Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    143s
  • max time network
    144s
  • platform
    windows7_x64
  • resource
    win7-20231129-en
  • resource tags

    arch:x64arch:x86image:win7-20231129-enlocale:en-usos:windows7-x64system
  • submitted
    17/06/2024, 02:01 UTC

General

  • Target

    b64bcb6d1b9cf812be96b0d40baaf8e8_JaffaCakes118.html

  • Size

    108KB

  • MD5

    b64bcb6d1b9cf812be96b0d40baaf8e8

  • SHA1

    6e5628f2c989c69a200ae24022cb6d5edf576856

  • SHA256

    6b42dc33f52f8a7c88fb424d98628419cfe68f6b909a57235b39a1eaacc9322b

  • SHA512

    5609d7a27ee3ab7a7ca3ffd923704c90beed3a611755faeb4f32ef7a06c96e8e384f0c76a058b6391ee3355859236f17e4fbd0313e2d5674b38d719062c75308

  • SSDEEP

    3072:4iviEPLsewYlW68t68vH6OEn2TX5ppRIR8Lg2jlS2+9pZ:4iviEPLsew24VRIR8m

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
  • Modifies Internet Explorer settings 1 TTPs 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\b64bcb6d1b9cf812be96b0d40baaf8e8_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1688
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1688 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2296

Network

  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
    Response
    ajax.googleapis.com
    IN A
    172.217.16.202
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
    Response
    www.blogger.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    216.58.212.137
  • flag-us
    DNS
    connect.facebook.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    connect.facebook.net
    IN A
    Response
    connect.facebook.net
    IN CNAME
    scontent.xx.fbcdn.net
    scontent.xx.fbcdn.net
    IN A
    163.70.147.23
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
    Response
    apis.google.com
    IN CNAME
    plus.l.google.com
    plus.l.google.com
    IN A
    142.250.185.174
  • flag-us
    DNS
    blogergadgets.googlecode.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    blogergadgets.googlecode.com
    IN A
    Response
    blogergadgets.googlecode.com
    IN CNAME
    googlecode.l.googleusercontent.com
    googlecode.l.googleusercontent.com
    IN A
    142.250.102.82
  • flag-us
    DNS
    sites.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    sites.google.com
    IN A
    Response
    sites.google.com
    IN A
    172.217.16.206
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
    Response
    resources.blogblog.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    216.58.212.137
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
    Response
    2.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.186.161
  • flag-us
    DNS
    mediopati.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    mediopati.net
    IN A
    Response
  • flag-us
    DNS
    widgets.fbshare.me
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.fbshare.me
    IN A
    Response
    widgets.fbshare.me
    IN A
    107.21.116.202
  • flag-us
    DNS
    platform.twitter.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    platform.twitter.com
    IN A
    Response
    platform.twitter.com
    IN CNAME
    platform.twitter.map.fastly.net
    platform.twitter.map.fastly.net
    IN A
    199.232.56.157
  • flag-us
    DNS
    dl.dropbox.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    dl.dropbox.com
    IN A
    Response
    dl.dropbox.com
    IN CNAME
    edge-block-www-env.dropbox-dns.com
    edge-block-www-env.dropbox-dns.com
    IN A
    162.125.64.15
  • flag-us
    DNS
    1.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    1.bp.blogspot.com
    IN A
    Response
    1.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.186.161
  • flag-us
    DNS
    lh6.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh6.googleusercontent.com
    IN A
    Response
    lh6.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.185.97
  • flag-us
    DNS
    lh3.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh3.googleusercontent.com
    IN A
    Response
    lh3.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.185.97
  • flag-us
    DNS
    lh4.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh4.googleusercontent.com
    IN A
    Response
    lh4.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.185.97
  • flag-us
    DNS
    i42.tinypic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i42.tinypic.com
    IN A
    Response
  • flag-us
    DNS
    oi44.tinypic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    oi44.tinypic.com
    IN A
    Response
  • flag-de
    GET
    https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js
    IEXPLORE.EXE
    Remote address:
    172.217.16.206:443
    Request
    GET /a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: sites.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    Content-Type: text/html; charset=UTF-8
    Location: https://www.google.com/a/blogsydescargas.co.cc/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&followup=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&ul=1
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:01:51 GMT
    Expires: Mon, 17 Jun 2024 02:01:51 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://apis.google.com/js/plusone.js
    IEXPLORE.EXE
    Remote address:
    142.250.185.174:443
    Request
    GET /js/plusone.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Mon, 17 Jun 2024 02:01:54 GMT
    Expires: Mon, 17 Jun 2024 02:01:54 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "f9177ff6f5150176"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.185.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 56667
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 15 Jun 2024 01:00:22 GMT
    Expires: Sun, 15 Jun 2025 01:00:22 GMT
    Cache-Control: public, max-age=31536000
    Age: 176502
    Last-Modified: Mon, 06 May 2024 15:31:30 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_1?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.185.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_1?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 14806
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 10:38:52 GMT
    Expires: Fri, 13 Jun 2025 10:38:52 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 06 May 2024 15:31:30 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 314592
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://apis.google.com/js/platform:gapi.iframes.style.common.js
    IEXPLORE.EXE
    Remote address:
    142.250.185.174:443
    Request
    GET /js/platform:gapi.iframes.style.common.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Mon, 17 Jun 2024 02:02:04 GMT
    Expires: Mon, 17 Jun 2024 02:02:04 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "ec623040ac7f59b9"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    142.250.185.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 46050
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 08:58:57 GMT
    Expires: Fri, 13 Jun 2025 08:58:57 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 06 May 2024 15:31:30 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 320587
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://resources.blogblog.com/img/icon18_wrench_allbkg.png
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:443
    Request
    GET /img/icon18_wrench_allbkg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 475
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 03:53:52 GMT
    Expires: Thu, 20 Jun 2024 03:53:52 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Wed, 12 Jun 2024 19:56:09 GMT
    Content-Type: image/png
    Age: 338882
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    http://2.bp.blogspot.com/-M7jkhR8aIWA/UYV66UdpgxI/AAAAAAAAA70/ElCIEYpxek4/s1600/Untitled-4.jpg
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-M7jkhR8aIWA/UYV66UdpgxI/AAAAAAAAA70/ElCIEYpxek4/s1600/Untitled-4.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="Untitled-4.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 36450
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:53 GMT
    Expires: Tue, 18 Jun 2024 02:01:53 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v3be"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 3
  • flag-de
    GET
    http://2.bp.blogspot.com/_9FoH-7_4Le0/S8eh8_CB7WI/AAAAAAAAAxs/CPn6Fmfe4Qs/s1600/widget-head-bg.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /_9FoH-7_4Le0/S8eh8_CB7WI/AAAAAAAAAxs/CPn6Fmfe4Qs/s1600/widget-head-bg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="widget-head-bg.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 250
    X-XSS-Protection: 0
    Date: Sun, 16 Jun 2024 22:26:09 GMT
    Expires: Mon, 17 Jun 2024 22:26:09 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v31b"
    Content-Type: image/png
    Vary: Origin
    Age: 12959
  • flag-de
    GET
    http://2.bp.blogspot.com/-qtTXLzYp8qw/UXiOzs7JXeI/AAAAAAAAAx4/9aZhG8xGuog/s1600/Untitled-3.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-qtTXLzYp8qw/UXiOzs7JXeI/AAAAAAAAAx4/9aZhG8xGuog/s1600/Untitled-3.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="Untitled-3.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 7422
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:53 GMT
    Expires: Tue, 18 Jun 2024 02:01:53 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v31f"
    Content-Type: image/png
    Vary: Origin
    Age: 3
  • flag-nl
    GET
    http://blogergadgets.googlecode.com/files/related-posts-with-thumbnails-for-blogger-pro.js
    IEXPLORE.EXE
    Remote address:
    142.250.102.82:80
    Request
    GET /files/related-posts-with-thumbnails-for-blogger-pro.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogergadgets.googlecode.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html; charset=UTF-8
    Referrer-Policy: no-referrer
    Content-Length: 1615
    Date: Mon, 17 Jun 2024 02:01:50 GMT
  • flag-gb
    GET
    http://connect.facebook.net/en_US/all.js
    IEXPLORE.EXE
    Remote address:
    163.70.147.23:80
    Request
    GET /en_US/all.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://connect.facebook.net/en_US/all.js
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Mon, 17 Jun 2024 02:01:49 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-de
    GET
    http://ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js
    IEXPLORE.EXE
    Remote address:
    172.217.16.202:80
    Request
    GET /ajax/libs/jquery/1.5.2/jquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: ajax.googleapis.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
    Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
    Timing-Allow-Origin: *
    Content-Length: 85925
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 18:51:53 GMT
    Expires: Fri, 13 Jun 2025 18:51:53 GMT
    Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
    Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 285003
  • flag-de
    GET
    http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
    IEXPLORE.EXE
    Remote address:
    172.217.16.202:80
    Request
    GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: ajax.googleapis.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
    Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
    Timing-Allow-Origin: *
    Content-Length: 93868
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Wed, 12 Jun 2024 23:47:12 GMT
    Expires: Thu, 12 Jun 2025 23:47:12 GMT
    Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
    Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 353684
  • flag-de
    GET
    http://2.bp.blogspot.com/-12O9ZSp6xHI/UTIzDwoSIwI/AAAAAAAAAVw/CwjIh-9jLCk/w72-h72-p-k-no-nu/Captura.PNG
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-12O9ZSp6xHI/UTIzDwoSIwI/AAAAAAAAAVw/CwjIh-9jLCk/w72-h72-p-k-no-nu/Captura.PNG HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="Captura.PNG"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 10362
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:53 GMT
    Expires: Tue, 18 Jun 2024 02:01:53 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v15d"
    Content-Type: image/png
    Vary: Origin
    Age: 11
  • flag-de
    GET
    http://2.bp.blogspot.com/-OlTpcdxjBDY/TjNnoH0sMJI/AAAAAAAAAH0/4P2_gkqd-9Y/s1600/ico-search.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-OlTpcdxjBDY/TjNnoH0sMJI/AAAAAAAAAH0/4P2_gkqd-9Y/s1600/ico-search.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="ico-search.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 530
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:53 GMT
    Expires: Tue, 18 Jun 2024 02:01:53 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v7d"
    Content-Type: image/png
    Vary: Origin
    Age: 15
  • flag-us
    GET
    http://widgets.fbshare.me/files/fbshare.js
    IEXPLORE.EXE
    Remote address:
    107.21.116.202:80
    Request
    GET /files/fbshare.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: widgets.fbshare.me
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Date: Mon, 17 Jun 2024 02:01:56 GMT
    Server: Apache/2.4.18 (Ubuntu)
    Content-Length: 298
    Keep-Alive: timeout=5, max=100
    Connection: Keep-Alive
    Content-Type: text/html; charset=iso-8859-1
  • flag-de
    GET
    http://www.blogger.com/img/icon18_edit_allbkg.gif
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:80
    Request
    GET /img/icon18_edit_allbkg.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 162
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 06:42:42 GMT
    Expires: Thu, 20 Jun 2024 06:42:42 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Wed, 12 Jun 2024 18:00:26 GMT
    Content-Type: image/gif
    Age: 328762
  • flag-de
    GET
    https://lh6.googleusercontent.com/proxy/LgaIkYcJ8t3WA2TuymgjbUjo3CcFzuqqZUZIcr_a4ZH9c6ds9ZsFw28eHunfk_RwbehmTjWyAAfShu-E-U9mGZiaehRPjDNGlRb3oXKAe0QWW_jQkSLz86txjlqJ4FgTAg=w72-h72-p-k-no-nu
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:443
    Request
    GET /proxy/LgaIkYcJ8t3WA2TuymgjbUjo3CcFzuqqZUZIcr_a4ZH9c6ds9ZsFw28eHunfk_RwbehmTjWyAAfShu-E-U9mGZiaehRPjDNGlRb3oXKAe0QWW_jQkSLz86txjlqJ4FgTAg=w72-h72-p-k-no-nu HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh6.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Cross-Origin-Resource-Policy: cross-origin
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:02:02 GMT
    Server: fife
    Content-Length: 1715
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://lh6.googleusercontent.com/proxy/D3xiHkVr5Oc318OC8yiW1oEGblVY_viUGMXQQiir-be097bCsUWj5DbWpFZ2nDp52WngCRQpXrNl4A
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:443
    Request
    GET /proxy/D3xiHkVr5Oc318OC8yiW1oEGblVY_viUGMXQQiir-be097bCsUWj5DbWpFZ2nDp52WngCRQpXrNl4A HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh6.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Cross-Origin-Resource-Policy: cross-origin
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:02:02 GMT
    Server: fife
    Content-Length: 1645
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-gb
    GET
    http://platform.twitter.com/widgets.js
    IEXPLORE.EXE
    Remote address:
    199.232.56.157:80
    Request
    GET /widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: platform.twitter.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Connection: keep-alive
    Content-Length: 27597
    Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT
    x-amz-server-side-encryption: AES256
    Cache-Control: public, max-age=1800
    Content-Type: application/javascript; charset=utf-8
    Etag: "824beb891744db98ccbd3a456e59e0f7+gzip"
    Content-Encoding: gzip
    Access-Control-Allow-Methods: GET
    Access-Control-Allow-Origin: *
    P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
    Accept-Ranges: bytes
    Date: Mon, 17 Jun 2024 02:01:49 GMT
    X-Served-By: cache-iad-kjyo7100044-IAD, cache-lon4234-LON
    X-Cache: HIT, HIT
    Vary: Accept-Encoding
    TW-CDN: FT
  • flag-de
    GET
    https://www.blogger.com/static/v1/widgets/2383172227-widgets.js
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:443
    Request
    GET /static/v1/widgets/2383172227-widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 52271
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 00:18:25 GMT
    Expires: Tue, 17 Jun 2025 00:18:25 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 10 Oct 2018 21:44:27 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 6208
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.blogger.com/static/v1/widgets/254310735-widget_css_bundle.css
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:443
    Request
    GET /static/v1/widgets/254310735-widget_css_bundle.css HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 7524
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 13:07:42 GMT
    Expires: Fri, 13 Jun 2025 13:07:42 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 05 Mar 2019 03:12:59 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Age: 305651
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.blogger.com/dyn-css/authorization.css?targetBlogID=5117407937090537507&zx=e49504a8-7833-42fb-ac95-8a5f490e2b83
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:443
    Request
    GET /dyn-css/authorization.css?targetBlogID=5117407937090537507&zx=e49504a8-7833-42fb-ac95-8a5f490e2b83 HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/css; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Mon, 17 Jun 2024 02:01:54 GMT
    Last-Modified: Mon, 17 Jun 2024 02:01:54 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://www.blogger.com/navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    216.58.212.137:443
    Request
    GET /navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/html; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Mon, 17 Jun 2024 02:02:04 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-gb
    GET
    http://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js
    IEXPLORE.EXE
    Remote address:
    162.125.64.15:80
    Request
    GET /u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dl.dropbox.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    location: https://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js
    date: Mon, 17 Jun 2024 02:01:49 GMT
    server: envoy
    x-dropbox-request-id: 51a537291ea84470a9ae3456eef64765
    content-length: 0
  • flag-de
    GET
    https://lh4.googleusercontent.com/proxy/sWNwmwr6A3W1pHIVOP2R9LBDtJXJM4KCP2uVV0eEAjjRQm9KLsC0u5otjPyI3pndebso3NXWXKP1b9QGZnTa=w72-h72-n-k-no-nu
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:443
    Request
    GET /proxy/sWNwmwr6A3W1pHIVOP2R9LBDtJXJM4KCP2uVV0eEAjjRQm9KLsC0u5otjPyI3pndebso3NXWXKP1b9QGZnTa=w72-h72-n-k-no-nu HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh4.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: image/jpeg
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:56 GMT
    Server: fife
    Content-Length: 897
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://lh3.googleusercontent.com/proxy/v_bIKXu49FNwQcK500W3o4BsQ8FTgFFP7v7Pdlz7H-B9-cdNuZi5LFO1Jsvffg1SCV8m7NbYmUSy34JuuKr8Ru-cIF-U7nOyuwOwf_SK9kdy4lF4uAcHm9O_4RyXx0MjTv97YAc=w72-h72-p-k-no-nu
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:443
    Request
    GET /proxy/v_bIKXu49FNwQcK500W3o4BsQ8FTgFFP7v7Pdlz7H-B9-cdNuZi5LFO1Jsvffg1SCV8m7NbYmUSy34JuuKr8Ru-cIF-U7nOyuwOwf_SK9kdy4lF4uAcHm9O_4RyXx0MjTv97YAc=w72-h72-p-k-no-nu HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh3.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Cross-Origin-Resource-Policy: cross-origin
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:51 GMT
    Server: fife
    Content-Length: 1720
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://lh6.googleusercontent.com/proxy/nZ8G5WgYFmTEojvamqoC-PZURM-1qy9gt_ICi3mlDUJGCJLkP0r6vKwNGgwhUbBjlaKqts80ug6ES66uEyrqaT1mESXl=w72-h72-p-k-no-nu
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:443
    Request
    GET /proxy/nZ8G5WgYFmTEojvamqoC-PZURM-1qy9gt_ICi3mlDUJGCJLkP0r6vKwNGgwhUbBjlaKqts80ug6ES66uEyrqaT1mESXl=w72-h72-p-k-no-nu HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh6.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Content-Type: image/jpeg
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    Server: fife
    Content-Length: 897
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    http://1.bp.blogspot.com/-dBrWWcHSlvc/UYlVdVLg2OI/AAAAAAAAA9E/AobVUQ5A4Zg/s308/Untitled-1.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-dBrWWcHSlvc/UYlVdVLg2OI/AAAAAAAAA9E/AobVUQ5A4Zg/s308/Untitled-1.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v3d2"
    Expires: Tue, 18 Jun 2024 02:01:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Untitled-1.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:50 GMT
    Server: fife
    Content-Length: 2756
    X-XSS-Protection: 0
  • flag-de
    GET
    http://1.bp.blogspot.com/-T19IguUBuz8/UXnqCQtcXxI/AAAAAAAAA24/VQkjbVFXfBQ/s308/NNNNNNNNNNN.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-T19IguUBuz8/UXnqCQtcXxI/AAAAAAAAA24/VQkjbVFXfBQ/s308/NNNNNNNNNNN.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v36f"
    Expires: Tue, 18 Jun 2024 02:01:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="NNNNNNNNNNN.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:50 GMT
    Server: fife
    Content-Length: 21909
    X-XSS-Protection: 0
  • flag-de
    GET
    http://1.bp.blogspot.com/-2nXB1r7Gm4Y/UYlU5pnb5YI/AAAAAAAAA84/GuFv5mjMPX4/s308/Untitled-1.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-2nXB1r7Gm4Y/UYlU5pnb5YI/AAAAAAAAA84/GuFv5mjMPX4/s308/Untitled-1.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v3cf"
    Expires: Tue, 18 Jun 2024 02:01:51 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Untitled-1.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:51 GMT
    Server: fife
    Content-Length: 3561
    X-XSS-Protection: 0
  • flag-de
    GET
    http://1.bp.blogspot.com/-TgSgM74ma3A/UYlVo_sGR-I/AAAAAAAAA9Q/ec0qBFnArdc/s308/Untitled-1.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-TgSgM74ma3A/UYlVo_sGR-I/AAAAAAAAA9Q/ec0qBFnArdc/s308/Untitled-1.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v3d5"
    Expires: Tue, 18 Jun 2024 02:01:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Untitled-1.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:50 GMT
    Server: fife
    Content-Length: 3493
    X-XSS-Protection: 0
  • flag-de
    GET
    http://1.bp.blogspot.com/-VsholkhnwCk/UXnnKziSvNI/AAAAAAAAA2U/A-hmzprnYOU/s1600/NNNNNNNNNNN.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /-VsholkhnwCk/UXnnKziSvNI/AAAAAAAAA2U/A-hmzprnYOU/s1600/NNNNNNNNNNN.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 1.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v366"
    Expires: Tue, 18 Jun 2024 02:01:50 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="NNNNNNNNNNN.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:01:50 GMT
    Server: fife
    Content-Length: 24563
    X-XSS-Protection: 0
  • flag-us
    DNS
    pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    pki.goog
    IN A
    Response
    pki.goog
    IN A
    216.239.32.29
  • flag-us
    DNS
    pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    pki.goog
    IN A
    Response
    pki.goog
    IN A
    216.239.32.29
  • flag-us
    GET
    http://pki.goog/gsr1/gsr1.crt
    IEXPLORE.EXE
    Remote address:
    216.239.32.29:80
    Request
    GET /gsr1/gsr1.crt HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 889
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 01:22:58 GMT
    Expires: Mon, 17 Jun 2024 02:12:58 GMT
    Cache-Control: public, max-age=3000
    Age: 2329
    Last-Modified: Wed, 20 May 2020 16:45:00 GMT
    Content-Type: application/pkix-cert
    Vary: Accept-Encoding
  • flag-us
    GET
    http://pki.goog/gsr1/gsr1.crt
    IEXPLORE.EXE
    Remote address:
    216.239.32.29:80
    Request
    GET /gsr1/gsr1.crt HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 889
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 01:57:22 GMT
    Expires: Mon, 17 Jun 2024 02:47:22 GMT
    Cache-Control: public, max-age=3000
    Age: 265
    Last-Modified: Wed, 20 May 2020 16:45:00 GMT
    Content-Type: application/pkix-cert
    Vary: Accept-Encoding
  • flag-us
    DNS
    www.microsoft.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
    Response
    www.microsoft.com
    IN CNAME
    www.microsoft.com-c-3.edgekey.net
    www.microsoft.com-c-3.edgekey.net
    IN CNAME
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    www.microsoft.com-c-3.edgekey.net.globalredir.akadns.net
    IN CNAME
    e13678.dscb.akamaiedge.net
    e13678.dscb.akamaiedge.net
    IN A
    23.55.97.181
  • flag-us
    DNS
    www.microsoft.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
  • flag-us
    DNS
    www.microsoft.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.microsoft.com
    IN A
  • flag-gb
    GET
    https://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js
    IEXPLORE.EXE
    Remote address:
    162.125.64.15:443
    Request
    GET /u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dl.dropbox.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Content-Type: text/html
    Date: Mon, 17 Jun 2024 02:02:07 GMT
    Server: envoy
    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
    X-Robots-Tag: noindex, nofollow, noimageindex
    Content-Encoding: gzip
    Vary: Accept-Encoding
    X-Dropbox-Response-Origin: remote
    X-Dropbox-Request-Id: 03a056f5740544538a5bae84e32be431
    Transfer-Encoding: chunked
  • flag-gb
    GET
    https://connect.facebook.net/en_US/all.js
    IEXPLORE.EXE
    Remote address:
    163.70.147.23:443
    Request
    GET /en_US/all.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Access-Control-Expose-Headers: X-FB-Content-MD5
    x-fb-content-md5: df1f2cfb4d6ac65eed94a24a36d3d162
    ETag: "598a41e57294fb9e6093baf1b5a4694c"
    Content-Type: application/x-javascript; charset=utf-8
    timing-allow-origin: *
    Access-Control-Allow-Origin: *
    Expires: Mon, 17 Jun 2024 02:13:02 GMT
    Cache-Control: public,max-age=1200,stale-while-revalidate=3600
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    X-Frame-Options: DENY
    Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
    content-md5: xTq84/czGT/YgvWnHGAmZA==
    X-FB-Debug: lg53cBjkUVVWxbEBJ5UmGMhCeokxWgrs6tbUYkeWuMUT4fqCd6zhieTo5UjSnNU2uAeLI2jkDsnH/f3ThIL+5A==
    Date: Mon, 17 Jun 2024 02:02:03 GMT
    X-FB-Connection-Quality: GOOD; q=0.7, rtt=55, rtx=2, c=15, mss=1357, tbw=3222, tp=-1, tpl=-1, uplat=1, ullat=-1
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 1690
  • flag-gb
    GET
    https://connect.facebook.net/en_US/all.js?hash=496c50c21c6bc162008625558809abef
    IEXPLORE.EXE
    Remote address:
    163.70.147.23:443
    Request
    GET /en_US/all.js?hash=496c50c21c6bc162008625558809abef HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: connect.facebook.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Access-Control-Expose-Headers: X-FB-Content-MD5
    x-fb-content-md5: 11c3f1f9784c5a7602d679615875faa0
    ETag: "447aa84c84080483414f260946405eee"
    Content-Type: application/x-javascript; charset=utf-8
    timing-allow-origin: *
    Access-Control-Allow-Origin: *
    Expires: Tue, 17 Jun 2025 01:27:30 GMT
    Cache-Control: public,max-age=31536000,stale-while-revalidate=3600,immutable
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    X-Frame-Options: DENY
    Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
    content-md5: /crcapVXbSQOMNeR10r4yg==
    X-FB-Debug: P5+ty4vsgvNdMqPFNxcWVQ1kviKsal0Ktfl+yZLxUVNYyKZVisUe5G187A6UjQ3Re+B4FE/uT2riqxkManAfeA==
    Date: Mon, 17 Jun 2024 02:02:04 GMT
    X-FB-Connection-Quality: GOOD; q=0.7, rtt=52, rtx=2, c=21, mss=1357, tbw=7794, tp=-1, tpl=-1, uplat=0, ullat=-1
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 88560
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    172.217.18.3
  • flag-de
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:00:36 GMT
    Expires: Mon, 17 Jun 2024 02:50:36 GMT
    Cache-Control: public, max-age=3000
    Age: 75
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-de
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:00:36 GMT
    Expires: Mon, 17 Jun 2024 02:50:36 GMT
    Cache-Control: public, max-age=3000
    Age: 75
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-de
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:00:36 GMT
    Expires: Mon, 17 Jun 2024 02:50:36 GMT
    Cache-Control: public, max-age=3000
    Age: 87
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    172.217.18.3
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDMOFR8VxzxxAkEgX%2BGQk96
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDMOFR8VxzxxAkEgX%2BGQk96 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:07:59 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3232
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC2dR4YizzUCxKHP6k1yvPh
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC2dR4YizzUCxKHP6k1yvPh HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:57:01 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 290
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 02:01:26 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 25
  • flag-de
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEDt1X6Prs9vJElJfMUDwoFw%3D
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEDt1X6Prs9vJElJfMUDwoFw%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:26:56 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2097
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 02:01:40 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 29
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:15:36 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2793
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:20:31 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2499
  • flag-us
    DNS
    www.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    142.250.184.228
  • flag-de
    GET
    https://www.google.com/a/blogsydescargas.co.cc/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&followup=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&ul=1
    IEXPLORE.EXE
    Remote address:
    142.250.184.228:443
    Request
    GET /a/blogsydescargas.co.cc/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&followup=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&ul=1 HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Security-Policy: script-src 'nonce-kqBC1wtZH3cajOPVsNpBew' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /cspreport
    Content-Type: text/html; charset=UTF-8
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:01:52 GMT
    Expires: Mon, 17 Jun 2024 02:01:52 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://www.google.com/js/th/j85XBmD3K-auBXRuR4gFy-YbXrRwDWE2e6ZsFqyJZWU.js
    IEXPLORE.EXE
    Remote address:
    142.250.184.228:443
    Request
    GET /js/th/j85XBmD3K-auBXRuR4gFy-YbXrRwDWE2e6ZsFqyJZWU.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs"
    Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
    Content-Length: 24213
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 13 Jun 2024 05:11:36 GMT
    Expires: Fri, 13 Jun 2025 05:11:36 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 03 Jun 2024 09:30:00 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 334233
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 02:01:26 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 26
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDVrcRzpx13cgqfLWoEUCEh
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDVrcRzpx13cgqfLWoEUCEh HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:37:38 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1455
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 02:01:40 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 29
  • flag-de
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEFBqejuPTqOaErDmhNU8%2BVo%3D
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEFBqejuPTqOaErDmhNU8%2BVo%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:23:47 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2302
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:20:31 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2499
  • flag-us
    DNS
    www.facebook.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.facebook.com
    IN A
    Response
    www.facebook.com
    IN CNAME
    star-mini.c10r.facebook.com
    star-mini.c10r.facebook.com
    IN A
    157.240.221.35
  • flag-us
    DNS
    www.facebook.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.facebook.com
    IN A
  • flag-us
    DNS
    upload.wikimedia.org
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    upload.wikimedia.org
    IN A
    Response
    upload.wikimedia.org
    IN A
    185.15.59.240
  • flag-us
    DNS
    www.youtube.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.youtube.com
    IN A
    Response
    www.youtube.com
    IN CNAME
    youtube-ui.l.google.com
    youtube-ui.l.google.com
    IN A
    142.250.186.46
    youtube-ui.l.google.com
    IN A
    172.217.18.14
    youtube-ui.l.google.com
    IN A
    142.250.185.174
    youtube-ui.l.google.com
    IN A
    142.250.184.238
    youtube-ui.l.google.com
    IN A
    172.217.16.206
    youtube-ui.l.google.com
    IN A
    142.250.186.142
    youtube-ui.l.google.com
    IN A
    142.250.184.206
    youtube-ui.l.google.com
    IN A
    172.217.16.142
    youtube-ui.l.google.com
    IN A
    142.250.181.238
    youtube-ui.l.google.com
    IN A
    142.250.185.238
    youtube-ui.l.google.com
    IN A
    142.250.186.174
    youtube-ui.l.google.com
    IN A
    216.58.206.78
    youtube-ui.l.google.com
    IN A
    142.250.186.110
    youtube-ui.l.google.com
    IN A
    142.250.185.206
    youtube-ui.l.google.com
    IN A
    142.250.74.206
    youtube-ui.l.google.com
    IN A
    172.217.18.110
  • flag-us
    DNS
    i41.tinypic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i41.tinypic.com
    IN A
    Response
  • flag-us
    DNS
    i41.tinypic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i41.tinypic.com
    IN A
  • flag-us
    DNS
    i44.tinypic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i44.tinypic.com
    IN A
    Response
  • flag-nl
    GET
    http://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG
    IEXPLORE.EXE
    Remote address:
    185.15.59.240:80
    Request
    GET /wikipedia/commons/4/49/Fondo_negro.JPG HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: upload.wikimedia.org
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    content-length: 0
    location: https://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG
    server: HAProxy
    x-cache: cp3080 int
    x-cache-status: int-tls
    connection: close
  • flag-de
    GET
    http://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:80
    Request
    GET /embed/Kx3O4QyZiQ0?feature=player_embedded HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Content-Type: application/binary
    X-Content-Type-Options: nosniff
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Mon, 17 Jun 2024 02:02:07 GMT
    Location: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
  • flag-gb
    GET
    http://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:80
    Request
    GET /plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    http://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:80
    Request
    GET /plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light
    Content-Type: text/plain
    Server: proxygen-bolt
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/pages/Nota-barrialnetAqui%20pones%20tu%20fan%20page&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /pages/Nota-barrialnetAqui%20pones%20tu%20fan%20page&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 404 Not Found
    Vary: Accept-Encoding
    Content-Encoding: gzip
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7381286664505465972", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7381286664505465972"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net 'unsafe-inline' blob: data: 'self' 'unsafe-eval';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy"
    cross-origin-resource-policy: same-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-Frame-Options: DENY
    Strict-Transport-Security: max-age=15552000; preload
    Content-Type: text/html; charset="utf-8"
    X-FB-Debug: RkawPe0KJE/usJeJJxCagA4fhUpIvFdO3WpyDQJBlUJ4muUP59+lbAECdV3VZxNFfQGi/4fuFE0suxd4CAvcNQ==
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    Proxy-Status: http_request_error; e_fb_configversion="AcJ-8MTO99nJbmllzy-tR-YrIuqai4zeGaxpv-bWJyuFoyXhPdELkBo9W3H_XA"; e_fb_vipport="AcJqLZr0olY40q1nChadnaRf3aMvgfSycHHQdUUvR9zKPEL0JmhqXS9TAbCb"; e_upip="AcK8oALbuaxT6wlHRRMr2-4iaNa2U4ylpWgivSiAT9aTecF5cmqg2LcMFuPw-9PT2mtqOHF-cAnnFwBflC38c1NvwlEDF-TgyGI"; e_fb_requestsequencenumber="AcL0_vcWUBxHsqd_rr6wwLqPSn9p6FxBbrX2WKi7CuuxUP7U4B5jz-SvjGAE8A"; e_fb_hostheader="AcJhcqcdKCVNGhoUYVU9FuXkYQR6KE67fQS_NKDbJuo-B9uA_cnUfJFw-EWbYTDJzxHQxcdNAUIZ6w"; e_fb_vipaddr="AcLr3kR9TeRME6vv-GhMQfpLIZIUo9To-FEesUTys41VHKkaGxnG3IzwhjcEUDPTu-8tAXK460VyVTENRrx2VEs66Va8-RG3mQ"; e_fb_requesthandler="AcLREWTAJM9AC72iRJpJBhTFS6aGXKhizu0MovnwE3NBV1HWg9nxMPyCruMte-iGQT_ylDHj"; e_fb_requesttime="AcKrXx8zyPhGzHEZv-JucuPXYmJjV-WQzRbs24u29qpCz5AREXOGsCwvOYfA3-Akb5B5vrWduA"; e_fb_builduser="AcJlSR1SqvehxLb_yS5RB2eQLg2BNOuY2aciTfLC7h9ViVKJ4ZH_OJzf6Jw6jaxkEwQ"; e_fb_httpversion="AcJStZNg4UmH9v8eJId-PBgUrWNUH-yK8q_um4izTYn6qA-Tf1flGBqKBzKc"; e_fb_binaryversion="AcLaiYUhlSqXI3l5AqYDvPAHaDI2i4ldxgsWoHqXN-chh_2lrNUdJzn1TEOizd9qx6pl1tNXaKdad3cuHg5vWSr-VwfzvXSEfy4"; e_proxy="AcKEvq3DE81ugTmyYT4w1lCpOy-sbbwGqFyPmk29dPMbhKIOWOh9HbbS1TekVT_Hs1tZ8suR7l3nKa8yKb51", http_request_error; e_fb_configversion="AcKfLPZFwhovRJP707o3-N4EuN5tZtMuSQ2aWUCv0pMZlQJjfjRqp5GljNCveQ"; e_fb_vipport="AcIMWT2Fz5dAolkFp0ABlRDipAjti_6WhSbmj61qhxDVq_0hwjZsaZsFujJb"; e_upip="AcINvCMaYftprHE2n5JwM5a5AiIEvYhQT7E_Uy-YOulZxH2UvXDGjkxq_fsa3mOm1fGYLuSOMeqcC7lUX6YZPzOdBr7epX6GkQ"; e_fb_requestsequencenumber="AcJROtDI3LoVrOql0q9rFoxdfASo8mgDlaT01RDHtqo8_CkozeSmB1SKBw"; e_fb_hostheader="AcI1jOvxrU5dPBb4zvR1g4ErduJpVt3wJnNRjWX4-NJhbyRnqdjVIe_n92AFXCFYRReX0-T82DNLpw"; e_fb_vipaddr="AcLsQXlUj7XwHqs72tfrcee531RnMJ6JNVlp2rFLbNn5GlepypM8DfyqVpxnf6KYEqhD0_50Iew"; e_fb_requesthandler="AcKuuQNrbphfr2CECzGuEx7IyPaLI53KoeKWRPUM7-k-qT6p9NtITfENQm1QER1B02yyzEit"; e_fb_requesttime="AcJ2Q2QM5uuD3T9sgCUrjK31vVcnfJQmquw0jcxeqFCswx8zF1F6uXP5tOKXgHmJpoHSka1-Wg"; e_fb_builduser="AcJrXPQ1usi2RU6GYUAnf3QFxZiuIz94hRnEmX9Ip_qan_zqYSwxHaCH7LCUNozQvJc"; e_fb_httpversion="AcJjwhUjki4569mmtZQlVQ4apcuVtpF8-oUNm5afgSPX3WJR2hy0X6xCClP4"; e_fb_binaryversion="AcK672xu7BfnIlOWLLgARukujrQ4x-5E5DGp9rGPoCK0__yxR_CbQZUv_Ja7eJkFgh8HeWUqv_X8hgFi49yKtHPEVV-vcxzH_VY"; e_proxy="AcKGu4V_F9IETDDo94Zf9ko5DbR7s-BxSo9CiWJ2RjFgBS6kMKIjL1SIFPsoiRIDKZrd13RimsxYUIQ"
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=49, rtx=0, c=10, mss=1357, tbw=3223, tp=-1, tpl=-1, uplat=84, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    https://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7381286664526116989"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7381286664526116989"}]}
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: XM+/UPD6aMv9/WTGx+rE0Q8jdZRSRwh64mkhNrydbIxwe+0XowfLwmHkoUXJyVowfyIu6Q1vFHMZa31NPC5jpA==
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=43, rtx=0, c=10, mss=1357, tbw=3221, tp=-1, tpl=-1, uplat=16, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html;charset=utf-8
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7381286665145371959"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7381286665145371959"}]}
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: same-origin-allow-popups;report-to="coop_report"
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    X-FB-Debug: QURgzZCKHtuIWIeOTFekflDYOT/sJhqlkAbxUBIlFALDpvR2Bo9R18onvheWOOAO5NapVSa17dtNsZmr3qsCPA==
    Date: Mon, 17 Jun 2024 02:02:05 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=43, rtx=1, c=10, mss=1357, tbw=6551, tp=-1, tpl=-1, uplat=14, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 0
  • flag-gb
    GET
    https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df139ee286f9b648%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=288&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df139ee286f9b648%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=288&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7381286677414343287", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7381286677414343287"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: unsafe-none;report-to="coop_report"
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    Strict-Transport-Security: max-age=15552000; preload
    Content-Type: text/html; charset="utf-8"
    X-FB-Debug: yq24x40dyjbGCNbnh79Li+TA1qvNyXD5Huv/kRBYGyC9zEtBqGiPpAcrIoXsj9CrrCG6ofm3tNeofaibH+43Bw==
    Date: Mon, 17 Jun 2024 02:02:08 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=43, rtx=2, c=10, mss=1357, tbw=9881, tp=-1, tpl=-1, uplat=43, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-gb
    GET
    https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1d51d30787a17%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=0&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292
    IEXPLORE.EXE
    Remote address:
    157.240.221.35:443
    Request
    GET /plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1d51d30787a17%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=0&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.facebook.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    reporting-endpoints: coop_report="https://www.facebook.com/browser_reporting/coop/?minimize=0", coep_report="https://www.facebook.com/browser_reporting/coep/?minimize=0", default="https://www.facebook.com/ajax/browser_error_reports/?device_level=unknown&brsid=7381286677378338866", permissions_policy="https://www.facebook.com/ajax/browser_error_reports/"
    report-to: {"max_age":2592000,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coop\/?minimize=0"}],"group":"coop_report","include_subdomains":true}, {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/coep\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown&brsid=7381286677378338866"}]}, {"max_age":21600,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval' https://*.google-analytics.com *.google.com;style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline' https://fonts.googleapis.com;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com https://*.google-analytics.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com https://fonts.gstatic.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: *.whatsapp.net *.fb.com *.oculuscdn.com *.tenor.co *.tenor.com *.giphy.com https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://*.google-analytics.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data: *.tenor.co *.tenor.com https://*.giphy.com;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com/ https://*.paywithmybank.com/ https://www.googleadservices.com https://googleads.g.doubleclick.net https://www.google.com https://td.doubleclick.net *.google.com *.doubleclick.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(self), autoplay=(), battery=(self), bluetooth=(), camera=(self), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(self), clipboard-write=(self), compute-pressure=(), display-capture=(self), encrypted-media=(self), fullscreen=(self), gamepad=*, geolocation=(self), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(self), midi=(), otp-credentials=(), payment=(), picture-in-picture=(self), private-state-token-issuance=(), publickey-credentials-get=(self), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=(self);report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
    cross-origin-opener-policy: unsafe-none;report-to="coop_report"
    Pragma: no-cache
    Cache-Control: private, no-cache, no-store, must-revalidate
    Expires: Sat, 01 Jan 2000 00:00:00 GMT
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    Strict-Transport-Security: max-age=15552000; preload
    Content-Type: text/html; charset="utf-8"
    X-FB-Debug: xkFlgAsk97pWGKE0I11CZWihCxE/tFPaHm7ny/gV0tIKLHlxde6F10TeYEx7ux6mEfhyMBEKiBZJBO8Oi/ZTCQ==
    Date: Mon, 17 Jun 2024 02:02:08 GMT
    X-FB-Connection-Quality: EXCELLENT; q=0.9, rtt=47, rtx=2, c=20, mss=1357, tbw=22241, tp=-1, tpl=-1, uplat=260, ullat=0
    Alt-Svc: h3=":443"; ma=86400
    Transfer-Encoding: chunked
    Connection: keep-alive
  • flag-us
    DNS
    static.xx.fbcdn.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    static.xx.fbcdn.net
    IN A
    Response
    static.xx.fbcdn.net
    IN CNAME
    scontent.xx.fbcdn.net
    scontent.xx.fbcdn.net
    IN A
    163.70.147.23
  • flag-us
    DNS
    lh5.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    lh5.googleusercontent.com
    IN A
    Response
    lh5.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    142.250.185.97
  • flag-gb
    GET
    https://static.xx.fbcdn.net/rsrc.php/v3/yE/l/0,cross/LG4XKM9M9OM.css?_nc_x=Ij3Wp8lg5Kz
    IEXPLORE.EXE
    Remote address:
    163.70.147.23:443
    Request
    GET /rsrc.php/v3/yE/l/0,cross/LG4XKM9M9OM.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1
    Accept: text/css, */*
    Referer: https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df139ee286f9b648%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=288&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.xx.fbcdn.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/css; charset=utf-8
    Access-Control-Allow-Origin: *
    Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
    Expires: Mon, 09 Jun 2025 18:19:16 GMT
    Cache-Control: public,max-age=31536000,immutable
    reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"
    timing-allow-origin: *
    document-policy: force-load-at-top
    permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), battery=(self), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), usb-unrestricted=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"
    cross-origin-resource-policy: cross-origin
    X-Content-Type-Options: nosniff
    report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}
    x-ua-compatible: IE=edge
    content-md5: DhXdo/8nVDNhqzTW57WzhQ==
    X-FB-Debug: jCWD+I5c9ihN0ZoQcZQOBbUHoTqK2p6/YIXhpBzI9zCGUlPc8S6dmY+YrAc/1M6sQ3NBF6qH+QUGk4SMmXULJQ==
    Date: Mon, 17 Jun 2024 02:02:08 GMT
    X-FB-Connection-Quality: GOOD; q=0.7, rtt=61, rtx=1, c=15, mss=1357, tbw=3223, tp=-1, tpl=-1, uplat=1, ullat=-1
    Alt-Svc: h3=":443"; ma=86400
    Connection: keep-alive
    Content-Length: 6031
  • flag-nl
    GET
    https://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG
    IEXPLORE.EXE
    Remote address:
    185.15.59.240:443
    Request
    GET /wikipedia/commons/4/49/Fondo_negro.JPG HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: upload.wikimedia.org
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    content-type: image/jpeg
    x-object-meta-sha1base36: coh2yciu2x52e9wzaoelvusmrihjfmh
    last-modified: Sat, 05 Oct 2013 05:13:52 GMT
    content-length: 24627
    date: Mon, 17 Jun 2024 02:01:54 GMT
    server: envoy
    etag: bc0a5ca0ec4ca8c7d0438c6180fd659c
    age: 14
    x-cache: cp3078 hit, cp3078 hit/1
    x-cache-status: hit-front
    server-timing: cache;desc="hit-front", host;desc="cp3078"
    strict-transport-security: max-age=106384710; includeSubDomains; preload
    report-to: { "group": "wm_nel", "max_age": 604800, "endpoints": [{ "url": "https://intake-logging.wikimedia.org/v1/events?stream=w3c.reportingapi.network_error&schema_uri=/w3c/reportingapi/network_error/1.0.0" }] }
    nel: { "report_to": "wm_nel", "max_age": 604800, "failure_fraction": 0.05, "success_fraction": 0.0}
    x-client-ip: 191.101.209.39
    x-content-type-options: nosniff
    access-control-allow-origin: *
    access-control-expose-headers: Age, Date, Content-Length, Content-Range, X-Content-Duration, X-Cache
    timing-allow-origin: *
    accept-ranges: bytes
  • flag-de
    GET
    https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /embed/Kx3O4QyZiQ0?feature=player_embedded HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    X-Content-Type-Options: nosniff
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Mon, 17 Jun 2024 02:02:07 GMT
    Strict-Transport-Security: max-age=31536000
    Cross-Origin-Resource-Policy: cross-origin
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factor=*, ch-ua-platform=*, ch-ua-platform-version=*
    Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main"
    Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9
    P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    Set-Cookie: YSC=HIWD5uxvtC0; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
    Set-Cookie: VISITOR_INFO1_LIVE=IQakCrEuN9g; Domain=.youtube.com; Expires=Sat, 14-Dec-2024 02:02:07 GMT; Path=/; Secure; HttpOnly; SameSite=none
    Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D; Domain=.youtube.com; Expires=Sat, 14-Dec-2024 02:02:07 GMT; Path=/; Secure; HttpOnly; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    GET
    https://www.youtube.com/s/player/74204f6c/www-player.css
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /s/player/74204f6c/www-player.css HTTP/1.1
    Accept: text/css, */*
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 380092
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 16 Jun 2024 19:06:39 GMT
    Expires: Mon, 16 Jun 2025 19:06:39 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 12 Jun 2024 04:23:02 GMT
    Content-Type: text/css
    Vary: Accept-Encoding, Origin
    Age: 24928
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.youtube.com/s/player/74204f6c/www-embed-player.vflset/www-embed-player.js
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /s/player/74204f6c/www-embed-player.vflset/www-embed-player.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 116598
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 16 Jun 2024 22:41:30 GMT
    Expires: Mon, 16 Jun 2025 22:41:30 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 12 Jun 2024 04:23:02 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 12037
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/base.js
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /s/player/74204f6c/player_ias.vflset/en_US/base.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Content-Encoding: gzip
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 824822
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 01:59:20 GMT
    Expires: Tue, 17 Jun 2025 01:59:20 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 12 Jun 2024 04:23:02 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 168
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/remote.js
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /s/player/74204f6c/player_ias.vflset/en_US/remote.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 39279
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 15 Jun 2024 22:47:47 GMT
    Expires: Sun, 15 Jun 2025 22:47:47 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 12 Jun 2024 04:23:02 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 98062
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/embed.js
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /s/player/74204f6c/player_ias.vflset/en_US/embed.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Content-Length: 22351
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 16 Jun 2024 05:03:54 GMT
    Expires: Mon, 16 Jun 2025 05:03:54 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 12 Jun 2024 04:23:02 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding, Origin
    Age: 75495
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://www.youtube.com/generate_204?aPP9WQ
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    GET /generate_204?aPP9WQ HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.youtube.com
    Connection: Keep-Alive
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 204 No Content
    Content-Length: 0
    Cross-Origin-Resource-Policy: cross-origin
    Date: Mon, 17 Jun 2024 02:02:09 GMT
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    POST
    https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
    Accept: */*
    X-Goog-Request-Time: 1718589730260
    Content-Type: application/json
    X-Goog-Visitor-Id: CgtJUWFrQ3JFdU45Zyifsr6zBjIKCgJVUxIEGgAgDg%3D%3D
    X-YouTube-Client-Name: 56
    X-YouTube-Client-Version: 1.20240611.01.00
    X-YouTube-Utc-Offset: 0
    X-YouTube-Ad-Signals: dt=1718589727069&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=154%2C600%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C640%2C360&vis=1&wgl=true&ca_type=image
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: www.youtube.com
    Content-Length: 11005
    Connection: Keep-Alive
    Cache-Control: no-cache
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:02:11 GMT
    Server: scaffolding on HTTPServer2
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    POST
    https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
    IEXPLORE.EXE
    Remote address:
    142.250.186.46:443
    Request
    POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1
    Accept: */*
    X-Goog-Request-Time: 1718589787564
    Content-Type: application/json
    X-Goog-Visitor-Id: CgtJUWFrQ3JFdU45Zyifsr6zBjIKCgJVUxIEGgAgDg%3D%3D
    X-YouTube-Client-Name: 56
    X-YouTube-Client-Version: 1.20240611.01.00
    X-YouTube-Utc-Offset: 0
    X-YouTube-Ad-Signals: dt=1718589727489&flash=0&frm=2&u_tz&u_his=1&u_h=720&u_w=1280&u_ah=680&u_aw=1280&u_cd=24&bc=1&bih=-12245933&biw=-12245933&brdim=154%2C600%2C-8%2C-8%2C1280%2C%2C1296%2C696%2C640%2C360&vis=1&wgl=true&ca_type=image
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: www.youtube.com
    Content-Length: 1294
    Connection: Keep-Alive
    Cache-Control: no-cache
    Cookie: YSC=HIWD5uxvtC0; VISITOR_INFO1_LIVE=IQakCrEuN9g; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgDg%3D%3D
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:03:09 GMT
    Server: scaffolding on HTTPServer2
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    widgets.amung.us
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    widgets.amung.us
    IN A
    Response
    widgets.amung.us
    IN A
    104.22.75.171
    widgets.amung.us
    IN A
    104.22.74.171
    widgets.amung.us
    IN A
    172.67.8.141
  • flag-us
    DNS
    3.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    3.bp.blogspot.com
    IN A
    Response
    3.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.186.161
  • flag-us
    GET
    http://widgets.amung.us/small.js
    IEXPLORE.EXE
    Remote address:
    104.22.75.171:80
    Request
    GET /small.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: widgets.amung.us
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Mon, 17 Jun 2024 02:02:11 GMT
    Content-Type: application/x-javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    last-modified: Thu, 12 Jan 2023 17:19:22 GMT
    etag: W/"63c0411a-2170"
    expires: Tue, 18 Jun 2024 01:38:27 GMT
    cache-control: max-age=86400
    access-control-allow-origin: *
    content-encoding: gzip
    CF-Cache-Status: HIT
    Age: 1424
    Vary: Accept-Encoding
    Server: cloudflare
    CF-RAY: 894f74bc2afc415a-AMS
    alt-svc: h3=":443"; ma=86400
  • flag-de
    GET
    http://3.bp.blogspot.com/_9FoH-7_4Le0/S8eh_8b6wUI/AAAAAAAAAy0/HcxHFabfSXc/s1600/nav-bg.png
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:80
    Request
    GET /_9FoH-7_4Le0/S8eh_8b6wUI/AAAAAAAAAy0/HcxHFabfSXc/s1600/nav-bg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 3.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="nav-bg.png"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 217
    X-XSS-Protection: 0
    Date: Sun, 16 Jun 2024 22:26:09 GMT
    Expires: Mon, 17 Jun 2024 22:26:09 GMT
    Cache-Control: public, max-age=86400, no-transform
    Age: 12959
    ETag: "v32d"
    Content-Type: image/png
    Vary: Origin
  • flag-de
    GET
    http://lh5.googleusercontent.com/-TrTaWL7moiE/TtK640CncWI/AAAAAAAAGe4/bBgX4hEPjQQ/s000/z-bg.png
    IEXPLORE.EXE
    Remote address:
    142.250.185.97:80
    Request
    GET /-TrTaWL7moiE/TtK640CncWI/AAAAAAAAGe4/bBgX4hEPjQQ/s000/z-bg.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: lh5.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    ETag: "v2eef"
    Expires: Tue, 18 Jun 2024 02:02:08 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="z-bg.png"
    X-Content-Type-Options: nosniff
    Date: Mon, 17 Jun 2024 02:02:08 GMT
    Server: fife
    Content-Length: 2891
    X-XSS-Protection: 0
  • flag-us
    DNS
    googleads.g.doubleclick.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    googleads.g.doubleclick.net
    IN A
    Response
    googleads.g.doubleclick.net
    IN A
    142.250.186.162
  • flag-us
    DNS
    static.doubleclick.net
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    static.doubleclick.net
    IN A
    Response
    static.doubleclick.net
    IN A
    216.58.206.70
  • flag-de
    GET
    https://googleads.g.doubleclick.net/pagead/id
    IEXPLORE.EXE
    Remote address:
    142.250.186.162:443
    Request
    GET /pagead/id HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    Access-Control-Allow-Credentials: true
    Date: Mon, 17 Jun 2024 02:02:09 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Server: cafe
    Content-Length: 0
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    IEXPLORE.EXE
    Remote address:
    142.250.186.162:443
    Request
    GET /pagead/id?slf_rd=1 HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Access-Control-Allow-Credentials: true
    Content-Type: application/json; charset=UTF-8
    Date: Mon, 17 Jun 2024 02:02:09 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    X-Content-Type-Options: nosniff
    Content-Disposition: attachment; filename="f.txt"
    Content-Encoding: gzip
    Server: cafe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-nl
    GET
    https://static.doubleclick.net/instream/ad_status.js
    IEXPLORE.EXE
    Remote address:
    216.58.206.70:443
    Request
    GET /instream/ad_status.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media"
    Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
    Timing-Allow-Origin: *
    Content-Length: 29
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 01:56:57 GMT
    Expires: Mon, 17 Jun 2024 02:11:57 GMT
    Cache-Control: public, max-age=900
    Age: 312
    Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT
    Content-Type: text/javascript
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    jnn-pa.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    jnn-pa.googleapis.com
    IN A
    Response
    jnn-pa.googleapis.com
    IN A
    142.250.185.74
    jnn-pa.googleapis.com
    IN A
    142.250.186.106
    jnn-pa.googleapis.com
    IN A
    172.217.18.10
    jnn-pa.googleapis.com
    IN A
    142.250.184.234
    jnn-pa.googleapis.com
    IN A
    172.217.16.202
    jnn-pa.googleapis.com
    IN A
    216.58.206.74
    jnn-pa.googleapis.com
    IN A
    142.250.185.170
    jnn-pa.googleapis.com
    IN A
    142.250.74.202
    jnn-pa.googleapis.com
    IN A
    142.250.186.170
    jnn-pa.googleapis.com
    IN A
    142.250.185.138
    jnn-pa.googleapis.com
    IN A
    216.58.212.138
    jnn-pa.googleapis.com
    IN A
    142.250.185.202
    jnn-pa.googleapis.com
    IN A
    142.250.186.74
    jnn-pa.googleapis.com
    IN A
    216.58.206.42
    jnn-pa.googleapis.com
    IN A
    142.250.185.106
    jnn-pa.googleapis.com
    IN A
    172.217.23.106
  • flag-de
    POST
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
    IEXPLORE.EXE
    Remote address:
    142.250.185.74:443
    Request
    POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
    Accept: */*
    X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
    Content-Type: application/json+protobuf
    X-User-Agent: grpc-web-javascript/0.1
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: jnn-pa.googleapis.com
    Content-Length: 24
    Connection: Keep-Alive
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json+protobuf; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:02:10 GMT
    Server: ESF
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-de
    POST
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
    IEXPLORE.EXE
    Remote address:
    142.250.185.74:443
    Request
    POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
    Accept: */*
    X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
    Content-Type: application/json+protobuf
    X-User-Agent: grpc-web-javascript/0.1
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: jnn-pa.googleapis.com
    Content-Length: 847
    Connection: Keep-Alive
    Cache-Control: no-cache
    Response
    HTTP/1.1 200 OK
    Content-Type: application/json+protobuf; charset=UTF-8
    Vary: Origin
    Vary: X-Origin
    Vary: Referer
    Content-Encoding: gzip
    Date: Mon, 17 Jun 2024 02:02:10 GMT
    Server: ESF
    Cache-Control: private
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    i.ytimg.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    i.ytimg.com
    IN A
    Response
    i.ytimg.com
    IN A
    142.250.185.214
    i.ytimg.com
    IN A
    142.250.186.118
    i.ytimg.com
    IN A
    142.250.186.150
    i.ytimg.com
    IN A
    142.250.184.246
    i.ytimg.com
    IN A
    172.217.16.214
    i.ytimg.com
    IN A
    172.217.18.22
    i.ytimg.com
    IN A
    142.250.185.182
    i.ytimg.com
    IN A
    216.58.206.86
    i.ytimg.com
    IN A
    142.250.74.214
    i.ytimg.com
    IN A
    142.250.181.246
    i.ytimg.com
    IN A
    142.250.185.118
    i.ytimg.com
    IN A
    172.217.16.150
    i.ytimg.com
    IN A
    142.250.184.214
    i.ytimg.com
    IN A
    142.250.186.54
    i.ytimg.com
    IN A
    142.250.185.246
    i.ytimg.com
    IN A
    142.250.186.182
  • flag-de
    GET
    https://i.ytimg.com/vi/Kx3O4QyZiQ0/hqdefault.jpg
    IEXPLORE.EXE
    Remote address:
    142.250.185.214:443
    Request
    GET /vi/Kx3O4QyZiQ0/hqdefault.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: i.ytimg.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
    Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
    Timing-Allow-Origin: *
    Content-Length: 13834
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:54 GMT
    Expires: Mon, 17 Jun 2024 04:01:54 GMT
    Cache-Control: public, max-age=7200
    ETag: "0"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 16
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    yt3.ggpht.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    yt3.ggpht.com
    IN A
    Response
    yt3.ggpht.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.186.161
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:15:36 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2793
  • flag-de
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCja8Ke5Eav2gqeC5w7FnUq
    IEXPLORE.EXE
    Remote address:
    172.217.18.3:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCja8Ke5Eav2gqeC5w7FnUq HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Mon, 17 Jun 2024 01:27:44 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2066
  • flag-de
    GET
    https://yt3.ggpht.com/ytc/AIdro_kLqIIkrAdSIyx_8m2XdmVpl3DLuroSNMlQUeWlOucP5w=s68-c-k-c0x00ffffff-no-rj
    IEXPLORE.EXE
    Remote address:
    142.250.186.161:443
    Request
    GET /ytc/AIdro_kLqIIkrAdSIyx_8m2XdmVpl3DLuroSNMlQUeWlOucP5w=s68-c-k-c0x00ffffff-no-rj HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: yt3.ggpht.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="unnamed.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 3673
    X-XSS-Protection: 0
    Date: Mon, 17 Jun 2024 02:01:55 GMT
    Expires: Tue, 18 Jun 2024 02:01:55 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v36"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 18
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    fe0.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fe0.google.com
    IN A
    Response
  • flag-be
    DNS
    iexplore.exe
    Remote address:
    88.221.83.187:80
    Response
    HTTP/1.0 408 Request Time-out
    Server: AkamaiGHost
    Mime-Version: 1.0
    Date: Mon, 17 Jun 2024 02:03:00 GMT
    Content-Type: text/html
    Content-Length: 314
    Expires: Mon, 17 Jun 2024 02:03:00 GMT
  • flag-be
    GET
    http://www.bing.com/favicon.ico
    iexplore.exe
    Remote address:
    88.221.83.187:80
    Request
    GET /favicon.ico HTTP/1.1
    Accept: */*
    UA-CPU: AMD64
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; Win64; x64; Trident/7.0; rv:11.0) like Gecko
    Host: www.bing.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Cache-Control: public, max-age=15552000
    Content-Length: 4286
    Content-Type: image/x-icon
    Last-Modified: Mon, 01 Jan 1601 00:00:00 GMT
    X-EventID: 666ded0002fb4b16961a9b0c01d629c2
    Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA
    UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0=
    Content-Security-Policy-Report-Only: script-src https: 'strict-dynamic' 'report-sample' 'nonce-fNyUpBuOxQy1iLmRNnsBiMTZeK6G0zd0lI88nvKGCwA='; base-uri 'self';report-to csp-endpoint
    Report-To: {"group":"csp-endpoint","max_age":86400,"endpoints":[{"url":"https://aefd.nelreports.net/api/report?cat=bingcsp"}]}
    X-MSEdge-Ref: Ref A: 0867F1C1DD8246D6927835DA28F47A88 Ref B: DUS30EDGE0912 Ref C: 2024-06-15T19:35:28Z
    Date: Mon, 17 Jun 2024 02:02:25 GMT
    Connection: keep-alive
    X-CDN-TraceID: 0.b753dd58.1718589745.7d713d9
  • flag-de
    GET
    https://googleads.g.doubleclick.net/pagead/id
    IEXPLORE.EXE
    Remote address:
    142.250.186.162:443
    Request
    GET /pagead/id HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    Access-Control-Allow-Credentials: true
    Date: Mon, 17 Jun 2024 02:04:09 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    Content-Type: text/html; charset=UTF-8
    X-Content-Type-Options: nosniff
    Server: cafe
    Content-Length: 0
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-de
    GET
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    IEXPLORE.EXE
    Remote address:
    142.250.186.162:443
    Request
    GET /pagead/id?slf_rd=1 HTTP/1.1
    Accept: */*
    Referer: https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: googleads.g.doubleclick.net
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
    Timing-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Access-Control-Allow-Credentials: true
    Content-Type: application/json; charset=UTF-8
    Date: Mon, 17 Jun 2024 02:04:10 GMT
    Pragma: no-cache
    Expires: Fri, 01 Jan 1990 00:00:00 GMT
    Cache-Control: no-cache, no-store, must-revalidate
    X-Content-Type-Options: nosniff
    Content-Disposition: attachment; filename="f.txt"
    Content-Encoding: gzip
    Server: cafe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • 172.217.16.206:443
    https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js
    tls, http
    IEXPLORE.EXE
    1.2kB
    8.4kB
    12
    13

    HTTP Request

    GET https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js

    HTTP Response

    302
  • 142.250.185.174:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs
    tls, http
    IEXPLORE.EXE
    7.9kB
    180.7kB
    84
    140

    HTTP Request

    GET https://apis.google.com/js/plusone.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_1?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/js/platform:gapi.iframes.style.common.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.6jI6mC1Equ4.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=AAAQ/rs=AHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ/cb=gapi.loaded_0?le=scs

    HTTP Response

    200
  • 216.58.212.137:443
    www.blogger.com
    tls
    IEXPLORE.EXE
    619 B
    351 B
    8
    5
  • 216.58.212.137:443
    https://resources.blogblog.com/img/icon18_wrench_allbkg.png
    tls, http
    IEXPLORE.EXE
    1.4kB
    5.8kB
    14
    10

    HTTP Request

    GET https://resources.blogblog.com/img/icon18_wrench_allbkg.png

    HTTP Response

    200
  • 142.250.186.161:80
    http://2.bp.blogspot.com/_9FoH-7_4Le0/S8eh8_CB7WI/AAAAAAAAAxs/CPn6Fmfe4Qs/s1600/widget-head-bg.png
    http
    IEXPLORE.EXE
    1.8kB
    39.7kB
    25
    33

    HTTP Request

    GET http://2.bp.blogspot.com/-M7jkhR8aIWA/UYV66UdpgxI/AAAAAAAAA70/ElCIEYpxek4/s1600/Untitled-4.jpg

    HTTP Response

    200

    HTTP Request

    GET http://2.bp.blogspot.com/_9FoH-7_4Le0/S8eh8_CB7WI/AAAAAAAAAxs/CPn6Fmfe4Qs/s1600/widget-head-bg.png

    HTTP Response

    200
  • 216.58.212.137:443
    www.blogger.com
    tls
    IEXPLORE.EXE
    954 B
    534 B
    10
    6
  • 142.250.186.161:80
    http://2.bp.blogspot.com/-qtTXLzYp8qw/UXiOzs7JXeI/AAAAAAAAAx4/9aZhG8xGuog/s1600/Untitled-3.png
    http
    IEXPLORE.EXE
    958 B
    12.2kB
    13
    12

    HTTP Request

    GET http://2.bp.blogspot.com/-qtTXLzYp8qw/UXiOzs7JXeI/AAAAAAAAAx4/9aZhG8xGuog/s1600/Untitled-3.png

    HTTP Response

    200
  • 142.250.102.82:80
    http://blogergadgets.googlecode.com/files/related-posts-with-thumbnails-for-blogger-pro.js
    http
    IEXPLORE.EXE
    687 B
    2.0kB
    8
    5

    HTTP Request

    GET http://blogergadgets.googlecode.com/files/related-posts-with-thumbnails-for-blogger-pro.js

    HTTP Response

    404
  • 163.70.147.23:80
    http://connect.facebook.net/en_US/all.js
    http
    IEXPLORE.EXE
    637 B
    428 B
    8
    5

    HTTP Request

    GET http://connect.facebook.net/en_US/all.js

    HTTP Response

    301
  • 172.217.16.202:80
    http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
    http
    IEXPLORE.EXE
    4.1kB
    187.1kB
    77
    137

    HTTP Request

    GET http://ajax.googleapis.com/ajax/libs/jquery/1.5.2/jquery.min.js

    HTTP Response

    200

    HTTP Request

    GET http://ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js

    HTTP Response

    200
  • 142.250.185.174:443
    apis.google.com
    tls
    IEXPLORE.EXE
    954 B
    534 B
    10
    6
  • 142.250.102.82:80
    blogergadgets.googlecode.com
    IEXPLORE.EXE
    342 B
    136 B
    7
    3
  • 162.125.64.15:80
    dl.dropbox.com
    IEXPLORE.EXE
    532 B
    184 B
    11
    4
  • 163.70.147.23:80
    connect.facebook.net
    IEXPLORE.EXE
    288 B
    132 B
    6
    3
  • 142.250.186.161:80
    http://2.bp.blogspot.com/-OlTpcdxjBDY/TjNnoH0sMJI/AAAAAAAAAH0/4P2_gkqd-9Y/s1600/ico-search.png
    http
    IEXPLORE.EXE
    2.0kB
    12.3kB
    15
    12

    HTTP Request

    GET http://2.bp.blogspot.com/-12O9ZSp6xHI/UTIzDwoSIwI/AAAAAAAAAVw/CwjIh-9jLCk/w72-h72-p-k-no-nu/Captura.PNG

    HTTP Response

    200

    HTTP Request

    GET http://2.bp.blogspot.com/-OlTpcdxjBDY/TjNnoH0sMJI/AAAAAAAAAH0/4P2_gkqd-9Y/s1600/ico-search.png

    HTTP Response

    200
  • 172.217.16.206:443
    sites.google.com
    tls
    IEXPLORE.EXE
    1.1kB
    351 B
    10
    5
  • 107.21.116.202:80
    http://widgets.fbshare.me/files/fbshare.js
    http
    IEXPLORE.EXE
    969 B
    1.2kB
    15
    5

    HTTP Request

    GET http://widgets.fbshare.me/files/fbshare.js

    HTTP Response

    404
  • 216.58.212.137:80
    http://www.blogger.com/img/icon18_edit_allbkg.gif
    http
    IEXPLORE.EXE
    1.4kB
    964 B
    11
    5

    HTTP Request

    GET http://www.blogger.com/img/icon18_edit_allbkg.gif

    HTTP Response

    200
  • 142.250.185.97:443
    https://lh6.googleusercontent.com/proxy/D3xiHkVr5Oc318OC8yiW1oEGblVY_viUGMXQQiir-be097bCsUWj5DbWpFZ2nDp52WngCRQpXrNl4A
    tls, http
    IEXPLORE.EXE
    2.5kB
    14.7kB
    18
    18

    HTTP Request

    GET https://lh6.googleusercontent.com/proxy/LgaIkYcJ8t3WA2TuymgjbUjo3CcFzuqqZUZIcr_a4ZH9c6ds9ZsFw28eHunfk_RwbehmTjWyAAfShu-E-U9mGZiaehRPjDNGlRb3oXKAe0QWW_jQkSLz86txjlqJ4FgTAg=w72-h72-p-k-no-nu

    HTTP Response

    404

    HTTP Request

    GET https://lh6.googleusercontent.com/proxy/D3xiHkVr5Oc318OC8yiW1oEGblVY_viUGMXQQiir-be097bCsUWj5DbWpFZ2nDp52WngCRQpXrNl4A

    HTTP Response

    404
  • 216.58.212.137:443
    resources.blogblog.com
    tls
    IEXPLORE.EXE
    626 B
    351 B
    8
    5
  • 199.232.56.157:80
    http://platform.twitter.com/widgets.js
    http
    IEXPLORE.EXE
    1.1kB
    29.3kB
    19
    27

    HTTP Request

    GET http://platform.twitter.com/widgets.js

    HTTP Response

    200
  • 216.58.212.137:443
    https://www.blogger.com/navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    4.3kB
    74.8kB
    44
    66

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/2383172227-widgets.js

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/254310735-widget_css_bundle.css

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=5117407937090537507&zx=e49504a8-7833-42fb-ac95-8a5f490e2b83

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/navbar.g?targetBlogID=5117407937090537507&blogName=NB+%E2%94%80+NOTABARRIAL+%E2%99%AB&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://notabarrial.blogspot.com/search&blogLocale=es&v=2&homepageUrl=http://notabarrial.blogspot.com/&targetPostID=2987986355741569542&blogPostOrPageUrl=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&vt=-7305727983784523474&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.6jI6mC1Equ4.O%2Fam%3DAAAQ%2Fd%3D1%2Frs%3DAHpOoo-79kMK-M6Si-J0E_6fI_9RBHBrwQ%2Fm%3D__features__

    HTTP Response

    200
  • 162.125.64.15:80
    http://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js
    http
    IEXPLORE.EXE
    630 B
    465 B
    7
    5

    HTTP Request

    GET http://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js

    HTTP Response

    301
  • 142.250.185.97:443
    lh3.googleusercontent.com
    tls
    IEXPLORE.EXE
    974 B
    534 B
    10
    6
  • 107.21.116.202:80
    widgets.fbshare.me
    IEXPLORE.EXE
    342 B
    136 B
    7
    3
  • 142.250.186.161:80
    1.bp.blogspot.com
    IEXPLORE.EXE
    290 B
    88 B
    6
    2
  • 142.250.185.97:443
    lh4.googleusercontent.com
    IEXPLORE.EXE
    152 B
    3
  • 142.250.185.97:443
    https://lh4.googleusercontent.com/proxy/sWNwmwr6A3W1pHIVOP2R9LBDtJXJM4KCP2uVV0eEAjjRQm9KLsC0u5otjPyI3pndebso3NXWXKP1b9QGZnTa=w72-h72-n-k-no-nu
    tls, http
    IEXPLORE.EXE
    1.4kB
    11.9kB
    14
    14

    HTTP Request

    GET https://lh4.googleusercontent.com/proxy/sWNwmwr6A3W1pHIVOP2R9LBDtJXJM4KCP2uVV0eEAjjRQm9KLsC0u5otjPyI3pndebso3NXWXKP1b9QGZnTa=w72-h72-n-k-no-nu

    HTTP Response

    404
  • 172.217.16.202:80
    ajax.googleapis.com
    IEXPLORE.EXE
    152 B
    3
  • 199.232.56.157:80
    platform.twitter.com
    IEXPLORE.EXE
    388 B
    216 B
    8
    5
  • 142.250.185.97:443
    https://lh3.googleusercontent.com/proxy/v_bIKXu49FNwQcK500W3o4BsQ8FTgFFP7v7Pdlz7H-B9-cdNuZi5LFO1Jsvffg1SCV8m7NbYmUSy34JuuKr8Ru-cIF-U7nOyuwOwf_SK9kdy4lF4uAcHm9O_4RyXx0MjTv97YAc=w72-h72-p-k-no-nu
    tls, http
    IEXPLORE.EXE
    1.7kB
    12.6kB
    17
    17

    HTTP Request

    GET https://lh3.googleusercontent.com/proxy/v_bIKXu49FNwQcK500W3o4BsQ8FTgFFP7v7Pdlz7H-B9-cdNuZi5LFO1Jsvffg1SCV8m7NbYmUSy34JuuKr8Ru-cIF-U7nOyuwOwf_SK9kdy4lF4uAcHm9O_4RyXx0MjTv97YAc=w72-h72-p-k-no-nu

    HTTP Response

    404
  • 142.250.186.161:80
    1.bp.blogspot.com
    IEXPLORE.EXE
    342 B
    136 B
    7
    3
  • 142.250.185.97:443
    https://lh6.googleusercontent.com/proxy/nZ8G5WgYFmTEojvamqoC-PZURM-1qy9gt_ICi3mlDUJGCJLkP0r6vKwNGgwhUbBjlaKqts80ug6ES66uEyrqaT1mESXl=w72-h72-p-k-no-nu
    tls, http
    IEXPLORE.EXE
    1.7kB
    3.0kB
    14
    9

    HTTP Request

    GET https://lh6.googleusercontent.com/proxy/nZ8G5WgYFmTEojvamqoC-PZURM-1qy9gt_ICi3mlDUJGCJLkP0r6vKwNGgwhUbBjlaKqts80ug6ES66uEyrqaT1mESXl=w72-h72-p-k-no-nu

    HTTP Response

    404
  • 142.250.186.161:80
    1.bp.blogspot.com
    IEXPLORE.EXE
    342 B
    136 B
    7
    3
  • 142.250.185.97:443
    lh4.googleusercontent.com
    tls
    IEXPLORE.EXE
    1.4kB
    9.5kB
    16
    13
  • 142.250.186.161:80
    http://1.bp.blogspot.com/-2nXB1r7Gm4Y/UYlU5pnb5YI/AAAAAAAAA84/GuFv5mjMPX4/s308/Untitled-1.png
    http
    IEXPLORE.EXE
    1.9kB
    30.7kB
    19
    28

    HTTP Request

    GET http://1.bp.blogspot.com/-dBrWWcHSlvc/UYlVdVLg2OI/AAAAAAAAA9E/AobVUQ5A4Zg/s308/Untitled-1.png

    HTTP Response

    200

    HTTP Request

    GET http://1.bp.blogspot.com/-T19IguUBuz8/UXnqCQtcXxI/AAAAAAAAA24/VQkjbVFXfBQ/s308/NNNNNNNNNNN.png

    HTTP Response

    200

    HTTP Request

    GET http://1.bp.blogspot.com/-2nXB1r7Gm4Y/UYlU5pnb5YI/AAAAAAAAA84/GuFv5mjMPX4/s308/Untitled-1.png

    HTTP Response

    200
  • 142.250.186.161:80
    http://1.bp.blogspot.com/-VsholkhnwCk/UXnnKziSvNI/AAAAAAAAA2U/A-hmzprnYOU/s1600/NNNNNNNNNNN.png
    http
    IEXPLORE.EXE
    1.5kB
    30.0kB
    18
    26

    HTTP Request

    GET http://1.bp.blogspot.com/-TgSgM74ma3A/UYlVo_sGR-I/AAAAAAAAA9Q/ec0qBFnArdc/s308/Untitled-1.png

    HTTP Response

    200

    HTTP Request

    GET http://1.bp.blogspot.com/-VsholkhnwCk/UXnnKziSvNI/AAAAAAAAA2U/A-hmzprnYOU/s1600/NNNNNNNNNNN.png

    HTTP Response

    200
  • 216.239.32.29:80
    http://pki.goog/gsr1/gsr1.crt
    http
    IEXPLORE.EXE
    351 B
    1.8kB
    5
    4

    HTTP Request

    GET http://pki.goog/gsr1/gsr1.crt

    HTTP Response

    200
  • 216.239.32.29:80
    http://pki.goog/gsr1/gsr1.crt
    http
    IEXPLORE.EXE
    564 B
    1.8kB
    7
    5

    HTTP Request

    GET http://pki.goog/gsr1/gsr1.crt

    HTTP Response

    200
  • 162.125.64.15:443
    https://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js
    tls, http
    IEXPLORE.EXE
    3.0kB
    7.1kB
    23
    16

    HTTP Request

    GET https://dl.dropbox.com/u/35784805/Mil%20Trucos%20Blogger/paginacionbloggermtb.js

    HTTP Response

    404
  • 163.70.147.23:443
    https://connect.facebook.net/en_US/all.js?hash=496c50c21c6bc162008625558809abef
    tls, http
    IEXPLORE.EXE
    3.6kB
    103.4kB
    55
    89

    HTTP Request

    GET https://connect.facebook.net/en_US/all.js

    HTTP Response

    200

    HTTP Request

    GET https://connect.facebook.net/en_US/all.js?hash=496c50c21c6bc162008625558809abef

    HTTP Response

    200
  • 172.217.18.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    400 B
    2.0kB
    6
    5

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 172.217.18.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    558 B
    1.8kB
    7
    5

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 172.217.18.3:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    704 B
    1.8kB
    10
    6

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 172.217.18.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27
    http
    IEXPLORE.EXE
    2.8kB
    5.4kB
    17
    9

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDMOFR8VxzxxAkEgX%2BGQk96

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC2dR4YizzUCxKHP6k1yvPh

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEDt1X6Prs9vJElJfMUDwoFw%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27

    HTTP Response

    200
  • 142.250.184.228:443
    www.google.com
    tls
    IEXPLORE.EXE
    797 B
    4.6kB
    11
    10
  • 142.250.184.228:443
    https://www.google.com/js/th/j85XBmD3K-auBXRuR4gFy-YbXrRwDWE2e6ZsFqyJZWU.js
    tls, http
    IEXPLORE.EXE
    2.3kB
    34.3kB
    22
    33

    HTTP Request

    GET https://www.google.com/a/blogsydescargas.co.cc/ServiceLogin?service=jotspot&passive=1209600&continue=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&followup=https://sites.google.com/a/blogsydescargas.co.cc/ayudabloggers/scripts2/posts-relacionados-blogger.js&ul=1

    HTTP Response

    200

    HTTP Request

    GET https://www.google.com/js/th/j85XBmD3K-auBXRuR4gFy-YbXrRwDWE2e6ZsFqyJZWU.js

    HTTP Response

    200
  • 172.217.18.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27
    http
    IEXPLORE.EXE
    2.3kB
    5.4kB
    16
    9

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCKs%2BrKRVuteArIkbTC0DoL

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDVrcRzpx13cgqfLWoEUCEh

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDXDy6sV0XBHhIDynCcFx7e

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEFBqejuPTqOaErDmhNU8%2BVo%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCpT67swzp%2BPAq0KUWriv27

    HTTP Response

    200
  • 185.15.59.240:80
    http://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG
    http
    IEXPLORE.EXE
    588 B
    386 B
    6
    4

    HTTP Request

    GET http://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG

    HTTP Response

    301
  • 142.250.186.46:80
    www.youtube.com
    IEXPLORE.EXE
    242 B
    92 B
    5
    2
  • 185.15.59.240:80
    upload.wikimedia.org
    IEXPLORE.EXE
    380 B
    92 B
    8
    2
  • 142.250.186.46:80
    http://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded
    http
    IEXPLORE.EXE
    671 B
    1.0kB
    8
    5

    HTTP Request

    GET http://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded

    HTTP Response

    301
  • 157.240.221.35:80
    http://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    http
    IEXPLORE.EXE
    771 B
    944 B
    8
    6

    HTTP Request

    GET http://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21

    HTTP Response

    301
  • 157.240.221.35:80
    http://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light
    http
    IEXPLORE.EXE
    783 B
    1.0kB
    7
    5

    HTTP Request

    GET http://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light

    HTTP Response

    301
  • 157.240.221.35:443
    https://www.facebook.com/pages/Nota-barrialnetAqui%20pones%20tu%20fan%20page&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21
    tls, http
    IEXPLORE.EXE
    1.7kB
    28.7kB
    21
    25

    HTTP Request

    GET https://www.facebook.com/pages/Nota-barrialnetAqui%20pones%20tu%20fan%20page&layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21

    HTTP Response

    404
  • 157.240.221.35:443
    www.facebook.com
    tls
    IEXPLORE.EXE
    1.1kB
    4.2kB
    13
    10
  • 157.240.221.35:443
    https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1d51d30787a17%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=0&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292
    tls, http
    IEXPLORE.EXE
    5.2kB
    38.9kB
    30
    40

    HTTP Request

    GET https://www.facebook.com/plugins/like.php?href=http://www.facebook.com/notabarrialnet;layout=button_count&show_faces=false&width=50&action=like&colorscheme=light&height=21

    HTTP Response

    200

    HTTP Request

    GET https://www.facebook.com/plugins/like.php?href=http://notabarrial.blogspot.com/2013/03/video-lo-que-hacia-amara-la-negra-antes.html&layout=button_count&show_faces=false&width=350&height=0&action=like&font=tahoma&colorscheme=light

    HTTP Response

    200

    HTTP Request

    GET https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df139ee286f9b648%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=288&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292

    HTTP Response

    200

    HTTP Request

    GET https://www.facebook.com/plugins/like_box.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df1d51d30787a17%26domain%3D%26is_canvas%3Dfalse%26origin%3Dfile%253A%252F%252F%252Ff845491f51303%26relation%3Dparent.parent&container_width=0&header=true&href=https%3A%2F%2Fwww.facebook.com%2Fpages%2FNota-barrialnet%2F450039011732919%3Ffref%3Dts&locale=en_US&sdk=joey&show_faces=true&stream=false&width=292

    HTTP Response

    200
  • 163.70.147.23:443
    https://static.xx.fbcdn.net/rsrc.php/v3/yE/l/0,cross/LG4XKM9M9OM.css?_nc_x=Ij3Wp8lg5Kz
    tls, http
    IEXPLORE.EXE
    1.8kB
    12.1kB
    15
    17

    HTTP Request

    GET https://static.xx.fbcdn.net/rsrc.php/v3/yE/l/0,cross/LG4XKM9M9OM.css?_nc_x=Ij3Wp8lg5Kz

    HTTP Response

    200
  • 163.70.147.23:443
    static.xx.fbcdn.net
    tls
    IEXPLORE.EXE
    812 B
    593 B
    11
    7
  • 185.15.59.240:443
    https://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG
    tls, http
    IEXPLORE.EXE
    1.5kB
    30.6kB
    19
    26

    HTTP Request

    GET https://upload.wikimedia.org/wikipedia/commons/4/49/Fondo_negro.JPG

    HTTP Response

    200
  • 142.250.186.46:443
    https://www.youtube.com/s/player/74204f6c/www-player.css
    tls, http
    IEXPLORE.EXE
    9.2kB
    454.4kB
    177
    333

    HTTP Request

    GET https://www.youtube.com/embed/Kx3O4QyZiQ0?feature=player_embedded

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/74204f6c/www-player.css

    HTTP Response

    200
  • 142.250.186.46:443
    https://www.youtube.com/s/player/74204f6c/www-embed-player.vflset/www-embed-player.js
    tls, http
    IEXPLORE.EXE
    3.2kB
    123.8kB
    54
    94

    HTTP Request

    GET https://www.youtube.com/s/player/74204f6c/www-embed-player.vflset/www-embed-player.js

    HTTP Response

    200
  • 142.250.186.46:443
    www.youtube.com
    tls
    IEXPLORE.EXE
    519 B
    355 B
    6
    5
  • 142.250.186.46:443
    https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8
    tls, http
    IEXPLORE.EXE
    35.0kB
    937.9kB
    372
    692

    HTTP Request

    GET https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/base.js

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/remote.js

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/s/player/74204f6c/player_ias.vflset/en_US/embed.js

    HTTP Response

    200

    HTTP Request

    GET https://www.youtube.com/generate_204?aPP9WQ

    HTTP Response

    204

    HTTP Request

    POST https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

    HTTP Response

    200

    HTTP Request

    POST https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8

    HTTP Response

    200
  • 142.250.185.97:443
    lh6.googleusercontent.com
    tls
    IEXPLORE.EXE
    825 B
    399 B
    8
    6
  • 104.22.75.171:80
    http://widgets.amung.us/small.js
    http
    IEXPLORE.EXE
    629 B
    4.3kB
    8
    7

    HTTP Request

    GET http://widgets.amung.us/small.js

    HTTP Response

    200
  • 104.22.75.171:80
    widgets.amung.us
    IEXPLORE.EXE
    288 B
    172 B
    6
    4
  • 142.250.186.161:80
    http://3.bp.blogspot.com/_9FoH-7_4Le0/S8eh_8b6wUI/AAAAAAAAAy0/HcxHFabfSXc/s1600/nav-bg.png
    http
    IEXPLORE.EXE
    704 B
    1.6kB
    8
    6

    HTTP Request

    GET http://3.bp.blogspot.com/_9FoH-7_4Le0/S8eh_8b6wUI/AAAAAAAAAy0/HcxHFabfSXc/s1600/nav-bg.png

    HTTP Response

    200
  • 142.250.186.161:80
    3.bp.blogspot.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 142.250.185.97:80
    http://lh5.googleusercontent.com/-TrTaWL7moiE/TtK640CncWI/AAAAAAAAGe4/bBgX4hEPjQQ/s000/z-bg.png
    http
    IEXPLORE.EXE
    709 B
    4.2kB
    8
    7

    HTTP Request

    GET http://lh5.googleusercontent.com/-TrTaWL7moiE/TtK640CncWI/AAAAAAAAGe4/bBgX4hEPjQQ/s000/z-bg.png

    HTTP Response

    200
  • 142.250.185.97:80
    lh5.googleusercontent.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 142.250.186.162:443
    googleads.g.doubleclick.net
    tls
    IEXPLORE.EXE
    1.0kB
    4.8kB
    12
    10
  • 142.250.186.162:443
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    tls, http
    IEXPLORE.EXE
    1.8kB
    6.7kB
    15
    16

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id

    HTTP Response

    302

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

    HTTP Response

    200
  • 216.58.206.70:443
    static.doubleclick.net
    tls
    IEXPLORE.EXE
    1.6kB
    4.9kB
    16
    11
  • 216.58.206.70:443
    https://static.doubleclick.net/instream/ad_status.js
    tls, http
    IEXPLORE.EXE
    1.4kB
    5.6kB
    12
    10

    HTTP Request

    GET https://static.doubleclick.net/instream/ad_status.js

    HTTP Response

    200
  • 142.250.185.74:443
    https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
    tls, http
    IEXPLORE.EXE
    4.1kB
    52.3kB
    32
    46

    HTTP Request

    POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create

    HTTP Response

    200

    HTTP Request

    POST https://jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT

    HTTP Response

    200
  • 142.250.185.214:443
    https://i.ytimg.com/vi/Kx3O4QyZiQ0/hqdefault.jpg
    tls, http
    IEXPLORE.EXE
    1.7kB
    20.6kB
    18
    22

    HTTP Request

    GET https://i.ytimg.com/vi/Kx3O4QyZiQ0/hqdefault.jpg

    HTTP Response

    200
  • 142.250.185.214:443
    i.ytimg.com
    tls
    IEXPLORE.EXE
    980 B
    5.1kB
    11
    10
  • 172.217.18.3:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCja8Ke5Eav2gqeC5w7FnUq
    http
    IEXPLORE.EXE
    838 B
    3.1kB
    8
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDBsygc8YqRyAkPSmlfIAJo

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCja8Ke5Eav2gqeC5w7FnUq

    HTTP Response

    200
  • 142.250.186.161:443
    https://yt3.ggpht.com/ytc/AIdro_kLqIIkrAdSIyx_8m2XdmVpl3DLuroSNMlQUeWlOucP5w=s68-c-k-c0x00ffffff-no-rj
    tls, http
    IEXPLORE.EXE
    1.5kB
    14.6kB
    15
    16

    HTTP Request

    GET https://yt3.ggpht.com/ytc/AIdro_kLqIIkrAdSIyx_8m2XdmVpl3DLuroSNMlQUeWlOucP5w=s68-c-k-c0x00ffffff-no-rj

    HTTP Response

    200
  • 142.250.186.161:443
    yt3.ggpht.com
    tls
    IEXPLORE.EXE
    1.1kB
    10.3kB
    14
    13
  • 88.221.83.187:80
    www.bing.com
    http
    iexplore.exe
    242 B
    734 B
    5
    5

    HTTP Response

    408
  • 88.221.83.187:80
    http://www.bing.com/favicon.ico
    http
    iexplore.exe
    496 B
    5.9kB
    6
    7

    HTTP Request

    GET http://www.bing.com/favicon.ico

    HTTP Response

    200
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    799 B
    7.7kB
    10
    13
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    1.4kB
    7.6kB
    12
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    1.0kB
    7.7kB
    11
    13
  • 142.250.186.162:443
    https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
    tls, http
    IEXPLORE.EXE
    1.3kB
    2.2kB
    7
    8

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id

    HTTP Response

    302

    HTTP Request

    GET https://googleads.g.doubleclick.net/pagead/id?slf_rd=1

    HTTP Response

    200
  • 142.250.186.162:443
    googleads.g.doubleclick.net
    tls
    IEXPLORE.EXE
    439 B
    315 B
    4
    4
  • 8.8.8.8:53
    ajax.googleapis.com
    dns
    IEXPLORE.EXE
    65 B
    81 B
    1
    1

    DNS Request

    ajax.googleapis.com

    DNS Response

    172.217.16.202

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    61 B
    108 B
    1
    1

    DNS Request

    www.blogger.com

    DNS Response

    216.58.212.137

  • 8.8.8.8:53
    connect.facebook.net
    dns
    IEXPLORE.EXE
    66 B
    114 B
    1
    1

    DNS Request

    connect.facebook.net

    DNS Response

    163.70.147.23

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    61 B
    98 B
    1
    1

    DNS Request

    apis.google.com

    DNS Response

    142.250.185.174

  • 8.8.8.8:53
    blogergadgets.googlecode.com
    dns
    IEXPLORE.EXE
    74 B
    135 B
    1
    1

    DNS Request

    blogergadgets.googlecode.com

    DNS Response

    142.250.102.82

  • 8.8.8.8:53
    sites.google.com
    dns
    IEXPLORE.EXE
    62 B
    78 B
    1
    1

    DNS Request

    sites.google.com

    DNS Response

    172.217.16.206

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    68 B
    115 B
    1
    1

    DNS Request

    resources.blogblog.com

    DNS Response

    216.58.212.137

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    2.bp.blogspot.com

    DNS Response

    142.250.186.161

  • 8.8.8.8:53
    mediopati.net
    dns
    IEXPLORE.EXE
    59 B
    132 B
    1
    1

    DNS Request

    mediopati.net

  • 8.8.8.8:53
    widgets.fbshare.me
    dns
    IEXPLORE.EXE
    64 B
    80 B
    1
    1

    DNS Request

    widgets.fbshare.me

    DNS Response

    107.21.116.202

  • 8.8.8.8:53
    platform.twitter.com
    dns
    IEXPLORE.EXE
    66 B
    127 B
    1
    1

    DNS Request

    platform.twitter.com

    DNS Response

    199.232.56.157

  • 8.8.8.8:53
    dl.dropbox.com
    dns
    IEXPLORE.EXE
    60 B
    121 B
    1
    1

    DNS Request

    dl.dropbox.com

    DNS Response

    162.125.64.15

  • 8.8.8.8:53
    1.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    1.bp.blogspot.com

    DNS Response

    142.250.186.161

  • 8.8.8.8:53
    lh6.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh6.googleusercontent.com

    DNS Response

    142.250.185.97

  • 8.8.8.8:53
    lh3.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh3.googleusercontent.com

    DNS Response

    142.250.185.97

  • 8.8.8.8:53
    lh4.googleusercontent.com
    dns
    IEXPLORE.EXE
    71 B
    116 B
    1
    1

    DNS Request

    lh4.googleusercontent.com

    DNS Response

    142.250.185.97

  • 8.8.8.8:53
    i42.tinypic.com
    dns
    IEXPLORE.EXE
    61 B
    145 B
    1
    1

    DNS Request

    i42.tinypic.com

  • 8.8.8.8:53
    oi44.tinypic.com
    dns
    IEXPLORE.EXE
    62 B
    146 B
    1
    1

    DNS Request

    oi44.tinypic.com

  • 8.8.8.8:53
    pki.goog
    dns
    IEXPLORE.EXE
    54 B
    70 B
    1
    1

    DNS Request

    pki.goog

    DNS Response

    216.239.32.29

  • 8.8.8.8:53
    pki.goog
    dns
    IEXPLORE.EXE
    54 B
    70 B
    1
    1

    DNS Request

    pki.goog

    DNS Response

    216.239.32.29

  • 8.8.8.8:53
    www.microsoft.com
    dns
    IEXPLORE.EXE
    189 B
    230 B
    3
    1

    DNS Request

    www.microsoft.com

    DNS Request

    www.microsoft.com

    DNS Request

    www.microsoft.com

    DNS Response

    23.55.97.181

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    172.217.18.3

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    172.217.18.3

  • 8.8.8.8:53
    www.google.com
    dns
    IEXPLORE.EXE
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    142.250.184.228

  • 8.8.8.8:53
    www.facebook.com
    dns
    IEXPLORE.EXE
    124 B
    107 B
    2
    1

    DNS Request

    www.facebook.com

    DNS Request

    www.facebook.com

    DNS Response

    157.240.221.35

  • 8.8.8.8:53
    upload.wikimedia.org
    dns
    IEXPLORE.EXE
    66 B
    82 B
    1
    1

    DNS Request

    upload.wikimedia.org

    DNS Response

    185.15.59.240

  • 8.8.8.8:53
    www.youtube.com
    dns
    IEXPLORE.EXE
    61 B
    351 B
    1
    1

    DNS Request

    www.youtube.com

    DNS Response

    142.250.186.46
    172.217.18.14
    142.250.185.174
    142.250.184.238
    172.217.16.206
    142.250.186.142
    142.250.184.206
    172.217.16.142
    142.250.181.238
    142.250.185.238
    142.250.186.174
    216.58.206.78
    142.250.186.110
    142.250.185.206
    142.250.74.206
    172.217.18.110

  • 8.8.8.8:53
    i41.tinypic.com
    dns
    IEXPLORE.EXE
    122 B
    145 B
    2
    1

    DNS Request

    i41.tinypic.com

    DNS Request

    i41.tinypic.com

  • 8.8.8.8:53
    i44.tinypic.com
    dns
    IEXPLORE.EXE
    61 B
    145 B
    1
    1

    DNS Request

    i44.tinypic.com

  • 8.8.8.8:53
    static.xx.fbcdn.net
    dns
    IEXPLORE.EXE
    136 B
    220 B
    2
    2

    DNS Request

    static.xx.fbcdn.net

    DNS Response

    163.70.147.23

    DNS Request

    lh5.googleusercontent.com

    DNS Response

    142.250.185.97

  • 8.8.8.8:53
    widgets.amung.us
    dns
    IEXPLORE.EXE
    62 B
    110 B
    1
    1

    DNS Request

    widgets.amung.us

    DNS Response

    104.22.75.171
    104.22.74.171
    172.67.8.141

  • 8.8.8.8:53
    3.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    3.bp.blogspot.com

    DNS Response

    142.250.186.161

  • 8.8.8.8:53
    googleads.g.doubleclick.net
    dns
    IEXPLORE.EXE
    73 B
    89 B
    1
    1

    DNS Request

    googleads.g.doubleclick.net

    DNS Response

    142.250.186.162

  • 8.8.8.8:53
    static.doubleclick.net
    dns
    IEXPLORE.EXE
    68 B
    84 B
    1
    1

    DNS Request

    static.doubleclick.net

    DNS Response

    216.58.206.70

  • 8.8.8.8:53
    jnn-pa.googleapis.com
    dns
    IEXPLORE.EXE
    67 B
    323 B
    1
    1

    DNS Request

    jnn-pa.googleapis.com

    DNS Response

    142.250.185.74
    142.250.186.106
    172.217.18.10
    142.250.184.234
    172.217.16.202
    216.58.206.74
    142.250.185.170
    142.250.74.202
    142.250.186.170
    142.250.185.138
    216.58.212.138
    142.250.185.202
    142.250.186.74
    216.58.206.42
    142.250.185.106
    172.217.23.106

  • 8.8.8.8:53
    i.ytimg.com
    dns
    IEXPLORE.EXE
    57 B
    313 B
    1
    1

    DNS Request

    i.ytimg.com

    DNS Response

    142.250.185.214
    142.250.186.118
    142.250.186.150
    142.250.184.246
    172.217.16.214
    172.217.18.22
    142.250.185.182
    216.58.206.86
    142.250.74.214
    142.250.181.246
    142.250.185.118
    172.217.16.150
    142.250.184.214
    142.250.186.54
    142.250.185.246
    142.250.186.182

  • 8.8.8.8:53
    yt3.ggpht.com
    dns
    IEXPLORE.EXE
    59 B
    120 B
    1
    1

    DNS Request

    yt3.ggpht.com

    DNS Response

    142.250.186.161

  • 8.8.8.8:53
    fe0.google.com
    dns
    IEXPLORE.EXE
    60 B
    110 B
    1
    1

    DNS Request

    fe0.google.com

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    914B

    MD5

    e4a68ac854ac5242460afd72481b2a44

    SHA1

    df3c24f9bfd666761b268073fe06d1cc8d4f82a4

    SHA256

    cb3ccbb76031e5e0138f8dd39a23f9de47ffc35e43c1144cea27d46a5ab1cb5f

    SHA512

    5622207e1ba285f172756f6019af92ac808ed63286e24dfecc1e79873fb5d140f1ceb7133f2476e89a5f75f711f9813a9fbb8fd5287f64adfdcc53b864f9bdc5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    889B

    MD5

    3e455215095192e1b75d379fb187298a

    SHA1

    b1bc968bd4f49d622aa89a81f2150152a41d829c

    SHA256

    ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99

    SHA512

    54ba004d5435e8b10531431c392ed99776120d363808137de7eb59030463f863cadd02bdf918f596b6d20964b31725c2363cd7601799caa9360a1c36fe819fbd

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    1KB

    MD5

    a266bb7dcc38a562631361bbf61dd11b

    SHA1

    3b1efd3a66ea28b16697394703a72ca340a05bd5

    SHA256

    df545bf919a2439c36983b54cdfc903dfa4f37d3996d8d84b4c31eec6f3c163e

    SHA512

    0da8ef4f8f6ed3d16d2bc8eb816b9e6e1345dfe2d91160196c47e6149a1d6aedaafadcefd66acdea7f72dcf0832770192ceac15b0c559c4ccc2c0e5581d5aefc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3C428B1A3E5F57D887EC4B864FAC5DCC

    Filesize

    252B

    MD5

    090c56958419aab234c468ed70b4d296

    SHA1

    b31c992c500c48f08b5ec24a33db0b2fa8bcb780

    SHA256

    947987f9e2c717a527df917c91a3c77469f2214314d1908225e815f74a690f83

    SHA512

    58dddc31e9a1889b11e0a2d833125b455753a7beeb53eddf301b553321d9626b97e8ce4d6885acae0a2694f7095fde4249a1d05e3e5005f9fda74557d633b10e

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A9377E7E528F7E56B69A81C500ABC24

    Filesize

    176B

    MD5

    1481058ae6e2350b02ffd98d358f890c

    SHA1

    8a421718f19e99561dcac9b9569842d77692a77c

    SHA256

    91562068f9b745784b094db6b6d17e7b2f80f7c34184b58ab0654eaea53c8a0b

    SHA512

    35b10f4f42e1245b8977cebe577d031b1d26cee39c8f7b0df350fb447b3d752874d596274aa443346d4718c7a50c3cc5b970113a448f97bab76670bf5349f1dc

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1f62c0d0b909afeb69e266d1f216ed98

    SHA1

    0fdfc381c8e6750142c98eaa7127d476530876af

    SHA256

    7cfbff7db2d67509e36480688f26d4401740fda1121c3ffb7e28e4b9c598d59e

    SHA512

    6de5482a41e2c8ca9d44ee49c80a8a5f7eb7b2dcd5420f2628b011bcc34d2ea51f7c9f0d99cc4904395be5123c0ec59a8552f0c2d0195603383676d47af211c7

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    c5cec5ee16e7867b21883353040f1a57

    SHA1

    a394baaa55b0bece2c9b37354f6779ef001978ce

    SHA256

    6343a83d9465732b7a0e84507e704b5e2ed46a5e079ec7c4d7dc85eb3544c8d6

    SHA512

    e6fb52b57fae148ef293daf05333d4b71fefb2e8f7ad1533e58136535470b413a7da98575b79d7840a71c8fc7a5ac0cc9318588a491a6eb5e37384e4337fa6d4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fdebd0234942e945ce52c689d564c1a8

    SHA1

    05c6d598a3353aabbfc3fbb5a6a27f082c6a41b6

    SHA256

    9da97d24f4de888f8e66451ac1663019c4728906b63d7ab0aca064168ae1ef64

    SHA512

    1fc18ff5e8d97526a99f70b8854466ef9c4bf688599c84d61c7f458d948f68fca34ab94316523aaea76898454bf34435fcaac30e5e0d778531bfa48f9412a5d8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    7fa357b2668b52666256cf82e4895b69

    SHA1

    1470c0317db160cdcca0b335630d82197bfd1d2a

    SHA256

    b56afb45148ef51923b8cf9b3c6d9220369c435290adcf6435917b20c8d7059a

    SHA512

    f08c4a1e75c3a35fa4ee7487372ceace07c0474bd4ac009ffc7b5c28c99ff40bfc8a7c585df157f0996ef8da2c9a63e54273c6d5958ad5be2123ec802c2cec9b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    95f39dc67b5998b9cdf37ccbf4c91841

    SHA1

    fdf9a5b0313fecd6b7a75a9e9ceddf3106b09c7d

    SHA256

    df49b1086cd66cf4ef5af8856db707f02d4d6a9e53073dc4ea679a5a6c93f212

    SHA512

    908ed7d3f654afa81cdc943328f3b52a95f494613f23fbf62a843575a3285e3b531b8a8f5c2f158f2c573c1439b1a1b3a7eeb52de930015c6b4a8c2126c1553b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0ACCF77CDCBFF39F6191887F6D2D357

    Filesize

    242B

    MD5

    4fd5251b59e2a0821578a8800d10ad38

    SHA1

    d9334c22df3e79a0d66cc6605ac30b510e347a54

    SHA256

    4fe98dc86d46f43d23090ca8b525077a6898041da07bfe458256ac60c2137846

    SHA512

    67f4cab62f54d2bb53d2511c94f60cdb30b7125ee980b7ad1ab46f8b8318fd4f52985222db9681e298a9c44d821e69f7fa5dec15906a2d4abbf62f228a7b7458

  • C:\Users\Admin\AppData\LocalLow\Microsoft\Internet Explorer\Services\search_{0633EE93-D776-472f-A0FF-E1416B8B2E3A}.ico

    Filesize

    4KB

    MD5

    da597791be3b6e732f0bc8b20e38ee62

    SHA1

    1125c45d285c360542027d7554a5c442288974de

    SHA256

    5b2c34b3c4e8dd898b664dba6c3786e2ff9869eff55d673aa48361f11325ed07

    SHA512

    d8dc8358727590a1ed74dc70356aedc0499552c2dc0cd4f7a01853dd85ceb3aead5fbdc7c75d7da36db6af2448ce5abdff64cebdca3533ecad953c061a9b338e

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    13B

    MD5

    c1ddea3ef6bbef3e7060a1a9ad89e4c5

    SHA1

    35e3224fcbd3e1af306f2b6a2c6bbea9b0867966

    SHA256

    b71e4d17274636b97179ba2d97c742735b6510eb54f22893d3a2daff2ceb28db

    SHA512

    6be8cec7c862afae5b37aa32dc5bb45912881a3276606da41bf808a4ef92c318b355e616bf45a257b995520d72b7c08752c0be445dceade5cf79f73480910fed

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    229B

    MD5

    6a1ffb45a49a6ba01ee4cf73f33a92f1

    SHA1

    9d9875d4b0e71d620b1bef1e57e3b54a3787d60a

    SHA256

    d4755ee64315dd431f75783fac4da50894f734e08867f1b0477095f966db9ad9

    SHA512

    068dd397b828573bbcaccb5f28c9d9386966c542efc0024350d53dbc29e8c631a72cb0db6c8759650816e881e4551428c83dcb570f85d470793899613b049378

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    641B

    MD5

    78198b6142256871cb022488e2f0fa3d

    SHA1

    80ae4267fd42ae37fca6adf501c73e59a320cb70

    SHA256

    b49d3797a37c07491568836bd2094fecd1c9b222bccfaab4c08b524eab3f665f

    SHA512

    54494bcfd168ed04690900ea3e40a9bb105af6fc1b3e672de2a052b39996e92cd6c0344e0d2f1c67221f1ad05470fc005175353e4d5e1be3ff5e6a65fe49e384

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    18KB

    MD5

    ec550246263072a6aa2a9489d3ae5f60

    SHA1

    78870f2497c56d73e6b4d94f13803dafd959be99

    SHA256

    9e0ab0f20ec4a24530db9aaa3cef217d880d3efa36b0be796ea3c5388d8115f2

    SHA512

    7193fad3d357b7067ba12f129e73df26e49dbc4f7be9321f70e94a100e0c34b8e0382c3d2b4c1100814744a733171e98310e5b66d672e4c26b2a0ec1dc79c09d

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    990B

    MD5

    8fbd62df6a6e5875c4fc65e411ff5ba5

    SHA1

    1b1bf6e33b9f87502483da0be4526eb954c98916

    SHA256

    2b7c8d0ac0b79223a96ca16de096fe570b1a87394e115bf0e48e814384688474

    SHA512

    b3e1c00a0ac91a7eb501e4aabd5739aa90c1b73e9a3ebbbc1c0486cb9e75b0fbce705233beea66341cd7329ce3c25ffec77119a5faa25306fe289dc6f83f6390

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    990B

    MD5

    58b272dd6c0b6800c76888f9dc0baa9d

    SHA1

    138d5ca7d40548b7f8833e61b42265a4045e67a9

    SHA256

    64936e478e413440fae93802caf0ec3888dc7116e067f7b002b12221c4843816

    SHA512

    5d3fcfe2f0a00373e5b344e3bd94afe8b0581a22f57747030d33ed364f240f62c25c25d2798d39cd418ff63e844268b3fa874086596ce0489ead3b6011ecedfe

  • C:\Users\Admin\AppData\Local\Microsoft\Internet Explorer\DOMStore\NRK70L9I\www.youtube[1].xml

    Filesize

    990B

    MD5

    2ac94f20112da65ac76f185d11388faa

    SHA1

    56cfa7db1629261a851c15cdcbd9487a828805b1

    SHA256

    0ecb12835324ad536c508d370b249b6c37e2f187e725695b2a2777326851d55c

    SHA512

    3373d87702e54c4cc4fef42e0f5f48ee9357294df94697d42d7a713caa638db81bc0e92610f2726f1b57f3df1d1efe0d9facd9704c3a2ae391701983d6b580b4

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2P2KL5ZL\platform_gapi.iframes.style.common[1].js

    Filesize

    54KB

    MD5

    682c26af19b240f98d2cb951721fa54d

    SHA1

    18e58b652c7f82a55ab4b1910693686049e25d62

    SHA256

    96428f0f585a874c185d560538ad83ebfad0365d760fcf9fcefe80add9e3c980

    SHA512

    078aeef086271b7f9cf0f6e3a1e7908d7e38465a1a7a4de6f2a785147e9130551a2995e80600824da9341d58e5425d4505518e90eea9ffe1c64f4f41825a9660

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0RC491K\LG4XKM9M9OM[1].css

    Filesize

    22KB

    MD5

    50ffe5c9b54f43a59bfb0f68058792ba

    SHA1

    2e4e82ae14a419f52635a181011b8abfa4d6a769

    SHA256

    fd366cf44114212b1f606fb2da79d323332298bbeda4e161eabc39af6424f6cc

    SHA512

    692ce4d8587041ae433e054e3f97b234e83e21c7474c7695e0829888ee7de98412a6152b1af0b7deac5ac636613cd1e4eccbe67b17c83ea7df5251d2ff7e8be5

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0RC491K\cb=gapi[1].js

    Filesize

    134KB

    MD5

    f9255a0dec7524a9a3e867a9f878a68b

    SHA1

    813943e6af4a8592f48aeb0d2ab88ead8d3b8c8b

    SHA256

    d9acfd91940f52506ac7caeffea927d5d1ce0b483471fa771a3d4d78d59fda0d

    SHA512

    d013be6bfc6bcf6da8e08ed6ff4963f6c60389baa3a33d15db97d081d3239635f48111db65e580937eb1ea9dc3b7fc6b4aecb012daeee3bf99cfebf84748177e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\U0RC491K\jquery.min[1].js

    Filesize

    83KB

    MD5

    e85aed5c30d734f1e30646e030d7a817

    SHA1

    b8dcaa1c866905c0bdb0b70c8e564ff1c3fe27ad

    SHA256

    8f0a19ee8c606b35a10904951e0a27da1896eafe33c6e88cb7bcbe455f05a24a

    SHA512

    a5b7c4911b530b4b550838f50ceda9d9382d86aad7cb4ff13c897c269bc7ff350ccf01487534882f294749bc19f3398f0b338e1d8b03af3dba1ef382168ecc9e

  • C:\Users\Admin\AppData\Local\Temp\Tar17AE.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.