| www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css |  142.250.178.73 | 200 OK | 31 kB |
URL GET www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css IP142.250.178.73:443
Requested byhttps://clifposttitab1979.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typeASCII text, with very long lines (30596) Hashe3f09df1bc175f411d1ec3dfb5afb17b 3994ec3efe3c2447e7bbfdd97bb7e190dd1658f9 1a2eca9e492e3a21e02dd77ad44d7af45c4091d35ede79e948b7a3f23e5b3617
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clifposttitab1979.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 10 Apr 2025 18:31:33 GMT
expires: Fri, 10 Apr 2026 18:31:33 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 10 Apr 2025 16:57:24 GMT
content-type: text/css
vary: Accept-Encoding
age: 534074
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| www.blogger.com/static/v1/widgets/2218197725-widgets.js | 142.250.178.73 | 200 OK | 146 kB |
URL GET www.blogger.com/static/v1/widgets/2218197725-widgets.js IP142.250.178.73:443
Requested byhttps://clifposttitab1979.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typeJavaScript source, ASCII text, with very long lines (4070) Size146 kB (146162 bytes) Hash4351f8b1f1a32de2e85199c6016ebaa0 842ee93c12c12c50317092c1bac13ae3f38c268f d8057516c1430b3244e06a03caa5fbbe2ddb941537990017b2f7fe783861fc3a
GET /static/v1/widgets/2218197725-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clifposttitab1979.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 51662
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 15 Apr 2025 03:03:24 GMT
expires: Wed, 15 Apr 2026 03:03:24 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 15 Apr 2025 01:39:58 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 157763
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| clifposttitab1979.blogspot.com/js/cookienotice.js | 142.250.74.161 | 200 OK | 6.5 kB |
URL GET clifposttitab1979.blogspot.com/js/cookienotice.js IP142.250.74.161:443
Requested byhttps://clifposttitab1979.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
File typeJavaScript source, ASCII text Hasha705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568
GET /js/cookienotice.js HTTP/1.1
Host: clifposttitab1979.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clifposttitab1979.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 2026
date: Wed, 16 Apr 2025 22:52:47 GMT
expires: Wed, 23 Apr 2025 22:52:47 GMT
cache-control: public, max-age=604800
last-modified: Wed, 16 Apr 2025 17:57:19 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| clifposttitab1979.blogspot.com/favicon.ico |  0.0.0.0 | | 0 B |
URL GET clifposttitab1979.blogspot.com/favicon.ico IP0.0.0.0:0
Requested byhttps://clifposttitab1979.blogspot.com/ CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: clifposttitab1979.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clifposttitab1979.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
|
|
| clifposttitab1979.blogspot.com/ | 142.250.74.161 | 200 OK | 10 kB |
URL User Request GET clifposttitab1979.blogspot.com/ IP142.250.74.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
File typeHTML document, ASCII text, with very long lines (4116) Hashbb8cb9e694a41addd9659c21c81feece 3133dcb0fb7635e8abba57891f202c96d4c228da 0348d5f57201b4fae2675db93eb800b623d33bef379c5ba5ae952fd1c99d3822
GET / HTTP/1.1
Host: clifposttitab1979.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 16 Apr 2025 22:52:46 GMT
date: Wed, 16 Apr 2025 22:52:46 GMT
cache-control: private, max-age=0
last-modified: Wed, 04 Sep 2024 23:01:04 GMT
etag: W/"7feac6c1fae999544a719f0ceb63ff89c1498fbf8ebf24a054809b4aeba6508c"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 3203
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| draft.blogger.com/dyn-css/authorization.css?targetBlogID=5346755218523227856&zx=a2cbfcdc-44bc-49f3-abe4-0c891e16edde | 172.217.21.169 | 200 OK | 1 B |
URL GET draft.blogger.com/dyn-css/authorization.css?targetBlogID=5346755218523227856&zx=a2cbfcdc-44bc-49f3-abe4-0c891e16edde IP172.217.21.169:443
Requested byhttps://clifposttitab1979.blogspot.com/ CertificateIssuerGoogle Trust Services Subject*.blogger.com Fingerprint75:81:08:06:F2:E8:44:58:B6:62:59:16:53:40:E8:D8:6E:3C:DB:EB ValidityThu, 20 Mar 2025 11:18:25 GMT - Thu, 12 Jun 2025 11:18:24 GMT
File typevery short file (no magic) Hash68b329da9893e34099c7d8ad5cb9c940 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
GET /dyn-css/authorization.css?targetBlogID=5346755218523227856&zx=a2cbfcdc-44bc-49f3-abe4-0c891e16edde HTTP/1.1
Host: draft.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://clifposttitab1979.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 16 Apr 2025 22:52:48 GMT
last-modified: Wed, 16 Apr 2025 22:52:48 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww1.forkinz.com/bmDLlMilo.js | 199.59.243.228 | 200 OK | 36 kB |
URL GET ww1.forkinz.com/bmDLlMilo.js IP199.59.243.228:80
File typeJavaScript source, Unicode text, UTF-8 text, with very long lines (35690) Hashb31a2ef88b7707fdd5e9dacade05a504 349fc0a18b1b31d2fe8f81a28034dd600caf4ae1 1a05b5cf9f72b9af409d10301e29196c4435fd094310bd0da4c2d7856b80d0af
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /bmDLlMilo.js HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 16 Apr 2025 22:52:50 GMT
content-type: application/javascript; charset=utf-8
content-length: 35693
x-request-id: 23781092-4428-480f-8c8d-255d59362e5b
set-cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a; expires=Wed, 16 Apr 2025 23:07:50 GMT
|
|
| ww1.forkinz.com/_fd | 199.59.243.228 | 200 OK | 5.4 kB |
IP199.59.243.228:80
File typeASCII text, with very long lines (5389), with no line terminators Hash2349547a3c1c0f158b0863acebb4cfb8 676a66805299f09029c8b98e89bb07724abc6be4 ad3fc78ed0c02a3a1d768cf36e6cbbbeb552be02e12bbe42d785e82dccf0ed7b
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /_fd HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.forkinz.com/
Content-Type: application/json
Origin: http://ww1.forkinz.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a
Pragma: no-cache
Cache-Control: no-cache
Content-Length: 0
HTTP/1.1 200 OK
date: Wed, 16 Apr 2025 22:52:50 GMT
content-type: application/json; charset=utf-8
content-length: 5389
x-request-id: adadfd93-8d89-4030-a083-8bc1bfd21e29
set-cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a; expires=Wed, 16 Apr 2025 23:07:50 GMT
|
|
| syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F | 216.58.207.238 | 200 OK | 14 kB |
URL GET syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
File typeHTML document, ASCII text, with very long lines (13055) Hashdcd5d53206386bfeeebb6caea7ac91aa 5c201a7417f0076b4057cf8b839a1b75afff6756 7a24f38a8ce83867df064a8bfdc0aa48bcdd69cc325c099998b7a4270dd823bf
GET /afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
content-disposition: inline
date: Wed, 16 Apr 2025 22:52:51 GMT
expires: Wed, 16 Apr 2025 22:52:51 GMT
cache-control: private, max-age=3600
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-093EGXJHKUkmsXUudqWHnw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
content-encoding: br
server: gws
content-length: 2676
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=9iol0kd9154x&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=9iol0kd9154x&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=9iol0kd9154x&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bs&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-cw_bH_X5P_0xydKfoAq-xQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 16 Apr 2025 22:52:52 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xniadyfa713b&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 | 216.58.207.238 | 204 No Content | 0 B |
URL GET syndicatedsearch.goog/afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xniadyfa713b&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 IP216.58.207.238:443
CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /afs/gen_204?client=dp-bodis30_3ph&output=uds_ads_only&zx=xniadyfa713b&cd_fexp=72717108&aqid=wzQAaJizB7-0xdwPisy36Aw&psid=3113057640&pbt=bv&adbx=290&adby=145&adbh=364&adbw=700&adbah=114%2C114%2C114&adbn=master-1&eawp=partner-dp-bodis30_3ph&errv=744711979&csala=6%7C0%7C352%7C92%7C40&lle=0&ifv=1&hpt=0 HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 204 No Content
content-type: text/html; charset=UTF-8
content-security-policy: object-src 'none';base-uri 'self';script-src 'nonce-9BILDUCAhezBPWb7MFCcyQ' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/other
cross-origin-opener-policy: same-origin-allow-popups; report-to="gws"
report-to: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/other"}]}
date: Wed, 16 Apr 2025 22:52:53 GMT
server: gws
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| clifposttitab1979.blogspot.com.ee/ | 142.250.74.161 | 302 Found | 10 kB |
URL User Request GET clifposttitab1979.blogspot.com.ee/ IP142.250.74.161:443
CertificateIssuerGoogle Trust Services Subjectmisc-sni.blogspot.com FingerprintE7:98:65:28:50:8C:40:BC:4E:3C:F6:5D:DE:13:DB:2E:CC:B3:33:E1 ValidityThu, 20 Mar 2025 11:19:23 GMT - Thu, 12 Jun 2025 11:19:22 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: clifposttitab1979.blogspot.com.ee
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
location: https://clifposttitab1979.blogspot.com/
content-type: text/html; charset=UTF-8
content-encoding: gzip
date: Wed, 16 Apr 2025 22:52:46 GMT
expires: Wed, 16 Apr 2025 22:52:46 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 205
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| |  212.32.237.92 | 200 OK | 480 B |
IP212.32.237.92:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectforkinz.com FingerprintBE:A4:00:64:2B:B8:BF:A3:23:FE:44:26:1D:E7:1D:00:7E:43:A0:92 ValidityThu, 20 Feb 2025 03:52:59 GMT - Wed, 21 May 2025 03:52:58 GMT
File typeHTML document, ASCII text, with very long lines (480), with no line terminators Hash26261fd35c5f761b4a22911cebb362d5 3e07d2c1f76e532adb76b98c27b58b03bfa1063f 5810228bd82a05b1e7cfddeeaa8f13c490381856b054175e9483c0e211a94d9e
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de.html HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
content-length: 480
content-type: text/html; charset=utf-8
date: Wed, 16 Apr 2025 22:52:47 GMT
server: Cowboy
set-cookie: sid=84f68767-1b15-11f0-8177-e66aaaebe7e7; path=/; domain=.forkinz.com; expires=Tue, 05 May 2093 02:06:55 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| forkinz.com/de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDg1MTE2OCwiaWF0IjoxNzQ0ODQzOTY4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHJlc20yaHNtNGE3a2NqcWMwYXRxdTkiLCJuYmYiOjE3NDQ4NDM5NjgsInRzIjoxNzQ0ODQzOTY4NzUxMTA2fQ.1sP4NHXpMfvXTok3Vjrs71u6ZlF56ZLIgON1o2PksVs&sid=84f68767-1b15-11f0-8177-e66aaaebe7e7 | 212.32.237.92 | 302 Found | 0 B |
URL User Request GET forkinz.com/de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDg1MTE2OCwiaWF0IjoxNzQ0ODQzOTY4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHJlc20yaHNtNGE3a2NqcWMwYXRxdTkiLCJuYmYiOjE3NDQ4NDM5NjgsInRzIjoxNzQ0ODQzOTY4NzUxMTA2fQ.1sP4NHXpMfvXTok3Vjrs71u6ZlF56ZLIgON1o2PksVs&sid=84f68767-1b15-11f0-8177-e66aaaebe7e7 IP212.32.237.92:443 ASN#60781 LeaseWeb Netherlands B.V.
CertificateIssuerLet's Encrypt Subjectforkinz.com FingerprintBE:A4:00:64:2B:B8:BF:A3:23:FE:44:26:1D:E7:1D:00:7E:43:A0:92 ValidityThu, 20 Feb 2025 03:52:59 GMT - Wed, 21 May 2025 03:52:58 GMT
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET /de.html?ch=1&js=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJhdWQiOiJKb2tlbiIsImV4cCI6MTc0NDg1MTE2OCwiaWF0IjoxNzQ0ODQzOTY4LCJpc3MiOiJKb2tlbiIsImpzIjoxLCJqdGkiOiIzMHJlc20yaHNtNGE3a2NqcWMwYXRxdTkiLCJuYmYiOjE3NDQ4NDM5NjgsInRzIjoxNzQ0ODQzOTY4NzUxMTA2fQ.1sP4NHXpMfvXTok3Vjrs71u6ZlF56ZLIgON1o2PksVs&sid=84f68767-1b15-11f0-8177-e66aaaebe7e7 HTTP/1.1
Host: forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://forkinz.com/de.html
Cookie: sid=84f68767-1b15-11f0-8177-e66aaaebe7e7
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: max-age=0, private, must-revalidate
content-length: 11
date: Wed, 16 Apr 2025 22:52:50 GMT
location: http://ww1.forkinz.com
server: Cowboy
set-cookie: sid=84f68767-1b15-11f0-8177-e66aaaebe7e7; path=/; domain=.forkinz.com; expires=Tue, 05 May 2093 02:06:57 GMT; max-age=2147483647; secure; HttpOnly
X-Firefox-Spdy: h2
|
|
| syndicatedsearch.goog/adsense/domains/caf.js | 216.58.207.238 | 200 OK | 144 kB |
URL GET syndicatedsearch.goog/adsense/domains/caf.js IP216.58.207.238:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F CertificateIssuerGoogle Trust Services Subjectsyndicatedsearch.goog Fingerprint40:28:84:65:00:64:ED:A3:1A:C2:1B:45:AA:96:A6:16:CA:BD:37:41 ValidityThu, 20 Mar 2025 11:21:50 GMT - Thu, 12 Jun 2025 11:21:49 GMT
File typeJavaScript source, ASCII text, with very long lines (1831) Size144 kB (144079 bytes) Hashf267cc78e0c1cc8d90841eda54c2e5de 8d704a7f3d8ce8f9fa04477fc29d917111a081c4 34b1ae29f010cbe8b62ef562af04f6b86924f4747ddaedc3ea2ce4a8dc948f6c
GET /adsense/domains/caf.js HTTP/1.1
Host: syndicatedsearch.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 16 Apr 2025 22:52:51 GMT
expires: Wed, 16 Apr 2025 22:52:51 GMT
cache-control: private, max-age=3600
etag: "16637348433415361788"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint85:BF:6A:5F:09:9C:AA:F5:8D:3B:2E:65:D1:16:4F:7F:03:2D:A8:DD ValidityThu, 20 Mar 2025 11:19:41 GMT - Thu, 12 Jun 2025 11:19:40 GMT
File typeSVG Scalable Vector Graphics image Hashd47125b2ba92be53dcff07ba322ce1de e4a70c8a133bacf1699fdfa4c10e24ed5b3e0c28 5a0687ea8c9aa404a7724490f046e30023ec6b5aa81d01ae4f225889a64174f6
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%2302198b HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Apr 2025 11:44:35 GMT
expires: Thu, 17 Apr 2025 10:44:35 GMT
cache-control: public, max-age=82800
age: 40096
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| ww1.forkinz.com/_tr | 199.59.243.228 | 200 OK | 2 B |
IP199.59.243.228:80
File typeASCII text, with no line terminators Hash444bcb3a3fcf8389296c49467f27e1d6 7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb 2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
POST /_tr HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ww1.forkinz.com/
Content-Type: application/json
Content-Length: 1889
Origin: http://ww1.forkinz.com
DNT: 1
Connection: keep-alive
Cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 16 Apr 2025 22:52:51 GMT
content-type: application/json; charset=utf-8
content-length: 2
x-request-id: 71058a6b-ecac-47de-a25f-8a2e1071159d
set-cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a; expires=Wed, 16 Apr 2025 23:07:51 GMT
|
|
| | 0.0.0.0 | | 0 B |
IP0.0.0.0:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Cookie: sid=84f68767-1b15-11f0-8177-e66aaaebe7e7
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
|
|
| | 199.59.243.228 | 200 OK | 1.0 kB |
IP199.59.243.228:80
File typeHTML document, ASCII text, with very long lines (314) Hash7b640896eeeebf4baef94eb94305116f a3cdbe09070ae693d9ea08b7f732b160b3de9536 8d318fda804659361496322a04c40181a969a4bce5a23767be6c59e3783ecc38
| Analyzer | Verdict | Alert |
|---|
| Quad9 DNS | malicious | Sinkholed |
GET / HTTP/1.1
Host: ww1.forkinz.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Wed, 16 Apr 2025 22:52:50 GMT
content-type: text/html; charset=utf-8
content-length: 1046
x-request-id: 50f44017-3617-4c48-88db-37132a98694a
cache-control: no-store, max-age=0
accept-ch: sec-ch-prefers-color-scheme
critical-ch: sec-ch-prefers-color-scheme
vary: sec-ch-prefers-color-scheme
x-adblock-key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBANDrp2lz7AOmADaN8tA50LsWcjLFyQFcb/P2Txc58oYOeILb3vBw7J6f4pamkAQVSQuqYsKx3YzdUHCvbVZvFUsCAwEAAQ==_L+fG0F6zaAiOdkJapPT2YBVjPFJeolVzr6aOJf//BQlaoZDPCyBP0RHVLoMB34k7RyplYj49Ad7kBS2aAsk1kw==
set-cookie: parking_session=50f44017-3617-4c48-88db-37132a98694a; expires=Wed, 16 Apr 2025 23:07:50 GMT; path=/
|
|
| www.google.com/adsense/domains/caf.js?abp=1&bodis=true | 142.250.178.68 | 200 OK | 144 kB |
URL GET www.google.com/adsense/domains/caf.js?abp=1&bodis=true IP142.250.178.68:443
CertificateIssuerGoogle Trust Services Subjectwww.google.com Fingerprint40:5C:81:99:DA:01:36:FE:E4:60:2B:67:51:3D:C2:62:8D:9A:38:47 ValidityThu, 20 Mar 2025 11:20:31 GMT - Thu, 12 Jun 2025 11:20:30 GMT
File typeJavaScript source, ASCII text, with very long lines (1831) Size144 kB (144063 bytes) Hash03d974afacc5f4bfb1273d826ada6f1e daa33b60051f661bfc922031e040b595c4a12b0e b889b98409f9223d09655bb1cda7bf9bb41c83ac4f4a64fec07c12a6479f3a19
GET /adsense/domains/caf.js?abp=1&bodis=true HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: http://ww1.forkinz.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="ads-afs-ui"
report-to: {"group":"ads-afs-ui","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-afs-ui"}]}
date: Wed, 16 Apr 2025 22:52:50 GMT
expires: Wed, 16 Apr 2025 22:52:50 GMT
cache-control: private, max-age=3600
etag: "17389966078823250003"
x-content-type-options: nosniff
link: <https://syndicatedsearch.goog>; rel="preconnect"
content-encoding: gzip
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|
| afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff | 142.250.74.33 | 200 OK | 200 B |
URL GET afs.googleusercontent.com/ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff IP142.250.74.33:443
Requested byhttps://syndicatedsearch.goog/afs/ads?adtest=off&psid=3113057640&pcsa=false&channel=pid-bodis-gcontrol97%2Cpid-bodis-gcontrol122%2Cpid-bodis-gcontrol491%2Cpid-bodis-gcontrol151%2Cpid-bodis-gcontrol162&client=dp-bodis30_3ph&r=m&hl=en&ivt=0&rpbu=http%3A%2F%2Fww1.forkinz.com%2F%3Fcaf%3D1%26bpt%3D345&max_radlink_len=50&type=3&uiopt=false&swp=as-drid-2298147197369106&oe=UTF-8&ie=UTF-8&fexp=21404%2C17301431%2C17301433%2C17301436%2C17301548%2C17301266%2C72717108&format=r3&nocache=8351744843970964&num=0&output=afd_ads&domain_name=ww1.forkinz.com&v=3&bsl=8&pac=0&u_his=3&u_tz=0&dt=1744843970966&u_w=1280&u_h=1024&biw=1280&bih=1024&psw=1280&psh=922&frm=0&uio=-&cont=rs&drt=0&jsid=caf&jsv=744711979&rurl=http%3A%2F%2Fww1.forkinz.com%2F CertificateIssuerGoogle Trust Services Subject*.googleusercontent.com Fingerprint85:BF:6A:5F:09:9C:AA:F5:8D:3B:2E:65:D1:16:4F:7F:03:2D:A8:DD ValidityThu, 20 Mar 2025 11:19:41 GMT - Thu, 12 Jun 2025 11:19:40 GMT
File typeSVG Scalable Vector Graphics image Hash11b3089d616633ca6b73b57aa877eeb4 07632f63e06b30d9b63c97177d3a8122629bda9b 809fb4619d2a2f1a85dbda8cc69a7f1659215212d708a098d62150eee57070c1
GET /ad_icons/standard/publisher_icon_image/chevron.svg?c=%23ffffff HTTP/1.1
Host: afs.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndicatedsearch.goog/
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/afs-native-asset-managers
cross-origin-opener-policy: same-origin; report-to="afs-native-asset-managers"
report-to: {"group":"afs-native-asset-managers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/afs-native-asset-managers"}]}
content-length: 174
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 16 Apr 2025 09:08:45 GMT
expires: Thu, 17 Apr 2025 08:08:45 GMT
cache-control: public, max-age=82800
age: 49446
last-modified: Thu, 02 Nov 2023 22:48:00 GMT
content-type: image/svg+xml
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
|
|