Overview

URLwww.showerofrosesblog.com/
IP 142.250.74.179 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-09-04 19:51:24 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts No alerts detected
Tags None

Domain Summary (37)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
dtyry4ejybx0.cloudfront.net (2) 0 2021-05-26 07:45:52 UTC 2022-09-03 20:54:48 UTC 54.230.245.231 Unknown ranking
www.statcounter.com (1) 11621 2013-07-16 09:44:13 UTC 2022-09-04 08:35:55 UTC 104.20.229.67
ocsp.digicert.com (1) 86 2012-05-21 07:02:23 UTC 2022-09-04 16:49:15 UTC 93.184.220.29
2.bp.blogspot.com (7) 11071 2013-07-04 03:01:31 UTC 2022-09-04 13:54:52 UTC 142.250.74.161
1.bp.blogspot.com (13) 8403 2013-05-06 20:18:52 UTC 2022-09-04 11:52:13 UTC 142.250.74.161
4.bp.blogspot.com (3) 11215 2013-05-06 20:18:52 UTC 2022-09-04 10:21:14 UTC 142.250.74.161
www.affiliatly.com (1) 104513 2014-11-04 09:17:38 UTC 2022-09-04 17:11:54 UTC 172.66.43.74
lh3.googleusercontent.com (1) 66 2013-05-30 23:27:19 UTC 2022-09-04 04:47:06 UTC 142.250.74.1
pagead2.googlesyndication.com (1) 101 2021-02-20 15:52:05 UTC 2022-09-04 14:15:35 UTC 142.250.74.130
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-09-04 15:57:32 UTC 143.204.55.35
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-09-04 04:35:24 UTC 34.117.237.239
resources.blogblog.com (3) 13274 2017-01-30 04:47:40 UTC 2022-09-04 11:51:53 UTC 216.58.207.201
ocsp.globalsign.com (1) 2075 2012-05-25 06:20:55 UTC 2022-09-04 05:00:30 UTC 104.18.21.226
themes.googleusercontent.com (1) 9661 2012-05-29 23:36:21 UTC 2022-09-04 14:57:08 UTC 142.250.74.1
rumcdn.geoedge.be (1) 1525 2019-03-06 13:37:04 UTC 2022-09-04 10:05:56 UTC 54.230.111.4
www.blogger.com (2) 8975 2012-05-22 07:35:03 UTC 2022-09-04 08:12:57 UTC 216.58.207.201
apis.google.com (1) 105 2013-05-30 23:17:44 UTC 2022-09-04 04:51:25 UTC 142.250.74.174
push.services.mozilla.com (1) 2140 2015-09-03 10:29:36 UTC 2022-09-04 05:16:40 UTC 35.163.147.190
fonts.gstatic.com (2) 0 2014-08-29 13:43:22 UTC 2022-09-04 04:35:59 UTC 142.250.74.163 Domain (gstatic.com) ranked at: 540
iew.com (1) 0 2013-08-30 23:58:51 UTC 2022-08-31 11:45:58 UTC 34.120.163.180 Unknown ranking
translate.googleapis.com (1) 1005 2013-06-10 20:17:07 UTC 2022-09-04 14:20:20 UTC 142.250.74.74
www.google.com (1) 7 2017-01-29 11:48:58 UTC 2022-09-04 10:11:34 UTC 142.250.74.164
3.bp.blogspot.com (6) 11048 2013-07-04 04:18:40 UTC 2022-09-04 10:34:48 UTC 142.250.74.161
ocsp.godaddy.com (4) 698 2012-05-20 19:28:57 UTC 2022-09-04 05:06:33 UTC 192.124.249.22
secureaddisplay.com (2) 105653 2017-02-08 14:20:06 UTC 2022-09-03 20:54:48 UTC 216.7.188.197
c.statcounter.com (1) 7772 2016-04-06 11:04:27 UTC 2022-09-04 10:04:59 UTC 104.20.229.67
www.showerofrosesblog.com (5) 0 2018-03-28 19:52:39 UTC 2022-08-27 21:35:09 UTC 142.250.74.179 Domain (showerofrosesblog.com) ranked at: 365603
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2022-09-04 05:49:57 UTC 143.204.55.35
ocsp.pki.goog (25) 175 2017-06-14 07:23:31 UTC 2022-09-04 04:49:47 UTC 142.250.74.3
blogger.googleusercontent.com (59) 16485 2012-05-25 17:41:01 UTC 2022-09-04 15:37:47 UTC 142.250.74.1
fonts.googleapis.com (2) 8877 2014-07-21 13:19:55 UTC 2022-09-04 12:21:00 UTC 142.250.74.10
www.lduhtrp.net (1) 85316 2012-05-24 15:55:39 UTC 2022-09-04 08:33:41 UTC 89.207.16.75
r3.o.lencr.org (9) 344 2020-12-02 08:52:13 UTC 2022-09-04 05:57:13 UTC 23.36.76.226
www.allaboutlearningpress.net (3) 585117 2017-02-02 09:07:58 UTC 2022-09-01 20:19:31 UTC 192.241.173.250
berkeyfilters.postaffiliatepro.com (2) 723869 2018-06-15 16:05:44 UTC 2022-08-20 12:55:24 UTC 45.33.3.7
img-getpocket.cdn.mozilla.net (6) 1631 2017-09-01 03:40:57 UTC 2022-09-04 04:44:39 UTC 34.120.237.76
translate.google.com (1) 1156 2012-05-30 01:30:32 UTC 2022-09-04 06:36:36 UTC 142.250.74.46

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-09-04 2 www.showerofrosesblog.com/ Malware
2022-09-04 2 www.showerofrosesblog.com/ Malware
2022-09-04 2 www.showerofrosesblog.com/js/cookienotice.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.179
Date UQ / IDS / BL URL IP
2023-03-22 23:26:58 +0000 0 - 2 - 1 www.world-mmo.com/2010/11/point-blank-counter (...) 142.250.74.179
2023-03-22 14:46:18 +0000 0 - 6 - 0 www.grosgrainfab.com/2012/09/grosgrain-disney (...) 142.250.74.179
2023-03-22 10:38:27 +0000 0 - 0 - 0 www.lifesecretspice.com 142.250.74.179
2023-03-22 03:50:09 +0000 0 - 6 - 0 www.softwarecrackguru.com/2019/05/infinity-bo (...) 142.250.74.179
2023-03-20 17:30:34 +0000 0 - 0 - 7 ytb.iwfree.com/ 142.250.74.179


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-23 11:22:13 +0000 0 - 2 - 0 jb-scrap.blogspot.com/search/label/%D1%8F%20% (...) 142.250.74.65
2023-03-23 11:19:18 +0000 0 - 15 - 3 sidewayssidle2112.blogspot.com/index.html 142.250.74.65
2023-03-23 11:12:45 +0000 0 - 1 - 0 zqikwg.13ruch.4ir8yy.76452.exea41.dfahyp.edu. (...) 35.205.61.67
2023-03-23 11:06:45 +0000 0 - 1 - 0 3uyol6.lchongfu.com/ 35.205.61.67
2023-03-23 11:03:08 +0000 0 - 2 - 0 hippitoysuschatarritas.blogspot.com/2016_10_2 (...) 142.250.74.65


Last 3 reports on domain: showerofrosesblog.com
Date UQ / IDS / BL URL IP
2022-09-28 03:53:13 +0000 0 - 0 - 3 www.showerofrosesblog.com/ 142.250.74.179
2022-09-27 04:57:38 +0000 0 - 0 - 4 showerofrosesblog.com/ 216.239.34.21
2022-09-04 19:51:24 +0000 0 - 0 - 3 www.showerofrosesblog.com/ 142.250.74.179


No other reports with similar screenshot

JavaScript

Executed Scripts (32)

Executed Evals (0)

Executed Writes (3)
#1 JavaScript::Write (size: 2866) - SHA256: bd9b9037f2231777bcc799f76eeeae2e5a01663cce765e72e2ed1bda49cc926c
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body class="goog-te-banner" scroll="no" border=0 dir="ltr"><table border=0 cellspacing=0 cellpadding=0 width=100% height=100%><tr valign=middle><td width=1 nowrap><a href="https:/ / translate.google.com " class="
goog - logo - link " target="
_blank "><img src="
https: //www.gstatic.com/images/branding/googlelogo/1x/googlelogo_color_68x28dp.png" alt="Google Oversetter"></a></td><td width=1><img src="https://www.google.com/images/cleardot.gif" width="9" height="15" title="Innholdet p� denne sikre siden sendes til Google via en sikker tilkobling for � bli oversatt." alt="Innholdet p� denne sikre siden sendes til Google via en sikker tilkobling for � bli oversatt." style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-56px 0px;margin:0 4px"></td><td class="goog-te-banner-margin"></td><td><table border=0 cellspacing=0 cellpadding=0 height=100%><tr id=":1.promptSection" style="display:none" valign=middle><td nowrap><span class="goog-te-banner-content">Vis denne siden p�: <span id=":1.promptTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.confirm"><b>Oversett</b></button></div></div></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.noAutoPopup"></button></div></div></td></tr><tr id=":1.progressSection" style="display:none" valign=middle><td><span class="goog-te-banner-content">Oversettelse p�g�r&nbsp;<span dir="ltr">(<b id=":1.progressValue"></b>%)</span>&nbsp;<img src="https://translate.googleapis.com/translate_static/img/loading.gif"></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.cancel">Avbryt</button></div></div></td></tr><tr id=":1.finishSection" style="display:none"><td><span class="goog-te-banner-content">Oversatt til: <span id=":1.finishTargetLang"></span></span></td><td class="goog-te-banner-margin"></td><td nowrap><div class="goog-te-button"><div><button id=":1.restore">Vis original</button></div></div></td></tr><tr id=":1.errorSection" style="display:none" valign=middle><td><span id=":1.errorContent" class="goog-te-banner-content"></span></td></tr></table></td><td class="goog-te-banner-margin"></td><td width=1 id="options"></td><td width=1><a id=":1.close" class="goog-close-link" href="javascript:void(0)" title="Lukk"><img src="https://www.google.com/images/cleardot.gif" width="15" height="15" alt="Lukk" style="background-image:url(https://translate.googleapis.com/translate_static/img/te_ctrl3.gif);background-position:-28px 0px"></a></td></tr></table></body>
#2 JavaScript::Write (size: 382) - SHA256: d2485660acb012ca34ca118cb59e6fbb11edb83ea98a0e050dd9bed186ee9274
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":2.menuBody" class="goog-te-menu"></div > < /body>
#3 JavaScript::Write (size: 382) - SHA256: c68c84b340115ef05318c4438aed24d3cd6198fdac59ac30dc7bac98452fda69
< head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":3.menuBody" class="goog-te-menu"></div > < /body>


HTTP Transactions (175)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: www.showerofrosesblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.179
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.showerofrosesblog.com/
Content-Encoding: gzip
Date: Sun, 04 Sep 2022 19:51:13 GMT
Expires: Sun, 04 Sep 2022 19:51:13 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   179
Md5:    e9cc62fac421431a1980b3916782d820
Sha1:   79fb72990172a96b24aaae0e4a1d6b0bfa6507f3
Sha256: d22b495056f152c7a51dc7857d04d9f0624cba5d3bae883d2c9ffc3333e1f939

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "F610984FB0A75B3A31424FAA860CBC8172C7F21804DF1DC14FBB685B7C456F29"
Last-Modified: Sat, 03 Sep 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2762
Expires: Sun, 04 Sep 2022 20:37:15 GMT
Date: Sun, 04 Sep 2022 19:51:13 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sun, 04 Sep 2022 19:44:19 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NYMkmHFBbSf7w6VAYuTtKAGt-kJTWw07e0gBF0g-c4SeZhTcPbF6Ww==
Age: 414


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    b593eb39329cfe060d55be5e4a5405e2
Sha1:   78e46c1028e9f94f8569303ad2d90d7df13a059a
Sha256: 08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Sep 2022 01:15:18 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b0gm-n48fuBoKu0WnInsvPKRP251epTTrW-aqUjvOP0fpBN7VKg3VA==
age: 66956
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    742edb4038f38bc533514982f3d2e861
Sha1:   cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 04 Sep 2022 19:51:13 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            POST /s/gts1d4/z59AecrUHjM HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.35
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, ETag, Backoff, Last-Modified, Pragma, Cache-Control, Expires, Content-Type, Content-Length, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Sun, 04 Sep 2022 19:38:16 GMT
Expires: Sun, 04 Sep 2022 20:06:12 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 1G3iA-L_xuOZ-YUrizb2FPiODhDk10yH4PNWQkqIEBPKZIJ_QAaZeg==
Age: 778


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3334
Cache-Control: max-age=133866
Date: Sun, 04 Sep 2022 19:51:14 GMT
Etag: "63145c96-1d7"
Expires: Tue, 06 Sep 2022 09:02:20 GMT
Last-Modified: Sun, 04 Sep 2022 08:06:46 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: www.showerofrosesblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

search
                                         142.250.74.179
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
expires: Sun, 04 Sep 2022 19:51:14 GMT
date: Sun, 04 Sep 2022 19:51:14 GMT
cache-control: private, max-age=0
last-modified: Sun, 04 Sep 2022 15:01:05 GMT
etag: W/"4620bfbcade2e2798e46957303b6aed40686efc65f170ad3221808fd1972a6e8"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 45283
server: GSE
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (33332)
Size:   45283
Md5:    b258832cf0d5fb27ca00dd4846efa282
Sha1:   5df0aa7d308b065d49eecc976531f38bfb654656
Sha256: a9279be45bbd2fd0699c231501acb7ebd06c524c00516fff4cec8954bf423b21

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Sep 2022 08:13:04 GMT
expires: Sat, 02 Sep 2023 08:13:04 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 01 Sep 2022 14:49:33 GMT
age: 214690
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (35959)
Size:   7776
Md5:    5aa2d3297bdc86bc81322aedecbb5e79
Sha1:   1c0a3c007e41726e167e79b70ddea76198650884
Sha256: feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sun, 04 Sep 2022 19:51:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4e7ea00abe8fbd80"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1277)
Size:   20362
Md5:    202067c443611dc148225b75c0e3d556
Sha1:   9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
Sha256: 5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
                                        
                                            GET /-BxiEyVm7bwk/WoSqDll1JTI/AAAAAAABMYY/RCpITLEF03UZm7l-Tswv0VMPuHumbHBsgCK4BGAYYCw/s1090/ShowerofRosesHeader1090-2013.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v13187"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerofRosesHeader1090-2013.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 155983
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1090x389, components 3\012- data
Size:   155983
Md5:    85924adf8b4e4b8f4bb020c6c2e93568
Sha1:   8b45df6b74c79e14796c86a9b19ce58ceececc67
Sha256: b6389452505d6a7c085bc47a0fdd936358f9e31a127c72f95094adf180d040d1
                                        
                                            GET /--xiw05qViTs/VlC0Ergn5aI/AAAAAAABC1M/Umwy5lVSpN0/s1600/Olderposts2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Olderposts2.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 24563
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sat, 03 Sep 2022 13:35:48 GMT
cache-control: public, max-age=86400, no-transform
etag: "v10b53"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 700x83, components 3\012- data
Size:   24563
Md5:    7df2ad263a285fd9e02f0ee730d3ee66
Sha1:   5782be95e5bb5a6b47c94dc15123655b112d1631
Sha256: 6510fceca92678003b48352989e18028c827a7352d5dd0085822dbe3299f878c
                                        
                                            GET /-zoQGZkkbXqM/UPCTlX03BrI/AAAAAAAAlzs/pyDQrUhbFZQ/s1600/2.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="2.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5948
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sun, 28 Aug 2022 00:18:21 GMT
cache-control: public, max-age=86400, no-transform
etag: "v973b"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 75x71, components 3\012- data
Size:   5948
Md5:    b7f9eb96f464212ebb368fb5dab2b547
Sha1:   30476ba49b9e53eb8d820e23ebc2ace5607e759d
Sha256: f33433de59adcbb830e38711a6c70f014bdd28f6126be88e81966ab39816ad10
                                        
                                            GET /img/icon18_email.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 03:00:32 GMT
expires: Mon, 05 Sep 2022 03:00:32 GMT
cache-control: public, max-age=604800
last-modified: Mon, 29 Aug 2022 00:50:33 GMT
age: 579042
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 13\012- data
Size:   164
Md5:    36b9f993db1b953f3b9b08040aaf9af4
Sha1:   18248661b307586dc291fd2dff4bb59cf7579475
Sha256: 1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
                                        
                                            GET /-O0xdBA8aD9s/UPCTlfl1TzI/AAAAAAAAlz8/hz-iDk21VOc/s1600/1.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6040
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sun, 28 Aug 2022 00:18:41 GMT
cache-control: public, max-age=86400, no-transform
etag: "v973f"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 75x72, components 3\012- data
Size:   6040
Md5:    b60a8f74e69713cc1fea67d2d40f3c2b
Sha1:   13d9418cb55c4105b2f0548c568115d39b148d0b
Sha256: 8db40ba141819bf434be194dda35230a1106b924b4d0ee312808cfa1f77352f6
                                        
                                            GET /-6e6uCoGDhA0/UPCTmTA7xrI/AAAAAAAAlz4/ACPCJ2_jQsg/s1600/6.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v973e"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="6.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 5714
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 75x70, components 3\012- data
Size:   5714
Md5:    5fa864b071131c04dd3b67b3b44d040b
Sha1:   1131ad0267b23f50d90fce2cabb9aca8a7f9e168
Sha256: 552cf72fcee2426be0a68d48e74033d1633832f133183107234bf846dd626276
                                        
                                            GET /-MEo0p7EczAc/UPCTl9EXVYI/AAAAAAAAlzw/r3RQ6LWy6Ng/s1600/4.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="4.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5888
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sat, 03 Sep 2022 13:35:21 GMT
cache-control: public, max-age=86400, no-transform
etag: "v973c"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 75x71, components 3\012- data
Size:   5888
Md5:    ddbe9d7663b884c7e279210122819006
Sha1:   299b9b5b21bcf4ea0612a77d3006caadd1403633
Sha256: 36aedeb0066ee45325ac9891ed0eabdaf94cd189336e6d58a7725d1d4137c0a1
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 02:33:26 GMT
expires: Mon, 05 Sep 2022 02:33:26 GMT
cache-control: public, max-age=604800
last-modified: Sun, 28 Aug 2022 16:49:20 GMT
age: 580668
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /-cwpRDUeraQI/XlB-ukiWitI/AAAAAAABR0Y/0WWqS7MkjHo0a0asSIzNHPBv0LyUKubiACK4BGAYYCw/s300/ShowerOfRoses-8965.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ShowerOfRoses-8965.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 31363
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Mon, 29 Aug 2022 22:29:00 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14748"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x207, components 3\012- data
Size:   31363
Md5:    46a6ba8a3da18ba7a980a56117c19a6e
Sha1:   7a822e18b175e44efa37e13cfb1887d482d236cc
Sha256: 505041f55a8859ed9ca42ce9a73192d21e0fdd66676679995b60ed61e4b3d379
                                        
                                            GET /-s-IT-c5AkyQ/YX11O7qTI9I/AAAAAAABVcE/LGqDiomf2Bk-lcVrQwWhFumdXJrdhhsJwCLcBGAsYHQ/s0/Ad%2BSusan%2BPeek%2Bbooks%2B2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v155c2"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Ad Susan Peek books 2.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 26527
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 300x250, components 3\012- data
Size:   26527
Md5:    6996da44ab7cbb02d32223149f0d6158
Sha1:   30005c27fb4f575a1b56b81ea86102a0982a22bc
Sha256: 1a098bdabaa4a1cefe590ee001e668480d45d7dbbae78e353b217eb2d43d4b91
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: mXk07vPPwPSb9lqS03/SrQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.163.147.190
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: BkUmGsfvTh3joMmfXijb+QYB+9U=

                                        
                                            GET /-QZH0AsGBIyw/XUG8C6UU7vI/AAAAAAABQg8/DeX4nRYPq78p4plaiOdP3hUo4StoLJmUACLcBGAs/s1600/ShowerOfRoses-14-2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="ShowerOfRoses-14-2.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 16392
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sat, 03 Sep 2022 13:36:12 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14211"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 300x250, components 3\012- data
Size:   16392
Md5:    c06395aa1288cd772f564024092f6cb5
Sha1:   4521655fbe595f80556de2f6804c6cdd7052cbb0
Sha256: d94d10befd0a6afadbe177af6b9e00947d103b692069d5bf893d045806520b1f
                                        
                                            GET /-5ToySlyEWEs/WmkjgSrq-JI/AAAAAAABL7I/zJKFN0LhmLYnfoiI-MHvJIvNnXOy9YbrwCLcBGAs/s1600/Lisieux%2BAd%2B2018.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Lisieux Ad 2018.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 29557
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sun, 04 Sep 2022 21:57:51 GMT
cache-control: public, max-age=86400, no-transform
etag: "v12fb3"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x150, components 3\012- data
Size:   29557
Md5:    94dd31204af54b32f4609c88b4655099
Sha1:   4016c46b60017dd724febe30516dcb4ca6cc1621
Sha256: e8f0b9ecbded50c9e96a57cc2012e0fdcefd4b37079e89ee6a3c082331200c39
                                        
                                            GET /-3-saCMLxQ68/X8M7bu20A2I/AAAAAAABTjM/A2ZicaR1FwoEDxPzCUyoJ0SD5tvVGGdcwCLcBGAsYHQ/s0/icm_150x150.295326324_oi30qy3doz4o00ckswco.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v14e34"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="icm_150x150.295326324_oi30qy3doz4o00ckswco.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 7148
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 150x150, components 3\012- data
Size:   7148
Md5:    80079aee00502083dbfd8b21d4d82d78
Sha1:   812e93592376a8c3c234336bb884ac36611bdd42
Sha256: 14821fddc7fb312cedff1b094f3ea4365c61dda20c2d41b9df68b84deb399a7c
                                        
                                            GET /-nbPLd5RixZE/V59hGtz4Z4I/AAAAAAABGmk/x3rvcGyCnWoQRtbeo9KQNCF20A2vwYt4wCLcB/s1600/CatholicCuisineAd150.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v11a6a"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="CatholicCuisineAd150.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 9117
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 150x150, components 3\012- data
Size:   9117
Md5:    9efcf99ce6baf7680b87fb25c96c9ee8
Sha1:   33e93bb3cfaf77cc8ba6d376f939997e68cf88a9
Sha256: b02d71f87ae7bfad6c0273d79bbd2e437218eddafae200cbdf1314f6022ac134
                                        
                                            GET /-V4ybzlmZWDs/UxAwNVopcpI/AAAAAAAAy8E/TxR2InCS7Bk/s300/EasterBookBasket.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vcbc2"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="EasterBookBasket.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 30820
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x200, components 3\012- data
Size:   30820
Md5:    a0f4363d2c0e5a0f543d3239d9063eaa
Sha1:   278a3c1b5fc1037e8bd518f4b91cd97513f6f0b6
Sha256: 34716aad1781797fe31393587e087a61f526e093e39411ce39321ee7fe0f107d
                                        
                                            GET /-b6V7j_fkutY/VP83vce9DfI/AAAAAAAA-Ak/gGW6CFhWRFA/s1600/EasterBasketIdeas300x300.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vf80a"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="EasterBasketIdeas300x300.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 39685
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x300, components 3\012- data
Size:   39685
Md5:    a631080b235cf6b2f89f4e702e30b05b
Sha1:   10a7f9cfb61d3459d2c88ab78ed6e990957d4829
Sha256: e326b39f1e31e27b23612d4b498269ef8cf30bdfdac5407a4b543a833b815265
                                        
                                            GET /-9fHgRsmEO-k/X8H9C6_3I9I/AAAAAAABTgc/t4vHkcJ6MWAVzAMZtPomA5xxVB2MvXGKgCLcBGAsYHQ/w320-h320/2019%2BGift%2BGuide%2Bcopy%2Bcopy.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v14e08"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2019 Gift Guide copy copy.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 57896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 320x320, components 3\012- data
Size:   57896
Md5:    3debb0677f62a24981b9abebea482d35
Sha1:   fb36aff88f5cf9455f6ad784398f2dc6a5afb70a
Sha256: c0daba0586db79965dfa84ad1b4281d26b4c2100b2a8d5ba738069a13f7980a8
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: www.showerofrosesblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         142.250.74.179
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sun, 11 Sep 2022 19:51:14 GMT
cache-control: public, max-age=604800
last-modified: Sun, 04 Sep 2022 16:49:26 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2298587511-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.201
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 21:19:16 GMT
expires: Fri, 01 Sep 2023 21:19:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 Aug 2022 20:05:39 GMT
age: 253918
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   57040
Md5:    f464fdcdf304c6b79a91e2a822b695cd
Sha1:   e1329e29712ab125707bedf4c324d2cbb7c177e3
Sha256: a4a889b07d4d04b7aeda255d273f18207f9803078bc5b28840ef2d380afc1abb
                                        
                                            GET /--ArCxGPGgVY/VGDrVGgmvEI/AAAAAAAA7r0/tUWeM1p3QVw/w72-h72-p-k-no-nu/IMG_7428.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "veebe"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_7428.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 4724
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   4724
Md5:    f950d8ed773947cc93bb656558372ada
Sha1:   e98ad192de2d500486a3d828c292e42adbbbe97d
Sha256: 2a3d829b3af8ccea3f1df66b75442d0f58e35b6b92a81d3293dba3d23e29fd0e
                                        
                                            GET /_Ht4G15j2YjI/S2Hr5kwsNAI/AAAAAAAAN2A/w5jnmicP6l8/w72-h72-p-k-no-nu/IMG_1739.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v3760"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_1739.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 4246
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   4246
Md5:    3ba63e0177fc9600417c928ee0bedbf1
Sha1:   86876fdc98efe455385eb4b1a03a9871c74d2c26
Sha256: 8cd1814993e34fc3e079897a964b31c43daf58812f36aee52d8bcbcf2f3587ec
                                        
                                            GET /-Tkhe7BzBwR8/UvQK8hVRdNI/AAAAAAAAyZo/h7d6uTe986g/w72-h72-p-k-no-nu/IMG_6062-3.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vc99b"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_6062-3.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 5539
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   5539
Md5:    fbcd83676cf33eed1e92a6c8e436ae0b
Sha1:   3522d3e9b14c6a3dd5888c928584dcad6c54aa32
Sha256: b1f37120b054bde26a1774076d8205174b505a34fecc7999edfa5e85533d1550
                                        
                                            GET /-bwG0iEMR54Q/UJDan-p4ieI/AAAAAAAAfyg/11x4ZG7CGvQ/w72-h72-p-k-no-nu/All-Saints-Scavenger-Hunt.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v7f28"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="All-Saints-Scavenger-Hunt.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 5938
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   5938
Md5:    4a46f3b6296c84ef76a23ac21d75fe00
Sha1:   15a431417ccb78ff2c1f16628949f7faca0d76cd
Sha256: ea9781679a64c2dcba4b845fc7706e09cc102557fe23fbe43dc9e70b05a80107
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /blogblog/data/1kt/simple/gradients_light.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.201
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 403
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 06:35:05 GMT
expires: Thu, 08 Sep 2022 06:35:05 GMT
cache-control: public, max-age=604800
last-modified: Wed, 31 Aug 2022 06:50:40 GMT
age: 306969
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 20 x 1100, 8-bit/color RGBA, non-interlaced\012- data
Size:   403
Md5:    4f7de2e6afefb125b1f14fa5cda610ee
Sha1:   57a145f234b504a73f9d55cf39f2231a04719456
Sha256: ecb30886406e3f776ff7bc3834de849944471e626ff148bed2fa389d02866044
                                        
                                            GET /-EDtruWD3CoE/VurZ6LwMBnI/AAAAAAABEnk/24prLn4Q3gQBYcaX1eAvdIwlgBLXn4-cw/s1600/EasterSymbolsGiftsShowerOfRoses.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="EasterSymbolsGiftsShowerOfRoses.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 48465
x-xss-protection: 0
date: Sun, 04 Sep 2022 16:08:48 GMT
expires: Sun, 28 Aug 2022 17:22:33 GMT
cache-control: public, max-age=86400, no-transform
age: 13346
etag: "v1127b"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x368, components 3\012- data
Size:   48465
Md5:    b1828faf867bcae471f4323c08555d5c
Sha1:   065af79f41575414b48ef058953bd6a5be1ca3ab
Sha256: 25a742ef43ce66721f1b9713fda631468be6d9860825618778129db281cc7b5a
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-UgzxwaHMQuc/UeuFnWi7V9I/AAAAAAAAsfw/HQWpkTqUA30/w72-h72-p-k-no-nu/IMG_4145.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vb1fd"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_4145.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 3870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3870
Md5:    29a09352193809aa384495399c279bb5
Sha1:   62238ece540d990124875af415b6ec0f0d3eda05
Sha256: 3fe8aa6edf0296c3dcfe1cf8a7f0bf85c3f2b62d638c6d89ff98f262f7ae0ef4
                                        
                                            GET /_Ht4G15j2YjI/Sa48cLuWyAI/AAAAAAAAILw/Z385tWO-fR4/w72-h72-p-k-no-nu/IMG_8612.JPG HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v20bc"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="IMG_8612.JPG"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 2731
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   2731
Md5:    9453b0083568b59752f48b9d29af3c64
Sha1:   71968a6363c1bf118a54aac403781ccb8a3ab0b4
Sha256: 7d57828abaaa249b2f00b1f9ed01c249a3d300925b29eff2c522e0ad26c3fcd9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-RLl-4kZ4RPs/UF6EyMATKoI/AAAAAAAAbck/7MGbjDs6wOI/w72-h72-p-k-no-nu/Screen+Shot+2012-09-22+at+8.36.02+PM.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
etag: "v6dc9"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="Screen Shot 2012-09-22 at 8.36.02 PM.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 11334
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Size:   11334
Md5:    1f62a69ba8650fa6f1fdb6938fcd6a2d
Sha1:   6507ed758d24ea75c942281ea182c79ae873b406
Sha256: 6029c152ac1a2f6c10f770ef6b2d8294c442ddae2e91d68bc52648cb28db139c
                                        
                                            GET /-ijR0sTlYF8g/Vhl6jAFOoQI/AAAAAAABB1E/5w_H6fHuBN8/s1600/AIP.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="AIP.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 24635
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:51:14 GMT
expires: Sat, 03 Sep 2022 13:34:07 GMT
cache-control: public, max-age=86400, no-transform
etag: "v10752"
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x300, components 3\012- data
Size:   24635
Md5:    b0522c5e9ff667736a9e2f1a6d3cc18b
Sha1:   19ff24cc1f9d2d17975b734c7bdf4319c57563e2
Sha256: ca9a7ef2ce98658dfe87c8344fdc792567b961e3b35edd666ff09b4b66243d0d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-fSC1o858cmw/US7iLPxN3cI/AAAAAAAApLM/asVI7RUvh74/s300/1.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "va4b3"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="1.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 13614
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x200, components 3\012- data
Size:   13614
Md5:    8c30880eb85250805db9f0d72bbd8235
Sha1:   bd667ee0fa2b1f55474a684ce7ae532245d4f275
Sha256: a3bf25a12b08ca86c76b3789bdf87ccc03870e4293ecda10d19dbf00ac4b39cb
                                        
                                            GET /-z-JRSS33sAQ/UPEsx-0CakI/AAAAAAAAmCM/4YPz52-2vyw/s300/AnAlphabetofCatholicSaintsCollage.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v9823"
expires: Mon, 05 Sep 2022 19:51:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="AnAlphabetofCatholicSaintsCollage.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:14 GMT
server: fife
content-length: 35327
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x249, components 3\012- data
Size:   35327
Md5:    33d0f9f7bde783f401d2e2d423023c82
Sha1:   8293a3bbdbbc4a838a81023e51936dbd59cb0940
Sha256: e0be6b6afef842bade790c4251fb5e6e2c22fb2f72a61465ff10e72faa747ff0
                                        
                                            GET /-cJcC8e_HBJY/Vi7AmAfmL0I/AAAAAAABCW8/QfJDQMww09I/s1600/AllSaintsShowerOfRoses300.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v10970"
expires: Mon, 05 Sep 2022 19:51:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="AllSaintsShowerOfRoses300.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:15 GMT
server: fife
content-length: 49286
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x300, components 3\012- data
Size:   49286
Md5:    014c994627909500d1912e2cfd609b80
Sha1:   222504da648e9118cc22e45f26d98364f81e01fc
Sha256: dcf1aa6383d034a2ee5756519c40b7fdb5ee2fd49c749b97c9eee51c57305766
                                        
                                            GET /-5RV8qIKU5DQ/VlSyGa5U5qI/AAAAAAABDAU/Uwf_Ls68myc/s1600/300ChristmasGiftsShowerOfRoses.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="300ChristmasGiftsShowerOfRoses.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 38066
x-xss-protection: 0
date: Sun, 04 Sep 2022 16:10:25 GMT
expires: Mon, 29 Aug 2022 22:59:06 GMT
cache-control: public, max-age=86400, no-transform
age: 13250
etag: "v10c06"
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x300, components 3\012- data
Size:   38066
Md5:    a0c0ddb679a30619a635a79d849128a6
Sha1:   83e2a4ff7209de0b3fd7bec3342f780a7c20314e
Sha256: c958fbb597f4d03eb7ca5e4900ab66195328def5b48d671e23b3bd4732cd8d15
                                        
                                            GET /-jxkIDe4gwAo/Uo1ag494sQI/AAAAAAAAvuk/yqbThBTId5Q/s1600/AdventBooks.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.161
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "vbeea"
expires: Mon, 05 Sep 2022 19:51:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="AdventBooks.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:15 GMT
server: fife
content-length: 28862
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 300x200, components 3\012- data
Size:   28862
Md5:    3bc10addb4de706449ea5ea770099eaf
Sha1:   71cbb8e568391b7ec7ddd00a005aba074c07213f
Sha256: a5a1b9be36db32ddcbc066db2957d84160a508fd94641c71cf64533147e08c16
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /affiliate_files/banners/1554/Treasure-&-Tradition.png HTTP/1.1 
Host: www.affiliatly.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.66.43.74
HTTP/2 200 OK
content-type: image/png
                                        
date: Sun, 04 Sep 2022 19:51:15 GMT
content-length: 14421
cf-bgj: imgq:85,h2pri
cf-polished: origSize=14699, status=vary_header_present
etag: "396b-529f4f74881cb"
last-modified: Fri, 22 Jan 2016 23:56:21 GMT
p3p: CP="IDC DSP COR CUR ADM OUR STP CNT"
vary: User-Agent, Accept-Encoding
x-content-type-options: nosniff
cache-control: max-age=14400
cf-cache-status: HIT
age: 75
accept-ranges: bytes
server: cloudflare
cf-ray: 7459423f8af00b51-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 150, 8-bit colormap, non-interlaced\012- data
Size:   14421
Md5:    6ca305c9287ca3f94924473ad7745609
Sha1:   c69d9ff52436a640ad2c3c46d72365bf267c055d
Sha256: 7f0e093b40217597835d29651293046cdd69044117c98495979490d9062b7e83
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 04 Sep 2022 19:51:15 GMT
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Sep 2022 18:17:38 GMT
Expires: Mon, 05 Sep 2022 18:17:38 GMT
ETag: "5f4b0f59268ddc1f41af7fcebb3b4ab3f084da19"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1731
Md5:    8c16ec448090b34729a89e7c5cf1c111
Sha1:   5f4b0f59268ddc1f41af7fcebb3b4ab3f084da19
Sha256: 07ef2c83cb1f6ed6d138149205c959c164a91ab6ccaa4bfb410138abc133e43b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Hw5aXo.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.showerofrosesblog.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12708
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 06:06:20 GMT
expires: Fri, 01 Sep 2023 06:06:20 GMT
cache-control: public, max-age=31536000
age: 308695
last-modified: Mon, 11 Jul 2022 18:55:59 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12708, version 1.0\012- data
Size:   12708
Md5:    b4a68b1e743ee317eaaf0bbadd131571
Sha1:   f24f7823d4e3830c7cfa5bcb33733d2897c00f13
Sha256: ddc148b8a0a27b1449fda6033f4a0defac9bd43210117b50d5d7ad1eda09f394
                                        
                                            GET /s/montserrat/v25/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM73w5aXo.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.showerofrosesblog.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.163
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 12848
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 16:43:29 GMT
expires: Fri, 01 Sep 2023 16:43:29 GMT
cache-control: public, max-age=31536000
age: 270466
last-modified: Mon, 11 Jul 2022 18:56:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 12848, version 1.0\012- data
Size:   12848
Md5:    f0b3206d02a2f684530117ce1d7e8ce0
Sha1:   f3708b707b65e241b0f1c819d5f7bf7da8412653
Sha256: f31b80562610135edd91a86ec7f243c5eeaec2ec08337e6a20c2d135d8e217da
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9D78B044539BD03CA5D0F7408873B15CB71F1146F746311E537B11E75EE12929"
Last-Modified: Fri, 02 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16362
Expires: Mon, 05 Sep 2022 00:23:57 GMT
Date: Sun, 04 Sep 2022 19:51:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9D78B044539BD03CA5D0F7408873B15CB71F1146F746311E537B11E75EE12929"
Last-Modified: Fri, 02 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16362
Expires: Mon, 05 Sep 2022 00:23:57 GMT
Date: Sun, 04 Sep 2022 19:51:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "9D78B044539BD03CA5D0F7408873B15CB71F1146F746311E537B11E75EE12929"
Last-Modified: Fri, 02 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16362
Expires: Mon, 05 Sep 2022 00:23:57 GMT
Date: Sun, 04 Sep 2022 19:51:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 76
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 04 Sep 2022 19:51:15 GMT
Content-Length: 1778
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Sep 2022 01:34:23 GMT
Expires: Mon, 05 Sep 2022 01:34:23 GMT
ETag: "030e44bd331a547a3365903ee6ba395ba5c68604"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1778
Md5:    84187375862ed3e7d25e8eb23663099e
Sha1:   030e44bd331a547a3365903ee6ba395ba5c68604
Sha256: dea9253f5109bdcce2196b3107bb9f0e96d70575c39fd1bb180ea87f5dfb4ba8
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "074467A7B57AA9C8B05C5F7DD72FDF7AFDA257C457F4DAB3F9DA15652966054A"
Last-Modified: Fri, 02 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13357
Expires: Sun, 04 Sep 2022 23:33:52 GMT
Date: Sun, 04 Sep 2022 19:51:15 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "074467A7B57AA9C8B05C5F7DD72FDF7AFDA257C457F4DAB3F9DA15652966054A"
Last-Modified: Fri, 02 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13357
Expires: Sun, 04 Sep 2022 23:33:52 GMT
Date: Sun, 04 Sep 2022 19:51:15 GMT
Connection: keep-alive

                                        
                                            GET /au/ HTTP/1.1 
Host: secureaddisplay.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.7.188.197
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: private
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=1nx4k4yby4q4wjdt04dnyeqk; path=/; HttpOnly; SameSite=Lax SecureAdDisplay=CANVisitorID=4038167314; expires=Fri, 09-Sep-2022 19:51:15 GMT; path=/
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Sun, 04 Sep 2022 19:51:15 GMT
content-length: 627
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (308), with CRLF line terminators
Size:   627
Md5:    3cc35850df1b465d6aeb397e6263ae00
Sha1:   2650c50b167098f8cd8220ff890aafc9ab347c17
Sha256: 12dbee53fe770086ead896e36f610070253ea13d78058bcf5924f2852148a785
                                        
                                            GET /media/banners/All-About-Reading-1-300x250.jpg HTTP/1.1 
Host: www.allaboutlearningpress.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.241.173.250
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Server: Apache
Last-Modified: Mon, 24 Dec 2018 02:31:38 GMT
ETag: "8995-57dbb6573d680"
Accept-Ranges: bytes
Content-Length: 35221
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Size:   35221
Md5:    0812a418422b46ad5dd16260469d4d2a
Sha1:   1d29cfbbc3cb3b215679a8f15a42a394a003feec
Sha256: f84e5f382e38112460716bbd3e55cce0d7df452a46d38f2e72ed74e1976b9ff6
                                        
                                            GET /media/banners/All-About-Spelling-1-300x250.jpg HTTP/1.1 
Host: www.allaboutlearningpress.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.241.173.250
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Server: Apache
Last-Modified: Wed, 15 Feb 2017 22:21:57 GMT
ETag: "635d-548991bca6b40"
Accept-Ranges: bytes
Content-Length: 25437
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Size:   25437
Md5:    16ec7a18fa600ca1d2f2e73eec77aab3
Sha1:   913e197efb79fe1b7d4b36896eff7e4063cb1c2f
Sha256: 9ea0b1d9ee4fdccaad95692dc44279c1a6ce0d375bb8783ba01e91003f2e6a0d
                                        
                                            GET /media/banners/Dyslexia-Resources-300x250.jpg HTTP/1.1 
Host: www.allaboutlearningpress.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.241.173.250
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Server: Apache
Last-Modified: Wed, 15 Feb 2017 23:03:27 GMT
ETag: "92a8-54899b034cdc0"
Accept-Ranges: bytes
Content-Length: 37544
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x250, components 3\012- data
Size:   37544
Md5:    4bf04eebe019091311c96f3c2eba12dd
Sha1:   a82637bb65be27d789e184e8ae3b8a61fd436739
Sha256: 4dcf2b1c4378adbe29390f7b9185569e06f31e7851bab8602aaf07149455b997
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 68
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: Sucuri/Cloudproxy
Date: Sun, 04 Sep 2022 19:51:15 GMT
Content-Length: 1731
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Sun, 04 Sep 2022 18:17:38 GMT
Expires: Mon, 05 Sep 2022 18:17:38 GMT
ETag: "5f4b0f59268ddc1f41af7fcebb3b4ab3f084da19"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1731
Md5:    8c16ec448090b34729a89e7c5cf1c111
Sha1:   5f4b0f59268ddc1f41af7fcebb3b4ab3f084da19
Sha256: 07ef2c83cb1f6ed6d138149205c959c164a91ab6ccaa4bfb410138abc133e43b
                                        
                                            GET /sites/default/files/iew_decision_tree_andrew_square_300px.jpg HTTP/1.1 
Host: iew.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.120.163.180
HTTP/2 200 OK
content-type: image/jpeg
                                        
date: Sun, 04 Sep 2022 19:51:15 GMT
server: Apache/2.4.10 (Debian)
x-content-type-options: nosniff
last-modified: Thu, 08 Jun 2017 21:31:58 GMT
etag: "18d3f-55179951aaf80"
accept-ranges: bytes
content-length: 101695
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS6 (Macintosh), datetime=2017:06:08 16:22:27], baseline, precision 8, 300x300, components 3\012- data
Size:   101695
Md5:    31fa64ad9584ab7a6c479b5dfcd2345f
Sha1:   0e9b3889a7bbedec2b2645145efac79d73cc7606
Sha256: 91ea8a56351649d2192bec86b0686eaeb4e03a357f2397e9baa1b0aafd1c9b19
                                        
                                            GET /scripts/9wu00y0gia?a_aid=5c1d8922af4a1&a_bid=410359ac HTTP/1.1 
Host: berkeyfilters.postaffiliatepro.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.33.3.7
HTTP/2 200 OK
content-type: image/gif
                                        
server: nginx
date: Sun, 04 Sep 2022 19:51:15 GMT
content-length: 43
last-modified: Mon, 28 Sep 1970 06:00:00 GMT
expires: Mon, 26 Jul 1997 05:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
set-cookie: PAPCookie_Imp_410359ac=pap;Max-Age=31556926;Path=/;Domain=.postaffiliatepro.com;Secure;SameSite=None;
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    ad4b0f606e0f8465bc4c4c170b37e1a3
Sha1:   50b30fd5f87c85fe5cba2635cb83316ca71250d7
Sha256: cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
                                        
                                            GET /au/ HTTP/1.1 
Host: secureaddisplay.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.7.188.197
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
cache-control: private
server: Microsoft-IIS/10.0
x-aspnet-version: 4.0.30319
set-cookie: ASP.NET_SessionId=nd5f1o1trcjqjafwtrro22zq; path=/; HttpOnly; SameSite=Lax SecureAdDisplay=CANVisitorID=4038167325; expires=Fri, 09-Sep-2022 19:51:15 GMT; path=/
x-powered-by: ASP.NET
access-control-allow-origin: *
date: Sun, 04 Sep 2022 19:51:15 GMT
content-length: 627
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (308), with CRLF line terminators
Size:   627
Md5:    31de02ac6e2fe289c08e6b17975d0ef2
Sha1:   f585d5dc60f2ee423efffa197e71ca746688816a
Sha256: 2a493c2866d16433fa2771c9f22d4254f4f359c88f34c725423ea8e86f1a2064
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.74
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/rosetta
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="rosetta"
report-to: {"group":"rosetta","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/rosetta"}]}
content-length: 3619
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:13:24 GMT
expires: Sun, 04 Sep 2022 20:13:24 GMT
cache-control: public, max-age=3600
age: 2271
last-modified: Wed, 17 Aug 2022 23:38:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (18670)
Size:   3619
Md5:    897ba9a21d9625286674da769dacc2e2
Sha1:   84b4923ab7dee562395160824d53496314499b77
Sha256: 696cbf5c2f3f1efae555562b72abbbb22bed02eff03d62074555cab241190ae0
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /accounts/default1/9wu00y0gba/410359ac.png HTTP/1.1 
Host: berkeyfilters.postaffiliatepro.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         45.33.3.7
HTTP/2 200 OK
content-type: image/png
                                        
server: nginx
date: Sun, 04 Sep 2022 19:51:15 GMT
content-length: 106246
cache-control: max-age=15, public
expires: Sun, 04 Sep 2022 19:51:30 GMT
x-srv: 1
x-varnish: 39760549
age: 0
vary: Accept-Encoding
via: 1.1 varnish (2.lb-app.pap.linode-us-tx)
accept-ranges: bytes
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size:   106246
Md5:    9adcc17b2620445ce6e444581761a7da
Sha1:   0792f29c238184ef45f0de6395fb6a7982533564
Sha256: 481085866e262230bea2a351a3d1b7446d4961a5cdd90894b6477c445fd5be40
                                        
                                            GET /js/adload007.min.js?ver=00000824b HTTP/1.1 
Host: dtyry4ejybx0.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.245.231
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 15 Jun 2022 21:47:50 GMT
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Content-Encoding: gzip
Date: Sun, 04 Sep 2022 02:03:06 GMT
ETag: W/"b0e73f8f181d81:0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: N61JtRKp_J40oQMcor4y76oouKPIkOm8ChdQigcqEvoUSSNKY7Ct4w==
Age: 64579


--- Additional Info ---
Magic:  ASCII text, with very long lines (27479), with no line terminators
Size:   8521
Md5:    04ce125d6a4bd20bd928ae227f82b4ba
Sha1:   ebc9ad02c61c9c4a18c9286a1cfe2503f774d035
Sha256: 3395ccbad741bed37814793bd5c88ac03f95cbb4c8639a000c35284d42678994
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /-F0i3hr5pzpM/YMEitSLJvfI/AAAAAAAACEs/YuJ2AMLUC0EjT5oTeNqkXpMoim1tlxZngCLcBGAsYHQ/s72-w267-h400-c/image.png HTTP/1.1 
Host: lh3.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
content-disposition: inline;filename="image.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 8110
x-xss-protection: 0
date: Sun, 04 Sep 2022 19:49:58 GMT
expires: Mon, 05 Sep 2022 19:49:58 GMT
cache-control: public, max-age=86400, no-transform
etag: "v84c"
age: 78
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Size:   8110
Md5:    a98f6bc432679f0531f93223d3ed74ec
Sha1:   1b78e647e76b13c7173412d4b48beb9b6423f0ef
Sha256: 877873f391b6864b4fdedf14a5bb952e8861949833d20bf689b2720a8a236325
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.130
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Sun, 04 Sep 2022 14:34:06 GMT
expires: Sun, 18 Sep 2022 14:34:06 GMT
cache-control: public, max-age=1209600
age: 19030
etag: 13036835877489095579
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.showerofrosesblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Cookie: sc_is_visitor_unique=rx3214385.1662321072.CAC8E26DFCA84FCF1FF86F2B5430ED99.1.1.1.1.1.1.1.1.1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         142.250.74.179
HTTP/2 200 OK
content-type: image/x-icon
                                        
expires: Sun, 04 Sep 2022 19:51:15 GMT
date: Sun, 04 Sep 2022 19:51:15 GMT
cache-control: private, max-age=86400
last-modified: Sun, 04 Sep 2022 15:01:05 GMT
etag: W/"4620bfbcade2e2798e46957303b6aed40686efc65f170ad3221808fd1972a6e8"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 948
server: GSE
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Size:   948
Md5:    745ed505324a642f46f4e5b6c6e87b4c
Sha1:   b96f17552ad16966bae1a322920200277badd52f
Sha256: 8c773bb9cec5dcadb073d2341c08259629f7c1f2b87356052a4c319709bf236f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gsrsaovsslca2018 HTTP/1.1 
Host: ocsp.globalsign.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         104.18.21.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Content-Length: 1432
Connection: keep-alive
Expires: Thu, 08 Sep 2022 17:48:28 GMT
ETag: "ad58b63e361c84a8b527b20eb3debd4dd3be7931"
Last-Modified: Sun, 04 Sep 2022 17:48:29 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 1839
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 745942458859b523-OSL


--- Additional Info ---
Magic:  data
Size:   1432
Md5:    c63f4ab90474d638e44dbddee0d947be
Sha1:   ad58b63e361c84a8b527b20eb3debd4dd3be7931
Sha256: 1ac4967ce5b5153c5f10c1350104ee36fff385a10bbd291b1f03d1633d7abeec
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:51:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:51:16 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "87C27C4B0288F31FAA405BA5247767D1F299938551BD284212EE487DBB0DEB63"
Last-Modified: Fri, 02 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4922
Expires: Sun, 04 Sep 2022 21:13:18 GMT
Date: Sun, 04 Sep 2022 19:51:16 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa7142280-0dbd-4c8e-a960-d357c9143af6.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 5652
x-amzn-requestid: 05fffcb2-43c0-4acf-81b2-1b914459e1e9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wwHErUIAMFmNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c800-47fe166763992ab271a87aa4;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:48 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: oU-qOKW_Jy8MV0HLQWofKsOi_qseUcyZRoP5LoyLsCclpCgf6NHiBA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 22:02:43 GMT
age: 78513
etag: "e5b5b649a243e5c004d9923d19d4421d1ea96d23"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   5652
Md5:    10318189f33f071dda64249ab9c8c5bb
Sha1:   e5b5b649a243e5c004d9923d19d4421d1ea96d23
Sha256: 3e775a1990e4d185024faf2fdff7a5eb9063f7ee19784f32fb4f7f10643c8102
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4c475e9b-fa82-4942-8a4a-d6d3f5061558.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10713
x-amzn-requestid: d546a12c-c549-4ad3-80ad-6bad452927d3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5winGzHIAMFTPw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7aa-2060c6611eb4abb777cc17a8;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:22 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rnd2mdQQcKzRP5RAJXmcJUSmO_AnlUgVrkT5tBR38PtfK_bThFBTtg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:47:53 GMT
age: 79403
etag: "383a0661fa09d9b48745b507389d0505303b6182"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10713
Md5:    8cdd0826b7d8be62cc2ed532e04e137b
Sha1:   383a0661fa09d9b48745b507389d0505303b6182
Sha256: f2d04cf1ee9b5a885c246060c1036b21af4ecd3e51e5d05a529dbe0d63f7c2ac
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcd43481e-3c33-4c05-9216-2cc734e840b4.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 9690
x-amzn-requestid: 614c99f8-116a-4603-bcde-3fbd5bfa14d5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wx1HInIAMFiYA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c80b-25c09c3227d72395408782f0;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:32:59 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 5_jCLvdAC-XR-ax3RUbbx9275KPwACOPtAMxSbmv-aP-Lra4sC5zvw==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:51:41 GMT
age: 79175
etag: "babb88202741bbf2d4fd25e0731a4a7a6fcc28f8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   9690
Md5:    1bdfdf7e36f78f2f0e4d7ede9fdb76a8
Sha1:   babb88202741bbf2d4fd25e0731a4a7a6fcc28f8
Sha256: 949ea108642789e1014150909060f11d99608f082760d0e868a90282f2768d43
                                        
                                            GET /image-7197350-12539178 HTTP/1.1 
Host: www.lduhtrp.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         89.207.16.75
HTTP/1.1 302 Found
Content-Type: text/html; charset=utf-8
                                        
Server: Resin/4.0.66
P3P: policyref="/w3c/p3p.xml", CP="ALL BUS LEG DSP COR ADM CUR DEV PSA OUR NAV INT"
Cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Expires: Sun, 04 Sep 2022 19:51:16 GMT
Location: https://www.yceml.net/0298/12539178-1612898565798
Content-Length: 87
Date: Sun, 04 Sep 2022 19:51:16 GMT
X-VC-HTTPS: On


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   87
Md5:    0f725a413e5cbe1c870a87bf36f4685f
Sha1:   a2aea3f0dd5f0cc4655c3a6b5a81a8ebf3f6fec7
Sha256: 8eed32d11f16be01d28e2e8190ff94d6cfcb5b487d2293d41872219224a845bf
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc410b0d8-b008-47cc-bbf7-a762c06e0fcd.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8688
x-amzn-requestid: 1c5fbc89-8ce8-4792-b713-f2c0ceeab737
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wifFJYoAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7a9-214311e155c661ff77d89906;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:21 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wd9SF3txQNTVUaSPcKQ_nQfPt1pBjFbuHzSZiQjfbGBSb-i7J8Rgjg==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:44:29 GMT
age: 79607
etag: "2768253dacaaad6cb498c6b2eb7694208b0ce0a6"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8688
Md5:    6bb4b1d74f1443bc3328301ab3ae6464
Sha1:   2768253dacaaad6cb498c6b2eb7694208b0ce0a6
Sha256: 07dcc95dab7757402998a5a61b540c965ce95c8bd51a814a09438981693b563a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F514b7fbd-ae99-4219-bd03-50e907f92b7b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 14855
x-amzn-requestid: 65cf850b-227a-4318-a00e-d7cd4ef81489
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: X5wjuGtpoAMFvvA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6313c7b1-54bc36741984491b0509d173;Sampled=0
x-amzn-remapped-date: Sat, 03 Sep 2022 21:31:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: M9Y8U9vqVs1ATiPP9jLPybTJ-xwC--5oiRUpj9-imTWfh6_rmtL5Kw==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Sat, 03 Sep 2022 21:54:46 GMT
age: 78990
etag: "13b16ca74113dfd52ccf23e6bb39307fc713f984"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   14855
Md5:    ca50f9c56ff869b0b63ca71b1a9f8170
Sha1:   13b16ca74113dfd52ccf23e6bb39307fc713f984
Sha256: 76b85dd7e018ab4b3d4b2610f90dbca61d0f05d38a3b905fee789af131ae7538
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa54e2726-407f-4a8a-8d19-21de249844f5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11380
x-amzn-requestid: 61f37e21-33a8-49e6-b384-4ca1fcfbffa5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Xz8TLFA3oAMFQjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63117414-42de5c4128eb9e011d848356;Sampled=0
x-amzn-remapped-date: Fri, 02 Sep 2022 03:10:12 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: s0voKdiDdj0mq8-VRFSWcYcQXaWti7929bpdKSQMWDoVCmOAPepuDg==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Sep 2022 03:48:57 GMT
age: 57739
etag: "6ce530af682094dc5413db9de02565691fab4da7"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11380
Md5:    fc4ceb10dd9fcaab21ae58dcf10c401f
Sha1:   6ce530af682094dc5413db9de02565691fab4da7
Sha256: 84ad58e126cce2ab6b1568ffe89a116bc1de0310bb72d4530eead2fb8191572c
                                        
                                            GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=APq4FmCwK2L32wYr3NPNKNNsp8wq7Q7-sL9yZYRFh6Bcbk7X4I4AcckFTUJFvzlcG2_1GleChQGP38FuPuzO-VZZaRvAHmsK5w HTTP/1.1 
Host: www.showerofrosesblog.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Cookie: sc_is_visitor_unique=rx3214385.1662321072.CAC8E26DFCA84FCF1FF86F2B5430ED99.1.1.1.1.1.1.1.1.1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         142.250.74.179
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
content-encoding: gzip
date: Sun, 04 Sep 2022 19:51:16 GMT
expires: Sun, 04 Sep 2022 19:51:16 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 265
server: GSE
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (411), with no line terminators
Size:   265
Md5:    3c66c10f61df1920f086bdd9123d8be8
Sha1:   8ea5332b393508d277187378086cb20a6e7ff74e
Sha256: 7e4debf34142b7400f0f0ede5981d2207a0d15ce863205ae9482f2722980d23e
                                        
                                            GET /image?id=0BwVBOzw_-hbMNjdhZTQ5ZjMtOTUzOS00ZDRjLTk4YWEtYWFjMDUxYmFmODFj&options=w1600 HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/png
                                        
access-control-expose-headers: Content-Length
etag: "v1"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 14652
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 200 x 203, 8-bit colormap, interlaced\012- data
Size:   14652
Md5:    9a7f009f445ed64b9c3ecb5318b0474a
Sha1:   369702bdffb776ff737beee74e56558b44aca812
Sha256: 17584337d6ad53223d9aedde1f3d18502ee528c39c897cae99501cd06e4e0054
                                        
                                            GET /js/headerbidding/hb.js?version=00085 HTTP/1.1 
Host: dtyry4ejybx0.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.245.231
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Mar 2022 19:08:11 GMT
Server: Microsoft-IIS/7.0
X-Powered-By: ASP.NET
Content-Encoding: gzip
Date: Sun, 04 Sep 2022 04:44:19 GMT
ETag: W/"e022e1da1f33d81:0"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 6259d2cd8a5947ad41a420527bbed7a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: QGqG9OpINVdkJxZkTk71LZ3sMev_xVE0kzEioAnz82c7An5tce7_1A==
Age: 54989


--- Additional Info ---
Magic:  ASCII text, with very long lines (65488)
Size:   154278
Md5:    28afa79bdb2c6144ccb7be3d807713cd
Sha1:   26e2680aaf245c1f8b6fd47e5b80745a8e1c06f9
Sha256: 51710284b675d0770fd4f7840c6b40738e9eabcd77ddcd5519eaadc4d1fd0de8
                                        
                                            GET /a4bb4463-4bc0-4c99-b3fa-ebcd2efe450b/pbjs-wrapper.js HTTP/1.1 
Host: rumcdn.geoedge.be
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.4
HTTP/2 200 OK
content-type: application/javascript
                                        
date: Sun, 04 Sep 2022 19:04:02 GMT
last-modified: Thu, 09 Jul 2020 13:55:40 GMT
etag: W/"9a0fb6fed9bb9c131acefae7e61bd6ea"
cache-control: public, max-age: 7200
x-amz-version-id: 5wzW7nsWBF19C6AW8eKLEE0kWT8TIrZg
server: AmazonS3
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 09ae414c9d6c5323d5147457ada70ec6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: QNfBK80RSyj1UIY25NJZt8PnMgAtXdqjqjEzl_6jBkmeyK4gp2ruMQ==
age: 2835
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (5618), with no line terminators
Size:   3941
Md5:    5cc4d72d51fd8d347859d38282786150
Sha1:   57dab56bdb4d0b8fb46a11eb997e9aab50a82d0f
Sha256: 14fb1ab5effb5fa11e06bfdf2819c5f5bec1eef649934401bccba272bc4c720e
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 04 Sep 2022 19:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /t.php?sc_project=3214385&u1=CAC8E26DFCA84FCF1FF86F2B5430ED99&java=1&security=bd58871f&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//www.showerofrosesblog.com/&t=Shower%20of%20Roses&invisible=1&sc_rum_e_s=2087&sc_rum_e_e=2105&get_config=true HTTP/1.1 
Host: c.statcounter.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.showerofrosesblog.com
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.20.229.67
HTTP/2 200 OK
content-type: application/json
                                        
date: Sun, 04 Sep 2022 19:51:16 GMT
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc3214385.1662321075.0; SameSite=None; Secure; Expires=Friday, 03-Sep-2027 12:51:15 PDT; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://www.showerofrosesblog.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 745942445e2a0b65-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   144233
Md5:    d008938a16d21552adc9d2dcf366bbfb
Sha1:   c264922750a9d28ddfe8e0846e17373eac08ff55
Sha256: 3cce918647c6720e6354099e112dcb59e98ad799c510200bef230482db33a648
                                        
                                            GET /images/cleardot.gif HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="static-on-bigtable"
report-to: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
content-length: 43
date: Sun, 04 Sep 2022 19:51:16 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Tue, 22 Oct 2019 18:30:00 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    fc94fb0c3ed8a8f909dbc7630a0987ff
Sha1:   56d45f8a17f5078a20af9962c992ca4678450765
Sha256: 2dfe28cbdb83f01c940de6a88ab86200154fd772d568035ac568664e52068363
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEjbU1MPfgoozaq2DXetNl599-eSn5iJSZfCDkaOF3qPyCJF6cddEBc6ojOVuvpG6nsEu8cGWxe4uxv1QaRIPZuxYAsnLWfKl9ubsQDE59wclalvAT_1LzIq0R-AvANy0mPC5LyXZ_H7wUTnH4B0A8oypdAFkoQJn6e1or3ewDMiZg6zMDkZCMotDKGy/w300-h400/ShowerOfRoses-7067.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4b"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7067.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 45328
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x400, components 3\012- data
Size:   45328
Md5:    fa68c5538985b387e2ed02065f01d129
Sha1:   c3fc799fbd3a6a9399b9a8e75c35adddaab5d984
Sha256: bc630d6c4400adfb56fe7bf516858145927b9ca11e09f800efc3ad6bcdafb5d3
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEiwfbCMX4s6TiD-3VvM5zvzkCRvwf68lXyYdDfyVF3yDJJHb_IkO4KK8ewPPo1jnsd84dyaMZwCTMzQXzZ365lReh0piZFzakkkAnwT5y5k79vgIjCJFbRnYhfJRUyPjP0BiahpLUmO_QdRM1ayKzhxgdU2rPz2MWf_-he9XOuzsmnR_mkyPP9yTJ4g/s16000/ShowerOfRoses-7093.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4a"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7093.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 132575
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x853, components 3\012- data
Size:   132575
Md5:    d0a8acfa29f388b655e6ff1ff3dd6aa3
Sha1:   a0bcda0fd958bc7eeed303a2712fb58f1bff778f
Sha256: aecccf9a20dfc3d3355891b7bfa00b1fb49b737368f96b40ad59d76e2b9c2089
                                        
                                            GET /img/a/AVvXsEiUg6QdPCljnUjttMgzp7j8sUrqq2w8h73XVVsyWNbZXAvGBqjHV8181deUQrxSN-Kx25T-anEJSHJvZgYDxB9RW77sRyMINLlB33Xy7LqwSwu1deWt5Srky4fdriRk2NeMBtiqsF0SD1hMu2dglmdEG2KvW4i5zXrw5cBVFGSKp584XYRUBcpqXHRV HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1597d"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PP_Feb-2022.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 92247
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 300x250, components 3\012- data
Size:   92247
Md5:    46cb6ca1e1a5cea21cc205f3030c4234
Sha1:   188f90ca793a8ee29a52b1d00ff9a00de763458b
Sha256: 608d01b1f9f96d4b592124a64eb27c50a82f61de1c29dda3f5922c3bd5c6dd1a
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEgRVN5G6R3qC85-tJIny69j38Seth_kDxvpTlEa5BIz582YsAj3pSwtRCGdZxO5_V8eXtQidZaFouzA-sVVcmDr39uOk_iVW54MaKAjN6qwJe3pAsnVUQcFChLbbtW7WkIzonvi3ztbSxpYNUVOjDsnBKLzE-TfcwTLo925JwZKF-Gbaf2xEyQkjw7V/w640-h480/ShowerOfRoses-7077.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b48"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7077.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 72896
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x480, components 3\012- data
Size:   72896
Md5:    55b1439ae1cd73179150d008de21d732
Sha1:   9e50b0b616bbb2f43b99ec1c2d1e70d3aef78228
Sha256: 91a03b5c4f87b151840d006fb8c8e88c180152699d0429aae220a7da1c215773
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEgPSavu0rpXPsaQTPVyrFc7gOJMhoZua-VtP9lx3N7egCQipnHiKGYHS3FyfgDkyxc4wdPYSga0upQ44iFZl2H-JdX8BMghzBE4sLCydKQKeBLBxwELfp2Ywi8C4PyJ7yUwAHRDo4RLS4z_0ucD0gFvAkPBYbukjB0AZTZL7dpIQcbs-yAGc2HQRSko/s16000/ShowerOfRoses-7065-2.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b50"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7065-2.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 100849
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x853, components 3\012- data
Size:   100849
Md5:    843571416d53390b02be6fd8b7412d9e
Sha1:   41ff4e26c7416a838d392ad85a15f2ab8c925148
Sha256: 25c3c442aa1b08085dec30385758c9056de6ab3ee1cf1030b297fc5844406552
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEgzRtF2JGbEO2IgNcQoWyzHhl2K5Scbgv8Qz3j4HmM7vDbkoiWV9M0zD96HvjKGH_lT5Weer0VBH2q6hdsLlXWifstW-BZrTyy4U1a7nUByC2KY-EpwNDGax6SFaXvWWJydqPHAwlCKYl3XIEKy6DC-ofnX6d7llzr-JI5JlftXvY7p5kHiix84lkGi/w72-h72-p-k-no-nu/ShowerOfRoses-6919.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b26"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-6919.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 4570
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   4570
Md5:    8ddae02c1810141cbe651a00a9edfb54
Sha1:   49d3aebf67d32a045a7fddfac81bb8640bab7a8b
Sha256: 29b714f90cf10c0c67866f9bc4a73ef0ce0d513de83def3114e62c271609dad3
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEhJhEVef0OK2fsCCOwxbabpfUw-BLSq7DXKkB-KJ2Np343uaX4hK5kHJbgYwAS5xqxu-wEAyb3SfmBc8h-_KKMWIoup-cIc-ipRAHP8qpWu5SqDJwHKRNi1Bu7F-yMbIT5v6loRhnMp-b3RScY3db6rJOqMIqX3QCYAQZUMZmsGYynLW_w9_wR0l6ru/w640-h480/ShowerOfRoses-7160.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4d"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7160.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 39234
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x480, components 3\012- data
Size:   39234
Md5:    0c7654c539ac86b68d738a7c527507c0
Sha1:   5e9188140c0bcdae5dc0b510111f0ea2809622fa
Sha256: 8b0bb2efed270e4a330acb508e08966353c7575f5834b2a33c5e2444f56ac750
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEgGYDUqPneftwG34ALlca60TpycWQnMyEuKlyWn-TbMgajgPclw4003P8LqkG43trWuz8I8pLCNsrYg2A14T6feg7P90ob3Af265YrxzCMlULq9cMYau0yNa4M6QJi0bmdigqlHuAveGG-UjgQ4inbyIRXYvX1uH_6q6b6aSkgYPOxw-WqhDCuMih_Z/w72-h72-p-k-no-nu/ShowerOfRoses-6736.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15a93"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-6736.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 3341
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   3341
Md5:    80c53fb452b81c358776242d84d693a2
Sha1:   7c173fb5b5ad0ac6af7722b18b91c94c1cb602ef
Sha256: 34990cf1a86a10c45effa0c42d3579989ec2b9a2b59d839b08d6d2559343886b
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEgvjaMwYHtLoLfJ0nvO42aUOXIpHc7HN3CR2P5TCJAVX1gXLqkblGpjbGo87xA3XTCp0t_UaPMtXVoJmy81ny6iRFi_NRq25JOFtkUivyC9NHMaY9RVkpvy4WtFo-5uSszrOIw3HznM6fkrXbYd23xpOz5gSRwrrU-dWCxIUXLUWKdHjxDC84E2_cvC/s16000/ShowerOfRoses-7200.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b5a"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7200.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 150016
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x853, components 3\012- data
Size:   150016
Md5:    2d5ac1bd1e2c70507c722a2c03b99dfe
Sha1:   4aaab85545a1cdfbb36b43fe3b0fe3595a43dfb2
Sha256: de73b328c8214bc3a98b7dea75534c5baf28b787885077524f40b6953743670f
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEhvauYGP_DK1AKaRvvssuhRLHp8tHausQnf-B2cm4Yake0M1JTv7cnayzmtK7hcrd5pwDgO0MfCztPWUW0L8__o_MWMvYyPGTJlU2SgBKt4gDpaPCfeMvpV4WrS3MiWH7hryFSaJa4TztQ0Beqgj-KQVmN9ILJQRaXMBn5uldvdvD1v8q6883q5HsO8/s16000/ShowerOfRoses-7242.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b6b"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7242.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 136643
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x853, components 3\012- data
Size:   136643
Md5:    ed6da600628716b140073c66b29fe54f
Sha1:   3d5dabc9c5258074c1ec425d0b37203d815a1c4f
Sha256: 8d6a53c257f8c97bbffe426fc3b12ebf77d64bfe94b3b7a795434f1dbc84146d
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEip6cjGflj0cVEdk8SOzms2zWK4QEjDKSjPglCNEcutcZhZjdKAxyAvfTUiTMdgcP-o12RyfSryqH3kT5_g3xW0epzuTZxqNxi9kbkBvInVqvjV_TvsWvzYVAJ5fYUrPNYEgKhq9WILcwUah9RNMsoeQtdV6aHQRBDqO_JLDvmLV1NxvQxKC8qSjslj/w72-h72-p-k-no-nu/ShowerOfRoses-7086.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4a"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7086.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 2414
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Size:   2414
Md5:    96d5cdc448bbd2bc34dbd15c58888f72
Sha1:   b9849c1915b55018837b1fae996b105cd13b9e94
Sha256: b3f2d56513466a7aeab05d034272aefdc961396ca1e2e93aa6f11362c6072e80
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEiU5rQM7K6S9mtsrdnOXb5G_mfjS2jfqsZ8QSdaQVbh9ydZXnXMozIJS17894SfCxZXdGtM4WPlIA2OkImzlGH-JRtvPBBNdnAkALS7HV8u0vTHoR3-VRJiP8PMTbGkChb-ijtdRWhxRRfKGI8Bp6d6uXXooWiN7s0E9yMldvwkKoPXbCjJzFy6SQui/w640-h308/ShowerOfRoses-7087.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4b"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-7087.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 48137
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x307, components 3\012- data
Size:   48137
Md5:    440d97a22b4897450dcd8753f9a47e4e
Sha1:   8577091586aa4b41e523323ab47391a748c9aeb2
Sha256: 87327a2098c1678d4f250bedc5a593286c09df5eedce243c96628f61c0b538e9
                                        
                                            GET /img/a/AVvXsEhZBoOrj72XV348FG9AkljhaXpgui0de6amRbqKco53FKhv7rpiw1JhLSumuDCTORWPmRUXyySEQ8N-cu0-E2R3l1tvgGzGR16P4m1OK6pJhc8LldPvHmsPoqvZct63HAhadpvJTv91touva1O1cJrMH_ZZneoRKLDM9gEHdx24raVgkDixho7VFfr4 HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v1589c"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="300x250.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 13299
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 300x250, components 3\012- data
Size:   13299
Md5:    ab5c4f8cb3c82036016b6351f737cfa2
Sha1:   47efadfd64d8af6825a79d6eb7877f33197e427a
Sha256: e762ad3a713bfd5cbdb65139217a55dff71f7b4075556ffbcd9bcd4792ecdc28
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEj7KBIBG-dWHaOQPY1s0iuP8DriSl0h_D-4yKgRdB9fRLUe7jLvkiyiZitKodypSpTOiJvBPmnutu0_bLbm2ZiKdOjp71Tfjqd0GtM0-TqCSsXnhx6HKYN7Ln7zXbspVGRkQwM5AtGve9rKL9w4PZrr3UX-1PPBDMeGjIboVFhZoKjfVSg1sltfIh9z/w300-h400/ShowerOfRoses-2536.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b4d"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-2536.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 41442
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 300x400, components 3\012- data
Size:   41442
Md5:    bc57ea0607f8c88cd4d808e7307cd84b
Sha1:   3c136932a422cb1cae501743a12fa08de72d0f46
Sha256: 874b29d5104b4c5676d39a830fd151c47ee91b30b8f69e76ee2bc9b6a4f3e14a
                                        
                                            GET /img/a/AVvXsEimGitBPfzHlfPQzxLWo-R7h6Mc0vKrrqdGeDGdJ3AZB6LZqym9YtH8DjyuRk2G3vnaOxBjTfZMGouPAsKWzdNQCADaI9Y6LLYPCUy39uLfnrb9knonZLU7D7CxYcyQk9p8gtYUYH_SKEhi5fzvAc9bbsCs0HqMsAJIIlTj63_a0FxhROEnKHp5_kV3 HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15994"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="PrayLatin-Ad.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 66966
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], progressive, precision 8, 600x500, components 3\012- data
Size:   66966
Md5:    e8a3df782f50564815f4d98c592d7c8a
Sha1:   de3ac3e78bfdae0d2b6d92a95eceb462c17cd3db
Sha256: 138a54314cabf379006c600e9574efbca654e7e11d54c86d708877f986ebcd0e
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEhKB1dLH8zRAR6NVPgJ6aSq_s0X7xEuDl-Ox4Pv_amcP3l3VenNhW-C0GiAs7Q_YA6v6Btvl7cuHYDFfxbVYVDzHgWvd3_-FIkrrdSAiDFlOJQlxsbMAkaCsGilb_l926HnRSpNQrth-d9Rd8ALjIF_L3kUNFz8_uyV8BjgcN1jybb9Yx5I9PsSI-JH/w640-h480/ShowerOfRoses-8311.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg
                                        
access-control-expose-headers: Content-Length
etag: "v15b6d"
expires: Mon, 05 Sep 2022 19:51:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="ShowerOfRoses-8311.jpg"
vary: Origin
x-content-type-options: nosniff
date: Sun, 04 Sep 2022 19:51:16 GMT
server: fife
content-length: 89506
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 640x480, components 3\012- data
Size:   89506
Md5:    6b421d8c9e0e2cebebaa48baf05a20ad
Sha1:   cb94b0b90d5c61f57d0dfe19f7f3bd60dbaf71a7
Sha256: 45c0f24e5912fe39ed5dcb0408da667c9ec2fa515a2e51c5993af5b57227b587
                                        
                                            GET /img/b/R29vZ2xl/AVvXsEj5p47nR75FlZZkKowHbc7U1V-UJjVqx-PwVYwEx8lU4r4v3v7szWUgyG9W8cmCZs_OMOFrKkY_Yq8JRYd12y76twrwEUAPKEIChzHNvS8LcXAF2RiLR-Jw1uuDKxbof4kpu3EAq1975qM68k89RfDU4l54keV0VHI8uDhs6IaZ9sLAi8LRJ1CgmTf3/w300-h400/ShowerOfRoses-7207.jpg HTTP/1.1 
Host: blogger.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.showerofrosesblog.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.1
HTTP/2 200 OK
content-type: image/jpeg