3.bp.blogspot.com/-5eHfyOhe8Gg/VVP4n18LThI/AAAAAAAACXM/hlMw-pfVNA4/s1600/costco-gas-price-redwood-city-ca-20150512-may12.jpg
142.250.74.161200 OK 298 kB URL GET HTTP/2 3.bp.blogspot.com/-5eHfyOhe8Gg/VVP4n18LThI/AAAAAAAACXM/hlMw-pfVNA4/s1600/costco-gas-price-redwood-city-ca-20150512-may12.jpg
IP 142.250.74.161:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 997x1600, components 3\012- data
Size 298 kB (298267 bytes)
Hash 89d0827f94b24e7902291b1f81314661
7d391b30d9f29178e98ae9b0458f4605ead855bc
326c3278afffca850305bdfa70a33db906cbda22b608328f8b5dbd0029d21423
GET /-5eHfyOhe8Gg/VVP4n18LThI/AAAAAAAACXM/hlMw-pfVNA4/s1600/costco-gas-price-redwood-city-ca-20150512-may12.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v974"
expires: Fri, 08 Dec 2023 03:56:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="costco-gas-price-redwood-city-ca-20150512-may12.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 03:56:15 GMT
server: fife
content-length: 298267
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-tnKux8_bMzg/Vsui2lkQxgI/AAAAAAAAG-w/Bs1OXNM8u2k/s1600/costco-gas-price-redwood-city-ca-20160222-feb22.jpg
142.250.74.161200 OK 460 kB URL GET HTTP/2 3.bp.blogspot.com/-tnKux8_bMzg/Vsui2lkQxgI/AAAAAAAAG-w/Bs1OXNM8u2k/s1600/costco-gas-price-redwood-city-ca-20160222-feb22.jpg
IP 142.250.74.161:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x1456, components 3\012- data
Size 460 kB (460046 bytes)
Hash da3a2b6090621f67d2210a2c24932299
e342e9a381aad1b0cb52b270adc331ba576d4904
42e8a698129516deed68a81aea0624ac56570edb2824ec0eeccec943b08f3352
GET /-tnKux8_bMzg/Vsui2lkQxgI/AAAAAAAAG-w/Bs1OXNM8u2k/s1600/costco-gas-price-redwood-city-ca-20160222-feb22.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v1bed"
expires: Fri, 08 Dec 2023 03:56:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="costco-gas-price-redwood-city-ca-20160222-feb22.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 03:56:15 GMT
server: fife
content-length: 460046
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-98GEgiuCT8g/WS-psiAGmQI/AAAAAAAAMFg/mqeM40oZ6_4EkfvJ6lQIGqb0JLfu-GTgwCLcB/s1600/costco-gas-price-redwood-city-ca-20170531-may31.jpg
142.250.74.161200 OK 410 kB URL GET HTTP/2 3.bp.blogspot.com/-98GEgiuCT8g/WS-psiAGmQI/AAAAAAAAMFg/mqeM40oZ6_4EkfvJ6lQIGqb0JLfu-GTgwCLcB/s1600/costco-gas-price-redwood-city-ca-20170531-may31.jpg
IP 142.250.74.161:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x1329, components 3\012- data
Size 410 kB (409891 bytes)
Hash ebc6c62df26a079d7f4b9624cee25331
ba44ed5ca35c970d7c6148568344f19fb4af9c82
f61a67eca032a5cc4a8e4fc68a8ac20cbb561bcbaa236b69f64d8a213de230c6
GET /-98GEgiuCT8g/WS-psiAGmQI/AAAAAAAAMFg/mqeM40oZ6_4EkfvJ6lQIGqb0JLfu-GTgwCLcB/s1600/costco-gas-price-redwood-city-ca-20170531-may31.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "v3059"
expires: Fri, 08 Dec 2023 03:56:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="costco-gas-price-redwood-city-ca-20170531-may31.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 03:56:15 GMT
server: fife
content-length: 409891
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.cashcarsbuyer.com/wp-content/uploads/2021/01/Costco-Gas-Price-768x512.jpg
192.124.249.19200 OK 94 kB URL GET HTTP/2 www.cashcarsbuyer.com/wp-content/uploads/2021/01/Costco-Gas-Price-768x512.jpg
IP 192.124.249.19:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoDaddy.com, Inc.
Subjectcashcarsbuyer.com
Fingerprint43:72:46:F0:D6:80:7A:5F:37:02:E4:7B:33:11:F4:03:0F:57:A2:A7
ValidityTue, 26 Sep 2023 18:52:13 GMT - Thu, 26 Sep 2024 18:52:13 GMT
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 768x512, components 3\012- data
Hash f44f4725ac7504fea60395f3f3b5b76f
4f6f74eb48d4db635cd2ecf98e22c4e0be4093bd
f2cf286255cd2e80ef9f6ba720fb0bbae539a9efb78349e4b83be03702cfeed4
GET /wp-content/uploads/2021/01/Costco-Gas-Price-768x512.jpg HTTP/1.1
Host: www.cashcarsbuyer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 07 Dec 2023 03:56:15 GMT
content-type: image/jpeg
content-length: 93869
x-sucuri-id: 19019
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
vary: Accept-Encoding
last-modified: Fri, 29 Jan 2021 04:16:35 GMT
accept-ranges: bytes
cache-control: max-age=315360000
expires: Thu, 31 Dec 2037 23:55:55 GMT
x-sucuri-cache: MISS
X-Firefox-Spdy: h2
4.bp.blogspot.com/-HbqSsktmwGM/VV9P9i9n0TI/AAAAAAAACgI/6CKEnDLgnDE/s1600/costco-gas-price-sunnyvale-ca-20150521-may21.jpg
142.250.74.161200 OK 337 kB URL GET HTTP/2 4.bp.blogspot.com/-HbqSsktmwGM/VV9P9i9n0TI/AAAAAAAACgI/6CKEnDLgnDE/s1600/costco-gas-price-sunnyvale-ca-20150521-may21.jpg
IP 142.250.74.161:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectmisc-sni.blogspot.com
Fingerprint07:E2:99:33:66:25:16:0A:1D:C3:C7:18:D8:82:4A:F0:37:40:E1:5B
ValidityMon, 23 Oct 2023 11:23:28 GMT - Mon, 15 Jan 2024 11:23:27 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1397x1600, components 3\012- data
Size 337 kB (337433 bytes)
Hash bb064d004e085f6a1ee3908d6c7b3311
79d15db4d2680ce863c9d3e54bed7487ada7b193
e9cf2a5c541f1d03763d9dd2f872fc9edab9d70988d271782e28946c2e3059b3
GET /-HbqSsktmwGM/VV9P9i9n0TI/AAAAAAAACgI/6CKEnDLgnDE/s1600/costco-gas-price-sunnyvale-ca-20150521-may21.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
etag: "va03"
expires: Fri, 08 Dec 2023 03:56:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="costco-gas-price-sunnyvale-ca-20150521-may21.jpg"
x-content-type-options: nosniff
date: Thu, 07 Dec 2023 03:56:15 GMT
server: fife
content-length: 337433
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
216.58.207.227200 OK 51 kB URL GET HTTP/2 fonts.gstatic.com/s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2
IP 216.58.207.227:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 51404, version 1.0\012- data
Hash b904fcdf1c4c6059fadd6893a7bc7619
f41d1674f02616f03ef77d4e84b3ad8ba28a36fc
517edd119c5b2719e6ac4b30bf1fd864a6395179a41d273c0afc0696e7495d8e
GET /s/robotocondensed/v27/ieVl2ZhZI2eCN5jzbjEETS9weq8-19K7DQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://itkb1378.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 51404
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:22:05 GMT
expires: Fri, 29 Nov 2024 05:22:05 GMT
cache-control: public, max-age=31536000
age: 599651
last-modified: Wed, 18 Oct 2023 17:52:59 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
188.114.97.1200 OK 47 kB URL GET HTTP/3 www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type TrueType Font data, 11 tables, 1st "OS/2", 14 names, Macintosh, type 1 string, the7-default-font\012- data
Hash a227efc2cea70862639686f35af5dc6d
f6321e62a0214d7797643c0698189b8adc53d543
4250b8b052cf68c02281463a74a4ba3f8f749a0c00f2b22141d194b2bae808f2
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.ttf?wi57p5 HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://itkb1378.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://www.bobomama.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:16 GMT
content-type: application/octet-stream
content-length: 46628
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-b624"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Rl1DCs%2BfgRLRUAaTudQ6CSFnF9mtx4s9tVBIIxYSKxgDZelo0%2B8ShLv2K1CJ8QqZ0o70%2BcLJUVqh5hd44JnEBmFdRiKT8%2BmMt%2BbBH7E6uPKSNBrzSAWRhw7ehklpBG4Ae4I%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d679f802413a-LHR
alt-svc: h3=":443"; ma=86400
www.mlive.com/resizer/e_UOOrSZt47JfQuv581eL3SqG-o=/1280x0/smart/advancelocal-adapter-image-uploads.s3.amazonaws.com/image.mlive.com/home/mlive-media/width2048/img/kzgazette/opinion_impact/photo/costcofrontjpg-0660fefc53344bf4.jpg
23.201.43.33200 OK 112 kB URL GET HTTP/2 www.mlive.com/resizer/e_UOOrSZt47JfQuv581eL3SqG-o=/1280x0/smart/advancelocal-adapter-image-uploads.s3.amazonaws.com/image.mlive.com/home/mlive-media/width2048/img/kzgazette/opinion_impact/photo/costcofrontjpg-0660fefc53344bf4.jpg
IP 23.201.43.33:443
ASN #20940 Akamai International B.V.
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerLet's Encrypt
Subjectadvancelocal.web.arc-cdn.net
Fingerprint9A:9E:D6:3B:19:9A:9C:CA:5E:A8:1C:37:23:0C:07:9E:39:E7:6C:63
ValidityFri, 03 Nov 2023 20:33:53 GMT - Thu, 01 Feb 2024 20:33:52 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1280x853, components 3\012- data
Size 112 kB (112365 bytes)
Hash 640022b754595dfd2978e7c8e7e882c9
954246c1c452a0958658304767db48822def82d5
4d383ef61f42e5ec983f787d56fefe49abb941d0d321bd1b86b0bcc5122ea700
GET /resizer/e_UOOrSZt47JfQuv581eL3SqG-o=/1280x0/smart/advancelocal-adapter-image-uploads.s3.amazonaws.com/image.mlive.com/home/mlive-media/width2048/img/kzgazette/opinion_impact/photo/costcofrontjpg-0660fefc53344bf4.jpg HTTP/1.1
Host: www.mlive.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: Akamai Image Server
last-modified: Thu, 01 Jan 1970 00:00:01 GMT
etag: "0700a46cc22aa80ca5006e7d469adac449991d3d"
content-type: image/jpeg
content-length: 112365
cache-control: private, max-age=300
expires: Thu, 07 Dec 2023 04:01:16 GMT
date: Thu, 07 Dec 2023 03:56:16 GMT
set-cookie: arc-geo={"country":"NO","continent":"EU","regioncode":"","city":"OSLO","areacode":"","zipcode":"","timezone":"GMT+1","network":"","networktype":"","bandwidth":"5000"}; path=/
server-timing: cdn-cache; desc=MISS, edge; dur=538, origin; dur=400, ak_p; desc="1701921375423_399059741_1012043731_93772_12073_8_39_11";dur=1
content-security-policy: upgrade-insecure-requests, upgrade-insecure-requests
referrer-policy: no-referrer-when-downgrade
x-arc-request-id: 0.1d2bc917.1701921375.3c528fd3
akamai-true-ttl: 300
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-player.css
142.250.74.46200 OK 49 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-player.css
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 18f844aa571ef66c0f165fe56a2f0821
849c61720b741db03f689c461e8e4eedd3c4ce21
436743ad0889ad9399a1f33edb65d8bf1c71cfbce1b0fce549769e7705c9ceec
GET /s/player/31e0b6d9/www-player.css HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 48920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 23:02:02 GMT
expires: Wed, 04 Dec 2024 23:02:02 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/css
vary: Accept-Encoding, Origin
age: 104054
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
142.250.74.46200 OK 16 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/embed.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (3391)
Hash 4b993df6aaec92ba17cc4d526ad2e4bd
a0b696788d5d621280e4f642b4c66875d40870cb
f21a803f0b7f63109cd608bfbe9769a3dc2e2a17c8e885826529d3981d15d313
GET /s/player/31e0b6d9/player_ias.vflset/en_US/embed.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 16506
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 04:48:32 GMT
expires: Wed, 04 Dec 2024 04:48:32 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 169664
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 07:31:13 GMT
expires: Wed, 04 Dec 2024 07:31:13 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 159903
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
142.250.74.46200 OK 98 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (682)
Hash 24cd2bdc1dd00086a1efbc664060bb49
064027f89f2e8f22be774e7468f7ae4ab79efcbc
4d453a47ad0d1b30a7292b6f712d8645db141ed6adea69b8e7d802f8022365fd
GET /s/player/31e0b6d9/www-embed-player.vflset/www-embed-player.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 98499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 06:09:53 GMT
expires: Wed, 04 Dec 2024 06:09:53 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 164783
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL GET HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 03:26:41 GMT
expires: Wed, 04 Dec 2024 03:26:41 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 174575
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5
188.114.97.1200 OK 47 kB URL GET HTTP/3 www.bobomama.eu/wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type Web Open Font Format, TrueType, length 46704, version 2.0\012- data
Hash f2532fedbf266540bb4314c8da160e81
b24b3a92173eea8191e6600b47f913295025be88
59802ec349c014c0bf9df20a55e98f1484b4685703805a662615afef5c894eef
GET /wp-content/themes/dt-the7/fonts/icomoon-the7-font/icomoon-the7-font.woff?wi57p5 HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://itkb1378.bobomama.eu
DNT: 1
Connection: keep-alive
Referer: https://www.bobomama.eu/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:16 GMT
content-type: font/woff
content-length: 46704
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-b670"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xpspMu3l7V6jmO%2Fa%2FZiaoCU6F4dyFM6XWtjo7bs%2Fm1GYU5Ci3iihNqurKtzZvD6MYas%2FToYCzY4KOVj%2BAEk6DjWygJQGwll%2BaD1xp%2BX3Dc5bcV88wKa5g5h8KHNM3Bx1eeo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67d09c9413a-LHR
alt-svc: h3=":443"; ma=86400
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
142.250.74.46200 OK 784 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/base.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (555)
Size 784 kB (784263 bytes)
Hash 101fe6d09a2a65ba52bbafa55f73d316
46b1b5f64db74e841d0f606543980dea804707d8
ddc70bebc8a0e4ae5b13a5f8409693a3e88aa4b4415a75f632f11d0f0c423457
GET /s/player/31e0b6d9/player_ias.vflset/en_US/base.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-encoding: gzip
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 784263
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 11:54:09 GMT
expires: Wed, 04 Dec 2024 11:54:09 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 144127
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
142.250.74.35200 OK 9.3 kB URL GET HTTP/2 www.gstatic.com/firebasejs/10.3.1/firebase-app-compat.js
IP 142.250.74.35:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (28368)
Hash 9900403b65514fad7df39a4e788a6e45
75f9ba061ef4e72bb23528c700f2a11c56d637e9
a202b2051ea9810cd9ba592b3f9418a89e2062f5c185e29e288080b28eb64fe5
GET /firebasejs/10.3.1/firebase-app-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9308
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 05 Dec 2023 08:48:47 GMT
expires: Wed, 04 Dec 2024 08:48:47 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 31 Aug 2023 15:20:38 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 155250
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
itkb1378.bobomama.eu/favicon.ico
188.114.97.1200 OK 0 B URL GET HTTP/3 itkb1378.bobomama.eu/favicon.ico
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:17 GMT
content-type: image/x-icon
content-length: 0
last-modified: Wed, 24 May 2023 19:14:36 GMT
etag: "646e621c-0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bQu7ZjZypBOQYiawDCIthTguzglwxacF6RZ4f6%2BXnKclmYbJ1jFRbHNpGV%2FyF5XEm3QJnnlnjscPi3G1wqh7i3HslgsPPP2gmIUgLE7y2UwYiBGVlLzT%2FDUmfq2s3zeUCyrgDZ7wWA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67f1ad1413a-LHR
alt-svc: h3=":443"; ma=86400
itkb1378.bobomama.eu/cloudflare_bot.png
188.114.97.1200 OK 10 kB URL GET HTTP/3 itkb1378.bobomama.eu/cloudflare_bot.png
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type PNG image data, 457 x 302, 8-bit/color RGBA, non-interlaced\012- data
Hash 37bd13d5c7731bbba1d7b9abb64832a1
0c8a4cfd75ed0ae99a22a7f352d3044a129549cc
d6197af0d65fd9492e6087e8d7157a185f19ff6bfe519c58d03ad03632cbc616
GET /cloudflare_bot.png HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:17 GMT
content-type: image/png
content-length: 10050
last-modified: Fri, 07 Jul 2023 16:49:33 GMT
etag: "64a8421d-2742"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0XSpobqwTQUmPcQNjLLr9Bjpu5oz4MC1fymzIDWiWFAQsGaAB8n9FzcIlpCAPtvB94pjCwMa4d0PqaoTE79Pmf9gPZ6Ngr%2BGK5oot9MFlZdXS0WcOlSyCkM7sSKjjVwvQ%2BYme1K%2FGw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67fcb30413a-LHR
alt-svc: h3=":443"; ma=86400
itkb1378.bobomama.eu/prize_en.png
188.114.97.1200 OK 112 kB URL GET HTTP/3 itkb1378.bobomama.eu/prize_en.png
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type PNG image data, 934 x 617, 8-bit/color RGBA, non-interlaced\012- data
Size 112 kB (112349 bytes)
Hash ae783b2d4017d6617b4114e0e446e730
0017b17613118e786a05ff9893085ca3e30a0d7e
8f4492a3741b568b9efcc9e4a2794a03c81a30efab19596dad06841e4a293fc5
GET /prize_en.png HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:17 GMT
content-type: image/png
content-length: 112349
last-modified: Thu, 17 Aug 2023 17:17:13 GMT
etag: "64de5619-1b6dd"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kBjH4m7MZ6kMcx7eqlmfPMk2eYE86nMPNN%2FH4POhGjeS%2BCSFfGi9KDhcOA%2B3PGgKfsXZkVcDYGql3akpfHJ8QswxZz4Nywsngh857tlrf4IIJT4Hv%2Bo7QA4NLuhwCIvJsyzJqwr2Jw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67fcb32413a-LHR
alt-svc: h3=":443"; ma=86400
www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
142.250.74.35200 OK 9.9 kB URL GET HTTP/3 www.gstatic.com/firebasejs/10.3.1/firebase-messaging-compat.js
IP 142.250.74.35:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type ASCII text, with very long lines (38231)
Hash 0541b823dfaf39162ef84cf075c9951b
e0934726455558cc1a59823efada9651e33aafaa
21f1d62f222007068c793f0947d98f4ccb7c1595adb68efeb783390fdd8b5522
GET /firebasejs/10.3.1/firebase-messaging-compat.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/firebase-js
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="firebase-js"
report-to: {"group":"firebase-js","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/firebase-js"}]}
content-length: 9934
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 30 Nov 2023 05:05:32 GMT
expires: Fri, 29 Nov 2024 05:05:32 GMT
cache-control: public, max-age=31536000
age: 600645
last-modified: Thu, 31 Aug 2023 15:20:50 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.42200 OK 0 B URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.42:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 07 Dec 2023 03:56:17 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
142.250.74.42200 OK 41 kB URL OPTIONS HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP 142.250.74.42:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 97ed5e3ff3800a566525f8805a37bd34
ceac6a34152b7a0c239bcb2ae8d050bfed99bae5
9f1cbaad7b3ba9cffe31fe227cfdf64251b996b7fe1c5ff27f1ea34995cfb2cc
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 07 Dec 2023 03:56:17 GMT
server: ESF
cache-control: private
content-length: 40672
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
142.250.74.46200 OK 34 kB URL GET HTTP/3 www.youtube.com/s/player/31e0b6d9/player_ias.vflset/en_US/remote.js
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type ASCII text, with very long lines (537)
Hash 63aa8296f70f3dcbf8b5df6faf8d46c3
2494976b44b1d3ec3b5825297e243679e7cca1dd
869da04350e0925de923dd2c39c41d18ba0625e3541bd5059ed5a611550552b6
GET /s/player/31e0b6d9/player_ias.vflset/en_US/remote.js HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
content-length: 33484
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 04 Dec 2023 22:03:24 GMT
expires: Tue, 03 Dec 2024 22:03:24 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 30 Nov 2023 03:10:29 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 193974
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
i.ytimg.com/vi/ZxfVnuRUpUk/sddefault.jpg
142.250.74.54200 OK 65 kB URL GET HTTP/2 i.ytimg.com/vi/ZxfVnuRUpUk/sddefault.jpg
IP 142.250.74.54:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectedgestatic.com
FingerprintC8:30:4C:1A:A8:FF:83:E1:A2:7F:DB:02:8C:D9:05:46:C4:D6:CA:95
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash c9ef94608e93e7f69d5a4733a85242d3
3c231072f6852b5fcd4670790e82a5375228540e
99637e373f30942dd2955c79037e1d04fd587770b091d1e5f3b13ce3e9184638
GET /vi/ZxfVnuRUpUk/sddefault.jpg HTTP/1.1
Host: i.ytimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
vary: Origin
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="youtube"
report-to: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
timing-allow-origin: *
content-length: 64868
date: Thu, 07 Dec 2023 03:56:18 GMT
expires: Thu, 07 Dec 2023 05:56:18 GMT
cache-control: public, max-age=7200
etag: "1646855567"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js
142.250.74.132200 OK 20 kB URL GET HTTP/2 www.google.com/js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js
IP 142.250.74.132:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectwww.google.com
FingerprintB0:8E:97:10:7E:30:90:F6:42:A1:32:63:5C:78:27:D3:A8:F1:05:D1
ValidityMon, 23 Oct 2023 11:24:57 GMT - Mon, 15 Jan 2024 11:24:56 GMT
File type ASCII text, with very long lines (50467)
Hash 02ef8df4172d6fad17d1bf1142bfc1d1
3baa1986da7954c8f577eac04b1f4af063e8d58a
52100762441ce7d48c9b720b42f5f62d5f691ed5e6fede874f4eb0dc327ecd3f
GET /js/th/UhAHYkQc59SMm3ILQvX2LV9pHtXm_t6HT06w3DJ-zT8.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 19757
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 06 Dec 2023 14:36:41 GMT
expires: Thu, 05 Dec 2024 14:36:41 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Nov 2023 18:30:00 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 47977
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
yt3.ggpht.com/ytc/APkrFKacTz1F_EKeYQA9X4OKFh4wMYp2ChukXTLaAHxVnA=s68-c-k-c0x00ffffff-no-rj
142.250.74.161200 OK 4.1 kB URL GET HTTP/2 yt3.ggpht.com/ytc/APkrFKacTz1F_EKeYQA9X4OKFh4wMYp2ChukXTLaAHxVnA=s68-c-k-c0x00ffffff-no-rj
IP 142.250.74.161:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.googleusercontent.com
Fingerprint2E:01:38:64:37:3C:F9:F4:3C:95:49:F1:9E:D9:61:5F:63:48:CF:CE
ValidityMon, 23 Oct 2023 11:23:50 GMT - Mon, 15 Jan 2024 11:23:49 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 68x68, components 3\012- data
Hash 815a1fb906189997a82990948b8a1648
d7406c133198240c3c8770d806a3e49d20f381a8
515408a234458706a1be238fd4087de02542ccebfc88ad22a09e904691928cb9
GET /ytc/APkrFKacTz1F_EKeYQA9X4OKFh4wMYp2ChukXTLaAHxVnA=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
Host: yt3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
access-control-allow-origin: *
timing-allow-origin: *
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
x-content-type-options: nosniff
server: fife
content-length: 4141
x-xss-protection: 0
date: Thu, 07 Dec 2023 02:11:44 GMT
expires: Fri, 08 Dec 2023 02:11:44 GMT
cache-control: public, max-age=86400, no-transform
age: 6274
etag: "v1dfa"
content-type: image/jpeg
vary: Origin
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.42200 OK 0 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.42:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 07 Dec 2023 03:56:18 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
142.250.74.42200 OK 114 B URL POST HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP 142.250.74.42:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type JSON data\012- , ASCII text, with no line terminators
Hash ef6cc4b44c2eca6caffe221497f2b568
fe4635e5f8c6e2fbfd0dda424313601a64d86f15
d536e5d481542553a3bd472732a4e50276804322beafd1b70d6c5a08698f79f1
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1184
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 07 Dec 2023 03:56:18 GMT
server: ESF
cache-control: private
content-length: 114
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.youtube.com/generate_204?kzG7Rw
142.250.74.46204 No Content 0 B URL GET HTTP/3 www.youtube.com/generate_204?kzG7Rw
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /generate_204?kzG7Rw HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 204 No Content
content-length: 0
cross-origin-resource-policy: cross-origin
date: Thu, 07 Dec 2023 03:56:18 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.46200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701921386918
Content-Type: application/json
X-Goog-Visitor-Id: Cgs2UDlaNTR0cms4SSjghMWrBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701921383979&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C377%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 16602
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 07 Dec 2023 03:56:20 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+684; expires=Sat, 06-Dec-2025 03:56:20 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 03:56:20 GMT
cache-control: private
www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
142.250.74.46200 OK 31 B URL POST HTTP/3 www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
IP 142.250.74.46:443
Requested by https://www.youtube.com/embed/ZxfVnuRUpUk
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
File type JSON data\012- , ASCII text
Hash 5e1fa6fd9abd549a576f3f24b1d3c8d4
d5335d7f7d33be6a0b663f03b2df4df2521c4a87
d7d5e54ad1e33d7ab49c664323ced79cb9723ff15e9764cd0edc3e15208e8336
POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Request-Time: 1701921398161
Content-Type: application/json
X-Goog-Visitor-Id: Cgs2UDlaNTR0cms4SSjghMWrBjIICgJOTxICEgA%3D
X-YouTube-Client-Name: 56
X-YouTube-Client-Version: 1.20231128.01.01
X-YouTube-Utc-Offset: 0
X-YouTube-Time-Zone: UTC
X-YouTube-Ad-Signals: dt=1701921383310&flash=0&frm=2&u_tz&u_his=2&u_h=1024&u_w=1280&u_ah=1024&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C1024%2C377%2C315&vis=1&wgl=true&ca_type=image
Content-Length: 856
Origin: https://www.youtube.com
DNT: 1
Connection: keep-alive
Referer: https://www.youtube.com/embed/ZxfVnuRUpUk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/json; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: br
date: Thu, 07 Dec 2023 03:56:31 GMT
server: scaffolding on HTTPServer2
content-length: 31
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+685; expires=Sat, 06-Dec-2025 03:56:31 GMT; path=/; domain=.youtube.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 07 Dec 2023 03:56:31 GMT
cache-control: private
www.bobomama.eu/wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css
188.114.97.1200 OK 1.2 MB URL GET HTTP/3 www.bobomama.eu/wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Size 1.2 MB (1178455 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /wp-content/cache/autoptimize/css/autoptimize_b116041862ab1ae5d7a0e38a5238e3d9.css HTTP/1.1
Host: www.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:15 GMT
content-type: text/css
last-modified: Wed, 24 May 2023 19:14:36 GMT
vary: Accept-Encoding
etag: W/"646e621c-11fb57"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
cf-cache-status: HIT
age: 480
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rxMMtqklmRKzFrc1JuxRgUfyP%2Fu6s8ZbYWiF8tiVGE9Zn%2FNu7aEG2ZNve1oTBO3uGzhol2qJTsAMs16D4YPrWoQmg3hceWF87wI9XBynvf31aHypqJdpWLAvH2DIPRWvME0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d6735c4e413a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap
142.250.74.106200 OK 33 kB URL GET HTTP/2 fonts.googleapis.com/css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap
IP 142.250.74.106:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
FingerprintCC:96:E0:52:E0:9B:EA:A9:A0:F8:88:9A:90:20:11:47:61:00:3C:42
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
Hash 8854e84fbf1ab6f5513807882df2c9ec
658c91128c5615c5c1bd502be170822867e0d693
29cf76b0ac03b653b3ad6898eb0a95e40f6c32231e14653c5ed2a6b74c37f1d9
GET /css?family=Roboto%3A400%2C600%2C700%7CRoboto+Slab%3A400%2C600%2C700%7CRoboto+Condensed%3A400%2C600%2C700%7COswald:700%2C300%7CRoboto:400%2C700%7CRoboto+Condensed%3A300%2C300italic%2Cregular%2Citalic%2C700%2C700italic&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 07 Dec 2023 03:56:15 GMT
date: Thu, 07 Dec 2023 03:56:15 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
itkb1378.bobomama.eu/xyiktht.js?get=1&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.5196198015061297
188.114.97.1200 OK 1.4 kB URL GET HTTP/3 itkb1378.bobomama.eu/xyiktht.js?get=1&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.5196198015061297
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type HTML document, ASCII text, with very long lines (1509), with no line terminators
Hash 49f71258c28285b8ecc04858a9af23cf
f58f12216ecbe181d590986f792c0fd03545b58c
c23973b413a2ab126073b47f68c4805843c7d1977a608a15dcd883f710c85c42
GET /xyiktht.js?get=1&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.5196198015061297 HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:17 GMT
content-type: application/javascript
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:56:17 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sHgZAok9nVLC3JgUYDNDLxJfbjvE%2BiziwZs%2BoERR56Uzx1HCUgtFh4INpquVBm0YqYjql4qe08mKQI8Cue1jw5CX49dGXSvsV3Skv9Gu%2FrpX3EB48Q%2F0zThZ4a8bm%2BvejS9V6NpglQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d67e6a8a413a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
188.114.97.1200 OK 41 kB URL User Request GET HTTP/2 IP 188.114.97.1:443
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:56:14 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6Kn0E646vZ%2F7BqX9OQFGaD5%2BprjT47huF%2BZe3571TcjlVTZb2cW41kpyKAub3iJxe5xsysW0gNjx%2BAwaa871cV61SC%2B434F3j3KVxLKbqSMHHzJJ43lepPYJpeStCrvoh5CcKYkaZg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d66f7dca7702-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
nxt-psh.com/ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A
172.67.194.119200 OK 360 B URL GET HTTP/2 nxt-psh.com/ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A
IP 172.67.194.119:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectnxt-psh.com
Fingerprint94:51:87:1F:CB:41:39:32:6B:DB:A1:60:02:36:C8:8E:F3:1E:A5:B5
ValiditySun, 22 Oct 2023 10:39:04 GMT - Sat, 20 Jan 2024 10:39:03 GMT
File type ASCII text, with very long lines (376), with no line terminators
Hash a3090b286c4b4c3e8f4466fe310ab971
167ab67f26cb1ee7a23572c369473d12642e9098
245a0da99f5a0430b63bd180f24e59ea46895d3c7a3a84794a2937cb7c7f9398
GET /ps/config.js?id=ynNaO0dc2EWSQnX-_cGx5A HTTP/1.1
Host: nxt-psh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:56:16 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=d134066c-6309-4faa-b812-66b2999ec67b; expires=Sun, 07 Dec 2025 03:56:16 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tY9cRLU%2BdqrppKMestAb1wI1yBO3Znu8SZxMyXw1Iaq9essX46hOO4OzYYGEvYyCHp4XjRlp%2FX4TgsGZul9SuuwmvFg%2Fbmy5TqLcTOmbFkS%2BH9VQgpD0yVDgj4WcIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67a88d9dcc7-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
js.streampsh.top/ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A
172.67.172.12200 OK 34 kB URL GET HTTP/2 js.streampsh.top/ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A
IP 172.67.172.12:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint02:54:95:46:BF:81:7A:AE:A7:E6:B7:1E:1A:22:51:FB:44:E3:DC:7E
ValiditySat, 25 Mar 2023 00:00:00 GMT - Sat, 23 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ps/ps.js?id=ynNaO0dc2EWSQnX-_cGx5A HTTP/1.1
Host: js.streampsh.top
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 07 Dec 2023 03:56:15 GMT
content-type: application/javascript
cache-control: max-age=0, no-cache, no-store, must-revalidate
cf-cache-status: BYPASS
set-cookie: __psu=8eb267bd-cba2-4096-a5f3-79a12486cb99; expires=Sun, 07 Dec 2025 03:56:15 GMT; path=/; secure; samesite=none
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WMJk3VglqphxLlxPY5VUW6xiNbYR0cODgwJH0BjxZN%2BNmXyJ7x6zJaFx76QPzb7emLiG%2BIMrjKfVxOnjWwpq8emZqptw6UKhgsaVCEqNNNzCIBdk9%2BIXIuPuLMnr1tHHFzhK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d674083c63a0-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.youtube.com/embed/ZxfVnuRUpUk
142.250.74.46200 OK 94 kB URL GET HTTP/2 www.youtube.com/embed/ZxfVnuRUpUk
IP 142.250.74.46:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subject*.google.com
Fingerprint4C:0D:17:8C:F1:30:7C:3A:6F:9B:8E:B4:83:0E:5C:BD:ED:17:3E:95
ValidityMon, 23 Oct 2023 11:18:24 GMT - Mon, 15 Jan 2024 11:18:23 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/ZxfVnuRUpUk HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 07 Dec 2023 03:56:16 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
origin-trial: AvC9UlR6RDk2crliDsFl66RWLnTbHrDbp+DiY6AYz/PNQ4G4tdUTjrHYr2sghbkhGQAVxb7jaPTHpEVBz0uzQwkAAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTcxOTUzMjc5OSwiaXNTdWJkb21haW4iOnRydWV9
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=PzzHNEAyL5A; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=6P9Z54trk8I; Domain=.youtube.com; Expires=Tue, 04-Jun-2024 03:56:16 GMT; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_PRIVACY_METADATA=CgJOTxICEgA%3D; Domain=.youtube.com; Expires=Tue, 04-Jun-2024 03:56:16 GMT; Path=/; Secure; HttpOnly; SameSite=lax
CONSENT=PENDING+108; expires=Sat, 06-Dec-2025 03:56:16 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
itkb1378.bobomama.eu/puimgso.js?0.3849102829277793&q=costco+gas+prices+miami
188.114.97.1200 OK 1.2 kB URL GET HTTP/3 itkb1378.bobomama.eu/puimgso.js?0.3849102829277793&q=costco+gas+prices+miami
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type ASCII text, with very long lines (1197), with no line terminators
Hash 3e3f92eea2f0edf22288412aee8cd0f6
787bbf511e91c1b7dc999c7bbb67097187f35319
0b98f8f616b53da1069ed66d7ea4a8177bf9e9ad5a7c0753aeb836f20b46ad7a
GET /puimgso.js?0.3849102829277793&q=costco+gas+prices+miami HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:16 GMT
content-type: application/javascript
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
access-control-allow-origin: *
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:56:16 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wYiDgjmJyyK92gijbgI%2BKK6s7%2FZZ7bWKdtSNldo4RFwnjJzXe%2FKyXi3Js%2Fq4cmiURwRpMXDgTgcmzZQBkw8mLeg3hlHF77tQ%2Becn1S%2BoPLA%2BVYYJcIibYhaDhMVGaWgqS%2B%2FRfcMh7A%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d679dff1413a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
itkb1378.bobomama.eu/2575868.css?1701921374
188.114.97.1200 OK 839 B URL GET HTTP/3 itkb1378.bobomama.eu/2575868.css?1701921374
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type ASCII text, with very long lines (931), with no line terminators
Hash 21a3e432e9751b4990f1405756aadb8e
9bde17a301a140f3c43562c54f3e5157a47774ee
0483a30c5cd96ef23f8561d26b1f02dd77d332cdeb3923767114a836045746d1
GET /2575868.css?1701921374 HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
date: Thu, 07 Dec 2023 03:56:15 GMT
content-type: text/css;charset=UTF-8
vary: Accept-Encoding
x-powered-by: PHP/8.1.20
cache-control: max-age=14400
cf-cache-status: MISS
last-modified: Thu, 07 Dec 2023 03:56:15 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=etV5SITOTmT%2BgRNY6OGwyx6FPfpUjZmGK6uziGaZjzX%2F6eZumpzSqsY%2FnHX2XhO1Igaqz3AxZb0bN%2FVdhxy4NTkBRRaj8KF5Pcb7K5U0G2Xl5YiD%2BwgjjavEv2q6FmYUtEBFbkQ9WQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 8319d6735c4d413a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400
itkb1378.bobomama.eu/tnrkmrh.gif?ref=&url=https%3A//itkb1378.bobomama.eu/&scr=1280x1024&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.8055598089012069
188.114.97.1404 Not Found 209 B URL GET HTTP/3 itkb1378.bobomama.eu/tnrkmrh.gif?ref=&url=https%3A//itkb1378.bobomama.eu/&scr=1280x1024&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.8055598089012069
IP 188.114.97.1:443
Requested by https://itkb1378.bobomama.eu/
Certificate IssuerGoogle Trust Services LLC
Subjectbobomama.eu
Fingerprint05:4E:B1:BD:9C:AE:ED:BD:34:9A:2B:F5:4A:F2:5D:FC:4F:85:E9:83
ValidityWed, 01 Nov 2023 14:08:49 GMT - Tue, 30 Jan 2024 14:08:48 GMT
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash c05bc3e366779687a060e11b1065c8e8
a5cf62dbacebd4c8987920dc305f349944a5be4e
8ad3362e929dc5f430c6099759693988f7f691c6949e12d564684b158a816868
GET /tnrkmrh.gif?ref=&url=https%3A//itkb1378.bobomama.eu/&scr=1280x1024&q=costco%20gas%20prices%20miami&s=&ua=Mozilla/5.0%20(Windows%20NT%2010.0;%20Win64;%20x64;%20rv:105.0)%20Gecko/20100101%20Firefox/105.0&0.8055598089012069 HTTP/1.1
Host: itkb1378.bobomama.eu
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://itkb1378.bobomama.eu/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 404 Not Found
date: Thu, 07 Dec 2023 03:56:16 GMT
content-type: text/html; charset=iso-8859-1
cache-control: max-age=14400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vqL9tYSfeBK0I9X1ADYql1dPxfGnrxh1bwOf8uhlCBLyIGBzYGd4zKOP8QrEbBuAI%2Fb%2BGUBZYqP77UG10IlUEkUMYyH3v8%2FgWVxY6qS5Awierfom1Ej0om2GtgwNs8Qki4lM6jHyIA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8319d67ce9bb413a-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400