Overview

URLplymouth-valiant-1970-news.blogspot.nl/search/label/circus%20starring%20britney%20spears
IP 172.217.21.161 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Report completed2022-12-05 21:15:31 UTC
StatusLoading report..
IDS alerts0
Blocklist alert3
urlquery alerts No alerts detected
Tags None

Domain Summary (71)

Fully Qualifying Domain Name Rank First Seen Last Seen IP Comment
www.blogger.com (7) 8975 2012-05-22 07:35:03 UTC 2020-05-05 09:48:25 UTC 216.58.207.233
www.blogcdn.com (1) 337356 2012-05-25 17:45:31 UTC 2020-04-12 23:21:19 UTC 192.229.133.100
click-v4.junmediadirect1.com (1) 0 No data No data 198.134.116.17 Unknown ranking
cdn.bannerflow.com (3) 23819 2018-07-05 19:36:13 UTC 2020-05-07 06:37:08 UTC 104.16.174.188
unibetlondonltd.d3.sc.omtrdc.net (1) 444877 2017-01-29 21:05:05 UTC 2022-12-05 10:01:03 UTC 13.36.218.177
anhso.net (2) 0 2012-11-25 12:41:27 UTC 2022-10-11 11:39:52 UTC 3.33.152.147 Unknown ranking
scifimafia.com (1) 0 2017-02-28 10:53:17 UTC 2022-12-05 11:26:43 UTC 45.40.150.47 Unknown ranking
img05.deviantart.net (1) 0 2018-03-20 13:09:24 UTC 2022-12-04 01:14:52 UTC 44.231.211.9 Domain (deviantart.net) ranked at: 70127
www.unibet.nu (2) 0 2022-11-04 11:13:23 UTC 2022-12-05 04:32:28 UTC 85.184.96.0 Unknown ranking
tracking.crazyegg.com (1) 3633 2020-03-10 07:15:05 UTC 2022-12-05 04:23:51 UTC 52.51.158.68
ohselena.com (1) 0 2013-05-23 13:06:27 UTC 2013-05-23 13:06:27 UTC 18.119.154.66 Unknown ranking
firefox.settings.services.mozilla.com (2) 867 2020-06-04 20:08:41 UTC 2022-12-05 04:09:09 UTC 34.102.187.140
wallpapers76.com (3) 0 2012-10-29 19:49:10 UTC 2022-11-25 04:10:38 UTC 173.249.58.209 Unknown ranking
fc05.deviantart.net (1) 592229 2018-10-25 16:36:52 UTC 2022-12-05 12:49:28 UTC 100.20.29.21
img-getpocket.cdn.mozilla.net (5) 1631 2018-06-21 23:36:00 UTC 2020-02-19 04:43:25 UTC 34.120.237.76
farm4.static.flickr.com (2) 114090 2019-05-13 15:43:20 UTC 2022-12-05 07:13:09 UTC 143.204.48.75
push.services.mozilla.com (1) 2140 2014-10-24 08:27:06 UTC 2020-05-03 10:09:39 UTC 35.161.230.192
ocsp.digicert.com (9) 86 2012-05-21 07:02:23 UTC 2020-05-02 20:58:10 UTC 93.184.220.29
ocsp.pki.goog (10) 175 2018-07-01 06:43:07 UTC 2020-05-02 20:58:16 UTC 142.250.74.131
apis.google.com (5) 105 2013-05-30 23:17:44 UTC 2020-05-14 13:59:47 UTC 172.217.21.174
celebrityodor.com (1) 0 2012-11-06 14:07:15 UTC 2022-08-10 07:26:10 UTC 3.13.31.214 Unknown ranking
3.bp.blogspot.com (1) 11048 2013-07-04 04:18:40 UTC 2020-05-14 03:02:58 UTC 216.58.207.225
ocsp.sca1b.amazontrust.com (1) 1015 2017-03-03 15:20:51 UTC 2019-03-27 04:05:54 UTC 143.204.42.158
starducine.com (1) 0 2012-10-26 02:22:33 UTC 2022-11-17 20:02:46 UTC 151.80.27.178 Unknown ranking
www.starducine.com (2) 0 2012-10-26 02:22:33 UTC 2022-11-17 20:02:46 UTC 151.80.27.178 Unknown ranking
www.film.com (2) 0 2012-09-20 18:18:17 UTC 2022-12-03 19:56:45 UTC 3.33.139.32 Unknown ranking
lostwebtracker.com (2) 0 2016-01-13 00:31:15 UTC 2022-12-05 16:55:52 UTC 81.17.29.148 Unknown ranking
adserving.unibet.com (1) 98000 2015-05-26 06:56:53 UTC 2020-04-28 07:38:51 UTC 23.36.79.11
use.fontawesome.com (1) 942 2018-09-18 10:26:26 UTC 2020-03-18 00:09:30 UTC 172.64.133.15
plymouth-valiant-1970-news.blogspot.com (3) 0 2013-05-06 21:45:45 UTC 2015-09-14 09:25:44 UTC 172.217.21.161 Unknown ranking
www.celebrityodor.com (1) 0 2012-11-01 04:29:41 UTC 2015-09-17 10:01:30 UTC 54.146.248.82 Unknown ranking
d39f23jfph0ylk.cloudfront.net (1) 0 2022-02-16 11:13:22 UTC 2022-12-05 09:41:57 UTC 143.204.42.53 Unknown ranking
welcome.unibet.com (18) 242429 2018-08-23 11:45:31 UTC 2020-05-05 06:12:28 UTC 104.18.24.188
secure.adnxs.com (1) 396 2012-05-22 16:37:37 UTC 2020-03-11 07:38:04 UTC 185.89.210.20
content-signature-2.cdn.mozilla.net (1) 1152 No data No data 34.160.144.191
contile.services.mozilla.com (1) 1114 2021-05-27 18:32:35 UTC 2022-12-05 04:09:48 UTC 34.117.237.239
www.newsmediaimages.com (2) 0 2012-10-26 01:20:50 UTC 2022-10-30 10:55:44 UTC 192.0.78.24 Unknown ranking
onlyhdwallpapers.com (2) 0 2015-04-20 10:44:43 UTC 2022-11-19 21:56:09 UTC 88.119.196.87 Unknown ranking
images2.fanpop.com (1) 196375 2012-05-29 20:18:16 UTC 2022-12-04 14:25:40 UTC 104.26.11.178
i.ytimg.com (1) 109 2019-09-28 06:57:57 UTC 2022-12-05 11:37:38 UTC 142.250.74.118
highheeledbanshee.files.wordpress.com (2) 0 2015-05-14 10:02:10 UTC 2017-08-10 08:16:11 UTC 192.0.72.16 Domain (wordpress.com) ranked at: 1450
www.gstatic.com (1) 0 2016-07-26 09:37:06 UTC 2022-12-05 08:05:46 UTC 216.58.211.3 Domain (gstatic.com) ranked at: 540
fonts.gstatic.com (1) 0 2014-09-09 00:40:21 UTC 2022-12-05 08:18:24 UTC 142.250.74.35 Domain (gstatic.com) ranked at: 540
plymouth-valiant-1970-news.blogspot.nl (1) 0 No data No data 172.217.21.161 Unknown ranking
resources.blogblog.com (1) 13274 2018-07-01 19:33:30 UTC 2020-04-09 16:15:03 UTC 216.58.207.233
pagestates-tracking.crazyegg.com (1) 3647 2020-10-26 19:42:04 UTC 2022-12-05 04:23:51 UTC 54.230.111.22
www.scoopcelebrity.com (1) 0 2012-11-12 10:32:12 UTC 2019-06-06 03:15:49 UTC 199.115.116.43 Domain (scoopcelebrity.com) ranked at: 364906
www.krpmag.com (1) 0 2018-01-15 11:41:20 UTC 2020-01-31 08:14:30 UTC 103.224.212.220 Unknown ranking
a1s.unibet.com (1) 297625 2018-08-24 02:07:57 UTC 2020-04-28 05:20:01 UTC 85.184.96.5
pagead2.googlesyndication.com (1) 101 2021-02-20 15:52:05 UTC 2022-12-05 14:13:41 UTC 142.250.74.66
c580019.r19.cf2.rackcdn.com (1) 0 2012-10-12 13:46:14 UTC 2015-09-26 04:27:24 UTC 2.22.61.75 Domain (rackcdn.com) ranked at: 9343
accounts.google.com (1) 81 2016-03-20 12:44:49 UTC 2022-12-05 10:33:55 UTC 142.250.74.109
www.rex-fox.com (1) 0 2012-09-03 14:18:58 UTC 2019-10-29 14:36:19 UTC 206.189.214.97 Unknown ranking
www.comicmonsters.com (1) 0 2012-12-03 00:07:26 UTC 2020-02-17 12:47:26 UTC 72.34.34.3 Unknown ranking
www.realworldimage.com (1) 0 2012-12-14 10:08:01 UTC 2015-10-12 02:54:37 UTC 35.209.88.195 Unknown ranking
www.fansshare.com (2) 268994 2012-08-16 03:06:56 UTC 2022-12-04 22:26:06 UTC 172.67.187.158
journeypod.files.wordpress.com (2) 0 2013-12-30 09:18:54 UTC 2018-12-07 11:33:13 UTC 192.0.72.31 Domain (wordpress.com) ranked at: 1450
www.stars-portraits.com (1) 0 2012-10-10 18:08:43 UTC 2022-12-04 13:51:50 UTC 91.121.118.63 Unknown ranking
www.bikemastersomaha.com (1) 0 2015-07-13 19:32:45 UTC 2017-07-29 08:08:00 UTC 45.33.30.197 Unknown ranking
batgirlbat-trap.com (1) 0 2012-10-12 13:50:19 UTC 2022-10-23 04:34:26 UTC 172.67.185.38 Unknown ranking
im02.wallpapers76.com (1) 0 2012-12-11 04:02:47 UTC 2017-11-22 13:10:23 UTC 172.67.130.111 Unknown ranking
blog.monty.de (1) 0 2013-08-02 12:35:25 UTC 2022-10-17 10:36:20 UTC 92.205.50.101 Unknown ranking
chickswelike.com (1) 0 2012-12-01 22:43:21 UTC 2021-01-28 15:26:14 UTC 192.254.183.103 Unknown ranking
markmonitor.com (1) 53069 2012-07-23 14:55:00 UTC 2022-12-03 19:57:01 UTC 23.185.0.1
assets-tracking.crazyegg.com (1) 3651 2021-10-27 14:05:49 UTC 2022-12-05 04:23:51 UTC 54.230.111.63
r3.o.lencr.org (10) 344 No data No data 23.36.76.226
i109.photobucket.com (2) 0 2012-08-07 17:50:06 UTC 2022-10-21 11:33:49 UTC 143.204.55.106 Domain (photobucket.com) ranked at: 14012
i853.photobucket.com (1) 0 2012-10-23 21:16:22 UTC 2022-04-07 12:26:55 UTC 143.204.55.106 Domain (photobucket.com) ranked at: 14012
www.manchestereveningnews.co.uk (1) 69643 2019-07-18 11:27:39 UTC 2022-12-05 08:57:39 UTC 143.204.55.45
www.citylife.co.uk (1) 0 2012-07-29 19:50:17 UTC 2020-04-13 10:11:45 UTC 52.49.41.25 Unknown ranking
script.crazyegg.com (3) 1992 2015-01-07 19:40:26 UTC 2020-02-29 22:05:25 UTC 104.19.147.8

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-05 2 plymouth-valiant-1970-news.blogspot.nl/search/label/circus%20starring%20bri (...) Malware
2022-12-05 2 plymouth-valiant-1970-news.blogspot.com/search/label/circus%20starring%20br (...) Malware
2022-12-05 2 plymouth-valiant-1970-news.blogspot.com/js/cookienotice.js Malware

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 172.217.21.161
Date UQ / IDS / BL URL IP
2023-02-08 10:44:05 +0000 0 - 0 - 3 robloxpromocodesinbeeswarm.blogspot.fi/ 172.217.21.161
2023-02-08 09:30:35 +0000 0 - 2 - 3 sergdfx.blogspot.co.id/ 172.217.21.161
2023-02-08 09:01:39 +0000 0 - 0 - 16 robloxcutecharacters.blogspot.sn/ 172.217.21.161
2023-02-08 08:59:56 +0000 0 - 0 - 3 robloxfreerobuxpromocodes2020.blogspot.com.eg/ 172.217.21.161
2023-02-08 08:46:16 +0000 0 - 0 - 2 2019generatorforrobuxonahp.blogspot.co.id/ 172.217.21.161


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-02-08 10:52:34 +0000 0 - 2 - 0 australia-southeast1-pelagic-cat-364619.cloud (...) 216.239.36.54
2023-02-08 10:44:05 +0000 0 - 0 - 3 robloxpromocodesinbeeswarm.blogspot.fi/ 172.217.21.161
2023-02-08 10:21:31 +0000 0 - 0 - 1 sexyjapaneseidol.blogspot.com.uy/ 216.58.207.193
2023-02-08 10:03:18 +0000 0 - 0 - 1 realisejolly.cn/ 34.79.11.221
2023-02-08 10:03:01 +0000 0 - 0 - 3 35.227.234.222/2/PU_BR_PA_SB_MB_2_BETANO 35.227.234.222


Last 1 reports on domain: plymouth-valiant-1970-news.blogspot.nl
Date UQ / IDS / BL URL IP
2022-12-05 21:15:31 +0000 0 - 0 - 3 plymouth-valiant-1970-news.blogspot.nl/search (...) 172.217.21.161


No other reports with similar screenshot

JavaScript

Executed Scripts (46)

Executed Evals (9)
#1 JavaScript::Eval (size: 88) - SHA256: 5e05e2cf30322e8f71d65a22aa5f4a095923b67286a61d83b7787e3468f42f62
(function() {
    return "LP:" + BF_prop.LandingPageName.toString().replace(/:/ig, "").trim()
})();
#2 JavaScript::Eval (size: 55) - SHA256: 14986cbd70f8b8a1770adf9800c113847daf392c2999dfff9dc71d2be98f3282
(function() {
    return visitor.getAnalyticsVisitorID()
})();
#3 JavaScript::Eval (size: 132) - SHA256: 0a23e511994a2c03a725773de07810ff171878b9c0177f40a663038e4e251168
(function() {
    if (window.innerWidth) return window.innerWidth;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetWidth
})();
#4 JavaScript::Eval (size: 135) - SHA256: fc7b851f30df68c5cc6d1fb3f06c300b2b1d7271f76cc187224050270141f0ed
(function() {
    if (window.innerHeight) return window.innerHeight;
    d = screen.width + "x" + screen.height;
    return d.documentElement.offsetHeight
})();
#5 JavaScript::Eval (size: 60) - SHA256: 9d51544cc513110b130345a977b1e9e630b5a7aa01518f7f7898758b79a9699f
(function() {
    return visitor.getMarketingCloudVisitorID()
})();
#6 JavaScript::Eval (size: 54) - SHA256: fc490a09c28110ae2a7c965801ebeb5c572587f55c3524889f547dbcc34c1d81
(function() {
    return screen.width + "x" + screen.height
})();
#7 JavaScript::Eval (size: 62) - SHA256: adf0ca592504ef680d5ea02d5161b15be0572fd3e5b41d152b74f0c76aea6c42
(function() {
    return window.functions.getPageNameOldEvar1()
})();
#8 JavaScript::Eval (size: 61) - SHA256: 9259355921509ced00b4d7d3e76c151037a06c88a646cd7d47d5d9c96984697c
(function() {
    return window.functions.timeParting("n", "0")
})();
#9 JavaScript::Eval (size: 71) - SHA256: dcdd7e7e286c45c94638f28053384616d6ca9a1b396b0109cb51f1298ba342bb
(function() {
    return Math.round((new Date).getTime() / 1E3).toString()
})();

Executed Writes (4)
#1 JavaScript::Write (size: 225) - SHA256: faa8da9d5c4c088ac367c9a33271b7e7c6d4dc8f4c6762c6c4e5cf7015f2a15e
< iframe src = "http://lostwebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//plymouth-valiant-1970-news.blogspot.com/search/label/circus%2520starring%2520britney%2520spears&ref=&l=celebrity"
height = "1"
width = "1" > < /iframe>
#2 JavaScript::Write (size: 224) - SHA256: 846c793bd07b01a51d86a7665f97037351cf933f54220978719664b4dee1bae3
< iframe src = "http://green-tracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//plymouth-valiant-1970-news.blogspot.com/search/label/circus%2520starring%2520britney%2520spears&ref=&l=celebrity"
height = "1"
width = "1" > < /iframe>
#3 JavaScript::Write (size: 24) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05
< xmp style = display: none >
#4 JavaScript::Write (size: 50) - SHA256: a2b051fa7d206df6e4eeee27678781de0752c1ac7adcfd359c1a2fc7ff507449
< script src = "/widget/betslip/betslip.js" > < /script>


HTTP Transactions (149)


Request Response
                                        
                                            GET /search/label/circus%20starring%20britney%20spears HTTP/1.1 
Host: plymouth-valiant-1970-news.blogspot.nl
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.217.21.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://plymouth-valiant-1970-news.blogspot.com/search/label/circus%20starring%20britney%20spears
Content-Encoding: gzip
Date: Mon, 05 Dec 2022 21:15:16 GMT
Expires: Mon, 05 Dec 2022 21:15:16 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 228
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   228
Md5:    975e5e49d8536f7aca25c31f5deb33a2
Sha1:   1b4584e385e9cbf663149d94ef7db9734059bb2a
Sha256: 824f5daac2d97d77b3d8326c5985ed7fb329476f795ab7a9130518c2969ed2d5

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7567
Expires: Mon, 05 Dec 2022 23:21:24 GMT
Date: Mon, 05 Dec 2022 21:15:17 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4400
Cache-Control: max-age=138562
Date: Mon, 05 Dec 2022 21:15:17 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:44:39 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3922
Expires: Mon, 05 Dec 2022 22:20:39 GMT
Date: Mon, 05 Dec 2022 21:15:17 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Mon, 05 Dec 2022 20:20:19 GMT
cache-control: public,max-age=3600
age: 3298
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                        
x-amz-id-2: Z5M1kgDD6a/25CD9+AmgWmgJ64mvxskhqoMtv4JyVo8zvbKRsUMPh6zN0iCFOs+/zSJ5eyLCmqY=
x-amz-request-id: K0WADDZ177E91BDW
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Mon, 05 Dec 2022 20:46:49 GMT
age: 1708
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                        
server: nginx
date: Mon, 05 Dec 2022 21:15:17 GMT
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /search/label/circus%20starring%20britney%20spears HTTP/1.1 
Host: plymouth-valiant-1970-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Mon, 05 Dec 2022 21:15:17 GMT
Date: Mon, 05 Dec 2022 21:15:17 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 07 Jun 2022 09:08:08 GMT
ETag: W/"24684cb7d3aa6e3ee956994797b7240932b7a355b250a0663797606d5fc851ee"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 18288
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (13269)
Size:   18288
Md5:    63f2a92e586870781d702b8e01ce2b35
Sha1:   0295f35ecfdb1e810ca285614120684ff1cbc9f5
Sha256: 42d4f12fc8ab5e49726c48c9f320d75b4a2c76f33848d0f9ef50d42cb9c081e4

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: plymouth-valiant-1970-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/search/label/circus%20starring%20britney%20spears

search
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Mon, 05 Dec 2022 21:15:17 GMT
Expires: Mon, 12 Dec 2022 21:15:17 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 05 Dec 2022 19:52:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blocklists:
    - fortinet: Malware
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.102.187.140
HTTP/2 200 OK
content-type: application/json
                                        
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Mon, 05 Dec 2022 21:11:19 GMT
cache-control: public,max-age=3600
age: 238
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 05:43:29 GMT
expires: Wed, 29 Nov 2023 05:43:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
age: 574309
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56726
Md5:    1217c8e34acb09c7cea97bae4d386ea1
Sha1:   55ee17703d0a7710943e93913bacb49220d98b4b
Sha256: c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
                                        
                                            GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:01:43 GMT
expires: Wed, 29 Nov 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
age: 544415
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30596)
Size:   6620
Md5:    6f46e6f68353c7911fe34f31faa1518f
Sha1:   ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
                                        
                                            GET /wp-content/uploads/2011/05/pippa-midddleton-ass-24546-newsmediaimages-1.jpg HTTP/1.1 
Host: www.newsmediaimages.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         192.0.78.24
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 162
Connection: keep-alive
Location: https://www.newsmediaimages.com/wp-content/uploads/2011/05/pippa-midddleton-ass-24546-newsmediaimages-1.jpg
X-ac: 3.arn _dca BYPASS


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/gif
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:19:01 GMT
expires: Tue, 06 Dec 2022 14:19:01 GMT
cache-control: public, max-age=604800
last-modified: Mon, 28 Nov 2022 19:53:31 GMT
age: 543377
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /img/11313/14671_490250_kate_winslet_in_the_reader.jpg HTTP/1.1 
Host: www.citylife.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         52.49.41.25
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Location: https://www.manchestereveningnews.co.uk/whats-on/
Server: Apache/2.4.18 (Ubuntu)
Content-Length: 341
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   341
Md5:    87c244e8fdf91bd976ec051ff9b3e1b4
Sha1:   7cb0401e580a91a6ef4b7abd68c88821be1ef07f
Sha256: 85520fbcffe2a5a0b18462ab007cd817d66ce5d2e5258861a4e2e984d69e5e2f
                                        
                                            GET /albums/n44/Morzelpronka/Farbenmix/IMG_4204.jpg HTTP/1.1 
Host: i109.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         143.204.55.106
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 167
Connection: keep-alive
Location: https://i109.photobucket.com/albums/n44/Morzelpronka/Farbenmix/IMG_4204.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: rjwz2JE5kgspdaQhVEuDOxMQMdAsG3kkCjezRa5c1-TqazKKGyyCiQ==
Vary: Origin


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /celebrity/photos/860_paul-walker-jordana-brewster-fast-furious-fast-and-furious-1825574957.jpg HTTP/1.1 
Host: www.fansshare.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         172.67.187.158
HTTP/1.1 301 Moved Permanently
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Mon, 05 Dec 2022 22:15:18 GMT
Location: https://www.fansshare.com/celebrity/photos/860_paul-walker-jordana-brewster-fast-furious-fast-and-furious-1825574957.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=erIVciJIJlqetkBOj2C3Y3wUZrKV%2BeeYVrLz1UnG6aH0UnRw2pNPOnkNlF7in8KmUAOqHQcYdu24RzIT4YtXrmWCtLLU5OGOM0chZxhbGs9j1WrFbK4xh8Mra%2Fim8fXPCJX6mw%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774fcbdf8d731c06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400

                                        
                                            GET /photo/231/miley-cyrus-022.jpg HTTP/1.1 
Host: im02.wallpapers76.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         172.67.130.111
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Location: http://wallpapers76.com/photo/231/miley-cyrus-022.jpg
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=d%2FEi3tUvl73lvTa4l2oczgtyOT%2FEm6f9k1FPQw20eUEFh35susc9I3tMwWo7KypelEIVBpiGqj0ZG63IL33qcVC1qcT6%2BwsP07spNXb%2FBHQJAw9gaLIbuesPXf%2Bw1%2BTPzlBaQcDnjuw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774fcbdf5965b506-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   405
Md5:    60939ad3405ac1ab953390a01f85e59d
Sha1:   74bf027d4fb5d2fe34a1487a075b1d18b75457a6
Sha256: 3abebe0fe3850219b66b89b6d213c73e671ec53db4a05588ec0532e239b3d82f
                                        
                                            GET /data/28/troiam91//k543153.jpg HTTP/1.1 
Host: anhso.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         3.33.152.147
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 64
Connection: keep-alive
Location: /data/28/troiam91/k543153.jpg


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   64
Md5:    04f1650237bb41ee9e59b7e3e8095086
Sha1:   845dbb9aa5166d8e8bb23ff8502c31ba9ea5e442
Sha256: 44af31fad74de76e594a38ddc8233be6ef146067ffc6100f25468ab481210804
                                        
                                            GET /2007/10/la-bellasera-photos-031.jpg HTTP/1.1 
Host: journeypod.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         192.0.72.31
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 162
Connection: keep-alive
Location: https://journeypod.files.wordpress.com/2007/10/la-bellasera-photos-031.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /49621-thickbox/horst-buchholz-jean-marais-eleanor-powell-gregory-peck.jpg HTTP/1.1 
Host: www.starducine.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         151.80.27.178
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://www.starducine.com/49621-thickbox/horst-buchholz-jean-marais-eleanor-powell-gregory-peck.jpg
Server: Microsoft-IIS/8.5
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Mon, 05 Dec 2022 21:15:20 GMT
Content-Length: 235


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Size:   235
Md5:    91b615b6bfdd74c04d46b0b422e0d7d7
Sha1:   75dd461409d7f7101bad65f395ecf15e6cbc5cee
Sha256: 1b7acd9742df98b73ca558c660fa5bbebae8f3ea6a958c1f4ea2a0ff06671781
                                        
                                            GET /vi/dIAN4YIbBWY/0.jpg HTTP/1.1 
Host: i.ytimg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         142.250.74.118
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Vary: Origin
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube"
Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]}
Timing-Allow-Origin: *
Content-Length: 15494
Date: Mon, 05 Dec 2022 21:15:18 GMT
Expires: Mon, 05 Dec 2022 23:15:18 GMT
Cache-Control: public, max-age=7200
ETag: "0"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3\012- data
Size:   15494
Md5:    5a1163f018c99df7452c652d8172750d
Sha1:   794d1817ded6c812dbb0b0c4e3f4c0dab8b782c2
Sha256: 4f8d806bf142b694c6932cb12bbf6f612900b10ec70bd9a083aaa9238176c71f
                                        
                                            GET /wallpaper/legs_adriana_lima_models_victorias_secret_gisele_bundchen_victoria_angels_desktop_1680x1050_wallpaper-2744.jpg HTTP/1.1 
Host: onlyhdwallpapers.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         88.119.196.87
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 162
Connection: keep-alive
Location: https://onlyhdwallpapers.com/wallpaper/legs_adriana_lima_models_victorias_secret_gisele_bundchen_victoria_angels_desktop_1680x1050_wallpaper-2744.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 19:47:40 GMT
expires: Wed, 29 Nov 2023 19:47:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
age: 523658
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   57794
Md5:    813b15c3004464f6bd39fd0773b04757
Sha1:   bd2218fe1e647f61132aad70d29cd91fd0416f26
Sha256: 446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: image/png
                                        
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 17:28:12 GMT
expires: Tue, 06 Dec 2022 17:28:12 GMT
cache-control: public, max-age=604800
last-modified: Tue, 29 Nov 2022 14:52:29 GMT
age: 532026
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /wp-content/uploads/2010/09/26479129-26479137-large.jpg HTTP/1.1 
Host: www.film.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         3.33.139.32
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 67
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Content-Security-Policy: script-src 'self'
Location: https://markmonitor.com/film-com/
Vary: Accept


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   67
Md5:    1005962b04c721a4421fe9220de5f4e6
Sha1:   0a3347692b686a62d9fb571cacbbce626e5998be
Sha256: 7a3476c7b768ad55eeedad23aaf33557569b9a2b88ec94f3dc43a84c390370ad
                                        
                                            GET /2011/03/abbey-lee-kershaw7.jpg HTTP/1.1 
Host: highheeledbanshee.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         192.0.72.16
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 162
Connection: keep-alive
Location: https://highheeledbanshee.files.wordpress.com/2011/03/abbey-lee-kershaw7.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /img/portraits/stars/j/jean-marais/jean-marais-by-Bodessins.jpg HTTP/1.1 
Host: www.stars-portraits.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         91.121.118.63
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Dec 2022 20:57:29 GMT
Server: Apache
X-Powered-By: PHP/5.3.3
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3855
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (732), with CRLF, LF line terminators
Size:   3855
Md5:    ca74726cbe8e6578254b01a97bc0a564
Sha1:   47b86d3b70460ce99688811495d618e69f2677cc
Sha256: 994fffedabac923d100df2c6bd3d939680b804307cbd92cb153759c2dd3b6db7
                                        
                                            GET /hostedimg/c45cb7c8a1aba4ff_large HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         216.58.211.3
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-images
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-images"
Report-To: {"group":"hosted-images","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-images"}]}
Content-Length: 127393
Date: Mon, 05 Dec 2022 21:15:18 GMT
Expires: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=0
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1043x1280, components 3\012- data
Size:   127393
Md5:    bbf1f5d96d5724e9ff135b4fa8566ad5
Sha1:   413573771b0601194bbc74b47e3b0acd6a559b96
Sha256: 8237b7f9c3e2c368a00d8dda790512448ac422bd60aa9aeb09b308a1c8a51db1
                                        
                                            GET /wp-content/uploads/2007/05/Foto(1430).jpg HTTP/1.1 
Host: blog.monty.de
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         92.205.50.101
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 285568
Connection: keep-alive
Content-Security-Policy: upgrade-insecure-requests;
Last-Modified: Tue, 29 May 2007 14:27:00 GMT
ETag: "45b80-4319ca8977500"
X-Cache-Status: MISS
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1152x864, components 3\012- data
Size:   285568
Md5:    dd07150583e73c30c52eb94f2b6f8caa
Sha1:   e5ce54115b88075debe84c65f099b2421cadbe87
Sha256: a9ddb86c946bd4992d39574ab641212fef56bb1c87b087fb5a079ff7515e15bb
                                        
                                            GET /galleries/2008/12/kate_winslet_cleavage_at_the_reader_premiere/kate_winslet_cleavage_at_the_reader_premiere_007.jpg HTTP/1.1 
Host: celebrityodor.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         3.13.31.214
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Location: http://www.celebrityodor.com/galleries/2008/12/kate_winslet_cleavage_at_the_reader_premiere/kate_winslet_cleavage_at_the_reader_premiere_007.jpg
Referer: http://plymouth-valiant-1970-news.blogspot.com/
X-Redirector-Version: 2.18.1-ea84328
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 179
Connection: close


--- Additional Info ---
Magic:  HTML document, ASCII text
Size:   179
Md5:    637a672c8e4f4edc86c270be9e21d90c
Sha1:   c19b584a54d82d479fcc7a5f1030297eb402393b
Sha256: f1cbe17a68d168870edbb066d2fe3f6d17115ac36789d3fde6f80a317d8762e2
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         142.250.74.66
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 05 Dec 2022 19:51:21 GMT
Expires: Mon, 19 Dec 2022 19:51:21 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Age: 5037


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /wp-content/uploads/2011/04/Picture-2081.jpg HTTP/1.1 
Host: www.bikemastersomaha.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         45.33.30.197
HTTP/1.1 302 Found
content-type: text/html; charset=utf-8
                                        
server: openresty/1.13.6.1
date: Mon, 05 Dec 2022 21:15:18 GMT
content-length: 0
location: https://d39f23jfph0ylk.cloudfront.net/bikemastersomaha.com.jpg
vary: Accept-Language
content-language: en
connection: close

                                        
                                            GET /wp-content/uploads/2009/06/kate-winslet-merkin.jpg HTTP/1.1 
Host: c580019.r19.cf2.rackcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         2.22.61.75
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Content-Length: 70
X-Trans-Id: txaf489c77be834a53bb0e9-00638e5f66ord1
Cache-Control: public, max-age=30
Expires: Mon, 05 Dec 2022 21:15:48 GMT
Date: Mon, 05 Dec 2022 21:15:18 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document, ASCII text, with no line terminators
Size:   70
Md5:    cb75a4a5436bc5f23fd500aed9ab3ad4
Sha1:   270ba1020384007ebcd50e4985b6a3bbe63f194b
Sha256: cd08cc3cd7dbd890951754b1e187e2fbe4d68d6a77b2618eb00740a8281c9b56
                                        
                                            GET /wp-content/uploads/2010/09/26478959-26478966-large.jpg HTTP/1.1 
Host: www.film.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         3.33.139.32
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain; charset=utf-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 67
Connection: keep-alive
cache-control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: -1
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
X-Frame-Options: DENY
Content-Security-Policy: script-src 'self'
Location: https://markmonitor.com/film-com/
Vary: Accept


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   67
Md5:    1005962b04c721a4421fe9220de5f4e6
Sha1:   0a3347692b686a62d9fb571cacbbce626e5998be
Sha256: 7a3476c7b768ad55eeedad23aaf33557569b9a2b88ec94f3dc43a84c390370ad
                                        
                                            GET /albums/ab96/NYFW-D4/vanessa-1.jpg HTTP/1.1 
Host: i853.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         143.204.55.106
HTTP/1.1 200 OK
Content-Type: image/webp
                                        
Content-Length: 19226
Connection: keep-alive
Date: Mon, 05 Dec 2022 21:15:18 GMT
Access-Control-Allow-Headers: *
Access-Control-Allow-Methods: GET, OPTIONS
Access-Control-Allow-Origin: *
Cache-Control: max-age=31536000, public
Content-Disposition: inline; filename="vanessa-1.webp"
Expires: Tue, 05 Dec 2023 21:15:18 GMT
Server: photobucket
X-Amzn-Trace-Id: Root=1-638e5f66-117bbcaf7395bdfd354a2dd5
X-Request-Id: CpMR66rryJ-EENlHUmtKc
Vary: Accept
X-Cache: Miss from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: CwVfNNlD8_xBBD6pOT0La0UaDfc_Jb76umDNFzfbF6GQJqBx-8gdqw==


--- Additional Info ---
Magic:  RIFF (little-endian) data, Web/P image\012- data
Size:   19226
Md5:    d9bb75a773b4e5caf9fdf7bb4d47d427
Sha1:   5ebf7d8a24c14538af8a95e631716852fcbedaf7
Sha256: f572a708e20d7a3d68a378d385d11e28a0f7b7eec2d83fac3e48cc37f0f136a3
                                        
                                            GET /lifestyle.aol.co.uk/media/2011/06/pippa-splash-carole-middleton-xposure-590mt080611-1307535414.jpg HTTP/1.1 
Host: www.blogcdn.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         192.229.133.100
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Age: 8123509
Cache-Control: max-age=15552000
Date: Mon, 05 Dec 2022 21:15:18 GMT
Etag: "5bdeffa45e6da93dbcf5599a230589c1"
Expires: Sat, 03 Jun 2023 21:15:18 GMT
Last-Modified: Wed, 10 Aug 2016 02:11:02 GMT
Server: ECS (dcb/7F82)
x-amz-id-2: eq3ncjT3Fcsx592tJNTvnGvHqAf0ExoKU5aLgj9RGHXz9oYhJktJ2xrezg3vxXWnTiqwkXgc+CSCvTIMqfz30w==
x-amz-replication-status: COMPLETED
x-amz-request-id: BZJMH3ZVE5DKG59E
x-amz-version-id: P9wekc39IatZ_o6nmk5Sd14WgUtpPnZA
X-Cache: HIT
Content-Length: 92418


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 590x393, components 3\012- data
Size:   92418
Md5:    5bdeffa45e6da93dbcf5599a230589c1
Sha1:   1c40363f4f761db79b5c8a9b604a84e1a1b428c7
Sha256: 451fa4ab5c7ead0c2aedf5be5c81833405d201e0d0916ddac2a363ce0f257af2
                                        
                                            GET /followers.g?blogID=4858908775746490054&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http://plymouth-valiant-1970-news.blogspot.com/&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
location: https://accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D4858908775746490054%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://plymouth-valiant-1970-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D4858908775746490054%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://plymouth-valiant-1970-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
content-encoding: gzip
date: Mon, 05 Dec 2022 21:15:18 GMT
expires: Mon, 05 Dec 2022 21:15:18 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 533
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (1050)
Size:   533
Md5:    2cf8be682598449a2762c863bf82d775
Sha1:   05e573454de2f1c5922db1b58461bad8314a840b
Sha256: f166a36d1a22edea54743e1842dbeb5b2d9e076dc2805801e9777bf324c76764
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /?if=1&scr_w=1280&scr_h=1024&blog=http%3A//plymouth-valiant-1970-news.blogspot.com/search/label/circus%2520starring%2520britney%2520spears&ref=&l=celebrity HTTP/1.1 
Host: lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Upgrade-Insecure-Requests: 1

search
                                         81.17.29.148
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                        
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 643
date: Mon, 05 Dec 2022 21:15:17 GMT
server: nginx
set-cookie: sid=eb8a2c7c-74e1-11ed-9a4a-4d76bfc726df; path=/; domain=.lostwebtracker.com; expires=Sun, 24 Dec 2090 00:29:25 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (643), with no line terminators
Size:   643
Md5:    f32321874fa1cc521bd3327bd49da0eb
Sha1:   9de90127f1ae361b07d56f917a9f0139b0d65d54
Sha256: 3b7eb2b00d24fd7f12cb4e97162ac18c3b1fbf20691b3f5f83414ca073ad258a
                                        
                                            GET /whoisbatgirl/003.jpg HTTP/1.1 
Host: batgirlbat-trap.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         172.67.185.38
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Cache-Control: max-age=14400
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rUqtUf2XF9GsJgqSKGaTnBAe2BfAqJ3rvuEgV84ghcksDfW4CnMXC5ka6b23y0wrmGEPl7QI2fBfW3fzVnzQ1%2BsO%2FszoDuvEFL2gVwBwboXo1hzCKTfvZQFTd%2Ft0JyRy4fB9h404"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 774fcbdf8849b524-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  Unicode text, UTF-8 text, with no line terminators
Size:   70
Md5:    23ebb684c611f125494a23de80c8132e
Sha1:   ceb66a91f13e3150f7a8fa3905c9fd7c1ff146e2
Sha256: 1d9d04d01e7d1e9ce9c49b88c140f2bf238589544d56f6bb153d0b204c971440
                                        
                                            GET /data/28/troiam91/k543153.jpg HTTP/1.1 
Host: anhso.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive

search
                                         3.33.152.147
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 125
Connection: keep-alive
Server: ip-100-74-2-146.eu-west-2.compute.internal
X-Request-Id: c1788f4e-3247-4a81-b1d0-dd131a4f24ea


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Size:   125
Md5:    2995357b538ef792ce59b1b7cca539c4
Sha1:   d33d8ce38719b45d0731f075f71593351023318c
Sha256: aef27e8433e35954afe1798da5bde96145b020160cc2f16b1424425253fb545b
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 29 Nov 2022 07:09:33 GMT
Expires: Tue, 06 Dec 2022 07:09:33 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 29 Nov 2022 05:51:11 GMT
Age: 569145


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /_dWDqsI67ZEI/TGFvboHHUbI/AAAAAAAAIwM/X7vGv2T56Wo/s1600/abbey-lee-kershaw7.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         216.58.207.225
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
ETag: "v2303"
Expires: Tue, 06 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="abbey-lee-kershaw7.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 05 Dec 2022 21:15:18 GMT
Server: fife
Content-Length: 167050
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 150x150, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 800x1062, components 3\012- data
Size:   167050
Md5:    ef715fb4f5dc606ffb407038feecb091
Sha1:   2592c84a2a6e2312689850ac65f978c164d3b215
Sha256: 915f1eca49d1c2719c1dce81a1467fa915a6f589eeea1b74cf1f7ab29c09ad0a
                                        
                                            GET /photo/231/miley-cyrus-022.jpg HTTP/1.1 
Host: wallpapers76.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive

search
                                         173.249.58.209
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Server: Apache
Location: https://wallpapers76.com/photo/231/miley-cyrus-022.jpg
Content-Length: 328
Keep-Alive: timeout=1, max=300
Connection: Keep-Alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   328
Md5:    26c1c97ff021062c278bfd61f9133590
Sha1:   785a8b6f6732680db7f019f55f17e9014576e74f
Sha256: 400c5174ceee334e00ae1edb1bfdae0ad7a067929cba78a7b6dfe5911902a9d7
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "886444F7A50928BDDFEF3376AEC99A6883186F35066A3578D18FE22EAD83025B"
Last-Modified: Sat, 03 Dec 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21588
Expires: Tue, 06 Dec 2022 03:15:06 GMT
Date: Mon, 05 Dec 2022 21:15:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3254
Cache-Control: max-age=112557
Date: Mon, 05 Dec 2022 21:15:18 GMT
Etag: "638d675e-118"
Expires: Wed, 07 Dec 2022 04:31:15 GMT
Last-Modified: Mon, 05 Dec 2022 03:37:02 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /albums/n44/Morzelpronka/Farbenmix/IMG_4204.jpg HTTP/1.1 
Host: i109.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.55.106
HTTP/2 404 Not Found
content-type: image/png
                                        
content-length: 7092
last-modified: Fri, 20 Dec 2019 23:09:15 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
server: AmazonS3
date: Sun, 04 Dec 2022 15:49:23 GMT
etag: "49e3fff8262f861c9be74931c8c33d34"
x-cache: Error from cloudfront
via: 1.1 bb1da7862c4968b28920b91b324095c0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 8bCE2DOwdO-e8xC3kg32g_yzOEVcrQALOhv6rsgJa9HdgxSKYuqv2w==
age: 110305
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 160 x 120, 8-bit/color RGB, non-interlaced\012- data
Size:   7092
Md5:    49e3fff8262f861c9be74931c8c33d34
Sha1:   a25ea738da2c2737c9eec1fdd76c5c21923f021e
Sha256: f472388ee6d7eb09b86275ac4a198d40acf2b2083b342ad40838d57d01bb9c50
                                        
                                            GET /fs70/i/2011/189/d/f/paramore_putte_i_parken_2011_by_mirish-d3ldfsp.jpg HTTP/1.1 
Host: fc05.deviantart.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         100.20.29.21
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 178
Connection: keep-alive
Server: nginx
Location: http://img05.deviantart.net/1837/i/2011/189/d/f/paramore_putte_i_parken_2011_by_mirish-d3ldfsp.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D4858908775746490054%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://plymouth-valiant-1970-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D4858908775746490054%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://plymouth-valiant-1970-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         142.250.74.109
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Dec 2022 21:15:18 GMT
location: https://www.blogger.com/followers.g?blogID=4858908775746490054&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fplymouth-valiant-1970-news.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-xAVYITYro2cyZ1Ccf7VokA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 476
server: GSE
set-cookie: __Host-GAPS=1:5uKc3Vvk9V6CXncUvLGx7enaywWRpw:0FalQ8UIJFFRIkrf;Path=/;Expires=Wed, 04-Dec-2024 21:15:18 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (518)
Size:   476
Md5:    fc29da7ebcb629a79a3e27faac17d9ca
Sha1:   63cab837af4efaf1517e3f12e238ea5c773b00a1
Sha256: 9d9cc2807de249d5024b783f7e361ef55c57c5b47b20ffceaf9722f3ff45cb1f
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 4385
Cache-Control: max-age=133479
Date: Mon, 05 Dec 2022 21:15:18 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 10:19:57 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /images/photos/2800000/The-Monkees-the-monkees-2845950-608-689.jpg HTTP/1.1 
Host: images2.fanpop.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         104.26.11.178
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 48831
Connection: keep-alive
Last-Modified: Mon, 17 Nov 2008 18:13:03 GMT
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: MISS
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=y55HErdgcGZbAFiBre3S3JtTyKV6dtQ%2FDZVoX5lrdqIuZH9z5%2FAquXlSOjX8r9mmL%2FQrX5RwVtDh9X3jhb59tPaeqcUudCTPouXQB81xDsMQpy0aVPcNvgWdb%2F2aWflxW4%2BR7g%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 774fcbdf585ab4f9-OSL
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 608x689, components 3\012- data
Size:   48831
Md5:    783ab2e33578c9633608fbc82bdb544a
Sha1:   b2cc307c9996e52cf36faf3221ba88b243c26a66
Sha256: fac61c4f0ce9634b5bc59e90d9c16e54b436932885b0150a67b15f68b218f650
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "33CFCA623A78EC50596E93A14552E09187B8516F7E9650555BDA905D088C3BC7"
Last-Modified: Sun, 04 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=432
Expires: Mon, 05 Dec 2022 21:22:30 GMT
Date: Mon, 05 Dec 2022 21:15:18 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "8625DCD3D00BEF227474014364373A590092336D13623E369AA0618686EEDD15"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21548
Expires: Tue, 06 Dec 2022 03:14:26 GMT
Date: Mon, 05 Dec 2022 21:15:18 GMT
Connection: keep-alive

                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4858908775746490054&zx=644bd9e8-6930-4132-af8c-2b87b65626a2 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Dec 2022 21:15:18 GMT
last-modified: Mon, 05 Dec 2022 21:15:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            GET /galleries/2008/12/kate_winslet_cleavage_at_the_reader_premiere/kate_winslet_cleavage_at_the_reader_premiere_007.jpg HTTP/1.1 
Host: www.celebrityodor.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive

search
                                         54.146.248.82
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=utf-8
                                        
Content-Length: 563
Cache-Control: no-cache, no-store
Date: 2022-12-05 21:15:19.010973393 +0000 UTC
Server: heroku-router


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   563
Md5:    6971f594a8d84022b2b6199b9e52fdc1
Sha1:   2f5c25f2b53d35078bdb7e28006590adf7e701a2
Sha256: 237711b3823b87a4b4e26963fe5576ebed08ba9efbf9b8cdb5d9762eaf01ff1f
                                        
                                            GET /navbar.g?targetBlogID=4858908775746490054&blogName=Jesse%27s+blog&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://plymouth-valiant-1970-news.blogspot.com/search&blogLocale=fil&v=2&homepageUrl=http://plymouth-valiant-1970-news.blogspot.com/&vt=-2092230467658885307&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         216.58.207.233
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 05 Dec 2022 21:15:18 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2600
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)
Size:   2600
Md5:    d8846f03a313f76c9e28458551218faa
Sha1:   625ffa8887bd295a472bddc2a79a047d0ecc901a
Sha256: 7a178e26853fd9548394c270aa9c1238a75b46d149ffc04a0fe14ebc09ddcca2
                                        
                                            GET /wp-content/uploads/2010/04/starkexpowide-560x279.jpg HTTP/1.1 
Host: scifimafia.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         45.40.150.47
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Accept-Ranges: bytes
Age: 0
Content-Length: 43187
Date: Mon, 05 Dec 2022 21:15:18 GMT
Etag: "a8b3-5022dc5827b80"
Last-Modified: Wed, 03 Sep 2014 18:54:54 GMT
X-Backend: local
X-Cache: uncached
X-Cache-Hit: MISS
X-Cacheable: YES
X-Cacheproxy-Retries: 0/2
X-Content-Type-Options: nosniff
X-Php-Version: 7.4
X-Xss-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 90", progressive, precision 8, 560x279, components 3\012- data
Size:   43187
Md5:    5fefa44d8e4e197e43032e8a69f86ede
Sha1:   e61cc7baa9d96656293e547d9f2d181513b11d8d
Sha256: 692985492da06f1db3befa0fc2e806e72273994011636f23f569a033e240324e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3255
Cache-Control: max-age=112557
Date: Mon, 05 Dec 2022 21:15:19 GMT
Etag: "638d675e-118"
Expires: Wed, 07 Dec 2022 04:31:16 GMT
Last-Modified: Mon, 05 Dec 2022 03:37:02 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 280

                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20994
date: Mon, 05 Dec 2022 21:15:19 GMT
expires: Mon, 05 Dec 2022 21:15:19 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "f1dbb3240cb08426"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1279)
Size:   20994
Md5:    d38f9d16065c09d51a6043b803687d52
Sha1:   4f75ca14fbda9606e27a631d6d2b3f7311576038
Sha256: e4d72a27c1a455df255ced0cf236d72d1f94f7626bcd726678cd604c662dd97d
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 42361
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 03:07:51 GMT
expires: Thu, 30 Nov 2023 03:07:51 GMT
cache-control: public, max-age=31536000
age: 497248
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   42361
Md5:    4b753ec860a79d8a1867035bc62cb4c4
Sha1:   d197581949190fc18661aa21629f441b75328e03
Sha256: cfdfeffe366947bd6dd1d08dfe554da362e532a9b0f1cafbb3efd9b9d3982682
                                        
                                            GET /wallpaper/legs_adriana_lima_models_victorias_secret_gisele_bundchen_victoria_angels_desktop_1680x1050_wallpaper-2744.jpg HTTP/1.1 
Host: onlyhdwallpapers.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         88.119.196.87
HTTP/2 200 OK
content-type: image/jpg
                                        
server: nginx
content-length: 444747
cache-control: public
date: Mon, 05 Dec 2022 21:15:18 GMT
last-modified: Mon, 13 Nov 2017 15:25:38 GMT
vary: Origin
x-proxy-cache: MISS
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1280x1024, components 3\012- data
Size:   444747
Md5:    906c517fc60c0bb7118fd3b1deb80aac
Sha1:   52b7730945fcf963d6161efea1d934f234088cf3
Sha256: 79c3565447e719c21a64e105fdd8cbd2a18a9d5ff8b846286f661c0d8eb1b122
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: fhkTzl9Hz6YzFMBzaCbGnw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

search
                                         35.161.230.192
HTTP/1.1 101 Switching Protocols
                                        
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: mglgHDLaQlfnuZuAC6HfTWdpaZc=

                                        
                                            GET /1837/i/2011/189/d/f/paramore_putte_i_parken_2011_by_mirish-d3ldfsp.jpg HTTP/1.1 
Host: img05.deviantart.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive

search
                                         44.231.211.9
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Dec 2022 21:15:19 GMT
Content-Length: 0
Connection: keep-alive
Server: da-redirector/0.5.2

                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.217.21.174
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                        
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 42361
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 11:40:04 GMT
expires: Wed, 29 Nov 2023 11:40:04 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
age: 552915
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   42361
Md5:    4b753ec860a79d8a1867035bc62cb4c4
Sha1:   d197581949190fc18661aa21629f441b75328e03
Sha256: cfdfeffe366947bd6dd1d08dfe554da362e532a9b0f1cafbb3efd9b9d3982682
                                        
                                            GET /2007/10/la-bellasera-photos-031.jpg HTTP/1.1 
Host: journeypod.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.0.72.31
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
date: Mon, 05 Dec 2022 21:15:18 GMT
content-length: 531753
last-modified: Fri, 26 Oct 2007 16:15:37 GMT
expires: Fri, 06 Jan 2023 22:12:35 GMT
x-orig-src: 01_mogdir
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://journeypod.wordpress.com
vary: Origin
x-nc: MISS arn 31 np
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=10, manufacturer=NIKON CORPORATION, model=NIKON D80, orientation=upper-left, xresolution=162, yresolution=170, resolutionunit=2, software=Adobe Photoshop Elements 5.0 (20060914.r.77) Windows, datetime=2007:10:26 12:13:24], baseline, precision 8, 1296x1936, components 3\012- data
Size:   531753
Md5:    d8aea6f2c1a46c01c43f5ccd247d548b
Sha1:   4a9c99fdce5dc42a7923e78c7f27af2f290bbb95
Sha256: f402f0abffa03c8e82ab79f91d18ff9d2f30345e66b486169a5f99a292cd291c
                                        
                                            GET /?blog=http%3A%2F%2Fplymouth-valiant-1970-news.blogspot.com%2Fsearch%2Flabel%2Fcircus%2520starring%2520britney%2520spears&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDI4MjExOCwiaWF0IjoxNjcwMjc0OTE4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc24wNGMzM3M5YXVoZmxscnMxcjlsMGQiLCJuYmYiOjE2NzAyNzQ5MTgsInRzIjoxNjcwMjc0OTE4NjU4NDU5fQ.EQXA7nbVFGQw-ltCY_br-4wq6pm02Rk9xpMrK_6RZ_M&l=celebrity&ref=&scr_h=1024&scr_w=1280&sid=eb8a2c7c-74e1-11ed-9a4a-4d76bfc726df HTTP/1.1 
Host: lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lostwebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//plymouth-valiant-1970-news.blogspot.com/search/label/circus%2520starring%2520britney%2520spears&ref=&l=celebrity
Upgrade-Insecure-Requests: 1

search
                                         81.17.29.148
HTTP/1.1 302 Found
                                        
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Mon, 05 Dec 2022 21:15:18 GMT
location: http://click-v4.junmediadirect1.com/click?i=pKp9vH6qc8k_0
server: nginx
set-cookie: sid=eb8a2c7c-74e1-11ed-9a4a-4d76bfc726df; path=/; domain=.lostwebtracker.com; expires=Sun, 24 Dec 2090 00:29:26 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            GET /wallpaper/aishwarya-rai/aishwarya-rai-26808.jpg HTTP/1.1 
Host: www.rex-fox.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         206.189.214.97
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Server: nginx
Date: Mon, 05 Dec 2022 21:15:18 GMT
Content-Length: 128686
Last-Modified: Wed, 02 Mar 2011 14:28:37 GMT
Connection: keep-alive
ETag: "4d6e5415-1f6ae"
Expires: Wed, 04 Jan 2023 21:15:18 GMT
Cache-Control: max-age=2592000, public
Accept-Ranges: bytes


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.00, resolution (DPI), density 150x150, segment length 16, comment: "LEAD Technologies Inc. V1.01", baseline, precision 8, 1024x768, components 3\012- data
Size:   128686
Md5:    f9ebb7766cd85f49cbbc817b4563e8e9
Sha1:   adb6e12c7e66130105bf9c4b1fe03a0436247cad
Sha256: eaf788dd5ae99a7d7fbe96fdc7569f8417d964fc50281c986a8d234b8b7352aa
                                        
                                            GET /photo/231/miley-cyrus-022.jpg HTTP/1.1 
Host: wallpapers76.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         173.249.58.209
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                        
date: Mon, 05 Dec 2022 21:15:18 GMT
server: Apache
location: /zoom/231/miley-cyrus-022.jpg
content-length: 0
X-Firefox-Spdy: h2

                                        
                                            GET /wp-content/uploads/2011/04/Jordana-Brewster-Sexy-Bikini-Photoshoot-06.jpg HTTP/1.1 
Host: chickswelike.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         192.254.183.103
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: no-cache, no-store, must-revalidate
Pragma: no-cache
Expires: 0
Content-Length: 195
Keep-Alive: timeout=5, max=75


--- Additional Info ---
Magic:  HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   195
Md5:    d572000fab03549c5595ecb06b4d6b01
Sha1:   5d7c1d48ab8e9611a016c9e4c72af62479fb08ad
Sha256: 87f9c6e40055e06d17d4d03ac3c140d10e840229bd0594d3334858aaa56af0ed
                                        
                                            GET /modules/Interviews/Candace_Kita2/Candace_bed.jpg HTTP/1.1 
Host: www.comicmonsters.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         72.34.34.3
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Mon, 05 Dec 2022 21:15:18 GMT
Server: Apache
Last-Modified: Tue, 08 Jun 2010 21:50:17 GMT
Accept-Ranges: bytes
Content-Length: 113748
Keep-Alive: timeout=2, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 500x333, components 3\012- data
Size:   113748
Md5:    48fc21d7f126c82bb7c0968752396e4a
Sha1:   c0b8b5c4d3d3d295f68e69ef771e606b69f7ee9b
Sha256: 5fc9d3537f56fcc477d8bf6cb62a05ee933e191f49e1e24a041ff64291a2ecad
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7434
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 21:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7434
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 21:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7434
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 21:15:19 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7434
Expires: Mon, 05 Dec 2022 23:19:13 GMT
Date: Mon, 05 Dec 2022 21:15:19 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd528f6ee-d348-431d-8220-5c8b154b2941.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8315
x-amzn-requestid: f1bcc33b-aad9-4d3b-b1f9-49282f2d4fb9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMGVboAMFfxg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-13472a097177d4751c8f7a8c;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JuY0xcLDiERwrVhq33d4PP64liDqFfk9bc9xX1H62o0tOwrt1ek7Pg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 a3bd0eb50c22e4d5fbda56a30b96002c.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:42:39 GMT
age: 84760
etag: "22a8c4bd58c729c1abcf794466e8f3231dfb034b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8315
Md5:    db1701b7b9d161a0c935bb6e10b17893
Sha1:   22a8c4bd58c729c1abcf794466e8f3231dfb034b
Sha256: b495524a33e5b1d3ba34cfbe867ada0da956c061370b1fcde06b23a6194a9787
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3af2e495-85ff-410f-8418-e683c7f84bcd.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 7728
x-amzn-requestid: 9f37e7a6-1f00-4a81-9b14-962fd0b6cdf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clsAMEJxoAMFchQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc067-4a4cce217327b44525ea1e98;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ztC4S0WeA3ft_9JafrL6fInXo4jwkb0cTWUx4Z8L2uz3EWQS-d6F5A==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 22:09:54 GMT
age: 83125
etag: "9f80bb7ca6f699d88eaec2248dec508c589fe994"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7728
Md5:    027480c06cd67621f373c6765dafee4d
Sha1:   9f80bb7ca6f699d88eaec2248dec508c589fe994
Sha256: f69a0d6bd6e79d8fa7f2f15df11237c0a8b04d45af3cd5870eeef86d18f553bf
                                        
                                            GET /click?i=pKp9vH6qc8k_0 HTTP/1.1 
Host: click-v4.junmediadirect1.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://lostwebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

search
                                         198.134.116.17
HTTP/1.1 302 Found
                                        
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: https://adserving.unibet.com/redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_236836
Pragma: no-cache

                                        
                                            GET /2011/03/abbey-lee-kershaw7.jpg HTTP/1.1 
Host: highheeledbanshee.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         192.0.72.16
HTTP/2 403 Forbidden
content-type: text/html;charset=utf-8
                                        
server: nginx
date: Mon, 05 Dec 2022 21:15:18 GMT
vary: Accept-Encoding
cache-control: private
x-hacker: If you're reading this, you should visit automattic.com/jobs and apply to join the fun, mention this header.
host-header: WordPress.com
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   7362
Md5:    4bc60f4dec2156577d5aa9ee0bb82256
Sha1:   48360f087dd3176113952fedf822f801dcb3e22c
Sha256: 011db44cd9a85b6de251df7041814683863758ebf7d404c8bcbdd35ae0c4bb49
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fae18d1b5-3b75-4897-bd1b-03651e437c2e.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 4666
x-amzn-requestid: 850d341f-5ccb-453c-8adf-a8194f8fbdad
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: clr_-GiboAMFwww=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638bc066-766293f2526e637235067aca;Sampled=0
x-amzn-remapped-date: Sat, 03 Dec 2022 21:32:22 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: kmki-SBINSx1kbiIkaSGebdCLrnDeHVhYeotAWzE__CevkNDdfzRGg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:44:05 GMT
age: 84674
etag: "a9a529dc9894827f6243a1bf57f81caa4fe88fc2"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   4666
Md5:    c01fe1cccdb3b672bbade6d98217ffe9
Sha1:   a9a529dc9894827f6243a1bf57f81caa4fe88fc2
Sha256: c43da6212c79a08e22e78e04e99e8f5422e64b4b0a87f30b7907f1b4bc675c71
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F60dcc231-abb7-48f1-8ec5-e25b31bd100b.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 10396
x-amzn-requestid: b879fd2e-b6cf-4373-b780-2d97481c45f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cioNbH5KoAMFUsA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638a8722-6add7f8e225878473b20c015;Sampled=0
x-amzn-remapped-date: Fri, 02 Dec 2022 23:15:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ir97GJKaFoW6BNXCcmMqp0JSUd5JhCACyUvLh5G-0BWCDVJsqs7XhQ==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 11:06:22 GMT
age: 36537
etag: "2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   10396
Md5:    24c69d7ef356b352956d6dcbc9f5df1d
Sha1:   2cc31dc1c5d2d2a8b3a378dce8a1240a79acfec9
Sha256: 94d068620c34652cb2d24ca8b3cf962febe9606e6d3a33d937fc9d99f176edef
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F461bc4a6-a90b-41a8-99ce-a502ba9ed21f.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                        
server: nginx
content-length: 8749
x-amzn-requestid: ee03c447-299b-45d5-b8c6-12d4d1dc436d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_spHdBIAMFywQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-0c9805c6112ec9ec6b9d1544;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: joWP2kLWVD0lEy2rMV4Fjm3mJh3mzsPyTWiHDVZZNMy5s_WPViKtCw==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Sun, 04 Dec 2022 21:48:29 GMT
etag: "6706e02d6b95edc3a33c951f07d04b0fb7415b77"
age: 84410
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8749
Md5:    dcb8fe0c4ba323ab2483fa290c291051
Sha1:   6706e02d6b95edc3a33c951f07d04b0fb7415b77
Sha256: 6be68deb3a330955027ec16eaca2cdf4e2776620ffb7cb995922664b24400f02
                                        
                                            GET /redirect.aspx?bid=37950&pid=29326169&sref=TRM&TRM=dL_119050.242451_236836 HTTP/1.1 
Host: adserving.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lostwebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         23.36.79.11
HTTP/2 307 Temporary Redirect
content-type: text/html
                                        
content-length: 0
location: https://www.unibet.nu/stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&sref=TRM&TRM=dL_119050.242451_236836&affiliateId=1&pid=74279048&bid=37950
p3p: CP="This is not a P3P policy! It is used to bypass IEs problematic handling of cookies"
x-aspnet-version: 4.0.30319
request-context: appId=cid-v1:83ffbda4-9458-475e-90ec-4427cfb5c3b0
access-control-expose-headers: Request-Context
expires: Mon, 05 Dec 2022 21:15:20 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Mon, 05 Dec 2022 21:15:20 GMT
set-cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d; SameSite=None;; domain=.unibet.com; expires=Fri, 31-Dec-9999 23:59:59 GMT; path=/; secure NetReferSPS=%5b%7b%22StoreName%22%3a%22CurrentReferenceID%22%2c%22StoreValue%22%3a%228525651665%7c1%22%7d%5d; domain=.unibet.com; expires=Wed, 05-Dec-3021 21:15:20 GMT; path=/; secure; SameSite=Strict
server-timing: cdn-cache; desc=MISS, edge; dur=20, origin; dur=82
X-Firefox-Spdy: h2

                                        
                                            GET /3202/3034990988_a7bd0c7826.jpg HTTP/1.1 
Host: farm4.static.flickr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/

search
                                         143.204.48.75
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                        
Server: CloudFront
Date: Mon, 05 Dec 2022 21:15:20 GMT
Content-Length: 167
Connection: keep-alive
Location: https://farm4.static.flickr.com/3202/3034990988_a7bd0c7826.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: b0KPdzDp-7fdhmyMf4Jo4W0u5G6PS7ZwJzb2dknKeR-r_vnp7TiyCQ==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 1493
Cache-Control: max-age=107943
Date: Mon, 05 Dec 2022 21:15:20 GMT
Etag: "638d5c3a-1d7"
Expires: Wed, 07 Dec 2022 03:14:23 GMT
Last-Modified: Mon, 05 Dec 2022 02:49:30 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: plymouth-valiant-1970-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://plymouth-valiant-1970-news.blogspot.com/search/label/circus%20starring%20britney%20spears

search
                                         172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Mon, 05 Dec 2022 21:15:20 GMT
Date: Mon, 05 Dec 2022 21:15:20 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 07 Jun 2022 09:08:08 GMT
ETag: W/"24684cb7d3aa6e3ee956994797b7240932b7a355b250a0663797606d5fc851ee"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   412
Md5:    501c61a70f5c41181aa050d9110909ca
Sha1:   5b985d5671a7caf686fdfb1df13488c4407f6c9f
Sha256: c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
                                        
                                            GET /stan/campaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&sref=TRM&TRM=dL_119050.242451_236836&affiliateId=1&pid=74279048&bid=37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lostwebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         85.184.96.0
HTTP/2 301 Moved Permanently
                                        
date: Mon, 05 Dec 2022 21:15:20 GMT
content-length: 0
location: https://www.unibet.nu:443/stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&sref=TRM&TRM=dL_119050.242451_236836&affiliateId=1&pid=74279048&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A74279048-37950
set-cookie: JSESSIONID=node0wxy5325kwysuei275zzm7yh13398061.node0; Path=/stan; Secure; HttpOnly; SameSite=Strict __ucbt=node0wxy5325kwysuei275zzm7yh13; Path=/; Domain=.unibet.nu; Expires=Wed, 04-Dec-2024 21:15:20 GMT; Max-Age=63072000; Secure; SameSite=None uniattr=ST.0.T; Path=/; Domain=.unibet.nu; Expires=Wed, 04-Dec-2024 21:15:20 GMT; Max-Age=63072000; Secure; SameSite=None uniattr_ref="http://lostwebtracker.com/"; Path=/; Domain=.unibet.nu; Expires=Wed, 04-Dec-2024 21:15:20 GMT; Max-Age=63072000; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None netwid=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None CLAIM_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None affiliateId=1; Path=/; Domain=.unibet.nu; Secure; SameSite=None B-TAG=320665405_BCAF9819F49B459384470E6610B9BFBA; Path=/; Domain=.unibet.nu; Secure; SameSite=None REGISTRATION_CODE=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BID=37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None PID=74279048; Path=/; Domain=.unibet.nu; Secure; SameSite=None CHID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None REFERER=http%3A%2F%2Flostwebtracker.com%2F; Path=/; Domain=.unibet.nu; Secure; SameSite=None UNIBET_INTERNAL_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None UNIBET_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_ACCEPTED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AMS_INVITE_CHAT_DECLINED=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None BOCAID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None PRODUCT_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_BCAF9819F49B459384470E6610B9BFBA%26sref%3DTRM%26TRM%3DdL_119050.242451_236836%26affiliateId%3D1%26pid%3D74279048%26bid%3D37950; Path=/; Domain=.unibet.nu; Secure; SameSite=None AFFILIATE_CAMPAIGN_ID=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None campaignId=; Path=/; Domain=.unibet.nu; Expires=Thu, 01-Jan-1970 00:00:00 GMT; Max-Age=0; Secure; SameSite=None clientId=polopoly_desktop; Domain=www.unibet.nu; Path=/; SameSite=None; Secure
referer: http://lostwebtracker.com/
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Thu, 01 Jan 1970 00:00:00 GMT, Mon, 05 Dec 2022 21:15:20 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            GET /stan/redirecttocampaign.do?cmpId=2799402&affiliateId=1&unibetTarget=/nu/pop/sportsbook/multisports/index.html&targetDomain=https://welcome.unibet.com&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&sref=TRM&TRM=dL_119050.242451_236836&affiliateId=1&pid=74279048&bid=37950&landingPageUrl=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A74279048-37950 HTTP/1.1 
Host: www.unibet.nu
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lostwebtracker.com/
Connection: keep-alive
Cookie: __ucbt=node0wxy5325kwysuei275zzm7yh13; uniattr=ST.0.T; uniattr_ref="http://lostwebtracker.com/"; affiliateId=1; B-TAG=320665405_BCAF9819F49B459384470E6610B9BFBA; BID=37950; PID=74279048; REFERER=http%3A%2F%2Flostwebtracker.com%2F; AFFILIATE_REQUEST_URL=https%3A%2F%2Fwww.unibet.nu%2Fstan%2Fcampaign.do%3FcmpId%3D2799402%26affiliateId%3D1%26unibetTarget%3D%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%26targetDomain%3Dhttps%3A%2F%2Fwelcome.unibet.com%26btag%3D320665405_BCAF9819F49B459384470E6610B9BFBA%26sref%3DTRM%26TRM%3DdL_119050.242451_236836%26affiliateId%3D1%26pid%3D74279048%26bid%3D37950; clientId=polopoly_desktop
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         85.184.96.0
HTTP/2 301 Moved Permanently
                                        
date: Mon, 05 Dec 2022 21:15:20 GMT
content-length: 0
location: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
cache-control: max-age=0, no-cache, no-store, must-revalidate, proxy-revalidate
expires: Mon, 05 Dec 2022 21:15:20 GMT
server: kindred-loadbalancer
strict-transport-security: max-age=63072000; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
content-security-policy: default-src 'unsafe-inline' 'unsafe-eval' http: https: data: wss: blob: jockey: unibetpro: *;
x-browser-class: A
x-os-class: M
x-ooops-debug: /500-pages/www.unibet.nu/index.html
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         23.36.76.226
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx
Content-Length: 503
ETag: "6A17636802702728BCE1A7FFB368008AAB911FF3D4F2A5B54B0253066C3D4881"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3298
Expires: Mon, 05 Dec 2022 22:10:18 GMT
Date: Mon, 05 Dec 2022 21:15:20 GMT
Connection: keep-alive

                                        
                                            GET /bikemastersomaha.com.jpg HTTP/1.1 
Host: d39f23jfph0ylk.cloudfront.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.42.53
HTTP/2 200 OK
content-type: image/jpeg
                                        
content-length: 4140
date: Mon, 05 Dec 2022 21:15:21 GMT
last-modified: Wed, 24 Nov 2021 06:21:14 GMT
etag: "45b368977873ba2480e67ddfd4a3a2c8"
accept-ranges: bytes
server: AmazonS3
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: PrA5wZ3eCvoG6vEVY8Dze_WhE8LNecogUB6wHGnY4dDrV4JICUK6Tg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 346x43, components 1\012- data
Size:   4140
Md5:    45b368977873ba2480e67ddfd4a3a2c8
Sha1:   52273ec3f39e07fecf6cf0c1f4c35a5732da264a
Sha256: a7f4071b58220e7f9c94fb67eb026692a177c052c3239e086eeee870dc31ba54
                                        
                                            GET /49621-thickbox/horst-buchholz-jean-marais-eleanor-powell-gregory-peck.jpg HTTP/1.1 
Host: www.starducine.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         151.80.27.178
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, must-revalidate, max-age=0
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Location: https://starducine.com/49621-thickbox/horst-buchholz-jean-marais-eleanor-powell-gregory-peck.jpg
Server: Microsoft-IIS/8.5
X-Redirect-By: WordPress
X-Powered-By: ASP.NET
X-Powered-By-Plesk: PleskWin
Date: Mon, 05 Dec 2022 21:15:22 GMT
Content-Length: 231


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Size:   231
Md5:    4bb5a34cdcd64e5a5f0c91f607838d26
Sha1:   4225236bdacb8aa26e2ba0e4fdfc0b51d6503cab
Sha256: 3a40e317fac7dff4895b3e84dac761df4b5979021127545e77f4f93c58645ba9
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048 HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://lostwebtracker.com/
Connection: keep-alive
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: 3j1KK5ReHy/6ckOVwt+Uag==
last-modified: Mon, 21 Nov 2022 12:34:11 GMT
x-ms-request-id: 963d0316-401e-0010-23ee-08d76a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbed78c5b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (2468)
Size:   5243
Md5:    9cbea59d9ccbf845d15b695d407060b3
Sha1:   9fc2a554c898b9cbfc0fed4bda71044a8c96f1d3
Sha256: 49b2c10b789760e0bfb68806d92adfc9fafa021c3dc2ae9ccfe8ca4c61c3072b
                                        
                                            GET /nu/pop/sportsbook/multisports/app-sports-icon.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: Lm+dv7pV36kTdto2PoEyYQ==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB4BDF480"
x-ms-request-id: 88d0ed69-201e-0074-2803-0326f2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2d826b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (15888), with no line terminators
Size:   10307
Md5:    46dc8373de1ac349bd9fd0de9194311e
Sha1:   ff337c47385d59b07a65168ed5c28fbf20978ef7
Sha256: a9d0ab28d4be3d9eb71b7ba83dae2cb33438f4dfa2570faa13f89f168f1b6989
                                        
                                            GET /film-com/ HTTP/1.1 
Host: markmonitor.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         23.185.0.1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
                                        
cache-control: public, max-age=600
content-encoding: gzip
link: <https://markmonitor.com/wp-json/>; rel="https://api.w.org/", <https://markmonitor.com/wp-json/wp/v2/pages/11663>; rel="alternate"; type="application/json", <https://markmonitor.com/?p=11663>; rel=shortlink
server: nginx
set-cookie: ppwp_wp_session=9f1b071050a66f571a68272cb01165a5%7C%7C1670276720%7C%7C1670276360; expires=Mon, 05-Dec-2022 21:45:20 GMT; Max-Age=1800; path=/
strict-transport-security: max-age=300
x-pantheon-styx-hostname: styx-fe1-a-749d9795bf-wpv9z
x-styx-req-id: ec85d8c3-74e1-11ed-84ce-0e13205ba862
date: Mon, 05 Dec 2022 21:15:20 GMT
x-served-by: cache-chi-kigq8000060-CHI, cache-bma1658-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1670274920.241402,VS0,VE536
vary: Accept-Encoding, Cookie, Cookie
age: 0
accept-ranges: bytes
via: 1.1 varnish, 1.1 varnish
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32622)
Size:   56363
Md5:    b78076da574659c67be26621f050fd54
Sha1:   fb2ea70a2dc455d15085250e5bd0a65f1d97e339
Sha256: 5f6a6a52e5cd3fc24995ec0b16858022b8df4fa133d32214dfe24120584b5a21
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3978
Cache-Control: max-age=143881
Date: Mon, 05 Dec 2022 21:15:21 GMT
Etag: "638ddee8-117"
Expires: Wed, 07 Dec 2022 13:13:22 GMT
Last-Modified: Mon, 05 Dec 2022 12:07:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /nu/pop/sportsbook/multisports/com-payments.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: vwb7ospRft2xzGDtJvR3WA==
last-modified: Mon, 21 Nov 2022 12:34:13 GMT
etag: W/"0x8DACBBCB22FE05F"
x-ms-request-id: bf5a1d34-901e-003c-5a03-033bc5000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2e83ab524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   10544
Md5:    ea3c01fe7a65e8bc2ef398bbc26c7c2b
Sha1:   b664601297b74f442cbd6ad53035410873e6327d
Sha256: 410b4fc78744607a20098d6aeb9b1b33882ad6816745913ee7aba5d4f58e35c6
                                        
                                            GET /nu/pop/sportsbook/multisports/google-play-ro.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: 2fR27yW0b9kBp/ebW9u59A==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: W/"0x8DACBBCB4CC7156"
x-ms-request-id: 4fc06b4d-901e-004e-1803-033c8a000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2d828b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (5740), with no line terminators
Size:   2559
Md5:    e5926331da5e929cf5c6d7f08e05a62e
Sha1:   529c08c235adf119b834190bf7f1663c1638065b
Sha256: c306f07c0fd10fb7090b9d98a94f6678ea323c241685b0acd82c68e08490f4ba
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 3978
Cache-Control: max-age=143881
Date: Mon, 05 Dec 2022 21:15:21 GMT
Etag: "638ddee8-117"
Expires: Wed, 07 Dec 2022 13:13:22 GMT
Last-Modified: Mon, 05 Dec 2022 12:07:04 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /nu/pop/sportsbook/multisports/icon-expert.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: Z4302O+bSqlX5UM92U+35A==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB3A5CF50"
x-ms-request-id: cd88faad-301e-0047-5503-037959000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2d831b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (966), with no line terminators
Size:   62908
Md5:    bb60f8c3b151a3617c7344cc75f5ca0f
Sha1:   a154e59b53dd30ac9e2d15837245ca83d7c6fd33
Sha256: 4efa01da2f79c48cef2a1baf2696c1b0e356639c99e3fd68bec26782b134d09f
                                        
                                            GET /nu/pop/sportsbook/multisports/Unibet_Pro_2020.woff2 HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/1-styles.css
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
content-length: 10924
cache-control: public, max-age=900, immutable
content-md5: DqW8/4SuRIQLbpydEsi5Yw==
last-modified: Mon, 21 Nov 2022 12:34:17 GMT
etag: "0x8DACBBCB4A3B989"
x-ms-request-id: b6f7cb18-201e-0029-1a03-032c76000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46084
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf44a49b524-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 10924, version 1.0\012- data
Size:   10924
Md5:    0ea5bcff84ae44840b6e9c9d12c8b963
Sha1:   6c827e1adb18775d2fdfbbbfef63cc9b66243ed2
Sha256: b4e210ac58fe8fb176e24c58ffdbd0e7b40dded1314769dbcebdc413998b882b
                                        
                                            GET /nu/pop/sportsbook/multisports/icon-trust.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: 9k4H3E55HXB5I94VinrUOQ==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB39EA46F"
x-ms-request-id: a11628c9-801e-0042-7503-03ab82000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2d82ab524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1066), with no line terminators
Size:   1081
Md5:    88fb7c2087d4ddb0117c959e6f4812ad
Sha1:   ae9ea5ec013d172e66c1765b327466d4ec75e0cc
Sha256: 6bc217674d00d15180922fd5ffc39913ba6e7c59dca757ed39f7098a551aed7c
                                        
                                            GET /widget/betslip/betslip.js HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: application/javascript; charset=utf-8
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: V3DcYDl/+4NNEoCqe8670A==
last-modified: Tue, 15 Jan 2019 09:54:22 GMT
etag: W/"0x8D67ACF6D112CB5"
x-ms-request-id: 556a432d-701e-0079-3f03-03ee26000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46084
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf3c987b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (693)
Size:   84641
Md5:    c893439ffa837d4ce8ea418b356b3b9a
Sha1:   30435da0f446ae892b0852727103661d689712a3
Sha256: 4e26ccc700a2024b2b86cf44a574c278f4fbbe7fe811bf2263f69af0e3253362
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /releases/v5.7.1/webfonts/fa-solid-900.woff2 HTTP/1.1 
Host: use.fontawesome.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://use.fontawesome.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         172.64.133.15
HTTP/2 200 OK
content-type: font/woff2
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
content-length: 74320
x-amz-id-2: SYu1O0qpfKXkCwrmaUAdwYMduNJ5VDJjzq/NZ6aXI+KzwfjKy8q7ykU1NLQf0byh/jE10eMvTwc=
x-amz-request-id: X6VAEWBQXGEVXHTZ
access-control-allow-origin: *
access-control-allow-methods: GET
access-control-max-age: 3000
vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method, Accept-Encoding
last-modified: Wed, 30 Jun 2021 15:45:57 GMT
etag: "3638e62ea50e6f5859b6a15276c25c87"
cache-control: max-age=31556926
cf-cache-status: HIT
age: 899019
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BuGI814BCCzyCFp%2Fcb8MuydChTF6E71kiVBAkZfRBch%2BYMrBhRl2PViEJWfL6hNytHD5kBE0uY10BqXMzbSgAVQYF%2BszNwUA6kL846rHtXoYHv6mjBd5hhH2dWOILE%2BbbP%2BPn%2Beh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 774fcbf459ce547b-LHR
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 74320, version 329.30998\012- data
Size:   74320
Md5:    3638e62ea50e6f5859b6a15276c25c87
Sha1:   f5aa1a463e223a294a42b314e1c63a614d594ec0
Sha256: 9e6bd5b2d75bba485d2337d020750744983a3521ec697adfe21b29ee4f14f6a9
                                        
                                            GET /s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                        
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15920
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 19:33:56 GMT
expires: Thu, 30 Nov 2023 19:33:56 GMT
cache-control: public, max-age=31536000
age: 438085
last-modified: Wed, 11 May 2022 19:24:45 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15920, version 1.0\012- data
Size:   15920
Md5:    3a44e06eb954b96aa043227f3534189d
Sha1:   23cef6993ddb2b2979e8e7647fc3763694e2ba7d
Sha256: b019538234514166ec7665359d097403358f8a4c991901983922fb4d56989f1e
                                        
                                            GET /nu/pop/sportsbook/multisports/gambling-commission.png HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 404 Not Found
content-type: application/xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
x-ms-request-id: 49730bfe-b01e-0004-5fed-089f05000000
x-ms-version: 2014-02-14
access-control-allow-origin: *
cf-cache-status: HIT
age: 296
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2e839b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  XML 1.0 document text\012- XML document, Unicode text, UTF-8 (with BOM) text
Size:   15914
Md5:    488a5082c33f97465904b88ea675e03b
Sha1:   e000244d241796aa4641248b91cf315b788e0130
Sha256: 51044aec975d5a1993044e7329353539c5d9a28f385bfb460f2a6ad274c53888
                                        
                                            GET /nu/pop/sportsbook/multisports/1-styles.css HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: zXkBqwBMviPPaK5rBIapmA==
last-modified: Mon, 21 Nov 2022 12:34:11 GMT
etag: W/"0x8DACBBCB117460B"
x-ms-request-id: dbafa778-701e-0034-4703-0321ca000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2bffcb524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text
Size:   21010
Md5:    984fc899c07e7c84d573289b6f597427
Sha1:   e4cc9d58414f74588211a3f35a6afe4fb1457a8f
Sha256: 266691f0eea8abb1658f16c210105321bd4ecc52f4e762aa32c6c4a283924a8b
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Mon, 05 Dec 2022 21:15:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2387
Cache-Control: max-age=135055
Date: Mon, 05 Dec 2022 21:15:21 GMT
Etag: "638dc2a5-117"
Expires: Wed, 07 Dec 2022 10:46:16 GMT
Last-Modified: Mon, 05 Dec 2022 10:06:29 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

search
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Age: 2387
Cache-Control: max-age=135055
Date: Mon, 05 Dec 2022 21:15:21 GMT
Etag: "638dc2a5-117"
Expires: Wed, 07 Dec 2022 10:46:16 GMT
Last-Modified: Mon, 05 Dec 2022 10:06:29 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /nu/pop/sportsbook/multisports/icon-sports.svg HTTP/1.1 
Host: welcome.unibet.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/nu/pop/sportsbook/multisports/index.html?mktid=1:320665405:74279048-37950&btag=320665405_BCAF9819F49B459384470E6610B9BFBA&bid=37950&campaignId=2799402&pid=74279048
Cookie: NetRefer_CookieUniTrack_C=%5b%7b%22PID%22%3a74279048%2c%22BID%22%3a37950%2c%22DateTimeStamp%22%3a%22%5c%2fDate(1670274920030)%5c%2f%22%2c%22CookieTag%22%3a%223795074279048451240919C20221252115%22%7d%5d
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

search
                                         104.18.24.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public, max-age=900, immutable
content-md5: Kch+tYuo05USS5JaESq1rA==
last-modified: Mon, 21 Nov 2022 12:34:15 GMT
etag: W/"0x8DACBBCB3E60357"
x-ms-request-id: 16b99321-701e-000b-6a03-03e969000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 46085
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf2e838b524-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (1481), with no line terminators
Size:   2310
Md5:    636b2918429a66d2520faec4f97facc1
Sha1:   735532227bf6b3d69956182499d69d5f61af703f
Sha256: 02d933e419a9244e190ebddcd4540e902878659b1d58e99148e3b76221de7e91
                                        
                                            GET /resources/mga-logo-16e5f569-f45f-4c4f-a7ab-0a1f83c58415.svg HTTP/1.1 
Host: cdn.bannerflow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.174.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public,max-age=604800
content-md5: FAAw5O0EvruykoHDQoRDMA==
last-modified: Fri, 27 Nov 2020 14:00:02 GMT
etag: W/"0x8D892DCBC6EB927"
x-ms-request-id: 0c05a17a-201e-0074-2dff-f626f2000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 571
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf63c39b521-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   3664
Md5:    9ee5b63c5747501122dd571e15256e6f
Sha1:   795d4d5730d609be4d85e80ff589523e4a579e54
Sha256: f69ad09cd51cddc25e8f7d3a81832077144085a5b99f8cede4a9557b2c74b1bc
                                        
                                            GET /bounce?%2Fseg%3Fadd%3D9755599 HTTP/1.1 
Host: secure.adnxs.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://welcome.unibet.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         185.89.210.20
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Server: nginx/1.21.3
Date: Mon, 05 Dec 2022 21:15:21 GMT
Content-Length: 43
Connection: keep-alive
Cache-Control: no-store, no-cache, private
Pragma: no-cache
Expires: Sat, 15 Nov 2008 16:00:00 GMT
P3P: policyref="http://cdn.adnxs-simple.com/w3c/policy/p3p.xml", CP="NOI DSP COR ADM PSAo PSDo OURo SAMo UNRo OTRo BUS COM NAV DEM STA PRE"
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
AN-X-Request-Uuid: 1d3e5d5f-ce8b-4a88-abb0-b040875fb177
Set-Cookie: anj=dTM7k!M4/8CxrEQF']wIg2E?fs$'3l!]tbP6j2F-XstGt!@E6j%.c->; SameSite=None; Path=/; Max-Age=7776000; Expires=Sun, 05-Mar-2023 21:15:21 GMT; Domain=.adnxs.com; Secure; HttpOnly
X-Proxy-Origin: 91.90.42.154; 91.90.42.154; 944.bm-nginx-loadbalancer.mgmt.ams3.adnexus.net; adnxs.com


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   43
Md5:    592ebefc7104d681d57852665e9ad514
Sha1:   15cdf8df32aa251dd6dd590a60bf9cf74474e7c5
Sha256: 4b5b6b15c6255109e06720cce42a06d3aead8b7874423d9c52cb0303212c25ef
                                        
                                            GET /pages/versioned/common-scripts/051214b1ee034dc81c1493c28aa557bd.js HTTP/1.1 
Host: script.crazyegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

search
                                         104.19.147.8
HTTP/2 200 OK
content-type: text/javascript
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
content-length: 26836
cache-control: public, max-age=31536000, s-maxage=31536000
timing-allow-origin: *
last-modified: Fri, 18 Nov 2022 16:53:01 GMT
content-encoding: gzip
access-control-allow-origin: *
cf-cache-status: HIT
age: 877826
accept-ranges: bytes
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf668330b61-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (63889)
Size:   26836
Md5:    40a61971f3342753b240df82579098d2
Sha1:   75a44689092cd59612c3c77f4c3f353f5898c4b9
Sha256: c53652de8d763aa53a2226f899e6c57434675b324a4e22b91bea1f217e99504a
                                        
                                            GET /3202/3034990988_a7bd0c7826.jpg HTTP/1.1 
Host: farm4.static.flickr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://plymouth-valiant-1970-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         143.204.48.75
HTTP/2 404 Not Found
content-type: text/html; charset=utf-8
                                        
date: Mon, 05 Dec 2022 21:15:20 GMT
edge-control: public, max-age=300
surrogate-control: public, max-age=300
cache-control: public, max-age=300
expires: Mon, 05 Dec 2022 21:20:20 GMT
server: Jubilee
quote: "I'm not a kid anymore, I'm one of you, one of the X-Men. It means more to me than anything in the world."
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
powered-by: Mutation/1.0
hiring: Change the world of photography with us. https://www.flickr.com/jobs/
ourvalues: Deliver Awesome (#3 of 5)
x-request-id: 932d23c3
x-frame-options: DENY
p3p: CP="This is not a P3P policy. We respect your privacy."
x-env: a=live, b=jubilee, c=21738c41, e=b1cfc1fdb4a90fbd7ed7449176940c7c057c6af1
x-ttfb: 0.0054
x-ttdb-l: 43
mib: 2
content-encoding: gzip
vary: Accept-Encoding
x-cache: Error from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: wJxkxW_zQNfgODnENiYQi-OZ2eyK4S99sVbJWRsviCf9beuQt2Cknw==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   12387
Md5:    fd72894aee1772741139aa645738c095
Sha1:   4102bd7f7ab2274a53ae92ed0e26565734191136
Sha256: 24ea6b5719450a54d654066ddabb6a70ef44bed1107323faaa1a4c014ad5bfb6
                                        
                                            GET /resources/no-payments-44051ae6-a41f-42c3-8d89-751be3d4a42c.svg HTTP/1.1 
Host: cdn.bannerflow.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         104.16.174.188
HTTP/2 200 OK
content-type: image/svg+xml
                                        
date: Mon, 05 Dec 2022 21:15:21 GMT
cache-control: public,max-age=604800
content-md5: eFf1+jVlHZeVusUSI4yq9A==
last-modified: Mon, 07 Dec 2020 10:23:00 GMT
etag: W/"0x8D89A9A12E2A33B"
x-ms-request-id: aecbdf5c-c01e-0126-115e-a51c52000000
x-ms-version: 2014-02-14
x-ms-lease-status: unlocked
x-ms-lease-state: available
x-ms-blob-type: BlockBlob
access-control-allow-origin: *
cf-cache-status: HIT
age: 519
vary: Accept-Encoding
server: cloudflare
cf-ray: 774fcbf63c3fb521-OSL
content-encoding: br
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   8177
Md5:    98cda3a0f24d237d31a910b7df1964d4
Sha1:   9f99e6668ef87f4934ed5528319669bc9cc3191a
Sha256: 690b181864b3beb19eb36dc04513ea748a035a7f4763a97eeda5fb05ad3a63d3
                                        
                                            GET /b/ss/unibetlondonunibetwebprod/1/JS-2.22.4/s51909424177048?AQB=1&ndh=1&pf=1&t=5%2F11%2F2022%2021%3A15%3A19%201%200&mid=15839367858538037816148314829952363235&ce=UTF-8&pageName=LP%3A2022%20-%20Multi%20Sports%20-%20popunders&g=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A74279048-37950%26btag%3D320665405_BCAF9819F49B459384470E6610B9BFBA%26bid%3D37950%26campaignId%3D2799402%26pid%3D74279048&r=http%3A%2F%2Flostwebtracker.com%2F&cc=GBP&ch=bf_landingpage&c1=https%3A%2F%2Fwelcome.unibet.com%2Fnu%2Fpop%2Fsportsbook%2Fmultisports%2Findex.html%3Fmktid%3D1%3A320665405%3A74279048-37950%26btag%3D320665405_BCAF9819F49B459384470E6610B9BFBA%26bid%3D37950%26campaignId%3D2799402%26pid%3D74279048&v1=welcome.unibet.com%3A%3A%3Adesktop%3Anu%3Apop%3Asportsbook%3Amultisports%3Aindex.html&c2=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&v2=bf_landingpage&v3=welcome.unibet.com&v4=No%20CMS%5ENo%20ClientID%5ENo%20Locale%5ENo%20Juristiction&c6=9%3A15%20PM%7CMonday&v6=9%3A15%20PM%7CMonday&v11=GBP&c14=New&v14=New&c16=1670274919&v21=Not%20Logged-In&c73=unibet&c74=15839367858538037816148314829952363235&v99=15839367858538037816148314829952363235&v120=popunder&v121=1%3A320665405%3A74279048-37950&v122=NONE&v124=2799402&v125=320665405_BCAF9819F49B459384470E6610B9BFBA&v126=74279048&v127=37950&v134=1670274919&s=1280x1024&c=24&j=1.6&v=N&k=N&bw=1&bh=1&mcorgid=F431E3BC5593E3887F000101%40AdobeOrg&AQE=1 HTTP/1.1 
Host: unibetlondonltd.d3.sc.omtrdc.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

search
                                         13.36.218.177
HTTP/2 200 OK
content-type: image/gif;charset=utf-8
                                        
access-control-allow-origin: *
date: Mon, 05 Dec 2022 21:15:22 GMT
expires: Sun, 04 Dec 2022 21:15:22 GMT
last-modified: Tue, 06 Dec 2022 21:15:22 GMT
pragma: no-cache
p3p: CP="This is not a P3P policy"
server: jag
etag: 3586888083518160896-4619388543700275086
vary: *
content-length: 43
cache-control: no-cache, no-store, max-age=0, no-transform, private
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 2 x 2\012- data
Size:   43
Md5:    ad480fd0732d0f6f1a8b06359e3a42bb
Sha1:   a544538683a2dfe574eeb2e358ac8fcc78289d50
Sha256: a1ecbaed793a1f564c49c671f2dd0ce36f858534ef6d26b55783a06b884cc506
                                        
                                            GET /healthcheck HTTP/1.1 
Host: pagestates-tracking.crazyegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.22
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 19
date: Fri, 30 Sep 2022 16:18:54 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: U7-w35HnwCoKFS6d7CZCsscpbWiN5Zo-ciLSK2QRWwA-Q2UG4av8Zg==
age: 5720189
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   19
Md5:    d06f04fccf68d0b228a5923187ce1afd
Sha1:   5de9df9fdd66a91eed06e31981553d4ab9ccf490
Sha256: 830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
                                        
                                            GET /healthcheck HTTP/1.1 
Host: assets-tracking.crazyegg.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://welcome.unibet.com
Connection: keep-alive
Referer: https://welcome.unibet.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

search
                                         54.230.111.63
HTTP/2 200 OK
content-type: application/json
                                        
content-length: 19
date: Mon, 31 Oct 2022 08:40:59 GMT
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
access-control-expose-headers: Access-Control-Allow-Origin
access-control-max-age: 31536000
last-modified: Fri, 08 Jul 2022 22:25:51 GMT
etag: "d06f04fccf68d0b228a5923187ce1afd"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 19RR6FZypuCUosgcWeHxtBcT0j5AJdJPj7bFcATeu6x0LqDIzJJ6kg==
age: 3069264
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text
Size:   19
Md5:    d06f04fccf68d0b228a5923187ce1afd
Sha1:   5de9df9fdd66a91eed06e31981553d4ab9ccf490
Sha256: 830e67bda2532cd5880ee86e3b33e69721082f8458bb0df0cd4edbb1577fd375
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache