, follow
Content-Encoding: gzip
s3t3d2y8.afcdn.net/library/426059/84f8dd393f551520a3cd45a137f1970e85013934.webp
185.76.9.16200 OK 11 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/426059/84f8dd393f551520a3cd45a137f1970e85013934.webp
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 781e132fad60d2980890b7e4a6831085
84f8dd393f551520a3cd45a137f1970e85013934
f97debd21b71487faa01ea7b2e321a3db2d10cb02bf6623d470f202ff664b1e1
GET /library/426059/84f8dd393f551520a3cd45a137f1970e85013934.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.exoclick.com/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/webp
Content-Length: 11058
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 17:01:22 GMT
ETag: "63c582e2-2b32"
Expires: Tue, 16 Jan 2024 17:03:42 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
X-Cache-OP: HIT
X-Accel-Expires: @1705437068
Server: CDN77-Turbo
X-77-NZT: AblMCQ0mMRD/QZINAA
X-77-NZT-Ray: c0a4cc285a4b6f864d46d363b6e89f1e
X-Cache: HIT
X-Age: 889409
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/426059/09cf15adac6ecc393f57e6e3f6f166b841badaeb.webp
185.76.9.16200 OK 12 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/426059/09cf15adac6ecc393f57e6e3f6f166b841badaeb.webp
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 300x250, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 542f0e6cf7dae639a51e01402590406f
09cf15adac6ecc393f57e6e3f6f166b841badaeb
34f4b55146e2ab032e373105deecab73ec379a6d04c4018ea15c0130b4a61f2e
GET /library/426059/09cf15adac6ecc393f57e6e3f6f166b841badaeb.webp HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.exoclick.com/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/webp
Content-Length: 12504
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 17:01:30 GMT
ETag: "63c582ea-30d8"
Expires: Tue, 16 Jan 2024 20:31:05 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
X-Cache-OP: HIT
X-Accel-Expires: @1705437072
Server: CDN77-Turbo
X-77-NZT: AblMCQ1jl7f/PZINAA
X-77-NZT-Ray: c0a4cc28783d70864d46d3632c41a31e
X-Cache: HIT
X-Age: 889405
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
s3t3d2y8.afcdn.net/library/426059/3863498298d4819424e690270d8e1a963ec03b28.jpg
185.76.9.16200 OK 29 kB URL HTTP/1.1 s3t3d2y8.afcdn.net/library/426059/3863498298d4819424e690270d8e1a963ec03b28.jpg
IP 185.76.9.16:0
ASN #60068 Datacamp Limited
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 300x250, components 3\012- data
Hash 374e072c3240931d731cfb8dcaf7316d
3863498298d4819424e690270d8e1a963ec03b28
21fd363f9bbeebb89d4c87eb091d801c95e691ba82da6c23a46303c99983a271
GET /library/426059/3863498298d4819424e690270d8e1a963ec03b28.jpg HTTP/1.1
Host: s3t3d2y8.afcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://syndication.exoclick.com/
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/jpeg
Content-Length: 28919
Connection: keep-alive
Last-Modified: Mon, 16 Jan 2023 17:01:30 GMT
ETag: "63c582ea-70f7"
Expires: Tue, 16 Jan 2024 17:05:14 GMT
Cache-Control: max-age=31536000
Access-Control-Allow-Origin: *
X-Robots-Tag: noindex, follow
X-Cache-OP: HIT
X-Accel-Expires: @1705437078
Server: CDN77-Turbo
X-77-NZT: AblMCQ3ZPB//N5INAA
X-77-NZT-Ray: c0a4cc281a3e74864d46d3636b7bd11e
X-Cache: HIT
X-Age: 889399
X-77-POP: stockholmSE
X-77-Cache: HIT
Accept-Ranges: bytes
glambabes.org/wp-content/gallery/cache/karolina-king-would-you-be-my-king_1_433x289_2239.jpg
104.21.73.66200 OK 38 kB URL HTTP/1.1 glambabes.org/wp-content/gallery/cache/karolina-king-would-you-be-my-king_1_433x289_2239.jpg
IP 104.21.73.66:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 92", baseline, precision 8, 433x289, components 3\012- data
Hash 2b9656755085a462c60a21443727082f
c3a83d552bd79df1bd42300908eec9a777953836
bf012f0bd0b84869fb5c5b2609554dc62808d9fd0002f004e9cf145a1ac49bdd
GET /wp-content/gallery/cache/karolina-king-would-you-be-my-king_1_433x289_2239.jpg HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/jpeg
Content-Length: 37864
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 04:13:21 GMT
ETag: "93e8-5265b31af3a40"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PpXfbD6uFx%2BofBNSfd0WMKkDrsKnScSbfvfigSVo7%2BU6txz0aSpalu2HZjSvLSPnNOTS49J2vz47YJBCMoANabENHn%2Ffs4eQMmbSnsDeJlJ3OHR64n6ExbNtVrrWdk7T"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f02cf59b4fd-OSL
alt-svc: h2=":443"; ma=60
glambabes.org/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
104.21.73.66200 OK 4.9 kB URL HTTP/1.1 glambabes.org/wp-includes/js/wp-emoji-release.min.js?ver=5.9.5
IP 104.21.73.66:0
File type ASCII text, with very long lines (15224)
Hash d66ee4d0f80f55eefdf6d78ef4e2cdeb
1db1a3b2c10f0290093cd0633d6125093087f579
5d03bf60e8ec2023519424193be2fb5a3bbf2746126e33fabfdf5d3c983985e7
GET /wp-includes/js/wp-emoji-release.min.js?ver=5.9.5 HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 15 Mar 2022 09:49:46 GMT
ETag: W/"4705-5da3eb78f4280"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aPrQXox02jAR8WYY6PsLxfdP5SPbi6CCZ3oGCkqz5aw56qG4G%2B2uaHi6EFLTx7q7MK0uNTeoop%2B6lpYxEfgew6NVO%2FCBGB7PdQEvfF%2BZhhqVFLytJAawnHZvQFLgSILl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f032ea10b65-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
glambabes.org/wp-content/gallery/cache/karolina-king-stripping-on-vacation_1_433x289_1843.jpg
104.21.73.66200 OK 44 kB URL HTTP/1.1 glambabes.org/wp-content/gallery/cache/karolina-king-stripping-on-vacation_1_433x289_1843.jpg
IP 104.21.73.66:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 92", baseline, precision 8, 433x289, components 3\012- data
Hash 425efc5e7de26c149200f9e6935f6162
128c9b5e15ca9ab875d7fe1c7d3b2fe41337116e
53ecd6590c8bf199476fc5bde9b2fe89064d4e28768a0aedfcfa209033ccd8c9
GET /wp-content/gallery/cache/karolina-king-stripping-on-vacation_1_433x289_1843.jpg HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/jpeg
Content-Length: 44296
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 04:13:21 GMT
ETag: "ad08-5265b31af3a40"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w41YGy3EV0hIKfumfjwJhre0SkCjyvRC5%2FFnGP1H2oMr9nR8F%2BAy%2FId3XXd2thA6sci05RDbIhJ3vGqwVMBRupbEIWZ0aqXI4jch9wJC9obePGy%2F81XfyKhePhPbmm5v"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f02cebbb515-OSL
alt-svc: h2=":443"; ma=60
glambabes.org/wp-content/themes/glambabes_theme/bootstrap/fonts/glyphicons-halflings-regular.woff
104.21.73.66200 OK 23 kB URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/bootstrap/fonts/glyphicons-halflings-regular.woff
IP 104.21.73.66:0
File type Web Open Font Format, TrueType, length 23320, version 1.0\012- data
Hash 68ed1dac06bf0409c18ae7bc62889170
22037a3455914e5662fa51a596677bdb329e2c5c
fc969dc1c6ff531abcf368089dcbaf5775133b0626ff56b52301a059fc0f9e1e
GET /wp-content/themes/glambabes_theme/bootstrap/fonts/glyphicons-halflings-regular.woff HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: http://glambabes.org/wp-content/themes/glambabes_theme/bootstrap/css/bootstrap.min.css
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: font/woff
Content-Length: 23320
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 05:24:08 GMT
ETag: "5b18-5265c2ed34e00"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MOHCG%2FruVp2mfa47NM%2FQCWx0ONOtEMXDJGpu15WJ%2FHSZjnxCAX8KSPvSRdyqobIXy4UCZNE0MlMtTDMwRuM15JZoNPKq2bkQU0lj5Z%2FMRPldagFcKCPR4OEf5DtUKhaQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f03ebf1b505-OSL
alt-svc: h2=":443"; ma=60
www.google-analytics.com/ga.js
216.239.38.178200 OK 17 kB URL HTTP/1.1 www.google-analytics.com/ga.js
IP 216.239.38.178:0
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Fri, 27 Jan 2023 01:34:48 GMT
Expires: Fri, 27 Jan 2023 03:34:48 GMT
Cache-Control: public, max-age=7200
Age: 7189
Last-Modified: Tue, 10 Jan 2023 21:29:14 GMT
Content-Type: text/javascript
www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=108328349&utmhn=glambabes.org&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Karolina%20King%20Babe%20-%20GlamBabes&utmhid=1767407943&utmr=-&utmp=%2Fbabe%2Fkarolina-king&utmht=1674790477650&utmac=UA-9289181-4&utmcc=__utma%3D74244420.1830897807.1674790478.1674790478.1674790478.1%3B%2B__utmz%3D74244420.1674790478.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1267103230&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
216.239.38.178200 OK 35 B URL HTTP/1.1 www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=108328349&utmhn=glambabes.org&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Karolina%20King%20Babe%20-%20GlamBabes&utmhid=1767407943&utmr=-&utmp=%2Fbabe%2Fkarolina-king&utmht=1674790477650&utmac=UA-9289181-4&utmcc=__utma%3D74244420.1830897807.1674790478.1674790478.1674790478.1%3B%2B__utmz%3D74244420.1674790478.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1267103230&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP 216.239.38.178:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 28d6814f309ea289f847c69cf91194c6
0f4e929dd5bb2564f7ab9c76338e04e292a42ace
8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=108328349&utmhn=glambabes.org&utmcs=UTF-8&utmsr=1280x1024&utmvp=1268x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=Karolina%20King%20Babe%20-%20GlamBabes&utmhid=1767407943&utmr=-&utmp=%2Fbabe%2Fkarolina-king&utmht=1674790477650&utmac=UA-9289181-4&utmcc=__utma%3D74244420.1830897807.1674790478.1674790478.1674790478.1%3B%2B__utmz%3D74244420.1674790478.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1267103230&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/
HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Fri, 27 Jan 2023 03:34:37 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35
glambabes.org/wp-content/themes/glambabes_theme/images/favicon.ico
104.21.73.66200 OK 154 B URL HTTP/1.1 glambabes.org/wp-content/themes/glambabes_theme/images/favicon.ico
IP 104.21.73.66:0
File type MS Windows icon resource - 1 icon, 16x16, 16 colors, 4 bits/pixel\012- data
Hash 7acb6a2d357f785eedc719cfaacd7594
426f2f56a4a9afd01940e1414f6a2cd33c309f60
e231cfa524739cdbeba79f56af79816cae71a078d791df743c112bc3b457cf91
GET /wp-content/themes/glambabes_theme/images/favicon.ico HTTP/1.1
Host: glambabes.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://glambabes.org/babe/karolina-king
Cookie: PHPSESSID=8j6sss4hqeqim3n3asobi0i368; fappagec=1
HTTP/1.1 200 OK
Date: Fri, 27 Jan 2023 03:34:37 GMT
Content-Type: image/vnd.microsoft.icon
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Dec 2015 05:18:08 GMT
ETag: W/"13e-5265c195e2400"
Cache-Control: max-age=86400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UOJt%2FLHZ%2BICjA7KwntbEMqHs5%2BRDlKALcTjamE%2F0MqVaCpyQRTxsUU9ebaHZzpUVJcpN6UfJMz1A90jpIHOm14RCbohOelMeU4YWJQVlitgAOeRE8%2FZxwpwunT1Kglpi"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 78fe6f05ffbdb515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Fri, 27 Jan 2023 06:21:25 GMT
Date: Fri, 27 Jan 2023 03:34:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Fri, 27 Jan 2023 06:21:25 GMT
Date: Fri, 27 Jan 2023 03:34:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Fri, 27 Jan 2023 06:21:25 GMT
Date: Fri, 27 Jan 2023 03:34:38 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 2e21811f62c077f45a93d7c3b543998d
3e890a73bb51d9dd1021d5339271aa40833ba258
c6b77371a50390fd68d44ff05e080f064c16c3095df8856b330ab0c6685cd3d1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C6B77371A50390FD68D44FF05E080F064C16C3095DF8856B330AB0C6685CD3D1"
Last-Modified: Thu, 26 Jan 2023 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10007
Expires: Fri, 27 Jan 2023 06:21:25 GMT
Date: Fri, 27 Jan 2023 03:34:38 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73f08a17-fd76-4130-b0e4-891c4a522ac4.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73f08a17-fd76-4130-b0e4-891c4a522ac4.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 540b084166fb1ad476a2b816848004ac
d10694af4ff8fbdf58896085611b4614a7353eda
b5ce9c01e4ac5a634ab858787c69fe4bf1f297df92b1258f0de6e1461329154b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73f08a17-fd76-4130-b0e4-891c4a522ac4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5567
x-amzn-requestid: 07346e30-a195-4e30-80ed-09bc2844c64d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fORCGGMGIAMFmWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf2eda-266bd30056d9d09c009ac086;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 01:05:30 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1S1gNaWbByU2Ufc46x0shFDogteGouCIQZ9xX2n2QAFa4AjsFozrRA==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 23:04:49 GMT
age: 16189
etag: "d10694af4ff8fbdf58896085611b4614a7353eda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48b381df-c118-4c63-bd08-99ac7a51ae39.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48b381df-c118-4c63-bd08-99ac7a51ae39.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 06130c82b0c12aabc0cc9f920114e1c5
c2137e969f6eb3790923e1bc30d4288105fd1296
70b50dc9f7e76372b557da8d5188e86b4307e3d855619c5974d7830ab187cec1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48b381df-c118-4c63-bd08-99ac7a51ae39.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11689
x-amzn-requestid: c72f71e2-e235-4611-826b-94b55c1a6a17
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fR1YDGl8oAMF2Lw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d09c33-3e8a69900c1267e102d2c2bc;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 03:04:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: tVR_sITOzOjgI7rbEZtkZxix7ndnSvWOM86XQWgT4mbLyjP_5cY0BQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 03:52:59 GMT
age: 85299
etag: "c2137e969f6eb3790923e1bc30d4288105fd1296"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 131eb343c5abd61939457d69bd371348
ffb2035cf64fc83f01db5c6f26ffa264b6aac95b
8486eb9dc6325018f8721bc6f37408f260b6e652b145280f2d778d860d3ec2d5
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb781854-72d1-4a71-a095-0416f886f570.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7538
x-amzn-requestid: 113924cc-a196-4dbd-91d9-68c213265afe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3fobF-ZoAMFjjA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61302-6b24941a642b22cf21e47dc0;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2P09wOtKPDHjxxAuzcLFMQJwmGN1zNJcH9LA6IJpeaGiaPVRF4y-TA==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 21:59:56 GMT
age: 20082
etag: "ffb2035cf64fc83f01db5c6f26ffa264b6aac95b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bad60daf652c598a06510ff955137b69
235bf4642e726bb6a303fe1b69238e2e973414cb
d655c5ac17274a30a89c31674e14dc9c1b6bc39bfff94db1c9ff0d8006bb673b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F47dfbf8f-d762-4550-83d7-2992a8c8fe66.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12508
x-amzn-requestid: 68787c38-72fe-4d8a-9521-aeb9efa56b05
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fBYWyGIHoAMF-LQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca075e-1ee9488d2dd0437728beac94;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 03:15:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2RZzMCqjRpKbm-g_6vAq1YV4LQ5RAB9HrkKCQx_ah4C6PnAzHZpKCg==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 18:49:04 GMT
age: 31534
etag: "235bf4642e726bb6a303fe1b69238e2e973414cb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg
34.120.237.76200 OK 7.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7a01352e094fda751e3227191ca74469
7ad63fabc3d52f7fc3f2f648d11edf7241e24368
8c06a16bab3b9c3130a8d8d91e52a01073b685d4831d1ba7129ac571bd7d0bc3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a181da5-9eaa-4508-9ba5-ce3527c87698.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7525
x-amzn-requestid: a7a05ec2-92ae-4813-b087-c4f32df1f7f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fB5k7GgkoAMF6eg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ca3c85-3c08d20509992a0d031213ad;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 07:02:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: PyRhsgixwVqdtaNructs84RGA6AYOgTbqE_lUViwIZCHFMosWEo_8w==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 09:59:33 GMT
age: 63305
etag: "7ad63fabc3d52f7fc3f2f648d11edf7241e24368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash e0fe44d9606e6a149a253423f312dfc5
78e442e8a9142311c25dafd01823a240f4acb0d6
9aad8938c1fda9641f95a4369f57ea57303a28e05f56e3bb1961e17cfbb123f4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F91a77b6d-ccc1-422b-8493-221c615accaf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13175
x-amzn-requestid: 14ccf28a-a84a-4903-9edc-7659096cb3ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fRxOCFrkIAMFt8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63d0958c-6a67f1aa65038439793808fd;Sampled=0
x-amzn-remapped-date: Wed, 25 Jan 2023 02:35:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 6Af7rqnIDAKAw6O0CYUv1epQ8VxFyXBjtAtpovQZJ72aKEymQu_O8Q==
via: 1.1 01c28b52813cd0e82f810c492808b142.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 26 Jan 2023 07:43:29 GMT
age: 71469
etag: "78e442e8a9142311c25dafd01823a240f4acb0d6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2