8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

142.250.200.14:443

GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_1?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 14641
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 17:12:34 GMT
Expires: Sun, 23 Nov 2025 17:12:34 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 11 Nov 2024 18:50:50 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 73086
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.200.14:443

GET /js/plusone.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Date: Sun, 24 Nov 2024 13:30:39 GMT
Expires: Sun, 24 Nov 2024 13:30:39 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "50fa91db2fe576b1"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked

142.250.200.14:443

GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_0?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 54101
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 20:42:06 GMT
Expires: Sun, 23 Nov 2025 20:42:06 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 11 Nov 2024 18:50:50 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 60514
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.200.14:443

GET /_/scs/abc-static/_/js/k=gapi.lb.en.6zM9SN8ON8Q.O/m=debug_error/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo9LiInNUyZ6A99oK9HdmPXGee7Zyg/cb=gapi.loaded_2?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 14777
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 12:20:31 GMT
Expires: Sun, 23 Nov 2025 12:20:31 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 11 Nov 2024 18:50:50 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 90609
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.200.14:443

POST /_/jserror?script=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2F94fa3510ff8ace1432783952b0cec6cd_JaffaCakes118.html&error=Object%20doesn't%20support%20this%20action&line=Not%20available HTTP/1.1
Accept: */*
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Accept-Language: en-US
Accept-Encoding: gzip, deflate
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Host: apis.google.com
Content-Length: 4654
Connection: Keep-Alive
Cache-Control: no-cache

HTTP/1.1 301 Moved Permanently
Location: http://developers.google.com/
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Sun, 24 Nov 2024 13:30:40 GMT
Expires: Sun, 24 Nov 2024 14:00:40 GMT
Cache-Control: public, max-age=1800
Server: sffe
Content-Length: 226
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

104.22.74.171:80

GET /colored.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: widgets.amung.us
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 12 Jan 2023 17:19:21 GMT
etag: W/"63c04119-2194"
expires: Mon, 25 Nov 2024 13:09:27 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 1271
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8e79c137f8f07714-LHR
alt-svc: h3=":443"; ma=86400

142.250.187.201:443

GET /img/icon_delete13.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 140
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 11:46:36 GMT
Expires: Sat, 30 Nov 2024 11:46:36 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 22 Nov 2024 14:52:16 GMT
Content-Type: image/gif
Age: 92643
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.200.33:80

GET /-X8-7yq6g-2E/ViuOjQbx3PI/AAAAAAAAEW4/o1Un75n2WmE/s200/VLVOct15Week4Sketch.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v116f"
Expires: Mon, 25 Nov 2024 13:30:39 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="VLVOct15Week4Sketch.gif"
X-Content-Type-Options: nosniff
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: fife
Content-Length: 5448
X-XSS-Protection: 0

142.250.187.201:443

GET /img/icon18_wrench_allbkg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 475
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 11:55:43 GMT
Expires: Sat, 30 Nov 2024 11:55:43 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 22 Nov 2024 22:56:43 GMT
Content-Type: image/png
Age: 92096
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /img/widgets/s_top.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 335
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 11:52:47 GMT
Expires: Sat, 30 Nov 2024 11:52:47 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 22 Nov 2024 13:58:08 GMT
Content-Type: image/png
Age: 92273
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.200.33:80

GET /-x-q4cOeT0ww/W-G6c0vU7LI/AAAAAAAAIRs/-XfLQw85BYMGHb15hktCLBsdAg-_Vx5UACK4BGAYYCw/s660/owl-of-me_banner.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v211c"
Expires: Mon, 25 Nov 2024 13:30:39 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="owl-of-me_banner.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: fife
Content-Length: 77600
X-XSS-Protection: 0

142.250.187.201:443

GET /img/widgets/arrow_dropdown.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 141
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 11:21:06 GMT
Expires: Sat, 30 Nov 2024 11:21:06 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 22 Nov 2024 13:58:08 GMT
Content-Type: image/gif
Age: 94173
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /img/icon_feed12.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 500
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 22:05:17 GMT
Expires: Sat, 30 Nov 2024 22:05:17 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 23 Nov 2024 04:54:34 GMT
Content-Type: image/png
Age: 55522
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /dyn-css/authorization.css?targetBlogID=37481673150193235&zx=c95106f1-1c99-4c14-b26e-cfe64c970594 HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive

HTTP/1.1 200 OK
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
Content-Type: text/css; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 24 Nov 2024 13:30:39 GMT
Last-Modified: Sun, 24 Nov 2024 13:30:39 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked

142.250.187.201:443

GET /static/v1/v-css/368954415-lightbox_bundle.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 6541
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 20:21:50 GMT
Expires: Sun, 23 Nov 2025 20:21:50 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 27 Jan 2021 23:35:52 GMT
Content-Type: text/css
Vary: Accept-Encoding
Age: 61733
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

38.109.143.66:80

GET /i/43/263577.bmp HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.feedblitz.com
Connection: Keep-Alive

HTTP/1.1 308 Permanent Redirect
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: private, no-cache, no-store, must-revalidate, max-age=0
pragma: no-cache
content-type: text/html
content-length: 802
date: Sun, 24 Nov 2024 13:30:38 GMT
server: LiteSpeed
location: https://www.feedblitz.com/i/43/263577.bmp
vary: User-Agent,Accept-Encoding
access-control-allow-origin: *
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-frame-options: sameorigin

142.250.187.201:443

GET /img/widgets/subscribe-netvibes.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 1445
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 21:27:23 GMT
Expires: Sat, 30 Nov 2024 21:27:23 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 23 Nov 2024 15:52:23 GMT
Content-Type: image/png
Age: 57796
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /static/v1/widgets/1791449097-widgets.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 52520
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 00:15:57 GMT
Expires: Mon, 24 Nov 2025 00:15:57 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 19 Nov 2020 20:16:57 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
Age: 47682
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /static/v1/widgets/14020288-widget_css_bundle.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 6823
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 19:26:58 GMT
Expires: Sun, 23 Nov 2025 19:26:58 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 14 Apr 2021 08:41:29 GMT
Content-Type: text/css
Vary: Accept-Encoding
Age: 65021
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /static/v1/jsbin/2149478368-lbx.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 122995
Date: Sun, 24 Nov 2024 13:30:43 GMT
Expires: Mon, 24 Nov 2025 13:30:43 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 19 Nov 2020 20:16:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /img/widgets/subscribe-yahoo.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 580
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 19:02:47 GMT
Expires: Sat, 30 Nov 2024 19:02:47 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 23 Nov 2024 15:52:23 GMT
Content-Type: image/png
Age: 66472
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.187.201:443

GET /img/widgets/s_bottom.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 172
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 23 Nov 2024 11:21:28 GMT
Expires: Sat, 30 Nov 2024 11:21:28 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 22 Nov 2024 14:52:16 GMT
Content-Type: image/png
Age: 94152
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

142.250.179.238:80

GET /~s/GlitterInMyHair?i=http://glitterinmyhair.blogspot.com/2015/10/simply-papercraft-16-anything-goes-post_24.html HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: feeds.feedburner.com
Connection: Keep-Alive

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Security-Policy: script-src 'nonce-TESTNFUuAKnbFiBXMbgIsA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Content-Type-Options: nosniff

142.250.179.238:80

GET /~fc/GlitterInMyHair?bg=99CCFF&fg=444444&anim=0 HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: feeds.feedburner.com
Connection: Keep-Alive

HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport
Content-Security-Policy: script-src 'nonce-V3NwiBbaFJQJMmQ8qF7E2g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self'
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Cross-Origin-Opener-Policy: same-origin
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Content-Type-Options: nosniff

118.139.179.30:80

GET /pixel.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.linkwithin.com
Connection: Keep-Alive

HTTP/1.1 404 Not Found
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

118.139.179.30:80

GET /widget.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.linkwithin.com
Connection: Keep-Alive

HTTP/1.1 404 Not Found
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: Apache
Content-Length: 315
Keep-Alive: timeout=5
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/pd%20dt%20badge-190.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 12516
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="pd dt badge-190.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-65649a170aab52142c2e6f40
X-Request-Id: 787MhqPLWxEBMeVmvA0fo
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 4223d11e636e28fd58618244d31b6e42.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: qYB4SAJCrCBZ25NIo8VpxXrdvBXev3nGLuMy3YQ1ZTSlRlddYJM6HA==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/itdbk%20DT%20BADGE.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/itdbk%20DT%20BADGE.png
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: Oy8EQ9iPZIm9SJnZL43v6xwYHvyrADzOeGObJ2xDjyNCacRmf7Lf7g==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/InkyTop3.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/InkyTop3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: Z1R_Csp8Xwq9-8eUcf0YhpxdCn-euNV9ey4XgbZUFXqkxHoGccKTgw==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/SNR_CU_Featured_Artist_copy-20090818.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/SNR_CU_Featured_Artist_copy-20090818.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: RzS8nem8ivYjtpFJjpWtMLk6-GdnRkrWvNe4rGPiPZsWJzbZye4B5w==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/GIChallengeWinnerBadge2.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/GIChallengeWinnerBadge2.png
X-Cache: Redirect from cloudfront
Via: 1.1 924eaf732f510bee11cb1ffc48f2da8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: YuSFtn-0DTDBNSxmQY-K06qDjv4gHy5BldjTy5U7_TsVETLPmcMw8Q==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/hoedownwinnerbutton.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/hoedownwinnerbutton.gif
X-Cache: Redirect from cloudfront
Via: 1.1 924eaf732f510bee11cb1ffc48f2da8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: _H9KAu-mmH3w0iTPV6qggZ553zeCJtDMYpfyUnyGRXqbG2yWrLS99Q==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/f95faef8-6294-47c9-82f5-bf5821ffc1e3.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/f95faef8-6294-47c9-82f5-bf5821ffc1e3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 924eaf732f510bee11cb1ffc48f2da8a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: IrGPiwQ2ruPmxyEiFsykvYL7D0vDdI4PAxvwlcx45M27lyKxhiHbWw==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/lrr_featuredbutton-1.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/lrr_featuredbutton-1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: zxQrUxOzLLSAh7QL1R_jnCQj391bB9I8OmPKPO0afK2dXNruztBFTQ==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/Quirkywinnerbanner2.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/Quirkywinnerbanner2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: 4iXPbMZeQssOIV-rGR9CA-DgXX_NQmexUaet7Udwgdt6ZRCyabdBVQ==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/2cfde558-5d29-4491-bfbb-aba4662f35f9.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/2cfde558-5d29-4491-bfbb-aba4662f35f9.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: 94Hk0vUWxPdaWXzdkl9qvMrPf893qtbRKmTJ2xYqP8cUvB1TAnPfVA==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/ID20DT20Favorite20Badge.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/ID20DT20Favorite20Badge.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b0c2c2a6e9ab2e229c54272240232f3c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: jSDnmZ40i_628ste8ip_RLVaXkO8zb0jF8m2FqHOeQKSE1_d0AJY3Q==
Vary: Origin

3.165.232.11:80

GET /albums/jj50/jennifer-g_photos/cupcakecraftchallengeweeklytop5-2.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i269.photobucket.com/albums/jj50/jennifer-g_photos/cupcakecraftchallengeweeklytop5-2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 b0c2c2a6e9ab2e229c54272240232f3c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: d5uF85jp9sO43OwFLAVmHHVOE5bbjRkMyOzvQITgh0QqzHRfgVBEiA==
Vary: Origin

3.165.232.110:80

GET /albums/oo34/snappystamper/colourq/newcqcbadge_courtier.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i359.photobucket.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i359.photobucket.com/albums/oo34/snappystamper/colourq/newcqcbadge_courtier.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 1dfc3a36dcacc62a94ab0f529b92b6c4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: vZSIzvrjBqxbpO1Y4GHIetV9OC-BQRrcpTh_jtdn-Jiq23_9bIevOw==
Vary: Origin

142.250.200.33:80

GET /-GtBW5swQrNM/ViuODFUn_nI/AAAAAAAAEWo/etQ9eSMvKmo/s400/sp16_vlvoct15-4.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 2.bp.blogspot.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v116b"
Expires: Mon, 25 Nov 2024 13:30:39 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sp16_vlvoct15-4.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: fife
Content-Length: 56574
X-XSS-Protection: 0

142.250.200.33:80

GET /-1z9OpxDmHb4/ViuOUPhnRzI/AAAAAAAAEWw/MZDhw5KU7rA/s400/sp16b.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 4.bp.blogspot.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v116d"
Expires: Mon, 25 Nov 2024 13:30:39 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sp16b.jpg"
X-Content-Type-Options: nosniff
Date: Sun, 24 Nov 2024 13:30:39 GMT
Server: fife
Content-Length: 39520
X-XSS-Protection: 0

3.162.140.18:80

GET /images/dynamic/9cc8b8d0-590b-4d69-aebc-03b0a00d5969.img HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.buildasign.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://www.buildasign.com/images/dynamic/9cc8b8d0-590b-4d69-aebc-03b0a00d5969.img
X-Cache: Redirect from cloudfront
Via: 1.1 db649b7ced99c1570a40079beeedae2c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: -s-m3TueWJKkai281XgyKsGAX8txOJLvxB803Qw4Fu0iIPhM-Yqrqg==

172.66.0.102:80

GET /button.php?born_date=2007-8-27 HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogoversary.com
Connection: Keep-Alive

HTTP/1.1 403 Forbidden
Date: Sun, 24 Nov 2024 13:30:38 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: max-age=15
Expires: Sun, 24 Nov 2024 13:30:53 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3EdFoy8xJzgYE125ZsG0%2FvcMakx0yDhfUz55BxdHrBjrkC4bHJNGLc%2BVih6Vc5t8ScbH6LLufdOGTl%2BfnCvZwen8lp%2B8kxnxOob6gGW2R2N%2F5pOZ2n54ozsFPpGeHFfDBYJdtdLLog%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8e79c1381b517707-LHR
Content-Encoding: gzip
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=29678&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=298&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

52.222.169.40:443

GET /images/badge/badge1.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.goodreads.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 35221
Connection: keep-alive
Server: Server
Date: Sun, 24 Nov 2024 13:30:42 GMT
x-amz-rid: Z2A0K7XQEWF4MQXPXDZH
Last-Modified: Thu, 21 Nov 2024 17:09:36 GMT
ETag: "673f6950-8995"
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
Vary: Content-Type,Accept-Encoding
Strict-Transport-Security: max-age=47474747; includeSubDomains; preload
X-Cache: Miss from cloudfront
Via: 1.1 16a28c0e67da18fa2960e2e414084d76.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG52-P2
X-Amz-Cf-Id: Lu1vb6HqKr3pzXX3eezW69o0mYg97ogXJYl1XJHByYkIFlg7YcfEFw==

52.86.6.113:80

GET /show.php?id=1200764971942329 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: s61.myonlineusers.com
Connection: Keep-Alive

HTTP/1.1 302 Found
content-length: 0
date: Sun, 24 Nov 2024 13:30:37 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=myonlineusers.com

52.86.6.113:80

HTTP/1.1 408 Request Time-out
Content-length: 110
Cache-Control: no-cache
Connection: close
Content-Type: text/html

3.165.232.110:443

GET /albums/oo34/snappystamper/colourq/newcqcbadge_courtier.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i359.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 116872
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="newcqcbadge_courtier.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-25234566312d30f61a9036f1
X-Request-Id: brO8LeoTabt52qy1Wzt9H
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 3a01152ec0957b4225a726e7b5277418.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: beSjVQurZ_Izo2kiUIg80QHlr1PTCE1vS1ts0n3cmsAXedM2_TqZVg==
Vary: Origin

3.162.140.18:443

GET /images/dynamic/9cc8b8d0-590b-4d69-aebc-03b0a00d5969.img HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.buildasign.com
Connection: Keep-Alive

HTTP/1.1 403 Forbidden
Server: CloudFront
Date: Sun, 24 Nov 2024 13:30:42 GMT
Content-Type: text/html
Content-Length: 919
Connection: keep-alive
X-Cache: Error from cloudfront
Via: 1.1 05a9c4cc8994e70d89a3f66329ef7444.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P2
Alt-Svc: h3=":443"; ma=86400
X-Amz-Cf-Id: IcRR2qtok5cZGSt-MohBYHV-tNxoZeZJeuvVeeq7ET6LAuQE8rpm4g==

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/itdbk%20DT%20BADGE.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 95689
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="itdbk DT BADGE.png"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-564387cf059f079d787b4b9a
X-Request-Id: Z9f29C-03BLDP-EcxCfW4
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 50ae26280d4131678d52be006eaadc02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: xDYcyqAVE-dRiUWx1PMUZ7FqZ1-O9Ote4RYcKSfeM4tuFqBGv1r3Ug==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/GIChallengeWinnerBadge2.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/png
Content-Length: 18647
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="GIChallengeWinnerBadge2.png"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-5f92b3c5684a12112d53a8be
X-Request-Id: DEuMIm8VAST66BROwjRsl
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 b0c2c2a6e9ab2e229c54272240232f3c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: 30zxf9q1Nq4Y9X-PKUh4y7t22apMGHyL4GgcGAUTnaO_dvVtPYk1Eg==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/lrr_featuredbutton-1.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 6394
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="lrr_featuredbutton-1.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-6a23aadd384e2ab30e360e7d
X-Request-Id: 39gqszJPyKneXa9Exug1u
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 6c4778061a8e31a9767a1f8846d8e4d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: Eim9xUznSNzdt6mRVkH3ImK_GIZmq0RMXW6xb5edZ0BDMZeuFrvZ3Q==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/ID20DT20Favorite20Badge.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 10780
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="ID20DT20Favorite20Badge.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-3080f498013357d266685876
X-Request-Id: C-B9IZlbI3ZyVT33W-bda
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 82669013d8f4ae433a17d3d7985f32e4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: QJBLWWrxPw5E2fpRRoxiSD2S36R2j7BjzoV0dlkrxxkIdVu8TUkGyA==
Vary: Origin

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

104.26.7.37:443

GET /domain_profile.cfm?d=myonlineusers.com HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.hugedomains.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:39 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private
vary: Accept-Encoding
set-cookie: site_version_phase=108; expires=Wed, 19-Nov-2025 13:30:39 GMT; path=/
set-cookie: site_version=HDv3; expires=Wed, 19-Nov-2025 13:30:39 GMT; path=/
set-cookie: captcha-tracker=; expires=Sat, 23-Nov-2024 13:30:39 GMT; path=/
x-powered-by: ASP.NET
lb: TclPrdLbHd3
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KBLms9yXfAw0VpXMSsUMAgc8YOHeWGSA%2Fyp1hwnXJbdRrINt1Kdw0%2Ftn6yFOXHfeqoyYg1aMSaxb78hqk3jdjm7N%2BslmMH%2FOryhtY3W2wOcuA%2BlD7jmNbqH8tlxwmG1KN3eUySQ%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8e79c13d2ab37707-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=28358&sent=7&recv=7&lost=0&retrans=1&sent_bytes=3193&recv_bytes=613&delivery_rate=125597&cwnd=254&unsent_bytes=0&cid=c37b51b32d83bd06&ts=652&x=0"

52.222.201.62:80

GET /rootg2.cer HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: crt.rootg2.amazontrust.com

HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 1145
Connection: keep-alive
Last-Modified: Tue, 12 Nov 2024 14:19:43 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: 3gPwxhvicTTkH.Ahw.xqABBeruPfBWts
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 24 Nov 2024 09:36:56 GMT
ETag: "c6150925cfea5941ddc7ff2a0a506692"
X-Cache: Hit from cloudfront
Via: 1.1 51e38e49e0ed8139bfe27f40adfc4628.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: CDG50-P2
X-Amz-Cf-Id: zhxUi___kHSySofE0bmBDq5-RiOi961B87pIyekDqbrYjKedZdBtjQ==
Age: 14024

3.162.140.85:80

GET /rootg2.cer HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: crt.rootg2.amazontrust.com

HTTP/1.1 200 OK
Content-Type: binary/octet-stream
Content-Length: 1145
Connection: keep-alive
Last-Modified: Tue, 19 Nov 2024 12:41:39 GMT
x-amz-server-side-encryption: AES256
x-amz-version-id: dX7hle94LlXUy5Ge6SEZs2OAN2frE7Tg
Accept-Ranges: bytes
Server: AmazonS3
Date: Sun, 24 Nov 2024 09:38:34 GMT
ETag: "c6150925cfea5941ddc7ff2a0a506692"
X-Cache: Hit from cloudfront
Via: 1.1 f4152a7e3f38840de1666dec1da22a5c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P2
X-Amz-Cf-Id: ebXbnEqzm0z0vSAnL0WEtHWl1bSAFYRs1inn1H9FU9K2Jln2a1ikfg==
Age: 13926

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

8.8.8.8:53

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r4.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 436
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:06:33 GMT
Expires: Sun, 24 Nov 2024 13:56:33 GMT
Cache-Control: public, max-age=3000
Age: 1446
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:06:20 GMT
Expires: Sun, 24 Nov 2024 13:56:20 GMT
Cache-Control: public, max-age=3000
Age: 1459
Last-Modified: Mon, 07 Oct 2024 07:18:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:04:32 GMT
Expires: Sun, 24 Nov 2024 13:54:32 GMT
Cache-Control: public, max-age=3000
Age: 1567
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

142.250.200.3:80

GET /r/gsr1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog

HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 1739
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 24 Nov 2024 13:06:20 GMT
Expires: Sun, 24 Nov 2024 13:56:20 GMT
Cache-Control: public, max-age=3000
Age: 1459
Last-Modified: Mon, 07 Oct 2024 07:18:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/InkyTop3.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 8750
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="InkyTop3.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-05be1c0f2103c7cb041e0e66
X-Request-Id: vLGHJFwI19_I4alGoe9_r
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 10e6471c69f1ad653b370f2e0d12464e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: cXUbr4nlK2jbKWRfkD8MSZxuzBW6uSbc5iHTIhvv-kZd2pGoS813gw==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/hoedownwinnerbutton.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/gif
Content-Length: 8782
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="hoedownwinnerbutton.gif"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-02a1ed2d348922d46e2509ac
X-Request-Id: zUH2Ekq_S5acF2n1OMmib
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 3330c8bd92a164e7fc516781d61a3de2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: p7In0YqrZk9Stx1EtajchLBLGMbijYrHo7QEvDbDN9s6LoSODyyFRw==
Vary: Origin

8.8.8.8:53

8.8.8.8:53

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDIhujYSNLn8Qp%2BcWonwiMi HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:43:32 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2827

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCBLY48YnSQEBKPcOwoCZ04 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:44:51 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2752

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCA2A0i4p2rOgqWBJocbuh0 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:48:41 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2520

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDIhujYSNLn8Qp%2BcWonwiMi HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:43:32 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2827

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCBLY48YnSQEBKPcOwoCZ04 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:44:51 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2752

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEEGoFYJ0C3qQCbRh5xcgwPQ%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 13:11:49 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1132

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCBLY48YnSQEBKPcOwoCZ04 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:44:51 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2752

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCA2A0i4p2rOgqWBJocbuh0 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:48:41 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2520

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCA2A0i4p2rOgqWBJocbuh0 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:48:41 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2520

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCA2A0i4p2rOgqWBJocbuh0 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:48:41 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2520

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCBLY48YnSQEBKPcOwoCZ04 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:44:51 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2752

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDqY175YJL2xBDRBNzx6%2B3S HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:54:56 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2143

142.250.200.3:80

GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCBLY48YnSQEBKPcOwoCZ04 HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog

HTTP/1.1 200 OK
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sun, 24 Nov 2024 12:44:51 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2752

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/Quirkywinnerbanner2.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 7932
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="Quirkywinnerbanner2.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-170e18861b74e1561a5744cd
X-Request-Id: 3VQInJBArfZOQ69jj8oZ3
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 ee848f8f55733317613d473416ba6ed2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: PwjWHC7KUzKrwSDk-QZiH1ZcQr0cG4t9zUJQau8PL6SlPtQmxDR83A==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/cupcakecraftchallengeweeklytop5-2.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 5192
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="cupcakecraftchallengeweeklytop5-2.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-0c80c6ab276a98021a0b46dd
X-Request-Id: ghZtaTN70IO3-gqvOh0UO
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 eb3d996e42c33967733fb771116b53e0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: 9VYWB1JFAIyFlXG1Fs_axttQuFGx2AaZ_QeqkAsjEH0Uacls0tMnzQ==
Vary: Origin

3.165.232.11:443

GET /albums/jj50/jennifer-g_photos/2cfde558-5d29-4491-bfbb-aba4662f35f9.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: i269.photobucket.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Content-Type: image/jpeg
Content-Length: 10373
Connection: keep-alive
Date: Sun, 24 Nov 2024 13:30:42 GMT
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="2cfde558-5d29-4491-bfbb-aba4662f35f9.jpg"
Content-Security-Policy: script-src 'none'
Server: photobucket
X-Amzn-Trace-Id: Root=1-67432a82-0540de200660eb990ab7db95
X-Request-Id: Y6pI85FmPWozQvaagjgnW
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 eb3d996e42c33967733fb771116b53e0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: DUB56-P3
X-Amz-Cf-Id: oAWGzeh8-gyxM_a2vWOH9M3PDkvPGBt66Gnu1SjUeeb54u-EbMTX5Q==
Vary: Origin

8.8.8.8:53

8.8.8.8:53

172.67.75.33:443

GET /embed/603279 HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
Cache-Control: public, max-age=300
expires: Sun, 24 Nov 2024 13:32:40 GMT
x-robots-tag: all
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
Last-Modified: Sun, 24 Nov 2024 13:30:40 GMT
CF-Cache-Status: EXPIRED
Server-Timing: cfCacheStatus;desc="EXPIRED"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=xnniZpgpsGMsP7FCI%2FV5Q8Lz3iiBen1FXJRXd2oc1%2FEEjTn4QlLow%2Fhe5dLCCHWhzZYBRv9sTxEUfgtLOpEQrAx4dar%2F1yj0gItkNrt%2FHhVmplgKMxM5saq6z2Z43JR2"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c141abc293f7-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=29175&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3139&recv_bytes=581&delivery_rate=107496&cwnd=253&unsent_bytes=0&cid=39dd6742c212dfd9&ts=702&x=0"

172.67.75.33:443

GET /stylesheets/embed.vendor.min.760717b3f565c387.css HTTP/1.1
Accept: text/css, */*
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
etag: W/"6710d8bb-937"
last-modified: Thu, 17 Oct 2024 09:28:27 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1594229
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=njE4GzExG5IRrSgshyS95UptYbQ5ocDNnee8cIA98U7PscpyNYVZNmdWYOaERYC140tcRGM9%2FsQpZuXVeSKXLNZ4ZnQzI6N1buSWWkSzLmHYaCUoM3nWCAmfgJkuvoHV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1464bb593f7-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=38496&sent=18&recv=12&lost=0&retrans=0&sent_bytes=13702&recv_bytes=930&delivery_rate=485683&cwnd=257&unsent_bytes=0&cid=39dd6742c212dfd9&ts=830&x=0"

172.67.75.33:443

GET /stylesheets/embed.grid.min.4069f6f840f9102b.css HTTP/1.1
Accept: text/css, */*
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
etag: W/"67190511-899"
last-modified: Wed, 23 Oct 2024 14:15:45 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 2004920
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fOdKxWPF1Fyk5AZ7QOXaRndrtaqZe3NiYUMIxu8GCVqKsgqvB69FOBSDtl0tLMRN9oaCOeDVdN5zAhV0MNb8vfpPiO0FVUF43%2BMfAFELUvT7sOu3b1p%2FMcp%2Bie0HfPM5"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1469c3f93f7-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=37222&sent=21&recv=14&lost=0&retrans=0&sent_bytes=15571&recv_bytes=1277&delivery_rate=485683&cwnd=257&unsent_bytes=0&cid=39dd6742c212dfd9&ts=876&x=0"

172.67.75.33:443

GET /js/embed.main.min.65b73ba9362828bd.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
etag: W/"6710d8e6-c18"
last-modified: Thu, 17 Oct 2024 09:29:10 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1244180
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bhd4%2FLMNHKvsx27VcXXd7llC8DJWN85qKM2KKImRhnpNRd3wvmrcFwRBRSRgMmHt2ZaOsG208ad%2Fq%2Fmnxzt0Pi5t16pBckgqymkbbI1yXVtJxJBR6LWjJFC7baclIsEQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c146fce193f7-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=34726&sent=25&recv=17&lost=0&retrans=0&sent_bytes=17496&recv_bytes=1634&delivery_rate=485683&cwnd=257&unsent_bytes=0&cid=39dd6742c212dfd9&ts=944&x=0"

172.67.75.33:443

GET /images/icons/facebook.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: image/png
Content-Length: 742
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=2222
Vary: Accept
etag: "6728f157-8ae"
last-modified: Mon, 04 Nov 2024 16:07:51 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1503450
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gfKCigDD6Z3P9ubIVbTcRSFvXnFPX%2BqJpfG7CA0%2FXDGZUCncv%2Fvr6e%2BO%2FuFKgsuMraTuLwS%2FdGOlc5Rs1nFcwlnIgvOqOkXd2x5DKuvGtbu5kYHGXzE%2FSAoxQJdGsXX%2F"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1477da093f7-LHR
server-timing: cfL4;desc="?proto=TCP&rtt=37444&sent=28&recv=19&lost=0&retrans=0&sent_bytes=19824&recv_bytes=1996&delivery_rate=485683&cwnd=257&unsent_bytes=0&cid=39dd6742c212dfd9&ts=1019&x=0"

172.67.75.33:443

GET /stylesheets/embed.style.min.a78da5fe140ecbd7.css HTTP/1.1
Accept: text/css, */*
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=16354
etag: W/"671904ea-3fe2"
last-modified: Wed, 23 Oct 2024 14:15:06 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1546771
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9AszfYke8nEdj%2F5n9ZPDl1ye%2BuaYO02oOuFFT0H1K2zx%2Bd58OnhE72U7iLfDHS1mI%2FTC4LJA0JAY8R%2B4yYy21zsUCoHX8KroKGSn5vjKNM7RNBmsysdJ7A9sUd1RqdAj"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1463d81cdbd-LHR
Content-Encoding: gzip
server-timing: cfL4;desc="?proto=TCP&rtt=29158&sent=6&recv=8&lost=0&retrans=1&sent_bytes=3192&recv_bytes=639&delivery_rate=101097&cwnd=253&unsent_bytes=0&cid=708550953d86d1f2&ts=834&x=0"

172.67.75.33:443

GET /js/embed.vendor.min.2f17f0b14ee46c5a.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 04 Nov 2024 16:11:58 GMT
vary: Accept-Encoding
etag: W/"6728f24e-9e1"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
Content-Encoding: gzip
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1252175
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fNy7iXpOGz5qf8FOAtYFOkUWJPdMyC6oyT%2Bgi5K2yMK%2BX50oWOih2Y85Ix3UB24%2Bd%2Frueyog%2FujoKIXjxZAX3rZ0NpI%2BSZm0ZEWHVe%2FhgR%2BtVHk0lltAqciyEUPeNwfN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1469e42cdbd-LHR
server-timing: cfL4;desc="?proto=TCP&rtt=29141&sent=12&recv=12&lost=0&retrans=1&sent_bytes=8112&recv_bytes=998&delivery_rate=279151&cwnd=255&unsent_bytes=0&cid=708550953d86d1f2&ts=878&x=0"

172.67.75.33:443

GET /images/icons/xicon.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Referer: https://snapwidget.com/embed/603279
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: snapwidget.com
Connection: Keep-Alive

HTTP/1.1 200 OK
Date: Sun, 24 Nov 2024 13:30:41 GMT
Content-Type: image/png
Content-Length: 947
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origSize=1902
Vary: Accept
etag: "6728f157-76e"
last-modified: Mon, 04 Nov 2024 16:07:51 GMT
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
Cache-Control: max-age=31536000
CF-Cache-Status: HIT
Age: 1405544
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=L%2F12wfHd995zhBKGgAKyD24t7WmvMgEilIseuqlf0mxcb3rmGvrcdpCglZCx6LTQeDCHazf1%2F5AbGfhOiubGQ1nPCz4FZKZ2l%2BSyj%2BUZ9Nre9vAcweVplxvHKeZi8A7j"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Strict-Transport-Security: max-age=2592000
Speculation-Rules: "/cdn-cgi/speculation"
Server: cloudflare
CF-RAY: 8e79c1477f79cdbd-LHR
server-timing: cfL4;desc="?proto=TCP&rtt=28518&sent=16&recv=15&lost=0&retrans=1&sent_bytes=10449&recv_bytes=1357&delivery_rate=279151&cwnd=255&unsent_bytes=0&cid=708550953d86d1f2&ts=1027&x=0"

172.67.182.230:80

GET /images/tag.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.thecutestblogontheblock.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Nov 2024 13:30:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 24 Nov 2024 14:30:40 GMT
Location: https://thecutestblogontheblock.com/
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kcFR9e%2BLWIlGbaCacw%2FTOAcI8k3nLZBPMZJvcGj6NjagUxisODoiVLrALlAtTYctXtW36BxDv7OQHlSb8qdEkN96Y%2BFctHFm1nVX1GuhrkgEm51FkRoENyCm4T1n2ej4xZuRli7WrxLqOs5c3I8o%2F3%2Bd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8e79c1413edc3dae-LHR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=27307&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=293&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

8.8.8.8:53

104.21.75.228:80

GET /wp-content/uploads/2016/01/owl-of-me_3c.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: thecutestblogontheblock.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Nov 2024 13:30:40 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 24 Nov 2024 14:30:40 GMT
Location: https://thecutestblogontheblock.com/wp-content/uploads/2016/01/owl-of-me_3c.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=45Ca48cza%2B7XXsA7tLy%2FxNVlX6EFVWQQwHNV%2Ffdd3u3pXG75xHCIda%2Fd%2BYDXh%2Bxn83MCtuGac8n6dpwfrTcUOSYO7xY3aZls0%2BIB%2FamfjaVQ%2B4INu%2B7D9c9c1GfSh7VBSPpHKIvBfFvGBl8VHho%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 8e79c1419ee748ce-LHR
alt-svc: h3=":443"; ma=86400
server-timing: cfL4;desc="?proto=TCP&rtt=27299&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=318&delivery_rate=0&cwnd=249&unsent_bytes=0&cid=0000000000000000&ts=0&x=0"

104.21.75.228:443

GET / HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: thecutestblogontheblock.com
Connection: Keep-Alive

HTTP/1.1 301 Moved Permanently
Date: Sun, 24 Nov 2024 13:30:40 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
location: https://www.mbcslot88.com/
alt-svc: h3=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cu3wcOQopyomUA2S9bFkocOUbOyljb%2BRNAo7qKavNjbB4x0BHGUYjIgP9QtAZaraYPk%2Bct1utTHVhr9fQiySB7px3PMyLP3z39yjtCUHgoZ9gL1LyRFqJlq%2FmY0pkX69k3ellDY8qQByoJPbZdA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 8e79c1427b2335b9-LHR
server-timing: cfL4;desc="?proto=TCP&rtt=31778&sent=6&recv=6&lost=0&retrans=0&sent_bytes=3178&recv_bytes=608&delivery_rate=124309&cwnd=253&unsent_bytes=0&cid=5679d69f51dd3dbc&ts=406&x=0"

8.8.8.8:53

104.21.75.228:443

GET /wp-content/uploads/2016/01/owl-of-me_3c.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: thecutestblogontheblock.com
Connection: Keep-Alive