teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html
142.250.74.161301 Moved Permanently 223 B URL HTTP/1.1 teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 2ece029cca258992efa7fef39d82a563
68d203e2f89fb10727e652750aca9c0f3848419c
05d18cc3c5494021ec0bb6a2bd136049c4bfdcb4e75461071472b4759da55699
GET /2021/07/ask-female-tails-doll-ask-pinkamena-and.html HTTP/1.1
Host: teganskinner312.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 09 Dec 2022 10:21:01 GMT
Expires: Fri, 09 Dec 2022 10:21:01 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 223
Server: GSE
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash f2acd891dc6eb1f09f57a2b086791781
1e2088306501a61edcca1ade62c4d54f23b3b083
51148fed95cc00d60dc3640350f135b1b2763ff0e3cfbffc40f0948317894be9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51148FED95CC00D60DC3640350F135B1B2763FF0E3CFBFFC40F0948317894BE9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10768
Expires: Fri, 09 Dec 2022 13:20:29 GMT
Date: Fri, 09 Dec 2022 10:21:01 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19342
Expires: Fri, 09 Dec 2022 15:43:23 GMT
Date: Fri, 09 Dec 2022 10:21:01 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Length, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Fri, 09 Dec 2022 10:08:18 GMT
content-type: application/json
age: 763
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 4ee537977be9c03702f8ffe0025bf1fe
21637881c4aa34c4add703f8bff4eff573159f45
4819229fd8f502a0c68c80bd7409e104c1b4d1a98ca8a6cd9deba629b1511aea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20581
Expires: Fri, 09 Dec 2022 16:04:02 GMT
Date: Fri, 09 Dec 2022 10:21:01 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: VESoXBl4/Mi2zuXFjogSKYjNyWuXlNT+Ydb2dGQ14shOiAEgkIa3V06LcWo6FkRJ1kT3ApbE3A77ST8l3YFdLA==
x-amz-request-id: PYQAN1TFVT3PS3RB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Fri, 09 Dec 2022 09:50:12 GMT
age: 1849
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 34da737f5d8fab7415ab2d552058d653
2e28de807960cde0030e68b4f468aaeecd1b533f
bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 09 Dec 2022 10:21:01 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Fri, 09 Dec 2022 10:07:59 GMT
age: 783
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e6be4d2155028ffff5d01ab6e7edf6da
07172071b5cf43c4cd7d7930b4ad8518ec1e32e9
4d8a5fa2362fd0910babd6d128d850d4460829468eb23d34ee5ee6eaa42d5a38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 520
Cache-Control: max-age=168873
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Etag: "6392faaf-1d7"
Expires: Sun, 11 Dec 2022 09:15:35 GMT
Last-Modified: Fri, 09 Dec 2022 09:06:55 GMT
Server: ECS (ska/F711)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 34da737f5d8fab7415ab2d552058d653
2e28de807960cde0030e68b4f468aaeecd1b533f
bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html
142.250.74.161200 OK 116 kB URL HTTP/2 teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (26060)
Size 116 kB (116152 bytes)
Hash 3965c57c992399eb0b8cedaa46664962
7a4abb2aa9dfb36522d4eb06121dfdde953658db
c727a6937eb6eea5a7d978ec99d9c0d9726b7b31651c03c56993c4311fdc16b9
GET /2021/07/ask-female-tails-doll-ask-pinkamena-and.html HTTP/1.1
Host: teganskinner312.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 09 Dec 2022 10:21:02 GMT
date: Fri, 09 Dec 2022 10:21:02 GMT
cache-control: private, max-age=0
last-modified: Thu, 24 Nov 2022 12:25:27 GMT
etag: W/"2896032488b469469b936588f7e233f8c14a0daadf154b6a2110c0285cc48c44"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 116152
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash df592d8f5f118db945e9155e784dae34
eead01d501d430b241907addbd37b80f6ff91edd
c2cf3f056eddb44e9ebe2debb01df978a730f39df62c087d3f1b1a02963d2e98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash fb8568d1b03d4cd2cc7f423aef817e2e
6a1f75627351f8adae5f4f40d85dc91b4ac6b3d5
b40d4018a0f0692d5847ec8d8f1d2a5a34c2c9ddafa7f28632aab373eeb6f5e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.89.20.60101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.20.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ITgk8adaeDOtLfd8zT1LBw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: KM5u4JMCjp7YrDPdLbuR02v1pF0=
1.bp.blogspot.com/-r7sc95S47b8/XTRMbKrK3DI/AAAAAAAAAOM/MklmfDYx6Sc6HAwz8KcjrBZ8GABZRNdNQCLcBGAs/s1600/Webp.net-compress-image-6.jpg
216.58.207.225200 OK 49 kB URL HTTP/2 1.bp.blogspot.com/-r7sc95S47b8/XTRMbKrK3DI/AAAAAAAAAOM/MklmfDYx6Sc6HAwz8KcjrBZ8GABZRNdNQCLcBGAs/s1600/Webp.net-compress-image-6.jpg
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1200x436, components 3\012- data
Hash 317059b8b709ff7e75a95be0610f47a1
8d7a4de801e49ba76f1e89fc301b81db9edfc9d0
c6d79c6393b65378ed0ac3dd06182554cafb56d7adeb2aca1dabdf1d94beae87
GET /-r7sc95S47b8/XTRMbKrK3DI/AAAAAAAAAOM/MklmfDYx6Sc6HAwz8KcjrBZ8GABZRNdNQCLcBGAs/s1600/Webp.net-compress-image-6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "ve4"
expires: Sat, 10 Dec 2022 10:21:02 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Webp.net-compress-image-6.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:02 GMT
server: fife
content-length: 48751
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tse4.mm.bing.net/th?id=OIP.4a8VnMKWnraVLTU6384IxQHaE4&pid=Api
13.107.21.200200 OK 31 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.4a8VnMKWnraVLTU6384IxQHaE4&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x312, components 3\012- data
Hash 7eed563f8b008237c0c0eaffe311da91
63e17e4e4c2485552d748b3d7aa0a2049bb069e9
c74650d7574de911295c9b86f2094db690d5ebc759bc7f562c1715fe4a1962b2
GET /th?id=OIP.4a8VnMKWnraVLTU6384IxQHaE4&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 31341
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 232FB9DBA85E46D8B903CAA9D197B43E Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.PILMDmZHzIWWIOFPmpDlggHaEf&pid=Api
13.107.21.200200 OK 32 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.PILMDmZHzIWWIOFPmpDlggHaEf&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x287, components 3\012- data
Hash 9f7dd0edb99eaf2c41ff61e4ba142903
9fee048503484c52cdddcda099fadacd7f5dc8df
dbcfc613a9ef6c09f3ee94fd133b0f961c214e8685cc405e213d7a31965e9b88
GET /th?id=OIP.PILMDmZHzIWWIOFPmpDlggHaEf&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 32459
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D1535EA036FD46E99CA60C5D1EC5D51E Ref B: OSL30EDGE0105 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse4.mm.bing.net/th?id=OIP.F-V0MpU8wYkyYpl3jW0zuQHaFj&pid=Api
13.107.21.200200 OK 43 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.F-V0MpU8wYkyYpl3jW0zuQHaFj&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x355, components 3\012- data
Hash 07110dd24383dd51e4b39f182a757143
8b67b994b258c4b93d0b6508e8c44e9af6507eb4
59c7ca64e1cdca216b80239dafdd6acaa54f0092d4c50c1451a9b87b4aef174c
GET /th?id=OIP.F-V0MpU8wYkyYpl3jW0zuQHaFj&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 42865
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A59DDB23DDDC46C58191E2C9160ED658 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse4.mm.bing.net/th?id=OIP.nQ16VtuujGjIwUm5QOltuwHaFj&pid=Api
13.107.21.200200 OK 20 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.nQ16VtuujGjIwUm5QOltuwHaFj&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x355, components 3\012- data
Hash d4db714a0b777fd854c84571171801fd
24d844142f2f0ac0d035a97d36283c9fb2f8eb9b
d869c75d5c67431c30d687b2d6849a88fdec6422efcdb84307809c3bacc285cb
GET /th?id=OIP.nQ16VtuujGjIwUm5QOltuwHaFj&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 19752
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0CA23EC037B1496BBA1BB75574225964 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.ZitME6qt7_kOJQiMVrMg9wHaFs&pid=Api
13.107.21.200200 OK 15 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.ZitME6qt7_kOJQiMVrMg9wHaFs&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x364, components 3\012- data
Hash 71fc3d76b4c1462dc1285e5cecf50f2f
e37b4259d92b1ce2208fb9e6e1498b2fee14660e
6cd5ea4883734dfe1d773f3e8dcacf43e415c5ccd09d5fbdad3ffef60b87f047
GET /th?id=OIP.ZitME6qt7_kOJQiMVrMg9wHaFs&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 14930
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 096191B3F32F44D09A15FC7CD8CFB85C Ref B: OSL30EDGE0105 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP._yi4exZa65aUsjRz1sr1cQHaF7&pid=Api
13.107.21.200200 OK 21 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP._yi4exZa65aUsjRz1sr1cQHaF7&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x379, components 3\012- data
Hash 6f33940234c7e81153200a796f0961ac
ab40ee8b9690a07828a40bacaf88befd77b0715e
73d58aa71ac80a7968dbc241e205ffd82172fc6530658fcd77c0bdc6622d0dd9
GET /th?id=OIP._yi4exZa65aUsjRz1sr1cQHaF7&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 21287
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 15742C9554CF4A1A87B1464174DADE69 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.Koa-wLe0frLSgn2ih3SDDAHaFG&pid=Api
13.107.21.200200 OK 20 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.Koa-wLe0frLSgn2ih3SDDAHaFG&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x326, components 3\012- data
Hash 5226eca37bbf606450aa1a79fb2f5818
2e0d77880151bc3fba17b8a9cadbd8243873f51d
41e35e80c6159fd7b960b5e0554deff7e8a5376b298666f73a74ec24db2b2eb7
GET /th?id=OIP.Koa-wLe0frLSgn2ih3SDDAHaFG&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 20156
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 6818902AFBDB43C8862DBE7975F7092C Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js
104.17.24.14200 OK 30 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP 104.17.24.14:0
File type ASCII text, with very long lines (32077)
Hash 5e4764d3c94d1a1db8c3d0890278b6d1
e5171f2f46e16d32df5f634ba21e47256fa9689c
5077e8927721a6a3ae5d78b456b7041230d627774a0a319beebacc88290b8328
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:02 GMT
content-type: application/javascript; charset=utf-8
content-length: 30360
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03ec4-17b8b"
last-modified: Mon, 04 May 2020 16:11:48 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 620272
expires: Wed, 29 Nov 2023 10:21:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=u0HVxYcvVihrFzXdQqe8AuE3QE70fRTDr%2BLvHmWwDev5yhEKVoZSj3mcDoxuRrBpsu3CfZ9q3uQKAXnvaGzcO4Wfh18hWItxwJGCvesgHsf3bGCOgK51YtLe8nix3QZU0qaCebI8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776d02fc89ca0b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tse4.mm.bing.net/th?id=OIP.O90UVjslDaERklgWQW3ZQwHaL2&pid=Api
13.107.21.200200 OK 49 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.O90UVjslDaERklgWQW3ZQwHaL2&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x758, components 3\012- data
Hash 5b87f6815dc0701c0f4a8d74350dacc2
a7c9240344600bdca106b704c5d868c02c222769
c81c3ecb731c0c622a61df5b77254dcfebbf2347fc6f9c98d4680f6b833389f6
GET /th?id=OIP.O90UVjslDaERklgWQW3ZQwHaL2&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 48687
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3E9DBF0D24FD4B4EB0C18231B0525381 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse1.mm.bing.net/th?id=OIP.dwbo7EWgoxvw1fcKaDA6gQHaKu&pid=Api
13.107.21.200200 OK 82 kB URL HTTP/2 tse1.mm.bing.net/th?id=OIP.dwbo7EWgoxvw1fcKaDA6gQHaKu&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x686, components 3\012- data
Hash 23ad810aa24eaf8a9b97ffebfca3fd46
da81cf807538157eb3afb30a5e221ad7988f2d32
78153c3d1e0aef6db7554c0f7479c493cbecdbe685a7e5ea24052c075030478d
GET /th?id=OIP.dwbo7EWgoxvw1fcKaDA6gQHaKu&pid=Api HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 81970
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 07B8C89B22064150B0E7D8C6055FA3B4 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 39f7a852bbae05f09dc53ef10c0d1160
d57c5d32435b7f3d28a09b8d9c6dc74c69137f90
3eb99977809e58f9babd580d0c58bccbf19b3056a885fe90ae3dcc4fcf9424a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 39f7a852bbae05f09dc53ef10c0d1160
d57c5d32435b7f3d28a09b8d9c6dc74c69137f90
3eb99977809e58f9babd580d0c58bccbf19b3056a885fe90ae3dcc4fcf9424a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tse4.mm.bing.net/th?id=OIP.AR--qNCi7LdBrM6ICiTVOwHaJK&pid=Api
13.107.21.200200 OK 44 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.AR--qNCi7LdBrM6ICiTVOwHaJK&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x586, components 3\012- data
Hash a91357094bf1e683c7bcf10d9c4b01b8
a6bd2f535f34c679295ca1f89320905a81e56ef8
46214cb0bee7d4c91c19e5bd92ffb9eda9868bc0db7acaad1474b933b8056a91
GET /th?id=OIP.AR--qNCi7LdBrM6ICiTVOwHaJK&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 43816
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5EE82B0E78D74E2EBA3D1FEAA7FF8A76 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.oSoo4NsJ9q04h8Ob0y-lpAHaFj&pid=Api
13.107.21.200200 OK 29 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.oSoo4NsJ9q04h8Ob0y-lpAHaFj&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x355, components 3\012- data
Hash 60eceba63b016f7586b00cb244c4bac7
0140bab9ca65a5efafa9487570c6ec2e76665b78
21a6933fc4420db9e5913d1374b305255df7029a94c6ad2a6e6679155c260334
GET /th?id=OIP.oSoo4NsJ9q04h8Ob0y-lpAHaFj&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 28766
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D2809FF0AC68417DB5F8D535F79D9E76 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 9881bd54a93dcee33ad73df894c3dee1
9ed12cdbb8e3b8f486058eff097ef57c36ad70c5
c8c4bcc5d8e9ae2aa2794a4a63c1c51707ad25e6c8f8ccbad264304c3ae12134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 10:21:02 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 03:28:50 GMT
Expires: Wed, 14 Dec 2022 03:28:49 GMT
Etag: "9ed12cdbb8e3b8f486058eff097ef57c36ad70c5"
Cache-Control: max-age=406666,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776d02fcaf0ab505-OSL
tse2.mm.bing.net/th?id=OIP.ObpLClaNKr1mh8wxGxVJ3gHaFD&pid=Api
13.107.21.200200 OK 34 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.ObpLClaNKr1mh8wxGxVJ3gHaFD&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x323, components 3\012- data
Hash 40b86d848305065974f2a036b43c3483
890ca7d6f49a90be05c9159807fecdd87bf4ffa1
aa72858e7587c911b4d5c9944687b4b5c670f35bfa8ae0ab6f913bf657fee4ac
GET /th?id=OIP.ObpLClaNKr1mh8wxGxVJ3gHaFD&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 33454
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: B5576F1CE7AA4982A97F09ED01B77198 Ref B: OSL30EDGE0105 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse4.mm.bing.net/th?id=OIP.qROp7czPIg2yCcBX6iCx_AHaEf&pid=Api
13.107.21.200200 OK 19 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.qROp7czPIg2yCcBX6iCx_AHaEf&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x287, components 3\012- data
Hash 8082a797ecd876f950e0dc05e630a7f7
9ff05a551ed7b265c46e2adaa55ecce41d763874
43c926221c39b818d4dfc0a2e8c40340e05ea2e723c7836282512c3a3faa1ebe
GET /th?id=OIP.qROp7czPIg2yCcBX6iCx_AHaEf&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 19335
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: F2BC6FB68D4D42E68F6385EBC177B6D7 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.E0pbyXnoAAgL3_60XYKpNAHaEK&pid=Api
13.107.21.200200 OK 19 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.E0pbyXnoAAgL3_60XYKpNAHaEK&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3\012- data
Hash 668ea9e90e3c2330bb4e1ac51020b936
aed2b7dcb0eb03cc8988cb7f1fc80d8aa78e1abc
5134e63fd921da60635d6324a75789123f7e04d6206552443cd770f7f5ef23cb
GET /th?id=OIP.E0pbyXnoAAgL3_60XYKpNAHaEK&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 19316
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: CB4E1FE3C15D4450BDDF03BB85DBDDCF Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse2.mm.bing.net/th?id=OIP.a7CiNI_55rL_4VHsFxt3DAHaEG&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse2.mm.bing.net/th?id=OIP.a7CiNI_55rL_4VHsFxt3DAHaEG&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.a7CiNI_55rL_4VHsFxt3DAHaEG&pid=Api HTTP/1.1
Host: tse2.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 896E2C958FD5440F97E4FE3F0EEA202F Ref B: OSL30EDGE0105 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse1.mm.bing.net/th?id=OIP.iHDwwSWEaajw-Ueqk_FLnwHaEf&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse1.mm.bing.net/th?id=OIP.iHDwwSWEaajw-Ueqk_FLnwHaEf&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.iHDwwSWEaajw-Ueqk_FLnwHaEf&pid=Api HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DF1DC83A7E3C4546BABD38F3DED2E0AB Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.4yOp6MkWOzd23cddi1LdAQHaHI&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.4yOp6MkWOzd23cddi1LdAQHaHI&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.4yOp6MkWOzd23cddi1LdAQHaHI&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3FABC7FB48E945A0A2A2F2D0B65EF13C Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.1FkYAqhXUHAHH1RF6YaniQHaEf&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.1FkYAqhXUHAHH1RF6YaniQHaEf&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.1FkYAqhXUHAHH1RF6YaniQHaEf&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 845E9F29CC864DB886753F7D83FC24FD Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash df592d8f5f118db945e9155e784dae34
eead01d501d430b241907addbd37b80f6ff91edd
c2cf3f056eddb44e9ebe2debb01df978a730f39df62c087d3f1b1a02963d2e98
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 39f7a852bbae05f09dc53ef10c0d1160
d57c5d32435b7f3d28a09b8d9c6dc74c69137f90
3eb99977809e58f9babd580d0c58bccbf19b3056a885fe90ae3dcc4fcf9424a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:02 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tse4.mm.bing.net/th?id=OIP.YuEs5OaLa2OxVgFFOam7rAHaHw&pid=Api
13.107.21.200200 OK 25 kB URL HTTP/2 tse4.mm.bing.net/th?id=OIP.YuEs5OaLa2OxVgFFOam7rAHaHw&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x496, components 3\012- data
Hash 3f3a4371305fd347625fa3e78d530faa
f4b17aff70017ee4ac42593250e636cbd90bb3d9
a47df66561b3240893279298570bd490cdf75c2f19a58e3932ec9ff0a21305a9
GET /th?id=OIP.YuEs5OaLa2OxVgFFOam7rAHaHw&pid=Api HTTP/1.1
Host: tse4.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 25264
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 23A5924046854C6E9E57550E0D709028 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
strodong.github.io/blogger/iklansocial.js
185.199.110.153200 OK 11 kB URL HTTP/2 strodong.github.io/blogger/iklansocial.js
IP 185.199.110.153:0
File type ASCII text, with very long lines (36397)
Hash e7842af8ab4a7c14a6eebaaee57533b7
ac47a286ca65d7ecce9b2546a5dee8a3c6eba0a4
5ec0fd40b67b4ae7f22b4a17a5cf4314800cd3668af279a21ebbdf47112745ea
GET /blogger/iklansocial.js HTTP/1.1
Host: strodong.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Mon, 29 Aug 2022 16:31:14 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"630ce9d2-8e2e"
expires: Fri, 09 Dec 2022 06:51:38 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: B952:E52E:43D584:46A6B9:6392D8A2
accept-ranges: bytes
date: Fri, 09 Dec 2022 10:21:02 GMT
via: 1.1 varnish
age: 302
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670581263.955015,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 96b40587517db64d3b7089f6d2d6867f6fee89a6
content-length: 11111
X-Firefox-Spdy: h2
tse1.mm.bing.net/th?id=OIP.VMVbcmnrw0HoZ0upPc8XbQAAAA&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse1.mm.bing.net/th?id=OIP.VMVbcmnrw0HoZ0upPc8XbQAAAA&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.VMVbcmnrw0HoZ0upPc8XbQAAAA&pid=Api HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: D9A336AAA72E4E3CB5A6061566189386 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
strodong.github.io/blogger/iklan.js
185.199.110.153200 OK 17 kB URL HTTP/2 strodong.github.io/blogger/iklan.js
IP 185.199.110.153:0
File type ASCII text, with very long lines (59386)
Hash 682a1df680b4dcc49bab367b3533b525
b981653e7d4f615bb9ce66010accceff289fe787
5162417640b1d272e630fc748c780d44b8a70d13375bf873ad6763cf27dcd408
GET /blogger/iklan.js HTTP/1.1
Host: strodong.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
x-origin-cache: HIT
last-modified: Mon, 29 Aug 2022 16:31:14 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"630ce9d2-e7fb"
expires: Fri, 09 Dec 2022 06:36:18 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: HIT
x-github-request-id: B4CA:6B6C:9FA0FD:D53AB6:6392D54C
accept-ranges: bytes
date: Fri, 09 Dec 2022 10:21:02 GMT
via: 1.1 varnish
age: 302
x-served-by: cache-bma1624-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1670581263.955137,VS0,VE1
vary: Accept-Encoding
x-fastly-request-id: 84463f260479a4d83fea896fdd190c296599df88
content-length: 17421
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2092647672-widgets.js
142.250.74.73200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2092647672-widgets.js
IP 142.250.74.73:0
File type ASCII text, with very long lines (2221)
Hash 689971018982703ab88ce528368b9190
be9697d57e5c19d36c52aacd8b04a6a159a2f3bd
cf8b513cfd596cffc3a7e456eccc198b8e409f5aaf624d5dbeecdd748dce0cef
GET /static/v1/widgets/2092647672-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 02:10:45 GMT
expires: Fri, 08 Dec 2023 02:10:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Dec 2022 00:55:10 GMT
content-type: text/javascript
age: 115817
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tse3.mm.bing.net/th?id=OIP.I-xjl2ibbYi-zvy70bc1QAHaEf&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.I-xjl2ibbYi-zvy70bc1QAHaEf&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.I-xjl2ibbYi-zvy70bc1QAHaEf&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: DF4587C053CA40A8B879327F7346273A Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2
104.17.24.14200 OK 57 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2
IP 104.17.24.14:0
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /ajax/libs/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2 HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:02 GMT
content-type: application/octet-stream; charset=utf-8
content-length: 56780
access-control-allow-origin: *
cache-control: public, max-age=30672000
etag: "5eb03e5f-ddcc"
last-modified: Mon, 04 May 2020 16:10:07 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
vary: Accept-Encoding
cf-cache-status: HIT
age: 2396926
expires: Wed, 29 Nov 2023 10:21:02 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F%2BAlDl8rmJLLJ6d%2BrLo4TpOTbCAVCjRXvz7XIQaVfsg7pHs2fkBQzD6xMSdOQ7kJrmOW82QL7tH2ZlHSaqpdgLrj1YoODvUom3lJPlfG%2FM%2FUf5VBhb8aXxQgzK0cgw7iOCoFAwGU"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 776d02fd9f05b524-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1813a9989eb6959f7f131d2b8404015b
ddd805ee8f9772e8f73e13f42aae0da6037592ae
1ab7caae5a0d673221d3d401d8dd9ef4892c389e254f3b74fe156bde0b7884a9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1AB7CAAE5A0D673221D3D401D8DD9EF4892C389E254F3B74FE156BDE0B7884A9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13407
Expires: Fri, 09 Dec 2022 14:04:29 GMT
Date: Fri, 09 Dec 2022 10:21:02 GMT
Connection: keep-alive
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
142.250.74.73200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP 142.250.74.73:0
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 13:44:05 GMT
expires: Wed, 06 Dec 2023 13:44:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 04:51:45 GMT
content-type: text/javascript
age: 247017
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tse4.explicit.bing.net/th?id=OIP.O83SwwQv_MSg6RNiBrzZggHaM8&pid=Api
204.79.197.201200 OK 60 kB URL HTTP/2 tse4.explicit.bing.net/th?id=OIP.O83SwwQv_MSg6RNiBrzZggHaM8&pid=Api
IP 204.79.197.201:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x828, components 3\012- data
Hash 4405452d8a93261139a944030a99d126
323cf01f22ee49ea748552128977c3e2c463b4c4
b6f1ecc5dfdb29497272494edd412381237b2ebcf2226f7c4344e31492f939e0
GET /th?id=OIP.O83SwwQv_MSg6RNiBrzZggHaM8&pid=Api HTTP/1.1
Host: tse4.explicit.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 59684
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5C139E0DF14346E8BD135B5CF9BC60D1 Ref B: OSL30EDGE0115 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.explicit.bing.net/th?id=OIP.BGxBGYtP8TmgldE9YnLEeAHaEK&pid=Api
204.79.197.201200 OK 33 kB URL HTTP/2 tse3.explicit.bing.net/th?id=OIP.BGxBGYtP8TmgldE9YnLEeAHaEK&pid=Api
IP 204.79.197.201:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x266, components 3\012- data
Hash 24e7f69f5c49ac577a7f74a655ff7ebe
660cfcaf5d8ac790aaf7ef0d8bc084a07ad930ea
0080c155397b0466784ce1243eb2cd4465a5118cc52621a000b5a1a1b90242e4
GET /th?id=OIP.BGxBGYtP8TmgldE9YnLEeAHaEK&pid=Api HTTP/1.1
Host: tse3.explicit.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 33221
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 94902C97DC45457BABBE8D6B41755C10 Ref B: OSL30EDGE0506 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse4.explicit.bing.net/th?id=OIP.Hsys3SgWXvcyh-jljRv0iwHaES&pid=Api
204.79.197.201200 OK 28 kB URL HTTP/2 tse4.explicit.bing.net/th?id=OIP.Hsys3SgWXvcyh-jljRv0iwHaES&pid=Api
IP 204.79.197.201:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x274, components 3\012- data
Hash 2126dfd1d67719c7ef911d1604847c4a
9a2b48a8408698045ed7df981682228a3d797b10
1200c02906323355f9d0a0b38d2a458508f55da8a8b738ed7a0caf875efad65d
GET /th?id=OIP.Hsys3SgWXvcyh-jljRv0iwHaES&pid=Api HTTP/1.1
Host: tse4.explicit.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 28527
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 3EC13BDE90104D948D31E4F24FA02BE9 Ref B: OSL30EDGE0115 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse3.explicit.bing.net/th?id=OIP.f1PXk8-hh3dH_2IawkdEtwHaFj&pid=Api
204.79.197.201200 OK 16 kB URL HTTP/2 tse3.explicit.bing.net/th?id=OIP.f1PXk8-hh3dH_2IawkdEtwHaFj&pid=Api
IP 204.79.197.201:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x355, components 3\012- data
Hash 4ea5d9ec1c4efcf456fee41f87e3450b
e6420f3c9db03b932cb4cbd7eec558a5d97364a1
45d488ae56173efc453b542ace4739a6e8a5a1d9b5730ae925229303eed2df33
GET /th?id=OIP.f1PXk8-hh3dH_2IawkdEtwHaFj&pid=Api HTTP/1.1
Host: tse3.explicit.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 16230
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 5C6824578AE54681A6632C306CCBC712 Ref B: OSL30EDGE0506 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse1.mm.bing.net/th?id=OIP.cItwbarMDSP6vYWnID8MYgAAAA&pid=Api
13.107.21.200200 OK 20 kB URL HTTP/2 tse1.mm.bing.net/th?id=OIP.cItwbarMDSP6vYWnID8MYgAAAA&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 270x300, components 3\012- data
Hash d41d635d5b46e456b891a1536e958bd7
d24999f498aaed50fd8a72a300de47fb98177e94
24d17a71c0406da0d69100a25e47068931f5d15334684c500ca36e1bdc0eb31e
GET /th?id=OIP.cItwbarMDSP6vYWnID8MYgAAAA&pid=Api HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 20168
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0EDD982119D545B28BBE2C2AD7507BAD Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
tse1.mm.bing.net/th?id=OIP.Y-nnb0LdjZnBv-RMclLr4wAAAA&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse1.mm.bing.net/th?id=OIP.Y-nnb0LdjZnBv-RMclLr4wAAAA&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.Y-nnb0LdjZnBv-RMclLr4wAAAA&pid=Api HTTP/1.1
Host: tse1.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 0F1B1C53E9434F599537DA1B9D33016F Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 39f7a852bbae05f09dc53ef10c0d1160
d57c5d32435b7f3d28a09b8d9c6dc74c69137f90
3eb99977809e58f9babd580d0c58bccbf19b3056a885fe90ae3dcc4fcf9424a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tse3.mm.bing.net/th?id=OIP.pRMaVUtWxvHFYyHI6EGhRgHaFU&pid=Api
13.107.21.200404 Not Found 1.2 kB URL HTTP/2 tse3.mm.bing.net/th?id=OIP.pRMaVUtWxvHFYyHI6EGhRgHaFU&pid=Api
IP 13.107.21.200:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, baseline, precision 8, 80x80, components 3\012- data
Hash f0f7d2c575a576fcbe5904900906e27a
2ae9765a166420936e89da8e3a0f4ca51919d1ce
36cbc8edf63260b8b3d9a827aee5ac721de768306c5231e22498de2c1232d358
GET /th?id=OIP.pRMaVUtWxvHFYyHI6EGhRgHaFU&pid=Api HTTP/1.1
Host: tse3.mm.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
cache-control: no-cache
pragma: no-cache
content-length: 1192
expires: -1
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: 9230A0401313459DA5409C1A10DE35B0 Ref B: OSL30EDGE0508 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
e1.o.lencr.org/
23.33.119.27200 OK 344 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 1813a9989eb6959f7f131d2b8404015b
ddd805ee8f9772e8f73e13f42aae0da6037592ae
1ab7caae5a0d673221d3d401d8dd9ef4892c389e254f3b74fe156bde0b7884a9
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "1AB7CAAE5A0D673221D3D401D8DD9EF4892C389E254F3B74FE156BDE0B7884A9"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13406
Expires: Fri, 09 Dec 2022 14:04:29 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
tse4.explicit.bing.net/th?id=OIP.RcWoczPUojoZ7APXFA8HFQHaE8&pid=Api
204.79.197.201200 OK 22 kB URL HTTP/2 tse4.explicit.bing.net/th?id=OIP.RcWoczPUojoZ7APXFA8HFQHaE8&pid=Api
IP 204.79.197.201:0
ASN #8068 MICROSOFT-CORP-MSN-AS-BLOCK
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 0x0, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 474x316, components 3\012- data
Hash d1955f1eae06d1581eaa40127955615b
2bfc45ef740814f2a49db2765d9b2341477bd617
d7a7806f6530a7997affd50b9cd0d5ea9c59c94e11f358df649355ddd5fd1e5a
GET /th?id=OIP.RcWoczPUojoZ7APXFA8HFQHaE8&pid=Api HTTP/1.1
Host: tse4.explicit.bing.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: public, max-age=1209600
content-length: 22282
content-type: image/jpeg
x-cache: TCP_MISS
access-control-allow-origin: *
access-control-allow-headers: *
timing-allow-origin: *
report-to: {"group":"network-errors","max_age":604800,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingth"}]}
nel: {"report_to":"network-errors","max_age":604800,"success_fraction":0.001,"failure_fraction":1.0}
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
x-msedge-ref: Ref A: A77BC9C3FB824F5DB78AE2013034DE4B Ref B: OSL30EDGE0115 Ref C: 2022-12-09T10:21:02Z
date: Fri, 09 Dec 2022 10:21:02 GMT
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 0dea0666c50877c657b4de78bf2c90e0
4f4b637fc9aed70b6168653682ef27a54bd1c3f3
a7aba175b8abd895afadc22bd4dde39fbebe08eb50256e84ee7e99da9d4ea7da
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=125965
Date: Fri, 09 Dec 2022 10:21:03 GMT
Etag: "63923b8a-1d7"
Expires: Sat, 10 Dec 2022 21:20:28 GMT
Last-Modified: Thu, 08 Dec 2022 19:31:22 GMT
Server: ECS (nyb/1D07)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: R2E9gZMFGkfss2d5LUrSH54qHhMocpX9iTlH3Ykb_wboV8NTDaKVSg==
Age: 6546
1.bp.blogspot.com/-jYNaYc9_U6c/YNrk28Pm9WI/AAAAAAAAA9Y/cZgtdlw5q8QmNa0t75fKuEZJMjIZSmbagCPcBGAYYCw/s3299/Blogger_logo_PNG1.png
216.58.207.225200 OK 109 kB URL HTTP/2 1.bp.blogspot.com/-jYNaYc9_U6c/YNrk28Pm9WI/AAAAAAAAA9Y/cZgtdlw5q8QmNa0t75fKuEZJMjIZSmbagCPcBGAYYCw/s3299/Blogger_logo_PNG1.png
IP 216.58.207.225:0
File type PNG image data, 3299 x 953, 8-bit/color RGBA, non-interlaced\012- data
Size 109 kB (109059 bytes)
Hash 444dc7482c0c96e9460a27fc06811c9d
1d2a3237e3a9a02f0bf68fd7568ee7d4e5a57be6
fba237932508c6e9ebfd1c8700d0417b7c6a67606ec4f57b2e89c2ac94adc8b1
GET /-jYNaYc9_U6c/YNrk28Pm9WI/AAAAAAAAA9Y/cZgtdlw5q8QmNa0t75fKuEZJMjIZSmbagCPcBGAYYCw/s3299/Blogger_logo_PNG1.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3d6"
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Blogger_logo_PNG1.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 109059
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha27bn1MLJy8_bkQTZmmKgzoKhqeih_dig6Z6U-K5FCX04x2hQ4n6PaqZO45nwNijYh3k5QBlgml9qU_L5eEIp_lNgQv27yERuLfQgJqKeGwBrP8c4zmjNvbjdcADuONEdBKiAwu8PU-WRWMsS9ZpWxUwnXI2UQNSqWMFg=w354-h199-p-k-no-nu
216.58.207.225200 OK 18 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha27bn1MLJy8_bkQTZmmKgzoKhqeih_dig6Z6U-K5FCX04x2hQ4n6PaqZO45nwNijYh3k5QBlgml9qU_L5eEIp_lNgQv27yERuLfQgJqKeGwBrP8c4zmjNvbjdcADuONEdBKiAwu8PU-WRWMsS9ZpWxUwnXI2UQNSqWMFg=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 235x193, components 3\012- data
Hash 16604cede188b12add9ac598976a74b1
613a7464081bb8a2e8cc864e594fc375ca40e649
8bb417520c149686d6d2c7940bcbd6efeedc3037e10a7d4b4c59b21c9b7bc4f6
GET /blogger_img_proxy/ANbyha27bn1MLJy8_bkQTZmmKgzoKhqeih_dig6Z6U-K5FCX04x2hQ4n6PaqZO45nwNijYh3k5QBlgml9qU_L5eEIp_lNgQv27yERuLfQgJqKeGwBrP8c4zmjNvbjdcADuONEdBKiAwu8PU-WRWMsS9ZpWxUwnXI2UQNSqWMFg=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 17494
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
orig00.deviantart.net/7172/f/2017/036/d/3/answer_8_by_ask__tails_doll-day0hat.png
44.231.211.9301 Moved Permanently 0 B URL HTTP/2 orig00.deviantart.net/7172/f/2017/036/d/3/answer_8_by_ask__tails_doll-day0hat.png
IP 44.231.211.9:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /7172/f/2017/036/d/3/answer_8_by_ask__tails_doll-day0hat.png HTTP/1.1
Host: orig00.deviantart.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 09 Dec 2022 10:21:03 GMT
content-type: text/html; charset=UTF-8
content-length: 0
location: https://images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/99ec30a2-f948-44c5-9815-7ff6441daf5f/day0hat-3477007c-0408-495b-b649-218a16cc2b5d.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTpmaWxlLmRvd25sb2FkIl0sIm9iaiI6W1t7InBhdGgiOiIvZi85OWVjMzBhMi1mOTQ4LTQ0YzUtOTgxNS03ZmY2NDQxZGFmNWYvZGF5MGhhdC0zNDc3MDA3Yy0wNDA4LTQ5NWItYjY0OS0yMThhMTZjYzJiNWQucG5nIn1dXX0.QJKmHYzKgnN0bQny8Rp7fUkZNPvFIi9VVhcY68KMRxY
server: da-redirector/0.5.2
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha06PWUHcGwjBC_CMVQ93tNYr158-6LUPttFJeZos5Ews4zou06ChaV0vhyNNCChuuIfj4BF7VCgU1HdKN-YNRfRtLxZ61lJ1fLCIfzEvjL-tLij_Kyj8EEnXfcs2IVtRjlZUEGlAeyBtFLwNTMg0Ok=w354-h199-p-k-no-nu
216.58.207.225200 OK 39 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha06PWUHcGwjBC_CMVQ93tNYr158-6LUPttFJeZos5Ews4zou06ChaV0vhyNNCChuuIfj4BF7VCgU1HdKN-YNRfRtLxZ61lJ1fLCIfzEvjL-tLij_Kyj8EEnXfcs2IVtRjlZUEGlAeyBtFLwNTMg0Ok=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 354x199, components 3\012- data
Hash e6e6e6b14fb3c3810296b70faf8ba2ae
e9ace08ec381f205b047b81f96cae5362acea845
c6c02efc649de51a64d0ede97aaf568911c3aee16ba5c8f517ec275f04f5fc19
GET /blogger_img_proxy/ANbyha06PWUHcGwjBC_CMVQ93tNYr158-6LUPttFJeZos5Ews4zou06ChaV0vhyNNCChuuIfj4BF7VCgU1HdKN-YNRfRtLxZ61lJ1fLCIfzEvjL-tLij_Kyj8EEnXfcs2IVtRjlZUEGlAeyBtFLwNTMg0Ok=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 39410
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/e9ef61c8-88b2-44ae-b351-9f386530e3d1/d6osxvu-68ce008d-a4f9-43db-9b5c-c3bf0c801c73.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwiaXNzIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsIm9iaiI6W1t7InBhdGgiOiJcL2ZcL2U5ZWY2MWM4LTg4YjItNDRhZS1iMzUxLTlmMzg2NTMwZTNkMVwvZDZvc3h2dS02OGNlMDA4ZC1hNGY5LTQzZGItOWI1Yy1jM2JmMGM4MDFjNzMucG5nIn1dXSwiYXVkIjpbInVybjpzZXJ2aWNlOmZpbGUuZG93bmxvYWQiXX0.c3FsyvTIAieIfPbiio1OBttwnpUydM7H93NvXiv28kg
34.96.91.138200 OK 350 kB URL HTTP/2 images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/e9ef61c8-88b2-44ae-b351-9f386530e3d1/d6osxvu-68ce008d-a4f9-43db-9b5c-c3bf0c801c73.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwiaXNzIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsIm9iaiI6W1t7InBhdGgiOiJcL2ZcL2U5ZWY2MWM4LTg4YjItNDRhZS1iMzUxLTlmMzg2NTMwZTNkMVwvZDZvc3h2dS02OGNlMDA4ZC1hNGY5LTQzZGItOWI1Yy1jM2JmMGM4MDFjNzMucG5nIn1dXSwiYXVkIjpbInVybjpzZXJ2aWNlOmZpbGUuZG93bmxvYWQiXX0.c3FsyvTIAieIfPbiio1OBttwnpUydM7H93NvXiv28kg
IP 34.96.91.138:0
File type PNG image data, 768 x 1024, 8-bit/color RGBA, non-interlaced\012- data
Size 350 kB (349960 bytes)
Hash df125563b0ff8d6482f99c1b937db956
c690b232ec904a706f65565fcd8768e898aeec60
5fbccf0ba3e0b6894c416e758193fc600132679212a0733022c1c95c6ef1ba1e
GET /f/e9ef61c8-88b2-44ae-b351-9f386530e3d1/d6osxvu-68ce008d-a4f9-43db-9b5c-c3bf0c801c73.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJzdWIiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwiaXNzIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsIm9iaiI6W1t7InBhdGgiOiJcL2ZcL2U5ZWY2MWM4LTg4YjItNDRhZS1iMzUxLTlmMzg2NTMwZTNkMVwvZDZvc3h2dS02OGNlMDA4ZC1hNGY5LTQzZGItOWI1Yy1jM2JmMGM4MDFjNzMucG5nIn1dXSwiYXVkIjpbInVybjpzZXJ2aWNlOmZpbGUuZG93bmxvYWQiXX0.c3FsyvTIAieIfPbiio1OBttwnpUydM7H93NvXiv28kg HTTP/1.1
Host: images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
content-length: 349960
content-type: image/png
wix-tracer: 2IfmyC9n0fnZAY1oCjhDB65ncIK
x-seen-by: image-manipulator-554998d6f5-kw8r8
date: Fri, 09 Dec 2022 10:21:03 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash fb8568d1b03d4cd2cc7f423aef817e2e
6a1f75627351f8adae5f4f40d85dc91b4ac6b3d5
b40d4018a0f0692d5847ec8d8f1d2a5a34c2c9ddafa7f28632aab373eeb6f5e4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0uaVxHN-U90RXxNDraHZTqRAuespE8JqiQgsI_hiRpJouxYh1ROH_f_e5F2O-rmWEXNYCiRuYJTep5jFRqDRpEZN_Udaizx7zrPE15e4PzuZ7l9s5faPmuEvKbJcCdyM_CJKVJheQAzCVi-whm5Qo=w354-h199-p-k-no-nu
216.58.207.225200 OK 11 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0uaVxHN-U90RXxNDraHZTqRAuespE8JqiQgsI_hiRpJouxYh1ROH_f_e5F2O-rmWEXNYCiRuYJTep5jFRqDRpEZN_Udaizx7zrPE15e4PzuZ7l9s5faPmuEvKbJcCdyM_CJKVJheQAzCVi-whm5Qo=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 354x199, components 3\012- data
Hash b200cf774292cc8cd8fa5cb4bf19eaaa
b78666da0ff389dff0719cdea58a309add2d6089
01356b18470462b3b2928ac3108b63e41dca15073ae1e4ce1e65956651cf522a
GET /blogger_img_proxy/ANbyha0uaVxHN-U90RXxNDraHZTqRAuespE8JqiQgsI_hiRpJouxYh1ROH_f_e5F2O-rmWEXNYCiRuYJTep5jFRqDRpEZN_Udaizx7zrPE15e4PzuZ7l9s5faPmuEvKbJcCdyM_CJKVJheQAzCVi-whm5Qo=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 11340
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 9881bd54a93dcee33ad73df894c3dee1
9ed12cdbb8e3b8f486058eff097ef57c36ad70c5
c8c4bcc5d8e9ae2aa2794a4a63c1c51707ad25e6c8f8ccbad264304c3ae12134
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 10:21:03 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 03:28:50 GMT
Expires: Wed, 14 Dec 2022 03:28:49 GMT
Etag: "9ed12cdbb8e3b8f486058eff097ef57c36ad70c5"
Cache-Control: max-age=406665,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776d02fefafab505-OSL
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 7c9c260994be6fdf4350a40bb4391067
869680337416c11c54a3ee10c9a6e601c5ec7e11
948585d009f8f8398946c69a91a0de04131aee950e89e535b4f10ab44a82885a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 09 Dec 2022 10:21:03 GMT
Last-Modified: Fri, 09 Dec 2022 08:45:29 GMT
Server: ECS (bsa/EB1A)
X-Cache: Miss from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: EI4rfLr1Li2eNbjsstPOcn-3lY_Qf9NVeXDn0hl_lbplZvEXj4HafQ==
Age: 5734
ocsp.sca1b.amazontrust.com/
143.204.42.165200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP 143.204.42.165:0
Hash 7c9c260994be6fdf4350a40bb4391067
869680337416c11c54a3ee10c9a6e601c5ec7e11
948585d009f8f8398946c69a91a0de04131aee950e89e535b4f10ab44a82885a
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=103402
Date: Fri, 09 Dec 2022 10:21:03 GMT
Etag: "6391e720-1d7"
Expires: Sat, 10 Dec 2022 15:04:25 GMT
Last-Modified: Thu, 08 Dec 2022 13:31:12 GMT
Server: ECS (bsa/EB1E)
X-Cache: Miss from cloudfront
Via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: IeOhvl2qlNBIaMqlz0V-s8UXamiUuQNeAM2uvGs9a150KVnuadklBg==
Age: 5593
simplewebanalysis.com/stats
18.185.190.54200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP 18.185.190.54:0
File type ASCII text, with no line terminators
Hash 09cd6d49d8890cb5367211bf350030d3
b570d683962dde0454c4c9e2726f981f95f268ae
72c608a351b5ee709c371ff3bb67873341858d4448a546ef28eeac4076dd444c
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:03 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://teganskinner312.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=28f597c4-4d74-46f3-901f-48838fcd53b9:3:1; expires=Mon, 06 Dec 2032 10:21:03 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2230271354-widgets.js
142.250.74.73200 OK 40 B URL HTTP/2 www.blogger.com/static/v1/widgets/2230271354-widgets.js
IP 142.250.74.73:0
Hash 0131ab61b81130cb4fe5268c9ac4f546
6fa8414a7574ee2e67146165543745e8dcc48652
90daa63b77e2a2ffada108cde8fdce54bb91923a76cd9e8f10d61d6d203dba04
GET /static/v1/widgets/2230271354-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 52258
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 03:10:03 GMT
expires: Sun, 03 Dec 2023 03:10:03 GMT
cache-control: public, max-age=31536000
age: 544259
last-modified: Mon, 19 Nov 2018 00:20:03 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha33CI8KX0xs2FqCum7cy93RGGWrEGoLCgJqw1Gy0lYKsxkJKieFH-ya7hZeWcMW_zMA9dbG0g5IAwD-YxGcs3KPEhjoU62gc6QdWBMST62-TLBi10fGuhms8X_pBW4T6ZRidEld5d6Ix5S09XNwxjQBPunyoGHbdIn-tqgnGohohOVlzAf0Rh3XrkwlN-BPt2JHzZgT95cxSpmtpCpznXfhsJoo-9Gg2Q=w354-h199-p-k-no-nu
216.58.207.225200 OK 22 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha33CI8KX0xs2FqCum7cy93RGGWrEGoLCgJqw1Gy0lYKsxkJKieFH-ya7hZeWcMW_zMA9dbG0g5IAwD-YxGcs3KPEhjoU62gc6QdWBMST62-TLBi10fGuhms8X_pBW4T6ZRidEld5d6Ix5S09XNwxjQBPunyoGHbdIn-tqgnGohohOVlzAf0Rh3XrkwlN-BPt2JHzZgT95cxSpmtpCpznXfhsJoo-9Gg2Q=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 354x199, components 3\012- data
Hash fcc38ebc9da5f7be0e250a9bfb1294b0
f6444c147ec9d1c1efc88ac64964987cf715ff5a
92db7e3316886e59b6a1f2fc93954e8a6b9ac145606e9790b795b65cb5cb0079
GET /blogger_img_proxy/ANbyha33CI8KX0xs2FqCum7cy93RGGWrEGoLCgJqw1Gy0lYKsxkJKieFH-ya7hZeWcMW_zMA9dbG0g5IAwD-YxGcs3KPEhjoU62gc6QdWBMST62-TLBi10fGuhms8X_pBW4T6ZRidEld5d6Ix5S09XNwxjQBPunyoGHbdIn-tqgnGohohOVlzAf0Rh3XrkwlN-BPt2JHzZgT95cxSpmtpCpznXfhsJoo-9Gg2Q=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 22332
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0JyyEdxoKP8BvcV8tzLU5mnjEo_bISqqPq9bfwhgcak4_N5gaDTOjclZH_f9-tJCyBIU1mpzBVc6JVzO5DWpW8kTh_v_mOA4EPHOnCKuqAkbnuBd6wKIJMqdwYLZh_0Vf56tw62I2ul2DZeLhlHok=w354-h199-p-k-no-nu
216.58.207.225200 OK 36 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0JyyEdxoKP8BvcV8tzLU5mnjEo_bISqqPq9bfwhgcak4_N5gaDTOjclZH_f9-tJCyBIU1mpzBVc6JVzO5DWpW8kTh_v_mOA4EPHOnCKuqAkbnuBd6wKIJMqdwYLZh_0Vf56tw62I2ul2DZeLhlHok=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 354x199, components 3\012- data
Hash 9d4a65e1d6def926dd6675da4cdbe249
42241922cdf5be2ea426e60e4863a09df234de54
92bb98b4c164cbf69ebfd86526c220b424e8511bf475ebee131357b144f6532f
GET /blogger_img_proxy/ANbyha0JyyEdxoKP8BvcV8tzLU5mnjEo_bISqqPq9bfwhgcak4_N5gaDTOjclZH_f9-tJCyBIU1mpzBVc6JVzO5DWpW8kTh_v_mOA4EPHOnCKuqAkbnuBd6wKIJMqdwYLZh_0Vf56tw62I2ul2DZeLhlHok=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 36545
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 583e393554c6c39e8b5e35445d44e256
ce70b1ecd95117cd989ff9b2f968afd16197f789
72d81586c02ab7ef1b7a89ca4611f72cfe6c023dede064ddb4b8cc8f1519490a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "72D81586C02AB7EF1B7A89CA4611F72CFE6C023DEDE064DDB4B8CC8F1519490A"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11367
Expires: Fri, 09 Dec 2022 13:30:30 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 471 B IP 216.58.211.3:0
Hash b5cba4e1962a1fe17c9021f3e418975a
01293d7e4084011451f7d17936ab2427504cdb1a
ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/99ec30a2-f948-44c5-9815-7ff6441daf5f/day0hat-3477007c-0408-495b-b649-218a16cc2b5d.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTpmaWxlLmRvd25sb2FkIl0sIm9iaiI6W1t7InBhdGgiOiIvZi85OWVjMzBhMi1mOTQ4LTQ0YzUtOTgxNS03ZmY2NDQxZGFmNWYvZGF5MGhhdC0zNDc3MDA3Yy0wNDA4LTQ5NWItYjY0OS0yMThhMTZjYzJiNWQucG5nIn1dXX0.QJKmHYzKgnN0bQny8Rp7fUkZNPvFIi9VVhcY68KMRxY
34.96.91.138200 OK 120 kB URL HTTP/2 images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com/f/99ec30a2-f948-44c5-9815-7ff6441daf5f/day0hat-3477007c-0408-495b-b649-218a16cc2b5d.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTpmaWxlLmRvd25sb2FkIl0sIm9iaiI6W1t7InBhdGgiOiIvZi85OWVjMzBhMi1mOTQ4LTQ0YzUtOTgxNS03ZmY2NDQxZGFmNWYvZGF5MGhhdC0zNDc3MDA3Yy0wNDA4LTQ5NWItYjY0OS0yMThhMTZjYzJiNWQucG5nIn1dXX0.QJKmHYzKgnN0bQny8Rp7fUkZNPvFIi9VVhcY68KMRxY
IP 34.96.91.138:0
File type PNG image data, 756 x 516, 8-bit/color RGBA, non-interlaced\012- data
Size 120 kB (119467 bytes)
Hash 39ba4b0a568d2abd6687cc311b1549de
687a131cb5494013863c86c967df123f5c655c5f
2a8b6a3d67a2ad69640162032fa4d831ea37824d51d69c6b66a6ee38a8e909f8
GET /f/99ec30a2-f948-44c5-9815-7ff6441daf5f/day0hat-3477007c-0408-495b-b649-218a16cc2b5d.png?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTpmaWxlLmRvd25sb2FkIl0sIm9iaiI6W1t7InBhdGgiOiIvZi85OWVjMzBhMi1mOTQ4LTQ0YzUtOTgxNS03ZmY2NDQxZGFmNWYvZGF5MGhhdC0zNDc3MDA3Yy0wNDA4LTQ5NWItYjY0OS0yMThhMTZjYzJiNWQucG5nIn1dXX0.QJKmHYzKgnN0bQny8Rp7fUkZNPvFIi9VVhcY68KMRxY HTTP/1.1
Host: images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://teganskinner312.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
content-length: 119467
content-type: image/png
wix-tracer: 2Ifmy74GUMoARQgVzckhlTqXuLl
x-seen-by: image-manipulator-554998d6f5-jvkxk
date: Fri, 09 Dec 2022 10:21:03 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
142.250.74.164200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP 142.250.74.164:0
File type ASCII text, with very long lines (1034), with no line terminators
Hash 34e37af4d526255a20a2056cd5f4addf
bcac186d6a49539e69a3f67aa08d0188966f5623
51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Fri, 09 Dec 2022 10:21:03 GMT
date: Fri, 09 Dec 2022 10:21:03 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=w840-h400-p-k-no-nu
216.58.207.225200 OK 196 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=w840-h400-p-k-no-nu
IP 216.58.207.225:0
File type PNG image data, 840 x 400, 8-bit/color RGBA, non-interlaced\012- data
Size 196 kB (196466 bytes)
Hash d906bceb88aea968da48887918b11f4a
9b9fa2b5dc466e7f929149ea0ab8cc3b384727cb
631dc8ba472cd588f02d998c55d678f3b6267431fe37c1661f84ee36e8e4078f
GET /blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=w840-h400-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 196466
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=s0-d
216.58.207.225200 OK 328 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=s0-d
IP 216.58.207.225:0
File type PNG image data, 1024 x 621, 8-bit/color RGBA, non-interlaced\012- data
Size 328 kB (328524 bytes)
Hash c38ec9eca197062d5581402e39102134
867f8c991bb280e7d7bd291624249b0732b017f6
0d93f71685f089b86a53cb3a2a3f01d7a847539822e27da948ba1cfc68125ec9
GET /blogger_img_proxy/ANbyha1N4U4SL_9LV8oh5Ht0R7arIpSXCiv-vaRrbVH3t-sBXR88Khv9bPDaDqNrfDovNLkgWgL_i335YCMbYhXaoy-6V77qm6WGQvcNucrTue7Njd3hjqVTvK4AYrCCOy8NpDyON5uJIIxVv9wALD9Gsq4viY9N-j6V1F-zljhKc4NR7L2NBtiNCF0sW1wZog=s0-d HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:03 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: attachment;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 328524
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0y9WyIAQl81UqGfpQM_yAUZTvk9McY34AT9rdOZOhCRD_sZP72-tZyig2WuY6AfM9zjz4AEKSuyXGVKTewhd-XeixRjL2-pEuxzrM9jcvZoEpfeYn1GcvmEZINPyUFXMVpCGbVd4mSK0D4NO5BpO16wX_HpKcBwCe6h_4a4nnEBA86GjmSZYDE3DWa5e-VyjyW1kp2iPWUFcxj=w354-h199-p-k-no-nu
216.58.207.225404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0y9WyIAQl81UqGfpQM_yAUZTvk9McY34AT9rdOZOhCRD_sZP72-tZyig2WuY6AfM9zjz4AEKSuyXGVKTewhd-XeixRjL2-pEuxzrM9jcvZoEpfeYn1GcvmEZINPyUFXMVpCGbVd4mSK0D4NO5BpO16wX_HpKcBwCe6h_4a4nnEBA86GjmSZYDE3DWa5e-VyjyW1kp2iPWUFcxj=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash ab680d705202c111ae6ac2d035e1ee9c
c4591f63b26e5ce7b4bbad77bb1983cabcb0a5b4
17231c5b1fe9fd23c15c86fe558be822b5a6dec66d3efeb3cf7826b02e37ee02
GET /blogger_img_proxy/ANbyha0y9WyIAQl81UqGfpQM_yAUZTvk9McY34AT9rdOZOhCRD_sZP72-tZyig2WuY6AfM9zjz4AEKSuyXGVKTewhd-XeixRjL2-pEuxzrM9jcvZoEpfeYn1GcvmEZINPyUFXMVpCGbVd4mSK0D4NO5BpO16wX_HpKcBwCe6h_4a4nnEBA86GjmSZYDE3DWa5e-VyjyW1kp2iPWUFcxj=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:03 GMT
server: fife
content-length: 1811
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5075
Expires: Fri, 09 Dec 2022 11:45:38 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5075
Expires: Fri, 09 Dec 2022 11:45:38 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5075
Expires: Fri, 09 Dec 2022 11:45:38 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 730ba1a8edb79ba6f83b46d1ba5aed7b
55a236fedf6f5f7ca2bb88ae13e20846a50fd36d
f8043e76265c59073d111987fd4c08d05a3ac80989af9269cca9ebcc21af4013
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf07b4f3-8986-4a9c-8c85-b126338852d2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12748
x-amzn-requestid: edd028e3-c23e-4985-b12d-d3ebe760df47
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cjuciEptIAMFj9A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638af783-1c151eb66f590c9c0e0c4c82;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 07:15:15 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: -y4-_OwHl5_OFykJYYZSqwIopjKoYy1MhaGTpVXd4Grq2EsUP2c3IA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 13:49:59 GMT
age: 73864
etag: "55a236fedf6f5f7ca2bb88ae13e20846a50fd36d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
34.120.237.76200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c3214044657f3b876d1f1848bca5684
7558222788f06623ddae6e883413e38e1146281e
e1f9c9c445bba7765f371dbb655cab43c1e12de7cbd015f8034c494118f7f708
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbe602fad-66c2-48db-acd3-371ca6dcb8f6.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7897
x-amzn-requestid: 032fd8ae-b7e9-4e12-8546-838191a73688
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F51IAMFunw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-345ae6cd107d207f5dbe29a8;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: N-zFZ8yeL7RrOZ5xfqvfBaE3zcXWecvr6Jd-93nKiUZlCXp2n2_Bgw==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:41:46 GMT
age: 23957
etag: "7558222788f06623ddae6e883413e38e1146281e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 45e0c1638ad919bde19731f7987ab064
1e492807c665e6e6b24ec6ce19035fdfc6f23b92
f0d3738ec8406958470c8fd152a02a123d7654c30f974c1df5c4977a380c2d62
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe7732c6-dc98-445c-86c6-d413942250ea.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10205
x-amzn-requestid: c5704c7a-60c4-402b-8018-5885a8dae971
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cwVM_F9BIAMF3ow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63900252-3e9573d900714e3250f43e17;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 03:02:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: mLTL7L808-OguYGrl3FUvwmFmPQjBPRj7PVfgEheFHWg4g4skoBvOg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 00:33:39 GMT
age: 35244
etag: "1e492807c665e6e6b24ec6ce19035fdfc6f23b92"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
34.120.237.76200 OK 6.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8546542f00ea29ef4df6ab8d3c7c2164
5c8ffe91490006a9890188b53f875568c2b6bd8f
7fb11750ac339ac283da62fd370862c6b95a103a585ca5dd8c90038718d818a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a20bda5-6ca4-42c4-8729-6e975652e66a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6578
x-amzn-requestid: 6392feb9-e33e-42fa-bc10-b5e31e654c9b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cw4beGG7oAMF8hA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63903aaf-2c890b7b0a16617346a0f7e7;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 07:03:11 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: H067kZXU_djWxbWO34bYMqa0xZ-WF9ntEBhZ-kV_TDoJFXQL_J1hqQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 03:34:27 GMT
age: 24396
etag: "5c8ffe91490006a9890188b53f875568c2b6bd8f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5075
Expires: Fri, 09 Dec 2022 11:45:38 GMT
Date: Fri, 09 Dec 2022 10:21:03 GMT
Connection: keep-alive
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
142.250.74.99200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP 142.250.74.99:0
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 08:12:00 GMT
expires: Sat, 09 Dec 2023 08:12:00 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 7743
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fba9a3854df65740512f96efe7442e58
8fbff7725c842d70e047c635a725723a9dc9c55a
6e639298ebc82343cee9267d2910d15735af55f910e2c3de9218266b7c6fffc9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60d2c55a-1a85-4fbf-b256-9d812a2b5ec2.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5188
x-amzn-requestid: afb8cbd2-3674-4dac-9cd9-9ff83618ac0a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ck2-5G9joAMFlPA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638b6b92-2979ff216b9028aa70baef8b;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 15:30:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 7Dp35PIr_WYUI1bBa21AvmCMEPi0d3jnhuS8eEk3Q3CXRcGWAnkD8g==
via: 1.1 8ae6af4d17aae7471e5fe2792eb6abcc.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 17:01:04 GMT
age: 62399
etag: "8fbff7725c842d70e047c635a725723a9dc9c55a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
34.120.237.76200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955c6ac69b89f6cbd497df53fcb2ae1b
2506152cdd1056533116feb9350124356e570e54
fca1b303a554aa9cdd13c4769a1088e1905ef888ed703de17864fe76ff880abe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcf3829a8-4b4d-433d-9452-46c3ffc7ea6e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7217
x-amzn-requestid: be9196fc-3d43-49db-8522-8781cbf5a247
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUEDEWpIAMFqUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e66e6-04b24220213872ba378d3538;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:47:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 4QlJZW4ZiPNVhOJbcRldanR8veym3l0sIBGa1Ym-4FOTT_utMQeZQg==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 08:30:07 GMT
age: 6656
etag: "2506152cdd1056533116feb9350124356e570e54"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 8f6ab0debac98d11413e20fa98ba8286
e63543ba0f3a685edf4d8fee3f587efd5417015f
fe6bc081b1963c61a3af1ab7b7b1213ae5bc7b962c5474d8f6fe123547d5d309
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:03 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
banquetunarmedgrater.com/advertisers.js
192.243.61.227200 OK 0 B URL HTTP/1.1 banquetunarmedgrater.com/advertisers.js
IP 192.243.61.227:0
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /advertisers.js HTTP/1.1
Host: banquetunarmedgrater.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:03 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 7fa07f2e306beb604cd664664a4d0596
Strict-Transport-Security: max-age=0; includeSubdomains
lh3.googleusercontent.com/blogger_img_proxy/ANbyha03EB8jA6--y71PSTe_KJMmsn28X3ZIpC6aTHiG4p6LpW6y65YMFvH0owghlDtJKtp__Ka_OPfebsHfCgVRsKT4GYd9RZUkDYmC-bsPbAG8Og0TAN2ZXCXM5MjL6tcOWdZekT6Hx5b03R8-AvFsM57daMfApC8aNCXYlrVYay3H_g=w354-h199-p-k-no-nu
216.58.207.225200 OK 54 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha03EB8jA6--y71PSTe_KJMmsn28X3ZIpC6aTHiG4p6LpW6y65YMFvH0owghlDtJKtp__Ka_OPfebsHfCgVRsKT4GYd9RZUkDYmC-bsPbAG8Og0TAN2ZXCXM5MjL6tcOWdZekT6Hx5b03R8-AvFsM57daMfApC8aNCXYlrVYay3H_g=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Picasa, copyright= ], baseline, precision 8, 354x199, components 3\012- data
Hash be140ffa98d24a16c57cba4b8cdb76a3
83747d126c472cc0cd6a1b9efabb7136336698e6
dd24a17669ce7ea65bb5565757b4d555df0afc8e4377dcf7aae5603b115f6023
GET /blogger_img_proxy/ANbyha03EB8jA6--y71PSTe_KJMmsn28X3ZIpC6aTHiG4p6LpW6y65YMFvH0owghlDtJKtp__Ka_OPfebsHfCgVRsKT4GYd9RZUkDYmC-bsPbAG8Og0TAN2ZXCXM5MjL6tcOWdZekT6Hx5b03R8-AvFsM57daMfApC8aNCXYlrVYay3H_g=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:04 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:04 GMT
server: fife
content-length: 54335
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:03 GMT
expires: Fri, 08 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 45181
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:43 GMT
expires: Fri, 08 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 63621
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 0be73f837e6aeb740e5c608fb17237b5
4dfd1104c0558f35d83b35ca08e4874052be4bc7
9f57778d4b2af1df4ee9000e3be98a38927c78d4d61b8a70f7a6499c2842fa89
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Fri, 09 Dec 2022 10:21:04 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 06:34:05 GMT
Expires: Tue, 13 Dec 2022 06:34:04 GMT
Etag: "4dfd1104c0558f35d83b35ca08e4874052be4bc7"
Cache-Control: max-age=331379,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 776d03063c02b505-OSL
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 71226ca9e5c6e1ba99359bb1916c09a5
3a7db2e2ac614fc91e2b98c4c8bd3209df24968f
81e557077e80f393f1cc2b9dbdb7d25dac885933dbee44984777b1b08e002cd2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81E557077E80F393F1CC2B9DBDB7D25DAC885933DBEE44984777B1B08E002CD2"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 09 Dec 2022 16:21:04 GMT
Date: Fri, 09 Dec 2022 10:21:04 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 8585fe73b51c643ee300c3df9313bfe1
c184ce0c12fbfc0f17a81ad0e0bdaad5503bceb1
807b590f961c83886bbd27c879dfbf03a3336005cdabbba42d4d63bdcb11bf51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 8585fe73b51c643ee300c3df9313bfe1
c184ce0c12fbfc0f17a81ad0e0bdaad5503bceb1
807b590f961c83886bbd27c879dfbf03a3336005cdabbba42d4d63bdcb11bf51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
142.250.74.46200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 142.250.74.46:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Fri, 09 Dec 2022 10:21:04 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+551; expires=Sun, 08-Dec-2024 10:21:04 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 09 Dec 2022 10:21:04 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true
142.250.74.46200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true
IP 142.250.74.46:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1531
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 09 Dec 2022 10:21:04 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+109; expires=Sun, 08-Dec-2024 10:21:04 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 09 Dec 2022 10:21:04 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
142.250.74.46200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 142.250.74.46:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2975
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Fri, 09 Dec 2022 10:21:04 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+619; expires=Sun, 08-Dec-2024 10:21:04 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Fri, 09 Dec 2022 10:21:04 GMT
X-Firefox-Spdy: h2
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash f4c3210350fadbe9a2436b55ca128490
001f6d352d325d222d2df9ff11d5a78ec0be0d16
9d1a82d5be72479486304e8c8329fa8403b7e7af1ea5dd578db7cf60ff8d1210
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 09 Dec 2022 10:21:04 GMT
Content-Type: application/ocsp-response
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 08 Dec 2022 21:37:53 GMT
Expires: Fri, 09 Dec 2022 21:37:53 GMT
ETag: "001f6d352d325d222d2df9ff11d5a78ec0be0d16"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash 8585fe73b51c643ee300c3df9313bfe1
c184ce0c12fbfc0f17a81ad0e0bdaad5503bceb1
807b590f961c83886bbd27c879dfbf03a3336005cdabbba42d4d63bdcb11bf51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:04 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
skipdearbeautify.com/sbar.json?key=8f8ac2d81b55a9148025d1de6de83691&uuid=1fb6eada-8e8b-432c-a32c-62e2315fb94e%3A1%3A1
173.233.137.44200 OK 4.2 kB URL HTTP/1.1 skipdearbeautify.com/sbar.json?key=8f8ac2d81b55a9148025d1de6de83691&uuid=1fb6eada-8e8b-432c-a32c-62e2315fb94e%3A1%3A1
IP 173.233.137.44:0
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (6141), with no line terminators
Hash 6b9d197b01cafdc4c2bfe419eabe1428
11aeb975ead59dc5bfdcd4819f1e9591710bc7fb
8ed07f6da9167116cc936ff4eef3a13422809e38080aab9fc47b100f2c077fcb
Analyzer Verdict Alert quad9 Sinkholed
GET /sbar.json?key=8f8ac2d81b55a9148025d1de6de83691&uuid=1fb6eada-8e8b-432c-a32c-62e2315fb94e%3A1%3A1 HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:04 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://teganskinner312.blogspot.com
Access-Control-Allow-Origin: https://teganskinner312.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=15481227; expires=Sat, 10 Dec 2022 10:21:04 GMT; secure; SameSite=None
uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; expires=Fri, 16 Dec 2022 10:21:04 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 10 Dec 2022 10:21:04 GMT; secure; SameSite=None
uncs=1; expires=Sat, 10 Dec 2022 10:21:04 GMT; secure; SameSite=None
pdhtkv29=true; expires=Sat, 10 Dec 2022 10:21:04 GMT; secure; SameSite=None
uncs29=1; expires=Sat, 10 Dec 2022 10:21:04 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: ecebf9916bfaf978b2022275368d1173
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
pixel.onaudience.com/?partner=232&mapped=1fb6eada-8e8b-432c-a32c-62e2315fb94e
51.222.80.231302 Found 0 B URL HTTP/1.1 pixel.onaudience.com/?partner=232&mapped=1fb6eada-8e8b-432c-a32c-62e2315fb94e
IP 51.222.80.231:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?partner=232&mapped=1fb6eada-8e8b-432c-a32c-62e2315fb94e HTTP/1.1
Host: pixel.onaudience.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Found
set-cookie: cookie=a960264901d9a197; Max-Age=31536000; Expires=Sat, 9 Dec 2023 10:21:04 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
done_redirects104=1; Max-Age=86400; Expires=Sat, 10 Dec 2022 10:21:04 GMT; Path=/; Domain=.onaudience.com; Secure; SameSite=None
location: https://sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=a960264901d9a197/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
content-length: 0
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1L7tVnjr5FHLc1WV5hvXPiJ_Z__IKsdJ8YMggQvkA1grYIVAqZ_KcTY6TpPQefUkESvjvCCihrkis6U5oVWW-FgSI1Aw_BmvnTS14hXlxhQgrMLLIlNHfP9BtBR2-cyxx94Qf10ZYtiRw7BV9etHroGugE=w354-h199-p-k-no-nu
216.58.207.225200 OK 45 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1L7tVnjr5FHLc1WV5hvXPiJ_Z__IKsdJ8YMggQvkA1grYIVAqZ_KcTY6TpPQefUkESvjvCCihrkis6U5oVWW-FgSI1Aw_BmvnTS14hXlxhQgrMLLIlNHfP9BtBR2-cyxx94Qf10ZYtiRw7BV9etHroGugE=w354-h199-p-k-no-nu
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 354x199, components 3\012- data
Hash c6ff7fce549b6ce7c127b582fd556c11
23e227410079145f74042b46223eefea29545c7d
367990d920902ca7e02d2e07aa85c0d8bf18b8da557fbc5d73b61926f49592bc
GET /blogger_img_proxy/ANbyha1L7tVnjr5FHLc1WV5hvXPiJ_Z__IKsdJ8YMggQvkA1grYIVAqZ_KcTY6TpPQefUkESvjvCCihrkis6U5oVWW-FgSI1Aw_BmvnTS14hXlxhQgrMLLIlNHfP9BtBR2-cyxx94Qf10ZYtiRw7BV9etHroGugE=w354-h199-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 10 Dec 2022 10:21:04 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 09 Dec 2022 10:21:04 GMT
server: fife
content-length: 45341
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
skipdearbeautify.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrPdPdOz0wYJiTES3PwgieQkpH71bLnVXU1V9%2FRkvSxGJKLCiBePvd%2FsZokGMX%2BAEGa9yIJkx0PYg3vz5kEQcpaZHVh9UO%2B9qu8VfN9X9fl6uU98lHTv6iWzqrSmC1HTb7xxU2XCVK5x%2BUYj8Jv%2B6cZNlXXapxuDabL9twM%2FavpvNt6XfMUshH7g%2B4EfNC4oKxMzWJihUPmDOGjGfrMdNoOojYH9%2F96VHhz1IPr75EUoMXlm%2BdeHUHyMLP3pvHQrhclPvpeWmhbGoi%2B2PsxWMlNlSA%2FbxHpIsq35NIybEPLdEZhsa64Apr8xVQCmJsR7EoBlW3OaYP3NA6ZMQ2Zg4llU%2FTGkHkPRMbi5AyV2CcAFLl9Blt67bGxFbx%2BgdIpOyLGn%2F0BVE3Lsj5eRpT%2Be02rQuG50WSiTOQySGmowhuqNkZfbKFY9qGobvPgUSvxGFp4uIUs3rjhtoMTe60HCOpIKeqoru%2BxUuxXyU3SaOqEMW0GUsLgtZxYpNYZKxtByCOo8lNOlPJSJhzL3kIq9Bo3ixPcXE5a0Wt0257zV4jzqdkQkWu1u4qPkUw1DFPkQXA%2FB7Rpyu4YVNYQtH8Et13DCgysI%2BqJGJQkqR1BRgkoRVAVB1a83hXahq%2B8J7UoWzGs4r616ZIreOt00RU9mZD3fJy%2FMjPsr%2FhIrcq%2FRTbqUh6IbsCiicdDu%2BmEkAiE7QnZbnTiAUzWUOzKTuaom5KWPPkGudt%2F6G4xuw%2BltcHUCtHwVtBothj7o8qjd9bGa3Wec8qTJTQphauTFMRS3vXW9T16ZUYjZ15B858zj0ZPj7%2BQb4LZGbmt8rH4h6Om7o2umIhvXTOXIwyt5oVK1Sqfver2ghTz6%2FQfydmWsuHjeDe%2Bf5VNg2j64IV2xRDOhsp4jP5xTQkh7wVguyc8X3U3JrpZu%2BVxpszJfuvruhYtpbqVzymRjULV763lwNSHHL3mzH%2FvaVyeh7Bi2rJGWO2QeUGYMnq%2FB5YfsnSGw%2BnCG5R6qsh7ZkB0eajUh7c8eQ8udM4%2F%2BvHX2i8UlUFbDyf9cPOzX3V30rAda3EGW1ujbGn1dg%2BohXHl0VOR258zvrVmAaW%2FEtPU2mLb6mwN7ndpryCjxE%2BmHkiUxSxapL%2BKkHTMaB3KRRTRA4Sb82%2BdO%2FAsAAP%2F%2FAQAA%2F%2F%2Fw4oHqjQQAAA%3D%3D
173.233.137.44200 OK 7 B URL HTTP/1.1 skipdearbeautify.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrPdPdOz0wYJiTES3PwgieQkpH71bLnVXU1V9%2FRkvSxGJKLCiBePvd%2FsZokGMX%2BAEGa9yIJkx0PYg3vz5kEQcpaZHVh9UO%2B9qu8VfN9X9fl6uU98lHTv6iWzqrSmC1HTb7xxU2XCVK5x%2BUYj8Jv%2B6cZNlXXapxuDabL9twM%2FavpvNt6XfMUshH7g%2B4EfNC4oKxMzWJihUPmDOGjGfrMdNoOojYH9%2F96VHhz1IPr75EUoMXlm%2BdeHUHyMLP3pvHQrhclPvpeWmhbGoi%2B2PsxWMlNlSA%2FbxHpIsq35NIybEPLdEZhsa64Apr8xVQCmJsR7EoBlW3OaYP3NA6ZMQ2Zg4llU%2FTGkHkPRMbi5AyV2CcAFLl9Blt67bGxFbx%2BgdIpOyLGn%2F0BVE3Lsj5eRpT%2Be02rQuG50WSiTOQySGmowhuqNkZfbKFY9qGobvPgUSvxGFp4uIUs3rjhtoMTe60HCOpIKeqoru%2BxUuxXyU3SaOqEMW0GUsLgtZxYpNYZKxtByCOo8lNOlPJSJhzL3kIq9Bo3ixPcXE5a0Wt0257zV4jzqdkQkWu1u4qPkUw1DFPkQXA%2FB7Rpyu4YVNYQtH8Et13DCgysI%2BqJGJQkqR1BRgkoRVAVB1a83hXahq%2B8J7UoWzGs4r616ZIreOt00RU9mZD3fJy%2FMjPsr%2FhIrcq%2FRTbqUh6IbsCiicdDu%2BmEkAiE7QnZbnTiAUzWUOzKTuaom5KWPPkGudt%2F6G4xuw%2BltcHUCtHwVtBothj7o8qjd9bGa3Wec8qTJTQphauTFMRS3vXW9T16ZUYjZ15B858zj0ZPj7%2BQb4LZGbmt8rH4h6Om7o2umIhvXTOXIwyt5oVK1Sqfver2ghTz6%2FQfydmWsuHjeDe%2Bf5VNg2j64IV2xRDOhsp4jP5xTQkh7wVguyc8X3U3JrpZu%2BVxpszJfuvruhYtpbqVzymRjULV763lwNSHHL3mzH%2FvaVyeh7Bi2rJGWO2QeUGYMnq%2FB5YfsnSGw%2BnCG5R6qsh7ZkB0eajUh7c8eQ8udM4%2F%2BvHX2i8UlUFbDyf9cPOzX3V30rAda3EGW1ujbGn1dg%2BohXHl0VOR258zvrVmAaW%2FEtPU2mLb6mwN7ndpryCjxE%2BmHkiUxSxapL%2BKkHTMaB3KRRTRA4Sb82%2BdO%2FAsAAP%2F%2FAQAA%2F%2F%2Fw4oHqjQQAAA%3D%3D
IP 173.233.137.44:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrPdPdOz0wYJiTES3PwgieQkpH71bLnVXU1V9%2FRkvSxGJKLCiBePvd%2FsZokGMX%2BAEGa9yIJkx0PYg3vz5kEQcpaZHVh9UO%2B9qu8VfN9X9fl6uU98lHTv6iWzqrSmC1HTb7xxU2XCVK5x%2BUYj8Jv%2B6cZNlXXapxuDabL9twM%2FavpvNt6XfMUshH7g%2B4EfNC4oKxMzWJihUPmDOGjGfrMdNoOojYH9%2F96VHhz1IPr75EUoMXlm%2BdeHUHyMLP3pvHQrhclPvpeWmhbGoi%2B2PsxWMlNlSA%2FbxHpIsq35NIybEPLdEZhsa64Apr8xVQCmJsR7EoBlW3OaYP3NA6ZMQ2Zg4llU%2FTGkHkPRMbi5AyV2CcAFLl9Blt67bGxFbx%2BgdIpOyLGn%2F0BVE3Lsj5eRpT%2Be02rQuG50WSiTOQySGmowhuqNkZfbKFY9qGobvPgUSvxGFp4uIUs3rjhtoMTe60HCOpIKeqoru%2BxUuxXyU3SaOqEMW0GUsLgtZxYpNYZKxtByCOo8lNOlPJSJhzL3kIq9Bo3ixPcXE5a0Wt0257zV4jzqdkQkWu1u4qPkUw1DFPkQXA%2FB7Rpyu4YVNYQtH8Et13DCgysI%2BqJGJQkqR1BRgkoRVAVB1a83hXahq%2B8J7UoWzGs4r616ZIreOt00RU9mZD3fJy%2FMjPsr%2FhIrcq%2FRTbqUh6IbsCiicdDu%2BmEkAiE7QnZbnTiAUzWUOzKTuaom5KWPPkGudt%2F6G4xuw%2BltcHUCtHwVtBothj7o8qjd9bGa3Wec8qTJTQphauTFMRS3vXW9T16ZUYjZ15B858zj0ZPj7%2BQb4LZGbmt8rH4h6Om7o2umIhvXTOXIwyt5oVK1Sqfver2ghTz6%2FQfydmWsuHjeDe%2Bf5VNg2j64IV2xRDOhsp4jP5xTQkh7wVguyc8X3U3JrpZu%2BVxpszJfuvruhYtpbqVzymRjULV763lwNSHHL3mzH%2FvaVyeh7Bi2rJGWO2QeUGYMnq%2FB5YfsnSGw%2BnCG5R6qsh7ZkB0eajUh7c8eQ8udM4%2F%2BvHX2i8UlUFbDyf9cPOzX3V30rAda3EGW1ujbGn1dg%2BohXHl0VOR258zvrVmAaW%2FEtPU2mLb6mwN7ndpryCjxE%2BmHkiUxSxapL%2BKkHTMaB3KRRTRA4Sb82%2BdO%2FAsAAP%2F%2FAQAA%2F%2F%2Fw4oHqjQQAAA%3D%3D HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Cookie: u_pl=15481227; uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:04 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: dcdc00ae17b92dda2c19b514d873aece
Strict-Transport-Security: max-age=0; includeSubdomains
ocsp.godaddy.com/
192.124.249.23200 OK 1.8 kB IP 192.124.249.23:0
Hash 355779586d587a09f2efb25a8353adcd
1c0c72e47545b5479cacf3cc197be5356ea74f3e
862f8d9a33f25341bbb14c679e4767449e4b2d0fb78bcece679d9ce277c3557a
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Fri, 09 Dec 2022 10:21:05 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19023
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Thu, 08 Dec 2022 22:20:02 GMT
Expires: Fri, 09 Dec 2022 22:20:02 GMT
ETag: "1c0c72e47545b5479cacf3cc197be5356ea74f3e"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=a960264901d9a197/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
52.49.92.250404 Not Found 49 B URL HTTP/2 sync.crwdcntrl.net/map/c=8587/tp=CLOD/tpid=a960264901d9a197/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D
IP 52.49.92.250:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 56398e76be6355ad5999b262208a17c9
a1fdee122b95748d81cee426d717c05b5174fe96
2f561b02a49376e3679acd5975e3790abdff09ecbadfa1e1858c7ba26e3ffcef
GET /map/c=8587/tp=CLOD/tpid=a960264901d9a197/gdpr=0/gdpr_consent=?https%3A%2F%2Fpixel.onaudience.com%2F%3Fpartner%3D104%26icm%26cver%26mapped%3D%24%7Bprofile_id%7D%26gdpr%3D%24%7Bgdpr%7D HTTP/1.1
Host: sync.crwdcntrl.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://teganskinner312.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Fri, 09 Dec 2022 10:21:05 GMT
content-type: image/gif
content-length: 49
p3p: CP=NOI DSP COR NID PSAa PSDa OUR UNI COM NAV
cache-control: no-cache
pragma: no-cache
expires: 0
x-server: 10.45.12.230
access-control-allow-origin: *
server: Jetty(9.4.38.v20210224)
X-Firefox-Spdy: h2
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 200fbab5e89aa7def1734122074b4394
5d14c5617b8c4901253e37177d9b7e9c7caadc54
a71b25190bb6ff84eeca8da0a090a7f51e6c703f190efb94bec0dd7ab5f272da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A71B25190BB6FF84EECA8DA0A090A7F51E6C703F190EFB94BEC0DD7AB5F272DA"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7667
Expires: Fri, 09 Dec 2022 12:28:53 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
skipdearbeautify.com/pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=1320
173.233.137.44200 OK 0 B URL HTTP/1.1 skipdearbeautify.com/pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=1320
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Fau%2Fe1%2F6f%2Fbb%2Fe16fbbe9f31c82c23d1d57f9726b5fc7%2F1654616215.html&l=1038&fd=1320 HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Cookie: u_pl=15481227; uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash db04ab78d24082c57089ea499fbcf16f
8027436792cb207605700db69b7bce93bfab7ff5
e44b95597ec1bc33eb78363c9426f14b9b69fba032a3f6c11a08f77224d5f461
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E44B95597EC1BC33EB78363C9426F14B9B69FBA032A3F6C11A08F77224D5F461"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10806
Expires: Fri, 09 Dec 2022 13:21:12 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash db04ab78d24082c57089ea499fbcf16f
8027436792cb207605700db69b7bce93bfab7ff5
e44b95597ec1bc33eb78363c9426f14b9b69fba032a3f6c11a08f77224d5f461
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "E44B95597EC1BC33EB78363C9426F14B9B69FBA032A3F6C11A08F77224D5F461"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10709
Expires: Fri, 09 Dec 2022 13:19:35 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c862a5467498ae488624f03b5b024570
85de786da966bc559260047f7499a812a9605cfc
4c4b457fffa2d3fee0d961b0794d4832b8d76efcff43c4fa0f194728498530ff
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "4C4B457FFFA2D3FEE0D961B0794D4832B8D76EFCFF43C4FA0F194728498530FF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18904
Expires: Fri, 09 Dec 2022 15:36:10 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
23.33.119.27200 OK 346 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash c862a5467498ae488624f03b5b024570
85de786da966bc559260047f7499a812a9605cfc
4c4b457fffa2d3fee0d961b0794d4832b8d76efcff43c4fa0f194728498530ff
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "4C4B457FFFA2D3FEE0D961B0794D4832B8D76EFCFF43C4FA0F194728498530FF"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18935
Expires: Fri, 09 Dec 2022 15:36:41 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/img/close.png
172.67.183.56200 OK 2.0 kB URL HTTP/2 cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/img/close.png
IP 172.67.183.56:0
File type PNG image data, 19 x 19, 8-bit/color RGBA, non-interlaced\012- data
Hash 2cecae5111d5ff932a996679215ad573
f4c63abb5dc373aba5bc144c3831d98516cc7cc9
31f6aad6a88eca32f245dc6d0e030ef422f306b4f8479855b30e59b6dc134ebc
GET /sb/ssp/in-page_push/os/android/2/img/close.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:06 GMT
content-type: image/png
content-length: 2005
last-modified: Wed, 11 May 2022 09:01:03 GMT
etag: "627b7b4f-7d5"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 4410714
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EwZbpxuc0mNk22cWhZ4g%2BcmJGBons4KHQc8ocT%2BifUnLhCuJtT%2FwF2ui%2FiLZolna%2FNHoGeAYlnHCMfXTrrpA6VWg%2Bq7DUbSyRsyAM9%2BRRirq7ZHdWjFce0NUMUlbNw8jq6Q%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776d03127e78b518-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
216.58.211.3200 OK 472 B IP 216.58.211.3:0
Hash d61883097c47c0fcb4a15cafc5bdbdfc
54411aba43093cafd1cb2acea7c2b4c69184611f
0aef2b974544f530bd591dd0201909a9c2a6b3f4451c69288bafc126d9a37e2c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 09 Dec 2022 10:21:06 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 63a533e7b5caf59058266a837420c342
4eca831fb15dccf4eb608e983fe8b89250fc0313
d8904e4cc9a407e7c154cbbf6afe3985a55adcb878dacfb80a0e3cd92ea9703e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8904E4CC9A407E7C154CBBF6AFE3985A55ADCB878DACFB80A0E3CD92EA9703E"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5755
Expires: Fri, 09 Dec 2022 11:57:01 GMT
Date: Fri, 09 Dec 2022 10:21:06 GMT
Connection: keep-alive
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
142.250.74.106200 OK 1.0 kB URL HTTP/2 fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP 142.250.74.106:0
Hash a4f7fb8f26fdd5dabadfdf1bb35a4358
80bfb930fb156b4c31b1c0a8e15e587e92f8252e
2c154a7a96be8b7c4d12dd278d6e39f4fcae9abecc3003ed8b9feffc0da5cca8
GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 09 Dec 2022 10:21:06 GMT
date: Fri, 09 Dec 2022 10:21:06 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/si/22/40/96/224096e7da4cd19603f11376ad0ac65e/1664934227.jpg
45.133.44.10200 OK 11 kB URL HTTP/2 cdn.cloudimagesb.com/si/22/40/96/224096e7da4cd19603f11376ad0ac65e/1664934227.jpg
IP 45.133.44.10:0
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 192x192, components 3\012- data
Hash 041ba25d3421aa01e5186d4626596d80
c90cf25001208170073d8449b3434749fdb0ef15
301b082b26001a03ec73e6c8ea1a1cc6e4fd76cc2e74b3b9449d96fdc2aaa5ea
GET /si/22/40/96/224096e7da4cd19603f11376ad0ac65e/1664934227.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:06 GMT
content-type: image/jpeg
content-length: 11168
server: nginx/1.17.6
last-modified: Wed, 05 Oct 2022 01:43:55 GMT
etag: "633ce15b-2ba0"
expires: Sun, 11 Dec 2022 10:21:06 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/css/style.css
172.67.183.56200 OK 1.3 kB URL HTTP/2 cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/css/style.css
IP 172.67.183.56:0
Hash 80be35c25e7018017f2de026d204ab30
a5130f4104d592db95b9801ade9af5b6a8ab386e
7609ff7af9f901cb40e36f00c53977d83d60627670562decf50b415143c74e6a
GET /sb/ssp/in-page_push/os/android/2/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:06 GMT
content-type: text/css
last-modified: Wed, 11 May 2022 09:01:01 GMT
etag: W/"627b7b4d-126c"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=o9DUEfFxfc2ISQu6qJEdYwXbDOaeemQ4EnKKEyNftAVYBsAiep5tTCj5EUSGPUf%2BVoQTl1FIhOrc1oD7xpeCYQH99pGVPA8jsyg3%2BY7qBHB%2BlNZMGu7o6PsN8RDUUcyIliU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776d03123ad81c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15744, version 1.0\012- data
Hash 15d9f621c3bd1599f0169dcf0bd5e63e
7ca9c5967f3bb8bffeab24b639b49c1e7d03fa52
f6734f8177112c0839b961f96d813fcb189d81b60e96c33278c1983b6f419615
GET /s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15744
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:33:54 GMT
expires: Thu, 07 Dec 2023 19:33:54 GMT
cache-control: public, max-age=31536000
age: 139632
last-modified: Wed, 11 May 2022 19:24:48 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15740, version 1.0\012- data
Hash b9c29351c46f3e8c8631c4002457f48a
e57e59c5780995ff2937ab2b511a769212974a87
f75911313e1c7802c23345ab57e754d87801581706780c993fb23ff4e0fe62ef
GET /s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15740
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 19:34:15 GMT
expires: Thu, 07 Dec 2023 19:34:15 GMT
cache-control: public, max-age=31536000
age: 139611
last-modified: Wed, 11 May 2022 19:24:56 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/js/script.js
172.67.183.56200 OK 198 B URL HTTP/2 cdn.sb4you1.com/sb/ssp/in-page_push/os/android/2/js/script.js
IP 172.67.183.56:0
Hash 1607f183e7a1c7b0e45b5143c29a1a5c
4250d240ae3e58c276f540336042d91538f58f4f
d296de16cc176a3fe1abbb6a6cf2a62d9f765ef881a220b9a3bffeb8eecc48aa
GET /sb/ssp/in-page_push/os/android/2/js/script.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:06 GMT
content-type: application/javascript
last-modified: Wed, 11 May 2022 09:01:04 GMT
etag: W/"627b7b50-194"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nsyceOSymzCR2T1lyGnt5znVlHfiWwrORpnYHL5IkbyZ4xGL4k4fg4MlF7CPHvVadfMGCQ8Jsuj24gOsRvfZo0oPucCD1N%2FHJp%2BQ7jZ9ByL8T%2FKv9xM5QYIVNmEsJ73Ond4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776d03122ad01c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
skipdearbeautify.com/pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=79245&fd=503
173.233.137.44200 OK 0 B URL HTTP/1.1 skipdearbeautify.com/pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=79245&fd=503
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbls?bv=21.28.8000&tmpl=644&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Fssp%2Fin-page_push%2Fos%2Fandroid%2F2%2Fcss%2Fanimate.css&l=79245&fd=503 HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Cookie: u_pl=15481227; uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
skipdearbeautify.com/pixel/sbs?c=1
173.233.137.44200 OK 0 B URL HTTP/1.1 skipdearbeautify.com/pixel/sbs?c=1
IP 173.233.137.44:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/sbs?c=1 HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Cookie: u_pl=15481227; uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:06 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
skipdearbeautify.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrP9a2Z6DBISYyS4%2BUES2ZOQ6qrq2XKru5qq7unZ9bIYkYgKI1489n6zmyUaxPwBQpj1IguSHQ9hD%2B7NmwdByFlmdmD1Qb33qr5X8H1f1ecb5QFxUdL961f0mlSKLrSabuONJZlxXdnG1VsNz226ZxtLMmuHZxuDaTL9tz231XTfbLwv2Ipe8F3PdT3Xa1ySRiR6sDBDIfMHXa%2FZdZuh3%2FRaIQbm%2F3tbOrDUAe8fkBch%2BeSZ5V8fQrIxsvSni8KuFDo%2F%2FV5aKlpogz7f%2FjBbyXSVIT1qE%2BMgybbn09B2Qsh3x6Cz7bkC6P7mVAFiOSHOEw9xtj2nibi%2Fdcg0VhAZYv4sqv4YQo0h6RhM34HkewRgHFevIUvvXdWmoquHKJ2iE3Li6T%2BQ1YSc%2BONlZOmPF5QcNG5qVRZSZxaDpIYcjCF7Y%2BTlDoo1B7LaASs%2BheS%2FkYWni8jSzWtWaUi%2B%2F7qXxG1BOT0TiSg%2BEwY%2BO0Onqe0LP%2FBaSdwNxcwiKceQyRhKDEGtg3K6pIMycVDmDlK%2B36CtbuK6nSROgiAKGWNBwFgravMWD8IocVGyqYYhinwIpoZgZh25WceKHMKUj2CXa1juwBYEfV6jEgSVJagoQSUJqoKg6tdbXFnf1ve4smXszas%2Fr0E90kVvg27poicyspEfkBdmxv3V%2FRIrYr8RJRFlPo%2B8uNWiXS%2BMXL%2FFPS7aXERBu%2BvByhrSHpvJXJMT8tJHnyCXe2%2F9jZjuwKodMHkKtHwVtBp1fBd0eRRGLtay%2BzGjLGkynYLrGnlxAsWqs6EOyCszCt34awi2e%2B7x6MnJd%2FJNMFMjNzU%2Blr8Q9NTd0Q1dkc0burLk4bW8kKlco9N3vVnQQhz%2F%2FgOxWmnDL1%2B0w%2Fvn2RSYtg9uCVss0ozLrGfJDxck58Jc0oYJ8vNluyTi66VdvlCarMwXr7976XKaG2Gt1NkYVO7dfh5MTsjJK87sx7721WlIM4Ypa6TlLpkHpB6D5euw%2BRF7qwmMOpqJcwdVWY%2BMHx8dKjkh4WePocTuuUd%2F3j7%2FRWcRNK5hxX8uHvUb9i56xgEt7iBLa%2FRNjb6qQdUQtjw%2BKnKze%2B73YBaIlTOKlXE2Y2XUN4f2WrnfaHmhiOKowziPBeNexw%2BiwHV9zsNOV3hdFHbCvn3u1L8AAAD%2F%2FwEAAP%2F%2F5OoPDI0EAAA%3D
173.233.137.44200 OK 7 B URL HTTP/1.1 skipdearbeautify.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrP9a2Z6DBISYyS4%2BUES2ZOQ6qrq2XKru5qq7unZ9bIYkYgKI1489n6zmyUaxPwBQpj1IguSHQ9hD%2B7NmwdByFlmdmD1Qb33qr5X8H1f1ecb5QFxUdL961f0mlSKLrSabuONJZlxXdnG1VsNz226ZxtLMmuHZxuDaTL9tz231XTfbLwv2Ipe8F3PdT3Xa1ySRiR6sDBDIfMHXa%2FZdZuh3%2FRaIQbm%2F3tbOrDUAe8fkBch%2BeSZ5V8fQrIxsvSni8KuFDo%2F%2FV5aKlpogz7f%2FjBbyXSVIT1qE%2BMgybbn09B2Qsh3x6Cz7bkC6P7mVAFiOSHOEw9xtj2nibi%2Fdcg0VhAZYv4sqv4YQo0h6RhM34HkewRgHFevIUvvXdWmoquHKJ2iE3Li6T%2BQ1YSc%2BONlZOmPF5QcNG5qVRZSZxaDpIYcjCF7Y%2BTlDoo1B7LaASs%2BheS%2FkYWni8jSzWtWaUi%2B%2F7qXxG1BOT0TiSg%2BEwY%2BO0Onqe0LP%2FBaSdwNxcwiKceQyRhKDEGtg3K6pIMycVDmDlK%2B36CtbuK6nSROgiAKGWNBwFgravMWD8IocVGyqYYhinwIpoZgZh25WceKHMKUj2CXa1juwBYEfV6jEgSVJagoQSUJqoKg6tdbXFnf1ve4smXszas%2Fr0E90kVvg27poicyspEfkBdmxv3V%2FRIrYr8RJRFlPo%2B8uNWiXS%2BMXL%2FFPS7aXERBu%2BvByhrSHpvJXJMT8tJHnyCXe2%2F9jZjuwKodMHkKtHwVtBp1fBd0eRRGLtay%2BzGjLGkynYLrGnlxAsWqs6EOyCszCt34awi2e%2B7x6MnJd%2FJNMFMjNzU%2Blr8Q9NTd0Q1dkc0burLk4bW8kKlco9N3vVnQQhz%2F%2FgOxWmnDL1%2B0w%2Fvn2RSYtg9uCVss0ozLrGfJDxck58Jc0oYJ8vNluyTi66VdvlCarMwXr7976XKaG2Gt1NkYVO7dfh5MTsjJK87sx7721WlIM4Ypa6TlLpkHpB6D5euw%2BRF7qwmMOpqJcwdVWY%2BMHx8dKjkh4WePocTuuUd%2F3j7%2FRWcRNK5hxX8uHvUb9i56xgEt7iBLa%2FRNjb6qQdUQtjw%2BKnKze%2B73YBaIlTOKlXE2Y2XUN4f2WrnfaHmhiOKowziPBeNexw%2BiwHV9zsNOV3hdFHbCvn3u1L8AAAD%2F%2FwEAAP%2F%2F5OoPDI0EAAA%3D
IP 173.233.137.44:0
File type ASCII text, with no line terminators
Hash 132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c
Analyzer Verdict Alert quad9 Sinkholed
GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSz4scRRSuTuIlCsYfFw%2FKHDwoJrP9a2Z6DBISYyS4%2BUES2ZOQ6qrq2XKru5qq7unZ9bIYkYgKI1489n6zmyUaxPwBQpj1IguSHQ9hD%2B7NmwdByFlmdmD1Qb33qr5X8H1f1ecb5QFxUdL961f0mlSKLrSabuONJZlxXdnG1VsNz226ZxtLMmuHZxuDaTL9tz231XTfbLwv2Ipe8F3PdT3Xa1ySRiR6sDBDIfMHXa%2FZdZuh3%2FRaIQbm%2F3tbOrDUAe8fkBch%2BeSZ5V8fQrIxsvSni8KuFDo%2F%2FV5aKlpogz7f%2FjBbyXSVIT1qE%2BMgybbn09B2Qsh3x6Cz7bkC6P7mVAFiOSHOEw9xtj2nibi%2Fdcg0VhAZYv4sqv4YQo0h6RhM34HkewRgHFevIUvvXdWmoquHKJ2iE3Li6T%2BQ1YSc%2BONlZOmPF5QcNG5qVRZSZxaDpIYcjCF7Y%2BTlDoo1B7LaASs%2BheS%2FkYWni8jSzWtWaUi%2B%2F7qXxG1BOT0TiSg%2BEwY%2BO0Onqe0LP%2FBaSdwNxcwiKceQyRhKDEGtg3K6pIMycVDmDlK%2B36CtbuK6nSROgiAKGWNBwFgravMWD8IocVGyqYYhinwIpoZgZh25WceKHMKUj2CXa1juwBYEfV6jEgSVJagoQSUJqoKg6tdbXFnf1ve4smXszas%2Fr0E90kVvg27poicyspEfkBdmxv3V%2FRIrYr8RJRFlPo%2B8uNWiXS%2BMXL%2FFPS7aXERBu%2BvByhrSHpvJXJMT8tJHnyCXe2%2F9jZjuwKodMHkKtHwVtBp1fBd0eRRGLtay%2BzGjLGkynYLrGnlxAsWqs6EOyCszCt34awi2e%2B7x6MnJd%2FJNMFMjNzU%2Blr8Q9NTd0Q1dkc0burLk4bW8kKlco9N3vVnQQhz%2F%2FgOxWmnDL1%2B0w%2Fvn2RSYtg9uCVss0ozLrGfJDxck58Jc0oYJ8vNluyTi66VdvlCarMwXr7976XKaG2Gt1NkYVO7dfh5MTsjJK87sx7721WlIM4Ypa6TlLpkHpB6D5euw%2BRF7qwmMOpqJcwdVWY%2BMHx8dKjkh4WePocTuuUd%2F3j7%2FRWcRNK5hxX8uHvUb9i56xgEt7iBLa%2FRNjb6qQdUQtjw%2BKnKze%2B73YBaIlTOKlXE2Y2XUN4f2WrnfaHmhiOKowziPBeNexw%2BiwHV9zsNOV3hdFHbCvn3u1L8AAAD%2F%2FwEAAP%2F%2F5OoPDI0EAAA%3D HTTP/1.1
Host: skipdearbeautify.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Cookie: u_pl=15481227; uid_id2=1fb6eada-8e8b-432c-a32c-62e2315fb94e:1:1; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Fri, 09 Dec 2022 10:21:06 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 170cd0602f2f07213fe3522b654ec3ef
Strict-Transport-Security: max-age=0; includeSubdomains
www.statcounter.com/counter/counter_xhtml.js
104.20.218.77200 OK 0 B URL HTTP/2 www.statcounter.com/counter/counter_xhtml.js
IP 104.20.218.77:0
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:04 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Wed, 07 Dec 2022 18:38:00 GMT
etag: W/"6390dd88-aa70"
expires: Fri, 09 Dec 2022 18:36:16 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 13488
server: cloudflare
cf-ray: 776d03068e63b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
placehold.it/80x80/333/eee?text=No+Image
172.67.186.216301 Moved Permanently 0 B URL HTTP/2 placehold.it/80x80/333/eee?text=No+Image
IP 172.67.186.216:0
GET /80x80/333/eee?text=No+Image HTTP/1.1
Host: placehold.it
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Fri, 09 Dec 2022 10:21:03 GMT
location: https://www.placeholder.com/80x80/333/eee?text=No+Image
cache-control: max-age=3600
expires: Fri, 09 Dec 2022 11:21:03 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hQdzNujuACKhbaYArdi9vhkTJRae8tntNRKVJplMvZONoYyA5JpgdbHKU%2FWwZFXNTBOeo0B4zgkrjbJjhiPCeWoQ5HrFMRUFcjOjbeZDRL7jK4AWg8lzxaJcjxmOwUU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776d02fe0ec7b4eb-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.blogger.com/comment/frame/4479173902159262778?po=7485043160724785433&hl=en&skin=contempo&blogspotRpcToken=7191763
142.250.74.73200 OK 0 B URL HTTP/2 www.blogger.com/comment/frame/4479173902159262778?po=7485043160724785433&hl=en&skin=contempo&blogspotRpcToken=7191763
IP 142.250.74.73:0
GET /comment/frame/4479173902159262778?po=7485043160724785433&hl=en&skin=contempo&blogspotRpcToken=7191763 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 09 Dec 2022 10:21:03 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-Q3lShM_Vh2AvCAuLAzut4w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
cross-origin-resource-policy: same-site
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: same-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=SqeaGLyljklWu6F8tMwrYSHBMgbiZxX0v8p_MW9J5trCrOdczLOHEo2d7JTZ-xaAZSCVw3GBdZG8NpTcU6O83J45o14NjtxxFnznDrCKdgjzzInhr4PNdiMeU2FJb2pa4vbFNj6Q52bCtipiopPBL4fI0rB2uh7ipsnZL7gLsW8; expires=Sat, 10-Jun-2023 10:21:03 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12544861&u1=0F16F5E42D754FEA8669FED5C1325B6C&java=1&security=60b21eab&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html&t=Ask%20Female%20Tails%20Doll%20-%20Ask%20Pinkamena%20and%20Tails%20Doll%2010%20by%20pinkamenadianecupcak%20on%20DeviantArt&invisible=1&sc_rum_e_s=3294&sc_rum_e_e=3306&get_config=true
104.20.218.77200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12544861&u1=0F16F5E42D754FEA8669FED5C1325B6C&java=1&security=60b21eab&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html&t=Ask%20Female%20Tails%20Doll%20-%20Ask%20Pinkamena%20and%20Tails%20Doll%2010%20by%20pinkamenadianecupcak%20on%20DeviantArt&invisible=1&sc_rum_e_s=3294&sc_rum_e_e=3306&get_config=true
IP 104.20.218.77:0
GET /t.php?sc_project=12544861&u1=0F16F5E42D754FEA8669FED5C1325B6C&java=1&security=60b21eab&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//teganskinner312.blogspot.com/2021/07/ask-female-tails-doll-ask-pinkamena-and.html&t=Ask%20Female%20Tails%20Doll%20-%20Ask%20Pinkamena%20and%20Tails%20Doll%2010%20by%20pinkamenadianecupcak%20on%20DeviantArt&invisible=1&sc_rum_e_s=3294&sc_rum_e_e=3306&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:04 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12544861.1670581264.0; SameSite=None; Secure; Expires=Wednesday, 08-Dec-2027 17:21:04 WIB; Path=/; Domain=.statcounter.com
is_visitor_unique=1670581264390761731; SameSite=None; Secure; Expires=Sunday, 08-Dec-2024 17:21:04 WIB; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://teganskinner312.blogspot.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 776d0306deb3b529-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.placeholder.com/80x80/333/eee?text=No+Image
188.114.97.1403 Forbidden 0 B URL HTTP/2 www.placeholder.com/80x80/333/eee?text=No+Image
IP 188.114.97.1:0
GET /80x80/333/eee?text=No+Image HTTP/1.1
Host: www.placeholder.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://teganskinner312.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Fri, 09 Dec 2022 10:21:03 GMT
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z4fYZtsjaNnvdk%2FWH5Fj2YpprBru1dOwUfArbrNT6PSuWttn7Qx9ky2E2hggfLRcqmstX%2Fp9%2BUmIhmD5rTqGr%2FWghYUTWkJNR8F0wgVpMgJHcbZo2F0%2BNfS%2Fa6ajkPYqNzNFgkks"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 776d02ff4e32b51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.barscreative1.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html
45.133.44.4200 OK 0 B URL HTTP/2 cdn.barscreative1.com/sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html
IP 45.133.44.4:0
ASN #39572 DataWeb Global Group B.V.
Analyzer Verdict Alert fortinet Phishing
GET /sb/au/e1/6f/bb/e16fbbe9f31c82c23d1d57f9726b5fc7/1654616215.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://teganskinner312.blogspot.com
Connection: keep-alive
Referer: https://teganskinner312.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 09 Dec 2022 10:21:06 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Tue, 07 Jun 2022 15:37:00 GMT
etag: W/"629f709c-40e"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Fri, 09 Dec 2022 11:21:06 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2