r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 443a700f85619f4fd8a548421c5c23e2
a58764a07feafb2bb4b340c020b5104c55b35195
0bc80613f3d493ea081bf5672ab76f6f33a1dcc0710fe1431de83c46d7e8d31d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0BC80613F3D493EA081BF5672AB76F6F33A1DCC0710FE1431DE83C46D7E8D31D"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14039
Expires: Sat, 18 Mar 2023 08:50:52 GMT
Date: Sat, 18 Mar 2023 04:56:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 2857be6f18459c7a4a7f00f6cd6076f1
570609086d72a9be57cde7bfefd25663c1035fba
bd8abb8f420d1e31462fca1d6a7caadf1e2bba6fc7db05684b5811e00e84107f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BD8ABB8F420D1E31462FCA1D6A7CAADF1E2BBA6FC7DB05684B5811E00E84107F"
Last-Modified: Fri, 17 Mar 2023 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2906
Expires: Sat, 18 Mar 2023 05:45:19 GMT
Date: Sat, 18 Mar 2023 04:56:53 GMT
Connection: keep-alive
ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html
216.58.207.193200 OK 15 kB URL HTTP/1.1 ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html
IP 216.58.207.193:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8249)
Hash 40c85eb77937a546c92f6bef80ad01a6
3ee212b708bc22adb83e0f6140a2c36a0e3475c5
9ea1b0b4a54313540837204f31b11a0b5441e8344797c53795a5b677b8d211ce
Analyzer Verdict Alert fortinet Malware
GET /2011/09/20-amazing-landscapes-full-hd.html HTTP/1.1
Host: ideallyidentical2009.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sat, 18 Mar 2023 04:56:53 GMT
Date: Sat, 18 Mar 2023 04:56:53 GMT
Cache-Control: private, max-age=0
Last-Modified: Fri, 10 Feb 2023 05:57:57 GMT
ETag: W/"b594d72e3948a77b8bbbfd954531c907daa50c061ceef54d535ce1c9454bb0dd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 14800
Server: GSE
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 12cdbcb1b0785dc0423386448ac68c9c
08cff6b76fd708f0cef3c5bdb8fc72570c4536bd
bb7622a85d32cbff40abd2995055e03dbac05dd841b9a84d9023a5510d89e534
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BB7622A85D32CBFF40ABD2995055E03DBAC05DD841B9A84D9023A5510D89E534"
Last-Modified: Fri, 17 Mar 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5183
Expires: Sat, 18 Mar 2023 06:23:16 GMT
Date: Sat, 18 Mar 2023 04:56:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 29fdbcd53b5646cfcdd46510063734c4
85e3ceda5ef130219f4fe8a31e52e2690c8f7d8e
24c27586332c016685e6231fec5836e921048d8aaefbcd4cd6f88969f9d91e18
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Content-Length, Backoff, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 18 Mar 2023 04:14:31 GMT
content-type: application/json
age: 2542
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: Z+kB38wh5OnwgomqmQxFg4nH+z+S8CPa0Wa9+lOxNZIwgBmSM+2MjHxvJrjGLs0eYDIRl+nt82Y=
x-amz-request-id: BRQ9YAPPP4QFZFZX
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 18 Mar 2023 03:57:43 GMT
age: 3550
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 18 Mar 2023 04:56:53 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ideallyidentical2009.blogspot.com/js/cookienotice.js
216.58.207.193200 OK 2.0 kB URL HTTP/1.1 ideallyidentical2009.blogspot.com/js/cookienotice.js
IP 216.58.207.193:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: ideallyidentical2009.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sat, 18 Mar 2023 04:56:54 GMT
Expires: Sat, 25 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 18 Mar 2023 00:51:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 84218ca0c6d2080f6c56f779ce2c10b5
4eb6e50352f2d63ccdf546ba1f3395f5128dda5e
d6effba6bc376c5e8cdedf0042cb30df6d1b8304346cc1d3bb58aec9ca8e3676
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 42f83436dc43fd73cad44b6125599edb
472ce575dd1869f9db269f838016568e67a6df00
29e9c96c054d55859628079cd0c5ef22819b749070862c2d9a344c453a30f36a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 42f83436dc43fd73cad44b6125599edb
472ce575dd1869f9db269f838016568e67a6df00
29e9c96c054d55859628079cd0c5ef22819b749070862c2d9a344c453a30f36a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 42f83436dc43fd73cad44b6125599edb
472ce575dd1869f9db269f838016568e67a6df00
29e9c96c054d55859628079cd0c5ef22819b749070862c2d9a344c453a30f36a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/jsbin/976584016-comment_from_post_iframe.js
216.58.207.233200 OK 6.8 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/976584016-comment_from_post_iframe.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (1720)
Hash 6257474fb561cbfe96fe59a4bf03c9db
5341cee7f12a49010b004ad7e2a5d6d775db57c6
32b2fb9167f78dfc0c2309c8928b7971468a60bc2b8cce9b2690aba73e464c19
GET /static/v1/jsbin/976584016-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 12:51:17 GMT
expires: Thu, 14 Mar 2024 12:51:17 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 14 Mar 2023 20:00:26 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 230737
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
172.217.21.174200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 172.217.21.174:0
File type ASCII text, with very long lines (1429)
Hash 2e9e150d66328b6b6a88e285fc282762
22b038643bd45f842349cc7a4a7075cc0f074725
30d9bc41eb379b7b441031e0df6d0742df42ca92be34697f729b8eca83dc9d54
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 21022
date: Sat, 18 Mar 2023 04:56:54 GMT
expires: Sat, 18 Mar 2023 04:56:54 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5ebb85d0c8d0a403"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
wallpapers-catalog.com/lotus-esprit-white-front-angle-wallpapers.400x300.jpg
104.21.55.245301 Moved Permanently 0 B URL HTTP/1.1 wallpapers-catalog.com/lotus-esprit-white-front-angle-wallpapers.400x300.jpg
IP 104.21.55.245:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /lotus-esprit-white-front-angle-wallpapers.400x300.jpg HTTP/1.1
Host: wallpapers-catalog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 18 Mar 2023 04:56:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 18 Mar 2023 05:56:54 GMT
Location: https://tsgrad-sob.ru
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kow7PJW4mvg%2FIEanqBVG6iBPhz%2BV7jMRkAN5tgj%2BEOngqDeHmqDaQ%2FwO9MQlGnIMaVwGkU4oVeueWbwXPhuqBuWJoaZ6Qyv6NDvx8pS24fix3nclRDSp4R1pwXxe6eCUen2RdwbU0%2BNG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a9ae44b6f28b524-OSL
alt-svc: h2=":443"; ma=60
www.webwallpapers.net/wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg
172.67.223.127403 Forbidden 2.0 kB URL HTTP/1.1 www.webwallpapers.net/wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg
IP 172.67.223.127:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 9fe65af252bea70c7599b6f7c2f9d9f4
4eac95b9fa8078263417419f97316257e3cb6e49
8144b6e9a4fbf560c7c9a29a699d921be8408b97e6dd50481d6bcc2893e300b8
GET /wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg HTTP/1.1
Host: www.webwallpapers.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 403 Forbidden
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Referer, Accept-Encoding
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AOSDmW6ly3iy76H%2BG81BklcdxfGMOzNx5ew9B9jKnhpyLDqG0TE6Ofd8SOQT5W4ER0vw7uCmB%2FPr%2FI3OZz%2FQ4shJ%2FsW%2FKpf674rpP%2BS1ujGXkPpoQx0AxLau9OgZ%2B4M7PYlGZR1EbPc%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7a9ae44b6d750b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
resources.blogblog.com/img/icon18_edit_allbkg.gif
216.58.207.233200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 15:48:58 GMT
expires: Wed, 22 Mar 2023 15:48:58 GMT
cache-control: public, max-age=604800
last-modified: Wed, 15 Mar 2023 03:50:49 GMT
content-type: image/gif
age: 220076
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images2.layoutsparks.com/1/226195/dj-dick-the-wheels-31000.jpg
188.114.97.1301 Moved Permanently 0 B URL HTTP/1.1 images2.layoutsparks.com/1/226195/dj-dick-the-wheels-31000.jpg
IP 188.114.97.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /1/226195/dj-dick-the-wheels-31000.jpg HTTP/1.1
Host: images2.layoutsparks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 18 Mar 2023 04:56:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 18 Mar 2023 05:56:54 GMT
Location: https://images2.layoutsparks.com/1/226195/dj-dick-the-wheels-31000.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7PbTuNGNPL%2BDHxEESNwLcdamQm8Nd9BJ5fPpEwWVoZ0kIDopb0IxrYLff4hm8qZyXM65VUScQqOJD6Nxh3SptIMNNosKpL%2BxgSym8jy80%2B6%2B8qU9Tdy88VMIak2Ec8iHJLcgI6PC1iFAk8Y%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a9ae44beed4b521-OSL
alt-svc: h2=":443"; ma=60
games.lisisoft.com/img/1/7/1723-1-tank-assault.jpg
104.21.82.216301 Moved Permanently 0 B URL HTTP/1.1 games.lisisoft.com/img/1/7/1723-1-tank-assault.jpg
IP 104.21.82.216:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /img/1/7/1723-1-tank-assault.jpg HTTP/1.1
Host: games.lisisoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 18 Mar 2023 04:56:54 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 18 Mar 2023 05:56:54 GMT
Location: https://games.lisisoft.com/img/1/7/1723-1-tank-assault.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nnQ6Bf9KLaSQ5RBdntJX4lVTtPp4nwpOJW6Hf%2BIi74%2FXwAHH2B4pwLOE%2FdXudpvScQZ9EonDzXUseS3RF9c9amx8B3SD91tVHe75eNDVAPa3wSE8cx8e5oRi52NlfYAK4Qf1U5w%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a9ae44befc50b39-OSL
alt-svc: h2=":443"; ma=60
images.teamtalk.com/08/12/800x600/Albert-Riera-mobbed-by-Liverpool_1688178.jpg
54.230.111.118403 Forbidden 243 B URL HTTP/1.1 images.teamtalk.com/08/12/800x600/Albert-Riera-mobbed-by-Liverpool_1688178.jpg
IP 54.230.111.118:0
File type XML 1.0 document text\012- XML document, ASCII text
Hash cdc4a88bdc02d0c17ce293a336deb3c7
a723d9f2de4b75526661225330668401909f2f2f
f66488024a7807ab8c773bd95381cbdc738d956117790e117a20638924815f2c
GET /08/12/800x600/Albert-Riera-mobbed-by-Liverpool_1688178.jpg HTTP/1.1
Host: images.teamtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 18 Mar 2023 04:56:53 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 7PeZ95DWs1fB5cCJGLIHWQE2lWso3KZp27F6XAnr1pi-q3nqD8jeCg==
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 42f83436dc43fd73cad44b6125599edb
472ce575dd1869f9db269f838016568e67a6df00
29e9c96c054d55859628079cd0c5ef22819b749070862c2d9a344c453a30f36a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.zastavki.com/pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg
78.46.64.228301 Moved Permanently 169 B URL HTTP/1.1 www.zastavki.com/pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg
IP 78.46.64.228:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 84855c13836b389d5ec7cfd4c9266173
1cf3056ff23c4176fd7ca9816a000ed461d6d323
502083c916ae481cdd413b8d93315300653df5fb3dcc5770c01991de19977eae
GET /pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg HTTP/1.1
Host: www.zastavki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: text/html
Content-Length: 169
Connection: keep-alive
Location: https://www.zastavki.com/pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg
www.mez.co.uk/dcam/08120001.JPG
217.19.241.215301 Moved Permanently 247 B URL HTTP/1.1 www.mez.co.uk/dcam/08120001.JPG
IP 217.19.241.215:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 054e7326ebd020931178bd46d0b76029
12e3a4ab3c54e73a09cdc8808d1e87ef22ed64cd
ef22aeea44bf589b6ade71694760a85cd4dfdbefa6e847955f0c236995d706a0
GET /dcam/08120001.JPG HTTP/1.1
Host: www.mez.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Sat, 18 Mar 2023 04:56:53 GMT
Server: Apache
Location: https://www.mez.co.uk/dcam/08120001.JPG
Content-Length: 247
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.graphixshare.com/uploads/posts/2011-03-23/1300883065_20_amazing_landscapes_full_hd_wallpapers_1080p.jpg
159.69.186.9404 Not Found 129 B URL HTTP/1.1 www.graphixshare.com/uploads/posts/2011-03-23/1300883065_20_amazing_landscapes_full_hd_wallpapers_1080p.jpg
IP 159.69.186.9:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash d10fe229d5809f3958cf8d3b96275d48
97f9577d54450a9011dbe6576cd6b80e4f028f19
1e00852d70770f57a0491112753a15fe021748e91ee5ab930f16de4ee6001895
GET /uploads/posts/2011-03-23/1300883065_20_amazing_landscapes_full_hd_wallpapers_1080p.jpg HTTP/1.1
Host: www.graphixshare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 404 Not Found
Server: openresty
Date: Sat, 18 Mar 2023 04:51:32 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 10bb1da74cabb050bb1f1af5989d201a
a28a2ce1097c2bbbbd42869df64551a01d2c7de4
180b15454b4cd4d39194bee9ce00122c7cffb85decddb8083d3f1361ea01eb13
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 42f83436dc43fd73cad44b6125599edb
472ce575dd1869f9db269f838016568e67a6df00
29e9c96c054d55859628079cd0c5ef22819b749070862c2d9a344c453a30f36a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.Oupypiulh58.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/cb=gapi.loaded_0?le=scs
172.217.21.174200 OK 61 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.Oupypiulh58.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/cb=gapi.loaded_0?le=scs
IP 172.217.21.174:0
File type ASCII text, with very long lines (1445)
Hash e8ba0e75a21e8131676aeabb448ab32b
a4e9c288bfe50835fd9354b40c6ef670b88a0a13
696d24c2350d7d8ca017aa7d070a0470afd2b9959c46c9f4e6a1d762aaf92706
GET /_/scs/abc-static/_/js/k=gapi.lb.en.Oupypiulh58.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 61020
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 07:35:21 GMT
expires: Thu, 14 Mar 2024 07:35:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 01 Feb 2023 16:56:11 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 249693
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.webwallpapers.net/wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg
172.67.223.127403 Forbidden 2.0 kB URL HTTP/1.1 www.webwallpapers.net/wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg
IP 172.67.223.127:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (501)
Hash 80ac660beddae401e8caa773e281a325
79d01aa875f776a8cd2c1f1794cc0c64682c1e2e
8ce6c7253f0c736846ab9b40a5d06a5ba02e51144d8f22c139140b2b5c693759
GET /wp-content/uploads/2011/07/laetitia-casta-wallpaper-laetitia-casta-hot-sexy-global-babes-big-boobs-laetitia-casta-high-quality-wallpapers-hd-wallpapers-latest-wallpapers-jagodunya-jago-dunya-hollywood-actress-widescreen-wallpapers-1.jpg HTTP/1.1
Host: www.webwallpapers.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 403 Forbidden
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Referer, Accept-Encoding
X-Frame-Options: SAMEORIGIN
Referrer-Policy: same-origin
Cache-Control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ICbutWGyEKrGEdHiLNEbcEdc4%2BglpmcA0WO9ykISMRkgOo0hk8Gi7YNocfn01Ba2ByBkhJnN8JtzhpXoIGkxxTmef2Z6RWXbqpXnQX4wEviRfQOUupMkx%2BhmpfubWhZbyFLWbdRVVPU%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7a9ae44cade20b69-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
image.sportrider.com/f/33777333/146_1006_01%252Bnoriyuki_haga_ducati_xerox_world_superbike_wallpaper_08%252B.jpg
23.36.76.98400 Bad Request 385 B URL HTTP/1.0 image.sportrider.com/f/33777333/146_1006_01%252Bnoriyuki_haga_ducati_xerox_world_superbike_wallpaper_08%252B.jpg
IP 23.36.76.98:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 1b1aae083b3af62161d73ae53d921026
3325d27ac4d93becaf3c1834411706f4c71ac243
002c09273410302142b100736ba9e292c9a8d6b6f8dcfd1584152568a2523efb
GET /f/33777333/146_1006_01%252Bnoriyuki_haga_ducati_xerox_world_superbike_wallpaper_08%252B.jpg HTTP/1.1
Host: image.sportrider.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.0 400 Bad Request
Server: AkamaiGHost
Mime-Version: 1.0
Content-Type: text/html
Content-Length: 385
Expires: Sat, 18 Mar 2023 04:56:54 GMT
Date: Sat, 18 Mar 2023 04:56:54 GMT
Connection: close
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.34200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.34:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Fri, 17 Mar 2023 11:08:47 GMT
Expires: Fri, 31 Mar 2023 11:08:47 GMT
Cache-Control: public, max-age=1209600
Age: 64087
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Last-Modified, Content-Length, Pragma, Expires, ETag, Backoff, Alert, Cache-Control
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 18 Mar 2023 04:14:32 GMT
age: 2542
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.theautochannel.com/news/2003/09/16/168822.1-lg.jpg
172.67.182.161302 Found 284 B URL HTTP/1.1 www.theautochannel.com/news/2003/09/16/168822.1-lg.jpg
IP 172.67.182.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 35ddd488080299d950debf8a89b596f8
3d4b9b6ceac70f1e0e0a37ed07c74ede3c86704b
50f5ef78db8d4dcbb49bf4a07d6e51469fbf39a35cfa5b9597cc206033958a9d
GET /news/2003/09/16/168822.1-lg.jpg HTTP/1.1
Host: www.theautochannel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 302 Found
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: public, max-age=2592000
Display: staticcontent_sol
Location: https://www.theautochannel.com/news/2003/09/16/168822.1-lg.jpg
Pagespeed: off
Response: 302
Vary: Accept-Encoding,Origin
X-Ez-Minify-Html: 14.97% 284 / 334
X-Ezoic-Cdn: Bypass
X-Middleton-Display: staticcontent_sol
X-Middleton-Response: 302
X-Origin-Cache-Control:
CF-Cache-Status: BYPASS
Set-Cookie: ezCMPCCS=false; Path=/; Domain=theautochannel.com; Expires=Mon, 18 Mar 2024 04:56:54 GMT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=q0J7C9nUjdl5tPBn1D43ns4a3zSKm0PwH95Moz3dcAxTNRbO4kxgtlA%2BiJLIoumxz1FBb1Ohc%2F%2FJA0gNCXraUJnlnivZIvwulC1qVg2cVg01ShW3YOqPqSHC%2FuEJdY8qsshDyrttanUG"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7a9ae44b6fd30b02-OSL
alt-svc: h2=":443"; ma=60
3.bp.blogspot.com/-j-gEW2OjbOs/TVWh7Y5ctPI/AAAAAAAAAhk/s6zf07PpjWk/s1600/motojournalism-expeditionportal.jpg
142.250.74.161200 OK 35 kB URL HTTP/1.1 3.bp.blogspot.com/-j-gEW2OjbOs/TVWh7Y5ctPI/AAAAAAAAAhk/s6zf07PpjWk/s1600/motojournalism-expeditionportal.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 500x334, components 3\012- data
Hash 1a83d15598e209c6bfd40ff44c74fef1
31fa8070f678a2a142b505d2a25db7d9640c36ee
ba94c247f9309e2b6608e5c186d77161dbb1ce16564d2ea0c224ab153d22c691
GET /-j-gEW2OjbOs/TVWh7Y5ctPI/AAAAAAAAAhk/s6zf07PpjWk/s1600/motojournalism-expeditionportal.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v219"
Expires: Sun, 19 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="motojournalism-expeditionportal.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: fife
Content-Length: 34816
X-XSS-Protection: 0
www.blogger.com/img/logo-16.png
216.58.207.233200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP 216.58.207.233:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 Mar 2023 05:25:51 GMT
Expires: Thu, 23 Mar 2023 05:25:51 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 Mar 2023 09:52:32 GMT
Content-Type: image/png
Age: 171063
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 21e5b7e0b0bbdb13268bac94092b47b0
e00bd7228114d5288f82b0a1df146d1dd3bcc66a
ebfac34a1309f91b58925f47af6dcd81902875621d1d6ce60fd0c302ed450a89
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 15 Mar 2023 17:25:58 GMT
Expires: Wed, 22 Mar 2023 17:25:57 GMT
Etag: "e00bd7228114d5288f82b0a1df146d1dd3bcc66a"
Cache-Control: max-age=389942,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7a9ae44ddfc7b51d-OSL
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 0a4b141e90b0fb22cf6d10a6a4fd360d
37b081be1a69edb97a7c562b71474f4d7405d94e
5db17bb0a40658845e03d8237a69458a0576d955006ee224930b0310179af9af
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5DB17BB0A40658845E03D8237A69458A0576D955006EE224930B0310179AF9AF"
Last-Modified: Fri, 17 Mar 2023 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3971
Expires: Sat, 18 Mar 2023 06:03:05 GMT
Date: Sat, 18 Mar 2023 04:56:54 GMT
Connection: keep-alive
3.bp.blogspot.com/-JoEnpmQNVdw/TjFQGD6Ml9I/AAAAAAAAABk/JD2nFJyLaHY/s1600/36622_246327.jpg
142.250.74.161200 OK 77 kB URL HTTP/1.1 3.bp.blogspot.com/-JoEnpmQNVdw/TjFQGD6Ml9I/AAAAAAAAABk/JD2nFJyLaHY/s1600/36622_246327.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x877, components 3\012- data
Hash 15214189753cd51ef8f9977abc23e74a
04a005974ba934f62a461f6b8a110e460a324224
dad3c11d38b2aee3f7481b2bc75b6449be14781d00c494036320d222893bd935
GET /-JoEnpmQNVdw/TjFQGD6Ml9I/AAAAAAAAABk/JD2nFJyLaHY/s1600/36622_246327.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19"
Expires: Sun, 19 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="36622_246327.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: fife
Content-Length: 76931
X-XSS-Protection: 0
3.bp.blogspot.com/-mtXwKi9T4NQ/TgeGWg6fptI/AAAAAAAAEkg/uhDUByVutGM/s1600/new-dell%252Bwallpaper-green-natural%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020-1.jpg
142.250.74.161200 OK 72 kB URL HTTP/1.1 3.bp.blogspot.com/-mtXwKi9T4NQ/TgeGWg6fptI/AAAAAAAAEkg/uhDUByVutGM/s1600/new-dell%252Bwallpaper-green-natural%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020-1.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 709x434, components 3\012- data
Hash 1d254ac3f86948df9719595308e38368
1665328f755bcee874705182e2aefe7167364c35
cbb890a0cf4bfa2bf60e3ec923f1a06c7ee969f247bb9c1808171eca17bdd2cd
GET /-mtXwKi9T4NQ/TgeGWg6fptI/AAAAAAAAEkg/uhDUByVutGM/s1600/new-dell%252Bwallpaper-green-natural%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020-1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1248"
Expires: Sun, 19 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="new-dell wallpaper-green-natural wallpaper-dell wallpapers-xps-Dell girl Wallpapers New & Latest desktop wallpaper free hd wallpapers-best Dell-freewallpapermania-2011,2012,2013,2014,2015,2016,2017,2018,2019,2020-1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: fife
Content-Length: 71930
X-XSS-Protection: 0
tsgrad-sob.ru/
172.67.150.41301 Moved Permanently 472 B IP 172.67.150.41:0
Hash aaadb4342e77dc9eeb6c5f7ec0352743
2cd4831c73249b699b0c4c15b4423812b18d30a2
4158f6541dec64dd44ef417a9e0491c2e49eb6d2476728f58208d0e73b94af6c
GET / HTTP/1.1
Host: tsgrad-sob.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 18 Mar 2023 04:56:54 GMT
location: https://protest302.ru/
cache-control: max-age=3600
expires: Sat, 18 Mar 2023 05:56:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=G11SNMRWPs%2FedzvuqNOV2q00%2BGoaJ%2BXb9s7M66n84Plgu9BAgPEukhZN%2BsbnxEN215vna%2FO8CF2vNlX%2FYCIoNUuNNXOFLsPYig%2F6uVSkUAf8aj67b%2FSgx58lIys28j%2Fh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a9ae44c7f0cb51d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3.bp.blogspot.com/-rsINYmoGVgM/TgeGSTfg04I/AAAAAAAAEkY/j4Nyfy4dgFo/s1600/new-dell%252Bwallpaper-brown%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020.jpg
142.250.74.161200 OK 54 kB URL HTTP/1.1 3.bp.blogspot.com/-rsINYmoGVgM/TgeGSTfg04I/AAAAAAAAEkY/j4Nyfy4dgFo/s1600/new-dell%252Bwallpaper-brown%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 718x439, components 3\012- data
Hash c17571cd2b5c409ebbd66288e341ba6a
881622408a748585e306e737d0cba7abebe77d25
d401a03e9fa7362d17da46dbb87b4a98927bed07350c3db98301d8e11f76baf6
GET /-rsINYmoGVgM/TgeGSTfg04I/AAAAAAAAEkY/j4Nyfy4dgFo/s1600/new-dell%252Bwallpaper-brown%252Bwallpaper-dell%252Bwallpapers-xps-Dell%252Bgirl%252BWallpapers%252BNew%252B%252526%252BLatest%252Bdesktop%252Bwallpaper%252Bfree%252Bhd%252Bwallpapers-best%252BDell-freewallpapermania-2011%25252C2012%25252C2013%25252C2014%25252C2015%25252C2016%25252C2017%25252C2018%25252C2019%25252C2020.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1246"
Expires: Sun, 19 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="new-dell wallpaper-brown wallpaper-dell wallpapers-xps-Dell girl Wallpapers New & Latest desktop wallpaper free hd wallpapers-best Dell-freewallpapermania-2011,2012,2013,2014,2015,2016,2017,2018,2019,2020.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: fife
Content-Length: 53486
X-XSS-Protection: 0
keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html&ref=&l=wallpaper
69.162.80.62200 OK 623 B URL HTTP/1.1 keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html&ref=&l=wallpaper
IP 69.162.80.62:0
ASN #46475 LIMESTONENETWORKS
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (623), with no line terminators
Hash 7b327e69fe10760d32d2076b30f3b897
479b8dacc3c11f49246555ae08cc093b739a5299
acc8cfa2893d0bf4c6210801ebe14ac53aeab219daab8e933bdeee1af5dcc211
GET /?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html&ref=&l=wallpaper HTTP/1.1
Host: keywebtracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 623
content-type: text/html; charset=utf-8
date: Sat, 18 Mar 2023 04:56:54 GMT
server: nginx
set-cookie: sid=4de1bb62-c549-11ed-9c24-e4fce292958f; path=/; domain=.keywebtracker.com; expires=Thu, 05 Apr 2091 08:11:01 GMT; max-age=2147483647; HttpOnly
ocsp.globalsign.com/gsrsaovsslca2018
104.18.21.226200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP 104.18.21.226:0
Hash 0083530c9b993b3fd9d5b6ac0664b297
96d43564b596372c747cc0287115d7f3e4765974
b6c4a7f058d858f44dee787dcfc54d06197feeaa69cb0afec80b6718b40037b6
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Wed, 22 Mar 2023 03:20:50 GMT
ETag: "96d43564b596372c747cc0287115d7f3e4765974"
Last-Modified: Sat, 18 Mar 2023 03:20:51 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: HIT
Age: 975
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7a9ae44f68f0b505-OSL
www.zastavki.com/pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg
78.46.64.228200 OK 531 kB URL HTTP/1.1 www.zastavki.com/pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg
IP 78.46.64.228:0
ASN #24940 Hetzner Online GmbH
File type JPEG image data, JFIF standard 1.02, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop CS2 Windows, datetime=2009:08:04 01:53:09], baseline, precision 8, 1440x900, components 3\012- data
Size 531 kB (530590 bytes)
Hash 7279b7ba280b95916e3e189bc769deae
c448b7be3d2eba0d2543321f8fdab5a48c90627d
1e806772e23f7377636c9f8eb5fe8d66858bb7e23ba5353014b8650d60150dee
GET /pictures/1440x900/2009/Creative_Wallpaper_Mud_baths_017167_.jpg HTTP/1.1
Host: www.zastavki.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 18 Mar 2023 04:56:54 GMT
Content-Type: image/jpeg
Content-Length: 530590
Last-Modified: Wed, 05 Aug 2009 22:55:45 GMT
Connection: keep-alive
ETag: "4a7a0df1-8189e"
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Accept-Ranges: bytes
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 44833c9693ab18d200fde052c3002929
58973605045e733f92833523b075fc5af5f5e64b
9e322fbe078c6ca79d2b1fdb515ebf0aa17017197a076ddac34fcb10afef2a45
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
52.89.20.60101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.89.20.60:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: XUlul91WGw1UrBNMTaSF/w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Fuk/I/Ns4+sIHuHS1xiVnJ1YvYQ=
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
142.250.74.132200 OK 667 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP 142.250.74.132:0
File type ASCII text, with very long lines (1034), with no line terminators
Hash cdb4be6c897d5160a051d25052ceda61
05bf135ba2f92c1a86100b124ff5764d8b4c4271
dcebc16a6a39749db62a1393abdf1b393296be2dab6ff4d6c6400a172116d790
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 18 Mar 2023 04:56:55 GMT
date: Sat, 18 Mar 2023 04:56:55 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 667
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.mez.co.uk/dcam/08120001.JPG
217.19.241.215200 OK 116 kB URL HTTP/1.1 www.mez.co.uk/dcam/08120001.JPG
IP 217.19.241.215:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1024x768, components 3\012- data
Size 116 kB (116114 bytes)
Hash f42b22b4df9edd95e022bbba1b73492f
f912940391aeaad91aef34360b597de1d5eb2538
fbb47edc3561d8cd6cd2b2ea22b9deea5d8c2106340a8ab80940fdf00232dae4
GET /dcam/08120001.JPG HTTP/1.1
Host: www.mez.co.uk
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: Apache
Last-Modified: Wed, 15 Apr 2015 21:51:02 GMT
Accept-Ranges: bytes
Content-Length: 116114
Connection: close
Content-Type: image/jpeg
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 10bb1da74cabb050bb1f1af5989d201a
a28a2ce1097c2bbbbd42869df64551a01d2c7de4
180b15454b4cd4d39194bee9ce00122c7cffb85decddb8083d3f1361ea01eb13
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 10bb1da74cabb050bb1f1af5989d201a
a28a2ce1097c2bbbbd42869df64551a01d2c7de4
180b15454b4cd4d39194bee9ce00122c7cffb85decddb8083d3f1361ea01eb13
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
142.250.74.78200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 142.250.74.78:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Sat, 18 Mar 2023 04:56:55 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+317; expires=Mon, 17-Mar-2025 04:56:55 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 18 Mar 2023 04:56:55 GMT
cache-control: private
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash a4fe1012a4d75c602aab58bcff2d9c28
b079e7b9e4da4d67ecdc3e11bff33462bd026899
f7e4c8251356329744c989f9194354f78b9d142a69db8cc5d92ade3d70efcc01
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 18 Mar 2023 04:56:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
142.250.74.78200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 142.250.74.78:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 3000
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sat, 18 Mar 2023 04:56:55 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+434; expires=Mon, 17-Mar-2025 04:56:55 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 18 Mar 2023 04:56:55 GMT
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3389988682-widgets.js
216.58.207.233200 OK 2.7 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3389988682-widgets.js
IP 216.58.207.233:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)
Hash 6a7c905a3022aed313919404ae874048
00ece3b59fb635a74c5512a2e05c9d048cc244e3
2355e2824b5b561b9b9cf51d657b9d5ad2fcc6c50ef04d48203a0dbf864536a7
GET /static/v1/widgets/3389988682-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56895
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 02:04:25 GMT
expires: Thu, 14 Mar 2024 02:04:25 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 15 Mar 2023 00:51:20 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 269549
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
142.250.74.35200 OK 165 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js
IP 142.250.74.35:0
File type ASCII text, with very long lines (576)
Size 165 kB (164678 bytes)
Hash f22f07ee02fbeed3958345c90b52b818
2aa44ea19d580589c06c2170103b4d0505e18cdb
dc1eadf37f70bef92766d0c316d1da7af283b84e5c309a4732d8ed35d7bbfb84
GET /recaptcha/releases/Trd6gj1dhC_fx0ma_AWHc1me/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 164678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 15 Mar 2023 11:44:52 GMT
expires: Thu, 14 Mar 2024 11:44:52 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 13 Mar 2023 02:02:14 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 234723
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
images2.layoutsparks.com/1/226195/dj-dick-the-wheels-31000.jpg
188.114.97.1301 Moved Permanently 33 kB URL HTTP/2 images2.layoutsparks.com/1/226195/dj-dick-the-wheels-31000.jpg
IP 188.114.97.1:0
File type gzip compressed data, from Unix\012- data
Hash 958c0d9a73af0400179eadca467724f8
7aeddb6c84d8b8b8906b6397d995597af76fa7f5
1cd0b54346e52dfd828dd3550d461530e2c84b5063bc19745f56ca2a6b4f1fd7
GET /1/226195/dj-dick-the-wheels-31000.jpg HTTP/1.1
Host: images2.layoutsparks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 18 Mar 2023 04:56:55 GMT
content-type: text/html; charset=UTF-8
location: https://www.layoutsparks.com/category/reviews/
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: max-age=14400, must-revalidate
x-ua-compatible: IE=edge
x-redirect-by: WordPress
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k2h5TzFTtQTZGPYDEdZAql6fqzzJUQT1VFKltRvmxgQIXsfJV5C870%2FBM7drVQYtSZ6hQn0NyS1%2BxM%2BlRG%2F%2B8hXdteSs4Kt%2BTv%2Fn34NdIsPzcy%2FKcbIdzFWumUE32%2FLg6YsvZwHuzNVR6cA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a9ae44d4d62b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true
142.250.74.109302 Found 1.6 kB URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true
IP 142.250.74.109:0
File type gzip compressed data\012- data
Hash 14905d151e20831352a3710517235d73
ffccd6d7236dbdc7387a7efb1a79f82defb13976
a63dcea6e7b24e2626b35bfcb4710ae684262d32d4ed044733653e7aac62ac49
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D2051614043593383512%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D5334462781296692396%26origin%3Dhttp://ideallyidentical2009.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.Oupypiulh58.O/d%253D1/rs%253DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 18 Mar 2023 04:56:54 GMT
location: https://www.blogger.com/followers.g?blogID=2051614043593383512&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=5334462781296692396&origin=http://ideallyidentical2009.blogspot.com/&usegapi=1&jsh=m;/_/scs/abc-static/_/js/k%3Dgapi.lb.en.Oupypiulh58.O/d%3D1/rs%3DAHpOoo_CVmSAWqMsGCHgMRyaSvlE8hY6sw/m%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-gCvCcCA4TLHeK7s39NyrMA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: unsafe-none
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/binary
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
server: GSE
set-cookie: __Host-GAPS=1:aTjIQ7aGDWw6RKgHnnFblDsIi1MIrw:Qh1KTZ0rN7O-NrFy; Expires=Mon, 17-Mar-2025 04:56:54 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
farm3.static.flickr.com/2421/3604188863_5d029d5f63.jpg
54.230.83.83301 Moved Permanently 167 B URL HTTP/1.1 farm3.static.flickr.com/2421/3604188863_5d029d5f63.jpg
IP 54.230.83.83:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /2421/3604188863_5d029d5f63.jpg HTTP/1.1
Host: farm3.static.flickr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 18 Mar 2023 04:56:55 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://farm3.static.flickr.com/2421/3604188863_5d029d5f63.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hkpzRqYQUJY-u__Fi2Utoer2TdosvBNleGH35fWYiCjzFjBzT5muBA==
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
216.58.207.227200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 21:48:03 GMT
expires: Fri, 15 Mar 2024 21:48:03 GMT
cache-control: public, max-age=31536000
age: 112132
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ideallyidentical2009.blogspot.com/favicon.ico
216.58.207.193200 OK 412 B URL HTTP/1.1 ideallyidentical2009.blogspot.com/favicon.ico
IP 216.58.207.193:0
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: ideallyidentical2009.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sat, 18 Mar 2023 04:56:55 GMT
Date: Sat, 18 Mar 2023 04:56:55 GMT
Cache-Control: private, max-age=86400
Last-Modified: Fri, 10 Feb 2023 05:57:57 GMT
ETag: W/"b594d72e3948a77b8bbbfd954531c907daa50c061ceef54d535ce1c9454bb0dd"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
216.58.207.227200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 216.58.207.227:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 16 Mar 2023 17:56:42 GMT
expires: Fri, 15 Mar 2024 17:56:42 GMT
cache-control: public, max-age=31536000
age: 126013
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.r2m01.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m01.amazontrust.com/
IP 54.230.80.227:0
Hash 0a0b9c882a81c8ebfb740f407089029b
5632ad7e0e7fad284ebd74f78fde4e753c4afbb4
c0520ba88d807ac6473498b19dad88a9713701406272b9542e1d2b72a3af589d
POST / HTTP/1.1
Host: ocsp.r2m01.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=148485
Date: Sat, 18 Mar 2023 04:56:55 GMT
Etag: "6414e317-1d7"
Expires: Sun, 19 Mar 2023 22:11:40 GMT
Last-Modified: Fri, 17 Mar 2023 22:00:55 GMT
Server: ECAcc (nya/79F3)
X-Cache: Miss from cloudfront
Via: 1.1 b2b04ca80b95df6bc86478a1bf96b7cc.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: BtHe4YTCKZustnJvhucaUqFDE8ja9dt6unpdXn0totcedI6wdG6WWA==
Age: 645
29.media.tumblr.com/tumblr_lktrjkNxlx1qbsdgzo1_500.jpg
74.114.154.18301 Moved Permanently 166 B URL HTTP/1.1 29.media.tumblr.com/tumblr_lktrjkNxlx1qbsdgzo1_500.jpg
IP 74.114.154.18:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /tumblr_lktrjkNxlx1qbsdgzo1_500.jpg HTTP/1.1
Host: 29.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Sat, 18 Mar 2023 04:56:55 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://64.media.tumblr.com/tumblr_lktrjkNxlx1qbsdgzo1_500.jpg
keywebtracker.com/?blog=http%3A%2F%2Fideallyidentical2009.blogspot.com%2F2011%2F09%2F20-amazing-landscapes-full-hd.html&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3OTEyMjYxNCwiaWF0IjoxNjc5MTE1NDE0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDZtbDRtZTE1M2NzYzYwZm8yMDhlMjUiLCJuYmYiOjE2NzkxMTU0MTQsInRzIjoxNjc5MTE1NDE0ODMzNTAwfQ.SLmfkPCWJj4xb8OcSmXSf0ouc-8UARfXNnXc8crxd3E&l=wallpaper&ref=&scr_h=1024&scr_w=1280&sid=4de1bb62-c549-11ed-9c24-e4fce292958f
69.162.80.62302 Found 11 B URL HTTP/1.1 keywebtracker.com/?blog=http%3A%2F%2Fideallyidentical2009.blogspot.com%2F2011%2F09%2F20-amazing-landscapes-full-hd.html&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3OTEyMjYxNCwiaWF0IjoxNjc5MTE1NDE0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDZtbDRtZTE1M2NzYzYwZm8yMDhlMjUiLCJuYmYiOjE2NzkxMTU0MTQsInRzIjoxNjc5MTE1NDE0ODMzNTAwfQ.SLmfkPCWJj4xb8OcSmXSf0ouc-8UARfXNnXc8crxd3E&l=wallpaper&ref=&scr_h=1024&scr_w=1280&sid=4de1bb62-c549-11ed-9c24-e4fce292958f
IP 69.162.80.62:0
ASN #46475 LIMESTONENETWORKS
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /?blog=http%3A%2F%2Fideallyidentical2009.blogspot.com%2F2011%2F09%2F20-amazing-landscapes-full-hd.html&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3OTEyMjYxNCwiaWF0IjoxNjc5MTE1NDE0LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIydDZtbDRtZTE1M2NzYzYwZm8yMDhlMjUiLCJuYmYiOjE2NzkxMTU0MTQsInRzIjoxNjc5MTE1NDE0ODMzNTAwfQ.SLmfkPCWJj4xb8OcSmXSf0ouc-8UARfXNnXc8crxd3E&l=wallpaper&ref=&scr_h=1024&scr_w=1280&sid=4de1bb62-c549-11ed-9c24-e4fce292958f HTTP/1.1
Host: keywebtracker.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://keywebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//ideallyidentical2009.blogspot.com/2011/09/20-amazing-landscapes-full-hd.html&ref=&l=wallpaper
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 18 Mar 2023 04:56:55 GMT
location: http://click.plarimocl.com/click?i=9T1uykURn4A_0
server: nginx
set-cookie: sid=4de1bb62-c549-11ed-9c24-e4fce292958f; path=/; domain=.keywebtracker.com; expires=Thu, 05 Apr 2091 08:11:02 GMT; max-age=2147483647; HttpOnly
click.plarimocl.com/click?i=9T1uykURn4A_0
174.137.133.17302 Found 0 B URL HTTP/1.1 click.plarimocl.com/click?i=9T1uykURn4A_0
IP 174.137.133.17:0
ASN #27257 WEBAIR-INTERNET
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /click?i=9T1uykURn4A_0 HTTP/1.1
Host: click.plarimocl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://keywebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-store
Content-Length: 0
Age: 0
Connection: keep-alive
Location: http://www.clearclick.xyz/feed/click/?t1=128&tid=24&uid=16&subid=530222&id=01455ef2e92dd8d62db62b60bbcda59e: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
Pragma: no-cache
64.media.tumblr.com/tumblr_lktrjkNxlx1qbsdgzo1_500.jpg
192.0.77.3200 OK 75 kB URL HTTP/2 64.media.tumblr.com/tumblr_lktrjkNxlx1qbsdgzo1_500.jpg
IP 192.0.77.3:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, orientation=upper-left], progressive, precision 8, 500x332, components 3\012- data
Hash 37d260b7da5372cf202b613821c375d2
870863493056140119412aa45b3162da1214f9cc
c0ab4ea2a6942f4f5d6c1daaa0af35f31127e2760915069d76d997921a405ca2
GET /tumblr_lktrjkNxlx1qbsdgzo1_500.jpg HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 18 Mar 2023 04:56:56 GMT
content-type: image/jpeg
content-length: 74689
etag: "eef354ed128bcd83cbf9efd1d47eef35-1498089600-c2d20de"
last-modified: Fri, 20 Nov 2020 05:29:50 GMT
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: MISS arn 5
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=MISS;dur=349.0
X-Firefox-Spdy: h2
www.clearclick.xyz/feed/click/?t1=128&tid=24&uid=16&subid=530222&id=01455ef2e92dd8d62db62b60bbcda59e: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
142.93.240.225302 Found 366 B URL HTTP/1.1 www.clearclick.xyz/feed/click/?t1=128&tid=24&uid=16&subid=530222&id=01455ef2e92dd8d62db62b60bbcda59e:dd18d3907b3b5536f50cb9563c0296b74b150ac9c01514242cf65e8141f17600ea0071bc0c24195840d5f8799b33b167ec8629729c8f559534aeef257012876c88305929e2fbc83c1a45d0e897822606df5d6e3fd044737ee90da672ccc25bf6adb62399fb5d675fb242012a18fa3cd740f863d1307e6ca4c7c5d5a8fb6facd7f2407a630b1393c866bb764dc180c77011ba9570d19bd7294da3c5a8aea5322fe106d51f043710e0a2e610d94b2e2b5f4c5be6e5eb087e5d4a13eb4621fc6a4423f3c5f97602ac2b2a19bd7a92f4f3becc93e575dab52305810313dd24cf4ea95278d8f398432b7e08e34ea3a65044d2adc1b054f49c2c6146cd7d61644ea1eb40789f4b9233b977a708358174804f699c8d0bb88770e93160be7c8d7ca9b28b4ebc292039342a78e17060eef5b512c7a0d2da489922e44a02bf7fb30475bad2da792959e64f6ded69ad6a5f964a7f1350045da25eade0cd38ef2a97eff82e60ac0c0ea1050200c692245eaa2551011133003ab644383141e9a4d4911b5acb68d6199584951d9d1dc2e87b66f9f46f18ad550e0a5914279b600db6287f8e6afc
IP 142.93.240.225:0
ASN #14061 DIGITALOCEAN-ASN
File type HTML document, ASCII text, with very long lines (366), with no line terminators
Hash 2d81bc7e3c14d39fee2f711fd8d2e3a0
4abca84bd3a49ba52e30369186b35f4519c17038
670ff177aef60fd33098619949d06ad18a16dc65c61d2426c58dc492d5018bdc
GET /feed/click/?t1=128&tid=24&uid=16&subid=530222&id=01455ef2e92dd8d62db62b60bbcda59e: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 HTTP/1.1
Host: www.clearclick.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://keywebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
X-Powered-By: Express
Surrogate-Control: no-store
Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate
Pragma: no-cache
Expires: 0
Location: https://uuid-a.akamaihd.net/sb/?r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
Vary: Accept
Content-Type: text/html; charset=utf-8
Content-Length: 366
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
Keep-Alive: timeout=5
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3400
Expires: Sat, 18 Mar 2023 05:53:36 GMT
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3400
Expires: Sat, 18 Mar 2023 05:53:36 GMT
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 84762efcb2e1535ae49fca6c1523df33
93e7f138a491d4276a793c2e5b947195ae69a88c
920778735cfb5f0395bbfa1391cb4e90c547d455cac77c8bb161a0c3b55a6a3f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "920778735CFB5F0395BBFA1391CB4E90C547D455CAC77C8BB161A0C3B55A6A3F"
Last-Modified: Thu, 16 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3400
Expires: Sat, 18 Mar 2023 05:53:36 GMT
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 58ae9b9d874dd977b79bd6f8ad3829f9
070ba3e08796862f511f3313c99d863539696313
ef4738171c6cc5a2c2f725e5a32d65b3de38ba8bbbed72a52f724476ba764a42
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6a34f4ab-d2e4-48aa-b1d4-ba1513efdd5c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10029
x-amzn-requestid: ee521485-7d70-46d3-b7e6-7f38e1ca0f01
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eR6GiMIAMFjUg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dda5-3d5d5d5d37b1ed8e250d2146;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: qqVri7BrFPm419PBmAnW-QQpwBf99IMBD8R1zLTvJzpNUJrXCJf2cg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 29a825d8a219984d47bec4350779b558.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 21:44:56 GMT
age: 25920
etag: "070ba3e08796862f511f3313c99d863539696313"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.theautochannel.com/news/2003/09/16/168822.1-lg.jpg
172.67.182.161200 OK 96 kB URL HTTP/2 www.theautochannel.com/news/2003/09/16/168822.1-lg.jpg
IP 172.67.182.161:0
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 1516x1008, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash df9d339870b9d91c465df24409698cb3
9cd2403a2f60642ae4be096e12be6973226d3f78
c5c842cfb25f9123f97deb9f98bde12f903e5316e57627f8d0b2180998519132
GET /news/2003/09/16/168822.1-lg.jpg HTTP/1.1
Host: www.theautochannel.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 18 Mar 2023 04:56:55 GMT
content-type: image/webp
cache-control: public, max-age=604800
display: staticcontent_sol
etag: W/"1a22a-3c77a1dbd1340-gzip"
expires: Sun, 19 Mar 2023 04:56:55 GMT
last-modified: Tue, 14 Mar 2023 16:00:53 GMT
response: 200
vary: Accept-Encoding,Referer,Origin
x-ezoic-cdn: Bypass
x-ezoic-excludewebp: false
x-middleton-display: staticcontent_sol
x-middleton-response: 200
x-origin-cache-control: max-age=86400
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gRSSOnzm2hykC8WOpn0D29%2F%2BRYVaLyS%2FgB1eTTTr0Hg6LPdLblJJCW%2F%2FHtQOxIpFvie9j%2Fdc3Ui5eFGmXN3kTU%2FPpNWzotfFS%2FUrgqgOV59ifw4OdR%2F95FdBh97d%2FOv7a0uEln7kGyXD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a9ae44dfade0b4d-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 78453ba98b72eff3879ef163b59c86ed
80519bb3726ee1f9f211344cd433cefaed3a7f2e
61adfeff11af9583355ac7d1500e8a8d97357b2846f151f2421001994fb06655
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8afa2cdb-a5f3-4c78-a2ab-132c8b752b4b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10338
x-amzn-requestid: 9f880b5b-056c-44bb-a811-36ea27c232aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: BvSgFGENoAMFuVw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-640f9799-2318d444248f7610300c658f;Sampled=0
x-amzn-remapped-date: Mon, 13 Mar 2023 21:37:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: bka10YWXvoKBRkwgvJNMzm1SSv_J1USzdugO9lPduHxe2uYFYkXh4w==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 e11ee4e3208082d534c251b36bbee268.cloudfront.net (CloudFront), 1.1 google
date: Sat, 18 Mar 2023 04:25:40 GMT
age: 1876
etag: "80519bb3726ee1f9f211344cd433cefaed3a7f2e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73df505e-b565-4d75-8efb-4fc67fa32f32.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73df505e-b565-4d75-8efb-4fc67fa32f32.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6b438c8b7277d45cfa5950ed91d7406f
b1e3dcccc866a3e7463083d8ad2f7fdd21e34b55
dfd13c27d11b27dab235aa1fb2f2bacb92252bbf2c6f8f3632596768c12973e8
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F73df505e-b565-4d75-8efb-4fc67fa32f32.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11232
x-amzn-requestid: b78c85c9-0f97-48b4-9f39-1d8a1954f62a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eR7FYKoAMF8pA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dda5-262f5b2048fe6d10662b7320;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:41 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: AD5vuBydSt2wU77rATzBkkVGQs6gfK4q_3y5A_AJLal7vzZ4_o8OBg==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 3f3347264bcaae7af741e2a2f692c6a0.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 22:05:35 GMT
age: 24681
etag: "b1e3dcccc866a3e7463083d8ad2f7fdd21e34b55"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7f53bb1fb90c97461035e7f9f7f7837e
961b5fcbca5b49ca9136e74931253bb300aa1985
dad960991444a4cbd8841e5c673b0e4337bdeb8c18672b5cfadb93d4ac70e8d2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a465734-2031-4538-bcbc-9d828ea81250.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11673
x-amzn-requestid: 3675d2d9-47ab-4712-9511-0ad7570dd3cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eNfFXSIAMFbhQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dd89-53c9817044fda17b212f0237;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: RYqMTTPdmeDjKu7jhuuUFEn4Y420mbCQcZ8LN-vI9oBJ8LBkZEv0Ig==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 ef8f66c83aecd87910ce2e1153544a20.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 22:05:35 GMT
age: 24681
etag: "961b5fcbca5b49ca9136e74931253bb300aa1985"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f030924-26fe-4a36-bf48-11d8ccfe470b.png
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f030924-26fe-4a36-bf48-11d8ccfe470b.png
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 772-769, spot sensor temperature 0.000000, unit celsius, color scheme 0, minimum point enabled, calibration: offset 0.000000, slope 1115717714480204991250653249536.000000\012- data
Hash 7c6233f649c3f84fcba3d244b3e5c35d
2820939892ab0d9b7c995043dc0f38642ac1e415
1ff87957f29a41db7bcbfcbc644cd434705b046b32e8d01467ec6b8c9f75c77b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f030924-26fe-4a36-bf48-11d8ccfe470b.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12699
x-amzn-requestid: ebcd4e4c-f214-463e-a2c9-1392f278d6d9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: B8eSgGFOIAMFt8A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6414dda9-5ec892ee018fe3d118df30d6;Sampled=0
x-amzn-remapped-date: Fri, 17 Mar 2023 21:37:45 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: Xm-KvGwI47UAZpwvXtnkLrSo18bFGJIdPrSvw3AayrUqyWVHlgbkqA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 82c2ab57bc9900898383f6b70681b9e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 17 Mar 2023 21:55:54 GMT
age: 25262
etag: "2820939892ab0d9b7c995043dc0f38642ac1e415"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
uuid-a.akamaihd.net/sb/?r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
23.36.76.99302 Moved Temporarily 154 B URL HTTP/1.1 uuid-a.akamaihd.net/sb/?r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
IP 23.36.76.99:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /sb/?r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D HTTP/1.1
Host: uuid-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://keywebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiNetStorage
Content-Length: 154
Content-Type: text/html
Location: /sb/?cc=1&r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
Set-Cookie: b53eedc13__=38965e107fac8389f2b919639fdf17dbfaa331ad5.1679115416; expires=Sun, 17 Mar 2024 04:56:56 GMT; domain=.akamaihd.net; path=/; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
P3P: CP="We do not have a P3P policy."
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
ETag: "6558d9a5dda24e8cad3ddca92e03b4c6:1666638465.144293"
Expires: Sat, 18 Mar 2023 04:56:56 GMT
Cache-Control: max-age=0, no-cache, no-store, private
Pragma: no-cache
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
uuid-a.akamaihd.net/sb/?cc=1&r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
23.36.76.99302 Moved Temporarily 154 B URL HTTP/1.1 uuid-a.akamaihd.net/sb/?cc=1&r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D
IP 23.36.76.99:0
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 52558d05355ee6e9d14ff3cf8a5a3ef0
52cfd7dd3859dc0578849a7b1c91bb8f91ad84c2
bac5546ea0f819f461c9023592ec2398a45a6c3aab78e55fed8b7c908dce6060
GET /sb/?cc=1&r=https%3A%2F%2Fpohke6chohhae.com%2Fclick%3Fc%3D4e2e1281c54911ed9e680242ac110003%26i%3D836%26n%3D218%26subid%3D24_530222%26sid%3D HTTP/1.1
Host: uuid-a.akamaihd.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://keywebtracker.com/
Connection: keep-alive
Cookie: b53eedc13__=38965e107fac8389f2b919639fdf17dbfaa331ad5.1679115416
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 302 Moved Temporarily
Server: AkamaiNetStorage
Content-Length: 154
Content-Type: text/html
Location: https://pohke6chohhae.com/click?c=4e2e1281c54911ed9e680242ac110003&i=836&n=218&subid=24_530222&sid=38965e107fac8389f2b919639fdf17dbfaa331ad5
Set-Cookie: b53eedc13__=38965e107fac8389f2b919639fdf17dbfaa331ad5.1679115416; expires=Sun, 17 Mar 2024 04:56:56 GMT; domain=.akamaihd.net; path=/; HttpOnly; SameSite=None; Secure
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: *
P3P: CP="We do not have a P3P policy."
Alt-Svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
ETag: "6558d9a5dda24e8cad3ddca92e03b4c6:1666638465.144293"
Expires: Sat, 18 Mar 2023 04:56:56 GMT
Cache-Control: max-age=0, no-cache, no-store, private
Pragma: no-cache
Date: Sat, 18 Mar 2023 04:56:56 GMT
Connection: keep-alive
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash be7a866a8d9e10bde514a452fdf2b888
681493ed8d7fb79fe8b156f98aad714165ad0762
eca974d18ced34f7c9fd9e070fdbe322f39216378b791ac45f58b704c6b25856
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=162898
Date: Sat, 18 Mar 2023 04:56:56 GMT
Etag: "64151a10-1d7"
Expires: Mon, 20 Mar 2023 02:11:54 GMT
Last-Modified: Sat, 18 Mar 2023 01:55:28 GMT
Server: ECAcc (bsa/EA9D)
X-Cache: Miss from cloudfront
Via: 1.1 227a1815a1677b9cf6dd587e443000b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: YXtVG1DPL1ZFg_GrpMV-bwhNTEMRU5Yn1Vg1eA9yYfvfdNrcKiNxMA==
Age: 986
pohke6chohhae.com/click?c=4e2e1281c54911ed9e680242ac110003&i=836&n=218&subid=24_530222&sid=38965e107fac8389f2b919639fdf17dbfaa331ad5
54.226.54.121200 OK 322 B URL HTTP/2 pohke6chohhae.com/click?c=4e2e1281c54911ed9e680242ac110003&i=836&n=218&subid=24_530222&sid=38965e107fac8389f2b919639fdf17dbfaa331ad5
IP 54.226.54.121:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (529)
Hash 64e7ec9416c7c3ac3264431d6566f6c6
876911689e30f7b888e7a6503016a9c645e31a5a
467db0f74ea3c2eada08d286e2b01f76e9261a6c62b47a90baba709b16946a96
GET /click?c=4e2e1281c54911ed9e680242ac110003&i=836&n=218&subid=24_530222&sid=38965e107fac8389f2b919639fdf17dbfaa331ad5 HTTP/1.1
Host: pohke6chohhae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://keywebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 18 Mar 2023 04:56:56 GMT
content-type: text/html;charset=utf-8
content-length: 322
expires: Thu, 01 Jan 1970 00:00:00 GMT
p3p: CP="CUR ADM OUR NOR STA NID"
link: <http://pohke6chohhae.com>; rel=dns-prefetch,<http://pohke6chohhae.com>; rel=preconnect,<http://pohke6chohhae.com>; rel=preconnect
content-security-policy: default-src pohke6chohhae.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src pohke6chohhae.com 'self'
x-content-security-policy: default-src pohke6chohhae.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src pohke6chohhae.com 'self'
x-webkit-csp: default-src pohke6chohhae.com 'self' 'unsafe-inline'; script-src 'self' 'unsafe-inline'; connect-src pohke6chohhae.com 'self'
accept-ch: viewport-width, dpr, device-memory, rtt, downlink, ect, sec-ch-ua, sec-ch-ua-mobile, sec-ch-ua-full-version, sec-ch-ua-platform, sec-ch-ua-platform-version, sec-ch-ua-arch, sec-ch-ua-model
set-cookie: tp_usr=4e2e1282c54911ed9e680242ac110003; Path=/; Domain=.pohke6chohhae.com; Expires=Mon, 17-Apr-2023 04:56:56 GMT; Max-Age=2592000; Secure; SameSite=None
cdt=1679115416849
vary: Accept-Encoding, User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
pohke6chohhae.com/cs
54.226.54.121200 OK 55 B IP 54.226.54.121:0
File type ASCII text, with no line terminators
Hash 7b3582d1914bed7d70f9baccb5ef84f3
4a2b663d1f6c3a569e8b3bceb4061225e84d0f74
56b5ff57aa8be7f82ce126164db301824746568369744267d25fedc97cb04fba
GET /cs HTTP/1.1
Host: pohke6chohhae.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 18 Mar 2023 04:56:57 GMT
Content-Length: 55
Connection: keep-alive
Vary: Accept-Encoding, User-Agent
Content-Encoding: gzip
farm3.static.flickr.com/2421/3604188863_5d029d5f63.jpg
54.230.83.83200 OK 0 B URL HTTP/2 farm3.static.flickr.com/2421/3604188863_5d029d5f63.jpg
IP 54.230.83.83:0
GET /2421/3604188863_5d029d5f63.jpg HTTP/1.1
Host: farm3.static.flickr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/jpeg
date: Sat, 18 Mar 2023 04:56:55 GMT
edge-control: public, max-age=31536000
surrogate-control: public, max-age=31536000
cache-control: public, max-age=31536000
expires: Sun, 17 Mar 2024 04:56:56 GMT
imagewidth: 500
imageheight: 334
last-modified: Tue, 19 Feb 2019 23:55:57 GMT
etag: "7def13b45401cdeb89ecfb2cef05ed57.1"
streaming: false
origintype: X
server: Jubilee
quote: "I'm not a kid anymore, I'm one of you, one of the X-Men. It means more to me than anything in the world."
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
powered-by: Mutation/1.0
hiring: Change the world of photography with us. https://www.flickr.com/jobs/
ourvalues: Empower Passion (#5 of 5)
x-request-id: 58d6a6ac
x-frame-options: DENY
p3p: CP="This is not a P3P policy. We respect your privacy."
x-env: a=live, b=jubilee, c=21738c41, e=57ff0640092cb6b0db3735df07a7742299b2307d
x-ttfb: 0.1379
x-ttdb-l: 84630
mib: 2
x-cache: Miss from cloudfront
via: 1.1 15d199af49035dc206cb81292fd87de2.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: brWu2KWCk_Y8e48a7AlGioY369DdU2XhpCKb1wTs0G_PTrn17psx6g==
X-Firefox-Spdy: h2
protest302.ru/
188.114.96.1301 Moved Permanently 0 B IP 188.114.96.1:0
GET / HTTP/1.1
Host: protest302.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Sat, 18 Mar 2023 04:56:54 GMT
location: https://secrets.tinkoff.ru/razvitie/
cache-control: max-age=3600
expires: Sat, 18 Mar 2023 05:56:54 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sXOqyizAihtVXMmrieWT4oYQL3n9fR0JNDVkfQK9ErD0Ua%2F26ftiuVJ4TE6314czZbZsil1Py%2FgcRRCeedk4hZvUI3462wUQ3qbjoLxZUlb1CWNKsjMfbGcqd%2FOy%2BQnA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7a9ae44d7871b511-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3.bp.blogspot.com/_isKFOMSi8Ck/S85yoQclfcI/AAAAAAAAA48/mS1Um3y5whU/s1600/bedroom.jpg
142.250.74.161200 OK 0 B URL HTTP/1.1 3.bp.blogspot.com/_isKFOMSi8Ck/S85yoQclfcI/AAAAAAAAA48/mS1Um3y5whU/s1600/bedroom.jpg
IP 142.250.74.161:0
GET /_isKFOMSi8Ck/S85yoQclfcI/AAAAAAAAA48/mS1Um3y5whU/s1600/bedroom.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ideallyidentical2009.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v38f"
Expires: Sun, 19 Mar 2023 04:56:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bedroom.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 18 Mar 2023 04:56:54 GMT
Server: fife
Content-Length: 150379
X-XSS-Protection: 0
games.lisisoft.com/img/1/7/1723-1-tank-assault.jpg
104.21.82.216404 Not Found 0 B URL HTTP/2 games.lisisoft.com/img/1/7/1723-1-tank-assault.jpg
IP 104.21.82.216:0
GET /img/1/7/1723-1-tank-assault.jpg HTTP/1.1
Host: games.lisisoft.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Sat, 18 Mar 2023 04:56:54 GMT
content-type: text/html; charset=UTF-8
last-modified: Thu, 19 Oct 2017 06:33:55 GMT
x-xss-protection: 1; mode=block
cache-control: no-cache, no-store, must-revalidate
pragma: no-cache
expires: 0
vary: User-Agent, Accept-Encoding
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5O4h8u94oPrCij4w3mLuE3SYD5xDfGT6GYmwWygbucb567Gm9RsqalUhWaebVMftqoyi8pvTCeN5j6x%2B2tf5L55xxz8o4p70UWRiAB71zQeNYAFIqOakOYj93lrEYQ57p095AhA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7a9ae44d3a70b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
secrets.tinkoff.ru/razvitie/
178.248.239.2200 OK 0 B URL HTTP/1.1 secrets.tinkoff.ru/razvitie/
IP 178.248.239.2:0
GET /razvitie/ HTTP/1.1
Host: secrets.tinkoff.ru
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ideallyidentical2009.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
server: nginx
date: Sat, 18 Mar 2023 04:56:55 GMT
content-type: text/html; charset=utf-8
transfer-encoding: chunked
x-nextjs-cache: HIT
etag: "9vdg8lg87o22b5"
cache-control: no-cache
vary: Accept-Encoding
content-encoding: gzip
x-envoy-upstream-service-time: 8