r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash cfec3d7283a9b66d2be426ce54d210f3
808c1feb1ba918951d1928c1f6bfc0c253262774
1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15209
Expires: Tue, 06 Dec 2022 13:49:21 GMT
Date: Tue, 06 Dec 2022 09:35:52 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash ee088fab9b287e174cfd1f2c735a909f
25c3335b514a36ad1a24d00413d60c3d394f5161
494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2631
Cache-Control: max-age=92358
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:52 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:15:10 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ea206ac3c440825741687351f8c6e4e
2f38dafd8c43dcce2411a0590bc5c02cd6286735
7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15303
Expires: Tue, 06 Dec 2022 13:50:55 GMT
Date: Tue, 06 Dec 2022 09:35:52 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 09:20:23 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 929
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: J1cv45bp32SDoQ+c/vv6UbtzWt2dQU4/yJpps69gPHwVV2CofjCk2e0ayfnHXGzLi0tUSE8Nm0A=
x-amz-request-id: 47A45EG3922NGT6C
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 08:47:02 GMT
age: 2930
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
obsessobsession2109.blogspot.com/
200 OK 18 kB URL HTTP/1.1 obsessobsession2109.blogspot.com/
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (9501)
Hash ed7e3fad9a50d57161c1070b509917f2
45f6751960a0cfd9f3ef3e2bff515916b4217d7b
17e7d3ca8bc56ba5a6687d02f5283db119c981656711e5ca83522824e631448a
Analyzer Verdict Alert fortinet Malware
GET / HTTP/1.1
Host: obsessobsession2109.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 06 Dec 2022 09:35:52 GMT
Date: Tue, 06 Dec 2022 09:35:52 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 30 Nov 2022 12:51:56 GMT
ETag: W/"0b1587d455184af2a1b522e419a35a0a747d5c3c782316423aa2a0c8b31bfa9a"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 17903
Server: GSE
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 09:35:52 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
obsessobsession2109.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 obsessobsession2109.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: obsessobsession2109.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Tue, 06 Dec 2022 09:35:53 GMT
Expires: Tue, 13 Dec 2022 09:35:53 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 06 Dec 2022 07:54:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Pragma, Last-Modified, ETag, Alert, Expires, Retry-After, Cache-Control, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 09:11:20 GMT
cache-control: public,max-age=3600
age: 1473
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4759d6ca26cf8a070066d71b02fac91d
85695e27b097c8d40ea86439854084fc0b3967d3
d20b9793d654c41c562be52e3d5f3840f7bec0db031bda79a42c93959ff88a63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:53 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:01:43 GMT
expires: Wed, 29 Nov 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/css
age: 588850
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 157 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Size 157 kB (156915 bytes)
Hash 64d62574443f9d2148012af05abf60ac
16fc9b9b71eb94dbfdc15da12e9b3f21dfe1636e
c752966435826f865df5163012e3066bd9f0339b1959098323533be261741246
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 156915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 05:43:30 GMT
expires: Wed, 06 Dec 2023 05:43:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 08:51:54 GMT
content-type: text/javascript
age: 13943
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Tue, 06 Dec 2022 09:35:53 GMT
expires: Tue, 06 Dec 2022 09:35:53 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
carliecrash.files.wordpress.com/2011/06/img_4113.jpg
301 Moved Permanently 162 B URL HTTP/1.1 carliecrash.files.wordpress.com/2011/06/img_4113.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /2011/06/img_4113.jpg HTTP/1.1
Host: carliecrash.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://carliecrash.files.wordpress.com/2011/06/img_4113.jpg
i67.photobucket.com/albums/h282/bkangels/Page4.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i67.photobucket.com/albums/h282/bkangels/Page4.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h282/bkangels/Page4.jpg HTTP/1.1
Host: i67.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i67.photobucket.com/albums/h282/bkangels/Page4.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 277d0e3af1ffdcb1ee40b7dc9f040146.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 5I5a4oLNCgwFPTDw5wlZc9HjsFcm-96AfJdW5lg3xHNiPy67EvXZNA==
Vary: Origin
www3.pictures.zimbio.com/bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www3.pictures.zimbio.com/bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg HTTP/1.1
Host: www3.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www3.pictures.zimbio.com/bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1631-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.968667,VS0,VE0
X-Response-Time: 132
Strict-Transport-Security: max-age=31557600
www1.pictures.gi.zimbio.com/Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www1.pictures.gi.zimbio.com/Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg HTTP/1.1
Host: www1.pictures.gi.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www1.pictures.gi.zimbio.com/Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1647-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.968940,VS0,VE0
X-Response-Time: 123
Strict-Transport-Security: max-age=31557600
i258.photobucket.com/albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png
301 Moved Permanently 167 B URL HTTP/1.1 i258.photobucket.com/albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png HTTP/1.1
Host: i258.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i258.photobucket.com/albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png
X-Cache: Redirect from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cQDqMxs6ZacQI8AuICZ-CIeClihDNJ2rCZoUuLtGK1Ph5oilAtMaAw==
Vary: Origin
www4.pictures.zimbio.com/gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www4.pictures.zimbio.com/gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg HTTP/1.1
Host: www4.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www4.pictures.zimbio.com/gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1668-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.972825,VS0,VE0
X-Response-Time: 82
Strict-Transport-Security: max-age=31557600
www4.pictures.zimbio.com/gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www4.pictures.zimbio.com/gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg HTTP/1.1
Host: www4.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www4.pictures.zimbio.com/gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1674-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.972745,VS0,VE0
X-Response-Time: 120
Strict-Transport-Security: max-age=31557600
anatypicaltraditionalist.files.wordpress.com/2011/01/november2010.jpg
301 Moved Permanently 162 B URL HTTP/1.1 anatypicaltraditionalist.files.wordpress.com/2011/01/november2010.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /2011/01/november2010.jpg HTTP/1.1
Host: anatypicaltraditionalist.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://anatypicaltraditionalist.files.wordpress.com/2011/01/november2010.jpg
katmerlibilgi.files.wordpress.com/2009/04/hugh-jackman_05.jpg
301 Moved Permanently 162 B URL HTTP/1.1 katmerlibilgi.files.wordpress.com/2009/04/hugh-jackman_05.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /2009/04/hugh-jackman_05.jpg HTTP/1.1
Host: katmerlibilgi.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://katmerlibilgi.files.wordpress.com/2009/04/hugh-jackman_05.jpg
www1.pictures.zimbio.com/gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www1.pictures.zimbio.com/gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www1.pictures.zimbio.com/gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1627-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.973311,VS0,VE0
X-Response-Time: 100
Strict-Transport-Security: max-age=31557600
www.fansshare.com/celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.fansshare.com/celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg HTTP/1.1
Host: www.fansshare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 06 Dec 2022 10:35:53 GMT
Location: https://www.fansshare.com/celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6VD9jSgr3e41MM%2Bdh4njKS4JYs1FnQUOk0%2BRkXtUILdYKn5iRQCRmLIsY0naYY97BOgbz2%2BB%2FpLZU0oTFQWL2ubgUpGqPJImS89W7AfYSOFLi2hEomECWEQHWvhOv8ue92M0AA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408ba4b57b503-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
www.freewebs.com/officialwickedthemusical/10.1.08.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.freewebs.com/officialwickedthemusical/10.1.08.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /officialwickedthemusical/10.1.08.jpg HTTP/1.1
Host: www.freewebs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:53 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 06 Dec 2022 10:35:53 GMT
Location: https://www.freewebs.com/officialwickedthemusical/10.1.08.jpg
Server-Timing: cf-q-config;dur=4.9999944167212e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408ba4aeeb4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
301 Moved Permanently 285 B URL HTTP/1.1 musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash fc6dece944320f5a09e5584029a3a338
ec9eac3c61ec032b95f4c05521e859d785d4ca69
db7d38dd8b18748841993d919ee45bdae86b359ec9843d3bde4b71358b33e16b
GET /webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg HTTP/1.1
Host: musicremedy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: http://www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 285
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www3.pictures.gi.zimbio.com/Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www3.pictures.gi.zimbio.com/Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg HTTP/1.1
Host: www3.pictures.gi.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www3.pictures.gi.zimbio.com/Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:53 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1637-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319354.979983,VS0,VE0
X-Response-Time: 107
Strict-Transport-Security: max-age=31557600
images3.wikia.nocookie.net/__cb20090527232109/residentevil/images/8/86/Julia-voth.jpg
200 OK 5.7 kB URL HTTP/1.1 images3.wikia.nocookie.net/__cb20090527232109/residentevil/images/8/86/Julia-voth.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 200x68, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash c7a89516d061631ab65da7f5b432dea0
c7db7a6b6afd6e373019814c7c0eb7547e88542f
ce6d9d73a23de1ad89f0f67b45c97f310dc48852c1ad63a456cb88830e0b99c0
GET /__cb20090527232109/residentevil/images/8/86/Julia-voth.jpg HTTP/1.1
Host: images3.wikia.nocookie.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
date: Fri, 25 Nov 2022 11:03:23 GMT
surrogate-key: 8472a14900387a750afa7b3006bc27bb6db2ac5b wiki-residentevil thumblr scale-to-width
content-disposition: inline; filename="Julia-voth.webp"; filename*=UTF-8''Julia-voth.webp
content-type: image/webp
etag: CJqOzYSmv/UCEAE=
x-thumbnailer: Thumblr
access-control-allow-origin: *
access-control-allow-headers: Range
content-length: 5728
x-envoy-upstream-service-time: 95
x-cacheable: YES
age: 945150
vary: Accept
x-cache: ORIGIN, HIT
timing-allow-origin: *
cache-control: max-age=31536000, public
x-served-by: thumblr-5d8c9f94c9-ntgnr, wk-cdn-f2
x-cache-hits: ORIGIN, 4
accept-ranges: bytes
www.onlocationvacations.com/wp-content/uploads/2010/11/scottpilgrim.jpg
404 Not Found 125 B URL HTTP/1.1 www.onlocationvacations.com/wp-content/uploads/2010/11/scottpilgrim.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 2995357b538ef792ce59b1b7cca539c4
d33d8ce38719b45d0731f075f71593351023318c
aef27e8433e35954afe1798da5bde96145b020160cc2f16b1424425253fb545b
GET /wp-content/uploads/2010/11/scottpilgrim.jpg HTTP/1.1
Host: www.onlocationvacations.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 404 Not Found
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 125
Connection: keep-alive
Server: ip-100-74-2-146.eu-west-2.compute.internal
X-Request-Id: 3a57e5e7-e6cf-4da2-8785-e88da1c33cd2
static.foxsports.com/content/fscom/img/2011/03/26/032611-Indy-Car-Racing-Dario-Franchitti-JW_20110326160615290_660_320.JPG
400 Bad Request 208 B URL HTTP/1.0 static.foxsports.com/content/fscom/img/2011/03/26/032611-Indy-Car-Racing-Dario-Franchitti-JW_20110326160615290_660_320.JPG
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 63d5ad4c083505b2c399255fd540047e
20718712309ff5a7842988a7cf333e067b9f073a
a0b52c8281cc45d0b01383098eac78902493e63c60f7e59eb1b0b3aa2572eeab
GET /content/fscom/img/2011/03/26/032611-Indy-Car-Racing-Dario-Franchitti-JW_20110326160615290_660_320.JPG HTTP/1.1
Host: static.foxsports.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 208
Expires: Tue, 06 Dec 2022 09:35:54 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: close
hiteek.com/wp-content/uploads/2011/06/Xjr404491.jpg
403 Forbidden 110 B URL HTTP/1.1 hiteek.com/wp-content/uploads/2011/06/Xjr404491.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a91ee3cb35185cccc15e68e9c76c5441
59ae4770e2c926731d216c4aae03130d66fef18f
da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
GET /wp-content/uploads/2011/06/Xjr404491.jpg HTTP/1.1
Host: hiteek.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 403 Forbidden
date: Tue, 06 Dec 2022 09:35:53 GMT
content-type: text/html
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 813b15c3004464f6bd39fd0773b04757
bd2218fe1e647f61132aad70d29cd91fd0416f26
446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 19:47:40 GMT
expires: Wed, 29 Nov 2023 19:47:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 568094
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.celebridoodle.com/.a/6a00e5536b2ba98833014e5fd1b348970c-500wi
200 OK 5.3 kB URL HTTP/1.1 www.celebridoodle.com/.a/6a00e5536b2ba98833014e5fd1b348970c-500wi
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 2980955ac3e22c2cc3b1f3f10c7f55c4
e6d4187b4dc33c5450fbe387d596adab999a80f7
3b0382d2ddf4075d8442ad40d173ca032e6d1bbfea86a2c248cbd93fea66fde7
GET /.a/6a00e5536b2ba98833014e5fd1b348970c-500wi HTTP/1.1
Host: www.celebridoodle.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
991.com/newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg
301 Moved Permanently 134 B URL HTTP/1.1 991.com/newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4aa7a432bb447f094408f1bd6229c605
1965c4952cc8c082a6307ed67061a57aab6632fa
34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
GET /newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg HTTP/1.1
Host: 991.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: awselb/2.0
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: text/html
Content-Length: 134
Connection: keep-alive
Location: https://991.com:443/newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg
static.zoonar.de/img/www_repository3/6f/9e/71/10_81bd2fc39499285d1ca504384f359353.jpg
404 Not Found 345 B URL HTTP/1.1 static.zoonar.de/img/www_repository3/6f/9e/71/10_81bd2fc39499285d1ca504384f359353.jpg
IP
ASN #13135 Wieske's Crew GmbH
File type XML 1.0 document text\012- XHTML document text (version 1.0)\012- broken XHTML document text (version 1.0)\012- HTML document text\012- XML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash ab99593efdf397078f11d9c37dd218a1
34540ffc5331cc545c1035b06a72b4f8d375973d
beab79184bf1fca1f52ff3761f8a533827106fef3749c6c9c9a3e7eec619a226
GET /img/www_repository3/6f/9e/71/10_81bd2fc39499285d1ca504384f359353.jpg HTTP/1.1
Host: static.zoonar.de
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html
Content-Length: 345
Date: Tue, 06 Dec 2022 09:35:53 GMT
Server: lighttpd/1.4.35
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 05 Dec 2022 19:51:21 GMT
Expires: Mon, 19 Dec 2022 19:51:21 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 49473
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 309 B URL HTTP/1.1 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 38c2553797daebcb5df3de801bbabb9e
cd6078ae550e7aa0bf8eba99e47768cdfc15fc47
cd2eceb78077b115145b7890620f20de052805a19bf445fea9b8c6ebbd365256
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6McPLUQgfbXBN71K1lUpu3a%2Fz6vB9MZRe90Aes4ALxyulniEp8M4PwCWsyOM6c7taUqECsPeVkCfwonWkFDLWChXYL4bxzh2DM5SZhftjPgcXqJwtAoWlD7dmlmOsmU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408b9fae5b503-OSL
alt-svc: h2=":443"; ma=60
blog.oregonlive.com/ent_impact_performance/2009/03/large_Wicked_2009_1.jpg
301 Moved Permanently 0 B URL HTTP/1.1 blog.oregonlive.com/ent_impact_performance/2009/03/large_Wicked_2009_1.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ent_impact_performance/2009/03/large_Wicked_2009_1.jpg HTTP/1.1
Host: blog.oregonlive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Content-Length: 0
location: https://www.oregonlive.com/ent_impact_performance/2009/03/large_Wicked_2009_1.jpg
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 0
Cache-Control:
x-shield-cache-expires: 10
X-Served-By: cache-iad-kjyo7100179-IAD, cache-bma1630-BMA
X-Cache: MISS, MISS
X-Timer: S1670319354.968782,VS0,VE95
www.blogger.com/img/share_buttons_20_3.png
200 OK 5.1 kB URL HTTP/2 www.blogger.com/img/share_buttons_20_3.png
IP
File type PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Hash ad9999106d5f550920b586e8e1704e5a
93fd02c51166402a41f96509cd0ca3fb917877dd
3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
GET /img/share_buttons_20_3.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:28:12 GMT
expires: Tue, 06 Dec 2022 17:28:12 GMT
cache-control: public, max-age=604800
last-modified: Tue, 29 Nov 2022 14:52:29 GMT
content-type: image/png
age: 576462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg
301 Moved Permanently 162 B URL HTTP/1.1 www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg HTTP/1.1
Host: www.exposay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg
Cache-Control: max-age=16070400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=a8dDXqFhPyENz%2B54w%2Ft4fqZTfVYG%2FxnWvJXMJGDQYY3VyN9o%2BV7%2BvWa8F7VcJjg43zNs1dDo0DraNQg3K%2Fr47K0e66DNEWM%2BMoGpO%2Fooe%2BxAVPzkkU%2FtW%2BrmG1S7c2MnoFE%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408ba4b4efac0-OSL
alt-svc: h2=":443"; ma=60
www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg
301 Moved Permanently 162 B URL HTTP/1.1 www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg HTTP/1.1
Host: www.exposay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg
Cache-Control: max-age=16070400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QeITabbrByjvff997ik1d1EI1BJGBNbFrd5NIN2ktuay4RBaBP6YnW39UTLK7yM9IscJYb3YzOWbuqS6EBJBF2jzBmW86tfbkx6aa3RaQfoWjjY8y1CkGJlw5R1%2FId%2BIa9U%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408ba4edeb4e8-OSL
alt-svc: h2=":443"; ma=60
www.blogger.com/dyn-css/authorization.css?targetBlogID=1221393542812368741&zx=e18c2457-25e3-4972-80bf-0d2f440f61da
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=1221393542812368741&zx=e18c2457-25e3-4972-80bf-0d2f440f61da
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=1221393542812368741&zx=e18c2457-25e3-4972-80bf-0d2f440f61da HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 09:35:54 GMT
last-modified: Tue, 06 Dec 2022 09:35:54 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/_QgrDibfSr7E/S_062l6W9cI/AAAAAAAAAbY/rFoSdHF2e6k/s1600/IMG_2789.JPG
404 Not Found 832 B URL HTTP/1.1 4.bp.blogspot.com/_QgrDibfSr7E/S_062l6W9cI/AAAAAAAAAbY/rFoSdHF2e6k/s1600/IMG_2789.JPG
IP
File type PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Hash 596246739a83bb45e30e13437e0810d9
203d99f5cb1f2c816d6f9974cc5a73cf412892a6
94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
GET /_QgrDibfSr7E/S_062l6W9cI/AAAAAAAAAbY/rFoSdHF2e6k/s1600/IMG_2789.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 09:35:54 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0
ny-image3.etsy.com/il_fullxfull.187117683.jpg
301 Moved Permanently 261 B URL HTTP/1.1 ny-image3.etsy.com/il_fullxfull.187117683.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c1f6ba018eaa99e80460a424d720c2da
8b52a9bf12f8eda5af22623907e382b5c607b019
60f7d7ae5104c01f208b1325f6e21986b6f2ef4d909f214056583292581d2c02
GET /il_fullxfull.187117683.jpg HTTP/1.1
Host: ny-image3.etsy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Server: Apache
Location: http://img0.etsystatic.com/il_fullxfull.187117683.jpg
Content-Length: 261
Content-Type: text/html; charset=iso-8859-1
Via: 1.1 google
i39.tinypic.com/m73pmp.jpg
301 Moved Permanently 0 B URL HTTP/1.1 i39.tinypic.com/m73pmp.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /m73pmp.jpg HTTP/1.1
Host: i39.tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Length: 0
Connection: keep-alive
Date: Tue, 06 Dec 2022 09:35:55 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: HabFn37xPlh6x-Or9eD5OCteWFnKbmI-BO2scEHhHZX-HwWnJCHDHA==
cdn.comicartfans.com/Images/Category_10527/subcat_85675/auto.jpg
200 OK 441 kB URL HTTP/1.1 cdn.comicartfans.com/Images/Category_10527/subcat_85675/auto.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1350x981, components 3\012- data
Size 441 kB (441313 bytes)
Hash 5bffbe6b45c272067991968e33da3041
a8ea489939b2ed5ac0365ed2c4e2f919050d2670
057ea982620d5a8cb6300a7283ce3f02a0f0a1ca9a35324280ad31a77a72e1b4
GET /Images/Category_10527/subcat_85675/auto.jpg HTTP/1.1
Host: cdn.comicartfans.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 09:35:53 GMT
Content-Type: image/jpeg
Content-Length: 441313
Connection: keep-alive
Cache-Control: max-age=2592000
Last-Modified: Sat, 25 Jan 2020 21:08:49 GMT
ETag: "4c495a3c3d3d51:0"
X-Powered-By: ASP.NET
X-Age: 664360
X-Cache: HIT
X-Storage: 909820195:8001
Accept-Ranges: bytes
X-Edge-IP: 51.195.133.194
X-Edge-Location: London, GB
ih3.redbubble.net/work.5267748.1.flat,550x550,075,f.hugh-jackman-from-australia.jpg
200 OK 38 kB URL HTTP/1.1 ih3.redbubble.net/work.5267748.1.flat,550x550,075,f.hugh-jackman-from-australia.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 389x550, components 3\012- data
Hash 8e3eb5ff0ba055236494cbdd6bb9834e
08591de5f44b298a132ecd5d3f31035f8d75741d
497eb077f7e60f3a11575aadd3d217a0ee8a57fb9bbc531eb96b4174a73f2558
GET /work.5267748.1.flat,550x550,075,f.hugh-jackman-from-australia.jpg HTTP/1.1
Host: ih3.redbubble.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: https://www.redbubble.com
Access-Control-Expose-Headers: Content-Length,Content-Range
Age: 206955
Cache-Control: max-age=31556952, public
Content-Disposition: inline
Content-Transfer-Encoding: binary
Content-Type: image/jpeg
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: W/"497eb077f7e60f3a11575aadd3d217a0"
Last-Modified: Sun, 04 Dec 2022 00:06:39 GMT
Referrer-Policy: strict-origin-when-cross-origin
Server: ECS (dcb/7F83)
X-Cache: HIT
X-Content-Type-Options: nosniff
X-Download-Options: noopen
X-Frame-Options: SAMEORIGIN
X-Permitted-Cross-Domain-Policies: none
X-Request-Id: 9370cd50-42cd-4c1b-851d-a408c6fc0a35
X-XSS-Protection: 1; mode=block
Content-Length: 37698
img0.etsystatic.com/il_fullxfull.187117683.jpg
301 Moved Permanently 0 B URL HTTP/1.1 img0.etsystatic.com/il_fullxfull.187117683.jpg
IP
ASN #20940 Akamai International B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /il_fullxfull.187117683.jpg HTTP/1.1
Host: img0.etsystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Server: AkamaiGHost
Content-Length: 0
Location: https://img0.etsystatic.com/il_fullxfull.187117683.jpg
Cache-Control: private, max-age=0
Expires: Tue, 06 Dec 2022 09:35:54 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: keep-alive
Timing-Allow-Origin: *
Akamai-GRN: 0.2d4d2417.1670319354.ef4fa3b
www3.pictures.zimbio.com/bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg
200 OK 65 kB URL HTTP/1.1 www3.pictures.zimbio.com/bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 594x421, components 3\012- data
Hash 8b378b54ae10bdcea297eb7f448acaf0
60d6bbd451ac4f88e6a63eb8f551840a8f76de72
b5193d39554cc8ebd03bff49b1c3961cf93f428f7125e144f60c6666df63ddee
GET /bg/Certified%2BCopy%2BBlue%2BValentine%2Bpremieres%2B4JzCE37-q7Dl.jpg HTTP/1.1
Host: www3.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 65029
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Thu, 27 May 2010 23:08:47 GMT
ETag: "4bfefb7f-fe05"
Expires: Wed, 18 Jan 2023 16:20:35 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 4295719
X-Served-By: cache-bfi-kbfi7400083-BFI, cache-bma1644-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 42, 1
X-Timer: S1670319354.218875,VS0,VE1
X-Response-Time: 980
Strict-Transport-Security: max-age=31557600
static.guim.co.uk/sys-images/Film/Pix/pictures/2009/2/23/1235374626011/Hugh-Jackman-with-Anne-Ha-001.jpg
200 OK 23 kB URL HTTP/1.1 static.guim.co.uk/sys-images/Film/Pix/pictures/2009/2/23/1235374626011/Hugh-Jackman-with-Anne-Ha-001.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 460x276, components 3\012- data
Hash a00967ed36dda0af9bc1f74edffdd8ab
02b5cf870b197387c9740c32b94669b00f764b1d
4a33313ea4d2e3f8e9b44b50d7982300636252eb64f85dbe15faf9d33c934e43
GET /sys-images/Film/Pix/pictures/2009/2/23/1235374626011/Hugh-Jackman-with-Anne-Ha-001.jpg HTTP/1.1
Host: static.guim.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 22768
x-amz-id-2: MCkqmDnGUR6UHWpde0BZrLXxc0VL8M4aaksx9FlVLi4TFNCkpBWCZ5WBPkTcYwS7XiSVAquvOws=
x-amz-request-id: 051VZN9FD2WB1ZCQ
Last-Modified: Thu, 10 Mar 2016 22:11:46 GMT
ETag: "a00967ed36dda0af9bc1f74edffdd8ab"
Content-Type: image/jpeg
Server: AmazonS3
Fastly-Restarts: 1
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Via: 1.1 varnish
Age: 0
X-Served-By: cache-bma1633-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1670319354.991661,VS0,VE240
Access-Control-Allow-Origin: *
Strict-Transport-Security: max-age=31536000
Cache-Control: max-age=86400
www.tvscoop.tv/dawn--porter.jpg
302 Found 41 B URL HTTP/1.1 www.tvscoop.tv/dawn--porter.jpg
IP
File type HTML document, ASCII text
Hash b3d14384979fdf4fd09fa8f209c98b95
de9a5e4f519313ee4da6b0d978b5eef537cd4c84
30bb2b8f3e5282bc43462ca1084167adc1d1b6e3e1c2b8b2b7956a09152b75dd
GET /dawn--porter.jpg HTTP/1.1
Host: www.tvscoop.tv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 302 Found
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 41
Connection: keep-alive
Location: https://tvduck.com
X-Served-By: Namecheap URL Forward
Server: namecheap-nginx
th01.deviantart.net/fs71/PRE/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg
301 Moved Permanently 178 B URL HTTP/1.1 th01.deviantart.net/fs71/PRE/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash cd2e0e43980a00fb6a2742d3afd803b8
81ffbd1712afe8cdf138b570c0fc9934742c33c1
bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
GET /fs71/PRE/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg HTTP/1.1
Host: th01.deviantart.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Server: nginx
Location: http://pre03.deviantart.net/2c12/th/pre/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg
carliecrash.files.wordpress.com/2011/06/img_4113.jpg
200 OK 178 kB URL HTTP/2 carliecrash.files.wordpress.com/2011/06/img_4113.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 1024x768, components 3\012- data
Size 178 kB (177820 bytes)
Hash 159d9a0ddb00e0287427d06becd4c5cc
f8aff205d53a779b8ca8f61cf5299cf36ab5a435
73532a82df133752f0c79b2758503b96474e7cfde341222f7fca9d63253000de
GET /2011/06/img_4113.jpg HTTP/1.1
Host: carliecrash.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: image/jpeg
content-length: 177820
last-modified: Mon, 06 Jun 2011 15:14:55 GMT
expires: Thu, 12 Jan 2023 00:10:36 GMT
x-orig-src: 01_mogdir
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://carliecrash.wordpress.com
vary: Origin
x-nc: MISS arn 19 np
x-content-type-options: nosniff
X-Firefox-Spdy: h2
4.bp.blogspot.com/_sz6_1aMtxyo/THBCkY_wXQI/AAAAAAAAAFY/ju1G9UL4pO4/s1600/DSC03534.JPG
200 OK 138 kB URL HTTP/1.1 4.bp.blogspot.com/_sz6_1aMtxyo/THBCkY_wXQI/AAAAAAAAAFY/ju1G9UL4pO4/s1600/DSC03534.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x1200, components 3\012- data
Size 138 kB (137879 bytes)
Hash 1088a1d0f4e825f0c2a2047c5075159e
4c6cd1076955db19b6b8fd5734a9165245424be9
0a63d2c03e282c91881041e6a7da271f63e368bff1adda70a0b923a57fc16045
GET /_sz6_1aMtxyo/THBCkY_wXQI/AAAAAAAAAFY/ju1G9UL4pO4/s1600/DSC03534.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v980"
Expires: Wed, 07 Dec 2022 09:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="DSC03534.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 09:35:54 GMT
Server: fife
Content-Length: 137879
X-XSS-Protection: 0
media.onsugar.com/files/2011/01/03/2/1331/13311615/2e/david-archuleta-ashley-tisdale-neuphoria2008-9.jpg
403 Forbidden 243 B URL HTTP/1.1 media.onsugar.com/files/2011/01/03/2/1331/13311615/2e/david-archuleta-ashley-tisdale-neuphoria2008-9.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 5675b27e15b7ac9742e6aba98cb0fe46
1c0fd43f130a60f577e6b776d4a41c4d26ca4f73
8564201b733f7af710abc4dd62a1298d849912d6a980fe6c42eca6e0a046e4bc
GET /files/2011/01/03/2/1331/13311615/2e/david-archuleta-ashley-tisdale-neuphoria2008-9.jpg HTTP/1.1
Host: media.onsugar.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 403 Forbidden
Connection: keep-alive
Content-Type: application/xml
Server: AmazonS3
cache-control: max-age=2592000
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1669-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1670319354.968406,VS0,VE388
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
transfer-encoding: chunked
www1.pictures.gi.zimbio.com/Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg
301 Moved Permanently 193 B URL HTTP/2 www1.pictures.gi.zimbio.com/Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a89f26913bb306ea5d562d56cd2a651b
022d78f3a9820da584b61b60490eb2d081b6e01a
5ff07582ede401499b21ebd5917fc76b981cfe542b19ce71adf6cd8c8b9e9c01
GET /Dario%2BFranchitti%2BJoanne%2BHayes%2BDaytona%2BTesting%2Bor_8wY9nTgKl.jpg HTTP/1.1
Host: www1.pictures.gi.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
content-type: text/html
server: nginx/1.4.6 (Ubuntu)
location: http://www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
expires: Sat, 04 Mar 2023 17:39:46 GMT
cache-control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:54 GMT
age: 402968
x-served-by: cache-bfi-krnt7300110-BFI, cache-bma1678-BMA
x-cache: HIT, MISS
x-cache-hits: 14, 0
x-timer: S1670319354.218547,VS0,VE145
x-response-time: 145070
strict-transport-security: max-age=31557600
content-length: 193
X-Firefox-Spdy: h2
www.mikethefanboy.com/site/wp-content/uploads/2010/11/DSC02490.jpg
301 Moved Permanently 162 B URL HTTP/1.1 www.mikethefanboy.com/site/wp-content/uploads/2010/11/DSC02490.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /site/wp-content/uploads/2010/11/DSC02490.jpg HTTP/1.1
Host: www.mikethefanboy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: keep-alive
Content-Length: 162
Content-Type: text/html
Location: https://www.mikethefanboy.com/site/wp-content/uploads/2010/11/DSC02490.jpg
X-XSS-Protection: 1
X-Content-Type-Options: nosniff
Referrer-Policy: no-referrer-when-downgrade
X-FW-Server: Flywheel/5.1.0
X-FW-Hash: tjvd0a9v7a
X-FW-Version: 5.0.0
Server: Flywheel/5.1.0
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
X-Served-By: cache-bma1679-BMA
X-Cache: MISS
X-Cache-Hits: 0
X-Timer: S1670319354.980920,VS0,VE389
Vary: Authorization
X-FW-Serve: TRUE
X-FW-Static: NO
X-FW-Type: VISIT
www3.pictures.gi.zimbio.com/Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg
301 Moved Permanently 193 B URL HTTP/2 www3.pictures.gi.zimbio.com/Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash a89f26913bb306ea5d562d56cd2a651b
022d78f3a9820da584b61b60490eb2d081b6e01a
5ff07582ede401499b21ebd5917fc76b981cfe542b19ce71adf6cd8c8b9e9c01
GET /Premiere%2BWarner%2BBros%2BFriday%2B13th%2BArrivals%2BES8A6xp3Zdol.jpg HTTP/1.1
Host: www3.pictures.gi.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
content-type: text/html
server: nginx/1.4.6 (Ubuntu)
location: http://www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
expires: Sun, 05 Feb 2023 01:54:26 GMT
cache-control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:54 GMT
age: 2792488
x-served-by: cache-bfi-krnt7300036-BFI, cache-bma1678-BMA
x-cache: HIT, HIT
x-cache-hits: 51, 1
x-timer: S1670319354.382318,VS0,VE1
x-response-time: 1460
strict-transport-security: max-age=31557600
content-length: 193
X-Firefox-Spdy: h2
www1.pictures.zimbio.com/gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg
200 OK 57 kB URL HTTP/1.1 www1.pictures.zimbio.com/gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 594x400, components 3\012- data
Hash 5aababc7812b6d5faa81ba6c8f41f4d5
f619e8a9619a97528c16a4617eb3f53449003818
34917a3afe56114d7903353c1754b1a16279a7d4a6516198beb6c2bf62de4385
GET /gi/Dario%2BFranchitti%2BJapan%2B300%2BPractice%2BQualifying%2BUn6KZWJIRlGl.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 56764
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Sat, 18 Sep 2010 07:15:51 GMT
ETag: "4c946727-ddbc"
Expires: Mon, 13 Feb 2023 04:56:25 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 2090369
X-Served-By: cache-bfi-kbfi7400021-BFI, cache-bma1679-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 41, 1
X-Timer: S1670319354.372594,VS0,VE13
X-Response-Time: 12530
Strict-Transport-Security: max-age=31557600
www4.pictures.zimbio.com/gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg
200 OK 65 kB URL HTTP/1.1 www4.pictures.zimbio.com/gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 378x594, components 3\012- data
Hash 908c4af1fd56370d334d09526901ac62
809136e8a6c7a5e1e28c17c3ebb0a229648382f0
667c37e54e13a4ada0301e288028cf634c81c9db55d0291f87b4cc30c2e3fe9d
GET /gi/Bitch%2BSlap%2BPortraits%2B2009%2BToronto%2BInternational%2Bwlcg-pnImDtl.jpg HTTP/1.1
Host: www4.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 64598
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Tue, 15 Sep 2009 12:41:21 GMT
ETag: "4aaf8b71-fc56"
Expires: Thu, 16 Feb 2023 21:06:57 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 1772937
X-Served-By: cache-bfi-krnt7300031-BFI, cache-bma1681-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 53, 0
X-Timer: S1670319354.232346,VS0,VE145
X-Response-Time: 144945
Strict-Transport-Security: max-age=31557600
i2.cdn.turner.com/si/2011/writers/bruce_martin/05/13/Indy.500.storylines/Dario-Franchitti-Indy-500.jpg
404 Not Found 10 B URL HTTP/1.1 i2.cdn.turner.com/si/2011/writers/bruce_martin/05/13/Indy.500.storylines/Dario-Franchitti-Indy-500.jpg
IP
Hash 7605968e79d0ca095ab1231486d2b814
a007b420d19ceefa840f0373e050e3b51a4ab480
493fda53120050f85836032324409be6c6484f90a0755ae0c6a673ba7626818b
GET /si/2011/writers/bruce_martin/05/13/Indy.500.storylines/Dario-Franchitti-Indy-500.jpg HTTP/1.1
Host: i2.cdn.turner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 404 Not Found
Accept-Ranges: bytes
Content-Length: 10
Server: AkamaiNetStorage
Cache-Control: max-age=3600
Expires: Tue, 06 Dec 2022 10:35:54 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: keep-alive
Access-Control-Allow-Methods: GET,POST,OPTIONS
Access-Control-Allow-Origin: *
2.bp.blogspot.com/_eSZjPN4_iE4/TRUHEzqoRZI/AAAAAAAAAtM/LHD-1gOY1BE/s1600/Merry%2BChristmas%2Bbuenosairesstreetart.blogspot.com.JPG
200 OK 262 kB URL HTTP/1.1 2.bp.blogspot.com/_eSZjPN4_iE4/TRUHEzqoRZI/AAAAAAAAAtM/LHD-1gOY1BE/s1600/Merry%2BChristmas%2Bbuenosairesstreetart.blogspot.com.JPG
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 768x1024, components 3\012- data
Size 262 kB (262463 bytes)
Hash e5607398fc9cf66f3502d28b8609b7bd
32e903482ca7dd081f8e99cc9db4f15d33def155
07ee1cb6a6fe50c179c559fb81250fba692c7b61a3fd227adf3d5de24bbf8126
GET /_eSZjPN4_iE4/TRUHEzqoRZI/AAAAAAAAAtM/LHD-1gOY1BE/s1600/Merry%2BChristmas%2Bbuenosairesstreetart.blogspot.com.JPG HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2d3"
Expires: Wed, 07 Dec 2022 09:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Merry Christmas buenosairesstreetart.blogspot.com.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 09:35:54 GMT
Server: fife
Content-Length: 262463
X-XSS-Protection: 0
tinypic.com/images/goodbye.jpg
200 OK 16 kB URL HTTP/1.1 tinypic.com/images/goodbye.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Hash 32af06ac4b80d728f7e4c8780eb6b6d7
dd3198f4361e94f2c3606474e04a629e42402d02
f610dc2752e938d77dab1c4e9fb1f0f7f53b25e527d130ce4e034b7de09da053
GET /images/goodbye.jpg HTTP/1.1
Host: tinypic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 15616
Connection: keep-alive
Last-Modified: Wed, 18 Sep 2019 21:23:53 GMT
Server: AmazonS3
Date: Mon, 05 Dec 2022 21:22:49 GMT
ETag: "32af06ac4b80d728f7e4c8780eb6b6d7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 10pPBmO82ffmXfj8__TOGQgSEcHu_fTNmd2eMQJInXEuYxcMh9NTMw==
Age: 43989
2.bp.blogspot.com/--76a5kpjbpA/TdOtmwfmiuI/AAAAAAAAATA/mvYHxfxwcxM/s1600/blog%252B033.jpg
200 OK 93 kB URL HTTP/1.1 2.bp.blogspot.com/--76a5kpjbpA/TdOtmwfmiuI/AAAAAAAAATA/mvYHxfxwcxM/s1600/blog%252B033.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x783, components 3\012- data
Hash e601a4dde6bd675157a2e693c16c4065
6b8aba354dd6d5c6b6ac7c1263a8a315681f4a85
9986a39ddd6b0dcd368756995cf12986926d7750e0dc2d97dc45c5656f9172f8
GET /--76a5kpjbpA/TdOtmwfmiuI/AAAAAAAAATA/mvYHxfxwcxM/s1600/blog%252B033.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v130"
Expires: Wed, 07 Dec 2022 09:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="blog 033.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 09:35:54 GMT
Server: fife
Content-Length: 93364
X-XSS-Protection: 0
keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//obsessobsession2109.blogspot.com/&ref=&l=celebrity
200 OK 576 B URL HTTP/1.1 keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//obsessobsession2109.blogspot.com/&ref=&l=celebrity
IP
ASN #46475 LIMESTONENETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (576), with no line terminators
Hash 42000458d17fbc10d0f2a1547c29fcd6
ab93d920a9da637ce96dfaec2bce149d3bf913ae
86080fc3bef60eb8877e77068941e99d583566a73f35c538ae364f6c207c0e6d
GET /?if=1&scr_w=1280&scr_h=1024&blog=http%3A//obsessobsession2109.blogspot.com/&ref=&l=celebrity HTTP/1.1
Host: keywebtracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 576
content-type: text/html; charset=utf-8
date: Tue, 06 Dec 2022 09:35:53 GMT
server: nginx
set-cookie: sid=614fb032-7549-11ed-b173-51dfe2728cb6; path=/; domain=.keywebtracker.com; expires=Sun, 24 Dec 2090 12:50:01 GMT; max-age=2147483647; HttpOnly
www4.pictures.zimbio.com/gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg
200 OK 41 kB URL HTTP/1.1 www4.pictures.zimbio.com/gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 594x395, components 3\012- data
Hash a64ddc1b3c97010ace5b6b8499dec254
0e3eb86e803116401feb5ba8bc968f069097394c
9ab46d4de32f0b75ffa48648a185342c842a79cf0784ace75f47f5ab440d2e4e
GET /gi/Dario%2BFranchitti%2BIowa%2BCorn%2BIndy%2B250%2B_Tb6k7F0qbTl.jpg HTTP/1.1
Host: www4.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 40623
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Fri, 24 Jun 2011 22:06:02 GMT
ETag: "4e050a4a-9eaf"
Expires: Thu, 16 Feb 2023 21:07:00 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 1772934
X-Served-By: cache-bfi-krnt7300035-BFI, cache-bma1622-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 47, 0
X-Timer: S1670319354.315727,VS0,VE145
X-Response-Time: 145429
Strict-Transport-Security: max-age=31557600
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 40053492fa5afeb27f4f616ef28d187e
f36778dda6ebb163933cd989fe3fdfd6ceaafd78
0bc5bb73e704eea1c5821e356ad4d16c2395f7af27635cc7acacc039161f22c6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC5BB73E704EEA1C5821E356AD4D16C2395F7AF27635CC7ACACC039161F22C6"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6162
Expires: Tue, 06 Dec 2022 11:18:36 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: keep-alive
www.bollywoodwallpaper.org/d/254986-4/Diana-Zubiri-Wallpaper-001.jpg
403 Forbidden 373 B URL HTTP/1.0 www.bollywoodwallpaper.org/d/254986-4/Diana-Zubiri-Wallpaper-001.jpg
IP
ASN #133618 Trellian Pty. Limited
Hash a40587be6ee4915584e615ee5dd13c5b
2a62d86880b4190636869a48cf03f7d26e131f1e
8fbb07f61d6590e35b509a34b34101fdb9006da5063ea7454ceb6e3dc101de51
GET /d/254986-4/Diana-Zubiri-Wallpaper-001.jpg HTTP/1.1
Host: www.bollywoodwallpaper.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
ocsp.digicert.com/
200 OK 471 B IP
Hash 2b9d6a686aa3c4ea24568425e43a5221
d53bb4c9579bd1db78a0520619e888aec79f750f
c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2620
Cache-Control: max-age=87278
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 09:50:32 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
w.notrecinema.com/images/usercontent/getimgw.php?f=/images/stars/14000/s_sjff_03_img_1335.jpg&ref=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F
301 Moved Permanently 0 B URL HTTP/2 w.notrecinema.com/images/usercontent/getimgw.php?f=/images/stars/14000/s_sjff_03_img_1335.jpg&ref=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/usercontent/getimgw.php?f=/images/stars/14000/s_sjff_03_img_1335.jpg&ref=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F HTTP/1.1
Host: w.notrecinema.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
cache-control: must-revalidate
x-content-type-options: nosniff
vary: User-Agent
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
permissions-policy: autoplay=*, fullscreen=(self), geolocation=*, navigation-override=(self), sync-xhr=*
location: /images/usercontent/star/jean-seberg-photo_521_1742.jpg
content-length: 0
content-type: text/html; charset=ISO-8859-1
date: Tue, 06 Dec 2022 09:35:54 GMT
server: Apache
X-Firefox-Spdy: h2
katmerlibilgi.files.wordpress.com/2009/04/hugh-jackman_05.jpg
200 OK 130 kB URL HTTP/2 katmerlibilgi.files.wordpress.com/2009/04/hugh-jackman_05.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=10, description=LOS ANGELES - OCTOBER 16: Actor Hugh Jackman talks at the Four Seasons Hotel on October 16, 2006 in Los Angeles, California. (, orientation=upper-left, xresolution=318, yresolution=326, resolutionunit=2, software=Adobe Photoshop 7.0, datetime=2007:01:29 01:49:33], baseline, precision 8, 1600x1067, components 3\012- data
Size 130 kB (129487 bytes)
Hash b2e077566b7746d7d8b70e4ecc063e3b
728f494b32cf038f0602fe74ad53cdc4e618dfdc
289e5e5dac0842215f799c82bdfa0024097cface9600e5a1d4277ce949447b42
GET /2009/04/hugh-jackman_05.jpg HTTP/1.1
Host: katmerlibilgi.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: image/jpeg
content-length: 129487
last-modified: Thu, 30 Apr 2009 20:23:39 GMT
expires: Tue, 03 Jan 2023 17:43:29 GMT
x-orig-src: 01_mogdir
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://katmerlibilgi.wordpress.com
vary: Origin
x-nc: MISS arn 28 np
x-content-type-options: nosniff
X-Firefox-Spdy: h2
www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1620-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319355.556942,VS0,VE0
X-Response-Time: 136
Strict-Transport-Security: max-age=31557600
img178.imageshack.us/img178/8577/49126951.png
404 Not Found 168 B URL HTTP/1.1 img178.imageshack.us/img178/8577/49126951.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 341d15013ba4391483b2d5e34cbc5c5c
986399b390a9aaa9a33e459099aaf9f1dbc227ab
376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
GET /img178/8577/49126951.png HTTP/1.1
Host: img178.imageshack.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.2.8
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html
Content-Length: 168
Connection: keep-alive
ocsp.digicert.com/
200 OK 279 B IP
Hash 93ef54c3d9abb1613fbb2cffdd54fed3
bccd9722ac654d9b6f1b51bd9397af2cd43cdd47
7e75ee6c42e712c4247dfc927f2cd9a780ea72ba61439002f35d38a7cdf8152b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 960
Cache-Control: max-age=152228
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638eb8de-117"
Expires: Thu, 08 Dec 2022 03:53:02 GMT
Last-Modified: Tue, 06 Dec 2022 03:37:02 GMT
Server: ECS (amb/6BA1)
X-Cache: HIT
Content-Length: 279
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 309 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 38c2553797daebcb5df3de801bbabb9e
cd6078ae550e7aa0bf8eba99e47768cdfc15fc47
cd2eceb78077b115145b7890620f20de052805a19bf445fea9b8c6ebbd365256
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cFKJzRQ3hlWOoUt64Crf5NCEB4WjEqF5%2FdHaIUX%2FXlMaLbhhR3Eo4WupfQ1k0Na5GIi8eIDjRCn2M4Kxp930jZQshQtVerQOWJ9BwS1Wy3IiXmc3PNYPyPTfsLc8JVo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bdb9b5b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Connection: close
Content-Length: 0
Server: Varnish
Retry-After: 0
Location: https://www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1677-BMA
X-Cache: HIT
X-Cache-Hits: 0
X-Timer: S1670319355.602239,VS0,VE0
X-Response-Time: 114
Strict-Transport-Security: max-age=31557600
www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
301 Moved Permanently 215 B URL HTTP/1.1 www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash ce82a90718a1d849f86bb12887fb4b99
6419650020fb4dcca104a94439408f1f812d038c
8a30808e0d0a40493b97f98f95f04a977d0dbbe3a70b584e1beef07f6fa19b62
GET /webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg HTTP/1.1
Host: www.musicremedy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Location: https://www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 09:35:54 GMT
Expires: Tue, 06 Dec 2022 09:35:54 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 215
Server: GSE
images2.fanpop.com/images/polls/200000/200140_1236538438512_full.jpg
200 OK 53 kB URL HTTP/1.1 images2.fanpop.com/images/polls/200000/200140_1236538438512_full.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 500x500, components 3\012- data
Hash 6250120e766f35f268189cf4c3fb6066
3060471d8a12847ec93b6974439d77f4081c06cf
9e77d966ba0e4d8f408c72adf7822585ac9bd07636359501f039bf5f1642e3c8
GET /images/polls/200000/200140_1236538438512_full.jpg HTTP/1.1
Host: images2.fanpop.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: image/jpeg
Content-Length: 53206
Connection: keep-alive
Last-Modified: Sun, 08 Mar 2009 18:53:58 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PO65yNEMvR%2BULOJ%2BjvFjEnx7Sw5qsKe3mUgofJFWvOTS9xL6Sr1hi2Yx4f3Jvriz2tB9WBwovq9nHnXWRTKUZXzVL%2BhFMBKCiTUmmF%2FrBD1pmEjkIJqzzjxRtpRPV%2Fzp99u4Cw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 775408ba4c6cb4f4-OSL
alt-svc: h2=":443"; ma=60
ocsp.comodoca4.com/
200 OK 283 B IP
Hash b5ef0a7aa58c106431af194d139ca0eb
a50317f84ba76876f85acbda51ce4ca1b523050e
4be41f42d35799019a2737f78e0dd7492b0a4aed0cd752562072e6f1073b6e73
POST / HTTP/1.1
Host: ocsp.comodoca4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: application/ocsp-response
Content-Length: 283
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 07:38:48 GMT
Expires: Sun, 11 Dec 2022 07:38:47 GMT
Etag: "a50317f84ba76876f85acbda51ce4ca1b523050e"
Cache-Control: max-age=424372,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775408be2c27b50c-OSL
pre03.deviantart.net/2c12/th/pre/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg
301 Moved Permanently 0 B URL HTTP/1.1 pre03.deviantart.net/2c12/th/pre/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2c12/th/pre/f/2011/128/2/0/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg HTTP/1.1
Host: pre03.deviantart.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
Connection: keep-alive
Server: da-redirector/0.5.2
Location: https://images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/d5bad267-20c1-4951-be20-0c3d3de9f0da/d3fwwkz-b24683fc-f459-4950-8a9e-764b7ab9953a.jpg/v1/fill/w_752,h_1063,q_75,strp/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi9kNWJhZDI2Ny0yMGMxLTQ5NTEtYmUyMC0wYzNkM2RlOWYwZGEvZDNmd3drei1iMjQ2ODNmYy1mNDU5LTQ5NTAtOGE5ZS03NjRiN2FiOTk1M2EuanBnIiwid2lkdGgiOiI8PTc1MiIsImhlaWdodCI6Ijw9MTA2MyJ9XV19.ilWj2diyBH6nN4rgMc3LFbOLOsElQUt3pnlK80wA8k4
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: HJO7eZXFOmknMNd9JRlFug==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: N1pYeRdBiAfYYy06d5hfx4OA4P0=
www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
200 OK 58 kB URL HTTP/1.1 www1.pictures.zimbio.com/gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 398x594, components 3\012- data
Hash be1042c7eb7ed14f6f6eb083c43367b1
70dfc7ad81525e117c36cdcb91f03030a32d6295
1f0da32a37587375c956fe92647d7eeb925a8903d346f42be8869a7698735e36
GET /gi/Premiere+Warner+Bros+Friday+13th+Arrivals+ES8A6xp3Zdol.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 58267
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Sat, 12 Sep 2009 07:33:48 GMT
ETag: "4aab4edc-e39b"
Expires: Thu, 16 Feb 2023 21:07:03 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 1772931
X-Served-By: cache-bfi-kbfi7400111-BFI, cache-bma1621-BMA
X-Cache: HIT, HIT
X-Cache-Hits: 40, 1
X-Timer: S1670319355.703101,VS0,VE1
X-Response-Time: 887
Strict-Transport-Security: max-age=31557600
i67.photobucket.com/albums/h282/bkangels/Page4.jpg
200 OK 242 kB URL HTTP/2 i67.photobucket.com/albums/h282/bkangels/Page4.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 242 kB (242370 bytes)
Hash 8eeeda77c7dc5dda854fbf9d131526e2
29a58f8b19f8390cef6abe0cba44979869f6b36d
a3438efc4f6151880b0e0d62dc60f71c7fcd9aaa1150748218e50fae1bf1af63
GET /albums/h282/bkangels/Page4.jpg HTTP/1.1
Host: i67.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 242370
date: Tue, 06 Dec 2022 09:35:54 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="Page4.webp"
expires: Wed, 06 Dec 2023 09:35:54 GMT
server: photobucket
x-amzn-trace-id: Root=1-638f0cfa-061917ab71f9ab23665a5f72
x-request-id: o-Bjh794Jxz7HzXy6FhAV
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GY9tbx47nWVvxGzIoW4ZfcKe9tCuy-aaVlKTjl5Oz5hcOhndVlypoA==
vary: Accept, Origin
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash bcffcd2fdccba45fb24c7c0446d96ab1
97ba714bdbcebe7194a3b2e9fe7f86aa1060b684
e32c94ed7a554f5bcf98aed764415a6226efc4ea255cb05d3544d84a7700dc38
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E32C94ED7A554F5BCF98AED764415A6226EFC4EA255CB05D3544D84A7700DC38"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 06 Dec 2022 15:35:54 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: keep-alive
www.blogger.com/navbar.g?targetBlogID=1221393542812368741&blogName=Koty%27s+blog&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://obsessobsession2109.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=http://obsessobsession2109.blogspot.com/&vt=9009942439758678369&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
200 OK 2.6 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=1221393542812368741&blogName=Koty%27s+blog&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://obsessobsession2109.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=http://obsessobsession2109.blogspot.com/&vt=9009942439758678369&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)
Hash 3bbba79dc267c5b3b9ec94a71ea0c41c
2d5d88c9577e12a5d2c3f86338defbfc06b00b79
50f54e5a253bb7f345d7787c5ef35a765d426f235b4b789ae66d40681811d95e
GET /navbar.g?targetBlogID=1221393542812368741&blogName=Koty%27s+blog&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://obsessobsession2109.blogspot.com/search&blogLocale=en_GB&v=2&homepageUrl=http://obsessobsession2109.blogspot.com/&vt=9009942439758678369&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 09:35:54 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2589
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash bcffcd2fdccba45fb24c7c0446d96ab1
97ba714bdbcebe7194a3b2e9fe7f86aa1060b684
e32c94ed7a554f5bcf98aed764415a6226efc4ea255cb05d3544d84a7700dc38
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E32C94ED7A554F5BCF98AED764415A6226EFC4EA255CB05D3544D84A7700DC38"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21582
Expires: Tue, 06 Dec 2022 15:35:36 GMT
Date: Tue, 06 Dec 2022 09:35:54 GMT
Connection: keep-alive
apis.google.com/js/platform:gapi.iframes.style.common.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform:gapi.iframes.style.common.js
IP
File type ASCII text, with very long lines (1279)
Hash d38f9d16065c09d51a6043b803687d52
4f75ca14fbda9606e27a631d6d2b3f7311576038
e4d72a27c1a455df255ced0cf236d72d1f94f7626bcd726678cd604c662dd97d
GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20994
date: Tue, 06 Dec 2022 09:35:54 GMT
expires: Tue, 06 Dec 2022 09:35:54 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "f1dbb3240cb08426"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
200 OK 76 kB URL HTTP/1.1 www1.pictures.zimbio.com/gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 594x399, components 3\012- data
Hash 2dfc4f30dc9c5168ee48ca4ef7770d01
2e3aa31820c6f04ffabb633b2a835dbdd526674f
995c29d7c84353dc3b75caef50d357db4cd9067dd2157bd53a3b2275f4757e11
GET /gi/Dario+Franchitti+Joanne+Hayes+Daytona+Testing+or_8wY9nTgKl.jpg HTTP/1.1
Host: www1.pictures.zimbio.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Connection: keep-alive
Content-Length: 75707
Content-Type: image/jpeg
Server: nginx/1.4.6 (Ubuntu)
Last-Modified: Mon, 14 Sep 2009 06:22:35 GMT
ETag: "4aade12b-127bb"
Expires: Thu, 09 Mar 2023 06:12:33 GMT
Cache-Control: max-age=8035200, stale-while-revalidate=604800, stale-if-error=604800
Via: 1.1 varnish, 1.1 varnish
Accept-Ranges: bytes
Date: Tue, 06 Dec 2022 09:35:54 GMT
Age: 12201
X-Served-By: cache-bfi-kbfi7400096-BFI, cache-bma1679-BMA
X-Cache: HIT, MISS
X-Cache-Hits: 3, 0
X-Timer: S1670319355.643395,VS0,VE145
X-Response-Time: 144751
Strict-Transport-Security: max-age=31557600
ocsp.digicert.com/
200 OK 589 B IP
Hash ac82077e0d477ded4e34096cb70f4c96
db1d733f9808ff56991845572de25aea11e1e0c3
c2c516fadcfd293234102c31db04ce1a53918938fd3b30694027ffc929823189
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 223
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638ea0f5-118"
Last-Modified: Tue, 06 Dec 2022 09:32:11 GMT
Server: ECS (amb/6B82)
X-Cache: HIT
Content-Length: 280
resources.blogblog.com/img/navbar/icons_orange.png
200 OK 1.2 kB URL HTTP/2 resources.blogblog.com/img/navbar/icons_orange.png
IP
Hash 0400d53ea587b67daad41c142ebbc33c
25f3615c1d1739cbc23330e6b5a8ca734c3afeee
f7c84db239b82fa865640cfdbbfb91f8d21c949c7bf0203014b0ac1f49fbf954
GET /img/navbar/icons_orange.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 16:27:33 GMT
expires: Tue, 06 Dec 2022 16:27:33 GMT
cache-control: public, max-age=604800
last-modified: Mon, 28 Nov 2022 19:53:31 GMT
content-type: image/png
age: 580101
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/navbar/arrows-blue.png
200 OK 104 B URL HTTP/2 resources.blogblog.com/img/navbar/arrows-blue.png
IP
File type PNG image data, 19 x 4, 8-bit/color RGBA, non-interlaced\012- data
Hash 38c95719e05f4184a301768d8de91e09
d0ed1147d46f2cf592584239a5a101d6f2abb588
259ece79a45ad7ecbcf6fb0669de61aa6a01ebedaba47a7e88283435e0e6b1be
GET /img/navbar/arrows-blue.png HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 104
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 00:36:19 GMT
expires: Wed, 07 Dec 2022 00:36:19 GMT
cache-control: public, max-age=604800
last-modified: Tue, 29 Nov 2022 06:52:50 GMT
content-type: image/png
age: 550775
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8888cc9a893b9f729d27b114a07f1aa7
7ecb05bf1e1aa7dd5828486700ee8d8dcfcea593
9ea182be26c24c453961dded40462e11fb2eba3e9bc7b250e37b422e68f1ee5a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 09:35:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 15:28:29 GMT
Expires: Sat, 10 Dec 2022 15:28:28 GMT
Etag: "7ecb05bf1e1aa7dd5828486700ee8d8dcfcea593"
Cache-Control: max-age=366153,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775408bf5c9fb506-OSL
ocsp.digicert.com/
200 OK 279 B IP
Hash 93ef54c3d9abb1613fbb2cffdd54fed3
bccd9722ac654d9b6f1b51bd9397af2cd43cdd47
7e75ee6c42e712c4247dfc927f2cd9a780ea72ba61439002f35d38a7cdf8152b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 960
Cache-Control: max-age=152228
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638eb8de-117"
Expires: Thu, 08 Dec 2022 03:53:02 GMT
Last-Modified: Tue, 06 Dec 2022 03:37:02 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 279
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 42 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 4b753ec860a79d8a1867035bc62cb4c4
d197581949190fc18661aa21629f441b75328e03
cfdfeffe366947bd6dd1d08dfe554da362e532a9b0f1cafbb3efd9b9d3982682
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 42361
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 03:07:51 GMT
expires: Thu, 30 Nov 2023 03:07:51 GMT
cache-control: public, max-age=31536000
age: 541683
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.freewebs.com/officialwickedthemusical/10.1.08.jpg
301 Moved Permanently 471 B URL HTTP/2 www.freewebs.com/officialwickedthemusical/10.1.08.jpg
IP
Hash 0ab7ca004919df77c73f50c0d90b3f33
229fa1bb8ae8a8e9d6ccd7fbac7d65095b9f2d6e
6ff9b893be63d71ced421fbd63a05c0974e30a15f11bef981e6e869e7f361386
GET /officialwickedthemusical/10.1.08.jpg HTTP/1.1
Host: www.freewebs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
location: https://officialwickedthemusical.webs.com/10.1.08.jpg
cache-control: max-age=3600
expires: Tue, 06 Dec 2022 10:35:54 GMT
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408be7cf80b51-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
302 Found 522 B URL HTTP/2 www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1034)
Hash 15f92c6da28aff4a486dfce3d4d3ab7d
4d75394cc57302ef4dbeeea4b4a6210bba7b08a4
ad546c846370bfa8f56f1e36d037ce2eae943d9c9939162b4836bbc5b4be9a21
GET /followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
location: https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Tue, 06 Dec 2022 09:35:54 GMT
expires: Tue, 06 Dec 2022 09:35:54 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 522
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash f2fb36116589ef759f95ed63fc5aa93c
97dc3dbbcc22cfadb88d84d69812a9eccdec797e
56f95bf8faf5b2fc67267f7dcbe0ca7729078978453cb9a5d1f4f71fe3e4f79c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638dccb3-116"
Server: ECS (amb/6BA1)
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash f2fb36116589ef759f95ed63fc5aa93c
97dc3dbbcc22cfadb88d84d69812a9eccdec797e
56f95bf8faf5b2fc67267f7dcbe0ca7729078978453cb9a5d1f4f71fe3e4f79c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Etag: "638dccb3-116"
Last-Modified: Tue, 06 Dec 2022 09:35:54 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash cd4f7adad3fe34548fa20fc8bcd9dfb8
89d9e0523fd6141bb3599dfe631af767a48ce10a
988b706c3c6accc138214ba147bfb17b01ae8ae34c98e3d6ded4e5340b63fa27
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
anatypicaltraditionalist.files.wordpress.com/2011/01/november2010.jpg
404 Not Found 1.8 kB URL HTTP/2 anatypicaltraditionalist.files.wordpress.com/2011/01/november2010.jpg
IP
Hash 72b92865ca5f6f7fc480217750a3d351
df30058a530cbeb11e957c716b30ce28635ea44f
b3c6d0d8da39795991fc6a804ff05e9dfa1c2c19a0345b6db379b25f4832be3c
GET /2011/01/november2010.jpg HTTP/1.1
Host: anatypicaltraditionalist.files.wordpress.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html;charset=utf-8
vary: Accept-Encoding
x-reason: 0010
X-Firefox-Spdy: h2
i258.photobucket.com/albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png
200 OK 244 kB URL HTTP/2 i258.photobucket.com/albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 244 kB (244064 bytes)
Hash beb4c3b4fc4fdf156a79113166444cc3
280fa61e659d575fa17a53275f456128e1e3d440
99920b3007dcbc41151015293168314386da9114764e7bebd741e1826147d997
GET /albums/hh247/ampy009/AshleyTisdalePhotoshopBG.png HTTP/1.1
Host: i258.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 244064
date: Tue, 06 Dec 2022 09:35:54 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="AshleyTisdalePhotoshopBG.webp"
expires: Wed, 06 Dec 2023 09:35:54 GMT
server: photobucket
x-amzn-trace-id: Root=1-638f0cfa-2ab5b6a65f654ced6accd840
x-request-id: PM_RYFIOWr4l8BhycheTa
x-cache: Miss from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: xCWJhTp0c839MY-mlaR77jBPnltriE-NN-OYW-RMloLrJupjQFBxaw==
vary: Accept, Origin
X-Firefox-Spdy: h2
991.com/newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg
404 Not Found 1.2 kB URL HTTP/2 991.com/newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 5343c1a8b203c162a3bf3870d9f50fd4
04b5b886c20d88b57eea6d8ff882624a4ac1e51d
dc1d54dab6ec8c00f70137927504e4f222c8395f10760b6beecfcfa94e08249f
GET /newGallery/Avril-Lavigne-The-Best-Damn-Thi-399525.jpg HTTP/1.1
Host: 991.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Tue, 06 Dec 2022 09:35:55 GMT
content-type: text/html
content-length: 1245
set-cookie: AWSALB=O2AlCIpZI2lqDx4ctqSJ3PN8O+nd2EAozP6Q80maarHz4W5TA2FSHps61xYZ+MBbXLxDbbZLtBLKyGypeX8C8xXUkbwS6R4+iCSOHVV87RZMo8D7SeLdbwVyMmDu; Expires=Tue, 13 Dec 2022 09:35:55 GMT; Path=/
AWSALBCORS=O2AlCIpZI2lqDx4ctqSJ3PN8O+nd2EAozP6Q80maarHz4W5TA2FSHps61xYZ+MBbXLxDbbZLtBLKyGypeX8C8xXUkbwS6R4+iCSOHVV87RZMo8D7SeLdbwVyMmDu; Expires=Tue, 13 Dec 2022 09:35:55 GMT; Path=/; SameSite=None; Secure
server: Microsoft-IIS/7.5
x-powered-by: ASP.NET
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
302 Found 465 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (510)
Hash eab08252b8ea1d12cfec252e6cae28d8
635efedc7921a56bb7bb78e8e3dc98f161253f6e
48df66f20f58a8f058f556900140f4cfb03e628f437c9690f52634221adc5e35
GET /ServiceLogin?passive=true&continue=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=http://www.blogger.com/followers.g?blogID%3D1221393542812368741%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://obsessobsession2109.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 09:35:55 GMT
location: http://www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-fb_BQXpISJgG4fk9lwQD-g' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 465
server: GSE
set-cookie: __Host-GAPS=1:4jjEtH7dBhDRg1KwjZJw-3-4u06k4g:H4HPU-90du5AB2g1;Path=/;Expires=Thu, 05-Dec-2024 09:35:54 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
keywebtracker.com/?blog=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDMyNjU1NCwiaWF0IjoxNjcwMzE5MzU0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24ybDZqNTM5MG9oMWlkZ2cxYjFobTQiLCJuYmYiOjE2NzAzMTkzNTQsInRzIjoxNjcwMzE5MzU0NDEwNDQ5fQ.xfCQspigAAZtBC2Ef4OdDhDtXrawguiZomYivzMAFY0&l=celebrity&ref=&scr_h=1024&scr_w=1280&sid=614fb032-7549-11ed-b173-51dfe2728cb6
302 Found 11 B URL HTTP/1.1 keywebtracker.com/?blog=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDMyNjU1NCwiaWF0IjoxNjcwMzE5MzU0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24ybDZqNTM5MG9oMWlkZ2cxYjFobTQiLCJuYmYiOjE2NzAzMTkzNTQsInRzIjoxNjcwMzE5MzU0NDEwNDQ5fQ.xfCQspigAAZtBC2Ef4OdDhDtXrawguiZomYivzMAFY0&l=celebrity&ref=&scr_h=1024&scr_w=1280&sid=614fb032-7549-11ed-b173-51dfe2728cb6
IP
ASN #46475 LIMESTONENETWORKS
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?blog=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDMyNjU1NCwiaWF0IjoxNjcwMzE5MzU0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24ybDZqNTM5MG9oMWlkZ2cxYjFobTQiLCJuYmYiOjE2NzAzMTkzNTQsInRzIjoxNjcwMzE5MzU0NDEwNDQ5fQ.xfCQspigAAZtBC2Ef4OdDhDtXrawguiZomYivzMAFY0&l=celebrity&ref=&scr_h=1024&scr_w=1280&sid=614fb032-7549-11ed-b173-51dfe2728cb6 HTTP/1.1
Host: keywebtracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//obsessobsession2109.blogspot.com/&ref=&l=celebrity
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 06 Dec 2022 09:35:54 GMT
location: http://r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
server: nginx
set-cookie: sid=614fb032-7549-11ed-b173-51dfe2728cb6; path=/; domain=.keywebtracker.com; expires=Sun, 24 Dec 2090 12:50:02 GMT; max-age=2147483647; HttpOnly
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 83e0936435ad95a15c9ec5ff9520f4fe
a8225ee0d8ae117f977f7ff817c342c62e91b5a9
ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12389
Expires: Tue, 06 Dec 2022 13:02:24 GMT
Date: Tue, 06 Dec 2022 09:35:55 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 99d1ff8fa2e095dcf2bda3d1e1af1221
f914f04a0e1fb45a221d31d2105bfc73015b03e6
90325d4299a44dbd213857ada6f6880db8c33ad61685cfcb60c4a2455a84cf87
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7663e5fc-37de-4be8-9be7-49805622f85d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10183
x-amzn-requestid: 557e6b38-7be9-4953-968b-2e5bd3491ef4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUDYEQbIAMFwRg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e2-1fcd8fc4719bc0bc7d11abd2;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:14 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: z1_zJTJMuk724WMOmIc660b54AyZK8ffNVF5N7ehZ00W2kaL3Lcd1A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 32c16f33c8f5601364fa8229b0d74dc2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:47:14 GMT
age: 42521
etag: "f914f04a0e1fb45a221d31d2105bfc73015b03e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
kpitalrisk.free.fr/images/stars/14000/s_sjff_03_img_1335.jpg
301 Moved Permanently 12 kB URL HTTP/1.1 kpitalrisk.free.fr/images/stars/14000/s_sjff_03_img_1335.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 53afd826523f4c18bf968764818d7ca7
9a26884875abb0652c568c50438b65f801779f9a
4f9dfeda67a040fef9c6987a7c334a91c993c84f694fa91771fcf7fd1d2e4937
GET /images/stars/14000/s_sjff_03_img_1335.jpg HTTP/1.1
Host: kpitalrisk.free.fr
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 09:35:53 GMT
Server: Apache/ProXad [Jan 23 2019 20:05:46]
X-Powered-By: PHP/4.4.3-dev
Location: https://w.notrecinema.com/images/usercontent/getimgw.php?f=/images/stars/14000/s_sjff_03_img_1335.jpg&ref=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F
Connection: close
Content-Type: text/html
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 12 kB URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
Hash fdc4c4141a69a0381146a7c92d5c230a
b73853f989dcc98d090e83452e2e9bdbb448735f
b9997766d0fd15d4d290001356adcf1c8aa29fd8f6433bda871b4a6ef918b16a
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fab%2BTwyLodOLimMH%2BVR%2Bh23iiusE3%2Fbv5J%2BKJeOZikzRkRFDnxzIQzLsaxPsF37jidtI3QtGlmcFLiZlwNC9%2FOIXF8M66YNYHJz1uOJbTSKeCKs97%2ByM5SKAvmi%2BcII%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bd895db4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42536ef2-6e40-4541-ac60-0ff74058daa7.png
200 OK 16 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42536ef2-6e40-4541-ac60-0ff74058daa7.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b5e953213b7b13b8ee202406147fac52
67a09d8cd23ed444667b225f7fbf4bb17b9f42dd
cf6b2502f0a992148f9401c16a329cae5a6c21fb81f03131f3e69c58bc608110
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F42536ef2-6e40-4541-ac60-0ff74058daa7.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15732
x-amzn-requestid: 7467ddb0-b9f9-47e9-ac31-c7599fe45698
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csVIIESBIAMFU6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e689a-79e3f8b66e1cf72f3283ac5b;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:54:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3seQ7H4qrlKKpuIWUobiey92ZMkB4jWqd5v6T6379g0V0y6XdVFvWQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 61bc723adb3b1884ed759711e84e13a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:22:21 GMT
age: 40414
etag: "67a09d8cd23ed444667b225f7fbf4bb17b9f42dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7e1b54923ba506fde6b21c5bfb51ccc8
366aa3ab0790c496ea51bc08d1f2ff3358530d9e
a993ca6dc9a1f854f4542f9221e4f90060825ea863974b5163a9d3e284dc4663
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10594
x-amzn-requestid: eee9f193-eef5-44bf-997a-877fa206749e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSyIHpGoAMF1fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64da-0a9190f7698dbf2f73bb1575;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: f-KQCOuDl461V8MBPsSOj1ILCU91Q0pCSENaldkMHR2oZdrEUnHeaA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:03:16 GMT
age: 41559
etag: "366aa3ab0790c496ea51bc08d1f2ff3358530d9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfc1e29-0017-4346-aacf-66d3875076ce.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfc1e29-0017-4346-aacf-66d3875076ce.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 18bbcbf84b00d3bc602830478ff1bd7f
1f25392db4cf3693259202b24e898f21093b8bf9
cb2b44e1f74a9bb43fab48536f6146e273c728b34e4889ff3f18a411d14d2282
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbcfc1e29-0017-4346-aacf-66d3875076ce.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5790
x-amzn-requestid: 2e409a5f-ce04-4b9b-b3a2-74e5bbd256d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSvoEoUoAMFsxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64ca-72e1bb13187b18aa26c8566f;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WBNaNTgYQaDVlJqu2u341xYy_6zmr5LqmCD2BPjGPGgmAG20WNHyKw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:46:52 GMT
age: 42543
etag: "1f25392db4cf3693259202b24e898f21093b8bf9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash bcffcd2fdccba45fb24c7c0446d96ab1
97ba714bdbcebe7194a3b2e9fe7f86aa1060b684
e32c94ed7a554f5bcf98aed764415a6226efc4ea255cb05d3544d84a7700dc38
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "E32C94ED7A554F5BCF98AED764415A6226EFC4EA255CB05D3544D84A7700DC38"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21581
Expires: Tue, 06 Dec 2022 15:35:36 GMT
Date: Tue, 06 Dec 2022 09:35:55 GMT
Connection: keep-alive
ocsp.sectigo.com/
200 OK 472 B IP
Hash 8888cc9a893b9f729d27b114a07f1aa7
7ecb05bf1e1aa7dd5828486700ee8d8dcfcea593
9ea182be26c24c453961dded40462e11fb2eba3e9bc7b250e37b422e68f1ee5a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 09:35:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 03 Dec 2022 15:28:29 GMT
Expires: Sat, 10 Dec 2022 15:28:28 GMT
Etag: "7ecb05bf1e1aa7dd5828486700ee8d8dcfcea593"
Cache-Control: max-age=366152,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 775408c2185cb506-OSL
images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/d5bad267-20c1-4951-be20-0c3d3de9f0da/d3fwwkz-b24683fc-f459-4950-8a9e-764b7ab9953a.jpg/v1/fill/w_752,h_1063,q_75,strp/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi9kNWJhZDI2Ny0yMGMxLTQ5NTEtYmUyMC0wYzNkM2RlOWYwZGEvZDNmd3drei1iMjQ2ODNmYy1mNDU5LTQ5NTAtOGE5ZS03NjRiN2FiOTk1M2EuanBnIiwid2lkdGgiOiI8PTc1MiIsImhlaWdodCI6Ijw9MTA2MyJ9XV19.ilWj2diyBH6nN4rgMc3LFbOLOsElQUt3pnlK80wA8k4
200 OK 113 kB URL HTTP/2 images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/d5bad267-20c1-4951-be20-0c3d3de9f0da/d3fwwkz-b24683fc-f459-4950-8a9e-764b7ab9953a.jpg/v1/fill/w_752,h_1063,q_75,strp/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi9kNWJhZDI2Ny0yMGMxLTQ5NTEtYmUyMC0wYzNkM2RlOWYwZGEvZDNmd3drei1iMjQ2ODNmYy1mNDU5LTQ5NTAtOGE5ZS03NjRiN2FiOTk1M2EuanBnIiwid2lkdGgiOiI8PTc1MiIsImhlaWdodCI6Ijw9MTA2MyJ9XV19.ilWj2diyBH6nN4rgMc3LFbOLOsElQUt3pnlK80wA8k4
IP
Size 113 kB (112820 bytes)
Hash 5a8dfdc109bb6682c0a2a9232d325f36
db9b7a85685cbc449c39fc69564437b3973414a7
8b9c9d47b20db60ed4fdebcf71bc96c5eea51a0d146956dc39925f49cd7185b0
GET /f/d5bad267-20c1-4951-be20-0c3d3de9f0da/d3fwwkz-b24683fc-f459-4950-8a9e-764b7ab9953a.jpg/v1/fill/w_752,h_1063,q_75,strp/amy_lee_vetor_4_by_celomar-d3fwwkz.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi9kNWJhZDI2Ny0yMGMxLTQ5NTEtYmUyMC0wYzNkM2RlOWYwZGEvZDNmd3drei1iMjQ2ODNmYy1mNDU5LTQ5NTAtOGE5ZS03NjRiN2FiOTk1M2EuanBnIiwid2lkdGgiOiI8PTc1MiIsImhlaWdodCI6Ijw9MTA2MyJ9XV19.ilWj2diyBH6nN4rgMc3LFbOLOsElQUt3pnlK80wA8k4 HTTP/1.1
Host: images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
content-length: 112202
content-type: image/jpeg
wix-tracer: 2IXE6kc8EbFmf2s0NDfAvkJMwgE
x-seen-by: image-manipulator-554998d6f5-7brtz
date: Tue, 06 Dec 2022 09:35:55 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
302 Moved Temporarily 453 B URL HTTP/1.1 www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (483)
Hash 5c64bf8f68a721fb3614c47c3eca9a69
c87b532136e6d3df1c5c9d1ae33219526a8944b0
171d202816f7db3199dc217079655091dc6a89b34276bcef2eaa69a188f433c2
GET /followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fobsessobsession2109.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
Location: https://www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.geaHZXF2-fw.O/d%3D1/rs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%3D__features__&bpli=1
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Tue, 06 Dec 2022 09:35:55 GMT
Expires: Tue, 06 Dec 2022 09:35:55 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 453
Server: GSE
img0.etsystatic.com/il_fullxfull.187117683.jpg
200 OK 207 kB URL HTTP/2 img0.etsystatic.com/il_fullxfull.187117683.jpg
IP
ASN #20940 Akamai International B.V.
File type ISO Media, AVIF Image\012- data
Size 207 kB (206764 bytes)
Hash 330014352ed03b843fa12e1b8cb7b255
9c8a00cb3e84bec436cec6beacc21ad1724ce0e5
be49e6a45d1cd30eb46654294bd4bdbca1e18134446de8c819b41ffa3e15ad90
GET /il_fullxfull.187117683.jpg HTTP/1.1
Host: img0.etsystatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "06e29ea01edfef4d658472ed4709188f"
last-modified: Wed, 16 Nov 2022 01:34:00 GMT
server: Akamai Image Manager
x-serial: 310
x-check-cacheable: YES
content-length: 206764
content-type: image/avif
cache-control: private, no-transform, max-age=835188
expires: Fri, 16 Dec 2022 01:35:42 GMT
date: Tue, 06 Dec 2022 09:35:54 GMT
timing-allow-origin: *
akamai-grn: 0.2d4d2417.1670319354.ef4fa68
strict-transport-security: max-age=86400
X-Firefox-Spdy: h2
r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
200 OK 799 B URL HTTP/1.1 r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 07d7fad430e7cad62e5b98f7b45ab68c
b92808433882b73daedfc382856f0a77e14593e6
af4c1febb795b57ae87a7a9a3cf55d88645b43d86dfe5cd37641eafa47c2a13b
GET /redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://keywebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Tue, 06 Dec 2022 09:35:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.14
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 42 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 4b753ec860a79d8a1867035bc62cb4c4
d197581949190fc18661aa21629f441b75328e03
cfdfeffe366947bd6dd1d08dfe554da362e532a9b0f1cafbb3efd9b9d3982682
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 42361
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 11:40:04 GMT
expires: Wed, 29 Nov 2023 11:40:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 597351
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r.redirekted.com/css/adren.css?n=2403225651
200 OK 243 B URL HTTP/1.1 r.redirekted.com/css/adren.css?n=2403225651
IP
Hash f72acd3fece9f7cf58643616c745b2ea
92bc529a83c5466fbf6b9e702eef1e59644687a1
e2d9fd8b995f146baf54bc35d162d3e8169a5345368058b10a3b3bf4592ed777
GET /css/adren.css?n=2403225651 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Tue, 06 Dec 2022 09:35:55 GMT
Content-Type: text/css
Content-Length: 243
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-f3"
Accept-Ranges: bytes
www.mikethefanboy.com/site/wp-content/uploads/2010/11/DSC02490.jpg
404 Not Found 27 kB URL HTTP/2 www.mikethefanboy.com/site/wp-content/uploads/2010/11/DSC02490.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Hash ad58f8d4224b844c33f6ac684d6a827c
2b1e9587327f8b7e834b2c9f7ad5e907d49cf4dc
fab02d1441559a81476b26c0c66c2bf92d735b8242c2ac6c28b1812a223b05b8
GET /site/wp-content/uploads/2010/11/DSC02490.jpg HTTP/1.1
Host: www.mikethefanboy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.mikethefanboy.com/wp-json/>; rel="https://api.w.org/"
x-xss-protection: 1
x-content-type-options: nosniff
referrer-policy: no-referrer-when-downgrade
x-fw-server: Flywheel/5.1.0
x-fw-dynamic: TRUE
x-fw-hash: tjvd0a9v7a
content-encoding: gzip
x-fw-version: 5.0.0
server: Flywheel/5.1.0
x-cacheable: NO:Not Cacheable
fastly-restarts: 1
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:55 GMT
x-served-by: cache-bma1657-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1670319355.647401,VS0,VE1045
vary: Accept-Encoding
x-fw-serve: TRUE
x-fw-static: NO
x-fw-type: VISIT
content-length: 26970
X-Firefox-Spdy: h2
r.redirekted.com/js/adren.min.js?n=2403225651
200 OK 7.5 kB URL HTTP/1.1 r.redirekted.com/js/adren.min.js?n=2403225651
IP
File type ASCII text, with very long lines (7528), with no line terminators
Hash 9a9ec61d7e275f25fe83f0aa93bd2e41
8a3a23c432b601e9f8f8fe2b61f0fedbc341c9ac
55afe8ae4db5b6ca9ec5a3aca1f3a7b482ca51d0914acd250093f1a9ecbfccec
GET /js/adren.min.js?n=2403225651 HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Tue, 06 Dec 2022 09:35:55 GMT
Content-Type: application/javascript
Content-Length: 7528
Last-Modified: Sat, 03 Jul 2021 05:46:18 GMT
Connection: keep-alive
ETag: "60dff9aa-1d68"
Accept-Ranges: bytes
r.redirekted.com/go?e=NA-pFFuHPsVclFv8Ss2qvB95Gs-jKLw4wXb0UC9gwWWkKW481X7N3Kd4wWtkaCdZJr_xUCuHFA8jKLvtRsyjQLdRTrxglBdxRs7pvBeZUsYk3BdDzsyH3BdtFq6flpwjGr_xaCutFBsImqjI2rXu2DexFCvgPX59SA-H3BlR2WXgaC9q0ZxpzCmfmKX13pjgRs7tUL9gwWWyaC9AHVbDTLmLUF-ZmC99SA78SM9c0XSglpafHA3uUneHFr9flBzbHs2gvBefGs84UXe0Gs7DKFeZ3W54aqzDTs2gFCe4mV74UX85QAu1aF1f0KWy3C9gQA-tQn8ElXsSPXexmZ31KC
200 OK 386 B URL HTTP/1.1 r.redirekted.com/go?e=NA-pFFuHPsVclFv8Ss2qvB95Gs-jKLw4wXb0UC9gwWWkKW481X7N3Kd4wWtkaCdZJr_xUCuHFA8jKLvtRsyjQLdRTrxglBdxRs7pvBeZUsYk3BdDzsyH3BdtFq6flpwjGr_xaCutFBsImqjI2rXu2DexFCvgPX59SA-H3BlR2WXgaC9q0ZxpzCmfmKX13pjgRs7tUL9gwWWyaC9AHVbDTLmLUF-ZmC99SA78SM9c0XSglpafHA3uUneHFr9flBzbHs2gvBefGs84UXe0Gs7DKFeZ3W54aqzDTs2gFCe4mV74UX85QAu1aF1f0KWy3C9gQA-tQn8ElXsSPXexmZ31KC
IP
File type HTML document, ASCII text, with very long lines (318)
Hash 95a7bfd57d333f9dbfe16e2dad87bbbd
4c11e7e2c80691b126ff78c2406dbee2d5b799e7
71e408165bdb3c44fa17ffca8b95e00ccbfb02324a28bcf1a834d89418ec693b
GET /go?e=NA-pFFuHPsVclFv8Ss2qvB95Gs-jKLw4wXb0UC9gwWWkKW481X7N3Kd4wWtkaCdZJr_xUCuHFA8jKLvtRsyjQLdRTrxglBdxRs7pvBeZUsYk3BdDzsyH3BdtFq6flpwjGr_xaCutFBsImqjI2rXu2DexFCvgPX59SA-H3BlR2WXgaC9q0ZxpzCmfmKX13pjgRs7tUL9gwWWyaC9AHVbDTLmLUF-ZmC99SA78SM9c0XSglpafHA3uUneHFr9flBzbHs2gvBefGs84UXe0Gs7DKFeZ3W54aqzDTs2gFCe4mV74UX85QAu1aF1f0KWy3C9gQA-tQn8ElXsSPXexmZ31KC HTTP/1.1
Host: r.redirekted.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/redirect?redirect_id=7d3d0195cb9f6125bd3326991caabd4d&request_id=30c440eb6cf3dfacd651184f04be52f8
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx/1.21.5
Date: Tue, 06 Dec 2022 09:35:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.14
Set-Cookie: uuid=6143688113748966400; expires=Wed, 07-Dec-2022 09:35:55 GMT; Max-Age=86400
api.adrenalads.com/rd/dump?request_id=30c440eb6cf3dfacd651184f04be52f8&source=&ip=91.90.42.154&user_agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&screen=1x1&status=js2&invalid=small+screen+%281x1%29%2Cframe+detected
302 Found 0 B URL HTTP/1.1 api.adrenalads.com/rd/dump?request_id=30c440eb6cf3dfacd651184f04be52f8&source=&ip=91.90.42.154&user_agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&screen=1x1&status=js2&invalid=small+screen+%281x1%29%2Cframe+detected
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /rd/dump?request_id=30c440eb6cf3dfacd651184f04be52f8&source=&ip=91.90.42.154&user_agent=Mozilla%2F5.0+%28Windows+NT+10.0%3B+Win64%3B+x64%3B+rv%3A105.0%29+Gecko%2F20100101+Firefox%2F105.0&screen=1x1&status=js2&invalid=small+screen+%281x1%29%2Cframe+detected HTTP/1.1
Host: api.adrenalads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://r.redirekted.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Server: nginx/1.21.5
Date: Tue, 06 Dec 2022 09:35:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/8.0.14
Location: https://www.joshsway.com
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7571ff444e94da12304c88156ef7ac83
65817b6b8933e3447c51fc02ceadd6252e5c5b78
9ed354be4f383d401da5e019ba039f3cce6462c707383eb73d473673e45ef807
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9ED354BE4F383D401DA5E019BA039F3CCE6462C707383EB73D473673E45EF807"
Last-Modified: Sat, 03 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17159
Expires: Tue, 06 Dec 2022 14:21:55 GMT
Date: Tue, 06 Dec 2022 09:35:56 GMT
Connection: keep-alive
www.joshsway.com/
200 OK 28 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF, CR, LF line terminators
Hash c959f40c146c548652241c67ffa38c50
582f3ce5727041a8c961b8f37d07ab398602a93f
9fa103e6f66ce20f41158e9aa7992e0cb5afd3f41c0960e0e6c1dfcf1d2fbcbc
GET / HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://r.redirekted.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:57 GMT
Content-Type: text/html
Content-Length: 27768
Last-Modified: Thu, 30 Jun 2022 09:44:47 GMT
Connection: keep-alive
ETag: "62bd708f-6c78"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 781 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
Hash a26b7791dfd839d449aab9dcaae3c590
765d1dda5d9cb0e6ab32018772db0a5c5b0ff394
678bcb34f2faff931e865716d7b030af095efa55114a575c22dc99cd01cb0f01
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Mg2oM2wiVAF00xrHbeymbNwoiLr0a0l9W6oHP08j2M2kfX1cozPw5bklr3UiVF3oiEzoRbQQhX9nrLj2%2FMRCusABCRUK4qTSFxeZ0Y5epT0FZ7jbU%2FqglfJkUNdOIxQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bdd9d1b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 8.0 kB IP
Hash b803d7758de9de81f77360cfdcee7525
2884940bff488309a92e9b05e4ee7c092b0747c5
3ce8eb6dc32182b5bb2a900fc15ef8da5ab3e7634b4404bf96c318b2a895ebf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 672
Cache-Control: max-age=143677
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:57 GMT
Etag: "638e989a-1d7"
Expires: Thu, 08 Dec 2022 01:30:34 GMT
Last-Modified: Tue, 06 Dec 2022 01:19:22 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg
301 Moved Permanently 20 kB URL HTTP/2 www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg
IP
Hash 1525f13ee9f77d2b5dfcea88fa83b328
afbad498fb1ef9b17f990e02ace467a3bdb0a8c2
17312b5e480f3a7c401ed6b09912b1ae413a18595d46fb93b5f1aa40e3279664
GET /celebrity-photos/avril-lavigne-the-best-damn-thing-album-release-party-11oqw3.jpg HTTP/1.1
Host: www.exposay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:55 GMT
content-type: text/html; charset=UTF-8
location: https://exposay.com
x-powered-by: PHP/8.0.25, PleskLin
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=16070400, must-revalidate
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2BN7EwAFur%2BwWtqn2qwakGh9DHumUXEpXOlmfnsrmRVNQQWh8gLu3To8oKXHqgR3c1N30Rxtlh89dh1YV1re%2FJ56rDF802ByPxlij%2F2e9y3gJpGKFONeNmzwgn%2FpWS8gpNM%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775408bf481bb521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=UA-107133471-3
200 OK 44 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=UA-107133471-3
IP
File type ASCII text, with very long lines (1921)
Hash 7b54be690d0508c2cd1bbb6fbcfb9b6f
14787508972107a8620b4ac764506fb6e0fdf6dc
3dd72a25edc495236dde0fa8deea2138081adb0d56d1fc45ab5bf2139effa893
GET /gtag/js?id=UA-107133471-3 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 06 Dec 2022 09:35:57 GMT
expires: Tue, 06 Dec 2022 09:35:57 GMT
cache-control: private, max-age=900
last-modified: Tue, 06 Dec 2022 09:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43634
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3ba864a4daffd79d4639e98e35cf5a8f
4e2dfdbff3ce773c1c39031bdf854e2b0a31131c
73a684466e34cc6ab4250dbab0c6afb73a92c4239e37076020b9e1c446b69b7e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.fansshare.com/celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg
200 OK 178 B URL HTTP/2 www.fansshare.com/celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg
IP
Hash 7fc79483b395847a2850f8569ce1c41c
ca9bbe89544ef1f1db004b5c767508ad9a354f03
7fcd951043674afa2f3be915cba0f2907b2e0e585a0edddd0028f9869bac7303
GET /celebrity/kristinkreuk/450_cat-deeley-sytycd-red-carpet-glossy-hair-waves-johnd-short-hair-1246924930.jpg HTTP/1.1
Host: www.fansshare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html
x-powered-by: PHP/5.5.9-1ubuntu4.20
cache-control: max-age=16070400
cf-cache-status: MISS
last-modified: Tue, 06 Dec 2022 09:35:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ZPthcqBow6FPT31Y4NlLipScLj%2BU%2Bt%2Bmkad2RnVzUMj56jPe0rRJrhuoJj0SbKNj4U0NZkFMdtdskSb78Xlr%2BcjMIvKueJ4tVjSXQ26yLjlsXzwHOch7UNC9%2B7ThdjXcKYho8w%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408be2815fab4-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
500 Internal Server Error 177 B URL HTTP/1.1 www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 326096adb5817b1f5f7a59789be41994
e8558897958dff881ffbc682352f94d66efc6612
704c2f055570c3b8009b6ee0b3a67165f47816004565a7b3fc8121c03199a7c5
GET /pagead2.googlesyndication.com/pagead/js/f.txt HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 500 Internal Server Error
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:57 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
404 Not Found 289 kB URL HTTP/2 www.musicremedy.com/webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg
IP
Size 289 kB (289087 bytes)
Hash 98cd0ecdc27e55203e5554751979fe7c
29f51250b38ae2700835c7b5affd6c578b3e0adc
83229508fb16aa01b7a6754a37f36825d4cc0e612680f309f1b43bd89f542d1a
GET /webfiles/artists/GreysonChance/Greyson-Chance-cover-11650.jpg HTTP/1.1
Host: www.musicremedy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 09:35:55 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 14939
server: GSE
X-Firefox-Spdy: h2
www.joshsway.com/img/josh_sway_header.png
200 OK 9.6 kB URL HTTP/1.1 www.joshsway.com/img/josh_sway_header.png
IP
File type PNG image data, 500 x 100, 8-bit/color RGBA, non-interlaced\012- data
Hash c2b95d46a689cf6f9bc711a1afeae0aa
0f9690db5e8842c086d9d0b3cdd765f1be4166fb
126ecb7580e3ee91f0cd03ba774352bc26510ffef8269761af902fa082b3541e
GET /img/josh_sway_header.png HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/png
Content-Length: 9580
Last-Modified: Thu, 30 Jun 2022 09:57:36 GMT
Connection: keep-alive
ETag: "62bd7390-256c"
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
officialwickedthemusical.webs.com/10.1.08.jpg
410 Gone 19 kB URL HTTP/2 officialwickedthemusical.webs.com/10.1.08.jpg
IP
Hash b205aa8449baa40e7c1e25f46e548481
782cf2b5b796acfbaaed4d57b925f60f2822c688
d70449143e041769d494b7afb0e15027f0fef949d4611477ddbca7fd37d124e7
GET /10.1.08.jpg HTTP/1.1
Host: officialwickedthemusical.webs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 410 Gone
date: Tue, 06 Dec 2022 09:35:55 GMT
content-type: text/html
access-control-allow-origin: https://developer.cimpress.io
cache-control: public, max-age=0, s-maxage=2592000
set-cookie: fwww=28ebc157885aa9eadb9f10a1d1a33b9c35b0bce9d250429df012c0426f88d0bd; Path=/
vary: Accept-Encoding
cf-cache-status: MISS
server: cloudflare
cf-ray: 775408bf987bfab8-OSL
X-Firefox-Spdy: h2
www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg
301 Moved Permanently 89 kB URL HTTP/2 www.exposay.com/celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg
IP
File type ASCII text, with very long lines (3613)
Hash dfce09e8289a8d7d67bffa9197524ea1
7b4f8dac5fe308cc2dd47ac201a07e73cfd0b8ae
4ea23594f8a239a73b78dbeb5bde444d886a49445393da7a547cfb550a902f36
GET /celebrity-photos/avril-lavigne-the-best-damn-thing-cd-signing-TfUMoq.jpg HTTP/1.1
Host: www.exposay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:55 GMT
content-type: text/html; charset=UTF-8
location: https://exposay.com
x-powered-by: PHP/8.0.25, PleskLin
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=16070400, must-revalidate
vary: Accept-Encoding
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9DD9PAsWMp9j0O8eHNhu2nYjtnVGypoq1FbXBlVTfIKKZNVMaVVAHUQAVCEAVwx6d%2F2UwPVG%2BeNlW7g%2F4tL9j%2FsZalSaAq%2BUJoac%2B8g7oo3rb9NQep%2FEPuEe0nzfYjn0TU0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775408bf2fe8b521-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:54 GMT
expires: Thu, 30 Nov 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 482524
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/economica/v13/Qw3aZQZaHCLgIWa29ZBTjecUDXx4.woff2
200 OK 11 kB URL HTTP/2 fonts.gstatic.com/s/economica/v13/Qw3aZQZaHCLgIWa29ZBTjecUDXx4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 10552, version 1.0\012- data
Hash dae21c772d3e8666d5e6aa8ca35738a3
4b5224e4f65caa4b6661102f655da326f4920d69
4ba1d02c38a10b7055695dd848644f8597b1461c81b9c8b7d51849d556267e34
GET /s/economica/v13/Qw3aZQZaHCLgIWa29ZBTjecUDXx4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 10552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 06:47:27 GMT
expires: Sat, 02 Dec 2023 06:47:27 GMT
cache-control: public, max-age=31536000
age: 355711
last-modified: Thu, 21 Apr 2022 16:58:17 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15860, version 1.0\012- data
Hash e9f5aaf547f165386cd313b995dddd8e
acdef5603c2387b0e5bffd744b679a24a8bc1968
f5aebdfea35d1e7656ef4acc5db1f243209755ae3300943ef8fc6280f363c860
GET /s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15860
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:34:15 GMT
expires: Thu, 30 Nov 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 482503
last-modified: Wed, 11 May 2022 19:24:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 52997
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:35:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.joshsway.com/www.google.com/recaptcha/apid41d.js?
500 Internal Server Error 723 B URL HTTP/1.1 www.joshsway.com/www.google.com/recaptcha/apid41d.js?
IP
File type gzip compressed data, max compression\012- data
Hash 29da5926172ed1217f14b83dee89aead
1c8f8500e959afad8adb90274afdb43704f8b1b0
63f2ca85ad1f064067a4badb942246519d5878fe446aa307cd060fb06df808cd
GET /www.google.com/recaptcha/apid41d.js? HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 500 Internal Server Error
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
500 Internal Server Error 861 B URL HTTP/1.1 www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
IP
File type gzip compressed data, max compression\012- data
Hash 58012c99ce4611b2a56e62cd51d70a0a
7d5c52ae0c1ab75ad36c125c0cb209a893e056cf
c638e9139d8e05ecb3321b2c877789c7239068dbd57e2b554acec97315666c32
GET /pagead2.googlesyndication.com/pagead/js/f.txt HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 500 Internal Server Error
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
500 Internal Server Error 177 B URL HTTP/1.1 www.joshsway.com/pagead2.googlesyndication.com/pagead/js/f.txt
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 326096adb5817b1f5f7a59789be41994
e8558897958dff881ffbc682352f94d66efc6612
704c2f055570c3b8009b6ee0b3a67165f47816004565a7b3fc8121c03199a7c5
GET /pagead2.googlesyndication.com/pagead/js/f.txt HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 500 Internal Server Error
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: text/html
Content-Length: 177
Connection: close
cdn.joshsway.com/wp-content/uploads/7_reasons_why_you_should_workout.jpg
200 OK 56 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/7_reasons_why_you_should_workout.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Optimized by JPEGmini 3.11.4.0 0xc61e9925", baseline, precision 8, 800x400, components 3\012- data
Hash a6360e2848c57e346f8863f138d8741d
d91c9c763bd0e68a39cb7ee385b0295d3ec2b258
be2230661f00ea9ac4a9346cf780681b8c540d9f1b4dbfb0de2fb1285d9fdf93
GET /wp-content/uploads/7_reasons_why_you_should_workout.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 56358
Last-Modified: Mon, 30 Jul 2018 20:41:11 GMT
Connection: keep-alive
ETag: "5b5f77e7-dc26"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/do_looks_matter.jpg
200 OK 72 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/do_looks_matter.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=15, height=2777, bps=194, PhotometricIntepretation=RGB, manufacturer=Canon, model=Canon EOS DIGITAL REBEL XT, orientation=upper-left, width=1801], comment: "Optimized by JPEGmini 3.11.4.0 0xeb72eba7", baseline, precision 8, 800x400, components 3\012- data
Hash 61da8ccda7ba87140fe7af154d640093
a71b035b62cbf0bf314c90d55cbaa553061f7a82
f85c3a8a897de90cb7da10142522ec3f603df71458af06accfe5c0937ee645b9
GET /wp-content/uploads/do_looks_matter.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 71459
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-11723"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/have_something_going_for_you.jpg
200 OK 61 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/have_something_going_for_you.jpg
IP
File type JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS5 Windows, datetime=2013:08:30 16:12:21], comment: "Optimized by JPEGmini 3.11.4.0 0x063acf32", baseline, precision 8, 800x400, components 3\012- data
Hash 30958c73a23d46454832f96ba3db8b5d
920b543f8e2d89ecb31edccabb17d1ddcf9e4f11
cef4c4faff8a398c22394e6f66b7953bf71179203b7c6f485740559cfa85acf9
GET /wp-content/uploads/have_something_going_for_you.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 61213
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-ef1d"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/the_importance_of_making_her_invest-370x185.jpg
200 OK 11 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/the_importance_of_making_her_invest-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash 2771aa2f738c01c940b4e40c7057cfba
1ffcc46063f6ada185a62cf384887a511e099648
073446ff32c1dbe320f1a0eb7c041b82c416b904448d0fa4bf19336a71087336
GET /wp-content/uploads/the_importance_of_making_her_invest-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 11445
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-2cb5"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/dont_play_the_long_game-370x185.jpg
200 OK 16 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/dont_play_the_long_game-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash 8d7f7eaf5bd4f4cd85aaa4c67ac2bcab
25df3b3713ddbb676abf362ca70f2308c2aca894
aa55cda6f2f4fbd97facf19b725e4211423327ac2842e2099fb4e350ce20e687
GET /wp-content/uploads/dont_play_the_long_game-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 16355
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-3fe3"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/break_frame_when_you_need_to-370x185.jpg
200 OK 23 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/break_frame_when_you_need_to-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash d24d30d35e19c664ef45bb50dd15de0f
24ccc93b009a8a980067034f892f304c33cb1f04
964e911b5dcbab7e3e70abdc70908987af4f48937a334fc7c34ba233b54c84ea
GET /wp-content/uploads/break_frame_when_you_need_to-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 22709
Last-Modified: Mon, 30 Jul 2018 20:41:11 GMT
Connection: keep-alive
ETag: "5b5f77e7-58b5"
Accept-Ranges: bytes
www.oregonlive.com/ent_impact_performance/2009/03/large_Wicked_2009_1.jpg
404 Not Found 24 kB URL HTTP/2 www.oregonlive.com/ent_impact_performance/2009/03/large_Wicked_2009_1.jpg
IP
ASN #20940 Akamai International B.V.
Hash 41492ccb6b79e7d29fc77d1bd96df3e7
78873545aac19b9c6601ecc80633d5366e65498f
032e7831d59c957dd702d96c0a405bf504ede0904e62eb6437eb3ab41996a268
GET /ent_impact_performance/2009/03/large_Wicked_2009_1.jpg HTTP/1.1
Host: www.oregonlive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
content-length: 23401
server: openresty
content-encoding: gzip
etag: W/"24499-e26BXFyCCmSTSGFfd8NJhl5zSzg"
last-modified: Tue, 06 Dec 2022 09:35:54 GMT
vary: Accept-Encoding
cache-control: private, max-age=122
expires: Tue, 06 Dec 2022 09:37:57 GMT
date: Tue, 06 Dec 2022 09:35:55 GMT
server-timing: cdn-cache; desc=MISS, edge; dur=389, origin; dur=315
content-security-policy: upgrade-insecure-requests
referrer-policy: no-referrer-when-downgrade
akamai-true-ttl: -1
X-Firefox-Spdy: h2
www.joshsway.com/js/app.f5e4eeda9d0519dcb4f5.js
200 OK 532 kB URL HTTP/1.1 www.joshsway.com/js/app.f5e4eeda9d0519dcb4f5.js
IP
File type Unicode text, UTF-8 text, with very long lines (5753), with CRLF, LF line terminators
Size 532 kB (532422 bytes)
Hash 5fdd6c19614946f716b60fe485334acf
4f41421d611baa0ca4688d24a6407a86647d287f
d6ae6877b3e0091a897c67d20fd27526999db24336d3bc46e3162b74f28ed429
GET /js/app.f5e4eeda9d0519dcb4f5.js HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:57 GMT
Content-Type: application/javascript
Content-Length: 532422
Last-Modified: Thu, 30 Jun 2022 06:29:30 GMT
Connection: keep-alive
ETag: "62bd42ca-81fc6"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/7_wingman_basics-370x185.jpg
200 OK 24 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/7_wingman_basics-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash c7324d193fb0e1c1fffbd502359e8a36
58ef3015dc300e95cde1fbbc176b31ec4e7c2444
5ab699f8e8df94ab980d17f3794f160abdc852d1fab7268652421be3e41687ea
GET /wp-content/uploads/7_wingman_basics-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 23543
Last-Modified: Mon, 30 Jul 2018 20:41:11 GMT
Connection: keep-alive
ETag: "5b5f77e7-5bf7"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/6_ways_to_approach_women-370x185.jpg
200 OK 18 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/6_ways_to_approach_women-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash a4e9b5c00e7bb02d78b1e4c0a8426f1f
40c997a84787cc477e94ce03f362644e831e811c
dcd22ac68426628b309c21cef0b6de85eac79621089e1ef839eaf7d90371e000
GET /wp-content/uploads/6_ways_to_approach_women-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 18434
Last-Modified: Mon, 30 Jul 2018 20:41:11 GMT
Connection: keep-alive
ETag: "5b5f77e7-4802"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/the_so_moment-370x185.jpg
200 OK 17 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/the_so_moment-370x185.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", baseline, precision 8, 370x185, components 3\012- data
Hash 303ebd2579d6362ab69b7bc9823cd6b8
196bbe92b618b412f714c223c915bcb0b4a128cc
2d8cb80b4c36f75e33bd7cc3ad030b56c66f7ccc31e4482f29d997fc23e8a7fa
GET /wp-content/uploads/the_so_moment-370x185.jpg HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/jpeg
Content-Length: 16841
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-41c9"
Accept-Ranges: bytes
www.joshsway.com/fonts/vendor/font-awesome/fontawesome-webfontbb99.woff2?af7ae505a9eed503f8b8e6982036873e
200 OK 77 kB URL HTTP/1.1 www.joshsway.com/fonts/vendor/font-awesome/fontawesome-webfontbb99.woff2?af7ae505a9eed503f8b8e6982036873e
IP
File type Web Open Font Format (Version 2), TrueType, length 77160, version 4.459\012- data
Hash af7ae505a9eed503f8b8e6982036873e
d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c
2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe
GET /fonts/vendor/font-awesome/fontawesome-webfontbb99.woff2?af7ae505a9eed503f8b8e6982036873e HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://www.joshsway.com/css/app.7b2744f90839aaccd1b01251bb207ab4.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: font/woff2
Content-Length: 77160
Last-Modified: Thu, 30 Jun 2022 06:47:43 GMT
Connection: keep-alive
ETag: "62bd470f-12d68"
Accept-Ranges: bytes
www.joshsway.com/images/dig_bg963c.png?9aebd071c928fd5925f38f84abb82c25
200 OK 698 B URL HTTP/1.1 www.joshsway.com/images/dig_bg963c.png?9aebd071c928fd5925f38f84abb82c25
IP
File type gzip compressed data, max compression\012- data
Hash 7e4ff9df1c5e31c5c55e41dd321ae1af
db96c9cbfddc0840a210c9c4f0ed3ffdfb18d866
5d9330c9997fedcd1decc0baf27b7257f85a719b6bde4c558bdff6bf2faddc5a
GET /images/dig_bg963c.png?9aebd071c928fd5925f38f84abb82c25 HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/css/app.7b2744f90839aaccd1b01251bb207ab4.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/png
Content-Length: 105
Last-Modified: Thu, 30 Jun 2022 06:47:47 GMT
Connection: keep-alive
ETag: "62bd4713-69"
Accept-Ranges: bytes
js.stripe.com/v2/channel.html?stripe_xdm_e=https%3A%2F%2Fwww.joshsway.com&stripe_xdm_c=default779938&stripe_xdm_p=1
200 OK 449 B URL HTTP/2 js.stripe.com/v2/channel.html?stripe_xdm_e=https%3A%2F%2Fwww.joshsway.com&stripe_xdm_c=default779938&stripe_xdm_p=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 250041ec585b44caf68fa5da96deddb7
6181d59d0ff064f6247ceeeea57115a7047dd0c3
cb194361f8db863c735879c44ae409a928ced752d34e3dd703c47d11bf17fcb1
GET /v2/channel.html?stripe_xdm_e=https%3A%2F%2Fwww.joshsway.com&stripe_xdm_c=default779938&stripe_xdm_p=1 HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Oct 2021 15:24:12 GMT
etag: "19af0c6cc7a0bca20a355b3362dc64a0"
content-type: text/html; charset=utf-8
cache-control: public, max-age=300
content-security-policy: report-uri https://q.stripe.com/csp-report
content-security-policy-report-only: default-src 'self'; connect-src https://api.stripe.com; base-uri 'none'; form-action 'none'; img-src 'self' https://q.stripe.com; script-src 'self' 'sha256-M1LJiJCn3XBCZ1erCVATqpCSJ5Yd9sUrS2npRlBZ6YE='; style-src 'self'; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:58 GMT
via: 1.1 varnish
age: 118
x-request-id: 034f9f9e-b2da-4379-aecd-7cd7bd041a0a
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 4
vary: Accept-Encoding
timing-allow-origin: *
content-length: 449
X-Firefox-Spdy: h2
www.joshsway.com/twitter/
403 Forbidden 153 B URL HTTP/1.1 www.joshsway.com/twitter/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5a8321b273cbbc904dc6e962f1365a6
22d53c59d24d111c840401ed79188cb97ff2471e
9797611d056ada17a20e6d849139985235485e6c2dee6eb98d63a99408b66978
POST /twitter/ HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 311
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 403 Forbidden
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: text/html
Content-Length: 153
Connection: keep-alive
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 06 Dec 2022 08:41:08 GMT
expires: Tue, 06 Dec 2022 10:41:08 GMT
cache-control: public, max-age=7200
age: 3291
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=1424833021&t=pageview&_s=1&dl=https%3A%2F%2Fwww.joshsway.com%2F&dr=http%3A%2F%2Fr.redirekted.com%2F&ul=en-us&de=UTF-8&dt=JoshSway.com%20%7C%20Your%20Source%20for%20Dating%2C%20Online%20Dating%2C%20Self%20Improvement%2C%20and%20more...&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=765082881&gjid=1442127225&cid=817401643.1670319359&tid=UA-107133471-3&_gid=1354836623.1670319359&_r=1>m=2oubu0&z=123079057
200 OK 1 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=1424833021&t=pageview&_s=1&dl=https%3A%2F%2Fwww.joshsway.com%2F&dr=http%3A%2F%2Fr.redirekted.com%2F&ul=en-us&de=UTF-8&dt=JoshSway.com%20%7C%20Your%20Source%20for%20Dating%2C%20Online%20Dating%2C%20Self%20Improvement%2C%20and%20more...&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=765082881&gjid=1442127225&cid=817401643.1670319359&tid=UA-107133471-3&_gid=1354836623.1670319359&_r=1>m=2oubu0&z=123079057
IP
File type very short file (no magic)
Hash c4ca4238a0b923820dcc509a6f75849b
356a192b7913b04c54574d18c28d46e6395428ab
6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b
POST /j/collect?v=1&_v=j98&a=1424833021&t=pageview&_s=1&dl=https%3A%2F%2Fwww.joshsway.com%2F&dr=http%3A%2F%2Fr.redirekted.com%2F&ul=en-us&de=UTF-8&dt=JoshSway.com%20%7C%20Your%20Source%20for%20Dating%2C%20Online%20Dating%2C%20Self%20Improvement%2C%20and%20more...&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=YEBAAUABAAAAACAAI~&jid=765082881&gjid=1442127225&cid=817401643.1670319359&tid=UA-107133471-3&_gid=1354836623.1670319359&_r=1>m=2oubu0&z=123079057 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: https://www.joshsway.com
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.joshsway.com
date: Tue, 06 Dec 2022 09:35:59 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 1
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.joshsway.com/img/favicon.ico
200 OK 1.2 kB URL HTTP/1.1 www.joshsway.com/img/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash f28be7f4b4ab971db6fe51e9e77d2281
9a7094fbf7c8541aa733155d245a067b6cd48173
38e7dd9267a8d950da37dc0b22912462c855ada20392ad754103149d84387b7d
GET /img/favicon.ico HTTP/1.1
Host: www.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:59 GMT
Content-Type: image/x-icon
Content-Length: 1150
Last-Modified: Thu, 30 Jun 2022 09:57:36 GMT
Connection: keep-alive
ETag: "62bd7390-47e"
Accept-Ranges: bytes
cdn.joshsway.com/wp-content/uploads/the_josh_sway_bodybuilding_guide_part_2_the_process.png
200 OK 749 kB URL HTTP/1.1 cdn.joshsway.com/wp-content/uploads/the_josh_sway_bodybuilding_guide_part_2_the_process.png
IP
File type PNG image data, 799 x 400, 8-bit/color RGB, non-interlaced\012- data
Size 749 kB (749036 bytes)
Hash c1a8e56bcc8137c169f2b0563fabb391
a2ea51c55deefee8ee9481103968918c589914ab
614cde81db1554b20adde310ee58aa090251bd9160674100f0dda1169587ff4a
GET /wp-content/uploads/the_josh_sway_bodybuilding_guide_part_2_the_process.png HTTP/1.1
Host: cdn.joshsway.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Server: nginx/1.23.0
Date: Tue, 06 Dec 2022 09:35:58 GMT
Content-Type: image/png
Content-Length: 749036
Last-Modified: Mon, 30 Jul 2018 20:41:12 GMT
Connection: keep-alive
ETag: "5b5f77e8-b6dec"
Accept-Ranges: bytes
js.stripe.com/v2/m/outer.html
200 OK 294 B URL HTTP/2 js.stripe.com/v2/m/outer.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (718), with no line terminators
Hash 90b5fcea9814d15a69c3f7b341dc38b0
196dce4aa80798c164640cbdd7b613a4f06a177d
eaef54de2805f8d67227db37055046e6c21a415ec56a14458899e7d1494b8aa7
GET /v2/m/outer.html HTTP/1.1
Host: js.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
last-modified: Tue, 05 Oct 2021 15:37:46 GMT
etag: "51b76bd7931c50d2bf6d4c5a93d343f9"
content-type: text/html; charset=utf-8
cache-control: public, max-age=300
content-security-policy: report-uri https://q.stripe.com/csp-report
content-security-policy-report-only: default-src 'self'; connect-src https://api.stripe.com; base-uri 'none'; form-action 'none'; frame-src https://m.stripe.network; img-src 'self'; script-src 'self' 'sha256-SP+OklpqI9DOfk/xOSps45nYg4re2SxZVge06yn8uUQ='; style-src 'self'; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
access-control-allow-origin: *
server: Fastly
content-encoding: br
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:59 GMT
via: 1.1 varnish
age: 44
x-request-id: 3c051a68-5cc0-4472-b6de-138e7052650f
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 2
vary: Accept-Encoding
timing-allow-origin: *
content-length: 294
X-Firefox-Spdy: h2
m.stripe.network/inner.html
200 OK 527 B URL HTTP/2 m.stripe.network/inner.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (930), with no line terminators
Hash e02352ef72e8a9563463c07174b0e50f
7a41613f7eae0819d1a4785eae3617fdbb33b9b3
2275fff71f8cbf1f25a1af7f7bbe5ecbc868ed0b16d345a8ce31770f66fc8ea5
GET /inner.html HTTP/1.1
Host: m.stripe.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://js.stripe.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300, public
content-type: text/html; charset=utf-8
content-security-policy: base-uri 'none'; connect-src https://m.stripe.network https://m.stripe.com; default-src 'none'; font-src https://m.stripe.network https://fonts.gstatic.com; form-action 'none'; frame-src https://m.stripe.network https://js.stripe.com; img-src https://m.stripe.network https://m.stripe.com https://b.stripecdn.com; script-src https://m.stripe.network 'sha256-e/Jqu4k9Gk1ZCWO6StAsfhF3i7qgIwfuitaD1g9DyvE='; style-src https://m.stripe.network; report-uri https://q.stripe.com/csp-report
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
server: Fastly
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:59 GMT
via: 1.1 varnish
age: 181
x-request-id: ccfa5b10-ad45-4015-a45b-1b1a575b2583
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 100
x-timer: S1670319360.709711,VS0,VE0
vary: Accept-Encoding, Origin
content-length: 527
X-Firefox-Spdy: h2
m.stripe.network/out-4.5.42.js
200 OK 16 kB URL HTTP/2 m.stripe.network/out-4.5.42.js
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash 0b880c6e7a381ef1f81263cf34c54e79
af46e0111cb22576b07084f4b49be7b41b5fc3ca
115ea79f002c0c2e3405178f66ce92ecb5173e7678f692ab65d6bbf526880b7b
GET /out-4.5.42.js HTTP/1.1
Host: m.stripe.network
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://m.stripe.network/inner.html
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300, public
content-type: text/javascript; charset=utf-8
strict-transport-security: max-age=31556926; includeSubDomains; preload
x-content-type-options: nosniff
server: Fastly
content-encoding: gzip
accept-ranges: bytes
date: Tue, 06 Dec 2022 09:35:59 GMT
via: 1.1 varnish
age: 234
x-request-id: baa1f59f-c5df-4de0-9565-8eca0a3954c3
x-served-by: cache-bma1673-BMA
x-cache: HIT
x-cache-hits: 123
x-timer: S1670319360.743860,VS0,VE0
vary: Accept-Encoding, Origin
content-length: 16031
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash c1a9d639834ed275c19cf1215b4d2c03
4f73f0380d65952af7caaebd1e021ce7c842fe13
e68a5ff929111aec868c897b37d1ccd4febada207e05c0e4cd522d1e0220ca5d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5600
Cache-Control: max-age=132016
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 09:36:00 GMT
Etag: "638e57d0-1d7"
Expires: Wed, 07 Dec 2022 22:16:16 GMT
Last-Modified: Mon, 05 Dec 2022 20:42:56 GMT
Server: ECS (ska/F709)
X-Cache: HIT
Content-Length: 471
m.stripe.com/6
200 OK 156 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6719dade54f9102f1d82d75437d22da0
af3e1afe45c23b5baa43dcb1a95e2d596bc5895a
61022b4128466e10c3e69d258699d758007da6e81c56729cf2c1217c786c4906
POST /6 HTTP/1.1
Host: m.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2548
Origin: https://m.stripe.network
Connection: keep-alive
Referer: https://m.stripe.network/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 09:36:00 GMT
content-length: 156
set-cookie: m=76a6785d-464d-4f8a-ba1b-4f4fa722ca0584e247;Expires=Thu, 05-Dec-2024 09:36:00 GMT;Secure;HttpOnly; SameSite=None
x-content-type-options: nosniff
access-control-allow-origin: https://m.stripe.network
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: application/json;charset=utf-8
X-Firefox-Spdy: h2
m.stripe.com/6
200 OK 156 B IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 6719dade54f9102f1d82d75437d22da0
af3e1afe45c23b5baa43dcb1a95e2d596bc5895a
61022b4128466e10c3e69d258699d758007da6e81c56729cf2c1217c786c4906
POST /6 HTTP/1.1
Host: m.stripe.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 2616
Origin: https://m.stripe.network
Connection: keep-alive
Referer: https://m.stripe.network/
Cookie: m=76a6785d-464d-4f8a-ba1b-4f4fa722ca0584e247
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 09:36:00 GMT
content-length: 156
set-cookie: m=76a6785d-464d-4f8a-ba1b-4f4fa722ca0584e247;Expires=Thu, 05-Dec-2024 09:36:00 GMT;Secure;HttpOnly; SameSite=None
x-content-type-options: nosniff
access-control-allow-origin: https://m.stripe.network
access-control-allow-credentials: true
access-control-allow-headers: Content-Type
strict-transport-security: max-age=31556926; includeSubDomains; preload
content-type: application/json;charset=utf-8
X-Firefox-Spdy: h2
1.bp.blogspot.com/_tXu359szEYo/TCJmukiq4rI/AAAAAAAAAWw/g8HmEpAz34g/s1600/poda2.jpg
200 OK 0 B URL HTTP/1.1 1.bp.blogspot.com/_tXu359szEYo/TCJmukiq4rI/AAAAAAAAAWw/g8HmEpAz34g/s1600/poda2.jpg
IP
GET /_tXu359szEYo/TCJmukiq4rI/AAAAAAAAAWw/g8HmEpAz34g/s1600/poda2.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://obsessobsession2109.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v16c"
Expires: Wed, 07 Dec 2022 09:35:53 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="poda2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 09:35:53 GMT
Server: fife
Content-Length: 446033
X-XSS-Protection: 0
fonts.googleapis.com/css?family=Raleway:100,600
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Raleway:100,600
IP
GET /css?family=Raleway:100,600 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.joshsway.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 06 Dec 2022 09:35:57 GMT
date: Tue, 06 Dec 2022 09:35:57 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
exposay.com/
301 Moved Permanently 0 B IP
GET / HTTP/1.1
Host: exposay.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:55 GMT
content-type: text/html
location: https://www.exposay.com/
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i%2F5J9vVliUlSulXQ5a59nesHiyz0GBeFS5%2BKRhWIKp8m9YR5QeSDPxYFBCZkWMrkNoUW80nKFaKz20R4LsrEjoIzln8vFze08VB%2BNLuVh%2FfusDVsurP%2BRqm69jTJGQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 775408c22c37b50f-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 0 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BDv7ajuuV8aYrOKF%2BoO0WKliBNwt%2FUyO%2BlY%2Foweyc%2B%2BGldhVgmN%2Fg5plu%2FnPRb9T6OsimU8hN5tDPYG4zLEP9fiA89kXIVLWuBVTe2lZMZWEiOKk%2BlZlhmRgU5hVt1s%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bda991b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 0 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F2NjZI6C7nPGiO%2FrLCQpGUjaL%2FjlA8ckh7MskoC82ILvCeoX5hihaYg1ZGsUwTn4fnrNz8dHbYBfpuS%2BQQ52%2Bt6WsAcupHEr1cKWGa4M%2BbQB%2BCQZ1Q2ZsS5j1Aj21ss%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bdf9fcb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.geaHZXF2-fw.O/d%3D1/rs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%3D__features__&bpli=1
200 OK 0 B URL HTTP/2 www.blogger.com/followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.geaHZXF2-fw.O/d%3D1/rs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%3D__features__&bpli=1
IP
GET /followers.g?blogID=1221393542812368741&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://obsessobsession2109.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.geaHZXF2-fw.O/d%3D1/rs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%3D__features__&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport, script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 09:35:55 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tvduck.com/
301 Moved Permanently 0 B IP
GET / HTTP/1.1
Host: tvduck.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://www.tvduck.com/
cache-control: max-age=3600
cf-cache-status: HIT
age: 1663287
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FnRFMorVfTHs%2FQgU8TgJAsTrMauyrv8N8FKnDCGNL8wOUQmllcQ2SxKCDnIaRWnvuR8BuqKDjVGIfQRmdNPuvmNAOdG8t2b5Kn%2BYBpNuIrIRzaQwrgd8j6jLmMm%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408c05be4b51e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 0 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Sn%2BVjt%2BNasd3W8G3GZfXr%2BHVFHNiSJsBT%2BfdTlbj8k4I1XYeob%2BCia%2F6mIg%2BA94puZR29jpiloq1jsF1RFIGo1wivZP1s7gy5fjFQInSmBPTWogvUgp0h1cmQZDldKA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408bd48dfb4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
301 Moved Permanently 0 B URL HTTP/2 videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
IP
GET /thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg HTTP/1.1
Host: videocok.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://obsessobsession2109.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 301 Moved Permanently
date: Tue, 06 Dec 2022 09:35:54 GMT
content-type: text/html; charset=iso-8859-1
location: https://videocok.com/thumb/x-men-first-class-movie-clip-charles-xavier-meets-mystique-official-hd.jpg
cache-control: max-age=14400
cf-cache-status: HIT
age: 0
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DMecoBxniAC53d%2BSfyvsDSZvu7Ve3%2BFABWLYABIPZYMDdwOTudBbF%2BaNZxQLN89yLcfpGs12C1B%2Fxe%2FwsKPBJl%2BI96mXdbjM%2FzbjsJJhVZL%2BwB1QT999TvAiCbvrQ14%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 775408be0a17b4f1-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.161
23.36.77.32
52.50.243.234
104.21.69.119
104.84.152.218
93.184.220.29
51.159.12.236
103.224.182.247
74.120.188.194
188.114.96.1