Overview

URLjosh-morgan-subways-news.blogspot.dk/2011/09/10-dodge-ram-2009-2010-600x400.html
IP 142.250.74.33 (United States)
ASN#15169 GOOGLE
UserAgentMozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Referer
Access lock_open
Report completed2022-12-10 10:06:53 UTC
StatusLoading report..
IDS alerts0
Blocklist alert10
urlquery alerts No alerts detected
Tags None

Domain Summary (51)

Fully Qualifying Domain Name Rank First Seen Last Seen Sent bytes Received bytes IP Comment
www.supercars.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 816 1180 192.124.249.160
ocsp.starfieldtech.com (1) 6616 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 346 2353 192.124.249.22
ww1.lostwebtracker.com (12) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 4683 57697 199.59.243.222
afs.googleusercontent.com (3) 12123 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1382 3639 172.217.21.161
resources.blogblog.com (1) 13274 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 440 937 142.250.74.73
www.todayandtomorrow.net (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 361 717 85.13.142.141
2-photos.ebizautos.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 382 1596 54.230.111.97
1.bp.blogspot.com (1) 8403 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 469 37577 142.250.74.65
partner.googleadservices.com (1) 798 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 471 908 216.58.207.226
articles.dashzracing.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 383 98 18.119.154.66
lostwebtracker.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1529 1446 192.187.111.220
img-getpocket.cdn.mozilla.net (6) 1631 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3246 54580 34.120.237.76
r3.o.lencr.org (4) 344 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1352 3545 23.36.77.32
ocsp.pki.goog (22) 175 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 7546 15391 142.250.74.131
www.caradvice.com.au (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 376 319 104.18.160.38
push.services.mozilla.com (1) 2140 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 606 127 54.148.84.125
rlv.zcache.com (2) 39396 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 832 21093 151.101.128.241
tinypic.com (1) 94220 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 327 16080 143.204.55.64
images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com (1) 13747 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1046 140207 34.96.91.138
fonts.googleapis.com (2) 8877 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 802 2796 142.250.74.74
contile.services.mozilla.com (1) 1114 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 333 391 34.117.237.239
apis.google.com (2) 105 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 942 80771 142.250.74.46
arabcrunch.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 820 1274 172.67.218.56
apetcher.files.wordpress.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 772 1918 192.0.72.20
www.drive.com.au (2) 447996 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 824 662 104.19.150.51
4l3000.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 372 292 122.10.121.121
www.gstatic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 441 163959 142.250.74.3
josh-morgan-subways-news.blogspot.com (3) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1175 19735 172.217.21.161
ocsp.digicert.com (5) 86 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1705 3051 93.184.220.29
www.oldclassiccar.co.uk (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 776 65092 217.160.0.4
www.modifiedcars.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 357 286 64.190.63.111
ocsp.sectigo.com (2) 487 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 680 1928 104.18.32.68
farm2.static.flickr.com (2) 226277 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 69290 143.204.48.75
www.blogger.com (7) 8975 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 3146 104633 142.250.74.73
th05.deviantart.net (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 379 437 35.164.123.148
www.google.com (2) 7 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 810 107986 142.250.74.164
www.worldtopcars.org (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 377 745 50.87.145.58
i34.tinypic.com (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 323 376 143.204.55.72
lh3.ggpht.com (1) 7184 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 402 1063 142.250.74.65
play.google.com (2) 34 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1048 1823 142.250.74.110
img528.imageshack.us (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 341 320 38.99.77.16
josh-morgan-subways-news.blogspot.dk (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 411 711 172.217.21.161
firefox.settings.services.mozilla.com (2) 867 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 782 2374 35.241.9.150
carsconcept.info (1) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 397 1400 104.21.29.69
accounts.google.com (1) 81 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1512 2178 216.58.211.13
www.team-bhp.com (2) 213130 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 948 1598 172.67.68.54
fonts.gstatic.com (4) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 1983 66147 142.250.74.3
content-signature-2.cdn.mozilla.net (1) 1152 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 413 5844 34.160.144.191
ddspictures.files.wordpress.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 778 128673 192.0.72.28
image.motortrend.com (2) 0 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 910 582 95.101.10.96
pagead2.googlesyndication.com (1) 101 0001-01-01T00:00:00Z 0001-01-01T00:00:00Z 332 656 142.250.74.66

Network Intrusion Detection Systemsinfo

Suricata /w Emerging Threats Pro
 No alerts detected

Blocklists

OpenPhish
 No alerts detected

PhishTank
 No alerts detected

Fortinet's Web Filter
Scan Date Severity Indicator Comment
2022-12-10 medium josh-morgan-subways-news.blogspot.dk/2011/09/10-dodge-ram-2009-2010-600x400.html Malware
2022-12-10 medium josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x40 (...) Malware
2022-12-10 medium josh-morgan-subways-news.blogspot.com/js/cookienotice.js Malware
2022-12-10 medium ww1.lostwebtracker.com/ Malware
2022-12-10 medium ww1.lostwebtracker.com/js/parking.2.100.2.js Phishing
2022-12-10 medium ww1.lostwebtracker.com/_fd Phishing
2022-12-10 medium ww1.lostwebtracker.com/ Malware
2022-12-10 medium ww1.lostwebtracker.com/js/parking.2.100.2.js Phishing
2022-12-10 medium ww1.lostwebtracker.com/_fd Phishing
2022-12-10 medium ww1.lostwebtracker.com/_tr Phishing

mnemonic secure dns
 No alerts detected

Quad9 DNS
 No alerts detected


Files

No files detected

Recent reports on same IP/ASN/Domain/Screenshot

Last 5 reports on IP: 142.250.74.33
Date UQ / IDS / BL URL IP
2023-06-06 14:48:04 UTC 0 - 4 - 166 on0yfeswu-xn--ebtdefpo-xn----c1ac4bxc-xn----p (...) 142.250.74.33
2023-06-06 14:22:14 UTC 0 - 4 - 166 khlnnppru-xn--g7e8ijid-xn----c1ac4bxc-xn----p (...) 142.250.74.33
2023-06-05 13:06:56 UTC 3 - 4 - 2 ycyds2rbumb3tpqs5tmy2aghu5cz6j4h4mwnk7vev5txe (...) 142.250.74.33
2023-05-30 09:45:01 UTC 3 - 3 - 2 qysgwv3l45gwh3dfzgperjbcopurh2x72x4p6isppf5e7 (...) 142.250.74.33
2023-05-29 05:08:29 UTC 3 - 3 - 3 rbg5z5oe2zwb4qyxezuusxqia75pqh7jwbdg3qn4jhtk5 (...) 142.250.74.33


Last 5 reports on ASN: GOOGLE
Date UQ / IDS / BL URL IP
2023-06-07 02:45:46 UTC 0 - 0 - 1 172.217.21.46 172.217.21.46
2023-06-07 02:44:20 UTC 0 - 3 - 0 plazapiroka.blogspot.com/ 172.217.21.161
2023-06-07 02:41:25 UTC 0 - 0 - 2 526530ac-a86c-4676-af05-86f5fe612f42.usrfiles (...) 34.102.176.152
2023-06-07 02:23:31 UTC 0 - 2 - 0 fgmscale.it/wp-content/plugins/cached_data/k1.exe 35.215.71.231
2023-06-07 02:12:53 UTC 0 - 2 - 0 shoptinhoc123.blogspot.ca/search/label/text/P (...) 172.217.21.161


Last 5 reports on domain: josh-morgan-subways-news.blogspot.dk
Date UQ / IDS / BL URL IP
2023-06-01 21:59:48 UTC 0 - 0 - 3 josh-morgan-subways-news.blogspot.dk/2011/09/ (...) 172.217.21.161
2023-03-21 20:52:14 UTC 0 - 0 - 6 josh-morgan-subways-news.blogspot.dk/2011/09/ (...) 142.250.74.1
2023-02-26 10:55:30 UTC 0 - 0 - 3 josh-morgan-subways-news.blogspot.dk/ 142.250.74.1
2022-11-24 06:29:02 UTC 0 - 0 - 7 josh-morgan-subways-news.blogspot.dk/2011/10/ (...) 142.250.74.161
2022-12-14 20:42:09 UTC 0 - 0 - 3 josh-morgan-subways-news.blogspot.dk/2011/09/ (...) 172.217.21.161


Last 5 reports with similar screenshot
Date UQ / IDS / BL URL IP
2022-11-27 07:26:42 UTC 0 - 0 - 8 lamborghini-diablo-vt-news.blogspot.com.es/20 (...) 142.250.74.161
2022-11-26 06:53:18 UTC 0 - 0 - 8 bianca-balti-candids1007.blogspot.in/2011/10/ (...) 142.250.74.161
2022-11-26 03:18:02 UTC 0 - 0 - 8 bianca-balti-candids1007.blogspot.it/ 142.250.74.161
2022-11-26 01:02:30 UTC 0 - 0 - 7 agfagto-festival-news.blogspot.com/search/lab (...) 142.250.74.161
2022-11-25 08:26:14 UTC 0 - 0 - 7 plymouth-valiant-1970-news.blogspot.com/searc (...) 142.250.74.161

JavaScript

Executed Scripts (62)

Executed Evals (6)
#1 JavaScript::Eval (size: 64) - SHA256: 115c2cd05cb70229863899ca2e056679642ce900998f36d057f93d4c40332a56
0,
function(h, X, F) {
    v((X = (F = (X = l(h), l(h)), h.P[X]) && c(X, h), F), h, X)
}
#2 JavaScript::Eval (size: 15556) - SHA256: b2114ca8069486d06bb9a9a5f5547e7cfe4fe5ef5447857d285247e2d41bf138
/* Anti-spam. Want to say hello? Contact (base64) Ym90Z3VhcmQtY29udGFjdEBnb29nbGUuY29t */
(function() {
    var Y = function(V) {
            return V
        },
        y = this || self,
        F = function(V, h) {
            if (!(V = (h = null, y.trustedTypes), V) || !V.createPolicy) return h;
            try {
                h = V.createPolicy("bg", {
                    createHTML: Y,
                    createScript: Y,
                    createScriptURL: Y
                })
            } catch (W) {
                y.console && y.console.error(W.message)
            }
            return h
        };
    (0, eval)(function(V, h) {
        return (h = F()) && 1 === V.eval(h.createScript("1")) ? function(W) {
            return h.createScript(W)
        } : function(W) {
            return "" + W
        }
    }(y)(Array(7824 * Math.random() | 0).join("\n") + '(function(){var l=function(V,W){if(V.v)return V0(V,V.h);return(W=f(true,8,V),W)&128&&(W^=128,V=f(true,2,V),W=(W<<2)+(V|0)),W},D=this||self,ue=function(V,W,Y,y,x){for(x=(V.wv=(V.kt=(V.SH=hB,V.h5=WZ,V[r]),V.ih=YR({get:function(){return this.concat()}},V.l),e)[V.l](V.ih,{value:{value:{}}}),[]),y=0;128>y;y++)x[y]=String.fromCharCode(y);U(true,true,(Z(((Z([(m(V,54,(m(V,(m(V,(m(V,93,(v(461,(v(302,(m(V,246,(m(V,443,(m(V,(v(386,(m(V,(m(V,94,(m((m(V,242,(m(V,(v(398,V,(m(V,(v(222,V,(m(V,83,(m(V,(m(V,69,(m(V,188,(v(400,(v(127,V,(V.C2=(m(V,(m(V,(v(451,V,(m(V,(m(V,(m(V,(m(V,298,((v(91,(v(433,(V.jH=(m(V,(m(V,464,((m(V,405,(v(344,V,T((v(197,(v(39,V,(V.UU=(V.bh=function(h){this.i=h},(((V.EU=false,V).B=(V.O=void 0,false),V).Y=(V.W=[],V.WJ=[],(V.u=void 0,y=window.performance||{},V).g=(V.A=(V.R=8001,void 0),25),V.G=[],V.I=0,0),V.F=1,V.N=0,(V.V=(V.i=V,[]),V).Z=null,V.P=(V.D=false,[]),V.v=void 0,V.J=(V.h=void 0,[]),V).C=(V.T=void 0,V.X=0,V.J5=0,0),(V.j=0,V.K=void 0,y.timeOrigin)||(y.timing||{}).navigationStart||0),0)),V),0),4))),function(h,X,F){(F=(X=l(h),l(h)),v)(F,h,""+c(X,h))})),v)(476,V,D),function(h,X,F,K,R){for(X=(K=XY((R=l(h),h)),[]),F=0;F<K;F++)X.push(q(h));v(R,h,X)})),104),function(h,X,F,K){K=(F=(X=l(h),l(h)),l)(h),v(K,h,c(X,h)||c(F,h))}),0),V),472),V),[]),m)(V,330,function(h){xR(h,4)}),function(h,X,F){d(true,false,X,h)||(X=l(h),F=l(h),v(F,h,function(K){return eval(K)}(FY(c(X,h.i)))))})),474),function(h,X,F,K,R,S){d(true,false,X,h)||(F=fh(h.i),S=F.s,K=F.PJ,X=F.OU,F=F.S,R=F.length,S=0==R?new K[S]:1==R?new K[S](F[0]):2==R?new K[S](F[0],F[1]):3==R?new K[S](F[0],F[1],F[2]):4==R?new K[S](F[0],F[1],F[2],F[3]):2(),v(X,h,S))}),168),function(h,X,F,K){v((X=(K=(F=(K=l((X=l(h),h)),l(h)),c)(K,h),c(X,h)),F),h,X in K|0)}),388),function(h,X,F,K){F=l((K=(X=l(h),q)(h),h)),v(F,h,c(X,h)>>>K)}),[0,0,0])),452),function(h,X,F,K,R){(K=c((R=c((F=(F=(K=l((X=l(h),h)),l(h)),R=l(h),c)(F,h),R),h),K),h),v)(X,h,Sf(K,R,F,h))}),291),function(h,X,F,K,R){0!==(X=c((F=(R=c((K=c((F=(K=(R=l((X=l(h),h)),l(h)),l)(h),K),h),R),h),c)(F,h),X),h.i),X)&&(K=Sf(K,1,F,h,X,R),X.addEventListener(R,K,g),v(400,h,[X,R,K]))}),0),{})),V),0),function(h,X,F){(F=le((F=(X=(F=l(h),l(h)),c(F,h)),F)),v)(X,h,F)})),function(h,X,F,K){v((K=(X=(F=(K=l(h),l(h)),l(h)),c(K,h)),F=c(F,h),X),h,+(K==F))})),144),function(h){xR(h,1)}),function(h){Rk(h,4)})),V.y$=0,[])),219),function(h,X,F,K){F=l((K=l((X=l(h),h)),h)),h.i==h&&(F=c(F,h),K=c(K,h),c(X,h)[K]=F,385==X&&(h.u=void 0,2==K&&(h.A=f(false,32,h),h.u=void 0)))}),2048)),401),function(h,X,F,K){v((K=(F=c((X=(F=(K=l(h),l(h)),l(h)),F),h),c(K,h)),X),h,K[F])}),function(h,X){DP((X=c(l(h),h),h.i),X)})),V),270,function(){}),function(h,X,F,K){(K=c((X=(K=l(h),l(h)),F=c(X,h),K),h),v)(X,h,F+K)})),314),function(h,X){(h=(X=l(h),c)(X,h.i),h[0]).removeEventListener(h[1],h[2],g)}),V),0),448),function(h){Rk(h,3)}),function(h,X,F){0!=(X=l(h),F=l(h),F=c(F,h),c(X,h))&&v(39,h,F)})),function(h,X,F,K,R,S,O,u,p,b,C,Q){function w(J,H){for(;O<J;)S|=q(h)<<O,O+=8;return O-=(H=S&(1<<J)-1,J),S>>=J,H}for(F=u=(p=(b=(R=(S=(X=l(h),O=0),(w(3)|0)+1),w(5)),[]),0);u<b;u++)C=w(1),p.push(C),F+=C?0:1;for(Q=(F=(u=((F|0)-1).toString(2).length,0),[]);F<b;F++)p[F]||(Q[F]=w(u));for(u=0;u<b;u++)p[u]&&(Q[u]=l(h));for(K=[];R--;)K.push(c(l(h),h));m(h,X,function(J,H,N,y0,M){for(N=(H=(y0=[],0),[]);H<b;H++){if(!(M=Q[H],p[H])){for(;M>=N.length;)N.push(l(J));M=N[M]}y0.push(M)}J.v=ok(K.slice(),J),J.h=ok(y0,J)})})),V),V),V),[160,0,0]),m(V,77,function(h,X,F,K,R,S,O){for(S=(O=(X=c(12,(R=l(h),F=XY(h),K="",h)),X).length,0);F--;)S=((S|0)+(XY(h)|0))%O,K+=x[X[S]];v(R,h,K)}),function(h){Kh(h,4)})),317),function(h,X,F,K){!d(true,false,X,h)&&(X=fh(h),K=X.PJ,F=X.s,h.i==h||F==h.bh&&K==h)&&(v(X.OU,h,F.apply(K,X.S)),h.X=h.U())}),49),function(h,X,F,K,R,S){if(!d(true,true,X,h)){if("object"==le((h=c((K=c((F=c((X=c((K=(S=(X=(F=l(h),l)(h),l(h)),l(h)),X),h),F),h),K),h),S),h),F))){for(R in S=[],F)S.push(R);F=S}for(h=(R=F.length,0<h?h:1),S=0;S<R;S+=h)X(F.slice(S,(S|0)+(h|0)),K)}}),function(h,X,F,K){if(X=h.WJ.pop()){for(K=q(h);0<K;K--)F=l(h),X[F]=h.P[F];(X[398]=h.P[X[91]=h.P[91],398],h).P=X}else v(39,h,h.N)})),rA)],V),Z)([n,Y],V),[OC,W]),V),V))},z=D.requestIdleCallback?function(V){requestIdleCallback(function(){V()},{timeout:4})}:D.setImmediate?function(V){setImmediate(V)}:function(V){setTimeout(V,0)},Q0=function(V,W){(W.push(V[0]<<24|V[1]<<16|V[2]<<8|V[3]),W.push(V[4]<<24|V[5]<<16|V[6]<<8|V[7]),W).push(V[8]<<24|V[9]<<16|V[10]<<8|V[11])},YR=function(V,W){return e[W](e.prototype,{propertyIsEnumerable:V,stack:V,replace:V,splice:V,prototype:V,floor:V,console:V,pop:V,document:V,call:V,parent:V,length:V})},T=function(V,W){for(W=[];V--;)W.push(255*Math.random()|0);return W},L=function(V,W,Y){Y=this;try{ue(this,V,W)}catch(y){B(y,this),V(function(x){x(Y.O)})}},ph=function(V,W,Y,y){return(y=I[V.substring(0,3)+"_"])?y(V.substring(3),W,Y):Ch(V,W)},vZ=function(V,W,Y,y,x){if((x=W[0],x)==a)V.g=25,V.o(W);else if(x==r){Y=W[1];try{y=V.O||V.o(W)}catch(h){B(h,V),y=V.O}Y(y)}else if(x==ef)V.o(W);else if(x==n)V.o(W);else if(x==OC){try{for(y=0;y<V.V.length;y++)try{Y=V.V[y],Y[0][Y[1]](Y[2])}catch(h){}}catch(h){}(0,W[1])(function(h,X){V.L(h,true,X)},(V.V=[],function(h){Z([AB],(h=!V.W.length,V)),h&&U(true,false,V)}))}else{if(x==A)return y=W[2],v(271,V,W[6]),v(127,V,y),V.o(W);x==AB?(V.G=[],V.J=[],V.P=null):x==rA&&"loading"===D.document.readyState&&(V.Z=function(h,X){function F(){X||(X=true,h())}((X=false,D).document.addEventListener("DOMContentLoaded",F,g),D).addEventListener("load",F,g)})}},be=function(V,W,Y){return V.L(function(y){Y=y},false,W),Y},T6=function(V,W,Y,y){try{y=V[((W|0)+2)%3],V[W]=(V[W]|0)-(V[((W|0)+1)%3]|0)-(y|0)^(1==W?y<<Y:y>>>Y)}catch(x){throw x;}},fh=function(V,W,Y,y,x,h){for(h=((Y=(W=V[JB]||{},l(V)),W).OU=l(V),W.S=[],x=V.i==V?(q(V)|0)-1:1,y=l(V),0);h<x;h++)W.S.push(l(V));for(W.s=c(Y,V);x--;)W.S[x]=c(W.S[x],V);return W.PJ=c(y,V),W},Z=function(V,W){W.W.splice(0,0,V)},xR=function(V,W,Y,y){E(V,(Y=(y=l(V),l)(V),Y),k(c(y,V),W))},ok=function(V,W,Y){return(Y=e[W.l](W.wv),Y[W.l]=function(){return V},Y).concat=function(y){V=y},Y},m=function(V,W,Y){Y[v(W,V,Y),rA]=2796},t,mA=function(V,W,Y,y,x){for(Y=Y[x=(y=0,Y[2]|0),3]|0;14>y;y++)W=W>>>8|W<<24,W+=V|0,V=V<<3|V>>>29,W^=x+2298,Y=Y>>>8|Y<<24,V^=W,Y+=x|0,x=x<<3|x>>>29,Y^=y+2298,x^=Y;return[V>>>24&255,V>>>16&255,V>>>8&255,V>>>0&255,W>>>24&255,W>>>16&255,W>>>8&255,W>>>0&255]},HZ=function(V,W,Y,y){for(;V.W.length;){y=(V.Z=null,V).W.pop();try{Y=vZ(V,y)}catch(x){B(x,V)}if(W&&V.Z){W=V.Z,W(function(){U(true,true,V)});break}}return Y},cZ=function(V,W,Y,y){function x(){}return y=(Y=void 0,ph(V,function(h){x&&(W&&z(W),Y=h,x(),x=void 0)},!!W))[0],{invoke:function(h,X,F,K){function R(){Y(function(S){z(function(){h(S)})},F)}if(!X)return X=y(F),h&&h(X),X;Y?R():(K=x,x=function(){K(),z(R)})}}},qw=function(V,W,Y,y,x,h,X,F){return h=e[W.l]((Y=[70,46,-55,95,95,-55,Y,16,-(X=(x=jf,y&7),92),-31],W).ih),h[W.l]=function(K){X+=6+7*(F=K,y),X&=7},h.concat=function(K){return(K=(F=(K=(K=V%16+1,-K*F-196*V*V*F-1225*F+Y[X+27&7]*V*K-2254*V*F+(x()|0)*K+X+49*F*F+4*V*V*K),void 0),Y[K]),Y)[(X+61&7)+(y&2)]=K,Y[X+(y&2)]=46,K},h},E=function(V,W,Y,y,x,h){if(V.i==V)for(h=c(W,V),344==W?(W=function(X,F,K,R){if(h.N7!=(F=((R=h.length,R)|0)-4>>3,F)){F=(K=[(h.N7=F,0),0,x[1],x[2]],(F<<3)-4);try{h.lh=mA(dA(h,F),dA(h,(F|0)+4),K)}catch(S){throw S;}}h.push(h.lh[R&7]^X)},x=c(451,V)):W=function(X){h.push(X)},y&&W(y&255),V=Y.length,y=0;y<V;y++)W(Y[y])},wA=function(V,W,Y,y){return v(39,W,(ie(W,((y=c(39,W),W).J&&y<W.N?(v(39,W,W.N),DP(W,V)):v(39,W,V),Y)),y)),c(127,W)},c=function(V,W){if(void 0===(W=W.P[V],W))throw[G,30,V];if(W.value)return W.create();return W.create(4*V*V+46*V+25),W.prototype},Kh=function(V,W,Y,y){for(Y=(y=l(V),0);0<W;W--)Y=Y<<8|q(V);v(y,V,Y)},Sf=function(V,W,Y,y,x,h){function X(){if(y.i==y){if(y.P){var F=[A,V,Y,void 0,x,h,arguments];if(2==W)var K=U(false,(Z(F,y),false),y);else if(1==W){var R=!y.W.length;Z(F,y),R&&U(false,false,y)}else K=vZ(y,F);return K}x&&h&&x.removeEventListener(h,X,g)}}return X},V0=function(V,W){return(W=W.create().shift(),V.v).create().length||V.h.create().length||(V.v=void 0,V.h=void 0),W},le=function(V,W,Y){if("object"==(Y=typeof V,Y))if(V){if(V instanceof Array)return"array";if(V instanceof Object)return Y;if("[object Window]"==(W=Object.prototype.toString.call(V),W))return"object";if("[object Array]"==W||"number"==typeof V.length&&"undefined"!=typeof V.splice&&"undefined"!=typeof V.propertyIsEnumerable&&!V.propertyIsEnumerable("splice"))return"array";if("[object Function]"==W||"undefined"!=typeof V.call&&"undefined"!=typeof V.propertyIsEnumerable&&!V.propertyIsEnumerable("call"))return"function"}else return"null";else if("function"==Y&&"undefined"==typeof V.call)return"object";return Y},U=function(V,W,Y,y,x,h){if(Y.W.length){Y.EU=(Y.D=(Y.D&&0(),true),V);try{x=Y.U(),Y.T=0,Y.C=x,Y.X=x,h=HZ(Y,V),y=Y.U()-Y.C,Y.Y+=y,y<(W?0:10)||0>=Y.g--||(y=Math.floor(y),Y.G.push(254>=y?y:254))}finally{Y.D=false}return h}},dA=function(V,W){return V[W]<<24|V[(W|0)+1]<<16|V[(W|0)+2]<<8|V[(W|0)+3]},P=function(V,W,Y,y,x,h){if(!V.B){if((Y=c(398,(W=(0==(y=c(((x=void 0,Y&&Y[0]===G)&&(x=Y[2],W=Y[1],Y=void 0),91),V),y.length)&&(h=c(197,V)>>3,y.push(W,h>>8&255,h&255),void 0!=x&&y.push(x&255)),""),Y&&(Y.message&&(W+=Y.message),Y.stack&&(W+=":"+Y.stack)),V)),3)<Y){V.i=(x=(W=(Y-=(W=W.slice(0,(Y|0)-3),(W.length|0)+3),gA)(W),V).i,V);try{E(V,344,k(W.length,2).concat(W),9)}finally{V.i=x}}v(398,V,Y)}},B=function(V,W){W.O=((W.O?W.O+"~":"E:")+V.message+":"+V.stack).slice(0,2048)},XY=function(V,W){return(W=q(V),W&128)&&(W=W&127|q(V)<<7),W},f=function(V,W,Y,y,x,h,X,F,K,R,S,O,u,p){if(p=c(39,Y),p>=Y.N)throw[G,31];for(O=W,x=0,h=Y.kt.length,u=p;0<O;)K=u%8,S=8-(K|0),S=S<O?S:O,F=u>>3,y=Y.J[F],V&&(X=Y,X.u!=u>>6&&(X.u=u>>6,R=c(385,X),X.K=mA(X.A,X.u,[0,0,R[1],R[2]])),y^=Y.K[F&h]),u+=S,x|=(y>>8-(K|0)-(S|0)&(1<<S)-1)<<(O|0)-(S|0),O-=S;return v(39,Y,(p|0)+(W|(V=x,0))),V},ZP=function(V){return V},DP=function(V,W){v(39,(V.WJ.push(V.P.slice()),V.P[39]=void 0,V),W)},q=function(V){return V.v?V0(V,V.h):f(true,8,V)},ie=function(V,W,Y,y,x,h){if(!V.O){V.j++;try{for(y=0,Y=void 0,x=V.N;--W;)try{if(h=void 0,V.v)Y=V0(V,V.v);else{if(y=c(39,V),y>=x)break;Y=(h=l((v(197,V,y),V)),c(h,V))}(Y&&Y[AB]&2048?Y(V,W):P(V,0,[G,21,h]),d)(false,false,W,V)}catch(X){c(433,V)?P(V,22,X):v(433,V,X)}if(!W){if(V.vJ){ie(V,(V.j--,642224940084));return}P(V,0,[G,33])}}catch(X){try{P(V,22,X)}catch(F){B(F,V)}}V.j--}},v=function(V,W,Y){if(39==V||197==V)W.P[V]?W.P[V].concat(Y):W.P[V]=ok(Y,W);else{if(W.B&&385!=V)return;461==V||344==V||222==V||91==V||451==V?W.P[V]||(W.P[V]=qw(V,W,Y,54)):W.P[V]=qw(V,W,Y,73)}385==V&&(W.A=f(false,32,W),W.u=void 0)},Rk=function(V,W,Y,y,x){E(V,((y=(Y=l((y=(x=W&3,W&=4,l(V)),V)),c)(y,V),W)&&(y=gA(""+y)),x&&E(V,Y,k(y.length,2)),Y),y)},d=function(V,W,Y,y,x,h,X,F,K){if((y.i=(y.F+=(x=(K=(X=(V||y.T++,0<y.I&&y.D&&y.EU&&1>=y.j&&!y.v&&!y.Z&&(!V||1<y.R-Y)&&0==document.hidden),F=4==y.T)||X?y.U():y.X,h=K-y.X,h>>14),y.A&&(y.A^=x*(h<<2)),x),x)||y.i,F)||X)y.X=K,y.T=0;if(!X||K-y.C<y.I-(W?255:V?5:2))return false;return y.Z=(v(39,y,(W=c(V?197:39,(y.R=Y,y)),y.N)),y.W.push([ef,W,V?Y+1:Y]),z),true},gA=function(V,W,Y,y,x){for(W=(V=V.replace(/\\r\\n/g,"\\n"),[]),y=Y=0;Y<V.length;Y++)x=V.charCodeAt(Y),128>x?W[y++]=x:(2048>x?W[y++]=x>>6|192:(55296==(x&64512)&&Y+1<V.length&&56320==(V.charCodeAt(Y+1)&64512)?(x=65536+((x&1023)<<10)+(V.charCodeAt(++Y)&1023),W[y++]=x>>18|240,W[y++]=x>>12&63|128):W[y++]=x>>12|224,W[y++]=x>>6&63|128),W[y++]=x&63|128);return W},Ch=function(V,W){return W(function(Y){Y(V)}),[function(){return V}]},g={passive:true,capture:true},nh=function(V,W,Y){if(3==V.length){for(Y=0;3>Y;Y++)W[Y]+=V[Y];for(Y=[13,8,13,(V=0,12),16,5,3,10,15];9>V;V++)W[3](W,V%3,Y[V])}},I,k=function(V,W,Y,y){for(Y=(y=[],(W|0)-1);0<=Y;Y--)y[(W|0)-1-(Y|0)]=V>>8*Y&255;return y},UC=function(V,W){if(!(V=D.trustedTypes,W=null,V)||!V.createPolicy)return W;try{W=V.createPolicy("bg",{createHTML:ZP,createScript:ZP,createScriptURL:ZP})}catch(Y){D.console&&D.console.error(Y.message)}return W},JB=String.fromCharCode(105,110,116,101,103,67,104,101,99,107,66,121,112,97,115,115),OC=[],rA=[],r=[],ef=[],AB=[],G=(L.prototype.DY=void 0,L.prototype.H="toString",{}),n=[],a=[],A=(L.prototype.eH=void 0,L.prototype.vJ=false,[]),jf=(t=((Q0,T,T6,function(){})(nh),L.prototype.l="create",L.prototype),void 0),e=(t.xt=function(){return Math.floor(this.Y+(this.U()-this.C))},(t.U=(window.performance||{}).now?function(){return this.UU+window.performance.now()}:function(){return+new Date},t.uh=(t.Xf=function(V,W,Y,y,x,h){for(x=(h=Y=0,[]);Y<V.length;Y++)for(h+=W,y=y<<W|V[Y];7<h;)h-=8,x.push(y>>h&255);return x},function(V,W,Y){return((W=(W^=W<<13,W^=W>>17,W^W<<5)&Y)||(W=1),V)^W}),t).ak=function(){return Math.floor(this.U())},t.L=function(V,W,Y,y,x){if(Y="array"===le(Y)?Y:[Y],this.O)V(this.O);else try{y=[],x=!this.W.length,Z([a,y,Y],this),Z([r,V,y],this),W&&!x||U(W,true,this)}catch(h){B(h,this),V(this.O)}},t.zE=function(V,W,Y,y,x){for(x=y=0;y<V.length;y++)x+=V.charCodeAt(y),x+=x<<10,x^=x>>6;return y=(V=(x+=x<<3,x^=x>>11,x+(x<<15)>>>0),new Number(V&(1<<W)-1)),y[0]=(V>>>W)%Y,y},G).constructor,WZ=((L.prototype.o=function(V,W){return V=(jf=function(){return W==V?25:60},{}),W={},function(Y,y,x,h,X,F,K,R,S,O,u,p,b,C,Q){W=(h=W,V);try{if(x=Y[0],x==n){O=Y[1];try{for(Q=(F=0,(b=[],atob)(O)),C=0;C<Q.length;C++)p=Q.charCodeAt(C),255<p&&(b[F++]=p&255,p>>=8),b[F++]=p;v(385,(this.N=(this.J=b,this.J).length<<3,this),[0,0,0])}catch(w){P(this,17,w);return}ie(this,8001)}else if(x==a)Y[1].push(c(398,this),c(344,this).length,c(461,this).length,c(222,this).length),v(127,this,Y[2]),this.P[431]&&wA(c(431,this),this,8001);else{if(x==r){(R=(u=k((c(461,(F=Y[2],this)).length|0)+2,2),this.i),this).i=this;try{S=c(91,this),0<S.length&&E(this,461,k(S.length,2).concat(S),10),E(this,461,k(this.F,1),109),E(this,461,k(this[r].length,1)),Q=0,X=c(344,this),Q-=(c(461,this).length|0)+5,Q+=c(386,this)&2047,4<X.length&&(Q-=(X.length|0)+3),0<Q&&E(this,461,k(Q,2).concat(T(Q)),15),4<X.length&&E(this,461,k(X.length,2).concat(X),156)}finally{this.i=R}if(K=((C=T(2).concat(c(461,this)),C)[1]=C[0]^6,C[3]=C[1]^u[0],C[4]=C[1]^u[1],this).t5(C))K="!"+K;else for(K="",Q=0;Q<C.length;Q++)y=C[Q][this.H](16),1==y.length&&(y="0"+y),K+=y;return(c(461,(c(344,(v(398,this,(b=K,F).shift()),this)).length=F.shift(),this)).length=F.shift(),c(222,this)).length=F.shift(),b}if(x==ef)wA(Y[1],this,Y[2]);else if(x==A)return wA(Y[1],this,8001)}}finally{W=h}}}(),L.prototype).A5=0,/./);L.prototype.t5=(L.prototype.TE=0,function(V,W,Y,y){if(W=window.btoa){for(y=(Y="",0);y<V.length;y+=8192)Y+=String.fromCharCode.apply(null,V.slice(y,y+8192));V=W(Y).replace(/\\+/g,"-").replace(/\\//g,"_").replace(/=/g,"")}else V=void 0;return V});var hB,sC=n.pop.bind((L.prototype[OC]=[0,0,1,1,0,1,1],L.prototype)[a]),FY=function(V,W){return(W=UC())&&1===V.eval(W.createScript("1"))?function(Y){return W.createScript(Y)}:function(Y){return""+Y}}((hB=YR({get:sC},(WZ[L.prototype.H]=sC,L.prototype.l)),L.prototype.ZY=void 0,D));(40<(I=D.botguard||(D.botguard={}),I.m)||(I.m=41,I.bg=cZ,I.a=ph),I).tDL_=function(V,W,Y){return Y=new L(W,V),[function(y){return be(Y,y)}]};}).call(this);'));
}).call(this);
#3 JavaScript::Eval (size: 22) - SHA256: 77363f7986be93a204a91ba121d26532ec35e7bc651b2cbd5ebf69096ed33f78
0,
function(h) {
    Kh(h, 1)
}
#4 JavaScript::Eval (size: 21137) - SHA256: d1f3438a49b203e1bd4b079165ccddf058f8bf904addc39adc412a0bb237c6c8
(function() {
    var l = function(V, W) {
            if (V.v) return V0(V, V.h);
            return (W = f(true, 8, V), W) & 128 && (W ^= 128, V = f(true, 2, V), W = (W << 2) + (V | 0)), W
        },
        D = this || self,
        ue = function(V, W, Y, y, x) {
            for (x = (V.wv = (V.kt = (V.SH = hB, V.h5 = WZ, V[r]), V.ih = YR({get: function() {
                        return this.concat()
                    }
                }, V.l), e)[V.l](V.ih, {
                    value: {
                        value: {}
                    }
                }), []), y = 0; 128 > y; y++) x[y] = String.fromCharCode(y);
            U(true, true, (Z(((Z([(m(V, 54, (m(V, (m(V, (m(V, 93, (v(461, (v(302, (m(V, 246, (m(V, 443, (m(V, (v(386, (m(V, (m(V, 94, (m((m(V, 242, (m(V, (v(398, V, (m(V, (v(222, V, (m(V, 83, (m(V, (m(V, 69, (m(V, 188, (v(400, (v(127, V, (V.C2 = (m(V, (m(V, (v(451, V, (m(V, (m(V, (m(V, (m(V, 298, ((v(91, (v(433, (V.jH = (m(V, (m(V, 464, ((m(V, 405, (v(344, V, T((v(197, (v(39, V, (V.UU = (V.bh = function(h) {
                this.i = h
            }, (((V.EU = false, V).B = (V.O = void 0, false), V).Y = (V.W = [], V.WJ = [], (V.u = void 0, y = window.performance || {}, V).g = (V.A = (V.R = 8001, void 0), 25), V.G = [], V.I = 0, 0), V.F = 1, V.N = 0, (V.V = (V.i = V, []), V).Z = null, V.P = (V.D = false, []), V.v = void 0, V.J = (V.h = void 0, []), V).C = (V.T = void 0, V.X = 0, V.J5 = 0, 0), (V.j = 0, V.K = void 0, y.timeOrigin) || (y.timing || {}).navigationStart || 0), 0)), V), 0), 4))), function(h, X, F) {
                (F = (X = l(h), l(h)), v)(F, h, "" + c(X, h))
            })), v)(476, V, D), function(h, X, F, K, R) {
                for (X = (K = XY((R = l(h), h)), []), F = 0; F < K; F++) X.push(q(h));
                v(R, h, X)
            })), 104), function(h, X, F, K) {
                K = (F = (X = l(h), l(h)), l)(h), v(K, h, c(X, h) || c(F, h))
            }), 0), V), 472), V), []), m)(V, 330, function(h) {
                xR(h, 4)
            }), function(h, X, F) {
                d(true, false, X, h) || (X = l(h), F = l(h), v(F, h, function(K) {
                    return eval(K)
                }(FY(c(X, h.i)))))
            })), 474), function(h, X, F, K, R, S) {
                d(true, false, X, h) || (F = fh(h.i), S = F.s, K = F.PJ, X = F.OU, F = F.S, R = F.length, S = 0 == R ? new K[S] : 1 == R ? new K[S](F[0]) : 2 == R ? new K[S](F[0], F[1]) : 3 == R ? new K[S](F[0], F[1], F[2]) : 4 == R ? new K[S](F[0], F[1], F[2], F[3]) : 2(), v(X, h, S))
            }), 168), function(h, X, F, K) {
                v((X = (K = (F = (K = l((X = l(h), h)), l(h)), c)(K, h), c(X, h)), F), h, X in K | 0)
            }), 388), function(h, X, F, K) {
                F = l((K = (X = l(h), q)(h), h)), v(F, h, c(X, h) >>> K)
            }), [0, 0, 0])), 452), function(h, X, F, K, R) {
                (K = c((R = c((F = (F = (K = l((X = l(h), h)), l(h)), R = l(h), c)(F, h), R), h), K), h), v)(X, h, Sf(K, R, F, h))
            }), 291), function(h, X, F, K, R) {
                0 !== (X = c((F = (R = c((K = c((F = (K = (R = l((X = l(h), h)), l(h)), l)(h), K), h), R), h), c)(F, h), X), h.i), X) && (K = Sf(K, 1, F, h, X, R), X.addEventListener(R, K, g), v(400, h, [X, R, K]))
            }), 0), {})), V), 0), function(h, X, F) {
                (F = le((F = (X = (F = l(h), l(h)), c(F, h)), F)), v)(X, h, F)
            })), function(h, X, F, K) {
                v((K = (X = (F = (K = l(h), l(h)), l(h)), c(K, h)), F = c(F, h), X), h, +(K == F))
            })), 144), function(h) {
                xR(h, 1)
            }), function(h) {
                Rk(h, 4)
            })), V.y$ = 0, [])), 219), function(h, X, F, K) {
                F = l((K = l((X = l(h), h)), h)), h.i == h && (F = c(F, h), K = c(K, h), c(X, h)[K] = F, 385 == X && (h.u = void 0, 2 == K && (h.A = f(false, 32, h), h.u = void 0)))
            }), 2048)), 401), function(h, X, F, K) {
                v((K = (F = c((X = (F = (K = l(h), l(h)), l(h)), F), h), c(K, h)), X), h, K[F])
            }), function(h, X) {
                DP((X = c(l(h), h), h.i), X)
            })), V), 270, function() {}), function(h, X, F, K) {
                (K = c((X = (K = l(h), l(h)), F = c(X, h), K), h), v)(X, h, F + K)
            })), 314), function(h, X) {
                (h = (X = l(h), c)(X, h.i), h[0]).removeEventListener(h[1], h[2], g)
            }), V), 0), 448), function(h) {
                Rk(h, 3)
            }), function(h, X, F) {
                0 != (X = l(h), F = l(h), F = c(F, h), c(X, h)) && v(39, h, F)
            })), function(h, X, F, K, R, S, O, u, p, b, C, Q) {
                function w(J, H) {
                    for (; O < J;) S |= q(h) << O, O += 8;
                    return O -= (H = S & (1 << J) - 1, J), S >>= J, H
                }
                for (F = u = (p = (b = (R = (S = (X = l(h), O = 0), (w(3) | 0) + 1), w(5)), []), 0); u < b; u++) C = w(1), p.push(C), F += C ? 0 : 1;
                for (Q = (F = (u = ((F | 0) - 1).toString(2).length, 0), []); F < b; F++) p[F] || (Q[F] = w(u));
                for (u = 0; u < b; u++) p[u] && (Q[u] = l(h));
                for (K = []; R--;) K.push(c(l(h), h));
                m(h, X, function(J, H, N, y0, M) {
                    for (N = (H = (y0 = [], 0), []); H < b; H++) {
                        if (!(M = Q[H], p[H])) {
                            for (; M >= N.length;) N.push(l(J));
                            M = N[M]
                        }
                        y0.push(M)
                    }
                    J.v = ok(K.slice(), J), J.h = ok(y0, J)
                })
            })), V), V), V), [160, 0, 0]), m(V, 77, function(h, X, F, K, R, S, O) {
                for (S = (O = (X = c(12, (R = l(h), F = XY(h), K = "", h)), X).length, 0); F--;) S = ((S | 0) + (XY(h) | 0)) % O, K += x[X[S]];
                v(R, h, K)
            }), function(h) {
                Kh(h, 4)
            })), 317), function(h, X, F, K) {
                !d(true, false, X, h) && (X = fh(h), K = X.PJ, F = X.s, h.i == h || F == h.bh && K == h) && (v(X.OU, h, F.apply(K, X.S)), h.X = h.U())
            }), 49), function(h, X, F, K, R, S) {
                if (!d(true, true, X, h)) {
                    if ("object" == le((h = c((K = c((F = c((X = c((K = (S = (X = (F = l(h), l)(h), l(h)), l(h)), X), h), F), h), K), h), S), h), F))) {
                        for (R in S = [], F) S.push(R);
                        F = S
                    }
                    for (h = (R = F.length, 0 < h ? h : 1), S = 0; S < R; S += h) X(F.slice(S, (S | 0) + (h | 0)), K)
                }
            }), function(h, X, F, K) {
                if (X = h.WJ.pop()) {
                    for (K = q(h); 0 < K; K--) F = l(h), X[F] = h.P[F];
                    (X[398] = h.P[X[91] = h.P[91], 398], h).P = X
                } else v(39, h, h.N)
            })), rA)], V), Z)([n, Y], V), [OC, W]), V), V))
        },
        z = D.requestIdleCallback ? function(V) {
            requestIdleCallback(function() {
                V()
            }, {
                timeout: 4
            })
        } : D.setImmediate ? function(V) {
            setImmediate(V)
        } : function(V) {
            setTimeout(V, 0)
        },
        Q0 = function(V, W) {
            (W.push(V[0] << 24 | V[1] << 16 | V[2] << 8 | V[3]), W.push(V[4] << 24 | V[5] << 16 | V[6] << 8 | V[7]), W).push(V[8] << 24 | V[9] << 16 | V[10] << 8 | V[11])
        },
        YR = function(V, W) {
            return e[W](e.prototype, {
                propertyIsEnumerable: V,
                stack: V,
                replace: V,
                splice: V,
                prototype: V,
                floor: V,
                console: V,
                pop: V,
                document: V,
                call: V,
                parent: V,
                length: V
            })
        },
        T = function(V, W) {
            for (W = []; V--;) W.push(255 * Math.random() | 0);
            return W
        },
        L = function(V, W, Y) {
            Y = this;
            try {
                ue(this, V, W)
            } catch (y) {
                B(y, this), V(function(x) {
                    x(Y.O)
                })
            }
        },
        ph = function(V, W, Y, y) {
            return (y = I[V.substring(0, 3) + "_"]) ? y(V.substring(3), W, Y) : Ch(V, W)
        },
        vZ = function(V, W, Y, y, x) {
            if ((x = W[0], x) == a) V.g = 25, V.o(W);
            else if (x == r) {
                Y = W[1];
                try {
                    y = V.O || V.o(W)
                } catch (h) {
                    B(h, V), y = V.O
                }
                Y(y)
            } else if (x == ef) V.o(W);
            else if (x == n) V.o(W);
            else if (x == OC) {
                try {
                    for (y = 0; y < V.V.length; y++) try {
                        Y = V.V[y], Y[0][Y[1]](Y[2])
                    } catch (h) {}
                } catch (h) {}(0, W[1])(function(h, X) {
                    V.L(h, true, X)
                }, (V.V = [], function(h) {
                    Z([AB], (h = !V.W.length, V)), h && U(true, false, V)
                }))
            } else {
                if (x == A) return y = W[2], v(271, V, W[6]), v(127, V, y), V.o(W);
                x == AB ? (V.G = [], V.J = [], V.P = null) : x == rA && "loading" === D.document.readyState && (V.Z = function(h, X) {
                    function F() {
                        X || (X = true, h())
                    }((X = false, D).document.addEventListener("DOMContentLoaded", F, g), D).addEventListener("load", F, g)
                })
            }
        },
        be = function(V, W, Y) {
            return V.L(function(y) {
                Y = y
            }, false, W), Y
        },
        T6 = function(V, W, Y, y) {
            try {
                y = V[((W | 0) + 2) % 3], V[W] = (V[W] | 0) - (V[((W | 0) + 1) % 3] | 0) - (y | 0) ^ (1 == W ? y << Y : y >>> Y)
            } catch (x) {
                throw x;
            }
        },
        fh = function(V, W, Y, y, x, h) {
            for (h = ((Y = (W = V[JB] || {}, l(V)), W).OU = l(V), W.S = [], x = V.i == V ? (q(V) | 0) - 1 : 1, y = l(V), 0); h < x; h++) W.S.push(l(V));
            for (W.s = c(Y, V); x--;) W.S[x] = c(W.S[x], V);
            return W.PJ = c(y, V), W
        },
        Z = function(V, W) {
            W.W.splice(0, 0, V)
        },
        xR = function(V, W, Y, y) {
            E(V, (Y = (y = l(V), l)(V), Y), k(c(y, V), W))
        },
        ok = function(V, W, Y) {
            return (Y = e[W.l](W.wv), Y[W.l] = function() {
                return V
            }, Y).concat = function(y) {
                V = y
            }, Y
        },
        m = function(V, W, Y) {
            Y[v(W, V, Y), rA] = 2796
        },
        t, mA = function(V, W, Y, y, x) {
            for (Y = Y[x = (y = 0, Y[2] | 0), 3] | 0; 14 > y; y++) W = W >>> 8 | W << 24, W += V | 0, V = V << 3 | V >>> 29, W ^= x + 2298, Y = Y >>> 8 | Y << 24, V ^= W, Y += x | 0, x = x << 3 | x >>> 29, Y ^= y + 2298, x ^= Y;
            return [V >>> 24 & 255, V >>> 16 & 255, V >>> 8 & 255, V >>> 0 & 255, W >>> 24 & 255, W >>> 16 & 255, W >>> 8 & 255, W >>> 0 & 255]
        },
        HZ = function(V, W, Y, y) {
            for (; V.W.length;) {
                y = (V.Z = null, V).W.pop();
                try {
                    Y = vZ(V, y)
                } catch (x) {
                    B(x, V)
                }
                if (W && V.Z) {
                    W = V.Z, W(function() {
                        U(true, true, V)
                    });
                    break
                }
            }
            return Y
        },
        cZ = function(V, W, Y, y) {
            function x() {}
            return y = (Y = void 0, ph(V, function(h) {
                x && (W && z(W), Y = h, x(), x = void 0)
            }, !!W))[0], {
                invoke: function(h, X, F, K) {
                    function R() {
                        Y(function(S) {
                            z(function() {
                                h(S)
                            })
                        }, F)
                    }
                    if (!X) return X = y(F), h && h(X), X;
                    Y ? R() : (K = x, x = function() {
                        K(), z(R)
                    })
                }
            }
        },
        qw = function(V, W, Y, y, x, h, X, F) {
            return h = e[W.l]((Y = [70, 46, -55, 95, 95, -55, Y, 16, -(X = (x = jf, y & 7), 92), -31], W).ih), h[W.l] = function(K) {
                X += 6 + 7 * (F = K, y), X &= 7
            }, h.concat = function(K) {
                return (K = (F = (K = (K = V % 16 + 1, -K * F - 196 * V * V * F - 1225 * F + Y[X + 27 & 7] * V * K - 2254 * V * F + (x() | 0) * K + X + 49 * F * F + 4 * V * V * K), void 0), Y[K]), Y)[(X + 61 & 7) + (y & 2)] = K, Y[X + (y & 2)] = 46, K
            }, h
        },
        E = function(V, W, Y, y, x, h) {
            if (V.i == V)
                for (h = c(W, V), 344 == W ? (W = function(X, F, K, R) {
                        if (h.N7 != (F = ((R = h.length, R) | 0) - 4 >> 3, F)) {
                            F = (K = [(h.N7 = F, 0), 0, x[1], x[2]], (F << 3) - 4);
                            try {
                                h.lh = mA(dA(h, F), dA(h, (F | 0) + 4), K)
                            } catch (S) {
                                throw S;
                            }
                        }
                        h.push(h.lh[R & 7] ^ X)
                    }, x = c(451, V)) : W = function(X) {
                        h.push(X)
                    }, y && W(y & 255), V = Y.length, y = 0; y < V; y++) W(Y[y])
        },
        wA = function(V, W, Y, y) {
            return v(39, W, (ie(W, ((y = c(39, W), W).J && y < W.N ? (v(39, W, W.N), DP(W, V)) : v(39, W, V), Y)), y)), c(127, W)
        },
        c = function(V, W) {
            if (void 0 === (W = W.P[V], W)) throw [G, 30, V];
            if (W.value) return W.create();
            return W.create(4 * V * V + 46 * V + 25), W.prototype
        },
        Kh = function(V, W, Y, y) {
            for (Y = (y = l(V), 0); 0 < W; W--) Y = Y << 8 | q(V);
            v(y, V, Y)
        },
        Sf = function(V, W, Y, y, x, h) {
            function X() {
                if (y.i == y) {
                    if (y.P) {
                        var F = [A, V, Y, void 0, x, h, arguments];
                        if (2 == W) var K = U(false, (Z(F, y), false), y);
                        else if (1 == W) {
                            var R = !y.W.length;
                            Z(F, y), R && U(false, false, y)
                        } else K = vZ(y, F);
                        return K
                    }
                    x && h && x.removeEventListener(h, X, g)
                }
            }
            return X
        },
        V0 = function(V, W) {
            return (W = W.create().shift(), V.v).create().length || V.h.create().length || (V.v = void 0, V.h = void 0), W
        },
        le = function(V, W, Y) {
            if ("object" == (Y = typeof V, Y))
                if (V) {
                    if (V instanceof Array) return "array";
                    if (V instanceof Object) return Y;
                    if ("[object Window]" == (W = Object.prototype.toString.call(V), W)) return "object";
                    if ("[object Array]" == W || "number" == typeof V.length && "undefined" != typeof V.splice && "undefined" != typeof V.propertyIsEnumerable && !V.propertyIsEnumerable("splice")) return "array";
                    if ("[object Function]" == W || "undefined" != typeof V.call && "undefined" != typeof V.propertyIsEnumerable && !V.propertyIsEnumerable("call")) return "function"
                } else return "null";
            else if ("function" == Y && "undefined" == typeof V.call) return "object";
            return Y
        },
        U = function(V, W, Y, y, x, h) {
            if (Y.W.length) {
                Y.EU = (Y.D = (Y.D && 0(), true), V);
                try {
                    x = Y.U(), Y.T = 0, Y.C = x, Y.X = x, h = HZ(Y, V), y = Y.U() - Y.C, Y.Y += y, y < (W ? 0 : 10) || 0 >= Y.g-- || (y = Math.floor(y), Y.G.push(254 >= y ? y : 254))
                } finally {
                    Y.D = false
                }
                return h
            }
        },
        dA = function(V, W) {
            return V[W] << 24 | V[(W | 0) + 1] << 16 | V[(W | 0) + 2] << 8 | V[(W | 0) + 3]
        },
        P = function(V, W, Y, y, x, h) {
            if (!V.B) {
                if ((Y = c(398, (W = (0 == (y = c(((x = void 0, Y && Y[0] === G) && (x = Y[2], W = Y[1], Y = void 0), 91), V), y.length) && (h = c(197, V) >> 3, y.push(W, h >> 8 & 255, h & 255), void 0 != x && y.push(x & 255)), ""), Y && (Y.message && (W += Y.message), Y.stack && (W += ":" + Y.stack)), V)), 3) < Y) {
                    V.i = (x = (W = (Y -= (W = W.slice(0, (Y | 0) - 3), (W.length | 0) + 3), gA)(W), V).i, V);
                    try {
                        E(V, 344, k(W.length, 2).concat(W), 9)
                    } finally {
                        V.i = x
                    }
                }
                v(398, V, Y)
            }
        },
        B = function(V, W) {
            W.O = ((W.O ? W.O + "~" : "E:") + V.message + ":" + V.stack).slice(0, 2048)
        },
        XY = function(V, W) {
            return (W = q(V), W & 128) && (W = W & 127 | q(V) << 7), W
        },
        f = function(V, W, Y, y, x, h, X, F, K, R, S, O, u, p) {
            if (p = c(39, Y), p >= Y.N) throw [G, 31];
            for (O = W, x = 0, h = Y.kt.length, u = p; 0 < O;) K = u % 8, S = 8 - (K | 0), S = S < O ? S : O, F = u >> 3, y = Y.J[F], V && (X = Y, X.u != u >> 6 && (X.u = u >> 6, R = c(385, X), X.K = mA(X.A, X.u, [0, 0, R[1], R[2]])), y ^= Y.K[F & h]), u += S, x |= (y >> 8 - (K | 0) - (S | 0) & (1 << S) - 1) << (O | 0) - (S | 0), O -= S;
            return v(39, Y, (p | 0) + (W | (V = x, 0))), V
        },
        ZP = function(V) {
            return V
        },
        DP = function(V, W) {
            v(39, (V.WJ.push(V.P.slice()), V.P[39] = void 0, V), W)
        },
        q = function(V) {
            return V.v ? V0(V, V.h) : f(true, 8, V)
        },
        ie = function(V, W, Y, y, x, h) {
            if (!V.O) {
                V.j++;
                try {
                    for (y = 0, Y = void 0, x = V.N; --W;) try {
                        if (h = void 0, V.v) Y = V0(V, V.v);
                        else {
                            if (y = c(39, V), y >= x) break;
                            Y = (h = l((v(197, V, y), V)), c(h, V))
                        }(Y && Y[AB] & 2048 ? Y(V, W) : P(V, 0, [G, 21, h]), d)(false, false, W, V)
                    } catch (X) {
                        c(433, V) ? P(V, 22, X) : v(433, V, X)
                    }
                    if (!W) {
                        if (V.vJ) {
                            ie(V, (V.j--, 642224940084));
                            return
                        }
                        P(V, 0, [G, 33])
                    }
                } catch (X) {
                    try {
                        P(V, 22, X)
                    } catch (F) {
                        B(F, V)
                    }
                }
                V.j--
            }
        },
        v = function(V, W, Y) {
            if (39 == V || 197 == V) W.P[V] ? W.P[V].concat(Y) : W.P[V] = ok(Y, W);
            else {
                if (W.B && 385 != V) return;
                461 == V || 344 == V || 222 == V || 91 == V || 451 == V ? W.P[V] || (W.P[V] = qw(V, W, Y, 54)) : W.P[V] = qw(V, W, Y, 73)
            }
            385 == V && (W.A = f(false, 32, W), W.u = void 0)
        },
        Rk = function(V, W, Y, y, x) {
            E(V, ((y = (Y = l((y = (x = W & 3, W &= 4, l(V)), V)), c)(y, V), W) && (y = gA("" + y)), x && E(V, Y, k(y.length, 2)), Y), y)
        },
        d = function(V, W, Y, y, x, h, X, F, K) {
            if ((y.i = (y.F += (x = (K = (X = (V || y.T++, 0 < y.I && y.D && y.EU && 1 >= y.j && !y.v && !y.Z && (!V || 1 < y.R - Y) && 0 == document.hidden), F = 4 == y.T) || X ? y.U() : y.X, h = K - y.X, h >> 14), y.A && (y.A ^= x * (h << 2)), x), x) || y.i, F) || X) y.X = K, y.T = 0;
            if (!X || K - y.C < y.I - (W ? 255 : V ? 5 : 2)) return false;
            return y.Z = (v(39, y, (W = c(V ? 197 : 39, (y.R = Y, y)), y.N)), y.W.push([ef, W, V ? Y + 1 : Y]), z), true
        },
        gA = function(V, W, Y, y, x) {
            for (W = (V = V.replace(/\r\n/g, "\n"), []), y = Y = 0; Y < V.length; Y++) x = V.charCodeAt(Y), 128 > x ? W[y++] = x : (2048 > x ? W[y++] = x >> 6 | 192 : (55296 == (x & 64512) && Y + 1 < V.length && 56320 == (V.charCodeAt(Y + 1) & 64512) ? (x = 65536 + ((x & 1023) << 10) + (V.charCodeAt(++Y) & 1023), W[y++] = x >> 18 | 240, W[y++] = x >> 12 & 63 | 128) : W[y++] = x >> 12 | 224, W[y++] = x >> 6 & 63 | 128), W[y++] = x & 63 | 128);
            return W
        },
        Ch = function(V, W) {
            return W(function(Y) {
                Y(V)
            }), [function() {
                return V
            }]
        },
        g = {
            passive: true,
            capture: true
        },
        nh = function(V, W, Y) {
            if (3 == V.length) {
                for (Y = 0; 3 > Y; Y++) W[Y] += V[Y];
                for (Y = [13, 8, 13, (V = 0, 12), 16, 5, 3, 10, 15]; 9 > V; V++) W[3](W, V % 3, Y[V])
            }
        },
        I, k = function(V, W, Y, y) {
            for (Y = (y = [], (W | 0) - 1); 0 <= Y; Y--) y[(W | 0) - 1 - (Y | 0)] = V >> 8 * Y & 255;
            return y
        },
        UC = function(V, W) {
            if (!(V = D.trustedTypes, W = null, V) || !V.createPolicy) return W;
            try {
                W = V.createPolicy("bg", {
                    createHTML: ZP,
                    createScript: ZP,
                    createScriptURL: ZP
                })
            } catch (Y) {
                D.console && D.console.error(Y.message)
            }
            return W
        },
        JB = String.fromCharCode(105, 110, 116, 101, 103, 67, 104, 101, 99, 107, 66, 121, 112, 97, 115, 115),
        OC = [],
        rA = [],
        r = [],
        ef = [],
        AB = [],
        G = (L.prototype.DY = void 0, L.prototype.H = "toString", {}),
        n = [],
        a = [],
        A = (L.prototype.eH = void 0, L.prototype.vJ = false, []),
        jf = (t = ((Q0, T, T6, function() {})(nh), L.prototype.l = "create", L.prototype), void 0),
        e = (t.xt = function() {
            return Math.floor(this.Y + (this.U() - this.C))
        }, (t.U = (window.performance || {}).now ? function() {
            return this.UU + window.performance.now()
        } : function() {
            return +new Date
        }, t.uh = (t.Xf = function(V, W, Y, y, x, h) {
            for (x = (h = Y = 0, []); Y < V.length; Y++)
                for (h += W, y = y << W | V[Y]; 7 < h;) h -= 8, x.push(y >> h & 255);
            return x
        }, function(V, W, Y) {
            return ((W = (W ^= W << 13, W ^= W >> 17, W ^ W << 5) & Y) || (W = 1), V) ^ W
        }), t).ak = function() {
            return Math.floor(this.U())
        }, t.L = function(V, W, Y, y, x) {
            if (Y = "array" === le(Y) ? Y : [Y], this.O) V(this.O);
            else try {
                y = [], x = !this.W.length, Z([a, y, Y], this), Z([r, V, y], this), W && !x || U(W, true, this)
            } catch (h) {
                B(h, this), V(this.O)
            }
        }, t.zE = function(V, W, Y, y, x) {
            for (x = y = 0; y < V.length; y++) x += V.charCodeAt(y), x += x << 10, x ^= x >> 6;
            return y = (V = (x += x << 3, x ^= x >> 11, x + (x << 15) >>> 0), new Number(V & (1 << W) - 1)), y[0] = (V >>> W) % Y, y
        }, G).constructor,
        WZ = ((L.prototype.o = function(V, W) {
            return V = (jf = function() {
                    return W == V ? 25 : 60
                }, {}), W = {},
                function(Y, y, x, h, X, F, K, R, S, O, u, p, b, C, Q) {
                    W = (h = W, V);
                    try {
                        if (x = Y[0], x == n) {
                            O = Y[1];
                            try {
                                for (Q = (F = 0, (b = [], atob)(O)), C = 0; C < Q.length; C++) p = Q.charCodeAt(C), 255 < p && (b[F++] = p & 255, p >>= 8), b[F++] = p;
                                v(385, (this.N = (this.J = b, this.J).length << 3, this), [0, 0, 0])
                            } catch (w) {
                                P(this, 17, w);
                                return
                            }
                            ie(this, 8001)
                        } else if (x == a) Y[1].push(c(398, this), c(344, this).length, c(461, this).length, c(222, this).length), v(127, this, Y[2]), this.P[431] && wA(c(431, this), this, 8001);
                        else {
                            if (x == r) {
                                (R = (u = k((c(461, (F = Y[2], this)).length | 0) + 2, 2), this.i), this).i = this;
                                try {
                                    S = c(91, this), 0 < S.length && E(this, 461, k(S.length, 2).concat(S), 10), E(this, 461, k(this.F, 1), 109), E(this, 461, k(this[r].length, 1)), Q = 0, X = c(344, this), Q -= (c(461, this).length | 0) + 5, Q += c(386, this) & 2047, 4 < X.length && (Q -= (X.length | 0) + 3), 0 < Q && E(this, 461, k(Q, 2).concat(T(Q)), 15), 4 < X.length && E(this, 461, k(X.length, 2).concat(X), 156)
                                } finally {
                                    this.i = R
                                }
                                if (K = ((C = T(2).concat(c(461, this)), C)[1] = C[0] ^ 6, C[3] = C[1] ^ u[0], C[4] = C[1] ^ u[1], this).t5(C)) K = "!" + K;
                                else
                                    for (K = "", Q = 0; Q < C.length; Q++) y = C[Q][this.H](16), 1 == y.length && (y = "0" + y), K += y;
                                return (c(461, (c(344, (v(398, this, (b = K, F).shift()), this)).length = F.shift(), this)).length = F.shift(), c(222, this)).length = F.shift(), b
                            }
                            if (x == ef) wA(Y[1], this, Y[2]);
                            else if (x == A) return wA(Y[1], this, 8001)
                        }
                    } finally {
                        W = h
                    }
                }
        }(), L.prototype).A5 = 0, /./);
    L.prototype.t5 = (L.prototype.TE = 0, function(V, W, Y, y) {
        if (W = window.btoa) {
            for (y = (Y = "", 0); y < V.length; y += 8192) Y += String.fromCharCode.apply(null, V.slice(y, y + 8192));
            V = W(Y).replace(/\+/g, "-").replace(/\//g, "_").replace(/=/g, "")
        } else V = void 0;
        return V
    });
    var hB, sC = n.pop.bind((L.prototype[OC] = [0, 0, 1, 1, 0, 1, 1], L.prototype)[a]),
        FY = function(V, W) {
            return (W = UC()) && 1 === V.eval(W.createScript("1")) ? function(Y) {
                return W.createScript(Y)
            } : function(Y) {
                return "" + Y
            }
        }((hB = YR({get: sC
        }, (WZ[L.prototype.H] = sC, L.prototype.l)), L.prototype.ZY = void 0, D));
    (40 < (I = D.botguard || (D.botguard = {}), I.m) || (I.m = 41, I.bg = cZ, I.a = ph), I).tDL_ = function(V, W, Y) {
        return Y = new L(W, V), [function(y) {
            return be(Y, y)
        }]
    };
}).call(this);
#5 JavaScript::Eval (size: 22) - SHA256: 394d9c39a1fb60f7b8bc78d73d3bfde8cba8a5e839a15101f37fe539d8983623
0,
function(h) {
    Kh(h, 2)
}
#6 JavaScript::Eval (size: 793) - SHA256: 5aff05f856534d1387fcda6210fe7ef655b932e2d9cfcf180158e8fa03f4279f
//MATTS VARIABLES
let offSetHeight = 25;
let minViewPortHeight = 700;

const box = document.getElementById('ad-2');
let intFrameHeight = window.innerHeight || Math.max(document.documentElement.clientHeight, document.body.clientHeight);
setTimeout(function() {
    let adHeight = box.offsetHeight;

    if (intFrameHeight > minViewPortHeight) {
        if (box.childNodes.length !== 0) {
            const ad = document.getElementById('ad-1');
            const adHeight = ad.clientHeight;
            const adOffset = ad.offsetTop;
            const windowHeight = window.innerHeight;
            const marginTop = windowHeight - adHeight - adOffset - (adHeight / 2);
            box.style.marginTop = marginTop + offSetHeight + 'px';
        }
    }

    box.style.display = 'block';
}, 50);

Executed Writes (3)
#1 JavaScript::Write (size: 205) - SHA256: 0be580989b30e5b96b6a331b6ff259d6c7d359c1107f60f2ecc13b89e40aa692
< iframe src = "http://green-tracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html&ref=&l=cars"
height = "1"
width = "1" > < /iframe>
#2 JavaScript::Write (size: 24) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05
< xmp style = display: none >
#3 JavaScript::Write (size: 206) - SHA256: 2524ee5e302669efdf33ac7b60c925ba040592b5cfd413be0a0a73732721551a
< iframe src = "http://lostwebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html&ref=&l=cars"
height = "1"
width = "1" > < /iframe>


HTTP Transactions (125)


Request Response
                                        
                                            GET /2011/09/10-dodge-ram-2009-2010-600x400.html HTTP/1.1 
Host: josh-morgan-subways-news.blogspot.dk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.217.21.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                            
Location: http://josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html
Content-Encoding: gzip
Date: Sat, 10 Dec 2022 10:06:41 GMT
Expires: Sat, 10 Dec 2022 10:06:41 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 225
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size:   225
Md5:    43c99950036604410548386bef1645b2
Sha1:   f20c2fcf65ad5465e5567bcc599d0ebaa82e2cde
Sha256: 48dd3cfbc012cf087ec959168dfd86e7b9566f3cc6c0996ed495e9e20e43a858

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "636635B57F9E6D2AD9B1B949298EE7D3B5B7E251A63516FF68BFB1ECEDED5688"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13387
Expires: Sat, 10 Dec 2022 13:49:48 GMT
Date: Sat, 10 Dec 2022 10:06:41 GMT
Connection: keep-alive

                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3133
Expires: Sat, 10 Dec 2022 10:58:54 GMT
Date: Sat, 10 Dec 2022 10:06:41 GMT
Connection: keep-alive

                                        
                                            GET /v1/ HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 10 Dec 2022 09:33:20 GMT
age: 2002
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size:   939
Md5:    14cd9a0afb6ba9a763651d5112760d1e
Sha1:   75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
Sha256: 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4819229FD8F502A0C68C80BD7409E104C1B4D1A98CA8A6CD9DEBA629B1511AEA"
Last-Modified: Thu, 08 Dec 2022 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4396
Expires: Sat, 10 Dec 2022 11:19:58 GMT
Date: Sat, 10 Dec 2022 10:06:42 GMT
Connection: keep-alive

                                        
                                            GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1 
Host: content-signature-2.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.160.144.191
HTTP/2 200 OK
content-type: binary/octet-stream
                                            
x-amz-id-2: BdYwJVSpSD3DPxPXSrQpD47ZhzP/x9lRUwBFmffnLvyoHS2pE407rvotMNiZHAMeng1JNERHct8=
x-amz-request-id: RG6Z4AR5HA22Q3SC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 10 Dec 2022 09:48:44 GMT
age: 1078
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PEM certificate\012- , ASCII text
Size:   5348
Md5:    53341dea33f4f3d9b4966f80589f429a
Sha1:   20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
Sha256: 651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
                                        
                                            GET /v1/tiles HTTP/1.1 
Host: contile.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.117.237.239
HTTP/2 200 OK
content-type: application/json
                                            
server: nginx
date: Sat, 10 Dec 2022 10:06:42 GMT
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   12
Md5:    23e88fb7b99543fb33315b29b1fad9d6
Sha1:   a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
Sha256: 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
                                        
                                            GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1 
Host: firefox.settings.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             35.241.9.150
HTTP/2 200 OK
content-type: application/json
                                            
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 10 Dec 2022 09:33:14 GMT
age: 2008
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size:   329
Md5:    0333b0655111aa68de771adfcc4db243
Sha1:   63f295a144ac87a7c8e23417626724eeca68a7eb
Sha256: 60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
                                        
                                            GET /2011/09/10-dodge-ram-2009-2010-600x400.html HTTP/1.1 
Host: josh-morgan-subways-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             172.217.21.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Expires: Sat, 10 Dec 2022 10:06:42 GMT
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 29 Nov 2022 03:15:55 GMT
ETag: W/"c16db2cc1ffd4602bfaa71c0179ddbb9d8eb9f0285e45ee397a2c5f2ad04cfe6"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 15835
Server: GSE


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12826)
Size:   15835
Md5:    f7763dc0a843966917a21ddbf5fb9688
Sha1:   63cc15c5dc4c21b8965659e7619d3a48a2dc5295
Sha256: 52d0eabffb10c04654ecd2a2dd878d8e04cd6250ea1a30b1b5257df24ee847ae

Blocklists:
  - fortinet: Malware
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: josh-morgan-subways-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html

                                        
                                             172.217.21.161
HTTP/1.1 200 OK
Content-Type: text/javascript
                                            
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 20:29:12 GMT
Expires: Thu, 15 Dec 2022 20:29:12 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 08 Dec 2022 18:53:37 GMT
Age: 135450


--- Additional Info ---
Magic:  ASCII text
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Blocklists:
  - fortinet: Malware
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 257
Cache-Control: max-age=169465
Date: Sat, 10 Dec 2022 10:06:42 GMT
Etag: "63944c2a-1d7"
Expires: Mon, 12 Dec 2022 09:11:07 GMT
Last-Modified: Sat, 10 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:13 GMT
expires: Sat, 09 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 09 Dec 2022 12:51:35 GMT
age: 74009
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1441)
Size:   6573
Md5:    f60e5037324bf7fd2256c16929886f09
Sha1:   aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
Sha256: 71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
                                        
                                            GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/css
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:01:43 GMT
expires: Wed, 06 Dec 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 19:52:21 GMT
age: 331499
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (30596)
Size:   6620
Md5:    6f46e6f68353c7911fe34f31faa1518f
Sha1:   ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
Sha256: 0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
                                        
                                            GET /js/platform.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.46
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Sat, 10 Dec 2022 10:06:42 GMT
expires: Sat, 10 Dec 2022 10:06:42 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1279)
Size:   20984
Md5:    7ac44ef24e267df17ff72f195b252806
Sha1:   62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
Sha256: aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
                                        
                                            GET /2011/01/p1000095.jpg HTTP/1.1 
Host: ddspictures.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             192.0.72.28
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 10 Dec 2022 10:06:42 GMT
Content-Length: 162
Connection: keep-alive
Location: https://ddspictures.files.wordpress.com/2011/01/p1000095.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /static/v1/widgets/2092647672-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 02:10:45 GMT
expires: Fri, 08 Dec 2023 02:10:45 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Dec 2022 00:55:10 GMT
age: 201357
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (2221)
Size:   56341
Md5:    689971018982703ab88ce528368b9190
Sha1:   be9697d57e5c19d36c52aacd8b04a6a159a2f3bd
Sha256: cf8b513cfd596cffc3a7e456eccc198b8e409f5aaf624d5dbeecdd748dce0cef
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: image/gif
                                            
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:19:02 GMT
expires: Tue, 13 Dec 2022 14:19:02 GMT
cache-control: public, max-age=604800
last-modified: Tue, 06 Dec 2022 07:54:23 GMT
age: 330460
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18\012- data
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /classic-car-images/viva.jpg HTTP/1.1 
Host: www.oldclassiccar.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             217.160.0.4
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=iso-8859-1
                                            
Content-Length: 267
Connection: keep-alive
Keep-Alive: timeout=15
Date: Sat, 10 Dec 2022 10:06:42 GMT
Server: Apache
Location: https://www.oldclassiccar.co.uk/classic-car-images/viva.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   267
Md5:    83a27e781c5df24462f1f20b784d993f
Sha1:   5e73c5a158e6106dd5f6e49c547a2e6652627919
Sha256: cf378c78fd925484d97ba7deeb5943fe7dc3b148662a4209a7d282db666b7680
                                        
                                            GET /gallery/2006/Trackdays_Show/high_35.jpg HTTP/1.1 
Host: www.modifiedcars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             64.190.63.111
HTTP/1.1 403 Forbidden
content-type: text/html
                                            
date: Sat, 10 Dec 2022 10:06:42 GMT
transfer-encoding: chunked
vary: Accept-Encoding
server: NginX
content-encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   110
Md5:    a91ee3cb35185cccc15e68e9c76c5441
Sha1:   59ae4770e2c926731d216c4aae03130d66fef18f
Sha256: da14c9f38411534fa596d36202c22c26f146b9d814a1d4e52e7fad08c9a2dbce
                                        
                                            GET /wp-content/uploads/2010/12/yahoo-maktoob-taxi-ad-Egypt.jpg HTTP/1.1 
Host: arabcrunch.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             172.67.218.56
HTTP/1.1 301 Moved Permanently
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 10 Dec 2022 11:06:42 GMT
Location: https://arabcrunch.com/wp-content/uploads/2010/12/yahoo-maktoob-taxi-ad-Egypt.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vPTDbohGWX7xFZa12CtKtc%2BoLE58u7wh6E2ymYS6ZTXYrXGLBmqbDYL298SV2CZ8h09%2BHzx7rIrVy0f%2FxA%2Fstxg89Z3PKa4qYudHstJuZbpSRQuLHbZPv7wQrRI%2Fzs8lMA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 77752b5d983db506-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /f/9504289%2Bw786%2Bar1/c12_0601_14z_musclecar%2B1968_shelby_green_hornet_prototype%2Binterior.jpg HTTP/1.1 
Host: image.motortrend.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             95.101.10.96
HTTP/1.1 301 Moved Permanently
                                            
Server: AkamaiGHost
Content-Length: 0
Location: https://image.motortrend.com/f/9504289%2Bw786%2Bar1/c12_0601_14z_musclecar%2B1968_shelby_green_hornet_prototype%2Binterior.jpg
Cache-Control: max-age=0
Expires: Sat, 10 Dec 2022 10:06:42 GMT
Date: Sat, 10 Dec 2022 10:06:42 GMT
Connection: keep-alive

                                        
                                            GET /2010/03/p3200886.jpg HTTP/1.1 
Host: apetcher.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             192.0.72.20
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 10 Dec 2022 10:06:42 GMT
Content-Length: 162
Connection: keep-alive
Location: https://apetcher.files.wordpress.com/2010/03/p3200886.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   162
Md5:    4f8e702cc244ec5d4de32740c0ecbd97
Sha1:   3adb1f02d5b6054de0046e367c1d687b6cdf7aff
Sha256: 9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
                                        
                                            GET /1970_dodge_super_bee_400_sticker-p217146007268478256qjcl_400.jpg HTTP/1.1 
Host: rlv.zcache.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             151.101.128.241
HTTP/1.1 301 Moved Permanently
                                            
Connection: close
Content-Length: 0
Retry-After: 0
Location: https://rlv.zcache.com/1970_dodge_super_bee_400_sticker-p217146007268478256qjcl_400.jpg
Accept-Ranges: bytes
Date: Sat, 10 Dec 2022 10:06:42 GMT
Via: 1.1 varnish
X-Served-By: cache-bma1637-BMA
X-Cache: HIT
X-Timer: S1670666803.848472,VS0,VE0
Strict-Transport-Security: max-age=31557600

                                        
                                            GET /wp-content/uploads/2007/07/mercedes.jpg HTTP/1.1 
Host: www.todayandtomorrow.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             85.13.142.141
HTTP/1.1 500 Internal Server Error
Content-Type: text/html; charset=iso-8859-1
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Server: Apache
Content-Length: 543
Connection: close


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   543
Md5:    c20bfe1e64d9ae74f4d26304f5b31daa
Sha1:   fa2e8c0a3e8c5a1605ca56e665e1cd9671b98546
Sha256: 0224bb62a598cc9a422e911e92bfb1e9d59e7030a8ec12722a9e55b22b64e671
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: image/png
                                            
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 5080
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 17:28:13 GMT
expires: Tue, 13 Dec 2022 17:28:13 GMT
cache-control: public, max-age=604800
last-modified: Tue, 06 Dec 2022 04:51:45 GMT
age: 319109
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  PNG image data, 120 x 60, 8-bit/color RGBA, non-interlaced\012- data
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.46
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:14 GMT
expires: Sat, 09 Dec 2023 13:33:14 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
age: 74008
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (580)
Size:   57794
Md5:    813b15c3004464f6bd39fd0773b04757
Sha1:   bd2218fe1e647f61132aad70d29cd91fd0416f26
Sha256: 446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             142.250.74.66
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                            
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sat, 10 Dec 2022 07:02:48 GMT
Expires: Sat, 24 Dec 2022 07:02:48 GMT
Cache-Control: public, max-age=1209600
Age: 11034
ETag: 13036835877489095579


--- Additional Info ---
Magic:  ASCII text
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /7121rr.jpg HTTP/1.1 
Host: i34.tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             143.204.55.72
HTTP/1.1 301 Moved Permanently
                                            
Content-Length: 0
Connection: keep-alive
Date: Sat, 10 Dec 2022 10:06:43 GMT
Location: http://tinypic.com/images/goodbye.jpg
Server: AmazonS3
X-Cache: Miss from cloudfront
Via: 1.1 e49f22f18c16784c0f42291e768d1daa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UyiGVWal6xR39DoUmZDRA72W3-nCle7b93tnsVTYqqu8pWcfMXbhbw==

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2010/06/Rolls-Royce-Phantom-Coupe-2.jpg HTTP/1.1 
Host: www.caradvice.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             104.18.160.38
HTTP/1.1 301 Moved Permanently
Content-Type: text/plain;charset=UTF-8
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 0
Connection: keep-alive
Location: http://www.drive.com.au/wp-content/uploads/2010/06/Rolls-Royce-Phantom-Coupe-2.jpg
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77752b5e294d0b69-OSL

                                        
                                            GET /-4gpkRkw2Bg4/TYJM_9qJvPI/AAAAAAAAAaw/HucjRch1PAk/P1239%252525255B01%252525255D_08-08-09.JPG HTTP/1.1 
Host: lh3.ggpht.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             142.250.74.65
HTTP/1.1 404 Not Found
Content-Type: image/png
                                            
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 10 Dec 2022 10:06:43 GMT
Server: fife
Content-Length: 832
X-XSS-Protection: 0


--- Additional Info ---
Magic:  PNG image data, 200 x 200, 8-bit colormap, non-interlaced\012- data
Size:   832
Md5:    596246739a83bb45e30e13437e0810d9
Sha1:   203d99f5cb1f2c816d6f9974cc5a73cf412892a6
Sha256: 94aa7bf7f0d9660bb348ed4ed7faaa42c63f1a40f591dab32ce5046765df3615
                                        
                                            GET / HTTP/1.1 
Host: push.services.mozilla.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: OFySBbsnOCQpedsfPVmduQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        
                                             54.148.84.125
HTTP/1.1 101 Switching Protocols
                                            
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uzny21BZu1x4IXFiedhNVp2kZz0=

                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             142.250.74.73
HTTP/1.1 200 OK
Content-Type: image/png
                                            
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 07:09:35 GMT
Expires: Tue, 13 Dec 2022 07:09:35 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 05 Dec 2022 06:50:28 GMT
Age: 356228


--- Additional Info ---
Magic:  PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /images/goodbye.jpg HTTP/1.1 
Host: tinypic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive

                                        
                                             143.204.55.64
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Content-Length: 15616
Connection: keep-alive
Last-Modified: Wed, 18 Sep 2019 21:23:53 GMT
Server: AmazonS3
Date: Sat, 10 Dec 2022 05:45:44 GMT
ETag: "32af06ac4b80d728f7e4c8780eb6b6d7"
Vary: Accept-Encoding
X-Cache: Hit from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: gzMxmxCaFIN5z4w_FlqKRWJro_9mWDtomMSYpLYBNgQgxz3Qv4GkcQ==
Age: 15737


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 300x300, components 3\012- data
Size:   15616
Md5:    32af06ac4b80d728f7e4c8780eb6b6d7
Sha1:   dd3198f4361e94f2c3606474e04a629e42402d02
Sha256: f610dc2752e938d77dab1c4e9fb1f0f7f53b25e527d130ce4e034b7de09da053
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Cache-Control: max-age=127842
Date: Sat, 10 Dec 2022 10:06:43 GMT
Etag: "6393aa95-118"
Expires: Sun, 11 Dec 2022 21:37:25 GMT
Last-Modified: Fri, 09 Dec 2022 21:37:25 GMT
Server: nginx
Content-Length: 280

                                        
                                            GET /wp-content/uploads/2010/06/Rolls-Royce-Phantom-Coupe-2.jpg HTTP/1.1 
Host: www.drive.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive

                                        
                                             104.19.150.51
HTTP/1.1 301 Moved Permanently
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Sat, 10 Dec 2022 11:06:43 GMT
Location: https://www.drive.com.au/wp-content/uploads/2010/06/Rolls-Royce-Phantom-Coupe-2.jpg
Server-Timing: cf-q-config;dur=4.9999998736894e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77752b5f5a85b506-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /fs70/PRE/i/2011/166/a/c/renault_4l_by_mistergambit-d3iyrzs.jpg HTTP/1.1 
Host: th05.deviantart.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             35.164.123.148
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 178
Connection: keep-alive
Server: nginx
Location: http://pre10.deviantart.net/2144/th/pre/i/2011/166/a/c/renault_4l_by_mistergambit-d3iyrzs.jpg


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   178
Md5:    cd2e0e43980a00fb6a2742d3afd803b8
Sha1:   81ffbd1712afe8cdf138b570c0fc9934742c33c1
Sha256: bd9df047d51943acc4bc6cf55d88edb5b6785a53337ee2a0f74dd521aedde87d
                                        
                                            GET /wp-content/uploads/2011/06/Pagani-Zonda-F-Roadster-Clubsport-Final-Edition-2011.jpg HTTP/1.1 
Host: carsconcept.info
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             104.21.29.69
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: private, no-cache, max-age=0
pragma: no-cache
vary: Accept-Encoding
CF-Cache-Status: BYPASS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=us2UrmahYRcgHk0LbxTl%2Fb4z4gA1Af5jQ8ysTDeRZwYREkSXe2Mpbq%2BLlA6Dj%2FdDeR8Zal%2FPT0GvLseyrpsLmw%2F3n9ep6fV3mwCX8ln2%2B%2Bk9624vV25d6Fx17Q%2F5urKseuBU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77752b5e0c2cb4ee-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Size:   717
Md5:    71013b235405896ac3649fb3dc8a7a5f
Sha1:   3405685ccec6581a0b75b9395da7305282c270ca
Sha256: d32b1a21ba865c8a6c7782cc7fdf7ea1b0aa86e9cdb418a07c35b2353d072748
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4354
Cache-Control: max-age=86082
Date: Sat, 10 Dec 2022 10:06:43 GMT
Etag: "6392f673-117"
Expires: Sun, 11 Dec 2022 10:01:25 GMT
Last-Modified: Fri, 09 Dec 2022 08:48:51 GMT
Server: ECS (amb/6BAB)
X-Cache: HIT
Content-Length: 279

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /wp-content/uploads/2010/06/Rolls-Royce-Phantom-Coupe-2.jpg HTTP/1.1 
Host: www.drive.com.au
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             104.19.150.51
HTTP/2 404 Not Found
                                            
date: Sat, 10 Dec 2022 10:06:43 GMT
content-length: 0
vary: Accept-Encoding
server: cloudflare
cf-ray: 77752b5fea710b59-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Accept-Ranges: bytes
Age: 4354
Cache-Control: max-age=86082
Date: Sat, 10 Dec 2022 10:06:43 GMT
Etag: "6392f673-117"
Expires: Sun, 11 Dec 2022 10:01:25 GMT
Last-Modified: Fri, 09 Dec 2022 08:48:51 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279

                                        
                                            GET /used-2009-chevrolet-silverado_2500-ltz-8864-7063369-22-640.jpg HTTP/1.1 
Host: 2-photos.ebizautos.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             54.230.111.97
HTTP/1.1 404 Not Found
Content-Type: application/json
                                            
Content-Length: 79
Connection: keep-alive
Date: Sat, 10 Dec 2022 10:06:43 GMT
x-amzn-RequestId: 1fabb1cc-9900-465c-90fe-8cf0c0b4a9d2
Access-Control-Allow-Origin: *
Access-Control-Allow-Headers: Content-Type, Authorization
x-amz-apigw-id: c7MIBEuHIAMFj_g=
Access-Control-Allow-Methods: GET
X-Amzn-Trace-Id: Root=1-63945a33-0f99fd96115789373dc99464;Sampled=0
Access-Control-Allow-Credentials: true
X-Cache: Error from cloudfront
Via: 1.1 fc5e625db631bc657fc73f189d53fa14.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: AG9LyJCL3Akrqs36ZG9l2SEMB3lP37-RdxSK1E4tSqGYyc3HfXn7cA==
X-XSS-Protection: 0
Referrer-Policy: no-referrer-when-downgrade
X-Content-Type-Options: nosniff
cache-control: public, max-age=1800
content-security-policy-report-only: upgrade-insecure-requests; default-src 'self' https://*.motorcar.com https://*.ebizautos.media; img-src *; script-src 'self' 'unsafe-inline' *; font-src *; media-src *; frame-src *; manifest-src 'self'; style-src 'self' 'unsafe-inline' *; connect-src https://*; object-src 'none'; worker-src 'none'; base-uri 'self'; report-uri https://ebizautos.report-uri.com/r/t/csp/reportOnly;
expect-ct: max-age=3600, report-uri="https://ebizautos.report-uri.com/r/t/ct/enforce"
permissions-policy: camera=(), fullscreen=*, geolocation=*, microphone=()
report-to: {"group":"default","max_age":31536000,"endpoints":[{"url":"https://ebizautos.report-uri.com/a/t/g"}],"include_subdomains":true}


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   79
Md5:    3ecd81e243729094ac001ba1f024cf83
Sha1:   47b4e73651ea85558d378ad0ad1bd633e07a3aa9
Sha256: 10c13611ba65fd6b426d173cd33f915f3aa070f72252145277ddf6da9a4620a2
                                        
                                            GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D7630409806211872907%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D559165940546949828%26origin%3Dhttp://josh-morgan-subways-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D7630409806211872907%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D559165940546949828%26origin%3Dhttp://josh-morgan-subways-news.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site

                                        
                                             216.58.211.13
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
                                            
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Dec 2022 10:06:43 GMT
location: https://www.blogger.com/followers.g?blogID=7630409806211872907&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMzMzMzMzMiByMwMDAwMDAqByNmZmZmZmYyByMwMDAwMDA6ByMzMzMzMzNCByMwMDAwMDBKByMwMDAwMDBSByNGRkZGRkZaC3RyYW5zcGFyZW50&pageSize=21&postID=559165940546949828&origin=http%3A%2F%2Fjosh-morgan-subways-news.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: script-src 'nonce-rmcFEtelXYhFno8ItivNAw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 493
server: GSE
set-cookie: __Host-GAPS=1:8uDJZr-oMmul3MhqaZHSB2NY7f7hdA:D9Go4N9Y1ck2oa11;Path=/;Expires=Mon, 09-Dec-2024 10:06:43 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (546)
Size:   493
Md5:    60774d3df8dcd730230800f14f97225d
Sha1:   b9a749ac4f5c498b55f20be228a86e91ecd1ea4e
Sha256: dbbb42123958dd0aa68560d2a621cb87477e0108fe1335c11612dd3566bccf0f
                                        
                                            GET /_y-_B0AG-mqI/SOjjqURZ10I/AAAAAAAAAHw/AbrOoMoIgA0/s400/K%2BCar_Dodge%2BAries,%2BPlymouth%2BReliant,%2BChrysler%2BLeBaron,%2BDodge%2B400,%2BDodge%2BDart.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             142.250.74.65
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                            
Access-Control-Expose-Headers: Content-Length
ETag: "v7c"
Expires: Sun, 11 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="K Car_Dodge Aries, Plymouth Reliant, Chrysler LeBaron, Dodge 400, Dodge Dart.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 10 Dec 2022 10:06:43 GMT
Server: fife
Content-Length: 37063
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x300, components 3\012- data
Size:   37063
Md5:    8b8e1f06753439bfa2a87e37283b377b
Sha1:   dfe29dec42fe19f418d37e2baf87e6e5b9d295bc
Sha256: 6877e91991446d790908b7855b58f1d05e444aecda52914b170c1c892b03ff1f
                                        
                                            GET /classic-car-images/viva.jpg HTTP/1.1 
Host: www.oldclassiccar.co.uk
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             217.160.0.4
HTTP/2 200 OK
content-type: image/jpeg
                                            
content-length: 64322
date: Sat, 10 Dec 2022 10:06:43 GMT
server: Apache
last-modified: Fri, 25 Jan 2008 10:26:41 GMT
etag: "fb42-4448964e85a40"
accept-ranges: bytes
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, baseline, precision 8, 700x429, components 3\012- data
Size:   64322
Md5:    ba85b9ff687fc2e9d0894f2ec18204ab
Sha1:   a29578bad938d017b20b6eaa10bef7321ccc6055
Sha256: 0674d507e6d2bb833066df13be345c03d37c228a6e7642aedaa4bb834af1f3f2
                                        
                                            GET /?if=1&scr_w=1280&scr_h=1024&blog=http%3A//josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html&ref=&l=cars HTTP/1.1 
Host: lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Upgrade-Insecure-Requests: 1

                                        
                                             192.187.111.220
HTTP/1.1 200 OK
content-type: text/html; charset=utf-8
                                            
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 624
date: Sat, 10 Dec 2022 10:06:42 GMT
server: nginx
set-cookie: sid=58efe5a2-7872-11ed-8527-9ba0e28f1fb2; path=/; domain=.lostwebtracker.com; expires=Thu, 28 Dec 2090 13:20:50 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (624), with no line terminators
Size:   624
Md5:    97761a3cc95c966cdc1bb8c5382a270c
Sha1:   9e02b6e355b4c405b1218da35166d94dcc951bc0
Sha256: e823432375c8cc7f642b0a9d777e0eaf6b6b024e411eb2e2e635f6b6fc730e03
                                        
                                            GET /comment/frame/7630409806211872907?po=559165940546949828&hl=en-GB&blogspotRpcToken=9011451 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/html; charset=utf-8
                                            
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Dec 2022 10:06:42 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
content-security-policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport, script-src 'nonce-izNaKG4lEg_ltjGEPjMrZQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
cross-origin-opener-policy: same-origin; report-to="BloggerCommentUi"
report-to: {"group":"BloggerCommentUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/BloggerCommentUi/external"}]}
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=fo4aKKpilsrDZrhRL1rxG43hKMnuTy77TH7beBsbOFcd5ECGV3uqK2FLLETTeI0JipLsZkTbB9y49pxKHY4FPRFKp_pwClm9AAbbd3-FORqO9AaAZV5XDPFFSZjdXmQEB4izt38W7OT5EZpKUWUtM8McjpFZ8ov9gfhvJQBITPY; expires=Sun, 11-Jun-2023 10:06:42 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (33820)
Size:   22646
Md5:    c46a0517c88211df321bc49aa808b028
Sha1:   5cff263c0a2f20f0b998a04f37d9996257480d00
Sha256: a0a0d288293f3379152c707ec54c70a213408c027d216f964bf52db090b8f9be
                                        
                                            GET /forum/attachments/vintage-cars-classics-india/134493d1241928244-vintage-classic-mercedes-benz-cars-india-w123s-ceuta.jpg HTTP/1.1 
Host: www.team-bhp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             172.67.68.54
HTTP/1.1 301 Moved Permanently
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 0
Connection: keep-alive
Location: https://www.team-bhp.com/forum/attachments/vintage-cars-classics-india/134493d1241928244-vintage-classic-mercedes-benz-cars-india-w123s-ceuta.jpg
CF-Cache-Status: MISS
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IVvvZ%2BLBpirFicaXxl2TvlZD%2BID8SX0MaRd1CCbBh9kJhGF7yTF8aKGga26jW2ZponMGbn5ovF04A2%2B%2FJXmu%2BGhRT6USk9kOGkfP4fVhB83Z%2B4xL7iaHslSR50SW0EBldFA%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77752b5d9c56b512-OSL
alt-svc: h2=":443"; ma=60

                                        
                                            GET /sites/default/files/emvideo-youtube-A9cSv5Nu1oY_3.jpg HTTP/1.1 
Host: www.supercars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             192.124.249.160
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: Sucuri/Cloudproxy
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 134
Connection: keep-alive
X-Sucuri-ID: 19010
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Location: https://www.supercars.com:443/sites/default/files/emvideo-youtube-A9cSv5Nu1oY_3.jpg
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
X-Sucuri-Cache: MISS


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   134
Md5:    4aa7a432bb447f094408f1bd6229c605
Sha1:   1965c4952cc8c082a6307ed67061a57aab6632fa
Sha256: 34ccdc351dc93dbf30a8630521968421091e3ed19c31a16e32c2eabb55c6a73a
                                        
                                            GET /wp-content/uploads/2011/05/gumball-3000-renault-4l-3000-0617.jpg HTTP/1.1 
Host: 4l3000.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             122.10.121.121
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Server: nginx
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 146
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   146
Md5:    8eec510e57f5f732fd2cce73df7b73ef
Sha1:   3c0af39ecb3753c5fee3b53d063c7286019eac3b
Sha256: 55f7d9e99b8e2d4e0e193b2f0275501e6d9c1ebd29cadbea6a0da48a8587e3e0
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Cache-Control: 'max-age=158059'
Date: Sat, 10 Dec 2022 10:06:43 GMT
Etag: "6393da5d-118"
Server: ECS (amb/6BAB)
Content-Length: 280

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
expires: Sat, 10 Dec 2022 10:06:43 GMT
date: Sat, 10 Dec 2022 10:06:43 GMT
cache-control: private, max-age=300
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (1034), with no line terminators
Size:   665
Md5:    34e37af4d526255a20a2056cd5f4addf
Sha1:   bcac186d6a49539e69a3f67aa08d0188966f5623
Sha256: 51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
                                        
                                            OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                            
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
date: Sat, 10 Dec 2022 10:06:43 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+620; expires=Mon, 09-Dec-2024 10:06:43 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 10 Dec 2022 10:06:43 GMT
cache-control: private
X-Firefox-Spdy: h2

                                        
                                            GET /1970_dodge_super_bee_400_sticker-p217146007268478256qjcl_400.jpg HTTP/1.1 
Host: rlv.zcache.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             151.101.128.241
HTTP/2 200 OK
content-type: image/jpeg
                                            
cache-control: public, max-age=1814400
expires: Sat, 31 Dec 2022 10:06:43 GMT
last-modified: Sat, 10 Dec 2022 10:06:43 GMT
x-robots-tag: noindex
x-image-width: 400
x-image-height: 400
timing-allow-origin: *
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Sat, 10 Dec 2022 10:06:43 GMT
age: 0
x-served-by: cache-pao17462-PAO, cache-bma1646-BMA
x-cache: MISS, MISS
x-timer: S1670666803.099410,VS0,VE427
strict-transport-security: max-age=31557600
content-length: 20055
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 400x400, components 3\012- data
Size:   20055
Md5:    47335203dcb89890400ee41db68bdd09
Sha1:   a23afbd7462362b26833865626113120337f0783
Sha256: 632f1614fe258284a83500001d1fa2bec916884c469970b06210dc37ea875a15
                                        
                                            GET /f/9504289%2Bw786%2Bar1/c12_0601_14z_musclecar%2B1968_shelby_green_hornet_prototype%2Binterior.jpg HTTP/1.1 
Host: image.motortrend.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             95.101.10.96
HTTP/2 404 Not Found
content-type: text/html; charset=iso-8859-1
                                            
content-length: 14
server: Apache
cache-control: max-age=604779
expires: Sat, 17 Dec 2022 10:06:22 GMT
date: Sat, 10 Dec 2022 10:06:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   14
Md5:    3218cbbd69118d6976e91ebb8693de5f
Sha1:   e637d9faea1e24d9196c254461fefa8d2932e5a1
Sha256: cb2f00d1e554baf96001ddb5e22ee63a8053fd3f8b6cad8acd74504af0dadb52
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=7630409806211872907&zx=71495ce2-9d5b-466c-9aed-1266367ff7ec HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.73
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
                                            
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 10 Dec 2022 10:06:43 GMT
last-modified: Sat, 10 Dec 2022 10:06:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  very short file (no magic)
Size:   21
Md5:    a62e4d501434033d5d177e67d3aafdd0
Sha1:   34f7300c9ed47334cf10826d57af785321e3138b
Sha256: b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
                                        
                                            POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 
Host: play.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2978
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.110
HTTP/2 200 OK
content-type: text/plain; charset=UTF-8
                                            
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-encoding: gzip
date: Sat, 10 Dec 2022 10:06:43 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+392; expires=Mon, 09-Dec-2024 10:06:43 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 10 Dec 2022 10:06:43 GMT
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JSON data\012- , ASCII text, with no line terminators
Size:   131
Md5:    babb6f090aeebc6f421624475b4aefff
Sha1:   06079b7547949822c118224e51604f4c5ebf80c8
Sha256: b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
                                        
                                            GET /2010/03/p3200886.jpg HTTP/1.1 
Host: apetcher.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.0.72.20
HTTP/2 404 Not Found
content-type: text/html;charset=utf-8
                                            
server: nginx
date: Sat, 10 Dec 2022 10:06:43 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   1377
Md5:    c65be8cb96210135c5f7bf3ed7719a47
Sha1:   5e3fe4638b0dad0d84c6257cbc0ddbbee12d5e50
Sha256: b443777666b9a3b24a6bd95a820a16470d523e69fb301c5cfb83798ca64d7d90
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: text/javascript
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 13:40:02 GMT
expires: Thu, 07 Dec 2023 13:40:02 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
age: 246401
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (730)
Size:   162976
Md5:    79d18cf4265108d7cecca1bf4ada6109
Sha1:   e51d0285a545381d4c39e9e0292a650ffeeecbb9
Sha256: 59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.starfieldtech.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             192.124.249.22
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: Sucuri/Cloudproxy
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 1845
Connection: keep-alive
X-Sucuri-ID: 19022
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 09 Dec 2022 19:29:17 GMT
Expires: Sat, 10 Dec 2022 19:29:17 GMT
ETag: "5d001c9bba7adc34dd6a60a1dcd72975a7f0222b"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"


--- Additional Info ---
Magic:  data
Size:   1845
Md5:    e78bfa844231fdee58cb2ce26e55703d
Sha1:   5d001c9bba7adc34dd6a60a1dcd72975a7f0222b
Sha256: ff6bbf75f32977ff049e51c2d1a87bb378ace99ee4ef9d6835543effd995d448
                                        
                                            GET /img528/6083/1001836.jpg HTTP/1.1 
Host: img528.imageshack.us
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             38.99.77.16
HTTP/1.1 404 Not Found
Content-Type: text/html
                                            
Server: nginx/1.2.8
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 168
Connection: keep-alive


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   168
Md5:    341d15013ba4391483b2d5e34cbc5c5c
Sha1:   986399b390a9aaa9a33e459099aaf9f1dbc227ab
Sha256: 376f5045e4dd8bf68ac9e374518a01c18b2fdf76344f2cc08cac143acc4f3cb8
                                        
                                            GET /wp-content/uploads/2011/01/2006_citroen_c_metisse_24_sb.jpg HTTP/1.1 
Host: www.worldtopcars.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             50.87.145.58
HTTP/1.1 200 OK
Content-Type: text/html
                                            
Date: Sat, 10 Dec 2022 10:06:40 GMT
Server: nginx/1.21.6
Content-Length: 462
Last-Modified: Tue, 28 Jul 2020 01:49:29 GMT
Vary: Accept-Encoding
Content-Encoding: gzip
X-Server-Cache: true
X-Proxy-Cache: EXPIRED
Accept-Ranges: bytes


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Size:   462
Md5:    3b58a4197a90ce28f053f853e9f5201a
Sha1:   1764aa95ccf139706beb229625b9d6d6f154bd5d
Sha256: e63cc6fceab87ebcfc2e83b5d9354ef92bd45c582ac8202ff6d141f39ec17648
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:43 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 03:28:50 GMT
Expires: Wed, 14 Dec 2022 03:28:49 GMT
Etag: "9ed12cdbb8e3b8f486058eff097ef57c36ad70c5"
Cache-Control: max-age=321125,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77752b62fdcd1c02-OSL

                                        
                                            GET /2011/01/p1000095.jpg HTTP/1.1 
Host: ddspictures.files.wordpress.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.0.72.28
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
date: Sat, 10 Dec 2022 10:06:43 GMT
content-length: 127844
last-modified: Sun, 23 Jan 2011 17:54:47 GMT
expires: Wed, 04 Jan 2023 23:18:29 GMT
x-orig-src: 01_mogdir
accept-ranges: bytes
access-control-allow-credentials: true
access-control-allow-origin: https://ddspictures.wordpress.com
vary: Origin
x-nc: MISS arn 28 np
x-content-type-options: nosniff
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=8, manufacturer=Panasonic, model=DMC-G1, xresolution=128, yresolution=136, resolutionunit=2, software=Ver.1.5, datetime=2011:01:23 20:35:14], baseline, precision 8, 1100x825, components 3\012- data
Size:   127844
Md5:    54668def49a0cb97fd1b950f08c1a25f
Sha1:   11c20535b397d9565096ad584e5c1ee004c82f64
Sha256: dcdf630e3a76cc7b208540b752ee9a5051e921cfd1df8bb339ff1f953cf34f60
                                        
                                            GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:03 GMT
expires: Fri, 08 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 130720
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size:   15344
Md5:    5d4aeb4e5f5ef754e307d7ffaef688bd
Sha1:   06db651cdf354c64a7383ea9c77024ef4fb4cef8
Sha256: 3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
                                        
                                            GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.3
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 16:40:43 GMT
expires: Fri, 08 Dec 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 149160
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size:   15552
Md5:    285467176f7fe6bb6a9c6873b3dad2cc
Sha1:   ea04e4ff5142ddd69307c183def721a160e0a64e
Sha256: 5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
                                        
                                            GET /?blog=http%3A%2F%2Fjosh-morgan-subways-news.blogspot.com%2F2011%2F09%2F10-dodge-ram-2009-2010-600x400.html&ch=1&if=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTY3MDY3NDAwMywiaWF0IjoxNjcwNjY2ODAzLCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIyc25tZDZvdmhsb3Q4N2xpcXM4N2M2YzIiLCJuYmYiOjE2NzA2NjY4MDMsInRzIjoxNjcwNjY2ODAzMjEyOTY2fQ.GqhNwxCZ7ebGSF7h7ixkNr0u7MccCzZRe9syWiweoco&l=cars&ref=&scr_h=1024&scr_w=1280&sid=58efe5a2-7872-11ed-8527-9ba0e28f1fb2 HTTP/1.1 
Host: lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://lostwebtracker.com/?if=1&scr_w=1280&scr_h=1024&blog=http%3A//josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html&ref=&l=cars
Upgrade-Insecure-Requests: 1

                                        
                                             192.187.111.220
HTTP/1.1 302 Found
                                            
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Sat, 10 Dec 2022 10:06:43 GMT
location: http://ww1.lostwebtracker.com
server: nginx
set-cookie: sid=58efe5a2-7872-11ed-8527-9ba0e28f1fb2; path=/; domain=.lostwebtracker.com; expires=Thu, 28 Dec 2090 13:20:50 GMT; max-age=2147483647; HttpOnly


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   11
Md5:    32682312d17c7cbf18e73594f5570319
Sha1:   60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
Sha256: e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sectigo.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             104.18.32.68
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:44 GMT
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 07 Dec 2022 03:28:50 GMT
Expires: Wed, 14 Dec 2022 03:28:49 GMT
Etag: "9ed12cdbb8e3b8f486058eff097ef57c36ad70c5"
Cache-Control: max-age=321124,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77752b658fac1c02-OSL

                                        
                                            GET /1430/5139126344_11ed70b6ba.jpg HTTP/1.1 
Host: farm2.static.flickr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             143.204.48.75
HTTP/1.1 301 Moved Permanently
Content-Type: text/html
                                            
Server: CloudFront
Date: Sat, 10 Dec 2022 10:06:44 GMT
Content-Length: 167
Connection: keep-alive
Location: https://farm2.static.flickr.com/1430/5139126344_11ed70b6ba.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: kd3z8ZrpHSI5By-3ZaNANFShqz6Ij30BBMrvBzDPBTmWV_tCBPdKCA==


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Size:   167
Md5:    f5d40b7259645010f9a248858ad14178
Sha1:   b3051d17a6ec8c9e166bf09a62b48261ab86957b
Sha256: 7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
                                        
                                            GET /f/abf51621-0803-4cd5-a13a-c05f694a10a4/d3iyrzs-facdcbb4-3669-4e92-a622-aa891b8bc6b1.jpg/v1/fill/w_729,h_1096,q_75,strp/renault_4l_by_mistergambit-d3iyrzs.jpg?token=eyJ0eXAiOiJKV1QiLCJhbGciOiJIUzI1NiJ9.eyJpc3MiOiJ1cm46YXBwOjdlMGQxODg5ODIyNjQzNzNhNWYwZDQxNWVhMGQyNmUwIiwic3ViIjoidXJuOmFwcDo3ZTBkMTg4OTgyMjY0MzczYTVmMGQ0MTVlYTBkMjZlMCIsImF1ZCI6WyJ1cm46c2VydmljZTppbWFnZS5vcGVyYXRpb25zIl0sIm9iaiI6W1t7InBhdGgiOiIvZi9hYmY1MTYyMS0wODAzLTRjZDUtYTEzYS1jMDVmNjk0YTEwYTQvZDNpeXJ6cy1mYWNkY2JiNC0zNjY5LTRlOTItYTYyMi1hYTg5MWI4YmM2YjEuanBnIiwid2lkdGgiOiI8PTcyOSIsImhlaWdodCI6Ijw9MTA5NiJ9XV19.MAtNEQfPIhxSz3jLBCAMLttWeUWS9qDrFkxgrZhtzSA HTTP/1.1 
Host: images-wixmp-ed30a86b8c4ca887773594c2.wixmp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             34.96.91.138
HTTP/2 200 OK
content-type: image/jpeg
                                            
access-control-allow-origin: *
cache-control: public, max-age=2592000, immutable
content-length: 139840
wix-tracer: 2IiaLjkRd5OnLeIOZFTmnWOHDQp
x-seen-by: image-manipulator-554998d6f5-p45lx
date: Sat, 10 Dec 2022 10:06:43 GMT
via: 1.1 google
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=6, orientation=upper-left, xresolution=86, yresolution=94, resolutionunit=2], progressive, precision 8, 729x1096, components 3\012- data
Size:   139840
Md5:    1b694ceb733b1c38b2a1aa6e12c8003f
Sha1:   be13327b6da1f723accec73b06f0ca4f2409fdba
Sha256: 1748524b385843a94ccc52eb3abcbcc99f528ea44c0b31ff09184ca56a637a2c
                                        
                                            POST / HTTP/1.1 
Host: r3.o.lencr.org
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             23.36.77.32
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Server: nginx
Content-Length: 503
ETag: "4BDB744A2D9AC6D051F5192DBF3E00BA1B18208930655E6752FD6CCD118FAFF0"
Last-Modified: Sat, 10 Dec 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7438
Expires: Sat, 10 Dec 2022 12:10:42 GMT
Date: Sat, 10 Dec 2022 10:06:44 GMT
Connection: keep-alive

                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8732123d-ded0-4486-9019-0d87264f6c0e.webp HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 12743
x-amzn-requestid: 6ed8a5f4-45cd-45bd-9820-df450f612c34
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eK4E_-IAMFf3Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa45-31d928fc430577b463a68bd0;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: YTqJN92gTy04q3obEXe4P1gmG2h9b2IQjjSkkUXyqnfFOL67uobN4Q==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 a847181d425b7fc57e81eb3c800bfdf2.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:58:18 GMT
age: 43706
etag: "68bac75574641febc463bd0819392dae2da15811"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   12743
Md5:    0df452512aae4c4c1f4a2cd263b16dfd
Sha1:   68bac75574641febc463bd0819392dae2da15811
Sha256: e0a9301c5be849e116f1d98b819c2eb91f73e74d836f3e099f2cd266e8f0bb36
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4acdd84d-55dd-4e5d-bcf3-ab9d63566335.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7535
x-amzn-requestid: 9c904976-42b9-40c9-aefa-201f0f84358f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMUHw7IAMFSng=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3a601e621f9f31c7509f4e52;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: nXI46ZBJB6-LoLmfPuwmnQV9lamFDrpOdrgRXopTz7fGgwDYYGmT9A==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 943c6a4d4ee43b18ee91634536f53eae.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:53:07 GMT
age: 44017
etag: "3f330d6c27242cc3d65b975ab4a1c39b08fb69de"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7535
Md5:    a81548132f6f176f60e4fc278114ff84
Sha1:   3f330d6c27242cc3d65b975ab4a1c39b08fb69de
Sha256: 82095572be60a13b933293fa38a956e366a854becc5532dfccbf5893366ab702
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd0c11050-5c0c-4d59-80cd-f72cf377a852.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7919
x-amzn-requestid: 05f49b7c-7c76-4df4-8258-c270078d8fe9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctl_TH-KoAMFkWg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638ee9fb-1971e1e0359763a96b4d320b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 07:06:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 38rHJFU5mLhdS81J4hbEWQLAAVgwdpQk_iSHvdKg0cvFrbuQv9AO1A==
via: 1.1 d0387b833e3ca8cb748a1296b4b4bf2a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 11:54:26 GMT
age: 79938
etag: "d795c519ea637a213aab1d80daaf44ce5ad19069"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7919
Md5:    b1a13d12c326848d5b7adeb2562a35a5
Sha1:   d795c519ea637a213aab1d80daaf44ce5ad19069
Sha256: f7b99c93b99268e1b2fa438d493cf23cd75a98833710ddd22b5278a76e9f019a
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9aa9678b-479f-4894-b9e7-3d05e236f19c.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 8841
x-amzn-requestid: 09b64f8e-60c0-4cf6-a0dc-15e597bd9d85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eMWH7MIAMFyow=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4e-3471ee5f5a78b55c424e2c6d;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:14 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: bVrZoVci4YfYCRAZqXhH60jeZdSTx3uS0lLKZB9DOfHBiqFvyAAkfw==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 21:53:17 GMT
age: 44007
etag: "abf58087f0e345202da088238daea85d177b431b"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   8841
Md5:    9051770b3587c195bea670f8820e8cfe
Sha1:   abf58087f0e345202da088238daea85d177b431b
Sha256: f687a10c0ae63699a551977e9a4ec5bc7ba606b1925178d7ed4ec6728889bb2e
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbc287dc2-d769-4627-972b-c4304963fead.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 3357
x-amzn-requestid: 860c993a-e391-474a-b306-064c0faabc67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eLwFaSoAMFwfw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa4b-30dcd029382c1d825f2a0791;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: -MI_dPaTXZPndQzYo2R9p-UiDQNyRh76-XU2fhwjXyKiTVRLjNc3fQ==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:04:04 GMT
age: 43360
etag: "99f89631065869ff2f25762feb2f39af108b5ed8"
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   3357
Md5:    a164807db41edd8da259af2cec18b328
Sha1:   99f89631065869ff2f25762feb2f39af108b5ed8
Sha256: 400c635040d3d141ec35237e64380b7cd1ba02016a90e36e8376afc41a14cb0f
                                        
                                            GET / HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://lostwebtracker.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:44 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=7367b740-2f50-f5a8-363e-8b70bd85599c; expires=Sat, 10-Dec-2022 10:21:44 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BTQ6cSsBQzLx3zBKetgSI8dHJVb2L9mBW1+HHXyOs7F+LjgjF6WXL5MdfkDCqaVLcplk0r1fWKREvuM8z2Q0qQ==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1500), with no line terminators
Size:   1052
Md5:    240b07867ccb1796804e6776dd2f3b19
Sha1:   9e26e8daef05ad4c018935d76a363226ba3b3a15
Sha256: 035681e1645f91bec0055cc61e26699899f88bec4fd4e6d8d5edd3cf74d7fefa

Blocklists:
  - fortinet: Malware
                                        
                                            GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c3a6c54-dd12-46c8-8acb-7c425ab40af5.jpeg HTTP/1.1 
Host: img-getpocket.cdn.mozilla.net
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             34.120.237.76
HTTP/2 200 OK
content-type: image/jpeg
                                            
server: nginx
content-length: 7811
x-amzn-requestid: dc97f86e-a29c-4139-887a-e775a0327280
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c5eK4EH_oAMFYqw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6393aa45-3a38086160ac180b3f8cf5d8;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 21:36:05 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TM_0Q_GmJDuXth6JpRvm_JAZXwT-xFZEjzuMeIzfzBu1J5jQ_Tng9A==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 aef00f14752da9aa504d392fd46eff94.cloudfront.net (CloudFront), 1.1 google
date: Fri, 09 Dec 2022 22:15:38 GMT
etag: "1fbbf8fb328a1406904d6346004e2c89c6ba2419"
age: 42666
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size:   7811
Md5:    052b61a3bd1c839e1f5ce37834cad817
Sha1:   1fbbf8fb328a1406904d6346004e2c89c6ba2419
Sha256: 96dcb266eaec98f6305071598df3b49ca93234e0e8b1c8c9801a1a99d7f5c817
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: josh-morgan-subways-news.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/2011/09/10-dodge-ram-2009-2010-600x400.html

                                        
                                             172.217.21.161
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Expires: Sat, 10 Dec 2022 10:06:44 GMT
Date: Sat, 10 Dec 2022 10:06:44 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 29 Nov 2022 03:15:55 GMT
ETag: W/"c16db2cc1ffd4602bfaa71c0179ddbb9d8eb9f0285e45ee397a2c5f2ad04cfe6"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Size:   412
Md5:    501c61a70f5c41181aa050d9110909ca
Sha1:   5b985d5671a7caf686fdfb1df13488c4407f6c9f
Sha256: c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
                                        
                                            GET /js/parking.2.100.2.js HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:44 GMT
Last-Modified: Mon, 14 Nov 2022 17:45:41 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   22285
Md5:    239c79e8ead12ade233b4b98f3a1d68d
Sha1:   ebb33fbc73ffa07c517270874bef61576c7aecf6
Sha256: 148cf1738ec4c4800fa6e1fa02ea75d6cc76c5d0096b11dc1af4b47ffbcf2d0b

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /_fd HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.lostwebtracker.com/
Content-Type: application/json
Origin: http://ww1.lostwebtracker.com
Connection: keep-alive
Content-Length: 0

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 10 Dec 2022 10:06:44 GMT
X-Version: 2.100.2
Set-Cookie: parking_session=b260a5b4-9b52-47fe-b861-0868fd1bb2eb; expires=Sat, 10-Dec-2022 10:21:44 GMT; Max-Age=900; path=/; httponly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (5369), with no line terminators
Size:   2660
Md5:    d339dfad807615ead2848ad602b2306d
Sha1:   d060e22724758ba8dd64c08118ca5ee1da094a27
Sha256: 900f21a1b907ed67b4a032b6b49cf82cbe48c06b3332f34b23071827ca4bec51

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /px.gif?ch=1&rn=7.267473902055152 HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:44 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=7.267473902055152 HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:44 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /1430/5139126344_11ed70b6ba.jpg HTTP/1.1 
Host: farm2.static.flickr.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             143.204.48.75
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sat, 10 Dec 2022 10:06:44 GMT
edge-control: public, max-age=31536000
surrogate-control: public, max-age=31536000
cache-control: public, max-age=31536000
expires: Sun, 10 Dec 2023 10:06:44 GMT
imagewidth: 500
imageheight: 333
last-modified: Fri, 22 Mar 2019 11:17:02 GMT
etag: "73edeb97e8bcd73f84422f5cd49d4583.1"
streaming: false
origintype: X
server: Jubilee
quote: "I'm not a kid anymore, I'm one of you, one of the X-Men. It means more to me than anything in the world."
access-control-allow-origin: *
access-control-allow-methods: GET, OPTIONS
powered-by: Mutation/1.0
hiring: Change the world of photography with us. https://www.flickr.com/jobs/
ourvalues: Dare (#4 of 5)
x-request-id: dec983c0
x-frame-options: DENY
p3p: CP="This is not a P3P policy. We respect your privacy."
x-env: a=live, b=jubilee, c=4cf206a9, e=b1cfc1fdb4a90fbd7ed7449176940c7c057c6af1
x-ttfb: 0.1451
x-ttdb-l: 67026
mib: 2
x-cache: Miss from cloudfront
via: 1.1 bcd5dadccb0831729969c938747ff79a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: fQ1Pp6sDGCN1najVHafR7wCteg30m4oAiw_Gh-cOF2qRfdtkos2hbg==
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=3], baseline, precision 8, 500x333, components 3\012- data
Size:   67498
Md5:    cebbafd1de2baa9606e133d7af6589eb
Sha1:   9df3c79aaef9ff088bd12fec34263ea0112e1fe9
Sha256: 296f953ad062268873156dfcd4e2bf7a92ba7f810666c68b28760d935b2467ab
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/search.svg?c=%2302198b HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.217.21.161
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 272
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:18:21 GMT
expires: Sat, 10 Dec 2022 12:18:21 GMT
cache-control: public, max-age=82800
age: 74903
last-modified: Thu, 19 Dec 2019 14:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (390)
Size:   272
Md5:    ab1acb76dd408583614a7a6cedf41866
Sha1:   e2d2d7074479023d37474ab62755b658d22d4ab1
Sha256: 8622edbe2503910e3cbeecef073a09e662fd2507436c3aabf885d155afd96565
                                        
                                            GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             172.217.21.161
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sat, 10 Dec 2022 05:17:47 GMT
expires: Sun, 11 Dec 2022 04:17:47 GMT
cache-control: public, max-age=82800
age: 17337
last-modified: Tue, 09 Feb 2021 14:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)
Size:   278
Md5:    bb7fc36f627255dd4783f849dca0932e
Sha1:   80e89ef8f3c2c8ee982523757fce214ea7323a69
Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647
                                        
                                            GET /css?family=Michroma&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Dec 2022 10:06:44 GMT
date: Sat, 10 Dec 2022 10:06:44 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET / HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Upgrade-Insecure-Requests: 1

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:45 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12; expires=Sat, 10-Dec-2022 10:21:45 GMT; Max-Age=900; path=/; HttpOnly
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_BTQ6cSsBQzLx3zBKetgSI8dHJVb2L9mBW1+HHXyOs7F+LjgjF6WXL5MdfkDCqaVLcplk0r1fWKREvuM8z2Q0qQ==
Accept-CH: sec-ch-prefers-color-scheme
Critical-CH: sec-ch-prefers-color-scheme
Vary: sec-ch-prefers-color-scheme
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1504), with no line terminators
Size:   1054
Md5:    8d599d0c9989ef4079a1e1378730801d
Sha1:   01992ab60f14e01fe9e1baed31248d12962c648c
Sha256: 15148795e4fc5b0034a0dc5f3d4825ad80c66a926fbf3fadefb06dbb1d0112e7

Blocklists:
  - fortinet: Malware
                                        
                                            GET /js/parking.2.100.2.js HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:45 GMT
Last-Modified: Mon, 14 Nov 2022 17:45:18 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  HTML document, ASCII text, with very long lines (65536), with no line terminators
Size:   22285
Md5:    239c79e8ead12ade233b4b98f3a1d68d
Sha1:   ebb33fbc73ffa07c517270874bef61576c7aecf6
Sha256: 148cf1738ec4c4800fa6e1fa02ea75d6cc76c5d0096b11dc1af4b47ffbcf2d0b

Blocklists:
  - fortinet: Phishing
                                        
                                            POST /_fd HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.lostwebtracker.com/
Content-Type: application/json
Origin: http://ww1.lostwebtracker.com
Connection: keep-alive
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12
Content-Length: 0

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 10 Dec 2022 10:06:45 GMT
X-Version: 2.100.2
Set-Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12; expires=Sat, 10-Dec-2022 10:21:45 GMT; Max-Age=900; path=/; httponly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with very long lines (5369), with no line terminators
Size:   2661
Md5:    f141265bbe4211d91416a3b83f125efd
Sha1:   2a9259d29e6b03e691f5177b2ba56f08872d1dee
Sha256: ac8b4a79629d5e783198a0f533a0179b9198b8365589d266fb433d955fcc4b7a

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /px.gif?ch=1&rn=5.8784710140864735 HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:45 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            GET /px.gif?ch=2&rn=5.8784710140864735 HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: image/gif
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:45 GMT
Content-Length: 42
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Accept-Ranges: bytes


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1\012- data
Size:   42
Md5:    d89746888da2d9510b64a9f031eaecd5
Sha1:   d5fceb6532643d0d84ffe09c40c481ecdf59e15a
Sha256: ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /favicon.ico HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                            
Server: openresty
Date: Sat, 10 Dec 2022 10:06:45 GMT
Content-Length: 0
Last-Modified: Wed, 15 Sep 2021 19:38:30 GMT
Connection: keep-alive
ETag: "61424bb6-0"
x-backend-server: ip-10-201-16-22.ec2.internal
Accept-Ranges: bytes

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /gampad/cookie.js?domain=ww1.lostwebtracker.com&client=dp-bodis30_3ph&product=SAS&callback=__sasCookie HTTP/1.1 
Host: partner.googleadservices.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             216.58.207.226
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
date: Sat, 10 Dec 2022 10:06:45 GMT
server: cafe
cache-control: private
content-length: 245
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (376), with no line terminators
Size:   245
Md5:    8516146f89c642472797abba87fe50fa
Sha1:   e12a8c6263375f00cc900df06f2be39fa657bed5
Sha256: e9a985449d3e8d0598374f50756994d528ac803e75402d9202844057d1d01aff
                                        
                                            GET /adsense/domains/caf.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ww1.lostwebtracker.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.164
HTTP/2 200 OK
content-type: text/javascript; charset=UTF-8
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/ads-afs-ui
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Sat, 10 Dec 2022 10:06:45 GMT
expires: Sat, 10 Dec 2022 10:06:45 GMT
cache-control: private, max-age=3600
etag: "14181701328128387770"
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  data
Size:   105806
Md5:    8f221345460bab14e90e26674dc0214f
Sha1:   f025c0a8b80279b5fcb505771433501bc2b0df2d
Sha256: 55b266aa089546b265f8762ca3f97264f7db53a51865405e52626591513a8757
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /css?family=Michroma&display=swap HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.74
HTTP/2 200 OK
content-type: text/css; charset=utf-8
                                            
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 10 Dec 2022 10:06:45 GMT
date: Sat, 10 Dec 2022 10:06:45 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  ASCII text, with very long lines (390)
Size:   552
Md5:    3ae821533645aa6e503e21990703c050
Sha1:   7f98fde15e93e75afad6c3b8738e9d6ae7e53e46
Sha256: 2cad3d8109f565218b15713f3c3992b8301f949fc73dd8b28b8bb2a41887350f
                                        
                                            POST /gts1c3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        
                                             142.250.74.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                            
Date: Sat, 10 Dec 2022 10:06:46 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

                                        
                                            GET /ad_icons/standard/publisher_icon_image/call_to_action_arrow.svg?c=%23ffffff HTTP/1.1 
Host: afs.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.google.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.217.21.161
HTTP/2 200 OK
content-type: image/svg+xml
                                            
accept-ranges: bytes
vary: Accept-Encoding
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 278
x-content-type-options: nosniff
content-encoding: gzip
server: sffe
x-xss-protection: 0
date: Sat, 10 Dec 2022 05:17:47 GMT
expires: Sun, 11 Dec 2022 04:17:47 GMT
cache-control: public, max-age=82800
age: 17339
last-modified: Tue, 09 Feb 2021 14:15:00 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (306)
Size:   278
Md5:    bb7fc36f627255dd4783f849dca0932e
Sha1:   80e89ef8f3c2c8ee982523757fce214ea7323a69
Sha256: 735f48c2876099e6a731c65fc46ec1ec133c316e0997d04eb0ee246741bee647
                                        
                                            GET /s/michroma/v16/PN_zRfy9qWD8fEagAPg9pTk.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 17156
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 22:00:54 GMT
expires: Wed, 06 Dec 2023 22:00:54 GMT
cache-control: public, max-age=31536000
age: 302752
last-modified: Tue, 26 Apr 2022 14:38:29 GMT
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  Web Open Font Format (Version 2), TrueType, length 17156, version 1.0\012- data
Size:   17156
Md5:    402cbe860d64ae2e13145e34cbc7889c
Sha1:   7af4691dc306b7583365b9ff2ead0c1f6db017c5
Sha256: da748253b458c5fc9c9a5e3c108b1cda280f52df4008702b9cea695ec23332aa
                                        
                                            GET /s/quicksand/v30/6xK-dSZaM9iE8KbpRA_LJ3z8mH9BOJvgkP8o58a-wg.woff2 HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://ww1.lostwebtracker.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        
                                             142.250.74.35
HTTP/2 200 OK
content-type: font/woff2
                                            
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 13888
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:19 GMT
expires: Sat, 09 Dec 2023 13:33:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 18 Jul 2022 19:12:09 GMT
age: 74007
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  gzip compressed data, max compression\012- data
Size:   14300
Md5:    f00a41abbc442928a77d8a97d2952c2e
Sha1:   16ebc4ba644e4a7325d995d7e8b1ab68881c75bf
Sha256: 6bf08efe91f7bbf8318495c9484270821a926553e5be226ea2e37d468b2e1bcd
                                        
                                            POST /_tr HTTP/1.1 
Host: ww1.lostwebtracker.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.lostwebtracker.com/
Content-Type: application/json
Origin: http://ww1.lostwebtracker.com
Content-Length: 2153
Connection: keep-alive
Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12; __gsas=ID=dfb9730294f531bd:T=1670666805:S=ALNI_MYNVTGG0d157KPwatNcT7t60vVGnw

                                        
                                             199.59.243.222
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                            
Server: openresty
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 10 Dec 2022 10:06:46 GMT
X-Version: 2.100.2
Set-Cookie: parking_session=97648889-fd99-6f74-e26a-4cd0a6f70c12; expires=Sat, 10-Dec-2022 10:21:46 GMT; Max-Age=900; path=/; httponly
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache, no-store, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
Content-Encoding: gzip


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   22
Md5:    5cfde9b47de2d84bd26fc473632647c0
Sha1:   fd53c70631b6068328be57daec71bd94bf004d41
Sha256: 47fd05ef74fef5da03fa22483e63fc977cad8e026ae41dadbbcc3745907f306b

Blocklists:
  - fortinet: Phishing
                                        
                                            GET /wp-content/uploads/2010/12/yahoo-maktoob-taxi-ad-Egypt.jpg HTTP/1.1 
Host: arabcrunch.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.218.56
HTTP/2 526 No Reason Phrase
content-type: text/html; charset=UTF-8
                                            
date: Sat, 10 Dec 2022 10:06:43 GMT
set-cookie: cf_ob_info=526:77752b5f7ad2b4fa:OSL; path=/; expires=Sat, 10-Dec-22 10:07:13 GMT cf_use_ob=443; path=/; expires=Sat, 10-Dec-22 10:07:13 GMT
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
expires: Thu, 01 Jan 1970 00:00:01 GMT
cf-ray: 77752b5f7ad2b4fa-OSL
server: cloudflare
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /wp-content/uploads/2011/01/10-dodge-ram-2009-2010-600x400.jpg HTTP/1.1 
Host: articles.dashzracing.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://josh-morgan-subways-news.blogspot.com/

                                        
                                             18.119.154.66
HTTP/1.0 404 Not Found
content-type: text/html
                                            
cache-control: no-cache
x-reason: MediaRequest


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /sites/default/files/emvideo-youtube-A9cSv5Nu1oY_3.jpg HTTP/1.1 
Host: www.supercars.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             192.124.249.160
HTTP/2 301 Moved Permanently
content-type: text/html; charset=iso-8859-1
                                            
server: nginx
date: Sat, 10 Dec 2022 10:06:44 GMT
location: http://www.supercars.com/sites/default/files/emvideo-youtube-A9cSv5Nu1oY_3.jpg/
x-sucuri-id: 19010
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
content-security-policy: upgrade-insecure-requests;
content-encoding: gzip
x-varnish: 839815
age: 0
via: 1.1 varnish-v4
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: max-age=315360000
x-sucuri-cache: MISS
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: 
                                        
                                            GET /forum/attachments/vintage-cars-classics-india/134493d1241928244-vintage-classic-mercedes-benz-cars-india-w123s-ceuta.jpg HTTP/1.1 
Host: www.team-bhp.com
                                        
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://josh-morgan-subways-news.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        
                                             172.67.68.54
HTTP/2 200 OK
content-type: image/jpeg
                                            
date: Sat, 10 Dec 2022 10:06:44 GMT
x-frame-options: SAMEORIGIN
cache-control: max-age=31536000, public
vary: User-Agent,Accept-Encoding
expires: Sun, 10 Dec 2023 10:06:44 GMT
last-modified: Sun, 10 May 2009 04:04:04 GMT
etag: "134493"
content-disposition: inline; filename*=ISO-8859-1''W123sinCeuta.jpg
content-transfer-encoding: binary
content-encoding: gzip
x-varnish: 189071685
via: 1.1 varnish-v4
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=S8brOCnla4KOr9kOizSKPyP%2B56RVxxN%2FuHIB9JysBTKIYTe4Ra3gqaTKlJAaXHu0DLiZ4Q58oTHg30YIo92omoQKUMlhdEgDj%2B8cd7DALI065ZrQmUPiONGWe9N55KG4%2BKo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77752b61cd38b509-OSL
X-Firefox-Spdy: h2


--- Additional Info ---
Magic:  
Size:   0
Md5:    
Sha1:   
Sha256: