Report - laura-pieces-of-beauty.blogspot.com/search/label/james%20denton

Report Overview

Submitted URL

laura-pieces-of-beauty.blogspot.com/search/label/james%20denton
IP

172.217.21.161

ASN

#15169 GOOGLE
Submitted

2022-12-06T02:58:25Z

Access
Website Title
Final URL
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

2

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
4.bp.blogspot.com (11)	11215	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4270	313013	142.250.74.161
adserver.juicyads.com (2)	36249	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	862	950	185.94.236.246
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3245	64267	34.120.237.76
r3.o.lencr.org (6)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2028	5316	23.36.77.32
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	796	2374	34.102.187.140
resources.blogblog.com (1)	13274	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	438	937	216.58.207.233
apis.google.com (2)	105	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	938	80772	172.217.21.174
www.blogblog.com (1)	28878	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	337	682	216.58.207.233
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
ajax.googleapis.com (1)	12905	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	329	33153	142.250.74.138
laura-pieces-of-beauty.blogspot.com (3)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1117	52856	172.217.21.161
2.bp.blogspot.com (6)	11071	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2316	138324	142.250.74.161
ocsp.pki.goog (5)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1715	3499	142.250.74.131
www.blogger.com (3)	8975	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1349	67396	216.58.207.233
pagead2.googlesyndication.com (1)	101	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	330	656	142.250.74.162
1.bp.blogspot.com (8)	8403	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3104	227296	142.250.74.161
3.bp.blogspot.com (14)	11048	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5457	440298	142.250.74.161
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	35.160.184.41
ocsp.digicert.com (2)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	682	1594	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5843	34.160.144.191

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	laura-pieces-of-beauty.blogspot.com/search/label/james%20denton	Malware
2022-12-06	medium	laura-pieces-of-beauty.blogspot.com/js/cookienotice.js	Malware

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

HTTP Transactions (77)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

cfec3d7283a9b66d2be426ce54d210f3

808c1feb1ba918951d1928c1f6bfc0c253262774

1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3865
Expires: Tue, 06 Dec 2022 04:02:38 GMT
Date: Tue, 06 Dec 2022 02:58:13 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

ee088fab9b287e174cfd1f2c735a909f

25c3335b514a36ad1a24d00413d60c3d394f5161

494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5170
Cache-Control: max-age=118756
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:13 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:57:29 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1ea206ac3c440825741687351f8c6e4e

2f38dafd8c43dcce2411a0590bc5c02cd6286735

7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2704
Expires: Tue, 06 Dec 2022 03:43:17 GMT
Date: Tue, 06 Dec 2022 02:58:13 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

14cd9a0afb6ba9a763651d5112760d1e

75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 02:18:33 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2380
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

53341dea33f4f3d9b4966f80589f429a

20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d

651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: 27WpaEiT4wmIUAAFONh4wz6wBJxPRrYJxMGVDvV9LtG1VdVefrkCqrZdknzYRUkmwhkQCpO3JkA=
x-amz-request-id: G84604R326HB8M3Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 02:46:56 GMT
age: 677
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 02:58:13 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js

142.250.74.138

200 OK

32245

URL HTTP/1.1

ajax.googleapis.com/ajax/libs/jquery/1.6.2/jquery.min.js
IP

142.250.74.138:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32764)

Size

32245
Hash

548260b20981c0be2d9dcf8d01c08c24

84230120f8f1bd559eca3fb2fec6acf6cffbf4e7

2f8a612a714e5c928525fdb193f8ec12f7965a6c0d63dd8e58ccae239358c8bb

HTTP Headers

                                        GET /ajax/libs/jquery/1.6.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 32245
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 05 Dec 2022 10:15:12 GMT
Expires: Tue, 05 Dec 2023 10:15:12 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 60182

laura-pieces-of-beauty.blogspot.com/search/label/james%20denton

172.217.21.161

200 OK

48941

URL HTTP/1.1

laura-pieces-of-beauty.blogspot.com/search/label/james%20denton
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15019)

Size

48941
Hash

d2edd8a7bf50f1eef6650fc846ef5688

3da7e697988c27e33241ef64a564de2a6e919bb0

3e293c535dd1d64e835dc3914f86d364b58d711b1eceb76cbf2bf8da0daebebb

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

                                        GET /search/label/james%20denton HTTP/1.1
Host: laura-pieces-of-beauty.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 06 Dec 2022 02:58:14 GMT
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 29 Nov 2022 23:30:12 GMT
ETag: W/"72f8fedd7f8f7d1e4d17474c9d444dc035bbda0c173dc169bb7cd248d1262ca2"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 48941
Server: GSE

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css

216.58.207.233

200 OK

7776

URL HTTP/2

www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (35959)

Size

7776
Hash

5aa2d3297bdc86bc81322aedecbb5e79

1c0a3c007e41726e167e79b70ddea76198650884

feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630

HTTP Headers

                                        GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 21:47:53 GMT
expires: Wed, 29 Nov 2023 21:47:53 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 29 Nov 2022 20:52:41 GMT
content-type: text/css
age: 537021
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1e5e51fbc58282a2410de240a13bac3d

03e7151c23e4ed5efc5a4415fc5dcb01f0d5e019

ad20d69cf3f84ec6bee56a570acbce60d0ade6bdf201397a1de2417fed11b3fd

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

resources.blogblog.com/img/icon18_edit_allbkg.gif

216.58.207.233

200 OK

162

URL HTTP/2

resources.blogblog.com/img/icon18_edit_allbkg.gif
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

GIF image data, version 89a, 18 x 18\012- data

Size

162
Hash

c991641178ff05adf0d004298b5eafa9

d8f6ce8ecd92b86d49849360f6b81ceb10b4c941

ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b

HTTP Headers

                                        GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:19:01 GMT
expires: Tue, 06 Dec 2022 14:19:01 GMT
cache-control: public, max-age=604800
last-modified: Mon, 28 Nov 2022 19:53:31 GMT
content-type: image/gif
age: 563953
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

apis.google.com/js/platform.js

172.217.21.174

200 OK

20984

URL HTTP/2

apis.google.com/js/platform.js
IP

172.217.21.174:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1279)

Size

20984
Hash

7ac44ef24e267df17ff72f195b252806

62db12d9ce11a576ccd7fa3544d851c5fd42f3b7

aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61

HTTP Headers

                                        GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Tue, 06 Dec 2022 02:58:14 GMT
expires: Tue, 06 Dec 2022 02:58:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

laura-pieces-of-beauty.blogspot.com/js/cookienotice.js

172.217.21.161

200 OK

2026

URL HTTP/1.1

laura-pieces-of-beauty.blogspot.com/js/cookienotice.js
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

ASCII text

Size

2026
Hash

c4e1ed83d89245089b8a1203be20a377

f3940e1215b89300ef97d57a25993f25243b8688

afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Detections

Analyzer	Verdict	Alert
fortinet	Malware

HTTP Headers

                                        GET /js/cookienotice.js HTTP/1.1
Host: laura-pieces-of-beauty.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/search/label/james%20denton

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 14:44:40 GMT
Expires: Tue, 06 Dec 2022 14:44:40 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 29 Nov 2022 12:51:31 GMT
Content-Type: text/javascript
Age: 562414

4.bp.blogspot.com/-9v8nlepRFKY/T0icjB-lEII/AAAAAAAAmfw/YNs2YIbgO_Y/s72-c/BayaningPilipino2011.jpg

142.250.74.161

200 OK

4594

URL HTTP/1.1

4.bp.blogspot.com/-9v8nlepRFKY/T0icjB-lEII/AAAAAAAAmfw/YNs2YIbgO_Y/s72-c/BayaningPilipino2011.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

4594
Hash

80e5d14a3f55a4457ab37bf100364731

b4a76679a13d0440cc3f3781b2e5f9bead19f393

44d0c37c0154e57f542505ad80144bb7a9bcf3aa4d4050546009a4bf77522c69

HTTP Headers

                                        GET /-9v8nlepRFKY/T0icjB-lEII/AAAAAAAAmfw/YNs2YIbgO_Y/s72-c/BayaningPilipino2011.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="BayaningPilipino2011.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4594
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 02:58:14 GMT
Expires: Mon, 05 Dec 2022 10:49:10 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v99fc"
Content-Type: image/jpeg
Age: 0

www.blogger.com/static/v1/widgets/2342155703-widgets.js

216.58.207.233

200 OK

56726

URL HTTP/2

www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (2221)

Size

56726
Hash

1217c8e34acb09c7cea97bae4d386ea1

55ee17703d0a7710943e93913bacb49220d98b4b

c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b

HTTP Headers

                                        GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 05:43:29 GMT
expires: Wed, 29 Nov 2023 05:43:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/javascript
age: 594885
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs

172.217.21.174

200 OK

57794

URL HTTP/2

apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP

172.217.21.174:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (580)

Size

57794
Hash

813b15c3004464f6bd39fd0773b04757

bd2218fe1e647f61132aad70d29cd91fd0416f26

446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf

HTTP Headers

                                        GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 19:47:40 GMT
expires: Wed, 29 Nov 2023 19:47:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 544234
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

pagead2.googlesyndication.com/pagead/js/google_top_exp.js

142.250.74.162

200 OK

URL HTTP/1.1

pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP

142.250.74.162:0
ASN

#15169 GOOGLE

Magic

ASCII text

Size

67
Hash

9bbc3ca32ec951a484589ce0e6b4db73

753d6f6183b33b2dee5dde2208fca91c17f5bb13

b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c

HTTP Headers

                                        GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 05 Dec 2022 12:25:29 GMT
Expires: Mon, 19 Dec 2022 12:25:29 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 52365

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 02:11:20 GMT
cache-control: public,max-age=3600
age: 2814
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

2.bp.blogspot.com/-vM5onJDx6LY/TzJvnh8vPGI/AAAAAAAAlpA/nVTEmANYJtA/s72-c/Katrina%2BHalili%2B1.jpg

142.250.74.161

200 OK

2860

URL HTTP/1.1

2.bp.blogspot.com/-vM5onJDx6LY/TzJvnh8vPGI/AAAAAAAAlpA/nVTEmANYJtA/s72-c/Katrina%2BHalili%2B1.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

2860
Hash

d58787a076ea930442008bc6179ccbef

ba0182cce4f2de7fa915c2e4c00813adfe13e3b6

cc50434dcea591c4f602a87868741e726ca5d13784b2520a85120b1bf6b2a9db

HTTP Headers

                                        GET /-vM5onJDx6LY/TzJvnh8vPGI/AAAAAAAAlpA/nVTEmANYJtA/s72-c/Katrina%2BHalili%2B1.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Katrina Halili 1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2860
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 02:58:14 GMT
Expires: Wed, 30 Nov 2022 14:44:40 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v9690"
Content-Type: image/jpeg
Age: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPZUN3opI/AAAAAAAAaZk/yp4jbXaxl5I/s400/jamesdenton01gh20.jpg

142.250.74.161

200 OK

15235

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPZUN3opI/AAAAAAAAaZk/yp4jbXaxl5I/s400/jamesdenton01gh20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 266x400, components 3\012- data

Size

15235
Hash

7b5117563ea33086c197bd78b86380ea

b1edbb69fce138189c41f951514534a0649148bd

15ac5f35fab640f52fb12b6c6e600d9150e2dd7d8b8c8c5e0c959850339e5e60

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPZUN3opI/AAAAAAAAaZk/yp4jbXaxl5I/s400/jamesdenton01gh20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6999"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01gh20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 15235
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4rKa5-I/AAAAAAAAaYU/4l7AAGRnId0/s400/jamesdenton07g20.jpg

142.250.74.161

200 OK

34470

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4rKa5-I/AAAAAAAAaYU/4l7AAGRnId0/s400/jamesdenton07g20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 237x400, components 3\012- data

Size

34470
Hash

74a2ffb6e3491ad3f085e3aad4c3dd90

130426484e116d2d2fd2942b43d06248f91c05f8

ec030e319a39cffd992d08f7369bfd1af21ac7763779b46c1f6cbe27f3323b40

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFO4rKa5-I/AAAAAAAAaYU/4l7AAGRnId0/s400/jamesdenton07g20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6985"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton07g20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 34470
X-XSS-Protection: 0

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPzGqpyKI/AAAAAAAAaak/02MCAZwFbUY/s400/jamesdenton0.jpg

142.250.74.161

200 OK

45746

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPzGqpyKI/AAAAAAAAaak/02MCAZwFbUY/s400/jamesdenton0.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data

Size

45746
Hash

741a3d098e65a228a29dac05b52a3edc

1f60a5daeb2073735a11232c8c6384803685c6ef

bd9d21c08e18b6042dbd940da0bd253903ce489de22b832f1141c1eb6b860416

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPzGqpyKI/AAAAAAAAaak/02MCAZwFbUY/s400/jamesdenton0.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69a9"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton0.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 45746
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOqUd2K3I/AAAAAAAAaX8/prhXmt0wmVY/s400/JamesDenton14g00.jpg

142.250.74.161

200 OK

34628

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOqUd2K3I/AAAAAAAAaX8/prhXmt0wmVY/s400/JamesDenton14g00.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 286x400, components 3\012- data

Size

34628
Hash

b803063a58867b80a7609d6b1e91e095

e8cd3889e36c54392d5b94267f275a89e61d9914

faf8d3b0a0bb20842cd772ea0c6c08229862575b6001e2e8616a7d71b246cfcc

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOqUd2K3I/AAAAAAAAaX8/prhXmt0wmVY/s400/JamesDenton14g00.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v697f"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton14g00.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 34628
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOZLM4WeI/AAAAAAAAaW8/9xjoi7hxRDA/s400/jamesdenton25gh32.jpg

142.250.74.161

200 OK

41542

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOZLM4WeI/AAAAAAAAaW8/9xjoi7hxRDA/s400/jamesdenton25gh32.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x309, components 3\012- data

Size

41542
Hash

f10d601f2c44445ce77093d2d4c49c98

ef88f5838f0fdc0a9515350e52114f9b13621ce5

d9e703b65b060f6646922c5d8014c89eca87bd5efd285a6f57c949bae844162f

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOZLM4WeI/AAAAAAAAaW8/9xjoi7hxRDA/s400/jamesdenton25gh32.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v696f"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton25gh32.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 41542
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4wKt2tI/AAAAAAAAaYc/wXre7q7vKpA/s400/JamesDenton06gh20.jpg

142.250.74.161

200 OK

40774

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4wKt2tI/AAAAAAAAaYc/wXre7q7vKpA/s400/JamesDenton06gh20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x400, components 3\012- data

Size

40774
Hash

bab0ead845988c5a08a8b88dd0637f49

f9c85759f80951fdde51b09f4c59d2941088b4ad

56001cc033a29ec55aec86383661ab9b8689e13817d8ac030c3604522cf12c3f

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFO4wKt2tI/AAAAAAAAaYc/wXre7q7vKpA/s400/JamesDenton06gh20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6987"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton06gh20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 40774
X-XSS-Protection: 0

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

1.bp.blogspot.com/-Xi_4YeJOYho/T0XcwQjkQ5I/AAAAAAAAmYY/fnTj1NMkXnA/s72-c/PhilPop%2BLogo%255B1%255D.JPG

142.250.74.161

200 OK

4917

URL HTTP/1.1

1.bp.blogspot.com/-Xi_4YeJOYho/T0XcwQjkQ5I/AAAAAAAAmYY/fnTj1NMkXnA/s72-c/PhilPop%2BLogo%255B1%255D.JPG
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

4917
Hash

5fc3079c7d7c8e49fa9ccb48487e525c

6132f1b5b22bdcb817191bab173f3e5c51d3b4c6

505c660fd2f14f17cf985a9db82e23b9389bf1629f770110e1cb9426ced886b6

HTTP Headers

                                        GET /-Xi_4YeJOYho/T0XcwQjkQ5I/AAAAAAAAmYY/fnTj1NMkXnA/s72-c/PhilPop%2BLogo%255B1%255D.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v9986"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="PhilPop Logo[1].JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 4917
X-XSS-Protection: 0

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

142.250.74.131:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

8ead0ac4ce19cef2471bae0458759d89

af02fd3fcd2e10cfa2458407c0c2e59a43e18517

507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

2b9d6a686aa3c4ea24568425e43a5221

d53bb4c9579bd1db78a0520619e888aec79f750f

c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5162
Cache-Control: max-age=113680
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:58:14 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 10:32:54 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F6FE)
X-Cache: HIT
Content-Length: 471

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4LYp4GI/AAAAAAAAaYM/iFRsGPkDFQI/s400/jamesdenton12dg20.jpg

142.250.74.161

200 OK

29042

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO4LYp4GI/AAAAAAAAaYM/iFRsGPkDFQI/s400/jamesdenton12dg20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 282x400, components 3\012- data

Size

29042
Hash

7d5707224cdb4fecced56157253823db

715b29fa58bb6aa800bb216d6b9dc6bda249750a

a29f36ccea8d9341ef16e0d7d757c62e9908c9b9271c2c8909e3810dc11de862

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFO4LYp4GI/AAAAAAAAaYM/iFRsGPkDFQI/s400/jamesdenton12dg20.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6983"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton12dg20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 29042
X-XSS-Protection: 0

1.bp.blogspot.com/-ljTQdiaE68A/T0SDCc6Bg_I/AAAAAAAAmTs/1NHvXmsvzCM/s72-c/Al%2BGalang4.jpg

142.250.74.161

200 OK

2353

URL HTTP/1.1

1.bp.blogspot.com/-ljTQdiaE68A/T0SDCc6Bg_I/AAAAAAAAmTs/1NHvXmsvzCM/s72-c/Al%2BGalang4.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

2353
Hash

21cd8b815c69d1d3c14b904d6e4ef8e6

c8ded5159786ea888912ffc0a542a86d87d4f7c1

25c93453e6a4e6f11f11cb4851b77c659c2b71d8c88841798681c4cfd5567873

HTTP Headers

                                        GET /-ljTQdiaE68A/T0SDCc6Bg_I/AAAAAAAAmTs/1NHvXmsvzCM/s72-c/Al%2BGalang4.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Al Galang4.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2353
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 02:58:14 GMT
Expires: Mon, 05 Dec 2022 10:49:10 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v993b"
Content-Type: image/jpeg
Age: 0

adserver.juicyads.com/adshow.php?adzone=174460

185.94.236.246

200 OK

269

URL HTTP/1.1

adserver.juicyads.com/adshow.php?adzone=174460
IP

185.94.236.246:0
ASN

#42567 Mojohost B.v.

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

269
Hash

ee0da80aa1c93f283530bc5a92ab9d72

776129291e3b05d0e734f7f391835258925fd2ad

b11930b4b4babaf9d3d1ebfbe3a7a8f790897ac95e3dc7fefdfe30dfb306b35d

HTTP Headers

                                        GET /adshow.php?adzone=174460 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 02:58:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
Content-Encoding: gzip

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOaHtqwCI/AAAAAAAAaXM/qmxiFxm_e1I/s400/JamesDenton16g00.jpg

142.250.74.161

200 OK

35543

URL HTTP/1.1

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOaHtqwCI/AAAAAAAAaXM/qmxiFxm_e1I/s400/JamesDenton16g00.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 265x400, components 3\012- data

Size

35543
Hash

25270d6c3d0e0256a2493b58c0fc17f0

cd285e3d324398376fabaea0f0df86b922028dca

b8afb44f2dee1c85b0651977e406fe9175399d6c98be75faeea0a61f92b4c601

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOaHtqwCI/AAAAAAAAaXM/qmxiFxm_e1I/s400/JamesDenton16g00.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6973"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton16g00.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 35543
X-XSS-Protection: 0

adserver.juicyads.com/adshow.php?adzone=174458

185.94.236.246

200 OK

269

URL HTTP/1.1

adserver.juicyads.com/adshow.php?adzone=174458
IP

185.94.236.246:0
ASN

#42567 Mojohost B.v.

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

269
Hash

ee0da80aa1c93f283530bc5a92ab9d72

776129291e3b05d0e734f7f391835258925fd2ad

b11930b4b4babaf9d3d1ebfbe3a7a8f790897ac95e3dc7fefdfe30dfb306b35d

HTTP Headers

                                        GET /adshow.php?adzone=174458 HTTP/1.1
Host: adserver.juicyads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Server: nginx
Date: Tue, 06 Dec 2022 02:58:14 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: close
X-Powered-By: PHP/5.6.40
Content-Encoding: gzip

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPLmqJ6SI/AAAAAAAAaZE/2b6EnZ8Kd4Q/s400/jamesdenton02gh41.jpg

142.250.74.161

200 OK

25492

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPLmqJ6SI/AAAAAAAAaZE/2b6EnZ8Kd4Q/s400/jamesdenton02gh41.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 277x400, components 3\012- data

Size

25492
Hash

32674f151c54af8f4c90b85d35866aed

557a5e3d4b4c4c6ecb3aec1445c8f56dcf2c6431

e5476b69fcc1946cd91f9f56c2e4b5369787ba3e8bc7b37e10ddf1eadcb9fc7a

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPLmqJ6SI/AAAAAAAAaZE/2b6EnZ8Kd4Q/s400/jamesdenton02gh41.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6991"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gh41.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 25492
X-XSS-Protection: 0

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOoJmlW3I/AAAAAAAAaXk/zr61WyEzjCQ/s400/jamesdenton14gh21.jpg

142.250.74.161

200 OK

39461

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOoJmlW3I/AAAAAAAAaXk/zr61WyEzjCQ/s400/jamesdenton14gh21.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x400, components 3\012- data

Size

39461
Hash

983bac8c0a7444a8baa85ed19be39c6e

81da81064784b1602c7e3b2fb1a165ab923a4d01

a556797459b210d9962bcb2db6984f9b36e09c16dba2809db0b88ceb3f77cf7a

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOoJmlW3I/AAAAAAAAaXk/zr61WyEzjCQ/s400/jamesdenton14gh21.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6979"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton14gh21.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 39461
X-XSS-Protection: 0

www.blogblog.com/1kt/simple/paging_dot.png

216.58.207.233

200 OK

URL HTTP/1.1

www.blogblog.com/1kt/simple/paging_dot.png
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

PNG image data, 20 x 18, 8-bit gray+alpha, non-interlaced\012- data

Size

99
Hash

fcb8627989fa00c5341d05abce52eea9

215f7e27bcb50152a6d87444d3038746c87f1d18

1e3869a752d8d7cfad487a6f4e2def12daa851373a9cce97dcc4a96523501dba

HTTP Headers

                                        GET /1kt/simple/paging_dot.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 99
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 14:19:28 GMT
Expires: Tue, 06 Dec 2022 14:19:28 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 28 Nov 2022 19:53:31 GMT
Content-Type: image/png
Age: 563926

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOan_2FTI/AAAAAAAAaXU/pRW3JyDeI4s/s400/jamesdenton15gh20.jpg

142.250.74.161

200 OK

22155

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOan_2FTI/AAAAAAAAaXU/pRW3JyDeI4s/s400/jamesdenton15gh20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 267x400, components 3\012- data

Size

22155
Hash

e01cbab1c547580ec4e436f5ab752b6d

15a0e9354771dc382ee6a263f59e6c6ba6015bb7

7068d7dde1cda47ac2002210fce02b2631ce73b02092fd5a95b74cdb75d1a3aa

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOan_2FTI/AAAAAAAAaXU/pRW3JyDeI4s/s400/jamesdenton15gh20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6975"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton15gh20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 22155
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPYpMJGdI/AAAAAAAAaZU/3tnidcxFLU4/s400/jamesdenton02fg20.jpg

142.250.74.161

200 OK

37474

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPYpMJGdI/AAAAAAAAaZU/3tnidcxFLU4/s400/jamesdenton02fg20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 279x400, components 3\012- data

Size

37474
Hash

14e9cdcd5684e634678b71e1e238f43b

93e71af98323ab4cfb262321c8b05660e425f567

aaebcec663438a7a28b840e7f7cf4af02ff7ee72fb3880bb162d61275f13d6db

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPYpMJGdI/AAAAAAAAaZU/3tnidcxFLU4/s400/jamesdenton02fg20.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6995"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02fg20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 37474
X-XSS-Protection: 0

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPoQtkY5I/AAAAAAAAaaU/tX9u_3T-J5M/s400/jamesdenton01aa40.jpg

142.250.74.161

200 OK

38589

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPoQtkY5I/AAAAAAAAaaU/tX9u_3T-J5M/s400/jamesdenton01aa40.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data

Size

38589
Hash

afa283523f6ef141be01ffc3fae7e294

45e1737ef01a9b512ca7d32f737f4e9bc338b35b

bd83544d146baad4d976b7bf896224428df42dca20144c8d2cd1afd1e1fac685

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPoQtkY5I/AAAAAAAAaaU/tX9u_3T-J5M/s400/jamesdenton01aa40.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69a5"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01aa40.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 38589
X-XSS-Protection: 0

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPnkjMudI/AAAAAAAAaaE/aKZn9Fp2QiE/s400/jamesdenton01db20.jpg

142.250.74.161

200 OK

26489

URL HTTP/1.1

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPnkjMudI/AAAAAAAAaaE/aKZn9Fp2QiE/s400/jamesdenton01db20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 256x400, components 3\012- data

Size

26489
Hash

b3f29436583ff5a9ac90fd7c15e78369

b16511dde0e58aa09412bcf088c0c52f50075d55

b5db7af94500f0134787e61d40123be480adaaa8fd04915765ae8857ea514f18

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPnkjMudI/AAAAAAAAaaE/aKZn9Fp2QiE/s400/jamesdenton01db20.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69a1"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01db20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 26489
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOY4VtQOI/AAAAAAAAaW0/sccREKWywA8/s400/JamesDenton25gh50.jpg

142.250.74.161

200 OK

33920

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOY4VtQOI/AAAAAAAAaW0/sccREKWywA8/s400/JamesDenton25gh50.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 400x267, components 3\012- data

Size

33920
Hash

2fc7dfd9ab0a228ebbee200203db4427

fdad5a7ead19716491643f885e38b811ff7899a5

adb0c1b1993533dd83abc7ae64d64df6ce3e833b409ea5d6d1e9e3a8f72924af

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOY4VtQOI/AAAAAAAAaW0/sccREKWywA8/s400/JamesDenton25gh50.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v696d"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton25gh50.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 33920
X-XSS-Protection: 0

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO39THZ4I/AAAAAAAAaYE/OJEec4tzLqM/s400/jamesdenton13gh20.JPG

142.250.74.161

200 OK

28573

URL HTTP/1.1

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO39THZ4I/AAAAAAAAaYE/OJEec4tzLqM/s400/jamesdenton13gh20.JPG
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 286x400, components 3\012- data

Size

28573
Hash

ec541d85bf7fdd23e1b1449245590090

678854c9b48d33f69b205e781a421a8839cd859f

5f834aa745ea0363ef10abb68ff067ff4b314e23d32d554f37832b88b1b7a551

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFO39THZ4I/AAAAAAAAaYE/OJEec4tzLqM/s400/jamesdenton13gh20.JPG HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6981"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton13gh20.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 28573
X-XSS-Protection: 0

2.bp.blogspot.com/-BoZQAdOTupM/T0xEoQ4ixnI/AAAAAAAAmls/gu6RSI6bvi4/s72-c/m6.jpg

142.250.74.161

200 OK

4860

URL HTTP/1.1

2.bp.blogspot.com/-BoZQAdOTupM/T0xEoQ4ixnI/AAAAAAAAmls/gu6RSI6bvi4/s72-c/m6.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

4860
Hash

9458c69e0b1364ba39c030c5b252e1dd

65ae4eacded39eb14146cdebf3209c19ead6fd56

887156adfd049e0358a3259b4c22e6401871cfc6542c7d708254aa2d518f6f6b

HTTP Headers

                                        GET /-BoZQAdOTupM/T0xEoQ4ixnI/AAAAAAAAmls/gu6RSI6bvi4/s72-c/m6.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v9a5b"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="m6.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 4860
X-XSS-Protection: 0

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPMGPNVsI/AAAAAAAAaZM/LHt7IM8im9E/s400/jamesdenton02gh40.jpg

142.250.74.161

200 OK

32311

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPMGPNVsI/AAAAAAAAaZM/LHt7IM8im9E/s400/jamesdenton02gh40.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 289x400, components 3\012- data

Size

32311
Hash

1f6a4bb3e3bc41d2bb2e444fa9202df9

dfac2900cfe1ef241f436ba3680d4abf574f000c

86c98f7a66c550dc54ea09e9f53b222fed6e48d5dcd9cda3145971e01293f64f

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPMGPNVsI/AAAAAAAAaZM/LHt7IM8im9E/s400/jamesdenton02gh40.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6993"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gh40.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 32311
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPnU--fHI/AAAAAAAAaZ8/Jdzfd0aSp0Q/s400/jamesdenton01dd20.jpg

142.250.74.161

200 OK

22110

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPnU--fHI/AAAAAAAAaZ8/Jdzfd0aSp0Q/s400/jamesdenton01dd20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 274x400, components 3\012- data

Size

22110
Hash

1c57cbf657c12316ee2a8965a487cb68

1d99d3b4ed202e8847183da80d2ccaf692e5bb84

a81438f8c48ae5ec1a661c1f1706e5180be8cf89241a101e739200fe14392e02

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPnU--fHI/AAAAAAAAaZ8/Jdzfd0aSp0Q/s400/jamesdenton01dd20.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v699f"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01dd20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 22110
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPK9wAQfI/AAAAAAAAaY0/b_3vZYNS1TE/s400/jamesdenton02gh43.jpg

142.250.74.161

200 OK

31347

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPK9wAQfI/AAAAAAAAaY0/b_3vZYNS1TE/s400/jamesdenton02gh43.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 237x400, components 3\012- data

Size

31347
Hash

1a7ea5fc700aa40d849c0609cb0006ed

66dbaa1ab97003b50b2934d76b06f4cfec1886fc

062659ecbc5243bcd9dae73f37721fd8c317f7adf547ed2720d96c91dc4bbef8

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPK9wAQfI/AAAAAAAAaY0/b_3vZYNS1TE/s400/jamesdenton02gh43.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v698d"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gh43.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 31347
X-XSS-Protection: 0

push.services.mozilla.com/

35.160.184.41

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

35.160.184.41:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: wQx4AE7vWdtxkd3LXmHuZA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: e2qWvwNdXxJvM+Ty4AI1W5Cy/9s=

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOqKpepsI/AAAAAAAAaX0/NhfsHxwMsXo/s400/JamesDenton14g01.jpg

142.250.74.161

200 OK

37269

URL HTTP/1.1

2.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOqKpepsI/AAAAAAAAaX0/NhfsHxwMsXo/s400/JamesDenton14g01.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 293x400, components 3\012- data

Size

37269
Hash

0fb13380015e6492aa09335d09c99719

1f10116740213c795cfa7b6dec927f0e565d5124

7d636225dd11b25bd10dbfc43ecca0ce4da183fc462696614ef7579b13dcf687

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOqKpepsI/AAAAAAAAaX0/NhfsHxwMsXo/s400/JamesDenton14g01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v697d"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton14g01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 37269
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOpw44COI/AAAAAAAAaXs/YMr1UmL-_d0/s400/JamesDenton14g02.jpg

142.250.74.161

200 OK

42320

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOpw44COI/AAAAAAAAaXs/YMr1UmL-_d0/s400/JamesDenton14g02.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 333x400, components 3\012- data

Size

42320
Hash

248b22f030d5a0a6f2c705a4a8109c6f

d56e95c4390ab252246e98be4c66cbd02c5d8c0e

f9e32dbd689d0b906683faee8926a60cf667b16e2886b855040b506584c909fe

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOpw44COI/AAAAAAAAaXs/YMr1UmL-_d0/s400/JamesDenton14g02.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v697b"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton14g02.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 42320
X-XSS-Protection: 0

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPaLl19TI/AAAAAAAAaZ0/L88EDuwegwE/s400/jamesdenton01dg20.jpg

142.250.74.161

200 OK

31229

URL HTTP/1.1

1.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPaLl19TI/AAAAAAAAaZ0/L88EDuwegwE/s400/jamesdenton01dg20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 279x400, components 3\012- data

Size

31229
Hash

ae3016496f9d5b40ed6e3091e23810dc

bc49f8f0963fbc3ee85f58b4b483672b589238c4

2feaff2448e7f4221d4e132dcfe1aa83425fd547c602117d71ea71aba0f90b9f

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPaLl19TI/AAAAAAAAaZ0/L88EDuwegwE/s400/jamesdenton01dg20.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v699d"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01dg20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 31229
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPzf7qF8I/AAAAAAAAaas/09dYyvoDTVM/s400/jamesdenton000.jpg

142.250.74.161

200 OK

34012

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPzf7qF8I/AAAAAAAAaas/09dYyvoDTVM/s400/jamesdenton000.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 296x400, components 3\012- data

Size

34012
Hash

5f7d58f301f36ebd0680dbe15e37033e

eb96b80e49f6f8864c2b1b850a4eab7c30760bd9

46e0eaa9b77199459a0d34cd174e29d5d294fbc88d32b30d576294d76de49948

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPzf7qF8I/AAAAAAAAaas/09dYyvoDTVM/s400/jamesdenton000.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8113"
Expires: Wed, 07 Dec 2022 02:58:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton000.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:14 GMT
Server: fife
Content-Length: 34012
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPz551WsI/AAAAAAAAaa0/HeGyrmGPLGY/s400/JamesDenton00000.jpg

142.250.74.161

200 OK

32399

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPz551WsI/AAAAAAAAaa0/HeGyrmGPLGY/s400/JamesDenton00000.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 292x400, components 3\012- data

Size

32399
Hash

ab7c9f7ec8e4d37d7e5fc5453ae42407

c6eeabcc883a6bbbe0b5a3ea3e3f1b61077c8019

e87bdfc6a76d7837a1f9ca6072f410ac3e8c67f5c5da11ea4cfac73376625c95

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPz551WsI/AAAAAAAAaa0/HeGyrmGPLGY/s400/JamesDenton00000.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69ad"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="JamesDenton00000.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 32399
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPZkfRoeI/AAAAAAAAaZs/VijZY0ngG4A/s400/jamesdenton01dg22.bmp

142.250.74.161

200 OK

34891

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPZkfRoeI/AAAAAAAAaZs/VijZY0ngG4A/s400/jamesdenton01dg22.bmp
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 296x400, components 3\012- data

Size

34891
Hash

b09d10b9afa4d88da064f4cdc9aa7b17

6c33fbd73253142d61d803f832df730687541ce7

4bc576e4c7aec5770ff8b87aa021063c295640fe63ece5cb6ceff47439894316

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPZkfRoeI/AAAAAAAAaZs/VijZY0ngG4A/s400/jamesdenton01dg22.bmp HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v699b"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01dg22.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 34891
X-XSS-Protection: 0

3.bp.blogspot.com/-1n7D669yDqg/T87N5O4CLTI/AAAAAAAAZao/qIxQYqPTYiA/s72-c/Huang%2BXiao%2BMeng%2B-%2BNumero%2BChina%2B2012.jpg

142.250.74.161

200 OK

2956

URL HTTP/1.1

3.bp.blogspot.com/-1n7D669yDqg/T87N5O4CLTI/AAAAAAAAZao/qIxQYqPTYiA/s72-c/Huang%2BXiao%2BMeng%2B-%2BNumero%2BChina%2B2012.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data

Size

2956
Hash

f063c858a691cd5007f1cf7c117551ac

5fe35925d285a01cff04d437aaf5c9999dee351b

2723b498fdaf7ba0878e0e7689deefc1ddd9378b5c58f494c09d0fb817e96c05

HTTP Headers

                                        GET /-1n7D669yDqg/T87N5O4CLTI/AAAAAAAAZao/qIxQYqPTYiA/s72-c/Huang%2BXiao%2BMeng%2B-%2BNumero%2BChina%2B2012.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v65aa"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Huang Xiao Meng - Numero China 2012.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 2956
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPo9cofVI/AAAAAAAAaac/6xkNbdXAnTY/s400/jamesdenton01aa30.jpg

142.250.74.161

200 OK

23943

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPo9cofVI/AAAAAAAAaac/6xkNbdXAnTY/s400/jamesdenton01aa30.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data

Size

23943
Hash

12a5efcca3a1a97f4beec39b2d0489f4

fa27eb033924377e9b4fcf821512bfef4f2b702a

420194bf34f28fdf4d6b5575871f0c4d4d5dd41dab0552be70bf55ba8a0831a3

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPo9cofVI/AAAAAAAAaac/6xkNbdXAnTY/s400/jamesdenton01aa30.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69a7"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01aa30.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 23943
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPY9hZBPI/AAAAAAAAaZc/gAqe5ItO_vw/s400/jamesdenton02bb20.jpg

142.250.74.161

200 OK

36097

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPY9hZBPI/AAAAAAAAaZc/gAqe5ItO_vw/s400/jamesdenton02bb20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 294x400, components 3\012- data

Size

36097
Hash

2a467307f8507fc525537fa8918a8df1

268a491530be3117766be0f37104a6eb08b48c99

cf497d3717c1e69861388d70106e8198260859526e707c8b126680b42d5634d0

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPY9hZBPI/AAAAAAAAaZc/gAqe5ItO_vw/s400/jamesdenton02bb20.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6997"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02bb20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 36097
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPoOSfSZI/AAAAAAAAaaM/bd-OPyPpJPM/s400/jamesdenton01aa42.jpg

142.250.74.161

200 OK

33952

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPoOSfSZI/AAAAAAAAaaM/bd-OPyPpJPM/s400/jamesdenton01aa42.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data

Size

33952
Hash

c2b94c2a8a6f97aad4db56ea3ee64e93

9da09d6e2dd28e3b48859899c86df95fad531c67

3cea632e442b9c5b1004401ed440e1f7a6952cc50b38e5f8a18d920e2f252471

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPoOSfSZI/AAAAAAAAaaM/bd-OPyPpJPM/s400/jamesdenton01aa42.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v69a3"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton01aa42.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 33952
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPKdQ_vUI/AAAAAAAAaYs/fmqpwnpS3N0/s400/jamesdenton02gx45.jpg

142.250.74.161

200 OK

25653

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPKdQ_vUI/AAAAAAAAaYs/fmqpwnpS3N0/s400/jamesdenton02gx45.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x248, components 3\012- data

Size

25653
Hash

5c24a76f9335246835471cfdcd7a68d7

67df1e80d2a3b7b08efb1bf524d3103387c662fb

9f85ec12b8d57a817bf2aa3401428dbe7c8da7866104d7446ac7caae98dd6cd6

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPKdQ_vUI/AAAAAAAAaYs/fmqpwnpS3N0/s400/jamesdenton02gx45.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v698b"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gx45.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 25653
X-XSS-Protection: 0

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPLVrPnvI/AAAAAAAAaY8/xm7rV_WmS-A/s400/jamesdenton02gh42.jpg

142.250.74.161

200 OK

21139

URL HTTP/1.1

4.bp.blogspot.com/_R0Tg24Z4Hu0/TBFPLVrPnvI/AAAAAAAAaY8/xm7rV_WmS-A/s400/jamesdenton02gh42.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x400, components 3\012- data

Size

21139
Hash

d2852dd90c78f221ac59d3a2abd3c2b6

569c6af4a1774fb850074dd86c07a92af2a9b2b5

7084e24a9b27679ba5208837df43067a2594c2872cfee62678d9874378a7d266

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFPLVrPnvI/AAAAAAAAaY8/xm7rV_WmS-A/s400/jamesdenton02gh42.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v698f"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gh42.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 21139
X-XSS-Protection: 0

www.blogger.com/dyn-css/authorization.css?targetBlogID=3645257822450220092&zx=746685a7-f75d-4365-8920-eeeb4d205d52

216.58.207.233

200 OK

URL HTTP/2

www.blogger.com/dyn-css/authorization.css?targetBlogID=3645257822450220092&zx=746685a7-f75d-4365-8920-eeeb4d205d52
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

very short file (no magic)

Size

21
Hash

a62e4d501434033d5d177e67d3aafdd0

34f7300c9ed47334cf10826d57af785321e3138b

b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522

HTTP Headers

                                        GET /dyn-css/authorization.css?targetBlogID=3645257822450220092&zx=746685a7-f75d-4365-8920-eeeb4d205d52 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 02:58:15 GMT
last-modified: Tue, 06 Dec 2022 02:58:15 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOnyU84UI/AAAAAAAAaXc/UWTSAhUxArA/s400/jamesdenton14gj20.jpg

142.250.74.161

200 OK

46390

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOnyU84UI/AAAAAAAAaXc/UWTSAhUxArA/s400/jamesdenton14gj20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 306x400, components 3\012- data

Size

46390
Hash

d5820e2a778db31c7fcf258413e5c19d

880477c55b9957c3ec29b54aa3d90da293d91da9

6508f450e142c17cc5cba6c073140c59d4a3686ed000c4e93e5cadec906589ee

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOnyU84UI/AAAAAAAAaXc/UWTSAhUxArA/s400/jamesdenton14gj20.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6977"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton14gj20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 46390
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO5TP63gI/AAAAAAAAaYk/4lvShao4ANo/s400/jamesdenton02gx50.jpg

142.250.74.161

200 OK

21619

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFO5TP63gI/AAAAAAAAaYk/4lvShao4ANo/s400/jamesdenton02gx50.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x282, components 3\012- data

Size

21619
Hash

710cbf500bae3f24788a2494dafec809

007ad4c750581ec5a607cad87fe98ddd30b872f4

8a45eadd082dcc537e724b7192a5ac5f83b29e1af69efb93763b1d76f32b84c3

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFO5TP63gI/AAAAAAAAaYk/4lvShao4ANo/s400/jamesdenton02gx50.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6989"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton02gx50.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 21619
X-XSS-Protection: 0

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOZsHRHhI/AAAAAAAAaXE/sFOuKWQ9bQg/s400/jamesdenton20g20.jpg

142.250.74.161

200 OK

42755

URL HTTP/1.1

3.bp.blogspot.com/_R0Tg24Z4Hu0/TBFOZsHRHhI/AAAAAAAAaXE/sFOuKWQ9bQg/s400/jamesdenton20g20.jpg
IP

142.250.74.161:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data

Size

42755
Hash

13d21444feb81359bde9a114da088712

002478a9663cb97ef654325eecbdc4bb4750bf9c

56be0cca600892d5a0e1ec4c31f9d24e808982b233aa6436b7bb9ba4526b2a68

HTTP Headers

                                        GET /_R0Tg24Z4Hu0/TBFOZsHRHhI/AAAAAAAAaXE/sFOuKWQ9bQg/s400/jamesdenton20g20.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6971"
Expires: Wed, 07 Dec 2022 02:58:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jamesdenton20g20.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:58:15 GMT
Server: fife
Content-Length: 42755
X-XSS-Protection: 0

laura-pieces-of-beauty.blogspot.com/favicon.ico

172.217.21.161

200 OK

412

URL HTTP/1.1

laura-pieces-of-beauty.blogspot.com/favicon.ico
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data

Size

412
Hash

501c61a70f5c41181aa050d9110909ca

5b985d5671a7caf686fdfb1df13488c4407f6c9f

c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: laura-pieces-of-beauty.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://laura-pieces-of-beauty.blogspot.com/search/label/james%20denton

                                        HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Tue, 06 Dec 2022 02:58:15 GMT
Date: Tue, 06 Dec 2022 02:58:15 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 29 Nov 2022 23:30:12 GMT
ETag: W/"72f8fedd7f8f7d1e4d17474c9d444dc035bbda0c173dc169bb7cd248d1262ca2"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4491
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:58:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4491
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:58:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4491
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:58:16 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4491
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:58:16 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg

34.120.237.76

200 OK

8469

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8469
Hash

2f60a6490f38a772dcd50a1132e98e1b

ff254a1df087d2c157d88a6ef04e395dc49efe5e

653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TKSlCefkyQ7VDufJJOh1D7zhioft93jfOsoXxTD4ncAK5ktxlPvIoA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:52:07 GMT
age: 18369
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11469

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11469
Hash

5529617b0748f2d8c82ef99c1ac116a8

a862b74508113ae72b56b9b3de0c75ba559b9032

376a82ae4a5b80f59fb746be79bca569b03a74c345845c7bbf15189964b0bb96

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Faeae6973-c3cb-4597-8dcc-f36e4cd35fda.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11469
x-amzn-requestid: f60a3f0d-38f7-4f82-bdd5-9e31814ab1d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuZGAXIAMFwuA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-5b4b99e779a0aaa71a311a1c;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: bWcuXixVA50JUynSO7ar3nWfjsTa5iOteSYq88bWPlQvz__1qfv7Uw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:49 GMT
age: 18987
etag: "a862b74508113ae72b56b9b3de0c75ba559b9032"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

3968

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffbcb6f9-483c-4254-9451-927fa2fc2294.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

3968
Hash

9838b65dde746487c806ee9739f8b222

1c95a1e47e903cc6775df2c5ed3f2f58cca42dc8

cf3ddc240b33d0f588d5acb30593b6846874a192bff9f5b69455877d7f63be53

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffbcb6f9-483c-4254-9451-927fa2fc2294.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 3968
x-amzn-requestid: 55111bc4-d002-44a0-855a-533251b144fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSveGo_IAMFQvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c9-28e0a83d7f9f1ffc7544bb3d;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:17 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: _Hf2XblY73dHIIWTqWgeDzJJalBo6ooCAit1eQ8G8n4385ORBBDakA==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:47:06 GMT
etag: "1c95a1e47e903cc6775df2c5ed3f2f58cca42dc8"
content-type: image/jpeg
age: 18670
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

18490

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b9928a3-5708-47a4-8d92-f3af8d54a81d.png
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

18490
Hash

f4bbfe2037fd1658cad81b5b8e4d885c

9487451d24db59cc0f426410da2b55f94f3bb34b

2a124c75c6c90c5633f3538c8b84422262f81cb35d8f4cf4ed0032cc897a5ab9

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b9928a3-5708-47a4-8d92-f3af8d54a81d.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 18490
x-amzn-requestid: f01c056f-b0bc-4833-9934-d0c37f4d701c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csS4wE5NIAMFQmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6504-1111ee0221c3c4165a9ef2ab;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:39:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L83k-5N1ntWkhPbKsReH19NWajYEVyQSBQIKM6aSZSovDKHTYeXhUQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:30:52 GMT
age: 16044
etag: "9487451d24db59cc0f426410da2b55f94f3bb34b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4905

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f48f157-f5b1-44b8-91c0-da7927555031.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

4905
Hash

17c7b7e3a4e6f3ad9ccf7f42c400749c

76432db96e8280e24da56670fba8f8f80a95ab31

f67d401ebc225c2a9dac5b4f98dc969e22f927455c2537df353ac86f046cc4c4

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0f48f157-f5b1-44b8-91c0-da7927555031.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 4905
x-amzn-requestid: c1a43d09-3653-422d-99a2-fe6469bc4bcc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzsG7BoAMF42Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e4-27f51f1e5f786838157d1ee5;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: VkYlpfFF-t9c_vWc14oqmL9Z6o6lA1_TqgXk4VUtZmHTkZwuMT5C6w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:47:06 GMT
age: 18670
etag: "76432db96e8280e24da56670fba8f8f80a95ab31"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10594

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

10594
Hash

7e1b54923ba506fde6b21c5bfb51ccc8

366aa3ab0790c496ea51bc08d1f2ff3358530d9e

a993ca6dc9a1f854f4542f9221e4f90060825ea863974b5163a9d3e284dc4663

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F70fb9d31-10e5-4323-9fbd-ed451a00e6b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 10594
x-amzn-requestid: eee9f193-eef5-44bf-997a-877fa206749e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSyIHpGoAMF1fw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64da-0a9190f7698dbf2f73bb1575;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:34 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: T28mItwomGU8iDJ18lUF7ZrFuyh_P3ZTwUtA4AC5qZ5C5FQurDMgmQ==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 6172bb1a5d00a3b06ae3700570ebe116.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:54:01 GMT
age: 18255
etag: "366aa3ab0790c496ea51bc08d1f2ff3358530d9e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (21)

#1 JS:Script (size: 6604)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#2 JS:Script (size: 375827)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#3 JS:Script (size: 257)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#4 JS:Script (size: 275)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#5 JS:Script (size: 302)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#6 JS:Script (size: 967)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#7 JS:Script (size: 789)

URL

IP

ASN

Introduced by

Inline HTML

Observations