amabellgamelin.blogspot.com/search/label/Crossfit
200 OK 52 kB URL User Request GET HTTP/2 amabellgamelin.blogspot.com/search/label/Crossfit
IP
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (56101)
Hash 19b9b18af6c8921ce2e03f0122d64382
41c79f2d9780154cf526a53c40c0d5b87745e6c3
84906e1a321e3b94b9bab9e71236d19f1a93c627b94c2a5e8e0ec8d53b503416
GET /search/label/Crossfit HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 01 Dec 2023 17:57:05 GMT
date: Fri, 01 Dec 2023 17:57:05 GMT
cache-control: private, max-age=0
last-modified: Sat, 15 Apr 2023 20:10:17 GMT
etag: W/"d2cc9b7ab4420b6aad6ae64d0aec7094e4feacbc42fc1491077b448083546fe0"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 51495
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
amabellgamelin.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL GET HTTP/3 amabellgamelin.blogspot.com/js/cookienotice.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
Hash a705132a2174f88e196ec3610d68faa8
3bad57a48d973a678fec600d45933010f6edc659
068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/search/label/Crossfit
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Fri, 01 Dec 2023 17:57:06 GMT
expires: Fri, 08 Dec 2023 17:57:06 GMT
cache-control: public, max-age=604800
last-modified: Fri, 01 Dec 2023 14:54:48 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 7.4 kB URL GET HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type ASCII text, with very long lines (30837)
Hash 269550530cc127b6aa5a35925a7de6ce
512c7d79033e3028a9be61b540cf1a6870c896f8
799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:57:06 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: W/"269550530cc127b6aa5a35925a7de6ce"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 18:48:06
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: dd809c84048d5afa8e77adc8acacd559
cdn-cache: HIT
cf-cache-status: HIT
age: 827601
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ed35e96f025697-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
3.bp.blogspot.com/-yjORnqkapIw/WDZdUqg_q4I/AAAAAAAAAA8/okJt11jcbs4qnNclZ_C_Da2AN_Meu1dHQCEw/s1600/btn_close.gif
200 OK 436 B URL GET HTTP/2 3.bp.blogspot.com/-yjORnqkapIw/WDZdUqg_q4I/AAAAAAAAAA8/okJt11jcbs4qnNclZ_C_Da2AN_Meu1dHQCEw/s1600/btn_close.gif
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 52 x 15, 8-bit colormap, non-interlaced\012- data
Hash ce1aead7ab51d2e2b54039d110d5e982
e336c37f62f576227a14a967920c8bf35f6c384f
b71cf896a5f94a588a72d02e8a2946ba2379fe6ff40e02b556d2d6934f02d659
GET /-yjORnqkapIw/WDZdUqg_q4I/AAAAAAAAAA8/okJt11jcbs4qnNclZ_C_Da2AN_Meu1dHQCEw/s1600/btn_close.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="btn_close.png"
x-content-type-options: nosniff
server: fife
content-length: 436
x-xss-protection: 0
date: Fri, 01 Dec 2023 17:57:06 GMT
expires: Sat, 02 Dec 2023 17:57:06 GMT
cache-control: public, max-age=86400, no-transform
etag: "v11"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i
200 OK 1.3 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400i,700,700i
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type gzip compressed data, max compression\012- data
Hash 35812a3cc512ecbd94d8df9803642e4e
8d3db76105130c25134bddf45767c4b5c3f1b887
4cd215eba04554188d6c4c01fcf4cb6f993b39d40198700c3d55d6332337f908
GET /css?family=Open+Sans:400,400i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 01 Dec 2023 17:57:06 GMT
date: Fri, 01 Dec 2023 17:57:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-lw94K78L3C4/Wp9csVi0ulI/AAAAAAAAALA/c8SI7wEXpbEdLNDSPr5ydLuAOLPaJYUYACLcBGAs/s1600/cs.png
200 OK 248 kB URL GET HTTP/2 3.bp.blogspot.com/-lw94K78L3C4/Wp9csVi0ulI/AAAAAAAAALA/c8SI7wEXpbEdLNDSPr5ydLuAOLPaJYUYACLcBGAs/s1600/cs.png
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 572 x 669, 8-bit/color RGB, non-interlaced\012- data
Size 248 kB (248176 bytes)
Hash cac75c812d0d132c6bec9e714a8988d4
332e933712dda85d8a8285aa506ce551cce91087
42a00abe2949c03f3bea0dabeb4458641da46710202c613807e01f05b3d187c7
GET /-lw94K78L3C4/Wp9csVi0ulI/AAAAAAAAALA/c8SI7wEXpbEdLNDSPr5ydLuAOLPaJYUYACLcBGAs/s1600/cs.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="cs.png"
x-content-type-options: nosniff
server: fife
content-length: 248176
x-xss-protection: 0
date: Fri, 01 Dec 2023 17:57:06 GMT
expires: Sat, 02 Dec 2023 17:57:06 GMT
cache-control: public, max-age=86400, no-transform
etag: "vb1"
content-type: image/png
vary: Origin
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uzQRsR03xYH5Pkj8kmZUrKmqHGZd3qh5baUGIdCy55vck6PwYglBsG6LYvQKuI1HWLOVvOtVYyM7qv1Ye5iocy-nyZosQuzugh0iJsgngqoRR-SY_665vlblhRhIgTsQ_yYvCKDcygCz4R6L2qGDYHRsap1h8XrAdKs-lBk09z7sOggvEKBFTOMvG_p856EyG0YZ50wkEEIu8GjZMZFciUp_3HTvl62dUQs4V5naj2cMzT67SIZ7K4rDZtxWcbKrGC=w280
200 OK 18 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uzQRsR03xYH5Pkj8kmZUrKmqHGZd3qh5baUGIdCy55vck6PwYglBsG6LYvQKuI1HWLOVvOtVYyM7qv1Ye5iocy-nyZosQuzugh0iJsgngqoRR-SY_665vlblhRhIgTsQ_yYvCKDcygCz4R6L2qGDYHRsap1h8XrAdKs-lBk09z7sOggvEKBFTOMvG_p856EyG0YZ50wkEEIu8GjZMZFciUp_3HTvl62dUQs4V5naj2cMzT67SIZ7K4rDZtxWcbKrGC=w280
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 280x186, components 3\012- data
Hash 3e6adc9682fe8e29678b48cd1afa06a1
8a87a4d299cfa7c948b43e974dd67de79a9778a5
f4e347fdfff4a0340164c66f79c6d19aa415b60bb447a2dd057f1bbab9bacd60
GET /blogger_img_proxy/ALY8t1uzQRsR03xYH5Pkj8kmZUrKmqHGZd3qh5baUGIdCy55vck6PwYglBsG6LYvQKuI1HWLOVvOtVYyM7qv1Ye5iocy-nyZosQuzugh0iJsgngqoRR-SY_665vlblhRhIgTsQ_yYvCKDcygCz4R6L2qGDYHRsap1h8XrAdKs-lBk09z7sOggvEKBFTOMvG_p856EyG0YZ50wkEEIu8GjZMZFciUp_3HTvl62dUQs4V5naj2cMzT67SIZ7K4rDZtxWcbKrGC=w280 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Sat, 02 Dec 2023 17:57:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 17554
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vFPirE_EOfXRL_4Y2E9vObAJgY1FvD_9kSTleU4uSxQgl2Lby35Vnz930PJDYK97VAXus4Os6VxYofbB_XztZJP2ZuGNoTrkrPfOI5xjKOc4tUyK-f-2uB3Kfy0akxHq-vD5ZnDrldTikvh6JZXAsVxxBjxtT3SYZXcGYgKxenKL3TEs9r64wozWHl0RdBEXOSWpsgNvsV8TGj8s-DBmiebcgHW12ugjV1ihOUc1Y-nM3vQD64EF0EdTqkTMJW9H_SemTA4_nhCbE0=w100
404 Not Found 1.9 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1vFPirE_EOfXRL_4Y2E9vObAJgY1FvD_9kSTleU4uSxQgl2Lby35Vnz930PJDYK97VAXus4Os6VxYofbB_XztZJP2ZuGNoTrkrPfOI5xjKOc4tUyK-f-2uB3Kfy0akxHq-vD5ZnDrldTikvh6JZXAsVxxBjxtT3SYZXcGYgKxenKL3TEs9r64wozWHl0RdBEXOSWpsgNvsV8TGj8s-DBmiebcgHW12ugjV1ihOUc1Y-nM3vQD64EF0EdTqkTMJW9H_SemTA4_nhCbE0=w100
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash eae2bd778d335781c4ec4f4089262680
a42f7a1c7327701a5593319da61bcafef0f4436b
1a2d66aca4615f7269c211a9a68512deb60d3b05b95301e434651e0c4992e887
GET /blogger_img_proxy/ALY8t1vFPirE_EOfXRL_4Y2E9vObAJgY1FvD_9kSTleU4uSxQgl2Lby35Vnz930PJDYK97VAXus4Os6VxYofbB_XztZJP2ZuGNoTrkrPfOI5xjKOc4tUyK-f-2uB3Kfy0akxHq-vD5ZnDrldTikvh6JZXAsVxxBjxtT3SYZXcGYgKxenKL3TEs9r64wozWHl0RdBEXOSWpsgNvsV8TGj8s-DBmiebcgHW12ugjV1ihOUc1Y-nM3vQD64EF0EdTqkTMJW9H_SemTA4_nhCbE0=w100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 1860
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL GET HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (32077)
Hash 4f252523d4af0b478c810c2547a63e19
5a9dcfbef655a2668e78baebeaa8dc6f41d8dabb
668b046d12db350ccba6728890476b3efee53b2f42dbb84743e5e9f1ae0cc404
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Nov 2023 18:55:29 GMT
expires: Thu, 28 Nov 2024 18:55:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 169297
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/325989852-widgets.js
200 OK 59 kB URL GET HTTP/2 www.blogger.com/static/v1/widgets/325989852-widgets.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.blogger.com
Fingerprint4A:89:9B:E5:F1:54:0E:2D:0A:8E:40:A8:27:DF:2E:6B:7F:74:51:90
ValidityMon, 23 Oct 2023 11:17:52 GMT - Mon, 15 Jan 2024 11:17:51 GMT
File type ASCII text, with very long lines (2258)
Hash 2aaaea7286ee481cbc12cfd76e10c0cf
6e8576cb84ac125faa0bc0a5fe5508166cc4eed8
4bfa00cdbc7a40f5dad3dfc3a21dada224e61e358e78d7b262bab098bccbc580
GET /static/v1/widgets/325989852-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 59316
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 14:08:07 GMT
expires: Fri, 29 Nov 2024 14:08:07 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Nov 2023 05:57:17 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 100139
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uJgl2nqYSc6NxzAAB19Ow4GRjMnwwhr8w0Jc1Tm9P25jrDH33iIzh61x83NGy7BtU3O5o3qxfs4w3688O_N8Bir8GN-Y-sqN5iwT4ePX4-z2dFPF0QJI9BwfYUCqsYqme1dXjDWHGr_jd1FlGm-2y1nwLrW3vmjFX3nQ=w100
200 OK 3.2 kB URL GET HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1uJgl2nqYSc6NxzAAB19Ow4GRjMnwwhr8w0Jc1Tm9P25jrDH33iIzh61x83NGy7BtU3O5o3qxfs4w3688O_N8Bir8GN-Y-sqN5iwT4ePX4-z2dFPF0QJI9BwfYUCqsYqme1dXjDWHGr_jd1FlGm-2y1nwLrW3vmjFX3nQ=w100
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 100x65, components 3\012- data
Hash 48f26b8b274d4487d53114813d0f9146
7d8ebf494c3b9e535a5b77fffc5d4220ca3dc74b
9802ba0944110eb1f159feb34fb56ac9254f22c386b255469befc1e0064efede
GET /blogger_img_proxy/ALY8t1uJgl2nqYSc6NxzAAB19Ow4GRjMnwwhr8w0Jc1Tm9P25jrDH33iIzh61x83NGy7BtU3O5o3qxfs4w3688O_N8Bir8GN-Y-sqN5iwT4ePX4-z2dFPF0QJI9BwfYUCqsYqme1dXjDWHGr_jd1FlGm-2y1nwLrW3vmjFX3nQ=w100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
expires: Sat, 02 Dec 2023 17:57:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 3198
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1twCFVgITO3kCGGkkMD7XVj4XsCGSqz86jZHD9KDB40u6QyjCy3uj50Q-p4kuWNaPSLqFVR2GWkbZ0t3MfJL9Gpzw2eA-EXtGseKDKzL_hYvtdK91R8AEM0eF4P4C_HtWPfRKhnorUhYWPcRisqfg=w280
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1twCFVgITO3kCGGkkMD7XVj4XsCGSqz86jZHD9KDB40u6QyjCy3uj50Q-p4kuWNaPSLqFVR2GWkbZ0t3MfJL9Gpzw2eA-EXtGseKDKzL_hYvtdK91R8AEM0eF4P4C_HtWPfRKhnorUhYWPcRisqfg=w280
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash c725ce3ec62bacc029e976912018bfbb
5b8d038d4beffd54ab3aeb41fa9435c1f8348ec6
ddafdcf3cf454fc6b41de203598b54d7e5c729f75074280ef325b8da1a86a171
GET /blogger_img_proxy/ALY8t1twCFVgITO3kCGGkkMD7XVj4XsCGSqz86jZHD9KDB40u6QyjCy3uj50Q-p4kuWNaPSLqFVR2GWkbZ0t3MfJL9Gpzw2eA-EXtGseKDKzL_hYvtdK91R8AEM0eF4P4C_HtWPfRKhnorUhYWPcRisqfg=w280 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 1738
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-MFUppcePrbk/Uy-_xwsRmaI/AAAAAAAAIt4/PQOTei_whI4/w100/brs49-rq.png
200 OK 16 kB URL GET HTTP/2 4.bp.blogspot.com/-MFUppcePrbk/Uy-_xwsRmaI/AAAAAAAAIt4/PQOTei_whI4/w100/brs49-rq.png
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 100 x 68, 8-bit/color RGB, non-interlaced\012- data
Hash cdcd77f188321f63cb60c5fd4a9e4a82
de6180b308e8ab9bbc58d53c2227c93072844140
11d6d0082e1395875683399077648bda7e56804e9638c5cc9ec9d22471547550
GET /-MFUppcePrbk/Uy-_xwsRmaI/AAAAAAAAIt4/PQOTei_whI4/w100/brs49-rq.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v22df"
expires: Sat, 02 Dec 2023 17:57:06 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="brs49-rq.png"
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 16189
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tU2S1-sDJVOGoSse9tT-XbARVorJEm5pKobz59K6hFmobFWry7jq_rhLcxRKT4Eceeu-OF5eUtElnAkilahlTaZyz9plZE--K3VPk7W_adMAOkEGGQ6nCQVYmbXZ-lNi5k9AoQ9e-Vh5QlEQH3gPX9Bw=w100
404 Not Found 1.7 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1tU2S1-sDJVOGoSse9tT-XbARVorJEm5pKobz59K6hFmobFWry7jq_rhLcxRKT4Eceeu-OF5eUtElnAkilahlTaZyz9plZE--K3VPk7W_adMAOkEGGQ6nCQVYmbXZ-lNi5k9AoQ9e-Vh5QlEQH3gPX9Bw=w100
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 6cb536f922ab45cc02593bd25be5ce96
3b36d9b309a2261768398a26426de89860bf6d2e
7760c6dafb739e6fbf08411af9c615c8becf360420e94bfd6582e2a16b052d1c
GET /blogger_img_proxy/ALY8t1tU2S1-sDJVOGoSse9tT-XbARVorJEm5pKobz59K6hFmobFWry7jq_rhLcxRKT4Eceeu-OF5eUtElnAkilahlTaZyz9plZE--K3VPk7W_adMAOkEGGQ6nCQVYmbXZ-lNi5k9AoQ9e-Vh5QlEQH3gPX9Bw=w100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:06 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pl15416977.passtechusa.com/fa/ef/ab/faefab53a3c6a8b843aabc1fbff50729.js
200 OK 23 kB URL GET HTTP/1.1 pl15416977.passtechusa.com/fa/ef/ab/faefab53a3c6a8b843aabc1fbff50729.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpasstechusa.com
FingerprintF4:5F:CD:11:B9:E4:E0:B6:E3:01:2A:A2:FB:0E:11:26:44:B4:D0:9D
ValidityFri, 13 Oct 2023 07:12:41 GMT - Thu, 11 Jan 2024 07:12:40 GMT
File type ASCII text, with very long lines (59704), with no line terminators
Hash 1af343f4e9e2e91aa5d1a1e1b9487c8f
35b9e70c9a137844b9e6f8ac3da8a43c1002b924
0d532e1f779262a82a858654aa4d74cde6fb10ae847e829164f8122ba41c49c5
GET /fa/ef/ab/faefab53a3c6a8b843aabc1fbff50729.js HTTP/1.1
Host: pl15416977.passtechusa.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 17:57:07 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ffe0efcfd13fb5fe9f99ce37f8a84827
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
proftrafficcounter.com/stats
200 OK 40 B URL GET HTTP/2 proftrafficcounter.com/stats
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerAmazon
Subjectproftrafficcounter.com
FingerprintE3:9F:79:6F:80:C0:BF:F8:C4:EB:45:F3:E9:0F:A7:41:F6:0C:05:E6
ValidityTue, 21 Nov 2023 00:00:00 GMT - Thu, 19 Dec 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 248d113adcc3929d7f59c28cfd6e60a2
92167e36bb3f97f6b6d9cde84e44cbc15d54af37
550ccd652b5f5f8c91324b06fe24e44387bb74f13ddab4c6262ad32667807675
GET /stats HTTP/1.1
Host: proftrafficcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://amabellgamelin.blogspot.com
vary: Origin
access-control-allow-credentials: true
set-cookie: uid_id2=ee5f95c0-600e-4836-a878-db85ad9412e3:2:1; expires=Mon, 28 Nov 2033 17:57:07 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
pushsar.com/zone?pub=0&zone_id=3260284&is_mobile=false&domain=amabellgamelin.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
200 OK 911 B URL GET HTTP/2 pushsar.com/zone?pub=0&zone_id=3260284&is_mobile=false&domain=amabellgamelin.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.471
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type JSON data\012- , ASCII text, with very long lines (910)
Hash 81c70e9ea64392fface8fc7394cc20b7
10e744448bf80fc4598f029bd69e053de25b5060
c5d06c9362699c03710a81e92d499ce65ccacdeae5565b76d9c2ec03d64e5eef
GET /zone?pub=0&zone_id=3260284&is_mobile=false&domain=amabellgamelin.blogspot.com&var=&ymid=&var_3=&tg=0&sw=3.1.471 HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/json; charset=utf-8
content-length: 911
x-trace-id: ba79d95757c88e6c1d0524b726ba0050
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-KZVXZJS
200 OK 53 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-KZVXZJS
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (2213)
Hash 8e9ee24513f7e45a46e90583b5630d3a
340019efcd6dd4b3948b75c52e15d22f785f7a57
b8fefaa70bd00e1b2ccf97f0f36facd07b2b73914796123df3d7bf60d288c5ad
GET /gtm.js?id=GTM-KZVXZJS HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 01 Dec 2023 17:57:07 GMT
expires: Fri, 01 Dec 2023 17:57:07 GMT
cache-control: private, max-age=900
last-modified: Fri, 01 Dec 2023 17:18:21 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 53221
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 132969
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
200 OK 77 kB URL GET HTTP/3 stackpath.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectbootstrapcdn.com
Fingerprint34:BC:91:5F:B9:EC:32:2C:D9:73:C7:88:C3:6C:FB:77:E7:70:8D:04
ValidityThu, 30 Nov 2023 00:15:17 GMT - Wed, 28 Feb 2024 00:15:16 GMT
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://stackpath.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: font/woff2
content-length: 77160
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "af7ae505a9eed503f8b8e6982036873e"
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 10/31/2023 19:08:24
cdn-proxyver: 1.04
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 752
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: aa67ac03eeba513a36734ff273b289cf
cdn-cache: HIT
cf-cache-status: MISS
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 82ed35f12e49b521-OSL
alt-svc: h3=":443"; ma=86400
fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 48432, version 1.0\012- data
Hash e2d74c5e631bc53a7240bbfe4be99c8f
eb513857bb01cc4f7249067fc7e969bef415fc90
9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
GET /s/opensans/v36/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 48432
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:00:58 GMT
expires: Fri, 29 Nov 2024 05:00:58 GMT
cache-control: public, max-age=31536000
age: 132969
last-modified: Thu, 14 Sep 2023 00:40:31 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pushsar.com/custom
200 OK 0 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /custom HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
pushsar.com/custom
200 OK 39 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Content-Type: application/json
Content-Length: 408
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 70c5ca53a7bf2767d546e5f41be23c42
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
marecreateddew.com/pixel/purst?dl=0&th=0&sc=0&rs=2491&rd=2491&fd=1135&bv=23.11.v.9&tmpl=70
200 OK 0 B URL GET HTTP/1.1 marecreateddew.com/pixel/purst?dl=0&th=0&sc=0&rs=2491&rd=2491&fd=1135&bv=23.11.v.9&tmpl=70
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectmarecreateddew.com
Fingerprint1D:7B:54:E8:A4:32:C5:E0:0A:30:19:B9:B6:09:AD:16:0D:0B:D0:F9
ValidityTue, 28 Nov 2023 10:33:17 GMT - Mon, 26 Feb 2024 10:33:16 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2491&rd=2491&fd=1135&bv=23.11.v.9&tmpl=70 HTTP/1.1
Host: marecreateddew.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 17:57:07 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
amunfezanttor.com/event
200 OK 0 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
OPTIONS /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: text/plain; charset=utf-8
content-length: 0
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: DNT,X-Mx-ReqToken,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Authorization-Token,X-Oaid
access-control-max-age: 86400
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash ee415fe4ea2af0c72f6b52aa9a6e8709
8c66a01a90030fdb247ef155fc6b36a4426c9ebd
816a145753ec16c8ea26a82e52266a47019df7de14c1d6cb4cd9525af662e916
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Content-Type: application/json
Content-Length: 533
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100
404 Not Found 1.8 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash aae2a96d60d9a5c61e6d7ee9660e0ade
c500fe72c39f13513f24564fc2602b729ec30277
0bbe08c3dbb214fae89f4a4d8a797a812aed94ba740cb1d76e16f50a610ed676
GET /blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:07 GMT
server: fife
content-length: 1839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
p79283.clksite.com/adServe/banners?tid=79283_127088_20
301 Moved Permanently 162 B URL GET HTTP/2 p79283.clksite.com/adServe/banners?tid=79283_127088_20
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.clksite.com
FingerprintAD:C1:F1:97:5B:0A:1F:3F:AF:D0:CB:12:64:9E:92:45:32:78:FE:18
ValiditySun, 15 Oct 2023 00:00:00 GMT - Sun, 27 Oct 2024 23:59:59 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /adServe/banners?tid=79283_127088_20 HTTP/1.1
Host: p79283.clksite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: text/html
content-length: 162
location: https://myckdom.com/adServe/banners?tid=79283_127088_20
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?pub=0&userId=90501de4b32446c595e0af09d12eb9ab&zoneId=3260284&checkDuplicate=true&ymid=&var=
200 OK 65 B URL GET HTTP/2 my.rtmark.net/gid.js?pub=0&userId=90501de4b32446c595e0af09d12eb9ab&zoneId=3260284&checkDuplicate=true&ymid=&var=
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectrtmark.net
FingerprintE8:81:4E:79:89:89:BE:CE:75:1F:E0:2A:60:54:8A:A4:11:2E:F7:42
ValiditySat, 07 Oct 2023 15:22:00 GMT - Fri, 05 Jan 2024 15:21:59 GMT
File type JSON data\012- , ASCII text
Hash 47c6bd6e14a7995f9d8ea8dd165f70d4
a2f54709f08b3a6aad3724bb31095d372337d442
dd79e53a01bab241d809406fa8d116b785120a1932c4e664fb081d5220999148
GET /gid.js?pub=0&userId=90501de4b32446c595e0af09d12eb9ab&zoneId=3260284&checkDuplicate=true&ymid=&var= HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=90501de4b32446c595e0af09d12eb9ab; expires=Sat, 30 Nov 2024 17:57:07 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
amunfezanttor.com/event
200 OK 94 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectamunfezanttor.com
Fingerprint94:5D:BD:F9:F6:55:6B:83:55:25:90:4A:5F:E4:CF:19:5E:6B:A2:51
ValidityWed, 22 Nov 2023 20:33:33 GMT - Tue, 20 Feb 2024 20:33:32 GMT
File type JSON data\012- , ASCII text
Hash 13f3cfc989d3102faff912ff67011e02
4974e1787030ae4962504d1c26c2f5678bf6e7c2
88e1dbacf59dcae1423cfd9e77138befcec6cc82304a01d5d2bdb9612ed05800
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
POST /event HTTP/1.1
Host: amunfezanttor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Content-Type: application/json
Content-Length: 533
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/json; charset=utf-8
content-length: 94
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
myckdom.com/adServe/banners?tid=79283_127088_20
403 Forbidden 2.2 kB URL GET HTTP/2 myckdom.com/adServe/banners?tid=79283_127088_20
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.myckdom.com
FingerprintC3:7B:F3:48:A1:46:69:95:EE:19:75:CE:1A:EA:F9:AD:EF:C7:25:77
ValidityMon, 20 Mar 2023 00:00:00 GMT - Wed, 20 Mar 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash 01dc85f6b934ffdb51a8742e6a813655
8e518072b9b114195f8131d05af5897f2f67a46d
bb5bfc241116fc46ee3662b660850981459237fd7f57f4528bf1054cf8889aa8
GET /adServe/banners?tid=79283_127088_20 HTTP/1.1
Host: myckdom.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 403 Forbidden
server: nginx
date: Fri, 01 Dec 2023 17:57:08 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
cache-control: no-cache
pragma: no-cache
expires: Thu, 01 Jan 1970 00:00:00 GMT
content-language: en
content-encoding: gzip
X-Firefox-Spdy: h2
pushsar.com/pfe/current/defaultSkin.min.js
200 OK 21 kB URL GET HTTP/2 pushsar.com/pfe/current/defaultSkin.min.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type gzip compressed data, max speed, from Unix\012- data
Hash 2844d62211b97dece63f85d328430ee6
80523f3496bab1292853574382de98d65e489e96
52a8366ba98705d8f624a45278b7a363323e0a0cda4a09d3ccba18f4463ce7fa
GET /pfe/current/defaultSkin.min.js HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-df63"
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100
404 Not Found 1.8 kB URL GET HTTP/3 lh3.googleusercontent.com/blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash aae2a96d60d9a5c61e6d7ee9660e0ade
c500fe72c39f13513f24564fc2602b729ec30277
0bbe08c3dbb214fae89f4a4d8a797a812aed94ba740cb1d76e16f50a610ed676
GET /blogger_img_proxy/ALY8t1u4WWZaLVLZlRRyy837_j3XMgfbWUqmhMDfnavBXUCH1BQhI0aeBQchALZUPTAX2oPIgcvPHYLLM7kfDwGzEdkWHoz3t5IM2rHmgy0wleflRvNFetopV_k04udNxPb2jEYcYM2A7A-wtYPKpaYwW_nPMfx0-ERrHiRYVEii48KGMQbl7eZPM-yQieeDGgoq7fhW3akGO3iry5GwddHYIUcgaZorfI9YaDXSjsaQXXApYOvVNZNuV0-VWq0=w100 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 01 Dec 2023 17:57:08 GMT
server: fife
content-length: 1839
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
amabellgamelin.blogspot.com/feeds/posts/summary/-/https://amabellgamelin.blogspot.com/search/label/?alt=json-in-script&callback=dataFeed&max-results=1
400 Bad Request 193 B URL GET HTTP/3 amabellgamelin.blogspot.com/feeds/posts/summary/-/https://amabellgamelin.blogspot.com/search/label/?alt=json-in-script&callback=dataFeed&max-results=1
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 83b482393f028e6de91b032e7fae746b
50bad14cd7b4602d7b9f1ef6d769288588594fc8
031cbc91f964c96aa1975380c3bd66f5fe254439f3281bf0e06bc385c3912aa2
GET /feeds/posts/summary/-/https://amabellgamelin.blogspot.com/search/label/?alt=json-in-script&callback=dataFeed&max-results=1 HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/search/label/Crossfit
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ee5f95c0-600e-4836-a878-db85ad9412e3%3A2%3A1; pp_main_faefab53a3c6a8b843aabc1fbff50729=1
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 400 Bad Request
cross-origin-resource-policy: cross-origin
content-type: text/html; charset=UTF-8
date: Fri, 01 Dec 2023 17:57:09 GMT
server: Blogger Render Server 1.0
content-length: 193
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 04:57:34 GMT
expires: Fri, 29 Nov 2024 04:57:34 GMT
cache-control: public, max-age=31536000
age: 133175
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pushsar.com/custom
200 OK 39 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Content-Type: application/json
Content-Length: 409
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: de561474f8562bc44c01da2714237c28
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
pushsar.com/custom
200 OK 39 B IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type JSON data\012- , ASCII text
Hash 058b158c2be925f556454ef762d93538
cc6fc563b4b6baee880fdbc7fcfaa134978e33c9
ff752c1c79bb2c0347c5a8b7f069fa2772047324dbbadf77d21cec4b26ee3881
POST /custom HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Content-Type: application/json
Content-Length: 768
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:09 GMT
content-type: application/json; charset=utf-8
content-length: 39
x-trace-id: 57c9f4765405800810ae16f568857d30
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
access-control-allow-headers: Origin, X-Requested-With, X-Oaid, Content-Type, Accept
strict-transport-security: max-age=1
x-content-type-options: nosniff
X-Firefox-Spdy: h2
amabellgamelin.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433449&_=1701453433450
200 OK 10 kB URL GET HTTP/3 amabellgamelin.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433449&_=1701453433450
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type Unicode text, UTF-8 text, with very long lines (64117)
Hash 961e199508bfde7dedf132db907193fb
4e18f1ef50845d2120792ba9a4e5d74ffe0aab61
363cff6c7c8fe13a8adc0bb0e7313d7879b737a9570d7c9cf9dcfcfc96e433f4
GET /feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433449&_=1701453433450 HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/search/label/Crossfit
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ee5f95c0-600e-4836-a878-db85ad9412e3%3A2%3A1; pp_main_faefab53a3c6a8b843aabc1fbff50729=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
etag: W/"a8d127696c279de6e000e1b706841966a1f6a4c5d37b9bfb3b634d7fcfb1dbb6"
date: Fri, 01 Dec 2023 17:57:09 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
expires: Fri, 01 Dec 2023 17:57:10 GMT
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sat, 15 Apr 2023 20:10:17 GMT
content-encoding: gzip
content-length: 10076
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
4.bp.blogspot.com/-O3EpVMWcoKw/WxY6-6I4--I/AAAAAAAAB2s/KzC0FqUQtkMdw7VzT6oOR_8vbZO6EJc-ACK4BGAYYCw/w100/nth.png
200 OK 714 B URL GET HTTP/3 4.bp.blogspot.com/-O3EpVMWcoKw/WxY6-6I4--I/AAAAAAAAB2s/KzC0FqUQtkMdw7VzT6oOR_8vbZO6EJc-ACK4BGAYYCw/w100/nth.png
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type PNG image data, 100 x 51, 8-bit/color RGB, non-interlaced\012- data
Hash d764fa930f0c0c586e38e27998ead1d5
2c058a59a432ab921874ccef694e0bc47f477a41
82858f9408397b09feeaaac54a4ffe80093fb241c643cc82815357d1027fe8a8
GET /-O3EpVMWcoKw/WxY6-6I4--I/AAAAAAAAB2s/KzC0FqUQtkMdw7VzT6oOR_8vbZO6EJc-ACK4BGAYYCw/w100/nth.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="nth.png"
x-content-type-options: nosniff
server: fife
content-length: 714
x-xss-protection: 0
date: Fri, 01 Dec 2023 16:36:00 GMT
expires: Sat, 02 Dec 2023 16:36:00 GMT
cache-control: public, max-age=86400, no-transform
age: 4869
etag: "v76c"
content-type: image/png
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/Kv5TUBF0emY/maxresdefault.jpg
200 OK 146 kB URL GET HTTP/2 i.ytimg.com/vi/Kv5TUBF0emY/maxresdefault.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3\012- data
Size 146 kB (146500 bytes)
Hash 828f13c644d05e14b052741313d0716d
2ae720a7dea15f22326de79562c98ee3fad97e63
64c1e19990210f8b59cd8e169105404dfca8a00b62f12c5f58ae7acf32392112
GET /vi/Kv5TUBF0emY/maxresdefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 146500
date: Fri, 01 Dec 2023 17:57:09 GMT
expires: Fri, 01 Dec 2023 19:57:09 GMT
cache-control: public, max-age=7200
etag: "1372888877"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
banquetunarmedgrater.com/advertisers.js
200 OK 0 B URL GET HTTP/2 banquetunarmedgrater.com/advertisers.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectbanquetunarmedgrater.com
Fingerprint92:8E:AD:72:AC:AD:3B:21:99:CD:21:A0:9F:BD:F2:AF:0D:98:D8:57
ValidityThu, 09 Nov 2023 11:40:15 GMT - Wed, 07 Feb 2024 11:40:14 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:57:09 GMT
content-type: application/javascript
content-length: 0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=172800
x-request-id: 83dc30f08b565070e8947cfa23f9598f
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 17:57:09 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PsogoIBLufR3WBlJgES%2F3h1by4FD%2Bu5HewgeM9GLs4BXJdO4uoTB4puhPI0Y0nOCTyzz1biPXNBHXAzacKoqWVLhmQ6OJxm8XN%2FCNMtQqFNHDpqyf2UihLXy1FDQMpVU0mUzQtDFP%2FdZGKQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed35ffea1a56c3-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
amabellgamelin.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433451&_=1701453433452
200 OK 10 kB URL GET HTTP/3 amabellgamelin.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433451&_=1701453433452
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type Unicode text, UTF-8 text, with very long lines (64117)
Hash 66a9afb4297cc0526021358f614899ac
1964c499a8db880ca86e8bd312f09ea292d9dcfa
0504807923e8db8ea5e74cfe00397c91800f9bd5598ee835ce63a9716db7e979
GET /feeds/posts/default?alt=json-in-script&max-results=3&callback=jQuery112408703498287979736_1701453433451&_=1701453433452 HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/search/label/Crossfit
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ee5f95c0-600e-4836-a878-db85ad9412e3%3A2%3A1; pp_main_faefab53a3c6a8b843aabc1fbff50729=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
cross-origin-resource-policy: cross-origin
content-encoding: gzip
etag: W/"a8d127696c279de6e000e1b706841966a1f6a4c5d37b9bfb3b634d7fcfb1dbb6"
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/javascript; charset=UTF-8
server: blogger-renderd
cache-control: public, must-revalidate, proxy-revalidate, max-age=1
vary: Accept-Encoding
expires: Fri, 01 Dec 2023 17:57:11 GMT
x-content-type-options: nosniff
x-xss-protection: 0
last-modified: Sat, 15 Apr 2023 20:10:17 GMT
content-length: 10076
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
unseenreport.com/pxf.gif?uuid=ee5f95c0-600e-4836-a878-db85ad9412e3&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=faefab53a3c6a8b843aabc1fbff50729&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
200 OK 1 B URL GET HTTP/1.1 unseenreport.com/pxf.gif?uuid=ee5f95c0-600e-4836-a878-db85ad9412e3&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=faefab53a3c6a8b843aabc1fbff50729&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17
IP
ASN #39572 DataWeb Global Group B.V.
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subject*.unseenreport.com
Fingerprint79:45:7F:58:D5:82:45:0A:7D:1E:FF:7A:98:05:26:E9:D6:FE:91:14
ValidityWed, 22 Nov 2023 07:56:28 GMT - Tue, 20 Feb 2024 07:56:27 GMT
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert Quad9 DNS malicious Sinkholed
GET /pxf.gif?uuid=ee5f95c0-600e-4836-a878-db85ad9412e3&eb=a996fe56ed028c08f89591a4a8a9c431&te=4cb725660c43031e3b06c75892d96c5a&ua=Mozilla%2F5.0%20(Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0)%20Gecko%2F20100101%20Firefox%2F105.0&dev=e&res=14.3095&b_frame=0&pk=faefab53a3c6a8b843aabc1fbff50729&bl=en-US&sr=1024x1280&sz=1024x1280&hjs=17 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx/1.21.6
Date: Fri, 01 Dec 2023 17:57:10 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: f8b5e3cb688f9122f12992c1e2a8b08d
Strict-Transport-Security: max-age=0; includeSubdomains
workoutlabs.com/wp-content/uploads/2014/08/slim-toned-and-sexy-lower-body-workout-pack-for-women1.jpg
200 OK 252 kB URL GET HTTP/1.1 workoutlabs.com/wp-content/uploads/2014/08/slim-toned-and-sexy-lower-body-workout-pack-for-women1.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectworkoutlabs.com
Fingerprint79:D5:D8:EC:1B:F0:89:14:93:FA:D6:87:AE:C1:FA:37:03:B1:99:CC
ValidityTue, 21 Nov 2023 19:35:48 GMT - Mon, 19 Feb 2024 19:35:47 GMT
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1000x1000, components 3\012- data
Size 252 kB (252024 bytes)
Hash 85cd0592e5ea193e6525b36452f9f2df
4207c965a1263ae2ba8061bb7497ef33d90220b7
6c729f1e02a76323f63beeed6d97745950b9bae03d1c2dae4831060f6f8eda3d
GET /wp-content/uploads/2014/08/slim-toned-and-sexy-lower-body-workout-pack-for-women1.jpg HTTP/1.1
Host: workoutlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 01 Dec 2023 17:57:10 GMT
Server: Apache/2.4.55 (Ubuntu)
Upgrade: h2
Connection: Upgrade, Keep-Alive
Last-Modified: Wed, 27 Jan 2021 21:56:46 GMT
Accept-Ranges: bytes
Content-Length: 252024
Access-Control-Allow-Origin: http://192.241.243.212, http://167.71.186.23
Vary: User-Agent
Cache-Control: max-age=604800, public, must-revalidate
Keep-Alive: timeout=5, max=100
Content-Type: image/jpeg
dietpics.com/wp-content/uploads/2015/11/Weekly-workout-plan-for-women-to-lose-weight-300x219.gif
200 OK 12 kB URL GET HTTP/1.1 dietpics.com/wp-content/uploads/2015/11/Weekly-workout-plan-for-women-to-lose-weight-300x219.gif
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoDaddy.com, Inc.
Subjectdietpics.com
Fingerprint9B:72:3F:54:D7:DE:AF:15:53:CE:64:64:E3:F7:D5:1E:95:6B:9C:83
ValidityWed, 25 Oct 2023 19:42:03 GMT - Fri, 25 Oct 2024 19:42:03 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (12039)
Hash 02ccd4018cd8ad5253fbfc6bf5ef134d
d1127b183c297da013c7862ec687e4d06e78d87c
83d4bc2f6cadb2f0ff0ebf4005a0ec6ecba4ce0cef0370ba48ff137bc3d4cb51
GET /wp-content/uploads/2015/11/Weekly-workout-plan-for-women-to-lose-weight-300x219.gif HTTP/1.1
Host: dietpics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: openresty
Date: Fri, 01 Dec 2023 17:57:10 GMT
Content-Type: text/html
Content-Length: 12477
Last-Modified: Thu, 30 Nov 2023 23:50:31 GMT
Connection: keep-alive
ETag: "65691fc7-30bd"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_MMjM5GcY2koxL5nVNYuIopOu5Os7ylwsJX08F2HD3rRbV+97wRp5tdNmzBjBXKWb/Sm90VHgHqveYytTdHL8yQ
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=10.116.80.236;Path=/;Max-Age=86400;
country=;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
cms.bbcomcdn.com/fun/images/2015/lee-labrada-lean-body-training__04.jpg
404 Not Found 346 B URL GET HTTP/1.1 cms.bbcomcdn.com/fun/images/2015/lee-labrada-lean-body-training__04.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSSL Corporation
Subject*.bbcomcdn.com
Fingerprint84:38:61:16:24:03:B8:84:B1:F1:A2:66:9B:3D:59:F8:C2:DB:F4:E2
ValidityMon, 21 Aug 2023 17:49:56 GMT - Thu, 15 Aug 2024 17:49:56 GMT
File type XML 1.0 document text\012- XML document, ASCII text, with very long lines (307)
Hash 02a745a79a9d0e827dcf682cf3cc791c
f330c11e9dc22808163bc18427c82bbf1ea5fd39
9c8eacaaf9828d893ad4acc0a4739f86d2e7c684c823db8d400d8272c63d22df
GET /fun/images/2015/lee-labrada-lean-body-training__04.jpg HTTP/1.1
Host: cms.bbcomcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 404 Not Found
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Fri, 01 Dec 2023 17:57:09 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 6cb1d4b545e7beb4ead790454f4807c6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: TQyiiTqMRbnMdkb4tF4-1mzHmFGIjjEn-2odO3iFRTUNBYpe0vrQMg==
s-media-cache-ak0.pinimg.com/236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg
301 Moved Permanently 0 B URL GET HTTP/2 s-media-cache-ak0.pinimg.com/236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg HTTP/1.1
Host: s-media-cache-ak0.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 301 Moved Permanently
retry-after: 0
location: https://i.pinimg.com/236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg
accept-ranges: bytes
date: Fri, 01 Dec 2023 17:57:10 GMT
vary: Origin
x-cdn: fastly
content-length: 0
X-Firefox-Spdy: h2
easy6packabs.files.wordpress.com/2013/01/abs-workout-plans.jpg%253Fw%253D640
404 Not Found 37 kB URL GET HTTP/2 easy6packabs.files.wordpress.com/2013/01/abs-workout-plans.jpg%253Fw%253D640
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash 87dc92d3f9c8ef4d1e77b277df99d572
ed24b6d062c9972945d8e8d77ba9de9a64ee04af
076b974e714cb15c17c8682826e5b3a925ec57982efad3d5cd073bdd6a933eff
GET /2013/01/abs-workout-plans.jpg%253Fw%253D640 HTTP/1.1
Host: easy6packabs.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 17:57:10 GMT
expires: Wed, 04 Jan 2023 16:04:23 GMT
cache-control: Private
X-Firefox-Spdy: h2
amabellgamelin.blogspot.com/favicon.ico
200 OK 412 B URL GET HTTP/3 amabellgamelin.blogspot.com/favicon.ico
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 59a0c7b6e4848ccdabcea0636efda02b
30ef5c54b8bbc3487ea2b4c45cd11ea2932e4340
a1495da3cf3db37bf105a12658636ff628fee7b73975b9200049af7747e60b1f
GET /favicon.ico HTTP/1.1
Host: amabellgamelin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/search/label/Crossfit
Cookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=ee5f95c0-600e-4836-a878-db85ad9412e3%3A2%3A1; pp_main_faefab53a3c6a8b843aabc1fbff50729=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: image/x-icon; charset=UTF-8
expires: Fri, 01 Dec 2023 17:57:11 GMT
date: Fri, 01 Dec 2023 17:57:11 GMT
cache-control: private, max-age=86400
last-modified: Sat, 15 Apr 2023 20:10:17 GMT
etag: W/"d2cc9b7ab4420b6aad6ae64d0aec7094e4feacbc42fc1491077b448083546fe0"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 412
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
tatespw725.files.wordpress.com/2013/01/ripped-diet-plan.jpg%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/ripped-diet-plan.jpg%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/ripped-diet-plan.jpg%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 17:57:10 GMT
expires: Mon, 02 Jan 2023 13:21:45 GMT
cache-control: Private
X-Firefox-Spdy: h2
tatespw725.files.wordpress.com/2013/01/ripped-diet-plan.jpg%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/ripped-diet-plan.jpg%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/ripped-diet-plan.jpg%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
X-Firefox-Spdy: h2
tatespw725.files.wordpress.com/2013/01/ripped-workout-program.jpg%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/ripped-workout-program.jpg%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/ripped-workout-program.jpg%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
X-Firefox-Spdy: h2
qph.is.quoracdn.net/main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue
0 B URL GET qph.is.quoracdn.net/main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue HTTP/1.1
Host: qph.is.quoracdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
i.pinimg.com/236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg
200 OK 36 kB URL GET HTTP/2 i.pinimg.com/236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerDigiCert Inc
Subject*.pinterest.com
Fingerprint4D:02:6D:A8:DF:FA:2E:1C:D3:43:46:EF:CF:92:F1:7A:41:8F:BA:0B
ValidityMon, 31 Jul 2023 00:00:00 GMT - Wed, 07 Aug 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 236x576, components 3\012- data
Hash 5f939729b285a633daff1e49153fd5b0
72a9abb05a33c5c34b23ae3341e06aa3fd7600b7
60726ffb78c8dbadd46f126b9c523197ac8519fd57971d5728772a0508dd26b1
GET /236x/9d/55/97/9d5597a88802a545ac17e1b815111275.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
etag: "5f939729b285a633daff1e49153fd5b0"
expires: Fri, 25 Dec 2037 23:59:59 GMT
content-type: image/jpeg
accept-ranges: bytes
date: Fri, 01 Dec 2023 17:57:10 GMT
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600
content-length: 35963
X-Firefox-Spdy: h2
pushsar.com/ntfc.php?p=3260284
200 OK 13 kB URL GET HTTP/2 pushsar.com/ntfc.php?p=3260284
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type C source, ASCII text, with very long lines (13022), with no line terminators
Hash c89bdeac9fc7159eeab98d113c78dbc3
b905be32d5611608db4dec46b433a83eccd58d49
43620d4167eed0aae2c452914018932e583aef5579f88ce738766f5cbfd5cb7f
GET /ntfc.php?p=3260284 HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:06 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-32de"
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com/wp-content/uploads/200K_Winners_02.jpg
0 B URL GET 1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com/wp-content/uploads/200K_Winners_02.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/200K_Winners_02.jpg HTTP/1.1
Host: 1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
tatespw725.files.wordpress.com/2013/01/belly-work-out.png%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/belly-work-out.png%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/belly-work-out.png%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:09 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
X-Firefox-Spdy: h2
www.getinthehotspot.com/wp-content/uploads/2013/07/bodybuilding-transformation.jpg
200 OK 36 kB URL GET HTTP/2 www.getinthehotspot.com/wp-content/uploads/2013/07/bodybuilding-transformation.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerGoogle Trust Services LLC
Subjectgetinthehotspot.com
FingerprintF8:32:41:B2:67:B1:2B:B3:81:48:9A:7D:15:C6:FA:92:3C:8A:85:B1
ValidityFri, 03 Nov 2023 20:51:12 GMT - Thu, 01 Feb 2024 20:51:11 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 518x777, components 3\012- data
Hash a9e310886e6d7917b2a8ebab99edd231
db04e7867cadc8b010b2063aba25d79f5815c402
28c7971b42ddaee5609951774f3b1e3a91c87d48f295ce4c4137f84d89856986
GET /wp-content/uploads/2013/07/bodybuilding-transformation.jpg HTTP/1.1
Host: www.getinthehotspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: image/jpeg
cache-control: public, max-age=2592000,public
expires: Sun, 31 Dec 2023 17:57:10 GMT
last-modified: Wed, 24 Aug 2022 23:57:12 GMT
vary: Accept-Encoding,User-Agent,User-Agent,Accept-Encoding
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ixtjvL8ayifXitttqRSOqDanP%2Fs4tskF84ygRVMHQgqwRQwUtdWjvTPwsRkQKddaFfAMpjRGugJqFgAR8IFBPG8u%2BCexiYa%2B%2FOXzwYVNH8nIxmWgPiDd3jibvQTJbxs6cvAbK8gY5qogJQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 82ed3600fe2956af-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pushsar.com/pfe/current/universal.min.js?v=3.1.471
200 OK 88 kB URL GET HTTP/2 pushsar.com/pfe/current/universal.min.js?v=3.1.471
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerLet's Encrypt
Subjectpushsar.com
FingerprintE6:C8:12:3A:D1:48:67:5A:C2:3B:2A:6C:ED:8D:26:F8:90:B5:1C:7C
ValidityTue, 28 Nov 2023 00:21:51 GMT - Mon, 26 Feb 2024 00:21:50 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash d46d2997ab218d1dba1ab614422ed53f
3f1f6b9847c8ad209835db366c62fcb209b83a67
09e8ce2dfeac0ad09cd24788931b38ea7e7592f2c28eecc324b2dd1cd69d1b42
GET /pfe/current/universal.min.js?v=3.1.471 HTTP/1.1
Host: pushsar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://amabellgamelin.blogspot.com/
Origin: https://amabellgamelin.blogspot.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/javascript
last-modified: Mon, 27 Nov 2023 17:44:23 GMT
etag: W/"6564d577-1572c"
access-control-allow-origin: https://amabellgamelin.blogspot.com
access-control-allow-credentials: true
cache-control: no-cache
pragma: no-cache
content-encoding: gzip
X-Firefox-Spdy: h2
1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com/wp-content/uploads/200K_Winners_02.jpg
0 B URL GET 1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com/wp-content/uploads/200K_Winners_02.jpg
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/uploads/200K_Winners_02.jpg HTTP/1.1
Host: 1eeof942d990384ilm3qmi2k.wpengine.netdna-cdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
tatespw725.files.wordpress.com/2013/01/ripped-workout-program.jpg%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/ripped-workout-program.jpg%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/ripped-workout-program.jpg%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 17:57:10 GMT
expires: Fri, 30 Dec 2022 14:00:44 GMT
cache-control: Private
X-Firefox-Spdy: h2
friendshipmale.com/sfp.js
200 OK 86 kB URL GET HTTP/2 friendshipmale.com/sfp.js
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint08:6F:D8:CB:9E:0C:0A:98:2E:C5:CD:21:8E:0B:76:2B:50:6F:B6:37
ValiditySat, 18 Feb 2023 00:00:00 GMT - Sat, 17 Feb 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /sfp.js HTTP/1.1
Host: friendshipmale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 01 Dec 2023 17:57:07 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 2c81d8b1e0bed93d75b30ca5b06e2b39
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 01 Dec 2023 17:57:07 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=T5T6chfPgtL4XIDlC%2BrBH7skmu5kZNYq%2BfU8yEMdg0igitXrzr9R5VWlNNP19UX%2BzvWgKuNgmdKt%2Bx9ayLzqHSIL7mJaoevEqmWcm%2Fr6p%2Bt%2BNhFmMfGEcTOyWUsThpD6TYYEsCA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82ed35f0ce9a0716-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
qph.is.quoracdn.net/main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue
0 B URL GET qph.is.quoracdn.net/main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /main-qimg-f5905b0698c2eeb757f592a420055e99%253Fconvert_to_webp%253Dtrue HTTP/1.1
Host: qph.is.quoracdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
tatespw725.files.wordpress.com/2013/01/belly-work-out.png%253Fw%253D480
404 Not Found 0 B URL GET HTTP/2 tatespw725.files.wordpress.com/2013/01/belly-work-out.png%253Fw%253D480
IP
Requested by https://amabellgamelin.blogspot.com/search/label/Crossfit
Certificate IssuerSectigo Limited
Subject*.files.wordpress.com
FingerprintF1:E8:7E:D8:60:44:95:6D:07:2B:83:41:66:0E:0E:80:CC:91:92:E4
ValidityWed, 23 Nov 2022 00:00:00 GMT - Sun, 24 Dec 2023 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2013/01/belly-work-out.png%253Fw%253D480 HTTP/1.1
Host: tatespw725.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://amabellgamelin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 404 Not Found
server: nginx
date: Fri, 01 Dec 2023 17:57:10 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
last-modified: Thu, 01 Dec 2022 17:57:10 GMT
expires: Mon, 26 Dec 2022 05:58:07 GMT
cache-control: Private
X-Firefox-Spdy: h2
216.58.207.225
18.157.203.0
139.45.197.251
0.0.0.0
151.101.84.84
188.114.96.1
0.0.0.0