r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 20d267853e48ef7d476459ed67da5d97
06d1bd08efd69c0e93486d3c423fa2640f372d29
24323cd45ca2ed01c63f908233d9b2ad5bb6f63394884c45bf6abb0221d0edd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "24323CD45CA2ED01C63F908233D9B2AD5BB6F63394884C45BF6ABB0221D0EDD6"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13804
Expires: Sun, 22 Jan 2023 16:38:52 GMT
Date: Sun, 22 Jan 2023 12:48:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4714c95a0c854e38f9be444f9343bf14
07ce5eb635448f2b3bafbe51e4dfeef47cdf4f7b
4d47e08c9afb704096e93a51f6e95c0dc7c7bc31e67ded39998ff37ed56e0965
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4D47E08C9AFB704096E93A51F6E95C0DC7C7BC31E67DED39998FF37ED56E0965"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9213
Expires: Sun, 22 Jan 2023 15:22:21 GMT
Date: Sun, 22 Jan 2023 12:48:48 GMT
Connection: keep-alive
quindionoticias.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sun, 22 Jan 2023 12:48:48 GMT
Content-Type: text/html; charset=UTF-8
Content-Length: 0
x-redirect-by: WordPress
location: https://quindionoticias.com/
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Content-Type, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 22 Jan 2023 12:42:30 GMT
content-type: application/json
age: 378
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 38c102db4bcfb9c4fb19174986950fd3
51c2cc8a3aca4da5c9ab3438467c29203fc0b0c3
dad6b64bc9f4dd827471ccc2e5273fceee574685376083aaa80f9d2f918037f2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DAD6B64BC9F4DD827471CCC2E5273FCEEE574685376083AAA80F9D2F918037F2"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3926
Expires: Sun, 22 Jan 2023 13:54:14 GMT
Date: Sun, 22 Jan 2023 12:48:48 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: MAE0WWH2ma26tt2JjIN5rWy6AballsZQUMBH2RFntrgcx11ZLlna7z0/EDqlvrfXyDZBCK2YJHrOVSHK6+rO+w==
x-amz-request-id: AW0Z6CD23EZHST83
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 22 Jan 2023 12:47:17 GMT
age: 91
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:48 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aaff964e319ff2a475401e0f9f109ddc
3e0c69ea53ffa3a12fbf056f4136e687971a3d5d
46d2a1346f87e0897d8f64e7ca9487c08d7999c2de44519a05597a908eb65b8c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46D2A1346F87E0897D8F64E7CA9487C08D7999C2DE44519A05597A908EB65B8C"
Last-Modified: Sat, 21 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Sun, 22 Jan 2023 18:48:49 GMT
Date: Sun, 22 Jan 2023 12:48:49 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Expires, Last-Modified, Alert, Content-Type, Content-Length, ETag, Pragma, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 22 Jan 2023 11:48:58 GMT
age: 3591
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 0c74880fa99032b5c3831c179d702419
0020b368309735c94d8053d3781a7efb7283cfc5
437e2d4e2bbfb33b0ff696172378ce55a0a5ed005a1b8c4005eab4a6995a3042
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2636
Cache-Control: max-age=162114
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:49 GMT
Etag: "63ccfca7-1d7"
Expires: Tue, 24 Jan 2023 09:50:43 GMT
Last-Modified: Sun, 22 Jan 2023 09:06:47 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: g8xtK/Y603Vo4wKUjVq+4w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: OGviSiqYOjkOv4z7b4xe4qV1P+s=
quindionoticias.com/wp-includes/css/dist/block-library/style.min.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 5.7 kB URL HTTP/2 quindionoticias.com/wp-includes/css/dist/block-library/style.min.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type ASCII text, with very long lines (41045), with no line terminators
Hash 5ea88d0fe7c942cae60483d0b4b5e944
1e5322b5ac81e14d7322a3def744f4b0ad783dbc
86feebc56d2aae8f6a2c32b1d4aa3c789094fbe927e8fa6082312f92b994d706
GET /wp-includes/css/dist/block-library/style.min.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 5725
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Thu, 11 Jun 2020 05:33:47 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/accesspress-social-counter/css/fontawesome-all.css?ver=1.9.2
200 OK 8.1 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/accesspress-social-counter/css/fontawesome-all.css?ver=1.9.2
IP
File type ASCII text, with very long lines (317)
Hash e27f1f4db0b59afd5f14acfb67dd6594
8ec5888e65e8c16ed64b2c9dd886a867b5154f9f
00303e4e59ae959c02310d01b2b0b3bfefd60911472d61322edb8b47ae8382ce
GET /wp-content/plugins/accesspress-social-counter/css/fontawesome-all.css?ver=1.9.2 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 8084
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/social-counter/styles/prisna-social-counter.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 8.1 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/social-counter/styles/prisna-social-counter.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type Unicode text, UTF-8 text, with very long lines (7731)
Hash b53042a46389db90a30f945e2730bfb3
931b9ca3b057643037b6b90a773e70516a728213
4aac9db060725f34cde0c8044df0a175bc59bb39dfd914192412a12b0dfa5785
GET /wp-content/plugins/social-counter/styles/prisna-social-counter.css?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 8148
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:05:49 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 032ea16a79a95a9f16a60674c5f3ad5c
daea213df10fabce0cd857bcd4f3e64dd1293fad
4637cdfefc8df89f6f6cc042daa30247921cbd001bd16484b18c384f1e7b9781
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quindionoticias.com/wp-content/plugins/accesspress-social-counter/css/frontend.css?ver=1.9.2
200 OK 2.3 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/accesspress-social-counter/css/frontend.css?ver=1.9.2
IP
File type ASCII text, with CRLF line terminators
Hash 8711cae0948be065568e8e0ada98f390
5e2fae2defbec622de40a6631ac997faa3f08107
51e39ed3ce8d40a15bc2cb7f473f97a86b162c31b0da5ba532263f0cab58eecf
GET /wp-content/plugins/accesspress-social-counter/css/frontend.css?ver=1.9.2 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 2295
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:03:50 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.8.1
200 OK 12 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.8.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 6aec55ef3928ea05ad44311f44b7b877
441afde8281feb34b6d4f5a05cf8ebd8187e7a87
db7c84c94baaebb9985beb2ea7f2388dda7e1b3fedbde6136823e95daed1d211
GET /wp-content/plugins/elementskit-lite/modules/elementskit-icon-pack/assets/css/ekiticons.css?ver=2.8.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 11757
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:04:45 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 032ea16a79a95a9f16a60674c5f3ad5c
daea213df10fabce0cd857bcd4f3e64dd1293fad
4637cdfefc8df89f6f6cc042daa30247921cbd001bd16484b18c384f1e7b9781
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quindionoticias.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1
200 OK 41 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash eed8dcf5effe2e5e85aaa36548f3d349
cd0d829d950ce912780fa17111d419e4259785ae
8a96abd21d8b7994fe8d8b9954263af802353b960f22ac9610618522cfda8f80
GET /wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=5.0.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 41011
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Wed, 18 Mar 2020 16:51:13 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/css/style.css?ver=2.2.3
200 OK 511 B URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/css/style.css?ver=2.2.3
IP
File type ASCII text, with very long lines (2891), with no line terminators
Hash ce1a21694ad059f57434d09f89a74423
81ce12432ea82df4dfb9de35d0f9eed9c10297d8
f429e679d2a3d79d3dac894ef64e02db179fbda1276a8a0533dffb3ea799a922
GET /wp-content/plugins/elementskit/modules/parallax/assets/css/style.css?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 511
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.8.1
200 OK 48 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.8.1
IP
File type Unicode text, UTF-8 text, with very long lines (65530), with no line terminators
Hash eb0dc193fbee151e03efa2506e0066de
68dacc80519fa714fde88209fac274ab5855cf4c
bae014edf2d09647906fd5a917a07b998cfafc1af8cf103ebcadaa6f0879e56f
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/widget-styles.css?ver=2.8.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 47720
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:04:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4242
Expires: Sun, 22 Jan 2023 13:59:32 GMT
Date: Sun, 22 Jan 2023 12:48:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4242
Expires: Sun, 22 Jan 2023 13:59:32 GMT
Date: Sun, 22 Jan 2023 12:48:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4242
Expires: Sun, 22 Jan 2023 13:59:32 GMT
Date: Sun, 22 Jan 2023 12:48:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4242
Expires: Sun, 22 Jan 2023 13:59:32 GMT
Date: Sun, 22 Jan 2023 12:48:50 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6033dad399355478c264e1c7c27e7f62
7d5546258015b8a834ee87b5a679be0545723e9d
5126b70d194535387e80aab563a02db1ade53c682b9db45eb533ff4001e6ed1c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5126B70D194535387E80AAB563A02DB1ADE53C682B9DB45EB533FF4001E6ED1C"
Last-Modified: Fri, 20 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4242
Expires: Sun, 22 Jan 2023 13:59:32 GMT
Date: Sun, 22 Jan 2023 12:48:50 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 375f2cf298e45122ca727fb63f0e5ea7
eb746e6842127741552c7dcc48e8a92193ca3075
8b5e5432f69dad1428c3a735f7a0d07823658e03befc7b6e15f6f5c3306fbaa8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcdc45398-1d4d-45ac-94a6-2cc6d910d8b8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5196
x-amzn-requestid: 24221211-6673-4d7b-88de-2ef8c9a62f1b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNWRFPUIAMFf-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c27-286d3bb84ad3362d615479ed;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:41:59 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: uSVzx-rzZIDLp55bKb-12pKjPUzRGih9sIupyPYRuDQasYa7JRnWoA==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:52:07 GMT
etag: "eb746e6842127741552c7dcc48e8a92193ca3075"
content-type: image/jpeg
age: 53803
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F831c16ae-85e5-4da2-b22e-f840afcd3678.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F831c16ae-85e5-4da2-b22e-f840afcd3678.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5a7ab95a69ddfa5014258076e66a6e19
1a54cca86788536002d6d18c5180ccf265ba1169
09348afd6055b26b5dba6f8f6ef763d52e6e040c039c6f763d64f71b8ca08d51
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F831c16ae-85e5-4da2-b22e-f840afcd3678.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10988
x-amzn-requestid: 67c03c6c-3896-4890-a75b-ecd7c1c1a4e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e3foHG8tIAMF3XQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c61300-2de17e5b0225f9427c197bc5;Sampled=0
x-amzn-remapped-date: Tue, 17 Jan 2023 03:16:16 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: RlbJymJhU6Ti5RZCSIvPzloackAiBEBGapKI440u4ZIfB5FYBNugLw==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 03:24:49 GMT
age: 33841
etag: "1a54cca86788536002d6d18c5180ccf265ba1169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg
200 OK 4.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2aec02a691f126259e2a3c701e322ffe
af9161eefc1ee381a8f531c593ea7354d73493eb
e0094d54ca9bbbc4154abec2ce152453ddb1544e020b4a859e5da1f7073a26d0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d78dc13-3c8d-4c31-8f64-3f9de4ba79d1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4796
x-amzn-requestid: 9ad3dcbc-3d19-4619-a8cb-b316a8d51290
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: e7ULpHgKIAMFmYg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63c79a4a-769bcf2f4d7787d007ec30e2;Sampled=0
x-amzn-remapped-date: Wed, 18 Jan 2023 07:05:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -TjivJmHgT_N2QWC1rn8ng1sl5h53FcgoU9ALMINJEY6onseYEWGRw==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 08:07:27 GMT
age: 16883
etag: "af9161eefc1ee381a8f531c593ea7354d73493eb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4936bb42-8976-4efc-8b26-9a2f517edf25.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4936bb42-8976-4efc-8b26-9a2f517edf25.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6a1b3929a583677ce66741ead75e9e65
84ed47576e82c02590bc86f3e6eef9167b65f12c
625f164a7fcb02056fae9afab968c313f6c53f460a0e7b2229966b52049a3d7a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4936bb42-8976-4efc-8b26-9a2f517edf25.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8534
x-amzn-requestid: c3a41a38-9910-4907-b82f-0d56efef6f6b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fDzbLGI2IAMFXQg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63caff7a-2e1152ba048d504246f4b2f5;Sampled=0
x-amzn-remapped-date: Fri, 20 Jan 2023 20:54:18 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EFM-Qc7doROkqk2x8aNEIkmsnmBlsLl3ParlGoWIKRJUumIQBv9hpw==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 22 Jan 2023 02:02:52 GMT
age: 38758
etag: "84ed47576e82c02590bc86f3e6eef9167b65f12c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg
200 OK 8.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e71636bb9a13ad7d52d253e16cd6a3f
401dd58e34982d3434739b9a2f7182487ea1cac5
1ac336df72b6eb569983e197f094378a26a175113249bedca0610cabd57e2e54
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd68d33e7-2d1d-4f9d-9544-28746d9156e6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8057
x-amzn-requestid: 5469b005-6740-4f3d-80ca-a45fd39cae68
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkCFiZoAMF8oQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c80-210da08f113a3273257b7d61;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: j3SoP46ER0JjOaLh363bQ9QW4ZIW19_rbgeQ7Ey8W-zgyGMMLSLccA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:48:17 GMT
etag: "401dd58e34982d3434739b9a2f7182487ea1cac5"
content-type: image/jpeg
age: 54033
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7ec85cf23f6ed6a70e62e17998dfcede
2a690f14cf97f33da2c4f4b21c737a7ca37665b4
ae3cedd8f51f9ed2d996f1d75e7288802d68fa3c27d928934311e4d8821940cc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb253a292-08cb-455a-bf4c-63bdca08af64.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7609
x-amzn-requestid: 86dec496-ff1b-4db8-9bcb-12275f6feeb3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkBGiOIAMFaCQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c7f-16c24501673bc2161c1e8a3b;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: EIRH5l-dSShdZbMvwSEE8jKooGny-prLtbXwx8ZNUi0Wfj4GItKV7g==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 22:08:36 GMT
age: 52814
etag: "2a690f14cf97f33da2c4f4b21c737a7ca37665b4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
quindionoticias.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
200 OK 3.8 kB URL HTTP/2 quindionoticias.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1
IP
File type ASCII text, with very long lines (9959)
Hash 7c4522c04f6ad8cc5ba9d83d27a652c9
9b3058c58d6f0f3bcf204d57d5e38fc3ef507b8f
186df88869ab6951e2647db3b07fc025857cdab144cd7367513944d1d2f0f26c
GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=1.4.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 3823
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 20 May 2016 06:11:28 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/jarallax.js?ver=2.2.3
200 OK 4.8 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/jarallax.js?ver=2.2.3
IP
File type ASCII text, with very long lines (15340)
Hash a1abf78e609c1fd62a312dd4018ad41e
c59afe295971dee21aa043a95db8de33c93bda21
0921313c6e91fa42fd663087d9c313c45c9659fc6c6908fc8b7a7e15af2f6ee1
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/jarallax.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 4815
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-238x178.jpg
200 OK 9.1 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-238x178.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 238x178, components 3\012- data
Hash 6529f6b30daf68b4c2b709f3190bdaf1
3e7a5c5ca0acc892325c96322c2f32de5cfed9a7
b892b5105463210f05e73855ed0e6937d9be7c575de40e86ba0d335bafc448d6
GET /wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-238x178.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 9065
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 17:36:24 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/IMG_20230121_154209-100x75.jpg
200 OK 3.2 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/IMG_20230121_154209-100x75.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 100x75, components 3\012- data
Hash 55ff35bcfd254eaea96a628003412cbe
9b85ff60ccb52d433ae9392de375456d2ff9a649
6c7de423c4cd98313eb3e68aba70a9a8f354e1d668f34bfb68d155e2f436a0ca
GET /wp-content/uploads/2023/01/IMG_20230121_154209-100x75.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 3171
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 20:44:03 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/jpg_20230121_161604_0000-238x178.jpg
200 OK 13 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/jpg_20230121_161604_0000-238x178.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 238x178, components 3\012- data
Hash 1bfcec724d7cfc7cde800e4789fd86d0
94b1795f58fa2190f3eb979657202ccb7e36749c
ca5e69adce372bc925c53c40dabfea8584c1b7a28594e203f350fa758a31b536
GET /wp-content/uploads/2023/01/jpg_20230121_161604_0000-238x178.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 13112
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 21:18:17 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/12/20221226_161036_0000-100x75.jpg
200 OK 3.0 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/12/20221226_161036_0000-100x75.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 100x75, components 3\012- data
Hash 3d0b4cce018bedd3f805b44e76c21672
8b5f4763ccd891dae7cb25599ff1f24e0983551d
e07ad80d397f0c6b243a947a87e8761b8ac8313b3c7cd0fdc5067dbcc2db216b
GET /wp-content/uploads/2022/12/20221226_161036_0000-100x75.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 3027
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Mon, 26 Dec 2022 21:12:21 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-100x75.jpg
200 OK 2.4 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-100x75.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 100x75, components 3\012- data
Hash 7c5157510f4b66cdcc7f1581d9033599
874fa5eb6e969b6b905dac56ee658e86cd8c5de8
9bd5fad21ee285bfda05ee0310f5b0296d1e26ce69e2c620b286149a69c8e10c
GET /wp-content/uploads/2023/01/Quind%C3%ADo-Noticias-20-100x75.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 2374
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 17:36:24 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/20230120_190804_0000-100x75.jpg
200 OK 3.4 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/20230120_190804_0000-100x75.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 100x75, components 3\012- data
Hash 645d1d31b0e6505686cd79386e7a7a99
4ad8d3fa976cd41b3672214aae377cc1ac6b290a
ff8e12d8956563cebacef4ae96255f4b5ab562ee75061d144e63c6e8b59b82d8
GET /wp-content/uploads/2023/01/20230120_190804_0000-100x75.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 3357
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 00:11:28 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.8.1
200 OK 2.9 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.8.1
IP
File type ASCII text, with very long lines (30283), with no line terminators
Hash 1119301a85ab323270d853e94a9b2f2f
3bd61b9dd43e2e0166c4036273b4b02d50d3fec7
8cbeb42d6bac404c391197cf1f219086c8501143db7e4cfde22919d6124b3fc3
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/css/responsive.css?ver=2.8.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 2851
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:04:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/widgets/init/assets/css/widget-styles-pro.css?ver=2.2.3
200 OK 26 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/widgets/init/assets/css/widget-styles-pro.css?ver=2.2.3
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 81a91032997e44cb5818613519db1252
d8db853a039a9d18f31913ddb4d26e8cfcd625c3
364b4364a62830d4baa68818e00df167add5af539380e84374f051e8370391be
GET /wp-content/plugins/elementskit/widgets/init/assets/css/widget-styles-pro.css?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 25969
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/IMG_20230121_154209-238x178.jpg
200 OK 11 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/IMG_20230121_154209-238x178.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 238x178, components 3\012- data
Hash a3ed55c84b63d7c27c8168ce463d28c7
0d59f51034fc2041799cbee3de00b0f20294161b
2c8219943348d94968a15e143fe0e2e06a282624f0eb542da0baedba12a8b760
GET /wp-content/uploads/2023/01/IMG_20230121_154209-238x178.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 10791
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 20:44:03 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
200 OK 33 kB URL HTTP/2 quindionoticias.com/wp-includes/js/jquery/jquery.js?ver=1.12.4-wp
IP
File type ASCII text, with very long lines (31997)
Hash a95303ca3b1a9372809d72ffa31bca40
65130bca144d3b49d5f97387173c423b9b4abfe3
c5d914b6693616fcf2c61bc363660dcc5f6ea7de5a25b1d6a5a2a95f39846565
GET /wp-includes/js/jquery/jquery.js?ver=1.12.4-wp HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 32853
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 17 May 2019 04:25:54 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/jpg_20230121_161604_0000-300x194.jpg
200 OK 18 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/jpg_20230121_161604_0000-300x194.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x194, components 3\012- data
Hash bae7e2572e425cf76b4ad6323c82b43a
63192e28d2539001b7b3257ac289b47df3f84294
e76c3cda421d2d4475bb0dd08f4540f567d245a6e68f5c29db15420027c5ce81
GET /wp-content/uploads/2023/01/jpg_20230121_161604_0000-300x194.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 17501
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sat, 21 Jan 2023 21:18:18 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-537x360.jpeg
200 OK 51 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-537x360.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 537x360, components 3\012- data
Hash 92ee31332ee0429042b9a54f5cd25802
83641447c9387b578b638a98cb8884f6b05ab187
23b7245b0bdc7efb1a8607b5eb5540315906d2ac4e930421d9c83277d40fc7f8
GET /wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-537x360.jpeg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 51365
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sun, 22 Jan 2023 01:39:21 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/12/20221226_161036_0000-238x178.jpg
200 OK 11 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/12/20221226_161036_0000-238x178.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 238x178, components 3\012- data
Hash 262ac0332131922bf4550e0d9c9772e8
46a5eccdc68b19b523bad1ca8fdf30f65e8fb465
25da0ab9f959b1f2f20d2e9dd3bad08cbaf39f571d96ad6b4c95dce0605b4739
GET /wp-content/uploads/2022/12/20221226_161036_0000-238x178.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 11046
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Mon, 26 Dec 2022 21:12:21 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/magician.js?ver=2.2.3
200 OK 1.3 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/magician.js?ver=2.2.3
IP
File type ASCII text, with very long lines (4395), with no line terminators
Hash 65da899b05e9a10295fce1570ff889aa
b77b8f8e047bb77c84eb14b58306b3babb8585a7
23a9df1678a0ac1fade1ce626a17b06f5ed3d8f0550db6b426d3337829be287e
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/magician.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 1312
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.8.1
200 OK 40 B URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.8.1
IP
File type ASCII text, with no line terminators
Hash 94d041d462db321cdb888066586f2068
717d2f9da7fb9f9e2bf2058a8177a0344f8a8647
b8166c5475df6a64ab2456e95f64564164ed697d258e8bfed8cebca40efd6fa5
GET /wp-content/plugins/elementskit-lite/libs/framework/assets/js/frontend-script.js?ver=2.8.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 40
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:04:45 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-includes/js/comment-reply.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 1.0 kB URL HTTP/2 quindionoticias.com/wp-includes/js/comment-reply.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type ASCII text, with very long lines (2337), with no line terminators
Hash 0f79a980dd738f5fec1af21619354559
c22a18280f39cb838c3194f57c723405493bbb5a
47d90c7efd6225e5c18766b61a20c48d680207be39e4db08acb11b7550cda851
GET /wp-includes/js/comment-reply.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 1004
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Thu, 15 Apr 2021 05:34:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/anime.js?ver=2.2.3
200 OK 6.8 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/anime.js?ver=2.2.3
IP
File type ASCII text, with very long lines (17077), with no line terminators
Hash 8cbf89d28d300f1b8c6e36f380c435ec
6cb9a48b553e45a496ad35fba4d99a907ca938bd
68c1192b0319810eeba7f068b66e520d3bbe72113fcd8d9badeaf17d33f33cdb
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/anime.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 6841
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/TweenMax.min.js?ver=2.2.3
200 OK 39 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/TweenMax.min.js?ver=2.2.3
IP
File type ASCII text, with very long lines (64975)
Hash 384a08fa7642dd3a43eabbf9ffd8fd30
1c751a05ff856524300813eaa66c46a662b5e757
e5776fafbc2e4ddc081e15c506ef09d3ea633f3cdecf6b5fc4fb71657e446486
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/TweenMax.min.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 38590
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/jquery.easing.1.3.js?ver=2.2.3
200 OK 774 B URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/jquery.easing.1.3.js?ver=2.2.3
IP
File type ASCII text, with very long lines (3317), with no line terminators
Hash e70f744103133e9c313ef5ce02d968e7
606795fa1e4f7363fa2d89342e1e050839714e6c
043534b9019747e1c38a17fdaa0d604c98df6f2cf97994285f6776513741e62c
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/jquery.easing.1.3.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 774
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2021/12/9CD25FFB-0821-4B0E-AD38-3D05D6A664B2-341x220.jpeg
200 OK 20 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2021/12/9CD25FFB-0821-4B0E-AD38-3D05D6A664B2-341x220.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 341x220, components 3\012- data
Hash 2457c7443475d1d65c786bf7ac623445
3e8486dfd03461569629ccfc9b77a1d5af5dd611
f755f42826676bd9c546190a8154e262b9193f161c86f3808f64ca9d27201631
GET /wp-content/uploads/2021/12/9CD25FFB-0821-4B0E-AD38-3D05D6A664B2-341x220.jpeg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 19665
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Mon, 13 Dec 2021 23:01:04 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-300x194.jpeg
200 OK 20 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-300x194.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 300x194, components 3\012- data
Hash 6dd65aff69bfdd983a0f43deee50b077
3c6128a5e650abd805ec56ac92268d053d908f4b
dd0ec3b715925ff724eca20b50589140cd85ac1a50621ed708c63025be713c73
GET /wp-content/uploads/2023/01/833808D3-FEFD-461D-B271-F253B4D7FCED-300x194.jpeg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 19905
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sun, 22 Jan 2023 01:39:21 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/09/EFIGAS-PSD-05-scaled-300x250.jpg
200 OK 18 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/09/EFIGAS-PSD-05-scaled-300x250.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 300x250, components 3\012- data
Hash edcf39cb4c32d420ab0cd7698ca609c7
592ac4355450d2da29af4039b8843e33cbd885ed
8006506c64fb132499317a0686996353021768322a009f5d2fcf0a5d876ee5b6
GET /wp-content/uploads/2022/09/EFIGAS-PSD-05-scaled-300x250.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 18239
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 20 Sep 2022 11:30:17 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/widgets/chart/assets/js/chart.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 46 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/widgets/chart/assets/js/chart.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type ASCII text, with very long lines (65336)
Hash 73341a353474e35746da0783d153b973
381f47d7b839cb1fdab151cc657098c16efe9f8a
537786552172b6d23f43125bd98cd9b12342cd846f4a81afedd296058855a923
GET /wp-content/plugins/elementskit/widgets/chart/assets/js/chart.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 46037
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Fri, 22 Jul 2022 15:53:08 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/themes/Newsmag/style.css?ver=3.4
200 OK 82 kB URL HTTP/2 quindionoticias.com/wp-content/themes/Newsmag/style.css?ver=3.4
IP
File type ASCII text, with CRLF line terminators
Hash dfe134f0c32af0c6d4d395339ce720e1
bf9ddfb223820408ded5d547bca94812a94689bb
ff47d9ee834c5ad1cfca71f4165e0cfc4b4955f52df43cabe16515c24f32d23a
GET /wp-content/themes/Newsmag/style.css?ver=3.4 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/css
content-length: 82259
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Wed, 18 Mar 2020 16:54:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/12/320058530_1139230366730558_6359254034251493265_n-scaled.jpeg
200 OK 66 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/12/320058530_1139230366730558_6359254034251493265_n-scaled.jpeg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 800x800, components 3\012- data
Hash bc047edd7f9c64eddea70bc13c41b423
f95b72924efe3be6fe51c4a9776dc82a53d0d056
7fce8fc6205bc1646f61cd41d304ccd7c1ea2809e9ef32f4bf2844e9bd8fc78e
GET /wp-content/uploads/2022/12/320058530_1139230366730558_6359254034251493265_n-scaled.jpeg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 65619
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 20 Dec 2022 20:00:06 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=3.4
200 OK 45 kB URL HTTP/2 quindionoticias.com/wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=3.4
IP
File type ASCII text, with very long lines (670)
Hash 4a6e5f4ebde699d87b1de8572cc83392
b41ec2d57962e769b121788b66c9f19f5fc46f18
ddb07790dd72c3cddf9bc7fa3647d4b88b5c6758d2483bee01c0ba12e6e3a8f2
GET /wp-content/themes/Newsmag/js/tagdiv_theme.min.js?ver=3.4 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 45158
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Wed, 18 Mar 2020 16:54:48 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/11/banner-970-x-250.jpg
200 OK 195 kB URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/11/banner-970-x-250.jpg
IP
File type JPEG image data, progressive, precision 8, 728x188, components 3\012- data
Size 195 kB (194926 bytes)
Hash ae6d7dc19930d1e6ffe1aa17acb8374a
22ba2e1d9087a3bb6a73042ca7a285f2faf4b26d
373599f3b6aadb44ca153def216785fcf0400a0c3fc93e333124585f7b599115
GET /wp-content/uploads/2022/11/banner-970-x-250.jpg HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/jpeg
content-length: 194926
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 29 Nov 2022 02:01:41 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.8.1
200 OK 40 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.8.1
IP
File type ASCII text, with very long lines (45047)
Hash 4b29f739d2f0c324f8fe0292072a0215
e5ed795866581ac6ad512a55e4ece20a235920b5
351aa10967750cc94c97b8ee2c44cd129b24d80497a8a8e5065b417f18834ff2
GET /wp-content/plugins/elementskit-lite/widgets/init/assets/js/widget-scripts.js?ver=2.8.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
content-length: 40424
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 17 Jan 2023 20:04:46 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 25d59e4444b16818a49fec7128c90dcd
ea263f33790881a01e317fa03d935f7109523e41
22e26ea1917d1a0fed0b2af636f1baecb59768b0f85c9ab6b1c37d45e84dfa2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://quindionoticias.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 16 Jan 2023 18:52:41 GMT
expires: Tue, 16 Jan 2024 18:52:41 GMT
cache-control: public, max-age=31536000
age: 496569
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 25d59e4444b16818a49fec7128c90dcd
ea263f33790881a01e317fa03d935f7109523e41
22e26ea1917d1a0fed0b2af636f1baecb59768b0f85c9ab6b1c37d45e84dfa2d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:50 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
quindionoticias.com/wp-includes/js/wp-emoji-release.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 4.2 kB URL HTTP/2 quindionoticias.com/wp-includes/js/wp-emoji-release.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type ASCII text, with very long lines (10927)
Hash 1108311a10e7a1f95711ab2c4e7464c7
6c2d154cfa23d06cc28edb94b6435299d1f2ed95
1f3e1dc9c0f338f7e2b94017f5f8aa2015d6c36ca3462c57b1a63f9394490b44
GET /wp-includes/js/wp-emoji-release.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:50 GMT
content-type: application/javascript
content-length: 4248
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:50 GMT
last-modified: Thu, 15 Apr 2021 05:34:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/tilt.jquery.min.js?ver=2.2.3
200 OK 1.7 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/elementskit/modules/parallax/assets/js/tilt.jquery.min.js?ver=2.2.3
IP
File type ASCII text, with very long lines (5616), with no line terminators
Hash b57373ce882c91914f58454b1bb9a3a6
6a2d7c647c801c06568c0d5da9963a573e40725c
69367838619a692dd9504d6b398586bfae8dd0db5fc2284882868ba91eaf63b3
GET /wp-content/plugins/elementskit/modules/parallax/assets/js/tilt.jquery.min.js?ver=2.2.3 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:50 GMT
content-type: application/javascript
content-length: 1660
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:50 GMT
last-modified: Fri, 22 Jul 2022 15:53:07 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-includes/js/wp-embed.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
200 OK 638 B URL HTTP/2 quindionoticias.com/wp-includes/js/wp-embed.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c
IP
File type ASCII text, with very long lines (1391), with no line terminators
Hash 85b7e05edbd8b6b11ea6d1d9b4962e6d
8980e1bfc98fa9a331aa662c835284c5c75cc316
1fe5c1fb9e8dc26c7385dc661fcded4c033b190cb506349fcdbaefa5672c1449
GET /wp-includes/js/wp-embed.min.js?ver=90690c04bd1b6ca2ea9c6b3f8818ae1c HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:50 GMT
content-type: application/javascript
content-length: 638
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:50 GMT
last-modified: Thu, 15 Apr 2021 05:34:17 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1
200 OK 5.3 kB URL HTTP/2 quindionoticias.com/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1
IP
File type ASCII text, with very long lines (19302), with no line terminators
Hash 82e9fdfd603485b59571b592d843ff6d
866a449b38d6f1bbcd4b2c79758cd2562a58f438
73862474d65962a9bea0db3f1eeb620828542751141a8b6709f32ffc0ba74b35
GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=5.0.1 HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:50 GMT
content-type: application/javascript
content-length: 5319
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:50 GMT
last-modified: Wed, 18 Mar 2020 16:51:14 GMT
accept-ranges: bytes
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash e66b198ffb4a0907bfcfc4f696b4d9cc
ef04bb5cdab20d39cc32a66dc8b90fa4ee70b24f
3b9f1c18fc7444200673f3b76dcf1a66c4db14fbead30c876f9acd63a97a91a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B9F1C18FC7444200673F3B76DCF1A66C4DB14FBEAD30C876F9ACD63A97A91A4"
Last-Modified: Sat, 21 Jan 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10051
Expires: Sun, 22 Jan 2023 15:36:22 GMT
Date: Sun, 22 Jan 2023 12:48:51 GMT
Connection: keep-alive
quindionoticias.com/wp-content/uploads/2019/01/logo-3-1.png
200 OK 53 kB URL HTTP/1.1 quindionoticias.com/wp-content/uploads/2019/01/logo-3-1.png
IP
File type PNG image data, 799 x 143, 8-bit/color RGBA, non-interlaced\012- data
Hash 48c4e672ee825a3a2e1c5c883ba45fbf
77fdab9c9839fa97584f3a848b4837657422363b
ed3dbc2608ed872ec149af9ff63421c96c8d800622d6aeafa9fa6304e4aaae6a
GET /wp-content/uploads/2019/01/logo-3-1.png HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 22 Jan 2023 12:48:50 GMT
Content-Type: image/png
Content-Length: 53384
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:50 GMT
last-modified: Thu, 10 Jan 2019 18:46:40 GMT
accept-ranges: bytes
www.profitabledisplayformat.com/2a87bc1b598acf1df44e718484cb6738/invoke.js
200 OK 9.8 kB URL HTTP/1.1 www.profitabledisplayformat.com/2a87bc1b598acf1df44e718484cb6738/invoke.js
IP
File type exported SGML document, ASCII text, with very long lines (26941), with no line terminators
Hash f05ecc6f42b86a30eeb1a139597ee990
639fa267617eb7a6764523bbf317301e4d97e9bf
6ff2b3a98a27510f8c525b933d157e470962a9857c3360022e1df842785a49c6
Analyzer Verdict Alert quad9 Sinkholed
GET /2a87bc1b598acf1df44e718484cb6738/invoke.js HTTP/1.1
Host: www.profitabledisplayformat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 22 Jan 2023 12:48:51 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6d5a15929993914e4d5d7f5c4ee686ad
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash a8e6f157fd0ee89e42425a42b41a56b8
79e06666b07d926fed4cda7ee026f65dabbef491
cc71872eca6011b9bd4202ab8d970829a11a7f207507a2f6228b1599086dd69d
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Sun, 22 Jan 2023 12:48:51 GMT
Last-Modified: Sun, 22 Jan 2023 12:45:20 GMT
Server: ECS (bsa/EB19)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 9ifPPBpbSoYt1ZPIKlIfP7ozRncQRE62_QEARGCEnWHQWUgf-5zAug==
Age: 211
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 51219f22c8d4e1de78326189b74b4a72
275bcb0fc9a604debe84e7ac917ff3d034d587a6
84aa42139c3016ee502edd33fc7e397ca7c8855ffd5008ede52ef4bddd7d20c6
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quindionoticias.com
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 12:48:51 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://quindionoticias.com
access-control-allow-credentials: true
set-cookie: uid_id2=654379b0-cdc9-4df7-9ba7-ffdb766b6d73:2:1; expires=Wed, 19 Jan 2033 12:48:51 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash c79de2c77b474b646ea153a9309bba2b
9c5e9dd747d320a5fb321079172a2b2690040821
4bd40bafcb22123663c020abc05ba326d39b010cebafc29f94b361ab65dd450e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3637
Cache-Control: max-age=112717
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:51 GMT
Etag: "63cc37cb-117"
Expires: Mon, 23 Jan 2023 20:07:28 GMT
Last-Modified: Sat, 21 Jan 2023 19:06:51 GMT
Server: ECS (amb/6B75)
X-Cache: HIT
Content-Length: 279
ocsp.digicert.com/
200 OK 279 B IP
Hash c79de2c77b474b646ea153a9309bba2b
9c5e9dd747d320a5fb321079172a2b2690040821
4bd40bafcb22123663c020abc05ba326d39b010cebafc29f94b361ab65dd450e
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3637
Cache-Control: max-age=112717
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:51 GMT
Etag: "63cc37cb-117"
Expires: Mon, 23 Jan 2023 20:07:28 GMT
Last-Modified: Sat, 21 Jan 2023 19:06:51 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 279
certify-js.alexametrics.com/atrk.js
200 OK 4.3 kB URL HTTP/1.1 certify-js.alexametrics.com/atrk.js
IP
File type ASCII text, with very long lines (4255), with no line terminators
Hash d89453438fbf10dcf4c13265c40d5160
02d5f4e46c94bf34e12b2d773f63f643ea2b3518
5e84ce936bc3e3844a5d9efb3ac7d28107fa17234fa2a6c2bf3491fc284f0d4f
GET /atrk.js HTTP/1.1
Host: certify-js.alexametrics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 4255
Connection: keep-alive
Date: Sat, 13 Aug 2022 04:02:04 GMT
Last-Modified: Tue, 27 Apr 2021 18:03:54 GMT
ETag: "d89453438fbf10dcf4c13265c40d5160"
Cache-Control: max-age=26920000
Accept-Ranges: bytes
Server: AmazonS3
X-Cache: Hit from cloudfront
Via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: cM2EyLaJ6UKt1tfv28iRA-6Ahao9X_1DntTKnczxcS27TnOYTbS79A==
Age: 14028408
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
clevernt.com/scripts/d42a45b58157c86312d73a8487b05010.min.js?20201113=1674391730558
200 OK 573 B URL HTTP/2 clevernt.com/scripts/d42a45b58157c86312d73a8487b05010.min.js?20201113=1674391730558
IP
Hash 210a4e9029af4eb062f993e20ca4d58f
1b0da58c38724170adc0a7d7069972c176c43ad5
3dd840f98b504f42d13bad2154ac36299efff22282eb4d6f0f214dbc36244965
GET /scripts/d42a45b58157c86312d73a8487b05010.min.js?20201113=1674391730558 HTTP/1.1
Host: clevernt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 12:48:51 GMT
content-type: text/javascript
x-amz-id-2: U3Jj+VcofCAq8CJZWpAh7877YIbsBsAHN8tgJIzlkISbetpa55RZrNNkPN+9WndYgCr3STir7NY=
x-amz-request-id: 7KFD1R9FVWJK6JNV
last-modified: Wed, 01 Dec 2021 04:07:30 GMT
etag: W/"652914ec252d88de05b0694e3bbaab01"
cache-control: max-age=1800
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RTktcX0pnscCEY72AwkhWVJ4X6BvaNfuvVwyEfqpS5NxrZjvGjvF8UToadz5gc%2FIcSkHIc9S3AJY7U6d5XXwwLcX25TSzR%2BMzCnA3TOlQuK5hP9GIqW5wLeSsixgXQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78d868038a47b511-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/es_LA/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/es_LA/sdk.js
IP
File type ASCII text, with very long lines (1957)
Hash efa898e4fee7dde912d692712666e568
dc0132abecdfe6f3f20e9da452ca22db0c4d0c68
2a0615a515a4076cc077a5e66a06c5f249806fda4809100cf7396be0e2d2f889
GET /es_LA/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4c5215d7916426b6bc4400ccbab500fa
etag: "f89b8f03738a59efd5a2c35e3c15f4f3"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 22 Jan 2023 13:02:13 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 76iY5P7n3ekS1pJxJmblaA==
x-fb-debug: eGdn++lTZsy8zETkurtursB28krY5epUqBXBMMpUlo/n5lQ+qDHk2/0dJykdpKeql5+0dklosZTCztdt4noLQQ==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Sun, 22 Jan 2023 12:48:52 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0f67edfa92ff11474d17ad3160ed43e
a43cc627d3c9258bdbe14ff3ceeed1c98496ff50
309dea4b94ceda4ec43c2f944cdfad61434c96eaafd172bc55c39545f3bf5a1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-9159600813057342
200 OK 50 kB URL HTTP/2 pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-9159600813057342
IP
File type ASCII text, with very long lines (3642)
Hash 1e77dce5c81ad77f583f284d4f7cc4c7
f5805c44ae6609c098e7222121ed23ba129aca4d
62b0717fbf5947e0c4d241824d5b1a0e0e2abac3a86ad3c9776dca27a22c3245
GET /pagead/js/adsbygoogle.js?client=ca-pub-9159600813057342 HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quindionoticias.com
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
date: Sun, 22 Jan 2023 12:48:52 GMT
expires: Sun, 22 Jan 2023 12:48:52 GMT
cache-control: private, max-age=3600
content-type: text/javascript; charset=UTF-8
etag: 6182411536248587032
access-control-allow-origin: *
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: br
server: cafe
content-length: 50175
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51c33b802936a31d5ccfb260fad6c92c
764722c616b60c0dee1d7212645dbc6c90487652
2c62a2e2f1e05801cb96a590138dc7ad59b913dfb0dc681b4e8b5b820697841a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2C62A2E2F1E05801CB96A590138DC7AD59B913DFB0DC681B4E8B5B820697841A"
Last-Modified: Sun, 22 Jan 2023 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18926
Expires: Sun, 22 Jan 2023 18:04:18 GMT
Date: Sun, 22 Jan 2023 12:48:52 GMT
Connection: keep-alive
www.googletagservices.com/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 www.googletagservices.com/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39228)
Hash e64ef55d60a2d41b965acdf3a6881f37
a9f4b0532987ed25104df5a913ec8e0e0a44111e
5c278c396db0bb74eb438f5889217a27ca9ff18a203a027616e65cf6e2799d7c
GET /tag/js/gpt.js HTTP/1.1
Host: www.googletagservices.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27765
date: Sun, 22 Jan 2023 12:48:52 GMT
expires: Sun, 22 Jan 2023 12:48:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1459 / 975 of 1000 / last-modified: 1674256084"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1490)
Hash ca7fbbfd120e3e329633044190bbf134
d17f81e03dd827554ddd207ea081fb46b3415445
847004cefb32f85a9cc16b0b1eb77529ff5753680c145bfcb23f651d214737db
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20085
date: Sun, 22 Jan 2023 12:41:07 GMT
expires: Sun, 22 Jan 2023 14:41:07 GMT
cache-control: public, max-age=7200
age: 465
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 983410dffbd2f6609e689d468279cad3
9ed22350a720ebff727059fa19538dd721252f31
0f772ca05a2b10e54f9d9ba798c555e777461c5d5270b5355df7c303af07297d
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2293
Cache-Control: max-age=98749
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Etag: "63cc067c-1d7"
Expires: Mon, 23 Jan 2023 16:14:41 GMT
Last-Modified: Sat, 21 Jan 2023 15:36:28 GMT
Server: ECS (ska/F6FD)
X-Cache: HIT
Content-Length: 471
securepubads.g.doubleclick.net/tag/js/gpt.js
200 OK 28 kB URL HTTP/2 securepubads.g.doubleclick.net/tag/js/gpt.js
IP
File type ASCII text, with very long lines (39368)
Hash 8db538b972730765a018ba93ceebbf8d
cd21bad07cdd2b23b9b3ba4248baf2424251a76b
045e6aef9b338843354176ed1e30b45683da0dd8a1e7b11a6dcdee2931fdd6d2
GET /tag/js/gpt.js HTTP/1.1
Host: securepubads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-gpt-scs"
report-to: {"group":"ads-gpt-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-gpt-scs"}]}
timing-allow-origin: *
content-length: 27724
date: Sun, 22 Jan 2023 12:48:52 GMT
expires: Sun, 22 Jan 2023 12:48:52 GMT
cache-control: private, max-age=900, stale-while-revalidate=3600
etag: "1459 / 515 of 1000 / last-modified: 1674256154"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5074bfa38808c4a0f18b00a601cfef53
ffc0c526e49251605b2c95d0d1d595f9c702cd9a
6262e4155e8fbf18388f2f38c8e65cb87db94dae66d1dbbd329b4973d8b243df
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0f67edfa92ff11474d17ad3160ed43e
a43cc627d3c9258bdbe14ff3ceeed1c98496ff50
309dea4b94ceda4ec43c2f944cdfad61434c96eaafd172bc55c39545f3bf5a1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:52 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
googleads.g.doubleclick.net/pagead/html/r20230118/r20190131/zrt_lookup.html
200 OK 4.2 kB URL HTTP/2 googleads.g.doubleclick.net/pagead/html/r20230118/r20190131/zrt_lookup.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2579)
Hash 2fb3574102373e2e076cfa2ff90cdf25
d06c985183def975546d6e47ab6369c11dcf7195
e61cbc207f7fc2f429deceff11e7a339a3d9a9574da6d035054eba02ee381345
GET /pagead/html/r20230118/r20190131/zrt_lookup.html HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-encoding: br
server: cafe
content-length: 4242
x-xss-protection: 0
date: Sat, 21 Jan 2023 20:48:08 GMT
expires: Sat, 04 Feb 2023 20:48:08 GMT
cache-control: public, max-age=1209600
age: 57644
etag: 10353107486223812946
content-type: text/html; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
excretekings.com/watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 excretekings.com/watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1 HTTP/1.1
Host: excretekings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quindionoticias.com
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.19.5
Date: Sun, 22 Jan 2023 12:48:52 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://quindionoticias.com
Access-Control-Allow-Origin: https://quindionoticias.com
Access-Control-Allow-Credentials: true
Location: https://excretekings.com/watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1&shu=a3f2f322915a1381755fdb08ee524a6603767f8cae5a581033ec3a4e16f2d853ce777661ae2969e3c2b9264bcec18a64701d01dd9e54ed45087d9e852c228ed0c3b6848f6f3201cae9df5c42f40dfd93b24eca46&pst=1674391792&rmtc=t
Set-Cookie: u_pl=17348431; expires=Mon, 23 Jan 2023 12:48:52 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.3cLotBWr71vUSEqtEHgEoM9ahoyHvKAI3zQSeLYXLCs; expires=Sun, 22 Jan 2023 12:49:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 4692d7fe334ce5289816a6e40250d954
Strict-Transport-Security: max-age=0; includeSubdomains
excretekings.com/watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1&shu=a3f2f322915a1381755fdb08ee524a6603767f8cae5a581033ec3a4e16f2d853ce777661ae2969e3c2b9264bcec18a64701d01dd9e54ed45087d9e852c228ed0c3b6848f6f3201cae9df5c42f40dfd93b24eca46&pst=1674391792&rmtc=t
200 OK 635 B URL HTTP/1.1 excretekings.com/watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1&shu=a3f2f322915a1381755fdb08ee524a6603767f8cae5a581033ec3a4e16f2d853ce777661ae2969e3c2b9264bcec18a64701d01dd9e54ed45087d9e852c228ed0c3b6848f6f3201cae9df5c42f40dfd93b24eca46&pst=1674391792&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (584)
Hash da07da6eebdef935dab05ece2902a15d
e46f6e4eaa931494483897f65ae9b8f65f1fe2d8
af8a6ddac51ecaf0aafa53413371048283eb63e367e6a63cf4ed553bea72c1ac
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.261951816238.js?key=2a87bc1b598acf1df44e718484cb6738&kw=%5B%22quind%C3%ADo%22%2C%22noticias%22%5D&refer=https%3A%2F%2Fquindionoticias.com%2F&tz=0&dev=e&res=12.1055&uuid=654379b0-cdc9-4df7-9ba7-ffdb766b6d73%3A2%3A1&shu=a3f2f322915a1381755fdb08ee524a6603767f8cae5a581033ec3a4e16f2d853ce777661ae2969e3c2b9264bcec18a64701d01dd9e54ed45087d9e852c228ed0c3b6848f6f3201cae9df5c42f40dfd93b24eca46&pst=1674391792&rmtc=t HTTP/1.1
Host: excretekings.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quindionoticias.com
Referer: https://quindionoticias.com/
Connection: keep-alive
Cookie: u_pl=17348431; ain=eyJhbGciOiJIUzI1NiJ9.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.3cLotBWr71vUSEqtEHgEoM9ahoyHvKAI3zQSeLYXLCs
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 22 Jan 2023 12:48:52 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://quindionoticias.com
Access-Control-Allow-Origin: https://quindionoticias.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=654379b0-cdc9-4df7-9ba7-ffdb766b6d73:2:1; expires=Sun, 29 Jan 2023 12:48:52 GMT; secure; SameSite=None
iprc74ebd6c6452f128a8ad56339e1dd5aa3=2717288; expires=Mon, 23 Jan 2023 14:48:52 GMT; secure; SameSite=None
pdhtkv=true; expires=Mon, 23 Jan 2023 12:48:52 GMT; secure; SameSite=None
uncs=1; expires=Mon, 23 Jan 2023 12:48:52 GMT; secure; SameSite=None
pdhtkv5=true; expires=Mon, 23 Jan 2023 12:48:52 GMT; secure; SameSite=None
uncs5=1; expires=Mon, 23 Jan 2023 12:48:52 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 0faa973895743e89c07d998ab390f992
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash 0d4c1a6cba477678636519a95362df30
376898c96b449c1e9d575f31d45892e4a33cd0f3
843db11f8b15c5aac5efc2d2f2ac88509b6b1c365df15b70c0c71d2a6d786d39
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=143857
Date: Sun, 22 Jan 2023 12:48:52 GMT
Etag: "63ccbd7c-1d7"
Expires: Tue, 24 Jan 2023 04:46:29 GMT
Last-Modified: Sun, 22 Jan 2023 04:37:16 GMT
Server: ECS (nyb/1D35)
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Aqc7BPqLX9uIOdqkP09anAN5hqM1APQrxT6oAX-ODTcdaRpYC4jrWA==
Age: 553
ocsp.sectigo.com/
200 OK 471 B IP
Hash 5a35dc1b1b8b12fc61d0a8016fcb2a30
8a391b753991e6301d5df78ae44d747de020f299
7a6c04de9552dedcf65fd5125091836174107e87d7c9eee428fc684d368102eb
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jan 2023 12:48:52 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 21 Jan 2023 17:22:28 GMT
Expires: Sat, 28 Jan 2023 17:22:27 GMT
Etag: "8a391b753991e6301d5df78ae44d747de020f299"
Cache-Control: max-age=534214,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78d868091c04b51b-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b99dcf6335a2bd9375158d6d14bfaa00
d688c2c4cb50be6fbe8808176818bf50060f52ea
1c6465812613277049b2c2a78e6b622e971ec163a6efb5e6fa955f2cec0b5354
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1C6465812613277049B2C2A78E6B622E971EC163A6EFB5E6FA955F2CEC0B5354"
Last-Modified: Sat, 21 Jan 2023 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12996
Expires: Sun, 22 Jan 2023 16:25:28 GMT
Date: Sun, 22 Jan 2023 12:48:52 GMT
Connection: keep-alive
youradexchange.com/script/suurl4.php?r=6632494&atag=1&czid=fxrettzzr8&cbur=0.858816242860532&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Quind%C3%ADo%20Noticias&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref=&cbdescription=Quind%C3%ADo%20Noticias%3A%20Noticias%20del%20Quind%C3%ADo.%20Encuentre%20las%20noticias%20m%C3%A1s%20recientes%20del%20Quind%C3%ADo%2C%20Colombia%20y%20el%20mundo.%20Judiciales%2C%20deportes%2C%20econom%C3%ADa%2C%20empleo%2C%20turismo.&cbkeywords=diarios%2C%20peri%C3%B3dicos%2C%20periodicos%2C%20noticias%2C%20actualidad%2C%20armenia%2C%20quindio%2C%20colombia%2C%20calarca%2C%20quimbaya%2C%20tebaida%2C%20salento%2C%20cordoba%2C%20pijao%2C%20buenavista%2C%20circasia%2C%20barragan%2C%20rio%20la%20vieja%2C%20turismo%2C%20gratis%2C%20canopy%2C%20parque%20del%20cafe%2C%20panaca%2C%20montenegro%2C%20genova%2C%20barcelona%2C&cbcdn=acacdn.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0
204 No Content 0 B URL HTTP/2 youradexchange.com/script/suurl4.php?r=6632494&atag=1&czid=fxrettzzr8&cbur=0.858816242860532&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Quind%C3%ADo%20Noticias&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref=&cbdescription=Quind%C3%ADo%20Noticias%3A%20Noticias%20del%20Quind%C3%ADo.%20Encuentre%20las%20noticias%20m%C3%A1s%20recientes%20del%20Quind%C3%ADo%2C%20Colombia%20y%20el%20mundo.%20Judiciales%2C%20deportes%2C%20econom%C3%ADa%2C%20empleo%2C%20turismo.&cbkeywords=diarios%2C%20peri%C3%B3dicos%2C%20periodicos%2C%20noticias%2C%20actualidad%2C%20armenia%2C%20quindio%2C%20colombia%2C%20calarca%2C%20quimbaya%2C%20tebaida%2C%20salento%2C%20cordoba%2C%20pijao%2C%20buenavista%2C%20circasia%2C%20barragan%2C%20rio%20la%20vieja%2C%20turismo%2C%20gratis%2C%20canopy%2C%20parque%20del%20cafe%2C%20panaca%2C%20montenegro%2C%20genova%2C%20barcelona%2C&cbcdn=acacdn.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /script/suurl4.php?r=6632494&atag=1&czid=fxrettzzr8&cbur=0.858816242860532&cbiframe=0&cbWidth=1280&cbHeight=939&cbtitle=Quind%C3%ADo%20Noticias&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref=&cbdescription=Quind%C3%ADo%20Noticias%3A%20Noticias%20del%20Quind%C3%ADo.%20Encuentre%20las%20noticias%20m%C3%A1s%20recientes%20del%20Quind%C3%ADo%2C%20Colombia%20y%20el%20mundo.%20Judiciales%2C%20deportes%2C%20econom%C3%ADa%2C%20empleo%2C%20turismo.&cbkeywords=diarios%2C%20peri%C3%B3dicos%2C%20periodicos%2C%20noticias%2C%20actualidad%2C%20armenia%2C%20quindio%2C%20colombia%2C%20calarca%2C%20quimbaya%2C%20tebaida%2C%20salento%2C%20cordoba%2C%20pijao%2C%20buenavista%2C%20circasia%2C%20barragan%2C%20rio%20la%20vieja%2C%20turismo%2C%20gratis%2C%20canopy%2C%20parque%20del%20cafe%2C%20panaca%2C%20montenegro%2C%20genova%2C%20barcelona%2C&cbcdn=acacdn.com&aggr=3&seqid=0&ab_test=AdOpt_B_nocapping-2021-12-08v1&cap=0 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://quindionoticias.com/
Origin: https://quindionoticias.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: openresty
date: Sun, 22 Jan 2023 12:48:53 GMT
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
youradexchange.com/script/push.php?r=6632490&ipp=1&mads=2&position=top&czid=fxrettzzr8&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref=
204 No Content 34 kB URL HTTP/2 youradexchange.com/script/push.php?r=6632490&ipp=1&mads=2&position=top&czid=fxrettzzr8&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref=
IP
Hash 4f10cfe311155a139929c33ebff6e08c
7d1c3b7803aa8f06da6f00a43076063d20337558
c7eff33a9d5473a3d0c88d8ffd9ed6f16be778febc23489cc3e90a319f9d329f
GET /script/push.php?r=6632490&ipp=1&mads=2&position=top&czid=fxrettzzr8&aggr=3&atag=1&ppv=1&ab_test=AdOpt_B_nocapping-2021-12-08v1&cbpage=https%3A%2F%2Fquindionoticias.com%2F&cbref= HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://quindionoticias.com/
Origin: https://quindionoticias.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: openresty
date: Sun, 22 Jan 2023 12:48:53 GMT
access-control-allow-origin: *
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 38 kB IP
Hash 1cc4fda338f0b0ccb83e063bfdfc7409
01d4d8524526aa29e49763a18754af961d413e58
19c582a1555b3450d7f645c9cb6f5c69dd442abd82318852423c4c159b80776a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 22 Jan 2023 12:48:53 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sat, 21 Jan 2023 17:22:28 GMT
Expires: Sat, 28 Jan 2023 17:22:27 GMT
Etag: "8a391b753991e6301d5df78ae44d747de020f299"
Cache-Control: max-age=534213,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 78d8680a7da6b51b-OSL
quindionoticias.com/wp-content/uploads/2019/01/Q_LOGO.png
200 OK 123 kB URL HTTP/1.1 quindionoticias.com/wp-content/uploads/2019/01/Q_LOGO.png
IP
Size 123 kB (122627 bytes)
Hash b034ba794ff6018b6f3d769622c3018b
829ef13d8fc94ded78b35de394cd8ccd1acd3799
62c26eac038e8a51d1e3ab176ff4cfab645f0cbf7e483e8d39fca846e332cc72
GET /wp-content/uploads/2019/01/Q_LOGO.png HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Sun, 22 Jan 2023 12:48:53 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Set-Cookie: u_pl=16122935; expires=Mon, 23 Jan 2023 12:48:53 GMT
ain=eyJhbGciOiJIUzI1NiJ9.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.GmX56XuAqgGx1fLy_dqQpf07z-3cRsd3Up3ARGUb4MU; expires=Sun, 22 Jan 2023 12:49:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7585ce35b8fa819b14cae74d8e546f9b
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
jennyvisits.com/m3vcib848?shu=c225c8022fbfa43e5bb3bcaa028910a925ac36de6dfe75783e6e357b7c611d5b8b869d3b55af201cdf56a74533e81e9b0971f3e36114dc10be0d62630df378305a5d5f81121c49a4df0d7adc7b4eb0c7db112ef8e983c55c85e1ebe05600b4f5&pst=1674391793&rmtc=t&uuid=&pii=&in=false&key=e83c7700ffb295fb282c692b9f778d17&refer=https%3A%2F%2Fquindionoticias.com%2F&psid=17348431
302 Found 0 B URL HTTP/1.1 jennyvisits.com/m3vcib848?shu=c225c8022fbfa43e5bb3bcaa028910a925ac36de6dfe75783e6e357b7c611d5b8b869d3b55af201cdf56a74533e81e9b0971f3e36114dc10be0d62630df378305a5d5f81121c49a4df0d7adc7b4eb0c7db112ef8e983c55c85e1ebe05600b4f5&pst=1674391793&rmtc=t&uuid=&pii=&in=false&key=e83c7700ffb295fb282c692b9f778d17&refer=https%3A%2F%2Fquindionoticias.com%2F&psid=17348431
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /m3vcib848?shu=c225c8022fbfa43e5bb3bcaa028910a925ac36de6dfe75783e6e357b7c611d5b8b869d3b55af201cdf56a74533e81e9b0971f3e36114dc10be0d62630df378305a5d5f81121c49a4df0d7adc7b4eb0c7db112ef8e983c55c85e1ebe05600b4f5&pst=1674391793&rmtc=t&uuid=&pii=&in=false&key=e83c7700ffb295fb282c692b9f778d17&refer=https%3A%2F%2Fquindionoticias.com%2F&psid=17348431 HTTP/1.1
Host: jennyvisits.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://jennyvisits.com/m3vcib848?key=0f22c1fd609f13cb7947c8cabfe1a90d&submetric=16122935
Cookie: u_pl=16122935; ain=eyJhbGciOiJIUzI1NiJ9.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.GmX56XuAqgGx1fLy_dqQpf07z-3cRsd3Up3ARGUb4MU; cjs=t
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
HTTP/1.1 302 Found
Server: nginx/1.19.5
Date: Sun, 22 Jan 2023 12:48:53 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Location: https://asper-media.com/click.php?key=1wojcs0r58urwh6jy9ky&SUB_ID_SHORT=1c5350e6b126af0ffdf96d17014c486c&COST_CPC=0.002500&PLACEMENT_ID=16122935&CAMPAIGN_ID=720711&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2126475
Set-Cookie: iprc1b24bf5414a23d34cbe727b2580b2495=3950617; expires=Mon, 23 Jan 2023 12:48:53 GMT
pdhtkv=true; expires=Mon, 23 Jan 2023 12:48:53 GMT
uncs=1; expires=Mon, 23 Jan 2023 12:48:53 GMT
pdhtkv28=true; expires=Mon, 23 Jan 2023 12:48:53 GMT
uncs28=1; expires=Mon, 23 Jan 2023 12:48:53 GMT
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 5444fbbec3c0e3d997451eb3ee97beb9
Strict-Transport-Security: max-age=0; includeSubdomains
asper-media.com/click.php?key=1wojcs0r58urwh6jy9ky&SUB_ID_SHORT=1c5350e6b126af0ffdf96d17014c486c&COST_CPC=0.002500&PLACEMENT_ID=16122935&CAMPAIGN_ID=720711&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2126475
302 Found 0 B URL HTTP/2 asper-media.com/click.php?key=1wojcs0r58urwh6jy9ky&SUB_ID_SHORT=1c5350e6b126af0ffdf96d17014c486c&COST_CPC=0.002500&PLACEMENT_ID=16122935&CAMPAIGN_ID=720711&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2126475
IP
ASN #14061 DIGITALOCEAN-ASN
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /click.php?key=1wojcs0r58urwh6jy9ky&SUB_ID_SHORT=1c5350e6b126af0ffdf96d17014c486c&COST_CPC=0.002500&PLACEMENT_ID=16122935&CAMPAIGN_ID=720711&DEVICE_BRAND=Unknown&BROWSER_NAME=Firefox&USER_OS=Windows&USER_CARRIER=Blix%20Solutions&USERAGENT=Mozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A105.0%29%20Gecko%2F20100101%20Firefox%2F105.0&REMOTE_LANGUAGE=11&BANNER_ID=2126475 HTTP/1.1
Host: asper-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jennyvisits.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx/1.18.0
date: Sun, 22 Jan 2023 12:48:53 GMT
content-type: text/html; charset=UTF-8
location: https://media.playamopartners.com/redirect.aspx?pid=205173&bid=2058&lpid=1225&clickid=2e4a5x9wh3zg602a&campaign=1642&trafficsource=62
set-cookie: uclick=x9wh3zg6; expires=Mon, 23-Jan-2023 12:48:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
uclickhash=x9wh3zg6-x9wh3zg6-us7s-0-pmib-9za6-9za5-f03cf9; expires=Mon, 23-Jan-2023 12:48:53 GMT; Max-Age=86400; path=/; secure; SameSite=none
strict-transport-security: max-age=31536000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c0f67edfa92ff11474d17ad3160ed43e
a43cc627d3c9258bdbe14ff3ceeed1c98496ff50
309dea4b94ceda4ec43c2f944cdfad61434c96eaafd172bc55c39545f3bf5a1e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 22 Jan 2023 12:48:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtm.js?id=GTM-TT75SSG
200 OK 40 kB URL HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-TT75SSG
IP
File type ASCII text, with very long lines (1921)
Hash bada565473eef99fbf1fd0fa4de7db96
220360a1fe98a95b04867de4e4cfa1631d8ab7ee
62400a1e447b23672bada7ee2aceab1dac6d8ab3fe97c922586ea950eaae979e
GET /gtm.js?id=GTM-TT75SSG HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://bizzocasinolp.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sun, 22 Jan 2023 12:48:54 GMT
expires: Sun, 22 Jan 2023 12:48:54 GMT
cache-control: private, max-age=900
last-modified: Sun, 22 Jan 2023 12:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 39562
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78e98c30-5996-4c9f-8207-16807fdf9242.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78e98c30-5996-4c9f-8207-16807fdf9242.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 278120411564827c9e80134f4f0e2291
bf87f6e184830ee496e8d1aa5ccd9f2b273e7a64
51de0be8e47289d12f8a7fe670afcffe36597846dd3674f87e465d9489c984ce
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F78e98c30-5996-4c9f-8207-16807fdf9242.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 5822
x-amzn-requestid: 71e2ad62-a46a-46a7-b00d-d9b67c891b71
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHN6fGg3oAMFQSg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5d0f-2b990007732b97603562fcfe;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:45:51 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: v4OpB32at9tB1ICHeHQ4MjkubhGY4ZTZpwCEH2wQ1IgUqlFpQXvjlg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 22:48:17 GMT
age: 50439
etag: "bf87f6e184830ee496e8d1aa5ccd9f2b273e7a64"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b429642344aabb638e3acbd63463fe8d
f9ea147291359b0fb6e7a78983643949665003d7
acda68bb2566774c9b279e048b62aaaa5a27b87e783048d6765e598ac2c584fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffa8dd86d-d1f8-4246-a33c-c80dbc2c2538.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 12743
x-amzn-requestid: 6c542779-10fa-4bbd-9294-3127a104de12
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fHNkBEa3IAMF6-w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cc5c7f-4d5a606011cb84fd14d7b175;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 21:43:27 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NLwQoDRTYi8Ol0cDp3gaJpQ7-0kq6ITtm9lzj1qFrKe2oGOK7YWMzg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 21 Jan 2023 21:48:06 GMT
age: 54051
etag: "f9ea147291359b0fb6e7a78983643949665003d7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2022/11/GENERAL-PEQUEN%CC%83O.png
200 OK 0 B URL HTTP/2 quindionoticias.com/wp-content/uploads/2022/11/GENERAL-PEQUEN%CC%83O.png
IP
GET /wp-content/uploads/2022/11/GENERAL-PEQUEN%CC%83O.png HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/png
content-length: 98046
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Sun, 27 Nov 2022 12:33:01 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
quantcast.mgr.consensu.org/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
200 OK 0 B URL HTTP/2 quantcast.mgr.consensu.org/choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js
IP
GET /choice/6Fv0cGNfc_bw8/www.themoneytizer.com/choice.js HTTP/1.1
Host: quantcast.mgr.consensu.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 28 Jun 2022 13:53:56 GMT
x-amz-server-side-encryption: AES256
server: AmazonS3
cross-origin-resource-policy: cross-origin
content-encoding: br
date: Sun, 22 Jan 2023 12:48:50 GMT
cache-control: max-age=3600
etag: W/"c53bd785b1ee57b613221019d7d72626"
vary: Access-Control-Request-Headers,Access-Control-Request-Method,Origin,Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: J_A3VnkvbQiSwEb0ItuQAvQpGVDXy9nVFH2DH_J5JeTfquGKqFECrw==
age: 8
X-Firefox-Spdy: h2
bizzocasinolp.com/bonus-wheel-en/?btag=667089_55A4152D4F8D4D72B6F41BE51605203A&clickid=2e4a5x9wh3zg602a&campaign=1642&trafficsource=62
200 OK 0 B URL HTTP/2 bizzocasinolp.com/bonus-wheel-en/?btag=667089_55A4152D4F8D4D72B6F41BE51605203A&clickid=2e4a5x9wh3zg602a&campaign=1642&trafficsource=62
IP
GET /bonus-wheel-en/?btag=667089_55A4152D4F8D4D72B6F41BE51605203A&clickid=2e4a5x9wh3zg602a&campaign=1642&trafficsource=62 HTTP/1.1
Host: bizzocasinolp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://jennyvisits.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 12:48:54 GMT
content-type: text/html; charset=UTF-8
strict-transport-security: max-age=31536000;
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SM9Q0htViCmoAZbDq4FB8oh7zq62Ztvt0le01VQD8xG6c34bjp0GQaNMhmjQliH4TZLIOVv074BqaJC2XtylKDtTrUmm%2BMJtwyvNdgYE4dsTDJu2sX3mnrSnZoTI645k5R0nVg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 78d868121ed1b527-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
test.cmp.quantcast.com/GVL-v2/cmp-list.json
200 OK 0 B URL HTTP/2 test.cmp.quantcast.com/GVL-v2/cmp-list.json
IP
GET /GVL-v2/cmp-list.json HTTP/1.1
Host: test.cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://quindionoticias.com
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/json
access-control-max-age: 86400
cache-control: max-age=172800
date: Sun, 22 Jan 2023 03:00:39 GMT
last-modified: Sat, 14 Jan 2023 19:52:29 GMT
etag: W/"16f9ea1cc7a71cfed1d4482a599ccd27"
x-amz-server-side-encryption: AES256
x-amz-version-id: POuYi4.QbUYhHN4p2tbIMulQrwaf1j8L
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: nl2Wm7rnwYq1dWNtmXzlzWMLvRoywU8-mjdzpPJLGWTBjR8dIgnwIA==
age: 35294
X-Firefox-Spdy: h2
youradexchange.com/ad/czcf.php?cz=fxrettzzr8
200 OK 0 B URL HTTP/2 youradexchange.com/ad/czcf.php?cz=fxrettzzr8
IP
GET /ad/czcf.php?cz=fxrettzzr8 HTTP/1.1
Host: youradexchange.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://quindionoticias.com/
Origin: https://quindionoticias.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: openresty
date: Sun, 22 Jan 2023 12:48:52 GMT
content-type: text/html; charset=utf-8
access-control-allow-origin: *
content-encoding: gzip
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
quindionoticias.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: text/html; charset=UTF-8
link: <https://quindionoticias.com/wp-json/>; rel="https://api.w.org/", <https://quindionoticias.com/>; rel=shortlink
content-encoding: br
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
acacdn.com/script/atg.js
200 OK 0 B IP
GET /script/atg.js HTTP/1.1
Host: acacdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: application/javascript
x-guploader-uploadid: ADPycdvXJuPkUH_bVMsuVvMkdPzZb-0N3QMAumiMFtT0q_8Qbphn0yikwVAQngsKBfmWNYCJwMpslcRdZbkHUXfQGXIBkecvXI-k
x-goog-generation: 1670939538081813
x-goog-metageneration: 2
x-goog-stored-content-encoding: identity
x-goog-stored-content-length: 97045
x-goog-hash: crc32c=zwlEeg==, md5=K8TvAKQxg8M4VQ0fZF2v2g==
x-goog-storage-class: MULTI_REGIONAL
access-control-allow-origin: *
expires: Sun, 22 Jan 2023 12:45:00 GMT
cache-control: public, max-age=14400
last-modified: Tue, 13 Dec 2022 13:52:18 GMT
etag: W/"2bc4ef00a43183c338550d1f645dafda"
age: 3526
cf-cache-status: HIT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RIuCIAlDi20QJR9lxmQIJ1Qvpa%2BVqXoY4k6yOLB6w4QjGs5Sp%2FENPqga4v5BkNyCJ9RVeKA%2B1Ttv7s1AZFxjkhE%2FCnwZ9%2BR%2FjzNIZRyQI42YYVdn9CY4mjX4YbNk"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 78d867f87f44b509-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
quindionoticias.com/wp-content/uploads/2021/12/Captura-de-Pantalla-2021-12-28-a-las-5.13.47-p.-m.-341x220.png
200 OK 0 B URL HTTP/2 quindionoticias.com/wp-content/uploads/2021/12/Captura-de-Pantalla-2021-12-28-a-las-5.13.47-p.-m.-341x220.png
IP
GET /wp-content/uploads/2021/12/Captura-de-Pantalla-2021-12-28-a-las-5.13.47-p.-m.-341x220.png HTTP/1.1
Host: quindionoticias.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sun, 22 Jan 2023 12:48:49 GMT
content-type: image/png
content-length: 171500
cache-control: public, max-age=604800
expires: Sun, 29 Jan 2023 12:48:49 GMT
last-modified: Tue, 28 Dec 2021 22:15:08 GMT
accept-ranges: bytes
alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
X-Firefox-Spdy: h2
cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
200 OK 0 B URL HTTP/2 cmp.quantcast.com/tcfv2/42/cmp2.js?referer=www.themoneytizer.com
IP
GET /tcfv2/42/cmp2.js?referer=www.themoneytizer.com HTTP/1.1
Host: cmp.quantcast.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/javascript;charset=UTF-8
access-control-max-age: 86400
cache-control: max-age=172800
date: Sat, 21 Jan 2023 01:43:10 GMT
last-modified: Tue, 05 Jul 2022 18:40:23 GMT
etag: W/"9494b70738cd74c9137e65c29c0b1f3e"
x-amz-server-side-encryption: AES256
x-amz-meta-qc-ineu: True
server: AmazonS3
access-control-allow-origin: *
access-control-allow-methods: GET
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: X6ixe0xJyEtBAr-35csZGU49E8NAW3M4SpjH844aGx5t1AIDLxw5qQ==
age: 126342
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=3.4
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=3.4
IP
GET /css?family=Open+Sans%3A300%2C400%2C600%2C700%7CRoboto+Condensed%3A300%2C300italic%2C400%2C400italic%2C700%2C700italic&ver=3.4 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://quindionoticias.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 22 Jan 2023 12:48:50 GMT
date: Sun, 22 Jan 2023 12:48:50 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
192.95.39.30
23.33.119.27
104.21.85.95
35.156.167.37
93.184.220.29
31.13.72.12