urlquery - report: www.oilspotgone.com/mtm/direct/.eJxtjU1LwzAch79LDh5mabJQSzfpYaWUuc2iA1FPI4akKaRNmv5rY8XvbvQo3n4vDzyfaHIt2iKsxybFKELMNWPor4dCJUuePO2knrLTM53qtaVEQXaTDAuW6oOn92LPF0dkUQ6-eNzDWb7L0m6O6kDlTlFaP2RrOuZXfZ0mL3llp_JSvXmSHkl1uiPB5YQUTrigUwB2i_E8z7Fp9WgNNKYXMTddwJQZ4dKzTgTwf4JxLiyEG4QHrKDTEbNWt5xBa3rsf5Zr_3ft9O2Qk3gTrfDqN2Xo6xv9tlpH:1oWkQZ:EANMwSGxId6RNL4hQ1ZQDtCd77g/2

Fully Qualifying Domain Name	Rank	First Seen	Last Seen	IP	Comment
content-signature-2.cdn.mozilla.net (1)	1152	2020-11-03 12:26:46 UTC	2022-09-09 04:47:11 UTC	143.204.55.49
www1.oilspotgone.com (5)	0	2022-09-01 03:38:42 UTC	2022-09-09 20:17:07 UTC	75.2.73.197	Unknown ranking
ocsp.digicert.com (1)	86	2012-05-21 07:02:23 UTC	2022-09-10 05:46:48 UTC	93.184.220.29
partner.googleadservices.com (1)	798	2012-10-03 01:04:21 UTC	2022-09-10 04:43:57 UTC	142.250.74.98
r3.o.lencr.org (5)	344	2020-12-02 08:52:13 UTC	2022-09-09 04:40:05 UTC	23.36.76.226
ocsp.pki.goog (7)	175	2017-06-14 07:23:31 UTC	2022-09-09 04:41:59 UTC	142.250.74.3
www.oilspotgone.com (1)	0	2022-09-01 03:38:18 UTC	2022-09-09 20:16:54 UTC	96.126.123.244	Unknown ranking
d1lxhc4jvstzrp.cloudfront.net (4)	0	2021-11-30 10:27:04 UTC	2022-09-10 03:04:30 UTC	143.204.42.83	Unknown ranking
afs.googleusercontent.com (2)	12123	2013-05-07 00:37:08 UTC	2022-09-10 04:30:27 UTC	142.250.74.1
img-getpocket.cdn.mozilla.net (6)	1631	2017-09-01 03:40:57 UTC	2022-09-10 04:30:10 UTC	34.120.237.76
contile.services.mozilla.com (1)	1114	2021-05-27 18:32:35 UTC	2022-09-10 04:48:42 UTC	34.117.237.239
www.google.com (3)	7	2016-08-04 12:36:31 UTC	2022-09-10 04:45:51 UTC	142.250.74.164
push.services.mozilla.com (1)	2140	2015-09-03 10:29:36 UTC	2022-09-09 04:43:53 UTC	35.162.35.244
firefox.settings.services.mozilla.com (2)	867	2020-06-04 20:08:41 UTC	2022-09-10 05:02:17 UTC	143.204.55.36

Scan Date	Severity	Indicator	Comment
2022-09-10	2	www.oilspotgone.com/mtm/direct/.eJxtjU1LwzAch79LDh5mabJQSzfpYaWUuc2iA1FPI4a (...)	Malware
2022-09-10	2	www1.oilspotgone.com/ls.php	Malware

Date	UQ / IDS / BL	URL	IP
2023-03-25 23:18:24 +0000	0 - 0 - 1	dicillotavern.com/mtm/direct/.eJxtiksKAkEMBe- (...)	45.33.2.79
2023-03-25 21:50:59 +0000	0 - 0 - 1	aieov.com/	45.33.2.79
2023-03-25 21:49:26 +0000	0 - 0 - 1	osrxpharmacuticals.com/mtm/direct/.eJx1ykEKAj (...)	45.33.2.79
2023-03-25 21:30:24 +0000	0 - 0 - 1	iengine.com/	45.33.2.79
2023-03-25 21:29:24 +0000	0 - 0 - 1	b9ing.com/	45.33.2.79

Date	UQ / IDS / BL	URL	IP
2023-03-25 23:49:17 +0000	0 - 0 - 1	mangakalot.com/	45.33.23.183
2023-03-25 23:35:45 +0000	0 - 1 - 1	dbboutique.ca/moii/backinmotion	172.105.106.222
2023-03-25 23:35:44 +0000	0 - 1 - 1	dbboutique.ca/moii/	172.105.106.222
2023-03-25 23:34:32 +0000	0 - 0 - 2	smacna.com/mtm/direct/.eJxdiUsKAjEMQO-S5VgmLn (...)	45.56.79.23
2023-03-25 23:18:24 +0000	0 - 0 - 1	dicillotavern.com/mtm/direct/.eJxtiksKAkEMBe- (...)	45.33.2.79

Date	UQ / IDS / BL	URL	IP
2022-10-23 11:03:51 +0000	0 - 0 - 1	oilspotgone.com/mtm/direct/.eJxdkElug0AUBe_CO (...)	45.33.2.79
2022-09-25 14:18:26 +0000	0 - 0 - 1	oilspotgone.com/mtm/direct/.eJxdjstOwzAQRf_FC (...)	45.33.18.44
2022-09-25 08:24:08 +0000	0 - 0 - 1	www.oilspotgone.com/mtm/direct/.eJxtjU1PwjAch (...)	173.255.194.134
2022-09-21 04:48:11 +0000	0 - 0 - 2	www42.oilspotgone.com/http:/www42.oilspotgone.com/	75.2.73.197
2022-09-10 06:52:05 +0000	0 - 0 - 1	www1.oilspotgone.com/?tm=1&subid4=1662792697. (...)	99.83.136.84

Date	UQ / IDS / BL	URL	IP
2023-03-25 20:32:42 +0000	0 - 0 - 1	cbdnerds.net/	185.53.177.20
2023-03-25 13:40:54 +0000	0 - 0 - 1	southpointhond.com/	185.53.179.173
2023-03-25 07:34:58 +0000	0 - 0 - 1	bankmuscat.co/	185.53.177.50
2023-03-25 07:32:46 +0000	0 - 0 - 1	unsold-cars-39159.com/	185.53.177.31
2023-03-25 07:29:14 +0000	0 - 0 - 1	allyearcoolin.com/	185.53.179.173

Request	Response
GET /v1/ HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/ FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 939 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Date: Sat, 10 Sep 2022 06:06:26 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-Cache: Hit from cloudfront Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: nUY_UxtnoAuqDhFktVCFW4jjmw16uTu_DA3xmWA_UcI6Hd2xe7CeSQ== Age: 2714 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (939), with no line terminators Size: 939 Md5: 91dd975a7b17b2922dd23c0e49314e40 Sha1: 57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2 Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a
GET /mtm/direct/.eJxtjU1LwzAch79LDh5mabJQSzfpYaWUuc2iA1FPI4akKaRNmv5rY8XvbvQo3n4vDzyfaHIt2iKsxybFKELMNWPor4dCJUuePO2knrLTM53qtaVEQXaTDAuW6oOn92LPF0dkUQ6-eNzDWb7L0m6O6kDlTlFaP2RrOuZXfZ0mL3llp_JSvXmSHkl1uiPB5YQUTrigUwB2i_E8z7Fp9WgNNKYXMTddwJQZ4dKzTgTwf4JxLiyEG4QHrKDTEbNWt5xBa3rsf5Zr_3ft9O2Qk3gTrfDqN2Xo6xv9tlpH:1oWkQZ:EANMwSGxId6RNL4hQ1ZQDtCd77g/2 HTTP/1.1 Host: www.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www.oilspotgone.com/mtm/direct/.eJxtjU1LwzAch79LDh5mabJ (...) FQDN: www.oilspotgone.com IP: 96.126.123.244 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 96.126.123.244 HTTP/1.1 302 Found content-type: text/html; charset=utf-8 server: openresty/1.13.6.1 date: Sat, 10 Sep 2022 06:51:40 GMT content-length: 0 location: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0 x-mtm-path: 4 x-mtm-prov: 1:1.46;70:0.00 x-mtm-rd: 0.91 vary: Accept-Language content-language: en set-cookie: mtm_delivered=WyJvaWxzcG90Z29uZS5jb20iLCJodHRwOi8vd3d3MS5vaWxzcG90Z29uZS5jb20vP3RtPTEmc3ViaWQ0PTE2NjI3OTI3MDAuMDE5NDc3MDAwMCZrdz1TdGFpbitSZW1vdmFsJktXMT1Ecml2ZXdheSUyMFNlYWxjb2F0aW5nJktXMj1Db25jcmV0ZSUyME9pbCUyMFN0YWluJTIwUmVtb3ZlciZLVzM9SW5kdXN0cmlhbCUyMENsZWFuaW5nJTIwU3VwcGxpZXMmc2VhcmNoYm94PTAmZG9tYWlubmFtZT0wJmJhY2tmaWxsPTAiLDEsIjIwMjItMDktMTAgMDY6NTE6NDAiLDEsIjE2NjI3OTI3MDAuMDE5NDc3MDAwMCIsMSxudWxsLG51bGxd:1oWuL6:NnymWQwkBnOYNdvS31KoYnvdyw4; expires=Sat, 10-Sep-2022 07:51:40 GMT; Max-Age=3600; Path=/ connection: close --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89" Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=4733 Expires: Sat, 10 Sep 2022 08:10:33 GMT Date: Sat, 10 Sep 2022 06:51:40 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: f55e483f32b3fd50b1a2414aaada9b61 Sha1: 9d6b22edb98866e002e3b1ace44dfb0f8d00935f Sha256: 4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1 Host: content-signature-2.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: content-signature-2.cdn.mozilla.net/chains/remote-setti (...) FQDN: content-signature-2.cdn.mozilla.net IP: 143.204.55.49 HASH: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345 143.204.55.49 HTTP/2 200 OK content-type: binary/octet-stream content-length: 5348 date: Fri, 09 Sep 2022 07:17:12 GMT last-modified: Sat, 20 Aug 2022 23:18:05 GMT etag: "742edb4038f38bc533514982f3d2e861" content-disposition: attachment accept-ranges: bytes server: AmazonS3 x-cache: Hit from cloudfront via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) x-amz-cf-pop: OSL50-C1 x-amz-cf-id: 1BDBdBcwQ1jZbi7hIjU5PyHsdzSh_nn4g-wp1B4IzsfYg_1ZtWj1vA== age: 84869 X-Firefox-Spdy: h2 --- Additional Info --- Magic: PEM certificate\012- , ASCII text Size: 5348 Md5: 742edb4038f38bc533514982f3d2e861 Sha1: cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1 Sha256: b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /v1/tiles HTTP/1.1 Host: contile.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: contile.services.mozilla.com/v1/tiles FQDN: contile.services.mozilla.com IP: 34.117.237.239 HASH: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3 34.117.237.239 HTTP/2 200 OK content-type: application/json server: nginx date: Sat, 10 Sep 2022 06:51:41 GMT content-length: 12 strict-transport-security: max-age=31536000 via: 1.1 google alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JSON data\012- , ASCII text, with no line terminators Size: 12 Md5: 23e88fb7b99543fb33315b29b1fad9d6 Sha1: a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0 HTTP/1.1 Host: www1.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Upgrade-Insecure-Requests: 1	URL: www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000 (...) FQDN: www1.oilspotgone.com IP: 75.2.73.197 HASH: a58de74b9b75665ceea9ce975e7617022de36bd559e8e15c61997aee7fedc060 75.2.73.197 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Sep 2022 06:51:41 GMT Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Buckets: bucket078 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_LFKy5oyvqqTkSXirVlsg8kuWJGMf36jft1Sa767qoWc17Or/ODhbrMbPGb8vkUV/FGDCbn+5Rl5b0qLAiG3eLg== X-Template: tpl_Regnitz_twoclick X-Language: norwegian Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile Accept-CH-Lifetime: 30 Content-Encoding: gzip --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2903) Size: 4974 Md5: cf6a85c9551bae53886acdce744747d7 Sha1: 13bb8621a2ba17237ce54d199c4f4d47a90727cd Sha256: a58de74b9b75665ceea9ce975e7617022de36bd559e8e15c61997aee7fedc060
GET /scripts/js3caf.js HTTP/1.1 Host: d1lxhc4jvstzrp.cloudfront.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/	URL: d1lxhc4jvstzrp.cloudfront.net/scripts/js3caf.js FQDN: d1lxhc4jvstzrp.cloudfront.net IP: 143.204.42.83 HASH: ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44 143.204.42.83 HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 7000 Connection: keep-alive Server: nginx Date: Sat, 10 Sep 2022 00:46:20 GMT Last-Modified: Thu, 14 Jan 2021 10:54:01 GMT Accept-Ranges: bytes ETag: "600022c9-1b58" X-Cache: Hit from cloudfront Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: D_SMxzlZpTlDsoDROr_vXB0_3EXfz0A_TNgjfR9J8tvjGZ2q9wWEoA== Age: 21921 --- Additional Info --- Magic: ASCII text, with very long lines (316) Size: 7000 Md5: cce7f943ec8e7b4ba13be4aba6b463d9 Sha1: 220f3e8ca723daa91fd040cf518991a65f2bf110 Sha256: ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44
GET /themes/assets/style.css HTTP/1.1 Host: d1lxhc4jvstzrp.cloudfront.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/	URL: d1lxhc4jvstzrp.cloudfront.net/themes/assets/style.css FQDN: d1lxhc4jvstzrp.cloudfront.net IP: 143.204.42.83 HASH: a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7 143.204.42.83 HTTP/1.1 200 OK Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Server: nginx Date: Sat, 10 Sep 2022 01:32:23 GMT Last-Modified: Tue, 12 May 2020 14:25:52 GMT Content-Encoding: gzip ETag: W/"5ebab1f0-33d" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: UGzZvxIdhKtBuPom2i_LFXr_RRRZPBDyj0dOjAgUr5l5IwOWrTiKQw== Age: 19158 --- Additional Info --- Magic: ASCII text Size: 343 Md5: 03a4a8c322fc0c99b0ee7cbbcc9eabcd Sha1: 6fc193276de2a3458cd853c474cb9269b900e00d Sha256: a535d2296792cb37a2bbad1d9d0546e3383a8a5bfac0d9edda15795c226bddf7
GET /themes/regnitz_0f823431/style.css HTTP/1.1 Host: d1lxhc4jvstzrp.cloudfront.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/	URL: d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/s (...) FQDN: d1lxhc4jvstzrp.cloudfront.net IP: 143.204.42.83 HASH: b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46 143.204.42.83 HTTP/1.1 200 OK Content-Type: text/css Transfer-Encoding: chunked Connection: keep-alive Server: nginx Date: Sat, 10 Sep 2022 02:17:27 GMT Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT Content-Encoding: gzip ETag: W/"6218bc51-4ec" Vary: Accept-Encoding X-Cache: Hit from cloudfront Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: aJUwjkm1sIU82wUVmBWnegq7xLUgoJHVXGxl8eqtlJmInusWXtqP4A== Age: 16454 --- Additional Info --- Magic: ASCII text Size: 539 Md5: 3138e35c7232f3c11463560722a0ac79 Sha1: b3e50fa997933e788c1a8800b347ba592b2ff913 Sha256: b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46
GET /adsense/domains/caf.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/	URL: www.google.com/adsense/domains/caf.js FQDN: www.google.com IP: 142.250.74.164 HASH: cbb7852dabdf0acab9981851160c62a289d2f2fcf705f6327894413b42f40ce5 142.250.74.164 HTTP/1.1 200 OK Content-Type: text/javascript; charset=UTF-8 Accept-Ranges: bytes Vary: Accept-Encoding Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="ads-afs-ui" Report-To: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} Date: Sat, 10 Sep 2022 06:51:41 GMT Expires: Sat, 10 Sep 2022 06:51:41 GMT Cache-Control: private, max-age=3600 ETag: "10733590713701250077" X-Content-Type-Options: nosniff Content-Encoding: gzip Transfer-Encoding: chunked Server: sffe X-XSS-Protection: 0 --- Additional Info --- Magic: ASCII text, with very long lines (1885) Size: 53452 Md5: 27bbdd1d246488a7872f99e432c86c83 Sha1: 2d31cf370a9e7b82137fa177cf31db1aca9b0e31 Sha256: cbb7852dabdf0acab9981851160c62a289d2f2fcf705f6327894413b42f40ce5
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 Host: firefox.settings.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: application/json Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Content-Type: application/json Connection: keep-alive Sec-Fetch-Dest: empty Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: firefox.settings.services.mozilla.com/v1/buckets/main/c (...) FQDN: firefox.settings.services.mozilla.com IP: 143.204.55.36 HASH: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300 143.204.55.36 HTTP/1.1 200 OK Content-Type: application/json Content-Length: 329 Connection: keep-alive Access-Control-Allow-Origin: * Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff Date: Sat, 10 Sep 2022 05:56:07 GMT Cache-Control: max-age=3600 Expires: Sat, 10 Sep 2022 06:01:09 GMT ETag: "1648230346554" X-Cache: Hit from cloudfront Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: Sv6OBO4W-MY746gJC-8khi_rMjF2Y14U3pVTRv_lk0ebqmq04kgMeg== Age: 3334 --- Additional Info --- Magic: JSON data\012- , ASCII text, with very long lines (329), with no line terminators Size: 329 Md5: 0333b0655111aa68de771adfcc4db243 Sha1: 63f295a144ac87a7c8e23417626724eeca68a7eb Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
POST / HTTP/1.1 Host: ocsp.digicert.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.digicert.com/ FQDN: ocsp.digicert.com IP: 93.184.220.29 HASH: 99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282 93.184.220.29 HTTP/1.1 200 OK Content-Type: application/ocsp-response Accept-Ranges: bytes Age: 2635 Cache-Control: 'max-age=158059' Date: Sat, 10 Sep 2022 06:51:41 GMT Last-Modified: Sat, 10 Sep 2022 06:07:46 GMT Server: ECS (ska/F717) X-Cache: HIT Content-Length: 471 --- Additional Info --- Magic: data Size: 471 Md5: d0c56e0b2955a5dd7f37ba4bbf5727b4 Sha1: f435bd1f6fb8ec931f1817fe4b91e6b86a7cb14b Sha256: 99f7da9dca677db8e9cec5491c0d6d8a86b9c5e907907c2fdd30973c747f4282
GET /themes/regnitz_0f823431/img/arrows.png HTTP/1.1 Host: d1lxhc4jvstzrp.cloudfront.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/style.css	URL: d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/i (...) FQDN: d1lxhc4jvstzrp.cloudfront.net IP: 143.204.42.83 HASH: 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865 143.204.42.83 HTTP/1.1 200 OK Content-Type: image/png Content-Length: 11375 Connection: keep-alive Server: nginx Date: Sat, 10 Sep 2022 01:55:39 GMT Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT Accept-Ranges: bytes ETag: "6218bc51-2c6f" X-Cache: Hit from cloudfront Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: OSL50-C1 X-Amz-Cf-Id: XAFGdN0Ope1ubImd7Glwu_a3QZ4bJU3icV7PLJ8HuEbxFwpFkyFakg== Age: 17763 --- Additional Info --- Magic: PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data Size: 11375 Md5: 0cb2e5165dc9324eb462199f04e1ffa9 Sha1: 9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8 Sha256: 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865
GET / HTTP/1.1 Host: push.services.mozilla.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Sec-WebSocket-Version: 13 Origin: wss://push.services.mozilla.com/ Sec-WebSocket-Protocol: push-notification Sec-WebSocket-Extensions: permessage-deflate Sec-WebSocket-Key: KVQI0T/uvDfQRvhJ370Oyg== Connection: keep-alive, Upgrade Sec-Fetch-Dest: websocket Sec-Fetch-Mode: websocket Sec-Fetch-Site: cross-site Pragma: no-cache Cache-Control: no-cache Upgrade: websocket	URL: push.services.mozilla.com/ FQDN: push.services.mozilla.com IP: 35.162.35.244 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 35.162.35.244 HTTP/1.1 101 Switching Protocols Connection: Upgrade Upgrade: websocket Sec-WebSocket-Accept: T8XSQDhBbC9lqZSU0IY2mx00z/8= --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1 Host: www1.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0	URL: www1.oilspotgone.com/favicon.ico FQDN: www1.oilspotgone.com IP: 75.2.73.197 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 75.2.73.197 HTTP/1.1 200 OK Content-Type: image/x-icon Date: Sat, 10 Sep 2022 06:51:42 GMT Content-Length: 0 Connection: keep-alive Server: nginx Last-Modified: Tue, 12 May 2020 14:25:52 GMT ETag: "5ebab1f0-0" Accept-Ranges: bytes --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /track.php?domain=oilspotgone.com&toggle=browserjs&uid=MTY2Mjc5MjcwMS4yNTM6MzhiMTczY2NkODE5NDdhMjExNDAwZjAwZWQ2Y2ZhYzNkMmM3MDExYzJlYTZlOGQ5ZjgxNmMyMmQyZTc1MDBlMTo2MzFjMzNmZDNkYzZk HTTP/1.1 Host: www1.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0	URL: www1.oilspotgone.com/track.php?domain=oilspotgone.com&t (...) FQDN: www1.oilspotgone.com IP: 75.2.73.197 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 75.2.73.197 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Sep 2022 06:51:42 GMT Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: browserjs Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 498cbdcbc5fed75df7e4974b21f3be66580dd169b8c82e76c69a823567e27ab6 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: e66743a6c60c1181d7f47c7f748ddfa3 Sha1: 97e333fac41fce213aeda4a42c79b0c5077e26c0 Sha256: 498cbdcbc5fed75df7e4974b21f3be66580dd169b8c82e76c69a823567e27ab6
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 710a5aef6e27c55dacca6af6e3c59d7aa663d32c14d3d04fca011b8b6a132328 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: f01f6ec504e0d3921c1c336dc5d562f7 Sha1: e06622c30296aee9e9323e54c2883c8d223b5dab Sha256: 710a5aef6e27c55dacca6af6e3c59d7aa663d32c14d3d04fca011b8b6a132328
GET /afs/ads?adtest=off&psid=1420240428&pcsa=false&channel=000001%2C000003%2C001188%2Cbucket078&client=dp-teaminternet12_3ph&r=m&hl=no&terms=Driveway%20Sealcoating%2CConcrete%20Oil%20Stain%20Remover%2CIndustrial%20Cleaning%20Supplies&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300953%2C17300956%2C17301094%2C17301097&format=r3%7Cs&nocache=4611662792692763&num=0&output=afd_ads&domain_name=www1.oilspotgone.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1662792692765&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=760&frm=0&uio=--&cont=tc&jsid=caf&jsv=472435327&rurl=http%3A%2F%2Fwww1.oilspotgone.com%2F%3Ftm%3D1%26subid4%3D1662792700.0194770000%26kw%3DStain%2BRemoval%26KW1%3DDriveway%2520Sealcoating%26KW2%3DConcrete%2520Oil%2520Stain%2520Remover%26KW3%3DIndustrial%2520Cleaning%2520Supplies%26searchbox%3D0%26domainname%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www1.oilspotgone.com/ Upgrade-Insecure-Requests: 1 Sec-Fetch-Dest: iframe Sec-Fetch-Mode: navigate Sec-Fetch-Site: cross-site	URL: www.google.com/afs/ads?adtest=off&psid=1420240428&pcsa= (...) FQDN: www.google.com IP: 142.250.74.164 HASH: 65b6d737562eb438632cc73d1b03f67869670e73f1ff381164facbf0096f4431 142.250.74.164 HTTP/2 200 OK content-type: text/html; charset=UTF-8 content-disposition: inline date: Sat, 10 Sep 2022 06:51:42 GMT expires: Sat, 10 Sep 2022 06:51:42 GMT cache-control: private, max-age=3600 content-encoding: br server: gws content-length: 2202 x-xss-protection: 0 set-cookie: CONSENT=PENDING+061; expires=Mon, 09-Sep-2024 06:51:42 GMT; path=/; domain=.google.com; Secure p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6117) Size: 2202 Md5: 7292953543f25111080c18eeff890885 Sha1: bf26821219f113855fb7852e7bcbf32756c7f2fc Sha256: 65b6d737562eb438632cc73d1b03f67869670e73f1ff381164facbf0096f4431
GET /gampad/cookie.js?domain=www1.oilspotgone.com&client=dp-teaminternet12_3ph&product=SAS&callback=__sasCookie HTTP/1.1 Host: partner.googleadservices.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Referer: http://www1.oilspotgone.com/ Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: partner.googleadservices.com/gampad/cookie.js?domain=ww (...) FQDN: partner.googleadservices.com IP: 142.250.74.98 HASH: 5226105b0e96991114314c6213c1b6bad4fa8011ec09ced9be4c1e557f7c215e 142.250.74.98 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" timing-allow-origin: * cross-origin-resource-policy: cross-origin x-content-type-options: nosniff content-disposition: attachment; filename="f.txt" content-encoding: gzip date: Sat, 10 Sep 2022 06:51:42 GMT server: cafe cache-control: private content-length: 184 x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: ASCII text, with no line terminators Size: 184 Md5: da33e2d5f422495985e3a5aa83eaaab3 Sha1: c1995b0fb3046fdd1e0856183bbd43e0e15770ce Sha256: 5226105b0e96991114314c6213c1b6bad4fa8011ec09ced9be4c1e557f7c215e
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 84 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 472 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 472 Md5: 90af7f9fc306540e02535db3d00dca64 Sha1: 9e05b003b35ed57277b6b295adde93add7c41b0b Sha256: 64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 710a5aef6e27c55dacca6af6e3c59d7aa663d32c14d3d04fca011b8b6a132328 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: f01f6ec504e0d3921c1c336dc5d562f7 Sha1: e06622c30296aee9e9323e54c2883c8d223b5dab Sha256: 710a5aef6e27c55dacca6af6e3c59d7aa663d32c14d3d04fca011b8b6a132328
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3ffaff9ef1c9c1c3d3913a514f047cc3 Sha1: 5760845d78902a1193a453478552c3540688c4d5 Sha256: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3ffaff9ef1c9c1c3d3913a514f047cc3 Sha1: 5760845d78902a1193a453478552c3540688c4d5 Sha256: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504
GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 Host: afs.googleusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: afs.googleusercontent.com/ad_icons/standard/publisher_i (...) FQDN: afs.googleusercontent.com IP: 142.250.74.1 HASH: a3d7b37475de5a3a350d4dc4790f14a6a5f4045726d2eae4cbe9bd59aeba2fe2 142.250.74.1 HTTP/2 200 OK content-type: image/svg+xml accept-ranges: bytes vary: Accept-Encoding content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} content-length: 272 x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 date: Sat, 10 Sep 2022 05:38:08 GMT expires: Sun, 11 Sep 2022 04:38:08 GMT cache-control: public, max-age=82800 age: 4414 last-modified: Thu, 19 Dec 2019 14:15:00 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390) Size: 272 Md5: bbbac37f0b6e29a6099e4aa7cb19d6ca Sha1: 0acafe95e2141f0af6109203efeb2d98e6b926c6 Sha256: a3d7b37475de5a3a350d4dc4790f14a6a5f4045726d2eae4cbe9bd59aeba2fe2
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1 Host: afs.googleusercontent.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: no-cors Sec-Fetch-Site: cross-site	URL: afs.googleusercontent.com/ad_icons/standard/publisher_i (...) FQDN: afs.googleusercontent.com IP: 142.250.74.1 HASH: 2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a 142.250.74.1 HTTP/2 200 OK content-type: image/svg+xml accept-ranges: bytes vary: Accept-Encoding content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} content-length: 174 x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 date: Fri, 09 Sep 2022 19:02:36 GMT expires: Sat, 10 Sep 2022 18:02:36 GMT cache-control: public, max-age=82800 age: 42546 last-modified: Thu, 22 Oct 2020 21:45:00 GMT alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info --- Magic: SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators Size: 174 Md5: 4de8b85c8915995b571bde50e231be7c Sha1: 29c226ca7b9cbe1d44e5480ce95bbb42727b2d99 Sha256: 2ec9168c4507546748c5f400f5030031f0eb06f2aed8deaa11362c395bff4f7a
POST /ls.php HTTP/1.1 Host: www1.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Content-Length: 2714 Origin: http://www1.oilspotgone.com Connection: keep-alive Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0	URL: www1.oilspotgone.com/ls.php FQDN: www1.oilspotgone.com IP: 75.2.73.197 HASH: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 75.2.73.197 HTTP/1.1 201 Created Content-Type: text/javascript;charset=UTF-8 Date: Sat, 10 Sep 2022 06:51:42 GMT Transfer-Encoding: chunked Connection: keep-alive Server: nginx Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile Accept-CH-Lifetime: 30 X-Log-Success: 631c33fedea7ae51352ef5a6 Charset: utf-8 Access-Control-Allow-Origin: http://www1.oilspotgone.com Access-Control-Allow-Methods: POST, OPTIONS Access-Control-Max-Age: 86400 X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBALquDFETXRn0Hr05fUP7EJT77xYnPmRbpMy4vk8KYiHnkNpednjOANJcaXDXcKQJN0nXKZJL7TciJD8AoHXK158CAwEAAQ==_cNV6MJhBTxwJ9WmDAXepYzkX74I48aFTGi8zafIPxjXm/3y2MeKGv81NfwQBmaNERrRU71Wll2QRpvLqzFNxlw== --- Additional Info --- Magic: Size: 0 Md5: d41d8cd98f00b204e9800998ecf8427e Sha1: da39a3ee5e6b4b0d3255bfef95601890afd80709 Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Alerts: Blocklists: - fortinet: Malware
POST /gts1c3 HTTP/1.1 Host: ocsp.pki.goog User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 83 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: ocsp.pki.goog/gts1c3 FQDN: ocsp.pki.goog IP: 142.250.74.3 HASH: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504 142.250.74.3 HTTP/1.1 200 OK Content-Type: application/ocsp-response Date: Sat, 10 Sep 2022 06:51:42 GMT Cache-Control: public, max-age=14400 Server: ocsp_responder Content-Length: 471 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN --- Additional Info --- Magic: data Size: 471 Md5: 3ffaff9ef1c9c1c3d3913a514f047cc3 Sha1: 5760845d78902a1193a453478552c3540688c4d5 Sha256: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504
GET /track.php?domain=oilspotgone.com&caf=1&toggle=answercheck&answer=yes&uid=MTY2Mjc5MjcwMS4yNTM6MzhiMTczY2NkODE5NDdhMjExNDAwZjAwZWQ2Y2ZhYzNkMmM3MDExYzJlYTZlOGQ5ZjgxNmMyMmQyZTc1MDBlMTo2MzFjMzNmZDNkYzZk HTTP/1.1 Host: www1.oilspotgone.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Connection: keep-alive Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0 Cookie: __gsas=ID=7a56fab25e32026b:T=1662792702:S=ALNI_Mabr3YDkrHL0KejGJo9pCdXuh0ZQQ	URL: www1.oilspotgone.com/track.php?domain=oilspotgone.com&c (...) FQDN: www1.oilspotgone.com IP: 75.2.73.197 HASH: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf 75.2.73.197 HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Date: Sat, 10 Sep 2022 06:51:42 GMT Transfer-Encoding: chunked Connection: keep-alive Server: nginx Vary: Accept-Encoding X-Custom-Track: answercheck Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile Accept-CH-Lifetime: 30 Access-Control-Allow-Origin: * Content-Encoding: gzip --- Additional Info --- Magic: data Size: 20 Md5: a4745abc5e7fdb89cc6df3069f3c6e69 Sha1: 74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2583 Expires: Sat, 10 Sep 2022 07:34:46 GMT Date: Sat, 10 Sep 2022 06:51:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e0fbe5627b19e9ad7ad4d40c96514ae9 Sha1: d9d361271987c5947d96ddacc67efb3f3a32bbd3 Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2583 Expires: Sat, 10 Sep 2022 07:34:46 GMT Date: Sat, 10 Sep 2022 06:51:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e0fbe5627b19e9ad7ad4d40c96514ae9 Sha1: d9d361271987c5947d96ddacc67efb3f3a32bbd3 Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2583 Expires: Sat, 10 Sep 2022 07:34:46 GMT Date: Sat, 10 Sep 2022 06:51:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e0fbe5627b19e9ad7ad4d40c96514ae9 Sha1: d9d361271987c5947d96ddacc67efb3f3a32bbd3 Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
POST / HTTP/1.1 Host: r3.o.lencr.org User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate Content-Type: application/ocsp-request Content-Length: 85 Connection: keep-alive Pragma: no-cache Cache-Control: no-cache	URL: r3.o.lencr.org/ FQDN: r3.o.lencr.org IP: 23.36.76.226 HASH: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217 23.36.76.226 HTTP/1.1 200 OK Content-Type: application/ocsp-response Server: nginx Content-Length: 503 ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC Cache-Control: public, no-transform, must-revalidate, max-age=2583 Expires: Sat, 10 Sep 2022 07:34:46 GMT Date: Sat, 10 Sep 2022 06:51:43 GMT Connection: keep-alive --- Additional Info --- Magic: data Size: 503 Md5: e0fbe5627b19e9ad7ad4d40c96514ae9 Sha1: d9d361271987c5947d96ddacc67efb3f3a32bbd3 Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9a798806-4378-4646-89ee-e50837809910.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9610 x-amzn-requestid: 34102145-abda-4987-a68d-9069496366ea x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YNj0oF7loAMF6zg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631bb350-52aee64214c814812c03262e;Sampled=0 x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:40 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: 91AsC8-zVFCOPHFb2qnlTev2aXzdCEDYtc68JtYYsQSKS7OFF4QzgQ== via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 4f3feb5c4393987d42d1971d404d7cea.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 21:59:50 GMT age: 31913 etag: "afbc7666fa0b2093ef0c5d9a955d54d139c09b30" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9610 Md5: 1abac18a85802f38f08561ac64020b55 Sha1: afbc7666fa0b2093ef0c5d9a955d54d139c09b30 Sha256: eae7f28dd178293939ecd81082ab68ae6098bb3cb1f1fe9411c38314ddb0f944
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 866c2b16919ab311f906c4e8a074fd93b46f74408c9e2c9a4c30310afa08f047 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 9981 x-amzn-requestid: 1a34423c-b2d9-4ae3-a437-eb5717334372 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YNkiSGjloAMFYuw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631bb474-00c79a927f7f7d5d70791b68;Sampled=0 x-amzn-remapped-date: Fri, 09 Sep 2022 21:47:32 GMT x-amz-cf-pop: HIO50-C1, SEA73-P2 x-cache: Hit from cloudfront x-amz-cf-id: jwkD86lz1SUQE__IGBv9RINc-LON017wkTpW7g0ePcMtssqd_POtpQ== via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 22:13:41 GMT age: 31082 etag: "3b25ffe66a762ea032c05b149a29fe0d6faa3687" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 9981 Md5: 572d8ed935df86fde22138e8bfddfd9f Sha1: 3b25ffe66a762ea032c05b149a29fe0d6faa3687 Sha256: 866c2b16919ab311f906c4e8a074fd93b46f74408c9e2c9a4c30310afa08f047
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb7cf625b-bc88-409c-ba19-f5826328ea51.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: a5929b6d6b7a9bd67bc80d335869d55f43e5eff9c5703e34640ce8f3adb590ad 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 7378 x-amzn-requestid: b97047bb-2298-42d3-8829-a51f9a067806 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: X3ypFH5KIAMFi6Q= x-content-type-options: nosniff x-amzn-trace-id: Root=1-6312fe39-3a8cf8cc64b8d5382a57d9ca;Sampled=0 x-amzn-remapped-date: Sat, 03 Sep 2022 07:11:53 GMT x-amz-cf-pop: SEA73-P2 x-cache: Hit from cloudfront x-amz-cf-id: SjHUkEEMjYqBc1qXMGjrescp0HfLgmwEiHOetsfXg6noCPF_Tp5Jyg== via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 e77661e211afe9242e85e573f12d5534.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 21:31:15 GMT age: 33628 etag: "bc14d92551e46fb63f0f6b48e6e0e5496c5dc201" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 7378 Md5: 38bfbe2db4b4504a825123cf20667234 Sha1: bc14d92551e46fb63f0f6b48e6e0e5496c5dc201 Sha256: a5929b6d6b7a9bd67bc80d335869d55f43e5eff9c5703e34640ce8f3adb590ad
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 8676 x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YNiuZEjnIAMFRFg= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0 x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT x-amz-cf-pop: HIO50-C1, SEA73-P2 x-cache: Hit from cloudfront x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ== via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 22:13:43 GMT age: 31080 etag: "88db17a82ea0207ccb4826c2961875c5106b427a" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 8676 Md5: e8f11aeba65478b039cfb4100aa23435 Sha1: 88db17a82ea0207ccb4826c2961875c5106b427a Sha256: 6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdde1c872-426a-4aec-b295-a2cac8b36edf.webp HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: 58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 4477 x-amzn-requestid: bbdca46e-5628-4faf-a0fe-ea1b5b39ac2a x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YNjzaHrIoAMF-iA= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631bb348-567e946e7cf77f2e11c17c97;Sampled=0 x-amzn-remapped-date: Fri, 09 Sep 2022 21:42:32 GMT x-amz-cf-pop: HIO50-C1, SEA19-C2 x-cache: Miss from cloudfront x-amz-cf-id: a0AyKhmYA7WPwciU2nTXwyChZV_riw1QsqI_giBIcdZhi3Nz4jM0Sw== via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 21:59:11 GMT age: 31952 etag: "ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 4477 Md5: 71bafbee3867c04c3712ff98a123d52c Sha1: ccf471cd30f5aa96f4e5fdb9e0fbbcdbb475a0bf Sha256: 58ff1700e0b125caefb73719e2b3d734b2fbcc5ed1aabe5a11bb73b43edab831
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d42aeb1-7286-47e7-80d0-9f935ff0e357.jpeg HTTP/1.1 Host: img-getpocket.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: image/avif,image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Origin: null Connection: keep-alive Sec-Fetch-Dest: image Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site	URL: img-getpocket.cdn.mozilla.net/296x148/filters:format(jp (...) FQDN: img-getpocket.cdn.mozilla.net IP: 34.120.237.76 HASH: ac5b44ab4f884494a472970b4aa21602ca8d09c5db44016151fdb08a2afcd06f 34.120.237.76 HTTP/2 200 OK content-type: image/jpeg server: nginx content-length: 6783 x-amzn-requestid: b5b3bc92-81fb-44c9-8779-75acdcfe3698 x-xss-protection: 1; mode=block access-control-allow-origin: * strict-transport-security: max-age=63072000; includeSubdomains; preload x-frame-options: DENY content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' x-amz-apigw-id: YNitVHV6oAMFtAw= x-content-type-options: nosniff x-amzn-trace-id: Root=1-631bb188-1fc0dbcb38916f80068ddd30;Sampled=0 x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT x-amz-cf-pop: HIO50-C1, SEA73-P2 x-cache: Hit from cloudfront x-amz-cf-id: zWlncI8c_NNPfirYIVAXQMvjRStc1JDgTLqQiBx6WKa9_qgObTeKLg== via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google date: Fri, 09 Sep 2022 21:50:15 GMT age: 32488 etag: "22af3681777fa8f4b2b2701b6908b964ae196ccf" cache-control: max-age=3600,public,public alt-svc: clear X-Firefox-Spdy: h2 --- Additional Info --- Magic: JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Size: 6783 Md5: 827a2babef4ab84362ee689aa17ad274 Sha1: 22af3681777fa8f4b2b2701b6908b964ae196ccf Sha256: ac5b44ab4f884494a472970b4aa21602ca8d09c5db44016151fdb08a2afcd06f
GET /adsense/domains/caf.js HTTP/1.1 Host: www.google.com User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://www.google.com/ Connection: keep-alive Sec-Fetch-Dest: script Sec-Fetch-Mode: no-cors Sec-Fetch-Site: same-origin TE: trailers	URL: www.google.com/adsense/domains/caf.js FQDN: www.google.com IP: 142.250.74.164 142.250.74.164 HTTP/2 200 OK content-type: text/javascript; charset=UTF-8 accept-ranges: bytes vary: Accept-Encoding content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui cross-origin-resource-policy: cross-origin cross-origin-opener-policy: same-origin; report-to="ads-afs-ui" report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]} date: Sat, 10 Sep 2022 06:51:42 GMT expires: Sat, 10 Sep 2022 06:51:42 GMT cache-control: private, max-age=3600 etag: "4830856951658958975" x-content-type-options: nosniff content-encoding: gzip server: sffe x-xss-protection: 0 alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" X-Firefox-Spdy: h2 --- Additional Info ---

                                        
                                            GET /v1/ HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 939 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: Content-Length, Content-Type, Alert, Backoff, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Date: Sat, 10 Sep 2022 06:06:26 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: nUY_UxtnoAuqDhFktVCFW4jjmw16uTu_DA3xmWA_UcI6Hd2xe7CeSQ== 

                                        
                                            
Age: 2714 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators

                                                Size:   939

                                                Md5:    91dd975a7b17b2922dd23c0e49314e40

                                                Sha1:   57a2ece1e3cee7c4ebf927f2ba92f52cac395fe2

                                                Sha256: 09966873bbf317f8910c59544cfde2a6d46e8acd2905797cc7c85c6b4d18ea8a

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "4B09E1D2B887DED061E4EC5F82EC70CE699EEED428ACC6B4FD3EF10ED9233C89" 

                                        
                                            
Last-Modified: Thu, 08 Sep 2022 23:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=4733 

                                        
                                            
Expires: Sat, 10 Sep 2022 08:10:33 GMT 

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:40 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    f55e483f32b3fd50b1a2414aaada9b61

                                                Sha1:   9d6b22edb98866e002e3b1ace44dfb0f8d00935f

                                                Sha256: 4b09e1d2b887ded061e4ec5f82ec70ce699eeed428acc6b4fd3ef10ed9233c89

                                        
                                            GET /v1/tiles HTTP/1.1 

                                        
                                            
Host: contile.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.117.237.239

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: application/json

                                        

                                        
                                            
server: nginx 

                                        
                                            
date: Sat, 10 Sep 2022 06:51:41 GMT 

                                        
                                            
content-length: 12 

                                        
                                            
strict-transport-security: max-age=31536000 

                                        
                                            
via: 1.1 google 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with no line terminators

                                                Size:   12

                                                Md5:    23e88fb7b99543fb33315b29b1fad9d6

                                                Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

                                                Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

                                        
                                            GET /scripts/js3caf.js HTTP/1.1 

                                        
                                            
Host: d1lxhc4jvstzrp.cloudfront.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www1.oilspotgone.com/

                                         143.204.42.83

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/javascript

                                        

                                        
                                            
Content-Length: 7000 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Server: nginx 

                                        
                                            
Date: Sat, 10 Sep 2022 00:46:20 GMT 

                                        
                                            
Last-Modified: Thu, 14 Jan 2021 10:54:01 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "600022c9-1b58" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: D_SMxzlZpTlDsoDROr_vXB0_3EXfz0A_TNgjfR9J8tvjGZ2q9wWEoA== 

                                        
                                            
Age: 21921 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text, with very long lines (316)

                                                Size:   7000

                                                Md5:    cce7f943ec8e7b4ba13be4aba6b463d9

                                                Sha1:   220f3e8ca723daa91fd040cf518991a65f2bf110

                                                Sha256: ba5b7354353b0eec1637564dae072fee662a5b9862f6bf7ed5e60a5a76f2ef44

                                        
                                            GET /themes/regnitz_0f823431/style.css HTTP/1.1 

                                        
                                            
Host: d1lxhc4jvstzrp.cloudfront.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/css,*/*;q=0.1 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www1.oilspotgone.com/

                                         143.204.42.83

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/css

                                        

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Server: nginx 

                                        
                                            
Date: Sat, 10 Sep 2022 02:17:27 GMT 

                                        
                                            
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
ETag: W/"6218bc51-4ec" 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: aJUwjkm1sIU82wUVmBWnegq7xLUgoJHVXGxl8eqtlJmInusWXtqP4A== 

                                        
                                            
Age: 16454 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  ASCII text

                                                Size:   539

                                                Md5:    3138e35c7232f3c11463560722a0ac79

                                                Sha1:   b3e50fa997933e788c1a8800b347ba592b2ff913

                                                Sha256: b53565fe44fb5034ed78e704aee57c620c37819a13286af740aab63b41550d46

                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 

                                        
                                            
Host: firefox.settings.services.mozilla.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: application/json 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Content-Type: application/json 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: empty 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         143.204.55.36

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/json

                                        

                                        
                                            
Content-Length: 329 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After 

                                        
                                            
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none'; 

                                        
                                            
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT 

                                        
                                            
Strict-Transport-Security: max-age=31536000 

                                        
                                            
X-Content-Type-Options: nosniff 

                                        
                                            
Date: Sat, 10 Sep 2022 05:56:07 GMT 

                                        
                                            
Cache-Control: max-age=3600 

                                        
                                            
Expires: Sat, 10 Sep 2022 06:01:09 GMT 

                                        
                                            
ETag: "1648230346554" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 501ad2910f631f0520a6d389d6f053e8.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: Sv6OBO4W-MY746gJC-8khi_rMjF2Y14U3pVTRv_lk0ebqmq04kgMeg== 

                                        
                                            
Age: 3334 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators

                                                Size:   329

                                                Md5:    0333b0655111aa68de771adfcc4db243

                                                Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb

                                                Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

                                        
                                            GET /themes/regnitz_0f823431/img/arrows.png HTTP/1.1 

                                        
                                            
Host: d1lxhc4jvstzrp.cloudfront.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://d1lxhc4jvstzrp.cloudfront.net/themes/regnitz_0f823431/style.css

                                         143.204.42.83

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/png

                                        

                                        
                                            
Content-Length: 11375 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Server: nginx 

                                        
                                            
Date: Sat, 10 Sep 2022 01:55:39 GMT 

                                        
                                            
Last-Modified: Fri, 25 Feb 2022 11:24:01 GMT 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
ETag: "6218bc51-2c6f" 

                                        
                                            
X-Cache: Hit from cloudfront 

                                        
                                            
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront) 

                                        
                                            
X-Amz-Cf-Pop: OSL50-C1 

                                        
                                            
X-Amz-Cf-Id: XAFGdN0Ope1ubImd7Glwu_a3QZ4bJU3icV7PLJ8HuEbxFwpFkyFakg== 

                                        
                                            
Age: 17763 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  PNG image data, 1500 x 600, 8-bit colormap, non-interlaced\012- data

                                                Size:   11375

                                                Md5:    0cb2e5165dc9324eb462199f04e1ffa9

                                                Sha1:   9e0f89847ec8a98d98a6020bc5c4ed32b7a48bf8

                                                Sha256: 67dff0aad873050f12609885f2264417ccdd0d438311000a704c89f0865f7865

                                        
                                            GET /favicon.ico HTTP/1.1 

                                        
                                            
Host: www1.oilspotgone.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0

                                         75.2.73.197

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: image/x-icon

                                        

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
Content-Length: 0 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Server: nginx 

                                        
                                            
Last-Modified: Tue, 12 May 2020 14:25:52 GMT 

                                        
                                            
ETag: "5ebab1f0-0" 

                                        
                                            
Accept-Ranges: bytes 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  

                                                Size:   0

                                                Md5:    d41d8cd98f00b204e9800998ecf8427e

                                                Sha1:   da39a3ee5e6b4b0d3255bfef95601890afd80709

                                                Sha256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    e66743a6c60c1181d7f47c7f748ddfa3

                                                Sha1:   97e333fac41fce213aeda4a42c79b0c5077e26c0

                                                Sha256: 498cbdcbc5fed75df7e4974b21f3be66580dd169b8c82e76c69a823567e27ab6

                                        
                                            GET /afs/ads?adtest=off&psid=1420240428&pcsa=false&channel=000001%2C000003%2C001188%2Cbucket078&client=dp-teaminternet12_3ph&r=m&hl=no&terms=Driveway%20Sealcoating%2CConcrete%20Oil%20Stain%20Remover%2CIndustrial%20Cleaning%20Supplies&max_radlink_len=40&type=3&uiopt=true&swp=as-drid-2150633343939208&oe=UTF-8&ie=UTF-8&fexp=21404%2C17300953%2C17300956%2C17301094%2C17301097&format=r3%7Cs&nocache=4611662792692763&num=0&output=afd_ads&domain_name=www1.oilspotgone.com&v=3&bsl=8&pac=0&u_his=1&u_tz=0&dt=1662792692765&u_w=1280&u_h=1024&biw=1280&bih=939&psw=1280&psh=760&frm=0&uio=--&cont=tc&jsid=caf&jsv=472435327&rurl=http%3A%2F%2Fwww1.oilspotgone.com%2F%3Ftm%3D1%26subid4%3D1662792700.0194770000%26kw%3DStain%2BRemoval%26KW1%3DDriveway%2520Sealcoating%26KW2%3DConcrete%2520Oil%2520Stain%2520Remover%26KW3%3DIndustrial%2520Cleaning%2520Supplies%26searchbox%3D0%26domainname%3D0%26backfill%3D0&adbw=master-1%3A530 HTTP/1.1 

                                        
                                            
Host: www.google.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www1.oilspotgone.com/ 

                                        
                                            
Upgrade-Insecure-Requests: 1 

                                        
                                            
Sec-Fetch-Dest: iframe 

                                        
                                            
Sec-Fetch-Mode: navigate 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.164

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: text/html; charset=UTF-8

                                        

                                        
                                            
content-disposition: inline 

                                        
                                            
date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
expires: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
cache-control: private, max-age=3600 

                                        
                                            
content-encoding: br 

                                        
                                            
server: gws 

                                        
                                            
content-length: 2202 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
set-cookie: CONSENT=PENDING+061; expires=Mon, 09-Sep-2024 06:51:42 GMT; path=/; domain=.google.com; Secure 

                                        
                                            
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info." 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (6117)

                                                Size:   2202

                                                Md5:    7292953543f25111080c18eeff890885

                                                Sha1:   bf26821219f113855fb7852e7bcbf32756c7f2fc

                                                Sha256: 65b6d737562eb438632cc73d1b03f67869670e73f1ff381164facbf0096f4431

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 84 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 472 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   472

                                                Md5:    90af7f9fc306540e02535db3d00dca64

                                                Sha1:   9e05b003b35ed57277b6b295adde93add7c41b0b

                                                Sha256: 64abd990305ef3f25ffb3fb2ccae04b76e178375752ecb2020411df8f7974fcf

                                        
                                            POST /gts1c3 HTTP/1.1 

                                        
                                            
Host: ocsp.pki.goog

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 83 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         142.250.74.3

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
Cache-Control: public, max-age=14400 

                                        
                                            
Server: ocsp_responder 

                                        
                                            
Content-Length: 471 

                                        
                                            
X-XSS-Protection: 0 

                                        
                                            
X-Frame-Options: SAMEORIGIN 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   471

                                                Md5:    3ffaff9ef1c9c1c3d3913a514f047cc3

                                                Sha1:   5760845d78902a1193a453478552c3540688c4d5

                                                Sha256: 6d9fdae72bab1880e2f5a6d00e2509b79200464dd769d6574759e7ef23586504

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%231967d2 HTTP/1.1 

                                        
                                            
Host: afs.googleusercontent.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Referer: https://www.google.com/ 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: no-cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         142.250.74.1

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/svg+xml

                                        

                                        
                                            
accept-ranges: bytes 

                                        
                                            
vary: Accept-Encoding 

                                        
                                            
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers 

                                        
                                            
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers" 

                                        
                                            
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]} 

                                        
                                            
content-length: 272 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
content-encoding: gzip 

                                        
                                            
server: sffe 

                                        
                                            
x-xss-protection: 0 

                                        
                                            
date: Sat, 10 Sep 2022 05:38:08 GMT 

                                        
                                            
expires: Sun, 11 Sep 2022 04:38:08 GMT 

                                        
                                            
cache-control: public, max-age=82800 

                                        
                                            
age: 4414 

                                        
                                            
last-modified: Thu, 19 Dec 2019 14:15:00 GMT 

                                        
                                            
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43" 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)

                                                Size:   272

                                                Md5:    bbbac37f0b6e29a6099e4aa7cb19d6ca

                                                Sha1:   0acafe95e2141f0af6109203efeb2d98e6b926c6

                                                Sha256: a3d7b37475de5a3a350d4dc4790f14a6a5f4045726d2eae4cbe9bd59aeba2fe2

                                        
                                            GET /track.php?domain=oilspotgone.com&caf=1&toggle=answercheck&answer=yes&uid=MTY2Mjc5MjcwMS4yNTM6MzhiMTczY2NkODE5NDdhMjExNDAwZjAwZWQ2Y2ZhYzNkMmM3MDExYzJlYTZlOGQ5ZjgxNmMyMmQyZTc1MDBlMTo2MzFjMzNmZDNkYzZk HTTP/1.1 

                                        
                                            
Host: www1.oilspotgone.com

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Referer: http://www1.oilspotgone.com/?tm=1&subid4=1662792700.0194770000&kw=Stain+Removal&KW1=Driveway%20Sealcoating&KW2=Concrete%20Oil%20Stain%20Remover&KW3=Industrial%20Cleaning%20Supplies&searchbox=0&domainname=0&backfill=0 

                                        
                                            
Cookie: __gsas=ID=7a56fab25e32026b:T=1662792702:S=ALNI_Mabr3YDkrHL0KejGJo9pCdXuh0ZQQ

                                         75.2.73.197

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: text/html; charset=UTF-8

                                        

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:42 GMT 

                                        
                                            
Transfer-Encoding: chunked 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Server: nginx 

                                        
                                            
Vary: Accept-Encoding 

                                        
                                            
X-Custom-Track: answercheck 

                                        
                                            
Accept-CH: viewport-width, dpr, device-memory, rtt, downlink, ect, ua, ua-full-version, ua-platform, ua-platform-version, ua-arch, ua-model, ua-mobile 

                                        
                                            
Accept-CH-Lifetime: 30 

                                        
                                            
Access-Control-Allow-Origin: * 

                                        
                                            
Content-Encoding: gzip 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   20

                                                Md5:    a4745abc5e7fdb89cc6df3069f3c6e69

                                                Sha1:   74789f7ddbebd5b7323f6f8174005b4bf8c1f1ed

                                                Sha256: d1111b245f685176180e6f1631e6dc49badf6672368e9ce260c71355165effdf

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" 

                                        
                                            
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2583 

                                        
                                            
Expires: Sat, 10 Sep 2022 07:34:46 GMT 

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:43 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    e0fbe5627b19e9ad7ad4d40c96514ae9

                                                Sha1:   d9d361271987c5947d96ddacc67efb3f3a32bbd3

                                                Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217

                                        
                                            POST / HTTP/1.1 

                                        
                                            
Host: r3.o.lencr.org

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: */* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate 

                                        
                                            
Content-Type: application/ocsp-request 

                                        
                                            
Content-Length: 85 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Pragma: no-cache 

                                        
                                            
Cache-Control: no-cache

                                         23.36.76.226

                                        
                                            HTTP/1.1 200 OK 

                                        
                                            
Content-Type: application/ocsp-response

                                        

                                        
                                            
Server: nginx 

                                        
                                            
Content-Length: 503 

                                        
                                            
ETag: "48B4321F3BDA8FD67C5BC75F98B0DFE6DF2BFDA8DCF5E708AECD47270AE03217" 

                                        
                                            
Last-Modified: Wed, 07 Sep 2022 20:00:00 UTC 

                                        
                                            
Cache-Control: public, no-transform, must-revalidate, max-age=2583 

                                        
                                            
Expires: Sat, 10 Sep 2022 07:34:46 GMT 

                                        
                                            
Date: Sat, 10 Sep 2022 06:51:43 GMT 

                                        
                                            
Connection: keep-alive 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  data

                                                Size:   503

                                                Md5:    e0fbe5627b19e9ad7ad4d40c96514ae9

                                                Sha1:   d9d361271987c5947d96ddacc67efb3f3a32bbd3

                                                Sha256: 48b4321f3bda8fd67c5bc75f98b0dfe6df2bfda8dcf5e708aecd47270ae03217

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2402aa1c-c5d5-475b-abd9-db6b8ca99270.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 9981 

                                        
                                            
x-amzn-requestid: 1a34423c-b2d9-4ae3-a437-eb5717334372 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YNkiSGjloAMFYuw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-631bb474-00c79a927f7f7d5d70791b68;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 09 Sep 2022 21:47:32 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: jwkD86lz1SUQE__IGBv9RINc-LON017wkTpW7g0ePcMtssqd_POtpQ== 

                                        
                                            
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 7d01bcfcfe27ce0b8979cf621dd081de.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Sep 2022 22:13:41 GMT 

                                        
                                            
age: 31082 

                                        
                                            
etag: "3b25ffe66a762ea032c05b149a29fe0d6faa3687" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   9981

                                                Md5:    572d8ed935df86fde22138e8bfddfd9f

                                                Sha1:   3b25ffe66a762ea032c05b149a29fe0d6faa3687

                                                Sha256: 866c2b16919ab311f906c4e8a074fd93b46f74408c9e2c9a4c30310afa08f047

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5e72c2e9-6d47-42ac-9514-316cd8f8f6c5.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 8676 

                                        
                                            
x-amzn-requestid: 64a58aa8-8321-4c91-98fe-dbf97996c513 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YNiuZEjnIAMFRFg= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-631bb18f-77b635593b202d7d3cd0ac84;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:11 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: VWwNSpFvcDq3nrn91QvYjrJX5hLjp96vrKgZzR-pOdrdHx7MlcagGQ== 

                                        
                                            
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 d1d67b07408bba8c682597d8303642e2.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Sep 2022 22:13:43 GMT 

                                        
                                            
age: 31080 

                                        
                                            
etag: "88db17a82ea0207ccb4826c2961875c5106b427a" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   8676

                                                Md5:    e8f11aeba65478b039cfb4100aa23435

                                                Sha1:   88db17a82ea0207ccb4826c2961875c5106b427a

                                                Sha256: 6f6ec5922ec54d824e7f933de87608c5a763da119ae9461d99c6525649b1a9af

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5d42aeb1-7286-47e7-80d0-9f935ff0e357.jpeg HTTP/1.1 

                                        
                                            
Host: img-getpocket.cdn.mozilla.net

                                        

                                        
                                            
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0 

                                        
                                            
Accept: image/avif,image/webp,*/* 

                                        
                                            
Accept-Language: en-US,en;q=0.5 

                                        
                                            
Accept-Encoding: gzip, deflate, br 

                                        
                                            
Origin: null 

                                        
                                            
Connection: keep-alive 

                                        
                                            
Sec-Fetch-Dest: image 

                                        
                                            
Sec-Fetch-Mode: cors 

                                        
                                            
Sec-Fetch-Site: cross-site

                                         34.120.237.76

                                        
                                            HTTP/2 200 OK 

                                        
                                            
content-type: image/jpeg

                                        

                                        
                                            
server: nginx 

                                        
                                            
content-length: 6783 

                                        
                                            
x-amzn-requestid: b5b3bc92-81fb-44c9-8779-75acdcfe3698 

                                        
                                            
x-xss-protection: 1; mode=block 

                                        
                                            
access-control-allow-origin: * 

                                        
                                            
strict-transport-security: max-age=63072000; includeSubdomains; preload 

                                        
                                            
x-frame-options: DENY 

                                        
                                            
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none' 

                                        
                                            
x-amz-apigw-id: YNitVHV6oAMFtAw= 

                                        
                                            
x-content-type-options: nosniff 

                                        
                                            
x-amzn-trace-id: Root=1-631bb188-1fc0dbcb38916f80068ddd30;Sampled=0 

                                        
                                            
x-amzn-remapped-date: Fri, 09 Sep 2022 21:35:04 GMT 

                                        
                                            
x-amz-cf-pop: HIO50-C1, SEA73-P2 

                                        
                                            
x-cache: Hit from cloudfront 

                                        
                                            
x-amz-cf-id: zWlncI8c_NNPfirYIVAXQMvjRStc1JDgTLqQiBx6WKa9_qgObTeKLg== 

                                        
                                            
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 de8fc80b494d3d381f7e006918dcc588.cloudfront.net (CloudFront), 1.1 google 

                                        
                                            
date: Fri, 09 Sep 2022 21:50:15 GMT 

                                        
                                            
age: 32488 

                                        
                                            
etag: "22af3681777fa8f4b2b2701b6908b964ae196ccf" 

                                        
                                            
cache-control: max-age=3600,public,public 

                                        
                                            
alt-svc: clear 

                                        
                                            
X-Firefox-Spdy: h2 

                                        
                                            
 

                                        
                                        
                                            

                                            --- Additional Info ---

                                            
                                                Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

                                                Size:   6783

                                                Md5:    827a2babef4ab84362ee689aa17ad274

                                                Sha1:   22af3681777fa8f4b2b2701b6908b964ae196ccf

                                                Sha256: ac5b44ab4f884494a472970b4aa21602ca8d09c5db44016151fdb08a2afcd06f

URL	www.oilspotgone.com/mtm/direct/.eJxtjU1LwzAch79LDh5mabJQSzfpYaWUuc2iA1FPI4akKaRNmv5rY8XvbvQo3n4vDzyfaHIt2iKsxybFKELMNWPor4dCJUuePO2knrLTM53qtaVEQXaTDAuW6oOn92LPF0dkUQ6-eNzDWb7L0m6O6kDlTlFaP2RrOuZXfZ0mL3llp_JSvXmSHkl1uiPB5YQUTrigUwB2i_E8z7Fp9WgNNKYXMTddwJQZ4dKzTgTwf4JxLiyEG4QHrKDTEbNWt5xBa3rsf5Zr_3ft9O2Qk3gTrfDqN2Xo6xv9tlpH:1oWkQZ:EANMwSGxId6RNL4hQ1ZQDtCd77g/2
IP	45.33.2.79 (United States)
ASN	#63949 Linode, LLC
UserAgent	Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed	2022-09-10 06:51:51 UTC
Status	Loading report..
IDS alerts	0
Blocklist alert	2
urlquery alerts	No alerts detected
Tags	None

Overview

Domain Summary (14)

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.33.2.79

Last 5 reports on ASN: Linode, LLC

Last 5 reports on domain: oilspotgone.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (19)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (40)

Overview

Domain Summary (14)

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro

Blocklists

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 45.33.2.79

Last 5 reports on ASN: Linode, LLC

Last 5 reports on domain: oilspotgone.com

Last 5 reports with similar screenshot

JavaScript

Executed Scripts (19)

Executed Evals (0)

Executed Writes (0)

HTTP Transactions (40)

Network Intrusion Detection Systems