Overview

URLideallyidentical2009.blogspot.com/search/label/toyota%20supra%20mark%204%20wallpaper
IP 172.217.21.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2023-03-19 07:00:54 UTC
StatusLoading report..
IDS alerts0
Blocklist alert8
urlquery alerts No alerts detected
Tags None

Domain Summary (33)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
ocsp.pki.goog (21) 175 2017-06-14 07:23:31 UTC 2023-03-18 04:09:11 UTC 142.250.74.3
apis.google.com (2) 105 2013-05-06 20:20:21 UTC 2023-03-18 04:11:21 UTC 172.217.21.174
resources.blogblog.com (1) 13274 2017-01-30 04:47:40 UTC 2023-03-18 17:36:21 UTC 216.58.207.233
accounts.google.com (1) 81 2012-05-23 06:57:57 UTC 2023-03-18 09:22:36 UTC 142.250.74.109
content-signature-2.cdn.mozilla.net (1) 1152 2020-11-03 12:26:46 UTC 2023-03-18 04:09:44 UTC 34.160.144.191
keywebtracker.com (1) 0 2012-06-19 11:58:05 UTC 2023-03-18 08:01:13 UTC 69.162.80.59 Unknown ranking
r3.o.lencr.org (5) 344 2020-12-02 08:52:13 UTC 2023-03-18 04:09:03 UTC 23.33.119.27
www.blogger.com (4) 8975 2012-05-22 07:35:03 UTC 2023-03-18 17:18:51 UTC 216.58.207.233
tuningcars.us (3) 0 2012-10-26 02:24:47 UTC 2023-03-17 11:37:45 UTC 213.227.149.208 Unknown ranking
img.photobucket.com (2) 169333 2012-06-27 18:38:52 UTC 2023-03-18 19:54:19 UTC 54.230.111.82
www.hdwallpapers.in (1) 224913 2012-05-23 16:23:51 UTC 2023-03-17 06:32:13 UTC 172.67.70.246
1.bp.blogspot.com (2) 8403 2012-05-21 13:44:19 UTC 2023-03-18 17:21:27 UTC 142.250.74.161
ww1.keywebtracker.com (11) 0 2017-07-13 10:01:16 UTC 2023-03-17 09:31:22 UTC 199.59.243.223 Unknown ranking
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2023-03-18 04:09:44 UTC 34.117.237.239
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2023-03-18 04:10:05 UTC 35.82.212.76
afs.googleusercontent.com (4) 12123 2013-05-06 19:11:00 UTC 2023-03-18 04:16:18 UTC 142.250.74.97
fonts.googleapis.com (2) 8877 2012-05-23 12:41:44 UTC 2023-03-18 04:49:44 UTC 142.250.74.106
img-getpocket.cdn.mozilla.net (5) 1631 2017-09-01 03:40:57 UTC 2023-03-18 04:09:29 UTC 34.120.237.76
www.modifiedcars.com (3) 0 2014-04-04 15:07:16 UTC 2023-03-18 17:10:19 UTC 64.190.63.111 Unknown ranking
tomtombak.com (3) 0 2013-06-05 02:23:11 UTC 2023-03-06 12:17:50 UTC 104.21.73.85 Unknown ranking
candybarbie.files.wordpress.com (2) 0 2012-10-20 14:15:46 UTC 2022-12-11 07:21:50 UTC 192.0.72.17 Domain (wordpress.com) ranked at: 1450
www.xzeb.com (1) 0 2012-10-12 13:47:17 UTC 2019-03-25 03:28:08 UTC 199.59.243.223 Unknown ranking
2.bp.blogspot.com (2) 11071 2012-05-21 13:44:19 UTC 2023-03-18 17:23:57 UTC 142.250.74.161
www.photowallz.com (1) 0 2012-10-26 09:25:43 UTC 2022-12-20 01:56:09 UTC 142.111.106.200 Unknown ranking
www.ridelust.com (1) 0 2013-08-19 10:33:06 UTC 2023-03-14 07:36:08 UTC 199.59.243.223 Unknown ranking
www.cardotcom.com (4) 0 2014-10-11 11:19:26 UTC 2023-02-24 04:21:10 UTC 199.192.24.97 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-05-25 20:06:39 UTC 2023-03-18 04:09:44 UTC 35.241.9.150
images4.fanpop.com (3) 186954 2013-01-12 06:16:05 UTC 2023-03-17 11:42:40 UTC 172.67.73.155
ideallyidentical2009.blogspot.com (2) 0 2014-04-24 13:49:26 UTC 2023-03-19 01:12:55 UTC 142.250.74.65 Unknown ranking
pagead2.googlesyndication.com (1) 101 2012-05-21 07:15:40 UTC 2023-03-18 12:19:47 UTC 142.250.74.130
www.squealermusic.com (1) 0 2014-11-06 15:52:44 UTC 2023-01-15 17:30:07 UTC 96.9.241.98 Unknown ranking
www.google.com (2) 7 No data No data 142.250.74.164
www.covercars.com (1) 0 2012-10-02 15:00:59 UTC 2023-02-26 09:57:43 UTC 64.190.63.111 Unknown ranking

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2023-03-19 2 ideallyidentical2009.blogspot.com/search/label/toyota%20supra%20mark%204%20 (...) Malware
2023-03-19 2 ideallyidentical2009.blogspot.com/js/cookienotice.js Malware
2023-03-19 2 ww1.keywebtracker.com/ Phishing
2023-03-19 2 ww1.keywebtracker.com/js/parking.2.103.3.js Phishing
2023-03-19 2 ww1.keywebtracker.com/ Phishing
2023-03-19 2 ww1.keywebtracker.com/js/parking.2.103.3.js Phishing
2023-03-19 2 ww1.keywebtracker.com/_fd Phishing
2023-03-19 2 ww1.keywebtracker.com/_tr Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected

ThreatFox
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.217.21.161
Date UQ / IDS / BL URL IP
2023-03-26 14:46:40 +0000 0 - 2 - 15 googleweblight.com/i?u=eggfoodafv.com/vfc/w1h (...) 172.217.21.161
2023-03-22 03:57:23 +0000 0 - 3 - 1 googleweblight.com/i?u=eggfoodafv.com/pqf/vh1 (...) 172.217.21.161
2023-03-19 07:41:28 +0000 0 - 2 - 1 mummyrokiah.blogspot.com/2011/11/awas-cia-sed (...) 172.217.21.161
2023-03-19 07:41:19 +0000 0 - 1 - 3 5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.qa/?m=1 172.217.21.161
2023-03-19 07:41:04 +0000 0 - 1 - 2 5dfghdf5hgdf56hgf56hgsdf56hgfdgs.blogspot.com.cy/ 172.217.21.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-03-27 17:22:33 +0000 0 - 3 - 0 republikendonesa.blogspot.com/search/label/ka (...) 142.250.74.65
2023-03-27 17:14:54 +0000 0 - 1 - 0 5lt5q3.lchongfu.com/ 35.205.61.67
2023-03-27 17:01:29 +0000 0 - 1 - 0 psmeo3.mn80xe.4ir8yy.76452.exea41.dfahyp.edu. (...) 35.205.61.67
2023-03-27 17:01:10 +0000 0 - 0 - 1 172.253.118.100/ 172.253.118.100
2023-03-27 16:56:52 +0000 0 - 1 - 0 www.anaispenelope.fr/2015/06/french-curves-22 (...) 142.250.74.147


Last 5 reports on domain: ideallyidentical2009.blogspot.com
Date UQ / IDS / BL URL IP
2023-03-23 10:02:41 +0000 0 - 3 - 5 ideallyidentical2009.blogspot.com/2011 142.250.74.1
2023-03-19 10:55:51 +0000 0 - 0 - 9 ideallyidentical2009.blogspot.com/2011/09/wor (...) 216.58.207.193
2023-03-19 07:00:54 +0000 0 - 0 - 8 ideallyidentical2009.blogspot.com/search/labe (...) 172.217.21.161
2023-03-18 04:57:05 +0000 0 - 0 - 3 ideallyidentical2009.blogspot.com/2011/09/20- (...) 216.58.207.193
2023-02-16 02:56:12 +0000 0 - 0 - 2 ideallyidentical2009.blogspot.com/2011/09/woo (...) 172.217.21.161


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2023-03-26 06:19:45 +0000 0 - 0 - 2 debug-news-news.blogspot.com/2011/08/overfinc (...) 142.250.74.65
2023-03-25 22:21:19 +0000 0 - 0 - 2 tattoos-girl-fish-chinas-news.blogspot.com/20 (...) 142.250.74.65
2023-03-19 10:55:51 +0000 0 - 0 - 9 ideallyidentical2009.blogspot.com/2011/09/wor (...) 216.58.207.193
2023-03-17 05:27:48 +0000 0 - 0 - 9 hypotheticalhysterical2009.blogspot.com/2011/ (...) 172.217.21.161
2023-03-26 22:24:58 +0000 0 - 1 - 0 broom-news.blogspot.ca/2011/08/abu-dhabi-uae- (...) 142.250.74.65

JavaScript

Executed Scripts (26)

Executed Evals (1)
#1 JavaScript::Eval (size: 0) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Executed Writes (2)
#1 JavaScript::Write (size: 24) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05
< xmp style = display: none >
#2 JavaScript::Write (size: 221) - SHA256: c245ecbeff813f15afadf35b9c30a67c35242300eabab56980b2ef61d9e23f4b
< iframe src = "http://keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/search/label/toyota%2520supra%2520mark%25204%2520wallpaper&ref=&l=wallpaper"
height = "1"
width = "1" > < /iframe>


HTTP Transactions (97)


Request Response
                                        
                                            GET /search/label/toyota%20supra%20mark%204%20wallpaper HTTP/1.1 
Host: ideallyidentical2009.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Sun, 19 Mar 2023 07:00:43 GMT
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 10 Feb 2023 05:57:57 GMT
ETag: W/"b594d72e3948a77b8bbbfd954531c907daa50c061ceef54d535ce1c9454bb0dd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 14562
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12915)
Size:   14562
Md5:    f64e498d90756c90422cad0ff6e1c03f
Sha1:   9037aecc4b16c841d0641670e81976e3fc75afb8
Sha256: 49611907275574d16dbe5585d4b4a4c2188f74a001fe1fd8fd06b2645a42be22

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6418
Expires: Sun, 19 Mar 2023 08:47:41 GMT
Date: Sun, 19 Mar 2023 07:00:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "E533D6BD6A8080FACDFF772BCBF359373DAB2D5A6FE5EABE64F95E68A8CD23AA"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3972
Expires: Sun, 19 Mar 2023 08:06:55 GMT
Date: Sun, 19 Mar 2023 07:00:43 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "BD775C38C2E11F1BAEDDE5D92AB17CEAF4C2067F8EA996595A66801758A71813"
Last-Modified: Fri, 17 Mar 2023 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11875
Expires: Sun, 19 Mar 2023 10:18:38 GMT
Date: Sun, 19 Mar 2023 07:00:43 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Retry-After, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 19 Mar 2023 06:14:44 GMT
age: 2759
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    bc86ef2a0cee04915bc360f5821adc8f
Sha1:   3658f9028cce204d38f7f48fcfaa2a8e4f54383a
Sha256: aeecd718d03811322457de4f20828bdba86b277e7e0e328cae9c0a8075638454
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: 0Q/eXDCObVsp/lyQJWPYX/U9FLHpJ+CK4x2QBkDdl5fFfQAQrcG+2qQ9Ku61jLARwifPh7MVMrs=
x-amz-request-id: X9CE5XWHPMKM6C4A
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 19 Mar 2023 06:58:10 GMT
age: 153
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    e7bace7c1e04d44012e37ddffe36e5d5
Sha1:   3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
Sha256: 6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Sun, 19 Mar 2023 07:00:43 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: ideallyidentical2009.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/search/label/toyota%20supra%20mark%204%20wallpaper

search
                                         142.250.74.65
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 19 Mar 2023 07:00:43 GMT
Expires: Sun, 26 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 19 Mar 2023 03:48:57 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /carimage/Nissan/Nissan-GT-R_2008_PC1.jpg HTTP/1.1 
Host: tomtombak.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         104.21.73.85
HTTP/1.1 301 Moved Permanently
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 19 Mar 2023 08:00:43 GMT
Location: https://tomtombak.com/carimage/Nissan/Nissan-GT-R_2008_PC1.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dIVqBst4o2enqJbYrXyks3HFaRbSdaEoKBS9agPkWG5qrtR%2BLWAL1dKHTQ4i4Wuvxzs2yt0pJPjojjRke%2Ba9eFSl5SvVFhKOx%2BRsQ8HFkYAckzM6FDi2XiKLjKlKg7A8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa3d70d0afe0b02-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Sun, 19 Mar 2023 07:00:43 GMT
expires: Sun, 19 Mar 2023 07:00:43 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5ebb85d0c8d0a403"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1429)
Size:   21022
Md5:    2e9e150d66328b6b6a88e285fc282762
Sha1:   22b038643bd45f842349cc7a4a7075cc0f074725
Sha256: 30d9bc41eb379b7b441031e0df6d0742df42ca92be34697f729b8eca83dc9d54
                                        
                                            GET /static/v1/widgets/3389988682-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56895
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 02:04:25 GMT
expires: Thu, 14 Mar 2024 02:04:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 15 Mar 2023 00:51:20 GMT
vary: Accept-Encoding
age: 363378
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56895
Md5:    9499c51b064d1e56fccd572f39f94eae
Sha1:   c8a95eea0f9d2e84aa6788a6dcb86d6b569a3da4
Sha256: 9c868d3622f0920a454c7c05008a0993a8040a87ef31326dc17ba182065e5313
                                        
                                            GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 18 Mar 2023 20:17:37 GMT
expires: Sun, 17 Mar 2024 20:17:37 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 18 Mar 2023 16:49:42 GMT
vary: Accept-Encoding
age: 38586
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30596)
Size:   6620
Md5:    6f46e6f68353c7911fe34f31faa1518f
Sha1:   ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 15:48:58 GMT
expires: Wed, 22 Mar 2023 15:48:58 GMT
cache-control: public, max-age=604800
last-modified: Wed, 15 Mar 2023 03:50:49 GMT
age: 313905
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /albums/userpics/10001/toyota-supra-mk4-tuning_2815629.jpg HTTP/1.1 
Host: tuningcars.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         213.227.149.208
HTTP/1.1 404 Not Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 19 Mar 2023 07:00:43 GMT
server: nginx
set-cookie: sid=c445589c-c623-11ed-9773-84b6f6b65694; path=/; domain=.tuningcars.us; expires=Fri, 06 Apr 2091 10:14:50 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   9
Md5:    d8f4a1993546cc4b850cde3599e27aec
Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067
Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
                                        
                                            GET /pix/cars_1280/30607_150062.jpg HTTP/1.1 
Host: www.modifiedcars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         64.190.63.111
HTTP/1.1 403 Forbidden
content-type: text/html
                                        
date: Sun, 19 Mar 2023 07:00:43 GMT
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    a91ee3cb35185cccc15e68e9c76c5441
Sha1:   59ae4770e2c926731d216c4aae03130d66fef18f
Sha256: da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
                                        
                                            GET /carimage/Nissan/Nissan-GT-R_2008_PC5.jpg HTTP/1.1 
Host: tomtombak.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         104.21.73.85
HTTP/1.1 301 Moved Permanently
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sun, 19 Mar 2023 08:00:43 GMT
Location: https://tomtombak.com/carimage/Nissan/Nissan-GT-R_2008_PC5.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2Frp0Ius99iGkOMQe7PJ1jhPtnPRnH9XDNDPHbko83ODsp4iLT%2B0zlJuwqDQzXgdWNaAJJXZBTUVGmllyiTb2wxjpWOgNcojzcYuoJe5iFlD8jVEMjyvChE9jEVDmu09Z"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa3d70d3b100b02-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /albums/v249/bmwcrazy/pantystockingwithgarterbelt.jpg HTTP/1.1 
Host: img.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         54.230.111.82
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Sun, 19 Mar 2023 07:00:43 GMT
Content-Length: 167
Connection: keep-alive
Location: https://img.photobucket.com/albums/v249/bmwcrazy/pantystockingwithgarterbelt.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UjFGk_TqFZ3TXqBQGOQ7-IXvWF3Rg58a1HIlnkTag1aJtZiP4X7vFg==
Vary: Origin


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /2011/02/leighton-meester-wallpaper.jpg HTTP/1.1 
Host: candybarbie.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         192.0.72.17
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 19 Mar 2023 07:00:43 GMT
Content-Length: 162
Connection: keep-alive
Location: https://candybarbie.files.wordpress.com/2011/02/leighton-meester-wallpaper.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /albums/userpics/10001/toyota-supra-mk4-tuning_2815829.jpg HTTP/1.1 
Host: tuningcars.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         213.227.149.208
HTTP/1.1 404 Not Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 19 Mar 2023 07:00:43 GMT
server: nginx
set-cookie: sid=c44f40c8-c623-11ed-a978-84b610ca51ff; path=/; domain=.tuningcars.us; expires=Fri, 06 Apr 2091 10:14:50 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   9
Md5:    d8f4a1993546cc4b850cde3599e27aec
Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067
Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
                                        
                                            GET /pix/cars_high/30324_144513.jpg HTTP/1.1 
Host: www.modifiedcars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         64.190.63.111
HTTP/1.1 403 Forbidden
content-type: text/html
                                        
date: Sun, 19 Mar 2023 07:00:43 GMT
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    a91ee3cb35185cccc15e68e9c76c5441
Sha1:   59ae4770e2c926731d216c4aae03130d66fef18f
Sha256: da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
                                        
                                            GET /cars/pictures/e/255624.jpg HTTP/1.1 
Host: www.covercars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         64.190.63.111
HTTP/1.1 403 Forbidden
content-type: text/html
                                        
date: Sun, 19 Mar 2023 07:00:43 GMT
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    a91ee3cb35185cccc15e68e9c76c5441
Sha1:   59ae4770e2c926731d216c4aae03130d66fef18f
Sha256: da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
                                        
                                            GET /walls/demi_lovato_beautiful-normal.jpg HTTP/1.1 
Host: www.hdwallpapers.in
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         172.67.70.246
HTTP/1.1 403 Forbidden
Content-Type: text/html; charset=UTF-8
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=15
Expires: Sun, 19 Mar 2023 07:00:58 GMT
X-Frame-Options: SAMEORIGIN
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3imsPSuppoz7Ue1J2kQp1c%2FrOdis3bjd2omNIZ4kPv%2BOurdFzkMQoMBub5ra01MKZCSYe9tIn5%2B4WWsDNlkJwHFKvol8XPyPITL9mbznRkqoHqpMzvUzpMfJ0UjuiAfNpCc2Phg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 7aa3d70dbb0fb4eb-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (394)
Size:   1734
Md5:    0416ed8f4c5a691dd017d4c8c67a51b9
Sha1:   5b08aa1f15ed4d98936cc4977471b700bfae97ce
Sha256: 64627a79fb0a3db0bc16705dac10691a86422deb26b15b2cd3ce710deeba0a84
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.Oupypiulh58.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 07:35:21 GMT
expires: Thu, 14 Mar 2024 07:35:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 16:56:11 GMT
vary: Accept-Encoding
age: 343522
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1445)
Size:   61020
Md5:    e8ba0e75a21e8131676aeabb448ab32b
Sha1:   a4e9c288bfe50835fd9354b40c6ef670b88a0a13
Sha256: 696d24c2350d7d8ca017aa7d070a0470afd2b9959c46c9f4e6a1d762aaf92706
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.250.74.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sat, 18 Mar 2023 07:52:24 GMT
Expires: Sat, 01 Apr 2023 07:52:24 GMT
Cache-Control: public, max-age=1209600
Age: 83299
ETag: 13036835877489095579
Vary: Accept-Encoding


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pix/cars_1280/30607_150062.jpg HTTP/1.1 
Host: www.modifiedcars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         64.190.63.111
HTTP/1.1 403 Forbidden
content-type: text/html
                                        
date: Sun, 19 Mar 2023 07:00:43 GMT
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    a91ee3cb35185cccc15e68e9c76c5441
Sha1:   59ae4770e2c926731d216c4aae03130d66fef18f
Sha256: da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
                                        
                                            GET /albums/userpics/10001/toyota-supra-mk4-tuning_2815629.jpg HTTP/1.1 
Host: tuningcars.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         213.227.149.208
HTTP/1.1 404 Not Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Sun, 19 Mar 2023 07:00:43 GMT
server: nginx
set-cookie: sid=c46f6600-c623-11ed-a3a8-84b603f2dee6; path=/; domain=.tuningcars.us; expires=Fri, 06 Apr 2091 10:14:51 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   9
Md5:    d8f4a1993546cc4b850cde3599e27aec
Sha1:   094b763b4cfcc0b05e5d040581cd513c3ca08067
Sha256: 907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 Mar 2023 05:25:51 GMT
Expires: Thu, 23 Mar 2023 05:25:51 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 Mar 2023 09:52:32 GMT
Age: 264893


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /uploads/01176126eb977dd5b42b49f189dad377.jpg HTTP/1.1 
Host: www.xzeb.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=be98855e-2211-babc-3f34-28a39b18b3a5; expires=Sun, 19-Mar-2023 07:15:44 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_NxWrMm0gZXydJgyQ73hyFJjrij77VTG6Vv34A1Ki2Jj5b8skWvhdZQad+Ixrkyz27SWp65RQAEY6apigEXKYBw==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (979), with no line terminators
Size:   756
Md5:    5e18e20d188f59062059f0f14789a017
Sha1:   43feeec873d7cd4f0ae71cc8e02d7ae5db945c31
Sha256: af2f6a4b560b03974664bd782b7d3654534fe4aa96a9e4bdbfd57ddf05fe6d6f
                                        
                                            GET /-mWGhecey9Rs/TZ2f0I-mQmI/AAAAAAAADso/Y-owZgYZDjE/s1600/hershey-barbie-doll_hi-res.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "veca"
Expires: Mon, 20 Mar 2023 07:00:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="hershey-barbie-doll_hi-res.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: fife
Content-Length: 215092
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 921x1600, components 3\012- data
Size:   215092
Md5:    d590a5e578d60c9e75ece8a538414375
Sha1:   95741cc8a05fe3e0dabada4006c2ecf1f63366e8
Sha256: 8fdca83019a27eef1e317fb6b37dd1d45b94972a3652543958c269b5252fd6a2
                                        
                                            GET /-9nfu3hXKx2Y/Tj19U8__nDI/AAAAAAAADC0/sK3ByiXtRZ0/s1600/Barbie%2BV%252527s.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "vc2d"
Expires: Mon, 20 Mar 2023 07:00:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Barbie V's.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: fife
Content-Length: 193579
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 776x1164, components 3\012- data
Size:   193579
Md5:    31bdb65b63d5755e36d21f0a5ee2bc74
Sha1:   a13e4c415cc045207f7f5a1878d6ee27690c07a1
Sha256: a1f08ad5906e907d8a0a9839e637b116bb202900ffac048d04a6fa6d1ccd9ded
                                        
                                            GET /wp-content/uploads/2011/04/hd-demi-lovato-widescreen-wallpaper.jpg HTTP/1.1 
Host: www.photowallz.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.111.106.200
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Server: nginx
Date: Sun, 19 Mar 2023 07:00:44 GMT
Content-Length: 371
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Size:   371
Md5:    3ccdd81e9fd26a78ed0756e572a6f96a
Sha1:   eae31dd584fad1b59a5b35635015fdbf9b0de183
Sha256: db6feff2f88604e180f6e918ac38840be5c37a308899700170d686ebb94a61af
                                        
                                            GET /wp-content/uploads/Toyota-Supra_1996_1280x960_wallpaper_04.jpg HTTP/1.1 
Host: www.ridelust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=85b5269c-975f-4225-9df1-299ad9738cd9; expires=Sun, 19-Mar-2023 07:15:44 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_ktIMA3dbIWPlBuSCWw8rKXj4IdIyzvoAQgQIb8zt6ijY6F8vZk5FoYgT+X7RvF1azP73r5dniLcXL+bmy/u6Cw==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1015), with no line terminators
Size:   784
Md5:    f14720528e0284667e70e131b3404236
Sha1:   82c4c04e9abb9f165486eda177e9e35a51c2db84
Sha256: a5a3ad6c9bf72024912306736f62b8a8b0b36d18e03c76a99a8443382ceba2b1
                                        
                                            GET /_IBYCzpEWumk/TGiM7b4lY3I/AAAAAAAAB9Y/xBigoki2mqM/s1600/emma-watson-wallpapers-pictures-11.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v7d6"
Expires: Mon, 20 Mar 2023 07:00:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="emma-watson-wallpapers-pictures-11.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: fife
Content-Length: 118423
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 1024x768, components 3\012- data
Size:   118423
Md5:    8c1720320682bb86422971628bba139f
Sha1:   546fb5d54bdf9f9b8abe12b731acf91cc87abb63
Sha256: 0bf07bd92c03ecbf52e878754317395abb1a204346606ab56ab717da5206ed1e
                                        
                                            GET /_ok92T4mBPv0/S_tQ2rVG_BI/AAAAAAAAAMg/6aBVxOs9jIc/s1600/14204-2009-Nissan-GT-R.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         142.250.74.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "vc8"
Expires: Mon, 20 Mar 2023 07:00:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="14204-2009-Nissan-GT-R.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: fife
Content-Length: 345224
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 1600x1174, components 3\012- data
Size:   345224
Md5:    759a2ebaba4c529d525f72adacf981f2
Sha1:   1f8bf3a94e03a41fe60a482824e13ea5cfcb1b7d
Sha256: 84d21a372852831baac9a75d09fa338fe3246045c7e86774d7abf0f41718f507
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Content-Length, Retry-After, Content-Type, Expires, Alert, Pragma, ETag, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 19 Mar 2023 06:14:32 GMT
age: 2772
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "5DB17BB0A40658845E03D8237A69458A0576D955006EE224930B0310179AF9AF"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7455
Expires: Sun, 19 Mar 2023 09:04:59 GMT
Date: Sun, 19 Mar 2023 07:00:44 GMT
Connection: keep-alive

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=2051614043593383512&zx=d291e1fe-fff1-440d-98b2-e8081fb4574f HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 19 Mar 2023 07:00:44 GMT
last-modified: Sun, 19 Mar 2023 07:00:44 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            GET /?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/search/label/toyota%2520supra%2520mark%25204%2520wallpaper&ref=&l=wallpaper HTTP/1.1 
Host: keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Upgrade-Insecure-Requests: 1

search
                                         69.162.80.59
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sun, 19 Mar 2023 07:00:44 GMT
location: http://ww1.keywebtracker.com
server: nginx
set-cookie: sid=c488e5b2-c623-11ed-9c36-53f302afd85f; path=/; domain=.keywebtracker.com; expires=Fri, 06 Apr 2091 10:14:51 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8bfIUhOzW8oNvTtw+rEO9w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.82.212.76
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 3x8pirGcyh95l/TQBQB43tlwEx0=

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /photos/wp01/nissan-gtr-egoist-101280.jpg HTTP/1.1 
Host: www.cardotcom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         199.192.24.97
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: Apache
Location: http://www.cardotcom.com/index.html
Content-Length: 243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   243
Md5:    8c94c7922734e14c620bc7f09a6a8b2d
Sha1:   8303358b48425b5548d38ca635cdbfb05091275b
Sha256: a63c29f443f4edd6c5cab605890deee0df75edc6967b0e93c7b0e62e280fbb1d
                                        
                                            GET /photos/wp01/nissan-gtr-egoist-091280.jpg HTTP/1.1 
Host: www.cardotcom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         199.192.24.97
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: Apache
Location: http://www.cardotcom.com/index.html
Content-Length: 243
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   243
Md5:    8c94c7922734e14c620bc7f09a6a8b2d
Sha1:   8303358b48425b5548d38ca635cdbfb05091275b
Sha256: a63c29f443f4edd6c5cab605890deee0df75edc6967b0e93c7b0e62e280fbb1d
                                        
                                            GET /index.html HTTP/1.1 
Host: www.cardotcom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive

search
                                         199.192.24.97
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: Apache
Location: http://www.cardotcom.com/
Content-Length: 233
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   233
Md5:    c17e9f7b9aa91004da54b50e6ee3c299
Sha1:   a196d20a0a27e24131b75d81ada3510d43411612
Sha256: 306d539d5b410aaa011e2033883f9727732423346297c1aa640ef3227aedf624
                                        
                                            GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.109
HTTP/2 302 Found
content-type: application/binary
                                        
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 19 Mar 2023 07:00:44 GMT
location: https://www.blogger.com/followers.g?blogID=2051614043593383512&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://ideallyidentical2009.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.Oupypiulh58.O/d%3D1/rs%3DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-RgRoxDHJK7DZPPKAuk973g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, require-trusted-types-for 'script';report-uri /cspreport
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-resource-policy: cross-origin
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy: unsafe-none
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:SjK19MSkYZTsc4XPToR-YfCUAZTQKg:1F4LZj2FFSWWU6Eb; Expires=Tue, 18-Mar-2025 07:00:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data\012- data
Size:   1552
Md5:    14905d151e20831352a3710517235d73
Sha1:   ffccd6d7236dbdc7387a7efb1a79f82defb13976
Sha256: a63dcea6e7b24e2626b35bfcb4710ae684262d32d4ed044733653e7aac62ac49
                                        
                                            GET /madclips/wordpress2/wp-content/uploads/2011/03/IMG_4046.JPG HTTP/1.1 
Host: www.squealermusic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         96.9.241.98
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Server: Apache
Last-Modified: Sun, 13 Mar 2011 15:50:32 GMT
Accept-Ranges: bytes
Content-Length: 2592136
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, description= , manufacturer=Canon, model=Canon PowerShot SD880 IS, orientation=upper-left, xresolution=204, yresolution=212, resolutionunit=2, datetime=2011:03:12 16:30:03], baseline, precision 8, 3648x2736, components 3\012- data
Size:   2592136
Md5:    59acd2a2a08cf7f843ed83384c24c24a
Sha1:   8ede69012df49a3aad759b9183c69f1bf07ea34d
Sha256: c82c36ed915ada97e4957630e8e36e5b424f0eae92fb6d9ab7904c74fbe23a1f
                                        
                                            GET / HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=ce58b01c-de8b-303f-25e4-47e62e737a9a; expires=Sun, 19-Mar-2023 07:15:44 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uC1BRljOohAx9/f7OjS1/oP/BkqLEWyowaaWLOT5SQruXMFTuOr71iHRpyuNAmIFPx4svvdN50VyrZRAtdOOvg==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (943), with no line terminators
Size:   721
Md5:    adbdfe8328c311ce029cc4facb9695e7
Sha1:   f7196459f674be64264151aeceef56334c0b52ce
Sha256: dc11851714d7c609158a53e3813747baedfc80ef2ea29fcb2bccce524711c4f2

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /albums/v249/bmwcrazy/pantystockingwithgarterbelt.jpg HTTP/1.1 
Host: img.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.82
HTTP/2 200 OK
content-type: image/webp
                                        
content-length: 170748
date: Sun, 19 Mar 2023 07:00:45 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="pantystockingwithgarterbelt.webp"
content-security-policy: script-src 'none'
expires: Mon, 18 Mar 2024 07:00:45 GMT
server: photobucket
x-amzn-trace-id: Root=1-6416b31c-3901d07c2540219c2e547055
x-request-id: ziWTc9DV0CREQhS5YUjhI
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: bDI-8VgTaCgof6IBGQrGq-DD9Br5U8C5avOE3PgJMGCRLumrR_tf7Q==
vary: Accept, Origin
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   170748
Md5:    330f0d34cf0866e8123a75ac4aac0571
Sha1:   8e28e13b00f6684126ae9a6c58eb5b526e099563
Sha256: 78480dc46b1051f8b361bb2dbaa5e1cb95697f072e015f62712275e05001b4be
                                        
                                            GET /js/parking.2.103.3.js HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:45 GMT
Last-Modified: Wed, 08 Mar 2023 15:54:55 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   22192
Md5:    ad6bf0359f892d1b7f90fd74145ba324
Sha1:   b3d8dc78be92e692e6885735c69f1db59fb5614e
Sha256: 6c0fa7c727891e974d4a7c8459e7c538745bc4fb600d1023a1bec8a217102249

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /image/photos/19300000/Cousin-s-Barbie-in-Princess-Charm-School-drawing-for-me-barbie-movies-19364595-1200-1600.jpg HTTP/1.1 
Host: images4.fanpop.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         172.67.73.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 19 Mar 2023 07:00:44 GMT
Content-Length: 128706
Connection: keep-alive
Last-Modified: Wed, 16 Feb 2011 09:33:56 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bx8rcgpEs9D4JJ9NyC5jnD6dFmFnEFGgDaFjjNKooWT3g3L6jHkix4bY%2F9cL%2FDNWWG9AJsi2ZgLxBoKg%2BoMYAC5w1E9z2zVpqnE6m22bqOo44jsDEpmbFv%2Fw%2FIjoNoENbdbt5w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa3d70dfccfb4f1-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, comment: "Motorola", Exif Standard: [TIFF image data, big-endian, direntries=8, xresolution=110, yresolution=118, resolutionunit=2, description=S/W Ver: 85.9B.D0R, manufacturer=MOTOROLA, model=RAZRV3x], baseline, precision 8, 1200x1600, components 3\012- data
Size:   128706
Md5:    a471d0d9d6ebcb412fab2bcce9269067
Sha1:   310b0127594d1f49d26d5bf02bd9d35af410b5d9
Sha256: f284b7855592f93d57c5adcf590a710c625ad5022af32af0e9696bf855fcb4e7
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: www.cardotcom.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive

search
                                         199.192.24.97
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Server: Apache
Last-Modified: Mon, 31 Oct 2022 08:17:54 GMT
Accept-Ranges: bytes
Content-Length: 42031
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive


--- Additional Info ---
Magic:  data
Size:   16301
Md5:    0356a648398a107f7a62401b40e46284
Sha1:   88652c1efa6f123c83fb27788e9988b49c013024
Sha256: ffed7da9efb83f32d1e54b7b1ca066c78292179153d71a371f3324a043550507
                                        
                                            GET /px.gif?ch=1&rn=5.996215669814607 HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:45 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=5.996215669814607 HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:45 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 19 Mar 2023 07:00:45 GMT
expires: Sun, 19 Mar 2023 07:00:45 GMT
cache-control: private, max-age=3600
etag: "7165412518350272690"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   54385
Md5:    a68b463b808eaa8d2ebee807e5c32ad5
Sha1:   33fa2cbb0db3d37cca1a35c3e5645e1e0a09a4e9
Sha256: f4964a7b788c2b175f454809b3ffa7968c26956fda50ac666cb892bba6a05a69
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%2302198b HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 03:51:10 GMT
expires: Mon, 20 Mar 2023 02:51:10 GMT
cache-control: public, max-age=82800
age: 11375
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    ab1acb76dd408583614a7a6cedf41866
Sha1:   e2d2d7074479023d37474ab62755b658d22d4ab1
Sha256: 8622edbe2503910e3cbeecef073a09e662fd2507436c3aabf885d155afd96565
                                        
                                            GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sat, 18 Mar 2023 12:12:33 GMT
expires: Sun, 19 Mar 2023 11:12:33 GMT
cache-control: public, max-age=82800
age: 67692
last-modified: Tue, 09 Feb 2021 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)
Size:   278
Md5:    bb7fc36f627255dd4783f849dca0932e
Sha1:   80e89ef8f3c2c8ee982523757fce214ea7323a69
Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647
                                        
                                            GET /css?family=Michroma&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Mar 2023 07:00:45 GMT
date: Sun, 19 Mar 2023 07:00:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /image/photos/23300000/Demi-Lovato-Wallpapers-demi-lovato-23369025-1280-800.jpg HTTP/1.1 
Host: images4.fanpop.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         172.67.73.155
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Content-Length: 1529857
Connection: keep-alive
Last-Modified: Sat, 02 Jul 2011 14:02:08 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=McT8cmPghI7Kc0NWLyf7FkRrAkRVjpoLVxf6ZRjvU6RusbaHLcIjs3gMH5GxrmvVM4saZriTE%2Bj2nXgXNqSmIOmD1iSWRns5Ih62VqzMCSDtKvVBQiZjYCmI%2FVtsPTNAV1GI7A%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa3d70e0ee8b4ed-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 1280 x 800, 8-bit/color RGBA, non-interlaced\012- data
Size:   195119
Md5:    1afddc7d62d68e192204b11e5f5e2a94
Sha1:   9d7504ab1fc47d7d862d9af0b0f3c9674e1dad61
Sha256: 92ea105e4b728d5a878257b8370ad93b094a355363f1757720900870c3aa7d37
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.33.119.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6868
Expires: Sun, 19 Mar 2023 08:55:13 GMT
Date: Sun, 19 Mar 2023 07:00:45 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe42970c2-8007-4b4c-9f15-01cf4de37822.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6219
x-amzn-requestid: 61b80920-2ba3-4688-80ee-848d68031908
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BwlmnG0KoAMFd0A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64101c90-17c159767df548c4672b7365;Sampled=0
x-amzn-remapped-date: Tue, 14 Mar 2023 07:04:48 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: ACswRkub0RlODaxJHJGsGkACkMQKk85qY3VxYPscNccAMYdpkQ9evA==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 9adef5b1c5fc9ca80d6f4f8d19e103a2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 07:50:48 GMT
age: 83397
etag: "75dd9bdbaf7f19102036d27e69a011f4c37942a9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6219
Md5:    7e58e6553fe8e5d936a911080cec36dc
Sha1:   75dd9bdbaf7f19102036d27e69a011f4c37942a9
Sha256: 0c565b97125e28b8183baab26baf7c703e70f82fad13117c5780259e6d91a89d
                                        
                                            GET / HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Upgrade-Insecure-Requests: 1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1; expires=Sun, 19-Mar-2023 07:15:45 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_uC1BRljOohAx9/f7OjS1/oP/BkqLEWyowaaWLOT5SQruXMFTuOr71iHRpyuNAmIFPx4svvdN50VyrZRAtdOOvg==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (927), with no line terminators
Size:   707
Md5:    c642239067df94c75f4db1a4a1107005
Sha1:   144c0e4600c0f785022ea9fc249b36bc5bf7dbb0
Sha256: 4fc5d51a1f7d70b4d0b9321475d3df3fda4be68990a705ad0626f0c28ce13c09

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0791ca2a-218e-42a3-b584-3b1fbef1e0b1.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 6530
x-amzn-requestid: feaef7fd-1486-4717-b373-06546368aa4a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wZCGnJoAMFWqQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162dd3-71249f9a6287e81730459c65;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:03 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: 1O--raj5aqTkJoEx1CJ-Y1bLJUif2c7MD1-io-NwCwP6uFwxWHvQBA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 31dfa94142c6eaf975b0e5454c00340a.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:41:28 GMT
age: 33557
etag: "dd2634cc71555b254ffcb21621b1b4426bae619a"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   6530
Md5:    088ecc88f297af7324cf5c27f019daea
Sha1:   dd2634cc71555b254ffcb21621b1b4426bae619a
Sha256: f0f7467e6d6a3d89157fbea1e554ba0cb04ec97411012c048ce7374a2cd980d7
                                        
                                            GET /image/photos/23300000/Demi-Lovato-Wallpapers-demi-lovato-23369096-1280-800.png HTTP/1.1 
Host: images4.fanpop.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/

search
                                         172.67.73.155
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Sun, 19 Mar 2023 07:00:45 GMT
Content-Length: 1754813
Connection: keep-alive
Last-Modified: Sat, 02 Jul 2011 14:04:38 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z0XHivc4LmNZF2gQd%2FuL5kXsJ7wb%2Fg0QhoJUkZbbwTjXkPHwHQeO8bmzAEZBHYj2nGZJb6twrdeQAA8SJiFH7L%2FvBU%2B%2FR8rcmFAgDIoqXmyThhoLrQm8k8QZLG24qEwxU5%2Bxeg%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7aa3d70deecfb4f3-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  PNG image data, 1280 x 800, 8-bit/color RGB, non-interlaced\012- data
Size:   267979
Md5:    991aa6d0964eae7581bf703ab13bf4b9
Sha1:   64ffea4311ad00de6c7c950bfdfd3ec1bd7d442e
Sha256: 1533e2b878706affe7566bf5d59b35e10f743334efb903152a75ae501fc05f5c
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bka10YWXvoKBRkwgvJNMzm1SSv_J1USzdugO9lPduHxe2uYFYkXh4w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Sun, 19 Mar 2023 04:25:44 GMT
age: 9301
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10338
Md5:    78453ba98b72eff3879ef163b59c86ed
Sha1:   80519bb3726ee1f9f211344cd433cefaed3a7f2e
Sha256: 61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa36f2b7f-235a-43c5-9302-84b1cc7fb382.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7541
x-amzn-requestid: 00d990c9-d6de-4aea-8022-2d0df93ca184
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_wqWGezIAMF9kA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e41-5a9c056956af56fd1b81973e;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:33:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Miss from cloudfront
x-amz-cf-id: 3fszpXCJahkKI-ZoJ9CPbuPKGtcZthlk63bvo1887xrQxJjtR7fVdw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 8cb7de37a1655236518810d0aabb8656.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 21:45:47 GMT
etag: "80d3672c8a1db24dedba20a8b04edbc67cff14f2"
age: 33298
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7541
Md5:    c54a5cee763815a2d2d335a0dc51bab6
Sha1:   80d3672c8a1db24dedba20a8b04edbc67cff14f2
Sha256: ce00f0d0fee5cbf89b31106b2d696d04ba12d94f4edbd512a2dc1100ab0ef5d3
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ca6f680-5e4b-497f-aef4-6cca71cb98d5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 11784
x-amzn-requestid: 29c7373c-4eb0-4374-8c4c-205285e23667
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B_whwHM7oAMF_kw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64162e0a-0c30752b04757beb7ea417a7;Sampled=0
x-amzn-remapped-date: Sat, 18 Mar 2023 21:32:58 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: pPIURVGevjYlykVadfXACVKOnHw9BNb9udBL65Kl-z7I9AUWFDoOeQ==
via: 1.1 23206a1c229d8877bdd053c4b05f9d12.cloudfront.net (CloudFront), 1.1 446e26a256db1310ae719d818e420898.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 22:01:44 GMT
age: 32341
etag: "59d56060ea97e27de572e48eb907882f5767f427"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   11784
Md5:    49b71c6b1d8a81d5c9e5281eec609c25
Sha1:   59d56060ea97e27de572e48eb907882f5767f427
Sha256: d8d1aa817b12b61d85115c0020fafd2c2e02a0277417e96fb995329ea3c7f01a
                                        
                                            GET /js/parking.2.103.3.js HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:46 GMT
Last-Modified: Wed, 08 Mar 2023 15:54:52 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   22192
Md5:    ad6bf0359f892d1b7f90fd74145ba324
Sha1:   b3d8dc78be92e692e6885735c69f1db59fb5614e
Sha256: 6c0fa7c727891e974d4a7c8459e7c538745bc4fb600d1023a1bec8a217102249

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            POST /_fd HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.keywebtracker.com/
Content-Type: application/json
Origin: http://ww1.keywebtracker.com
Connection: keep-alive
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1
Content-Length: 0

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 19 Mar 2023 07:00:46 GMT
X-Version: 2.103.3
Set-Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1; expires=Sun, 19-Mar-2023 07:15:46 GMT; Max-Age=900; path=/; httponly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (4005), with no line terminators
Size:   2061
Md5:    12f6e558f17165010432db147e180a56
Sha1:   e0de33eda23d0d74d9a3fa63e6df5c6173bc0abb
Sha256: cb7e4508a12757c59aed3550c1a2a2fdd4345acb288ff3abd49212ddea93ff4f

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /px.gif?ch=1&rn=6.013651633658735 HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:46 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=6.013651633658735 HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:46 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Server: openresty
Date: Sun, 19 Mar 2023 07:00:46 GMT
Content-Length: 0
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
ETag: "61424bb6-0"
x-backend-server: ip-10-201-16-117.ec2.internal
Accept-Ranges: bytes

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ww1.keywebtracker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sun, 19 Mar 2023 07:00:46 GMT
expires: Sun, 19 Mar 2023 07:00:46 GMT
cache-control: private, max-age=3600
etag: "13606143512197494851"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2193)
Size:   54147
Md5:    5660d798f770c16251dd0f52433fb87b
Sha1:   8465429ae67fbdd7acce1d87a29414be94799428
Sha256: 67dc9a61b2687072ef6534aa40b2871995e9ae8fa580b18165c6e487109e875c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%2302198b HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sun, 19 Mar 2023 03:51:10 GMT
expires: Mon, 20 Mar 2023 02:51:10 GMT
cache-control: public, max-age=82800
age: 11376
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    ab1acb76dd408583614a7a6cedf41866
Sha1:   e2d2d7074479023d37474ab62755b658d22d4ab1
Sha256: 8622edbe2503910e3cbeecef073a09e662fd2507436c3aabf885d155afd96565
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.97
HTTP/2 200 OK
content-type: image/svg+xml
                                        
accept-ranges: bytes
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sat, 18 Mar 2023 12:12:33 GMT
expires: Sun, 19 Mar 2023 11:12:33 GMT
cache-control: public, max-age=82800
age: 67693
last-modified: Tue, 09 Feb 2021 14:15:00 GMT
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)
Size:   278
Md5:    bb7fc36f627255dd4783f849dca0932e
Sha1:   80e89ef8f3c2c8ee982523757fce214ea7323a69
Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647
                                        
                                            GET /css?family=Michroma&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.106
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sun, 19 Mar 2023 07:00:46 GMT
date: Sun, 19 Mar 2023 07:00:46 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   17436
Md5:    6e587d3dfd2c385b9b0b88d735e70af0
Sha1:   7a43b430619562f74b4c9f5572e5e9105bc1309c
Sha256: 3735a6783d69df10eb818011668723ccd3fe3139271a4011b4aff2c17e5642ae
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.3
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Sun, 19 Mar 2023 07:00:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /_tr HTTP/1.1 
Host: ww1.keywebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.keywebtracker.com/
Content-Type: application/json
Origin: http://ww1.keywebtracker.com
Content-Length: 1657
Connection: keep-alive
Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1; __gsas=ID=9bc047030d098162:T=1679209246:S=ALNI_MbPojQNXADJli-xXRrXh7HxZmMnlg

search
                                         199.59.243.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sun, 19 Mar 2023 07:00:46 GMT
X-Version: 2.103.3
Set-Cookie: parking_session=7150425b-08af-21e3-f8e0-b4e9966b33f1; expires=Sun, 19-Mar-2023 07:15:46 GMT; Max-Age=900; path=/; httponly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    5cfde9b47de2d84bd26fc473632647c0
Sha1:   fd53c70631b6068328be57daec71bd94bf004d41
Sha256: 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b

Alerts:
  Blocklists:
    - fortinet: Phishing
                                        
                                            GET /2011/02/leighton-meester-wallpaper.jpg HTTP/1.1 
Host: candybarbie.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.0.72.17
HTTP/2 404 Not Found
content-type: text/html;charset=utf-8
                                        
server: nginx
date: Sun, 19 Mar 2023 07:00:44 GMT
vary: Accept-Encoding
x-reason: 0010
X-Firefox-Spdy: h2


--- Additional Info ---
                                        
                                            GET /carimage/Nissan/Nissan-GT-R_2008_PC1.jpg HTTP/1.1 
Host: tomtombak.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.21.73.85
HTTP/2 404 Not Found
content-type: text/html; charset=UTF-8
                                        
date: Sun, 19 Mar 2023 07:00:45 GMT
x-powered-by: PHP/8.1.16
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
link: <https://tomtombak.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache-control: public,max-age=3600
x-litespeed-tag: 9db_HTTP.404,9db_404,9db_URL.84883a2a32ba88cbbca4e20f50c784fb,9db_
x-litespeed-cache: miss
vary: Accept-Encoding
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cixCY6YAN%2B77b0Tw1R4LH6vMwnOn2dhwHW5%2BfGVZqcG9knR4xXMzyaPuQWdOyP3O33RNPyUEgavftP4000eTnKV9E1EffSVgU1CB6ZRa2ADXKzHlxettWUjNXRU4olmQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7aa3d70ddfc91bfe-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---