Overview

URL aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
IP216.58.211.129
ASNAS15169 Google Inc.
Location United States
Report completed2019-04-25 07:24:05 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-04-25 2 aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html Phishing
2019-04-25 2 aans1.blogspot.com/js/cookienotice.js Phishing
2019-04-25 2 go.padsdel.com/?id=292519 Malware
2019-04-25 2 go.padsdel.com/?id=292517 Malware
2019-04-25 2 go.padsdel.com/?id=292517=iframe Malware
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.211.129

Date UQ / IDS / BL URL IP
2019-06-27 13:48:24 +0200
0 - 1 - 1 https://blotoregal1984.blogspot.mk/ 216.58.211.129
2019-06-26 19:06:06 +0200
0 - 0 - 0 https://romanocarmine.blogspot.com/2019/04/co (...) 216.58.211.129
2019-06-26 19:02:07 +0200
0 - 0 - 0 https://romanocarmine.blogspot.com/ 216.58.211.129
2019-06-26 09:59:36 +0200
0 - 0 - 18 https://peccamalmramp1976.blogspot.com.ar/ 216.58.211.129
2019-06-26 08:43:11 +0200
0 - 0 - 0 https://romanocarmine.blogspot.com/2019/05/co (...) 216.58.211.129
2019-06-25 17:16:04 +0200
0 - 0 - 0 https://universal-tvs.blogspot.com/2019/06/th (...) 216.58.211.129
2019-06-25 08:52:03 +0200
0 - 0 - 0 https://universal-tvs.blogspot.com/2019/06/th (...) 216.58.211.129
2019-06-21 16:34:40 +0200
0 - 0 - 0 thelifeandstyleofjen.blogspot.com/ 216.58.211.129
2019-06-21 08:02:07 +0200
0 - 1 - 1 unviwoodswelc1979.blogspot.fr 216.58.211.129
2019-06-20 18:35:03 +0200
0 - 0 - 0 https://allsupportphonenumberhelp.blogspot.co (...) 216.58.211.129

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:14:59 +0200
0 - 0 - 0 https://docs.google.com/forms/d/e/1FAIpQLSfZp (...) 216.58.207.206
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-07-01 09:19:18 +0200
0 - 0 - 1 https://bartuatenbe1974.blogspot.pt/ 216.58.207.193
2019-07-01 08:47:18 +0200
0 - 0 - 1 https://elmulrapan1981.blogspot.ca/ 216.58.207.225
2019-07-01 08:24:54 +0200
0 - 0 - 1 pacarama1983.blogspot.com 216.58.207.193
2019-07-01 08:19:22 +0200
0 - 1 - 0 mycricketlive.live 172.217.22.179
2019-07-01 07:21:49 +0200
0 - 0 - 0 fijisharkdiving.blogspot.com/2018/10/my-fiji- (...) 216.58.207.193
2019-07-01 06:37:59 +0200
0 - 0 - 0 ta.wow-auto-forms.appspot.com/bower_component (...) 216.58.211.148

Last 10 reports on domain: aans1.blogspot.com

Date UQ / IDS / BL URL IP
2019-04-25 06:29:37 +0200
0 - 0 - 6 aans1.blogspot.com/2015/09/cubaan-samun-keret (...) 216.58.211.129
2019-04-24 06:15:13 +0200
0 - 0 - 6 aans1.blogspot.com/2013/04/kuliah-kemah-kemin (...) 216.58.207.225
2019-04-23 03:05:30 +0200
0 - 0 - 5 aans1.blogspot.com/2013/11/mt-umno-saya-masih (...) 216.58.207.225
2019-04-09 07:06:14 +0200
0 - 0 - 4 aans1.blogspot.com/2013/12/guan-eng-pakai-mer (...) 216.58.211.1
2019-04-06 03:39:52 +0200
0 - 0 - 5 aans1.blogspot.com/2015/04/inilah-yang-nak-di (...) 216.58.211.1
2019-03-22 06:09:47 +0100
0 - 0 - 5 aans1.blogspot.com/2014/12/kenapa-islam-melar (...) 216.58.211.129
2019-03-02 12:35:32 +0100
0 - 0 - 5 aans1.blogspot.com/2015/12/alhamdulillah-naji (...) 216.58.207.193
2019-02-14 06:59:58 +0100
0 - 0 - 5 aans1.blogspot.com/2014/08/gadis-ini-hina-isl (...) 216.58.207.225
2018-12-28 20:13:55 +0100
0 - 0 - 5 aans1.blogspot.com/2014/08/nora-danish-digela (...) 172.217.21.161
2018-12-10 20:10:38 +0100
0 - 0 - 5 aans1.blogspot.com/2015/04/bekas-bos-astro-aw (...) 216.58.207.193


JavaScript

Executed Scripts (81)


Executed Evals (90)

#1 JavaScript::Eval (size: 265, repeated: 1) - SHA256: fdd2120c37da9ce7a58d96be9ef6cb106c1040561b6801c70718faf6fc342e8c

                                        ({
    'bg': [-50, -50, 50, 115],
    '0': [-135, -147, 20, 14],
    '1': [-135, -135, 20, 9],
    '2': [-135, -117, 20, 13],
    '3': [-135, -100, 20, 14],
    '4': [-135, -84, 20, 15],
    '5': [-135, -70, 20, 13],
    '6': [-135, -53, 20, 15],
    '7': [-135, -38, 20, 14],
    '8': [-135, -23, 20, 14],
    '9': [-135, -7, 20, 15],
    ',': [-135, 0, 23, 7]
})
                                    

#2 JavaScript::Eval (size: 264, repeated: 1) - SHA256: 39579f75bcf62085fff19d2e37ddf70e9cf240fdb343e46ee527e3521ab5bb7c

                                        ({
    'bg': [0, -50, 50, 115],
    '0': [-115, 0, 20, 14],
    '1': [-115, -17, 20, 9],
    '2': [-115, -31, 20, 13],
    '3': [-115, -47, 20, 13],
    '4': [-115, -62, 20, 15],
    '5': [-115, -78, 20, 13],
    '6': [-115, -93, 20, 15],
    '7': [-115, -109, 20, 14],
    '8': [-115, -124, 20, 14],
    '9': [-115, -139, 20, 15],
    ',': [-112, -154, 23, 7]
})
                                    

#3 JavaScript::Eval (size: 262, repeated: 1) - SHA256: ff0504e3bd7c9ca7030953a039cc9622891cd31e22cedc2c9d33f8bbb607c74f

                                        ({
    'bg': [0, 0, 115, 50],
    '0': [0, -165, 14, 20],
    '1': [-17, -165, 9, 20],
    '2': [-31, -165, 14, 20],
    '3': [-47, -165, 13, 20],
    '4': [-62, -165, 15, 20],
    '5': [-78, -165, 13, 20],
    '6': [-93, -165, 15, 20],
    '7': [-109, -165, 14, 20],
    '8': [-124, -165, 14, 20],
    '9': [-139, -165, 15, 20],
    ',': [-102, -131, 7, 23]
})
                                    

#4 JavaScript::Eval (size: 19, repeated: 1) - SHA256: 5421715bbdaf2550e31d10fc28d444310a8fe7147bbddecf0abb490358a1553b

                                        /.*\d:\d\d | \d+$/g
                                    

#5 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 7b4ebd0690045fafb993560bf67ed1af10e70c144a61dce01691737e610f3166

                                        0,
function(L) {
    L.V(0);
}
                                    

#6 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 79f493efa783e719d2ce9f826a0c697ec35bdcd17f02abf1d0467a4b1c4483b5

                                        0,
function(L) {
    L.V(3);
}
                                    

#7 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 9949358880bd9f6ecfd4061ba489dd8687258ab27a7a5470d03e2a2944ccd5ab

                                        0,
function(L) {
    L.V(4);
}
                                    

#8 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 3566eb7e0439a82b177ba33c505d0ebd6a963b3ba45f6d33dc6aec0a36c41660

                                        0,
function(L) {
    L.V(7);
}
                                    

#9 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a127a4816a1fef7bb942fe6c75025c542db60b76be44d177a0cfca7816e4334e

                                        0,
function(L) {
    T(L, 1);
}
                                    

#10 JavaScript::Eval (size: 31, repeated: 1) - SHA256: a5f66118aa2b6ccd719567dfd616fd66c53f2d1f8c789799b1517f8dac714455

                                        0,
function(L) {
    T(L, 2);
}
                                    

#11 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 8b955ccdc42cd6098eefbdbf5458660ba887dd3e4ed8f4af9eb2414bf5dcca24

                                        0,
function(L) {
    T(L, 4);
}
                                    

#12 JavaScript::Eval (size: 31, repeated: 1) - SHA256: f735791dc5b8876d5e43a36893cf284508b63eacc91e21f9b9c82b9d09ee53e6

                                        0,
function(L) {
    z(L, 1);
}
                                    

#13 JavaScript::Eval (size: 31, repeated: 1) - SHA256: 9eaed021d041af2682ad26afcc1690d0d9137f22f4a6dee0e0421452fe0b54f6

                                        0,
function(L) {
    z(L, 2);
}
                                    

#14 JavaScript::Eval (size: 31, repeated: 1) - SHA256: cace548d7b9b83f7f2097ece1544b9e8b495b5a2f81069d17c1dbba00acfffa3

                                        0,
function(L) {
    z(L, 4);
}
                                    

#15 JavaScript::Eval (size: 187, repeated: 1) - SHA256: fb2e2d6efcfd6d1ea53de3bf35bc57f2d40baddc05c600cca1d7c9dcf5c4cd71

                                        0,
function(L, I) {
    ((I.push(L[0] << 24 | L[1] << 16 | L[2] << 8 | L[3]), I).push(L[4] << 24 | L[5] << 16 | L[6] << 8 | L[7]), I).push(L[8] << 24 | L[9] << 16 | L[10] << 8 | L[11]);
}
                                    

#16 JavaScript::Eval (size: 95, repeated: 1) - SHA256: 1663d69597fdc22bba96493be1975c70a7fbfb70ff73920c6f7148bf3902af52

                                        0,
function(L, I) {
    (I = L.j(), L = L.A(I), L)[0].removeEventListener(L[1], L[2], false);
}
                                    

#17 JavaScript::Eval (size: 53, repeated: 1) - SHA256: a981f464499ebb6ef0c146fc87c6d17e6c03ace840575541b146e453a9b7a408

                                        0,
function(L, I) {
    sn(L, (I = L.A(L.j()), I));
}
                                    

#18 JavaScript::Eval (size: 84, repeated: 1) - SHA256: c47412d40088d71eca6672a12397f85a3e2a754831a0e7a433fe01eb472b0850

                                        0,
function(L, I) {
    w(L, 1, 5) || (I = aq(L), W(L, I.i, I.L.apply(I.N, I.G)));
}
                                    

#19 JavaScript::Eval (size: 81, repeated: 1) - SHA256: 3f78adb72d6bf07915a61a32e353b1557dc486debde53a871591f03aa614559b

                                        0,
function(L, I, u) {
    W(L, (I = (I = L.j(), u = L.j(), L).A(I), u), v(I));
}
                                    

#20 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 9d423e0ae70dcef77b54a3218e2fe29f12581c753978a0c8e5f21866e3d449fd

                                        0,
function(L, I, u) {
    W(L, (I = (u = (I = L.j(), L.j()), L.g[I]) && L.A(I), u), I);
}
                                    

#21 JavaScript::Eval (size: 76, repeated: 1) - SHA256: 6392b2e9e0b528ff47b94199baee594c2c26bf478e21e49346728a97a8f5842a

                                        0,
function(L, I, u) {
    W(L, (u = (I = L.j(), L.j()), u), "" + L.A(I));
}
                                    

#22 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 128962ff25df278f1ebdcf9625a736bfeeca4ccdd77785ce69dfa7c79e448be8

                                        0,
function(L, I, u) {
    W(L, (u = (I = L.j(), L.j()), u), L.A(u) % L.A(I));
}
                                    

#23 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 638e0d479cdaba9f58f08d6c59d0e6183c5329145b4007dbfa827dee82ee1a28

                                        0,
function(L, I, u) {
    W(L, (u = (I = L.j(), L.j()), u), L.A(u) * L.A(I));
}
                                    

#24 JavaScript::Eval (size: 80, repeated: 1) - SHA256: ff10920f5d3898b50e6c0f2c9dc92f3a63fdcfba8d4119f394d35d19afcbef84

                                        0,
function(L, I, u) {
    W(L, (u = (I = L.j(), L.j()), u), L.A(u) + L.A(I));
}
                                    

#25 JavaScript::Eval (size: 80, repeated: 1) - SHA256: 00852d297163c1d40a1dd4e1e52a25e6835d0827fd42b990ca26a76a9b21fe58

                                        0,
function(L, I, u) {
    W(L, (u = (I = L.j(), L.j()), u), L.A(u) - L.A(I));
}
                                    

#26 JavaScript::Eval (size: 135, repeated: 1) - SHA256: b4d417066e751c00dc99e85b8dfed491642fb9a5886f000c1d31332820eb4b78

                                        0,
function(L, I, u) {
    return u = (I = function() {
        return u();
    }, function() {
        return L;
    }), I[this.S] = function(g) {
        L = g;
    }, I;
}
                                    

#27 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 5d3eba95d57a19cf923f1b15d9dbf43b3b9d413e60a6d096a3c9de7472b3b0a9

                                        0,
function(L, I, u) {
    u = (I = L.j(), L).j(), 0 != L.A(I) && W(L, 126, L.A(u));
}
                                    

#28 JavaScript::Eval (size: 123, repeated: 1) - SHA256: 1de2255a79f05b10b408c986280193c107a11f1fab1f22cfb4f52b67f953d742

                                        0,
function(L, I, u) {
    w(L, 1, 5) ||
        (I = L.j(), u = L.j(), W(L, u, function(g) {
            return eval(g);
        }(L.A(I))));
}
                                    

#29 JavaScript::Eval (size: 93, repeated: 1) - SHA256: 97c7d2f9197f873c404b816ced7762b63b988d214ff9444c55c8c44d855e682b

                                        0,
function(L, I, u, g) {
    (g = (I = L.j(), u = L.j(), L.j()), L).A(I)[L.A(u)] = L.A(g);
}
                                    

#30 JavaScript::Eval (size: 94, repeated: 1) - SHA256: dbb26ff823f07a1ebc44e7fb475905c07920633093ee82ec57a20a8b175798e8

                                        0,
function(L, I, u, g) {
    W((g = (I = L.j(), u = L.j(), L.j()), L), g, L.A(I) | L.A(u));
}
                                    

#31 JavaScript::Eval (size: 95, repeated: 1) - SHA256: e75eb96a65b6d1ce3d1b0c2e17692e630a635e6d8f05fd882d61d408246cc83f

                                        0,
function(L, I, u, g) {
    W((g = (I = L.j(), u = L.j(), L.j()), L), g, L.A(I) || L.A(u));
}
                                    

#32 JavaScript::Eval (size: 103, repeated: 1) - SHA256: da67d40812088f8898a77a72adfc88cb2ef95724c01b7446a88aaa2dbf6922fa

                                        0,
function(L, I, u, g) {
    W((g = (u = (I = L.j(), L).j(), L).j(), L), g, (L.A(I) in L.A(u)) + 0);
}
                                    

#33 JavaScript::Eval (size: 106, repeated: 1) - SHA256: 45858b99fd98b90f0bdc58a01c2eaa796816bd39a812dbc9b560f20379ce8229

                                        0,
function(L, I, u, g) {
    W(L, (I = (g = (I = L.j(), u = L.j(), L.j()), L.A(I) == L.A(u)), g), +I);
}
                                    

#34 JavaScript::Eval (size: 105, repeated: 1) - SHA256: d817998071e1736a1c26e8b102ac9ea30f4e5e2e0c40898bbda7b0b737d499fe

                                        0,
function(L, I, u, g) {
    W(L, (I = (g = (I = L.j(), u = L.j(), L.j()), L.A(I) > L.A(u)), g), +I);
}
                                    

#35 JavaScript::Eval (size: 113, repeated: 1) - SHA256: 5c794d48dff173c61601667fcd3c5937b0ac28ed3ee3f3804baf7fb52f0227dd

                                        0,
function(L, I, u, g) {
    W(L, (I = (u = (g = (u = (I = L.j(), L.j()), L.j()), L).A(u), L).A(I), g), I[u]);
}
                                    

#36 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 64d2c91b3263acb882c74a4cb829b69ba3d70ae58cb5f0460a16e04ece5276f1

                                        0,
function(L, I, u, g) {
    g = (u = (I = L.j(), L).j(), L).j(), W(L, g, L.A(I) << u);
}
                                    

#37 JavaScript::Eval (size: 90, repeated: 1) - SHA256: 3395fe84a98d058e41bc56e373f7a21abd616f9ed26da81e78a0255cebd7ebf5

                                        0,
function(L, I, u, g) {
    g = (u = (I = L.j(), L).j(), L).j(), W(L, g, L.A(I) >> u);
}
                                    

#38 JavaScript::Eval (size: 245, repeated: 1) - SHA256: 059eb4cbe45e989312205c026018c9b0511699b017bb4645a3b97c6209c4df74

                                        0,
function(L, I, u, g) {
    if ((I = L.U.pop())) {
        for (u = L.j(); 0 < u; u--) {
            g = L.j(), I[g] = L.g[g];
        }
        I[201] = L.g[I[218] = L.g[218], 201], L.g = I;
    } else {
        W(L, 126, L.Z.length);
    }
}
                                    

#39 JavaScript::Eval (size: 223, repeated: 1) - SHA256: dc1355a24f3f5925cf687b27dff3dbc598bf3218bb01cdea26b5aa08e6d6ddbe

                                        0,
function(L, I, u, g, D) {
    (u = (D = (u = (I = L.j(), L.j()), g = L.j(), I = L.A(I), L.A(L.j())), L).A(u), g = L.A(g), 0 !== I) &&
    (g = m(L, g, D, 1, I, u), I.addEventListener(u, g, M), W(L, 77, [I, u, g]));
}
                                    

#40 JavaScript::Eval (size: 134, repeated: 1) - SHA256: dbcb7d53462f005923a3260e79e88ad58a06baa8b58f19e2c4938f7d960d6d0d

                                        0,
function(L, I, u, g, D) {
    W(L, (u = (D = (g = (u = (I = L.j(), L).j(), L).A(L.j()), L.A(L.j())), L.A(u)), I), m(L, u, g, D));
}
                                    

#41 JavaScript::Eval (size: 138, repeated: 1) - SHA256: 778d60dccd5abbde1385e7d0e50fd2dc6a5f5ab3a6795aa2c0baa9a839fc4f1c

                                        0,
function(L, I, u, g, D) {
    for (D = (u = (I = L.j(), Y)(L), g = [], 0); D < u; D++) {
        g.push(L.j());
    }
    W(L, I, g);
}
                                    

#42 JavaScript::Eval (size: 399, repeated: 1) - SHA256: f7cb100bdfa25733f272dbfe337cdb8fe4d5f225e6d8ca1ea28d45edff04757a

                                        0,
function(L, I, u, g, D, B) {
    if (!w(L, 1, 255)) {
        if (g = (u = (D = (g = (I = L.j(), u = L.j(), L.j()), L.j()), I = L.A(I), L).A(u), L.A(g)), L = L.A(D), "object" == v(I)) {
            for (B in D = [], I) {
                D.push(B);
            }
            I = D;
        }
        for (D = 0, B = I.length; D < B; D += g) {
            u(I.slice(D, D + g), L);
        }
    }
}
                                    

#43 JavaScript::Eval (size: 214, repeated: 1) - SHA256: 0b2fe4526b807df58f9ddbcdc74a00515bf3b998c43eec9e5a5faf37257889ef

                                        0,
function(L, I, u, g, D, B) {
    return (D = (u = this, g = function() {
        return g[u.K + (D[u.I] === I) - !B[u.I]];
    }, function() {
        return g();
    }), B = u.w, D[u.S] = function(J) {
        g[u.s] = J;
    }, D)[u.S](L), L = D;
}
                                    

#44 JavaScript::Eval (size: 298, repeated: 1) - SHA256: 16c8a44b710ce0b6ce063b36b3b3ae2baed1d07e572fff473ed43fcaf01c8c96

                                        0,
function(L, I, u, g, D, B, J) {
    if ((g = (u = (I = L.j(), Y(L)), ""), L).g[174]) {
        for (D = L.A(174), B = 0, J = D.length; u--;) {
            B = (B + Y(L)) % J, g += d[D[B]];
        }
    } else {
        for (; u--;) {
            g += d[L.j()];
        }
    }
    W(L, I, g);
}
                                    

#45 JavaScript::Eval (size: 340, repeated: 1) - SHA256: b0213bd3dfb0dd558e67031d5fee8aaa32628564245139003e207dee55f9f483

                                        0,
function(L, I, u, g, D, B, J) {
    w(L, 1, 5) ||
        (I = aq(L), D = I.L, u = I.G, g = I.N, J = u.length, 0 == J ? (B = new(g[D])) : 1 == J ? (B = new(g[D])(u[0])) : 2 == J ? (B = new(g[D])(u[0], u[1])) : 3 == J ? (B = new(g[D])(u[0], u[1], u[2])) : 4 == J ? (B = new(g[D])(u[0], u[1], u[2], u[3])) : c(L, 22), W(L, I.i, B));
}
                                    

#46 JavaScript::Eval (size: 788, repeated: 1) - SHA256: f04e7606dcea87cfb57846a54b3548846c1ba36b40cd69eca2172a3aad4c5e9f

                                        0,
function(L, I, u, g, D, B, J, x, N, A, y, Z, E) {
    for (A = (x = (J = (B = (g = u = (I = L.j(), 0), D = function(t, H) {
            for (; g < t;) {
                u |= L.j() << g, g += 8;
            }
            return u >>= (g -= (H = u & (1 << t) - 1, t), t), H;
        }, D(3) + 1), D(5)), []), N = 0); A < J; A++) {
        y = D(1), x.push(y), N += y ? 0 : 1;
    }
    for (A = (N = (N - 1).toString((Z = [], 2)).length, 0); A < J; A++) {
        x[A] || (Z[A] = D(N));
    }
    for (A = 0; A < J; A++) {
        x[A] && (Z[A] = L.j());
    }
    for (A = B, E = []; A--;) {
        E.push(L.A(L.j()));
    }
    W(L, I, function(t, H, h, O, f) {
        for (h = (O = (H = [], t.$++, 0), []); O < J; O++) {
            if (f = Z[O], !x[O]) {
                for (; f >= H.length;) {
                    H.push(t.j());
                }
                f = H[f];
            }
            h.push(f);
        }
        t.D = (t.J = t.X(E.slice(), t.j), t.X(h, t.j));
    });
}
                                    

#47 JavaScript::Eval (size: 518, repeated: 1) - SHA256: cb63a3a1ad3805c6059584d4392d47b7957dedcc1c5ecf8c37b7ed9e1e3672a8

                                        0,
function(a, G) {
    if (this.J) {
        return a = a ? this.J().shift() : this.D().shift(), this.J().length ||
            this.D().length || (this.D = this.J = void 0, this.$--), a;
    }
    if (!(a = this.A(126), a in this.Z)) {
        throw c(this, 31), this.R;
    }
    return (W(this, ((void 0 == this.O && (this.O = U(this.Z, a - 4), this.H = void 0), this.H) != a >> 3 &&
        (this.H = a >> 3, G = [0, 0, 0, this.A(160)], this.b = Vo(this.O, this.H, G)), 126), a + 1), this.Z[a]) ^ this.b[a % 8];
}
                                    

#48 JavaScript::Eval (size: 125, repeated: 1) - SHA256: f4adcb71115b6711067e0b1209298f81c713412cb400362e16940cd99c815019

                                        0,
function(a, G) {
    if (void 0 === (G = this.g[a], G)) {
        throw c(this, 30, 0, a), this.R;
    }
    return G();
}
                                    

#49 JavaScript::Eval (size: 244, repeated: 1) - SHA256: ffbb6eb542e80921d84de6d0ea2e0f85426cf647f06545991a34e2e84a930ba6

                                        0,
function(a, G, q) {
    if (3 == a.length) {
        for (q = 0; 3 > q; q++) {
            G[q] += a[q];
        }
        for (a = [13, 8, 13, 12, (q = 0, 16), 5, 3, 10, 15]; 9 > q; q++) {
            G[3](G, q % 3, a[q]);
        }
    }
}
                                    

#50 JavaScript::Eval (size: 207, repeated: 1) - SHA256: 9f17de871a09f3aa4899286a3293f331db5c688109d332b41fb173241a6a21c0

                                        0,
function(a, G, q, d) {
    Q(this, ((q = (d = (q = (G = a & 4, a &= 3, this).j(), this).j(), this.A(q)), G && (q = oq(("" + q).replace(/\r\n/g, "\n"))), a) &&
        Q(this, d, F(q.length, 2)), d), q);
}
                                    

#51 JavaScript::Eval (size: 155, repeated: 1) - SHA256: 599b231d531c3a595bf75b0ab5443322a2375b37993da780e1702920394b01e5

                                        0,
function(a, G, q, d) {
    for (; q--;) {
        126 != q &&
            120 != q && G.g[q] && (G.g[q] = G[d](G[a](q), this));
    }
    G[a] = this;
}
                                    

#52 JavaScript::Eval (size: 170, repeated: 1) - SHA256: 1e5bd41741de69607d8d9443c67e74d3f50041a6eb3406a4631537a406a395dc

                                        0,
function(a, G, q, d) {
    try {
        d = a[(G + 2) % 3], a[G] = a[G] - a[(G + 1) % 3] - d ^ (1 == G ? d << q : d >>> q);
    } catch (V) {
        throw V;
    }
}
                                    

#53 JavaScript::Eval (size: 39, repeated: 1) - SHA256: bb6753823aebc94f3cc0c4b3c3ed5b60753622b1198ec8abd45102911d59e131

                                        0,
function($, _) {
    _._ += !_.$[_[_._] = $[0]]
}
                                    

#54 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 6b23c0d5f35d1b11f9b683f0b0a617355deb11277d91ae091d399c655b87940d

                                        C
                                    

#55 JavaScript::Eval (size: 137, repeated: 1) - SHA256: f20bed4063c217d58ff0b95e98a0d03360ba905187d857d99f2af6a303c49915

                                        C = function(a, G, q) {
    return ((q = a.A(126), a).Z && q < a.Z.length ? (W(a, 126, a.Z.length), sn(a, G)) : W(a, 126, G), Iq)(a, q);
}
                                    

#56 JavaScript::Eval (size: 2, repeated: 1) - SHA256: 506a0df30e8e6143c07749743fccff87b203df6b043c12d74e8cf83eedb83800

                                        Iq
                                    

#57 JavaScript::Eval (size: 636, repeated: 1) - SHA256: e2c3bc52e7da43efc036c437709f99dda49d323eb4c9e60e1ce0a2d6b553ed87

                                        Iq = function(a, G, q, d, V, L, I) {
    a.$++;
    try {
        for (L = (q = (V = void 0, d = 5001, a.Z.length), 0);
            (a.o || --d) && (a.J || (L = a.A(126)) < q);) {
            try {
                a.J ? (V = a.j(true)) : (W(a, 120, L), I = a.j(), V = a.A(I)), V && V.call ? V(a) : c(a, 21, 0, I), a.T = true, w(a, 0, 2);
            } catch (u) {
                u != a.R && (a.A(66) ? c(a, 22, u) : W(a, 66, u));
            }
        }
        d || c(a, 33);
    } catch (u) {
        try {
            c(a, 22, u);
        } catch (g) {
            l(a, g);
        }
    }
    return q = a.A(157), G && W(a, 126, G), a.$--, q;
}
                                    

#58 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 4ae81572f06e1b88fd5ced7a1a000945432e83e1551e6f721ee9c00b8cc33260

                                        Q
                                    

#59 JavaScript::Eval (size: 416, repeated: 1) - SHA256: 007a3f1c0519756aafe040b94f76f0fecde3dda96bd264652fc1842a32d821e3

                                        Q = function(a, G, q, d, V, L) {
    for (a = (d = ((130 == (V = a.A(G), G) ? (G = function(I, u, g, D) {
                if ((u = V.length, g = u - 4 >> 3, V.F) != g) {
                    g = (D = [0, 0, 0, L], (g << 3) - (V.F = g, 4));
                    try {
                        V.P = Vo(U(V, g), U(V, g + 4), D);
                    } catch (B) {
                        throw B;
                    }
                }
                V.push(V.P[u & 7] ^ I);
            }, L = a.A(125)) : (G = function(I) {
                V.push(I);
            }), d) &&
            G(d & 255), 0), q).length; d < a; d++) {
        G(q[d]);
    }
}
                                    

#60 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 8de0b3c47f112c59745f717a626932264c422a7563954872e237b223af4ad643

                                        S
                                    

#61 JavaScript::Eval (size: 1, repeated: 1) - SHA256: e632b7095b0bf32c260fa4c539e9fd7b852d0de454e9be26f24d0d6f91d069d3

                                        T
                                    

#62 JavaScript::Eval (size: 78, repeated: 1) - SHA256: a63b3f927621b05c638aaf2664b503d3b152bef2d221e5fc8454b76329a34460

                                        T = function(a, G, q, d) {
    (q = a.j(), d = a.j(), Q)(a, d, F(a.A(q), G));
}
                                    

#63 JavaScript::Eval (size: 1, repeated: 1) - SHA256: a25513c7e0f6eaa80a3337ee18081b9e2ed09e00af8531c8f7bb2542764027e7

                                        U
                                    

#64 JavaScript::Eval (size: 88, repeated: 1) - SHA256: 15923751a5f6bbde1722082d34b93833dacca32a38ed5e5a5525f7b1743ccdb4

                                        U = function(a, G) {
    return a[G] << 24 | a[G + 1] << 16 | a[G + 2] << 8 | a[G + 3];
}
                                    

#65 JavaScript::Eval (size: 2, repeated: 1) - SHA256: 0536d4e1f50e56b6e136821f749d6c68355080ec71ec4afaff3c32efd9c379b4

                                        Vo
                                    

#66 JavaScript::Eval (size: 367, repeated: 1) - SHA256: c417636d1682dde2d9b8fa06087a2ca93f06cb99ee0a2de8590d179dc53c2023

                                        Vo = function(a, G, q, d) {
    try {
        for (d = 0; 79669387488 != d;) {
            a += (G << 4 ^ G >>> 5) + G ^ d + q[d & 3], d += 2489668359, G += (a << 4 ^ a >>> 5) + a ^ d + q[d >>> 11 & 3];
        }
        return [a >>> 24, a >> 16 & 255, a >> 8 & 255, a & 255, G >>> 24, G >> 16 & 255, G >> 8 & 255, G & 255];
    } catch (V) {
        throw V;
    }
}
                                    

#67 JavaScript::Eval (size: 1, repeated: 1) - SHA256: fcb5f40df9be6bae66c1d77a6c15968866a9e6cbd7314ca432b019d17392f6f4

                                        W
                                    

#68 JavaScript::Eval (size: 329, repeated: 1) - SHA256: 196f9d6a09522a7c248bdd5849fc2f89af7419181510bf37ea037108f0928a57

                                        W = function(a, G, q) {
    if (126 == G || 120 == G) {
        if (a.g[G]) {
            a.g[G][a.S](q);
        } else {
            a.g[G] = a.a(q);
        }
    } else if (203 != G && 130 != G && 123 != G && 218 != G || !a.g[G]) {
        a.g[G] = a.X(q, a.A);
    }
    160 == G && (a.O = void 0, W(a, 126, a.A(126) + 4));
}
                                    

#69 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 18f5384d58bcb1bba0bcd9e6a6781d1a6ac2cc280c330ecbab6cb7931b721552

                                        Y
                                    

#70 JavaScript::Eval (size: 87, repeated: 1) - SHA256: 39c478f14f0d0e14f221bb7749c95b19816d6acdfd348fc47f36237dad69ba74

                                        Y = function(a, G) {
    return (G = a.j(), G) & 128 && (G = G & 127 | a.j() << 7), G;
}
                                    

#71 JavaScript::Eval (size: 5272, repeated: 1) - SHA256: 44eabf3bbff65234f35e90517b8e26df7ff2376976051cd52ed83389ea544ff8

                                        ["ELpekVmZeVYRAJsRwwNXFzbmx+zu4ZjKtlf0q7aKZv+nWuEEV6JaFlP3Lw8ho5L0GfZ2iQxBPtcjq+jm/9Tmmbe73ErO6nQLk9jHLi6AQqwi+A4z0MVikcF9pL9JSxyynhMzgQu9vfmlXSIoMSAJYCfai5CB5hJsUq5fmd2xhu+tVhnXjI8YAijYTbj3F1YTj3miye3hLaOOOaYBgQAH2ZC1ADPSk9MTO4YRVaFXJeHiA5+hTWY3eylH0PtJ4EH9QQWm1cZqeB1s8LbWsyqCVrMi52eS0vg7KeSLaWxqcVpshGRbmTbfZRebQKw+V8gkaZWBtydtFjEsD9z2rX6RGsBBsOQLB9fNy2xWZLy8O2SgCTF+HbpwnBIuAEs34+haJpR+0NrQ0iSvQyzEHUlvca+p6z8a2vLaFSxsg1HWXW5vJdqYPDkyG6RbNsB9sqOvUUZCQ8V8NKjaZQFhndPPiiwSCi+SgW0w+yUG7j16cYL1GsRVYKxGSRYt37vLTjJCVGaP2y0hX6I/5MBUYpLU16TOjzG3Nct14iVdaWRYJFAc46GVbZVLv8Wwv1lW28F13BQ7IFqdU1sPKnLtGOuJ4TP4VxKFolL0sYOKfokr1PncCPwhkKNMWuhKktP/DBMs1SsaZCYapP7yGGoFZ+v7n5wHAYwMipbnj8jZ0lOCDPy58wnKiSFFGO+lM8PM10TdVx0LcXBkm5iUOyxOfoY9nNpO58bMXhkoPV4gJ0ThUfyvwS/gElzMifdnBiY4eoOqD9hxl6oexiLDQyrRxv3HwcL3zBT/EMb5ihFoQj7ybvi7ArWRbrce4HBvVd+nDFNxMBXYjFpZsnE92oRSHqcr2YJVXGTF8oIm3p3Fccd7muBb+8zqF8UE9aew5fNTsmFY+P1ZOaLNyzrKwwdVpqzKaddqiiaL6e3sP2FKAJKCwoOnEAY/yIJqdWKXSJDI1K/rqAC5F/FEMxn1g0KrxYWqGv//2+E4FA2wbw+vijjHFQQhVEk/BhMzjmLDA3xhsI4C/VxJvldlVZKuQAce0z6KqRX7mIq3doRcAm7c/VLaH3jLxFKVn3qlunkGJ58W/UoHZbo3ue1xoa3uRnourw0QoCnqBVpmrPpPbbM7ErDP3Ya+dTm+CXnO+TwDlhxTQqcvmt1M0832CrE1/wzoF44ZGqbxjaW0jFmbPlCuUZ3kCUSbzCk4ADQ213p1FGRiNq2VNVZSM4IE0NZuVmrDwx0ScctpOnoD28M4Jkc9+l4KsPP2OJYO0Oevz2tAwtoPowVaUgcEbGDXbAomFBAnATisqeG0ywKA+E1X7ik2L9S8LetaggV6PuyV6EhWjaOz2Sr3pXbxx2thYV0QVYqeZaEG5497JE9V2kj1sUDyiiolUq5ojiz086naAsjej09fRfK8WMIAR0KjfUpeiRZw74bM8UG4EmVTg+kVnFZc3fgYLjJs3f8z1d2t6QpCk9sDavo1kddP7JXCNzktA7s/Jzy1HGqB/yXp6FecKL21Cnm2X+7GYwFjfGfaIAiiQPEKciJm/IQELq7Nya5/e/ZfiD+Mg2g+omXdCkdmzUl8psCMfVMyvnv4FIE6BA6SGoI78WQl1bkMB8wIvM4mFRxXTnSjG+FgM4OhEEra8uofT0nkuQb/QLBncqSr7HacIOtWUbS7HfqEYdPC6kcbqxEijmUxVdsUg3tcuUMBuyrgcUv5ded2tFdZUpmDostOs+FZG7CYsjYaV1yGDr2lZia7jEtl6D6oUHUBVO7pYyxqFShTNcyyCKFthj3g7WdRl5lYuzvLIOJsjHp5r3HjBG9so818+RWxrhQnmY/czWKaPsZ5aCflXEPqE8xHxHxC3vkgSY+IgQu7F9NhB6RHsvBmSe1GpQdcaj6jRJ7vLuaCCrnZAgIaKeVpMviXGiy1BR4KpXHRHNAa+A/ooQJWXQrtrupvt1NQeeEw9bk7J/c0lHGCs7yBra4LvFJfqwxt0QsElIzh7hkZYO0CaHniucYrN7BTK124pGEz/dvMTa9lVd6rKEtzNp/+tE0beUdQdrKReknWkYWAwo5Fu2KEdBRXlrMQBs/mNikxiLKnHUJXHDjoNfS3DLfPGhEyKHu8La4VVYnlUFEPg1VKYMBayX2QWO79+T7sG3Z85U00pTKPPolBCtIQrFaL77dybQPlpwFDLYyUhr93y/VL2i99MEn9371S/SqsfI+B0IimLi6EQvk7ZHCZdiDXFHUkeSFVCxU1V822rJ6bU9olndyVPEGlVZ/UfKQdKhK3vzrGdyEjwgyBLbdbhJ6L3/DQTQQoqGBlwxCVsIpBJT7JeCo9p7CFHP1qKMKWtk0yZhK8SeGNKK5Lro3/mHn5vnB17oCeLt2Qna2k6gnZG6+lM1aQ0B1yFxWXXYg8togPB1jkwKBV25+UzLaalceFNo/HGTgMN2FHnXvD8AVmkNzb+TLF3ojh0XNOQ5ycddrRj9qTGTvxVPpsFIFpXzUhsN6+oXU805QKVSR3nSOCPw2qeh1m3baf7EtQ/R0/Qt3Z42JXOa0jLTPfam+G2oV1hNcwVjSw23XsP9ioTGgk0Uzm7nxt8JuplfSC88AdE4GBSUfn9jVWLiKBlkHbUxBQ8dp/puL4VtOpJUDXYi+29KZUfmZXYJDs1m9mcfIJ5zoSFGK1wmmPUoApRmy4VcJs+EUe3gfrfr7u/1UvxESpiMfSbfPBADDdKQ/cZBuccOdtSw73FyA+kkQ+Nu8Hge+NiIDou+gpCBvikuxLi1oNxxiiVRySriNJiPTS3the0eI1YZ3hdMw34njUThHAXqvw2lQrqM6C8yFcFoyDh6OsR0vCa9vItKq6sz6xyRBcuXaTUJKKFKxo3ezlaYzqdSjfDX8odiZ7EfSnf/IMVO+ZndF8HbvuTd3KYk6Ip4dXRugXkcixRPbNyLjAAdkxuIhuHjhDDbSGRqXnJfX+xycNPSxWbVZymQ5sGrxClzviIundrKv1UbKuH5cPMS/oUTi6LuvNhaPc/nGL/7GIabTOCbaik93M+EGqWJ3HzVkDu3yIcA31pKpx8DRsc4Du2ftjHLZqKBmJXcbcJAWkV7ZiZT6Iu17kmv5X3OQTBnDyvoQXXscvLgDXkJdZANBdC8jgYA58Dan8WfKiT42oc3GG/P/JfSJ60kJ7I7r6dho5vSTmIBTdeQMPlGbaiMWJfr9P7QCEuk/jJIppo3u/GzqT3OM4pXB2npjQWpY1E7tv1dzEWIS1GUsYQPXzxVO6bOM6aGEG2gsRbgO2XxdYrR0d1PngQJnWafQiJOYuSIa7ogKDGj8dXDoYrX520FP4nbvTpM5vZJKpsoB2hGu/Ex8qvgA5xIKdjinmyNr0yNSv65/zL4Nra/UcP5pl8fHNKStxcrX8AMNNW7Uejej/i9v0pJuTp+ai4vQL8f0xOOADerwB+elSnVf9V9Toa8/7zlbTF93B/1cxPDzaT2qb2NnXQ1kVS4OafA+srLZchIJaEJhq2qeZHB3AaIf10+mcnTuutpaVpAprminLHvrtQOWcuK1lpdiJuZMn4phCrz8d+O7Bl352nC/NFdkemQfcl3FKF3J8IboXIdz/PCwHxc+DkM1T0+hiMEQJMn4vUFyR/pzVP4WdGgPRrW8lu307rzAo+jYZuMtJUZ3+lbmh5uh4gMX7v6aZQTuDwuCsOXavUr15xCM3WOEvPip159o4I4Ljtzt71/YVJ+fdkSadDVt9xpv8afPEQPTv3xa2PXq9pb6RpOXA4bE1DBGH+bu4iWveWt49wOZnuECiV8FMf2zDFrliVTvd4OafqFU/oc9YO5lXf7HeUp/UVtRm+Rdul0LzRGET6njfXpOYtJx+jBOFth1lOUydcEu4BUoxRH/QhUW3Fs3qVgDE8AbH2fSYNAKJaS0QGuTJa2TL5YzW4gduumvcPw1JJnw7lBZvjPAFeg3QPrPlpnNBVpKz86/Hj8g2vTzNTcP8zuO+YalEteupH50jvpqk4uQeZETBHjP0FKAWIuI9taVbRe6VGYZcPBL1iJFtEAb8iUVtjc9uoAdxJ+xr+LCH/Rlebgju/Q5n3Ar/NnKBdjW4kPGYXKGc+f5adpMmpq0auzAWb4ei40xNIpiiblVpMjKijt/b+O2u/pCMe49djXi2Qc8kS595DuVZ8P3JwlM2wjMhYP3/riMLAcc4JLc4LCoGEXMp+DYQMaIt6Xlm9TZcNloJEs3UFNgupq6YkzoM0afalZi9bQc3c1de4ajJ0Iwo4887mtIdz1LLeI59NNDMmrMXjhoBhy3X6ezcAv4QzTj2WlHwm7u6zzOkL9L0acoIh8FNzAf47owfQJXNq3yYAAQsrwS66vfIv4HBQaTgeykvoDFbXguqGmn7fp/4cStH4DPR1vWPtVKrv9vjN6lAAr6zd1XIRvoouFfsG6k5/OCLSFeu526s3f/o1YXRBiZ2yjo2HQHqkzDrHpzAReTixmJa/J4hn7HwjzFe6g41GwBtIAH8EV0cZzAO7ytWyY1mpTIQEyLYB8j1lQ1dHsy0qAt83x2rNl/tKvQ7JFAqglQyKpvn98eAPgH0MFpixAlM/tMY+B/awlfEuOBD4woUjnAhn/hWhSxU58zFXQLBhLIaKzNzrmFYQSqFiiDcAedp3aPFp7bSKFqBBpLKzF4WULAkiqUYohhiyqIJVl7nyeDrZKic/vhZngNeWnk7qGDmDc6lnzjv81ZgLopAzLitRS0OgQRulfYr2BbtSv1evR8gH6pjMT/R0yfLL3yTJglW5eMPboJEZToD5zCA4Q1IyBeTyKzF2XJdRAooP4aMxjQvGqrZxFl7VYqIeFz3JPCHtV5HLwELGovCMjVov9RnpuuZjN0RtAPyM1jO6MgtWqomBdc+HX0Pq7fQZkCro9Prun5hTPIaD1NQ62o1dduLE8WQAH2WeKI/IiarKVpejAsonhw0QPekFl0MCCZGHSyD8Oa+l/n2W3+ye27lsBZwGX5qtZbdAqoFfBjDnxtebktnAO/PTZSemCSeEbW7Aq693v5zNu3z987Urunc1mzIyBEhtVRcW0j2lHfmVsQhLTmkF35eHwdJaap1iSMqcaB22Moy8tdzYKYueXvpA2V82QxCczt9uYLBaJP6gzunZxeUcoLGE7Qdsq6+iJHPYlf6IbpcMxQPgRC8CzV+yx40/ZYAuxToVq0+KSsEZ5hHjTOX/nfCQ85Z9ZS42pSnHejuduGXwhS0B1m4yoh2SrHi8Qe8ZQ94RHu0g2TF/FYimQGXVAgVNkDCaCTYygXRR+L7/vC"]
                                    

#72 JavaScript::Eval (size: 2, repeated: 8) - SHA256: 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

                                        []
                                    

#73 JavaScript::Eval (size: 2, repeated: 1) - SHA256: dd9603a19faa94218b85c812130ac7635385fb33a1acf69a7b4e10415d49d3b4

                                        aq
                                    

#74 JavaScript::Eval (size: 270, repeated: 1) - SHA256: 1447cbdcee495279c86a6c29e00bfc95c5ab90c90692686b5b065e192bbe0286

                                        aq = function(a, G, q, d, V, L) {
    for (L = (V = (d = ((q = (G = {}, a).j(), G).i = a.j(), G.G = [], a).j() - 1, a.j()), 0); L < d; L++) {
        G.G.push(a.j());
    }
    for ((G.L = a.A(q), G).N = a.A(V); d--;) {
        G.G[d] = a.A(G.G[d]);
    }
    return G;
}
                                    

#75 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 2e7d2c03a9507ae265ecf5b5356885a53393a2029d241394997265a1a25aefc6

                                        c
                                    

#76 JavaScript::Eval (size: 434, repeated: 1) - SHA256: 6eb248b5c9cbb73d5a2ed64ab638faaebe574b8fc9140a267d710536f092c241

                                        c = function(a, G, q, d, V) {
    W(a, 201, (q = ((0 == (G = (V = a.A(120), [G, V >> 8 & 255, V & 255]), void 0 != d && G.push(d), a.A(218).length) &&
                (a.g[218] = void 0, W(a, 218, G)), d = "", q) &&
            (q.message && (d += q.message), q.stack && (d += ":" + q.stack)), a.A(201)), 3 < q &&
        (d = d.slice(0, q - 3), q -= d.length + 3, d = oq(d.replace(/\r\n/g, "\n")), Q(a, 130, F(d.length, 2).concat(d), 12)), q));
}
                                    

#77 JavaScript::Eval (size: 35, repeated: 1) - SHA256: 1e3606d95ce27d593157594820335681a9380f51a96147303cd8000e60a95e12

                                        document.createElement('div').style
                                    

#78 JavaScript::Eval (size: 24, repeated: 8) - SHA256: 0700c235592bcf0b692006c5c63dcf008ae3290cffc1ccd9aa37b213bc1bd695

                                        e.style.right = amt + 'px'
                                    

#79 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 62c66a7a5dd70c3146618063c344e531e6d4b59e379808443ce962b3abd63c5a

                                        m
                                    

#80 JavaScript::Eval (size: 273, repeated: 1) - SHA256: b4922be525980dbcb81e2d091ba18f14dbef007ea0fe94c2e7ff070b31eb8c7c

                                        m = function(a, G, q, d, V, L) {
    return function() {
        var I = [b, G, q, void 0, V, L, arguments],
            u = d & 1;
        if (d & 2) {
            var g = e(a, true, false, (k(a, I), false));
        } else {
            u && a.l.length ? k(a, I) : u ? (k(a, I), e(a, true, false, false)) : (g = qB(a, I));
        }
        return g;
    };
}
                                    

#81 JavaScript::Eval (size: 2, repeated: 1) - SHA256: adabc4229a0adf1286d4218ee26620270ff1edcfc1df58ed77b4e85a58786e1c

                                        oq
                                    

#82 JavaScript::Eval (size: 488, repeated: 1) - SHA256: bc4c90bfe4358f5e2f652c1c12a2d9f38c78dc1fea61094b19c8410c05608620

                                        oq = function(a, G, q, d, V) {
    for (d = q = (G = [], 0); d < a.length; d++) {
        V = a.charCodeAt(d), 128 > V ? (G[q++] = V) : (2048 > V ? (G[q++] = V >> 6 | 192) : (55296 == (V & 64512) &&
            d + 1 < a.length && 56320 == (a.charCodeAt(d + 1) & 64512) ? (V = 65536 + ((V & 1023) << 10) + (a.charCodeAt(++d) & 1023), G[q++] = V >> 18 | 240, G[q++] = V >> 12 & 63 | 128) : (G[q++] = V >> 12 | 224), G[q++] = V >> 6 & 63 | 128), G[q++] = V & 63 | 128);
    }
    return G;
}
                                    

#83 JavaScript::Eval (size: 2, repeated: 1) - SHA256: 8320afe4786b1bdfe350c64a36bde810a887e47e975d1b886e929f9316cacf32

                                        sn
                                    

#84 JavaScript::Eval (size: 86, repeated: 1) - SHA256: 5c42f222ce17e0de5084c359a82c585f709f61fe8f4387ad9286edc58044aa14

                                        sn = function(a, G) {
    W(a, 126, ((a.U.push(a.g.slice()), a).g[126] = void 0, G));
}
                                    

#85 JavaScript::Eval (size: 25, repeated: 1) - SHA256: 4298d7d661389e7f064b321617fb9eaa3cd610ef718900114dd4474151cbdcce

                                        wid.style.right = '-50px'
                                    

#86 JavaScript::Eval (size: 6, repeated: 1) - SHA256: 44ff7b02c80d38b26dd6aa31d9470aed81b32e10331a3c994fb1a9945fd847ba

                                        window
                                    

#87 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 60ecaaa45c82b24886bf783c863b016df3fd2dcff4308bace83b0ddf99a944f8

                                        window.stlib.fragmentPump.data
                                    

#88 JavaScript::Eval (size: 30, repeated: 1) - SHA256: 3cc5a45ee051ce04d6921c53c1027508f3ca00077883c8c6ea1d380f711959e6

                                        window.stlib.fragmentPump.init
                                    

#89 JavaScript::Eval (size: 1, repeated: 1) - SHA256: 594e519ae499312b29433b7dd8a97ff068defcba9755b6d5d00e84c524d67b06

                                        z
                                    

#90 JavaScript::Eval (size: 120, repeated: 1) - SHA256: b5157a48f5fc549c61b6253b4a66c29e7c4ce68df9fa6ad1474cb27759b1e504

                                        z = function(a, G, q, d) {
    for (d = (q = a.j(), 0); 0 < G; G--) {
        d = d << 8 | a.j();
    }
    W(a, q, d);
}
                                    

Executed Writes (14)

#1 JavaScript::Write (size: 0, repeated: 1) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 19, repeated: 1) - SHA256: 9bede3aaaef7eae6dbd90cf1dfcd58756cb6ddc8d64fd603fc0fabb7ae032080

                                        & amp;
cb = 28799406326
                                    

#3 JavaScript::Write (size: 18, repeated: 1) - SHA256: e0215c16fadbc057d1be3260dc2234924c46fa5579ac861f11b11d7dc5a736c7

                                        & amp;
charset = UTF - 8
                                    

#4 JavaScript::Write (size: 81, repeated: 1) - SHA256: cccbb64ec484e7d7f8118fa4d29607977c93ee564ac3f4e85fed2d9736606d7e

                                        & amp;
loc = http % 3 A //aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
                                    

#5 JavaScript::Write (size: 11, repeated: 1) - SHA256: d778419b5397605c21f7bb7f0475e79b701b8f0875051b5f8bda9862c565a474

                                        '></script>
                                    

#6 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#7 JavaScript::Write (size: 387, repeated: 1) - SHA256: 85a78fa14c8fa94cf39829f842f54f3334d877e77f3af7b9ff11b960c668508e

                                        < div id = 'beacon_2c32693c0c'
style = 'position: absolute; left: 0px; top: 0px; visibility: hidden;' > < img src = 'http://www.clicksasia.com/openx/www/delivery/lg.php?bannerid=1338&amp;campaignid=660&amp;zoneid=1894&amp;loc=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&amp;cb=2c32693c0c'
width = '0'
height = '0'
alt = ''
style = 'width: 0px; height: 0px;' / > < /div>
                                    

#8 JavaScript::Write (size: 28, repeated: 1) - SHA256: 02a30378b586dc03985957f9e19c893c277976dd109c5deb1c14ce4efa3a970f

                                        < div id = 'nuffnang_lb' > < /div>
                                    

#9 JavaScript::Write (size: 28, repeated: 1) - SHA256: a23d6073a514912248e913edf4dcf92514d264772a6cd09dd1b36640474b7128

                                        < div id = 'nuffnang_ss' > < /div>
                                    

#10 JavaScript::Write (size: 2275, repeated: 1) - SHA256: 63b5400bf481d17e165e964bc6d15f753b8f7099dec8dea5967d5d1c3f96c66c

                                        < div id = 'ox_1e50074aa6a3ba77588b290ebb1e88e5'
style = 'display: inline;' > < a href = 'http://www.clicksasia.com/openx/www/delivery/ck.php?oaparams=2__bannerid=1338__zoneid=1894__cb=2c32693c0c__oadest=http%3A%2F%2Fcplus.com.my%2F'
target = '' > < img src = 'http://www.clicksasia.com/openx/www/images/9249-728x90.jpg'
width = '728'
height = '90'
alt = ''
title = ''
border = '0' / > < /a></div >
    < script type = 'text/javascript' > <!--// <![CDATA[
    var ox_swf = new FlashObject('http://www.clicksasia.com/openx/www/images/13789efbe756ec8c163b3fbf038ee4efa6172.swf', 'Advertisement', '728', '90', '8');
ox_swf.addVariable('clickTARGET', '_blank');
ox_swf.addVariable('clickTAG', 'http%3A%2F%2Fwww.clicksasia.com%2Fopenx%2Fwww%2Fdelivery%2Fck.php%3Foaparams%3D2__bannerid%3D1338__zoneid%3D1894__cb%3D2c32693c0c__oadest%3Dhttp%253A%252F%252Fcplus.com.my%252F');
ox_swf.addParam('allowScriptAccess', 'always');
ox_swf.write('ox_1e50074aa6a3ba77588b290ebb1e88e5');
if (ox_swf.installedVer.versionIsValid(ox_swf.getAttribute('version'))) {
    document.write("<div id='beacon_2c32693c0c' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.clicksasia.com/openx/www/delivery/lg.php?bannerid=1338&amp;campaignid=660&amp;zoneid=1894&amp;loc=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&amp;cb=2c32693c0c' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>");
} else {
    document.write("<div id='beacon_2c32693c0c' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.clicksasia.com/openx/www/delivery/lg.php?bannerid=1338&amp;campaignid=660&amp;zoneid=1894&amp;loc=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&amp;oxfb=1&amp;cb=2c32693c0c' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div>");
}
// ]]> --></script><noscript><div id='beacon_2c32693c0c' style='position: absolute; left: 0px; top: 0px; visibility: hidden;'><img src='http://www.clicksasia.com/openx/www/delivery/lg.php?bannerid=1338&amp;campaignid=660&amp;zoneid=1894&amp;loc=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&amp;oxfb=1&amp;cb=2c32693c0c' width='0' height='0' alt='' style='width: 0px; height: 0px;' /></div></noscript>
                                    

#11 JavaScript::Write (size: 1390, repeated: 1) - SHA256: 14b9c18d4264426e2ed9f0f4d08e1dc271ace7f9c9eb446176e992ca6554e2e1

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "300"
height = "250"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-5947334958438263&amp;output=html&amp;h=250&amp;slotname=5777407432&amp;adk=3554384060&amp;adf=807048394&amp;w=300&amp;lmt=1551633458&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x250&amp;url=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&amp;ea=0&amp;flash=10.0.45&amp;hl=en&amp;avail_w=610&amp;wgl=0&amp;adsid=NT&amp;dt=1556169802759&amp;bpp=87&amp;fdt=209&amp;idt=203&amp;shv=r20190422&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;correlator=252247063622&amp;frm=20&amp;pv=2&amp;ga_vid=1331057014.1556169804&amp;ga_sid=1556169804&amp;ga_hid=902761567&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=265&amp;ady=1232&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=21063245%2C21060853%2C20040081&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;uci=a!1&amp;dtd=938"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#12 JavaScript::Write (size: 88, repeated: 1) - SHA256: e17ca67d53cb71b6b85f5692e944c10d6716860555ed630254886ffc60d84c29

                                        < script type = 'text/javascript'
src = 'http://www.clicksasia.com/openx/www/delivery/ajs.php
                                    

#13 JavaScript::Write (size: 57, repeated: 1) - SHA256: 3340dd488655535d2aba0aa3ffd106088e4bd0f5f170a24e1cfe5ac84a7564e7

                                        < span id = "giantInline_502717223"
name = "undefined" > < /span>
                                    

#14 JavaScript::Write (size: 12, repeated: 1) - SHA256: c079e4be3d82f41052976ee5538df2e5cb40d662ef3e181c8ca59aa21e534ecd

                                        ? zoneid = 1894
                                    


HTTP Transactions (148)


Request Response
                                        
                                            GET /2015/01/mccacing-ditemui-dalam-mcnugget.html HTTP/1.1 
Host: aans1.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Thu, 25 Apr 2019 05:23:20 GMT
Date: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: private, max-age=0
Last-Modified: Sun, 03 Mar 2019 17:17:38 GMT
Etag: W/"cda2cc38615d9712d00f422a566648efd8683de866743421cf32470ef6e08c07"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 16921
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16921
Md5:    7299e99fc0a855301283a33cae293d89
Sha1:   7891b5281dacadbafbe63ab4cf111a71888468e9
Sha256: 6e82480d1f78178ab70f7b6e7f342279c7159338b202f73443c379409652cf0c

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /css?family=Josefin+Slab HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Thu, 25 Apr 2019 05:23:20 GMT
Date: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   203
Md5:    9035a8d94bc3cd69f272f14c62053cc0
Sha1:   4189de08720b7cde432cba52a53778cb78f8e229
Sha256: c776479880576bf6f5d6bf2db85f727680d5105a3dcfe382557e9502e20efeb1
                                        
                                            GET /button/buttons.js HTTP/1.1 
Host: w.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         80.239.159.18
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Cache-Control: max-age=259200
Content-Encoding: gzip
Etag: W/"5cb6342e-d7c8"
Expires: Sun, 28 Apr 2019 05:18:54 GMT
Server: nginx/1.12.2
Content-Length: 15297
Date: Thu, 25 Apr 2019 05:23:20 GMT
Connection: keep-alive
Vary: Accept-Encoding


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   15297
Md5:    235533887a603e0df1a66316c0d00aa8
Sha1:   f84d868ff4a8a0e83e456276eec769bd634c5f24
Sha256: bf91590d4eb197430658fee7500ddc95582f82c41720fdb292eaef674f177398
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Fri, 19 Apr 2019 15:21:44 GMT
Expires: Fri, 26 Apr 2019 15:21:44 GMT
Last-Modified: Fri, 19 Apr 2019 12:13:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 482496


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    6387ba8418de7dc9ee0d6e9b92c56430
Sha1:   e413cc86c071f8bc356195808fb01b3b9ffdc4e0
Sha256: 8e672414303114ccc92fc3d4f6a2194a6262f5e271a937b9cc981e8ac7d43673
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "030d34293e572fd8d8539831197600ad"
Expires: Thu, 25 Apr 2019 05:23:20 GMT
Date: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0;Domain=.google.com;Path=/;Expires=Fri, 25-Oct-2019 05:23:20 GMT;HttpOnly


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17044
Md5:    fb8b9233bdfa23712f4302c306ebee64
Sha1:   da1c3c68f4bbc04633a36441880800f1ff4c2d8b
Sha256: d7fd5b6b6a8ab52153f6ff8f02c432ccabf49ef067088c86938e0f45ed9bf5ac
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 25 Apr 2019 05:23:20 GMT
Expires: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: private, max-age=3600
Etag: 4672057669951375754
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 32911
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32911
Md5:    86dec531ace3114755174b75e5908182
Sha1:   9b1abb14f06eb742047fe79183dbc0b910b6bcab
Sha256: 23653bc09e507859d7eb3ce0b2a3fb997e6fb3c71905acdf482d57a2818bd16d
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:20 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET /-ho1JUe_TJ-8/Vdb8kU0l1dI/AAAAAAAAKNI/JB0-WlsU-eM/s1600/12.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v28d3"
Expires: Wed, 24 Apr 2019 01:04:42 GMT
Content-Disposition: inline;filename="12.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 25 Apr 2019 05:23:20 GMT
Server: fife
Content-Length: 121948
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   121948
Md5:    fdb16fd9d11da34115a3d36756ec2cd8
Sha1:   88f5eff84192079db87a49713aadc38e498e080c
Sha256: b24bc09a6345b5ff13f8ed35497ae71ecb464dbde6470fdb6ff9a409d7cdd59a
                                        
                                            GET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6822
Date: Fri, 19 Apr 2019 15:31:28 GMT
Expires: Sat, 18 Apr 2020 15:31:28 GMT
Last-Modified: Fri, 19 Apr 2019 11:17:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 481913
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6822
Md5:    50061c169ab8f46a9cc382f148f2dce5
Sha1:   ff4829f3d28740af078781271a61091d8a13c300
Sha256: a8b7114ca2883702b99c0521528cbcce9a0b64cf8283df063cab50372c2e4144
                                        
                                            GET /?id=292517 HTTP/1.1 
Host: go.padstm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         88.85.82.154
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:21 GMT
Content-Length: 154
Connection: keep-alive
Location: http://go.padsdel.com/?id=292517
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /?id=292519 HTTP/1.1 
Host: go.padstm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         88.85.82.154
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:21 GMT
Content-Length: 154
Connection: keep-alive
Location: http://go.padsdel.com/?id=292519
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: aans1.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Thu, 25 Apr 2019 05:23:21 GMT
Date: Thu, 25 Apr 2019 05:23:21 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sun, 03 Mar 2019 17:17:38 GMT
Etag: W/"cda2cc38615d9712d00f422a566648efd8683de866743421cf32470ef6e08c07"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 529
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   529
Md5:    8050baaa28511112773d6f603b12bb59
Sha1:   3fbabfdeca40824699ed077c1019b8081079f103
Sha256: 0f2c5ae5ee1526b7e76a5288f5f554cc77cbf82e3fd1cc2147a7d339cc4e2712
                                        
                                            GET /-uzF0oVy_F7U/VgPjgVVKEuI/AAAAAAAAKag/UsyXtm5xJmA/s1600/FotorCreated.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v29a9"
Expires: Wed, 24 Apr 2019 01:04:42 GMT
Content-Disposition: inline;filename="FotorCreated.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 25 Apr 2019 05:23:21 GMT
Server: fife
Content-Length: 194499
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   194499
Md5:    0fa92c86b3eda00830d8bdf4241ca997
Sha1:   df18a5b62d190a3d5e20577ff40eae4046d9e9c2
Sha256: 5610b5ea3ee9980442e7ecb7f199e6fb7c9dc28dea4c83502d7badbe76cc53a1
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: aans1.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: __unam=5458c72-16a52f2bd92-c1b9ecd-1

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Tue, 23 Apr 2019 01:04:42 GMT
Expires: Tue, 30 Apr 2019 01:04:42 GMT
Last-Modified: Mon, 22 Apr 2019 22:34:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 188319


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Fri, 19 Apr 2019 15:36:44 GMT
Expires: Fri, 26 Apr 2019 15:36:44 GMT
Last-Modified: Fri, 19 Apr 2019 00:46:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 481597
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=8306328461180016453&zx=5128ec87-770b-4d09-84d8-34d0a37f6730 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:21 GMT
Last-Modified: Thu, 25 Apr 2019 05:23:21 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /?id=292519 HTTP/1.1 
Host: go.padsdel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         188.42.162.153
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:21 GMT
Connection: keep-alive
Timing-Allow-Origin: *, *
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /?id=292517 HTTP/1.1 
Host: go.padsdel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         188.42.162.153
HTTP/1.1 204 No Content
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:21 GMT
Connection: keep-alive
Timing-Allow-Origin: *, *
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET /static/v1/widgets/2400194301-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 54462
Date: Fri, 19 Apr 2019 15:30:31 GMT
Expires: Sat, 18 Apr 2020 15:30:31 GMT
Last-Modified: Thu, 18 Apr 2019 19:13:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 481970
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   54462
Md5:    cb678447794c5f91eaebbc6ca631e054
Sha1:   c70bb97c9391705d851e56431478a49640f12098
Sha256: 1b5ab9282ed750e9aaa9b57e7961325f83719833ae9e369946ca06524b037772
                                        
                                            GET /-QTUwXyby2rE/VMJfNtPjtQI/AAAAAAAAJYQ/cLsqE7J8Hpk/s1600/ad_157577151.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2585"
Expires: Fri, 26 Apr 2019 05:23:21 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ad_157577151.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 25 Apr 2019 05:23:21 GMT
Server: fife
Content-Length: 42581
X-XSS-Protection: 0


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   42581
Md5:    81b0f6754b162f9d0c498f5a4fa2f28c
Sha1:   9016da30ed0802bb49fc92d2e1ebda79fa295e81
Sha256: a801c2a26db61e7e0f2e41a4a6157973699727e4b9a2cd39c6a316324524bba1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=158009
Date: Thu, 25 Apr 2019 05:23:21 GMT
Etag: "5cc0dec4-1d7"
Expires: Sat, 27 Apr 2019 01:16:50 GMT
Last-Modified: Wed, 24 Apr 2019 22:10:12 GMT
Server: ECS (lcy/1D1C)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bacf0437adcbf1b9bab41520d277a3a0
Sha1:   694a343740ccc42bc6148e7be7398e808d73dfdc
Sha256: 5a774599b2acde42f15a14b22234f5b120af778920eeac674d3315ed58d89feb
                                        
                                            GET /banner.jpg HTTP/1.1 
Host: busuk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         208.91.197.84
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 25 Apr 2019 05:23:21 GMT
Server: Apache
ntCoent-Length: 272
Keep-Alive: timeout=5, max=121
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 196


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   196
Md5:    8f1f8cad69e837848a06dc69189572bc
Sha1:   ce54ae15a8776744c534d6ac77e9e19b8ee3e7f6
Sha256: 75a3fc170e4d77105298dd4bd6b311b88002882168a9a8a4b8096829377784c4
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=100492
Date: Thu, 25 Apr 2019 05:23:21 GMT
Etag: "5cc012e9-1d7"
Expires: Fri, 26 Apr 2019 09:18:13 GMT
Last-Modified: Wed, 24 Apr 2019 07:40:25 GMT
Server: ECS (lcy/1D68)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    e12d87c584e8cf98706a3614dd2fbead
Sha1:   721c00040e335a2786fb34209e09b08d0c2a5a00
Sha256: 9d52b3b77a0cfcbb4fc74b1d0dfcb7bff9b8c39d73c707859f0346f94065a05d
                                        
                                            GET /static/v1/jsbin/457480341-comment_from_post_iframe.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4492
Date: Fri, 19 Apr 2019 15:12:15 GMT
Expires: Sat, 18 Apr 2020 15:12:15 GMT
Last-Modified: Thu, 18 Apr 2019 19:13:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 483066
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4492
Md5:    e7b4264bef6875e3b6b7db75baea7c36
Sha1:   f8bd902b87dd9f9d1a058f84e1b688643654c138
Sha256: 6341c5d50474425c99751cbba73f6cfd46bfa2eeefdcdb90ee1091ff4588d847
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    dc0e65a9bcf51e1966e5c028a49f234f
Sha1:   ade0890848fd5a4d51f5726fff6eb505f02681c9
Sha256: f1ffa6f970fa1fe383b421fab921a1f14ccd3503dfca7a4dae8f033e30f32348
                                        
                                            GET /button/async-buttons.js HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Etag: W/"5cb63462-162e8"
Server: nginx/1.12.2
Vary: Accept-Encoding
Content-Length: 18856
Cache-Control: max-age=236067
Expires: Sat, 27 Apr 2019 22:57:48 GMT
Date: Thu, 25 Apr 2019 05:23:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18856
Md5:    fc4ab3c68757662e2eb3fd5ffcc0a932
Sha1:   7c4b1b4d7440516bc17eb7e65afc8fbe5b2c4b30
Sha256: 8c158ddff45bfaed78fbce1a95a92119012241d2958d35f92da44d3793c41a73
                                        
                                            GET /openx/www/delivery/avw.php?zoneid=1894&cb=INSERT_RANDOM_NUMBER_HERE&n=ad8818940f HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         101.99.73.202
HTTP/1.1 302 Found
Content-Type: text/html
                                        
Date: Thu, 25 Apr 2019 05:23:18 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.4.35
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; path=/ OAID=2d4ba3d4378acb9aa6473164522c7453; expires=Fri, 24-Apr-2020 05:23:18 GMT; path=/ OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D; path=/
Location: http://www.clicksasia.com/openx/www/images/9249-728x90.jpg
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.zzLpjoAXk6I.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 48537
Date: Tue, 23 Apr 2019 18:25:45 GMT
Expires: Wed, 22 Apr 2020 18:25:45 GMT
Last-Modified: Tue, 23 Apr 2019 01:35:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 125856
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   48537
Md5:    572fbecc6c56a6ec3d24b396d516a5f8
Sha1:   6800595c83f4bf71c1168526af1ee0dce97c72eb
Sha256: eb17b2e0643eafab125b127822e55deb464a531e751b9aaa8981c3ff07a0cf8c
                                        
                                            GET /button/css/buttons-secure.css HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Content-Encoding: gzip
Etag: W/"5cb63463-5a76"
Last-Modified: Tue, 16 Apr 2019 20:00:35 GMT
Server: nginx/1.12.2
Vary: Accept-Encoding
Content-Length: 3851
Date: Thu, 25 Apr 2019 05:23:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   3851
Md5:    61da924a747e08c5f54a6cb31c724a48
Sha1:   8e49d971d6a667c3888a481b742e05cafcf72a43
Sha256: 54302324d4b6aa780466c869b9932504d0b1eaa7ef1df6c5481b35fb0625343a
                                        
                                            GET /openx/www/delivery/inline.js HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Thu, 25 Apr 2019 05:23:18 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Fri, 05 Dec 2014 01:54:39 GMT
Etag: "1bc0f99-91a6-5096e5c1221ca"
Accept-Ranges: bytes
Content-Length: 37286
Connection: close


--- Additional Info ---
Magic:  ASCII C++ program text, with very long lines
Size:   37286
Md5:    824f3c8c45a4765520bcc1c796c3d651
Sha1:   3e53a9129b2f64c55946e449d2f9ef83bd60cc74
Sha256: 813ddee8db406edf0f7a946643fabc5f1b3ef5ca2eebd9ae39ccc89115634f19
                                        
                                            GET /-Cjrjhse6Exc/T_YQ7dMaIpI/AAAAAAAACxg/3RqA3xoGSj0/s1600/subcribe%2Bthesis.gif HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: __unam=5458c72-16a52f2bd92-c1b9ecd-2

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v248c"
Expires: Tue, 23 Apr 2019 13:36:35 GMT
Content-Disposition: inline;filename="subcribe thesis.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 25 Apr 2019 05:23:21 GMT
Server: fife
Content-Length: 354
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 12 x 12
Size:   354
Md5:    63518cf04cae6c58308feb72ea17aeb4
Sha1:   899fbaf9f628bc09483dbca246f580596beb8378
Sha256: c33b76e5a92e675fbef817c95a1414f9b9a661d46f6e66b9eb58b05679d69fd5
                                        
                                            GET /tab.js HTTP/1.1 
Host: widgets.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         185.225.208.133
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Thu, 25 Apr 2019 05:23:21 GMT
Last-Modified: Wed, 13 Mar 2019 20:11:35 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"5c8963f7-6e99"
Expires: Fri, 26 Apr 2019 05:23:21 GMT
Cache-Control: max-age=86400, private
Access-Control-Allow-Origin: *
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   18848
Md5:    9fe4bda5e4fe9d390148f7fdb2156fd7
Sha1:   a9fa3ba34685a53c02198c5784d3e6fbda3c00ee
Sha256: ba7ccd634b560d814ca847d108e3d689fafcea6ad57629e6585cff34ed9c9ca5
                                        
                                            GET /s/josefinslab/v9/lW-5wjwOK3Ps5GSJlNNkMalnqg6p.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://fonts.googleapis.com/css?family=Josefin+Slab
Origin: http://aans1.blogspot.com

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 47444
Date: Fri, 19 Apr 2019 15:20:41 GMT
Expires: Sat, 18 Apr 2020 15:20:41 GMT
Last-Modified: Tue, 15 Jan 2019 19:50:56 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 482560


--- Additional Info ---
Magic:  data
Size:   47444
Md5:    d9e25682e76e956e0c040b1c33259380
Sha1:   a3dbdda1cfa2235763d579425e7ac2622c6b3ade
Sha256: 4b5b0a850c85384025ebf19a0b226a79a125e1a611c6b6c7838c67c8999f4ab6
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=88642
Date: Thu, 25 Apr 2019 05:23:21 GMT
Etag: "5cbfdabd-1d7"
Expires: Fri, 26 Apr 2019 06:00:43 GMT
Last-Modified: Wed, 24 Apr 2019 03:40:45 GMT
Server: ECS (lcy/1D68)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    b4ec567ede4c9cf132d6400e30547c9f
Sha1:   fee09b05926e3249cf5ba5894ef86389e22d8e24
Sha256: 8be02ac070615e9f0e3540cbf898adef558c0c3794a1d4e734025db6cb41d9c3
                                        
                                            GET /v1.0/cmp/portal.html HTTP/1.1 
Host: c.sharethis.mgr.consensu.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         80.239.159.72
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Accept-Ranges: bytes
Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept
Access-Control-Allow-Methods: DELETE, GET, HEAD, OPTIONS, POST, PUT
Access-Control-Allow-Origin: *
Content-Encoding: gzip
Etag: W/"26b-4977387000"
Last-Modified: Tue, 01 Jan 1980 00:00:00 GMT
Vary: Accept-Encoding
Content-Length: 334
Cache-Control: public, max-age=3600
Date: Thu, 25 Apr 2019 05:23:21 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   334
Md5:    4ab93b6bc33d1bca794b1c5858040599
Sha1:   56237593bf3aab55996bf5624ebeb2c566a72e61
Sha256: 81d1ee683d4c2299de99394d10f3e087aae6839e32fd67015b9379a644f4b63b
                                        
                                            GET /feeds/posts/default/-/Makanan?alt=json-in-script&callback=related_results_labels&max-results=17 HTTP/1.1 
Host: aans1.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.211.129
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Etag: W/"fb146b3307d4a25f3000d27b9d866f8c3526e16cf3c355a423d1a4d56ac1fec5"
Date: Thu, 25 Apr 2019 05:23:21 GMT
Server: blogger-renderd
Expires: Thu, 25 Apr 2019 05:23:22 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sun, 03 Mar 2019 17:17:38 GMT
Content-Encoding: gzip
Content-Length: 23841
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   23841
Md5:    b66f5c50ad9e8fc0924dccae32ef66f1
Sha1:   079e6abc54db69b31ff82f1edb34bec7029d5656
Sha256: 835461b9b7eeded2d7eed9afff7543d561ec01abdbc97c95886c7ec562490092
                                        
                                            GET /openx/www/images/9249-728x90.jpg HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Thu, 25 Apr 2019 05:23:19 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Fri, 05 Dec 2014 01:58:41 GMT
Etag: "1bc1991-4244-5096e6a7b4f7a"
Accept-Ranges: bytes
Content-Length: 16964
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   16964
Md5:    ca360981c55ad99bf9c58e144c4dbce7
Sha1:   a2983ee0b42fa3887a6a4c4ba4f88ee25e797fec
Sha256: 3b4a78b0f3c5e5b2694d7ed7fd7dc2379231bf8f1333912d7d0d8a6569313899
                                        
                                            GET /lb.js HTTP/1.1 
Host: eccdn1.synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         54.169.11.196
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 25 Apr 2019 05:23:22 GMT
Content-Length: 4155
Connection: keep-alive
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Last-Modified: Wed, 14 Feb 2018 12:04:09 GMT
Etag: "1c40e19-103b-5652ae8a8a21d"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4155
Md5:    2b7a0e8ead3869fc23c147b83a6e592d
Sha1:   70464a63135ab9a00b478e10d0c643e6cad55e8f
Sha256: 9a63c0e9d5192b21e9df99d7e680312db266d988828ee483c637fd50db0724eb
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    5bb8e2a1c9c774ad72d0c0c49048f140
Sha1:   c9a0376b353d59827a0d0ec5ab3cc773165391f7
Sha256: e69ca4f62bfe03bf7b2e17ed9eabf8c32189a7c24886ccadd71eb25641a46355
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    38c9824f01c84e14be298407e15528cb
Sha1:   e6d6ecf2404f3d700938304701014dc6183a40c6
Sha256: 14191094e3888edb6cee5eff0e04de24a8a9f6f2a7321b47c64ffda8ee9a7daa
                                        
                                            GET /adsid/integrator.js?domain=aans1.blogspot.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 25 Apr 2019 05:23:22 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /adsid/integrator.js?domain=aans1.blogspot.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Thu, 25 Apr 2019 05:23:22 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /pagead/js/r20190422/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Thu, 25 Apr 2019 05:23:22 GMT
Expires: Thu, 25 Apr 2019 05:23:22 GMT
Cache-Control: private, max-age=1209600
Etag: 12163452864547717577
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 78261
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   78261
Md5:    542994d9769f4808110c19b1b93a2876
Sha1:   1bda5f22f0522e8e3ea81489a532165646c7d79a
Sha256: 1b8c720bd3c5494d2527547453521953f58be61fe56aa8ff4c192d3f7be1611e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:22 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    bf08ca0edc570f1326537d6fd04d053e
Sha1:   cdb4c602c911510769110395c96c269690fef7c3
Sha256: 67f76253961a4a04a9a4074a4729f16f96032d82dd269db31a231edc21dda817
                                        
                                            GET /pub-config/r20160913/ca-pub-5947334958438263.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 25 Apr 2019 05:23:24 GMT
Expires: Thu, 25 Apr 2019 17:23:24 GMT
Cache-Control: public, max-age=43200
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
Content-Length: 88
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   88
Md5:    447300cfe76a026545c27482e7ada077
Sha1:   995fa7efb4f9b8be29ea4c3c69a361e0a1f27ba1
Sha256: 994d8a1f3b94c1b503343b827ffd37a0a2a50015d48a054812591825cc305a40
                                        
                                            GET /pagead/html/r20190422/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 23 Apr 2019 19:58:53 GMT
Expires: Tue, 07 May 2019 19:58:53 GMT
Etag: 6995522816633301844
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6970
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 120271
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6970
Md5:    23b153788ab2477a9ca1746ecda0fa10
Sha1:   9f5d275f5aa63b81d368e0959215598ab718dbfe
Sha256: 164aa6db4b1eb593c47eaaf8f3b225734bd426c5457f4eb20f00614301c339ec
                                        
                                            POST / HTTP/1.1 
Host: ocsp.godaddy.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         50.63.243.230
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:25:02 GMT
Server: Apache
Content-Transfer-Encoding: Binary
Cache-Control: max-age=112309, public, no-transform, must-revalidate
Last-Modified: Thu, 25 Apr 2019 02:15:22 GMT
Expires: Fri, 26 Apr 2019 14:15:22 GMT
Etag: "f0c6a873444089b84cee71a27184d80944f33c95"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
Content-Length: 1777
Connection: close


--- Additional Info ---
Magic:  data
Size:   1777
Md5:    6f645dfecf2e328560c1cbb8c46b4b31
Sha1:   f0c6a873444089b84cee71a27184d80944f33c95
Sha256: e07474743e4b31172e88ba3a9a8a8f8d9026e8e38982fde68ca2f852cc176c1d
                                        
                                            GET /images/2017/sharethis_counter.png HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Etag: "5cb6342b-a58"
Server: nginx/1.12.2
Content-Length: 2648
Cache-Control: max-age=30813010
Expires: Wed, 15 Apr 2020 20:33:34 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 120 x 44, 8-bit/color RGBA, non-interlaced
Size:   2648
Md5:    c0cbf421acb6c3a3cd615542054e0536
Sha1:   d56aa81a6df18e79a5ad752d4871a2948bf8ada6
Sha256: 4e2b38b4f0180fd5671604c482ae7b38eaa7d3b008099314bd261206045b0413
                                        
                                            GET /images/2017/google_16.png HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws.sharethis.com/button/css/buttons-secure.css

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Etag: "5cb6342b-2ef"
Server: nginx/1.12.2
Content-Length: 751
Cache-Control: max-age=30813096
Expires: Wed, 15 Apr 2020 20:35:00 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   751
Md5:    9e47055058abb25ca071a45959a8eacb
Sha1:   7d2008609dbcd7abfb879beee217c8d29fc8474c
Sha256: 326ca16bacf067a36a77b9806ef524488b13d848054246d368d0b9fa9e08a141
                                        
                                            GET /images/2017/facebook_counter.png HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Etag: "5cb6342b-977"
Server: nginx/1.12.2
Content-Length: 2423
Cache-Control: max-age=30813019
Expires: Wed, 15 Apr 2020 20:33:43 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 120 x 44, 8-bit/color RGBA, non-interlaced
Size:   2423
Md5:    7ba4aa0077ecbfdad7b112b723bf3b89
Sha1:   8d85c1b4ca791a4a9010c304c3af620cdc2fac94
Sha256: 3488c49147b809d1e457c14a37bf3a79b0455fd159c121325e8f737eea45eb75
                                        
                                            GET /images/2017/linkedin_counter.png HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Etag: "5cb6342b-9e1"
Server: nginx/1.12.2
Content-Length: 2529
Cache-Control: max-age=30813020
Expires: Wed, 15 Apr 2020 20:33:44 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 120 x 44, 8-bit/color RGBA, non-interlaced
Size:   2529
Md5:    fe09cd7fe7814958b566642c4471e7ed
Sha1:   d3e649a373de39af33aa03ec2faa563c87630d5f
Sha256: 0e3f83554765fa48514ce0a169441466f92010d01cdc716003e02317bffc6993
                                        
                                            GET /secure/images/bubble_arrow.png HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws.sharethis.com/button/css/buttons-secure.css

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Etag: "5cb63462-3d3"
Server: nginx/1.12.2
Content-Length: 979
Cache-Control: max-age=30813016
Expires: Wed, 15 Apr 2020 20:33:40 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  PNG image, 4 x 6, 8-bit colormap, non-interlaced
Size:   979
Md5:    9466fb05cc9cae591337910debe1282e
Sha1:   03a3bc8a8c1a744dd1b283ad82fa392f01cafc09
Sha256: 516630dc137782b6ea784ed6891b487b8a2fff9be9ed921977008453039cc1fe
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Thu, 25 Apr 2019 05:23:24 GMT
Expires: Thu, 25 Apr 2019 05:23:24 GMT
Cache-Control: private, max-age=3000
Etag: "1555931705985636"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28619
Md5:    87f7c32dcff2ee967fa017076cdebd5b
Sha1:   5c15ef2cd6e366112c7a99377f1b7e29a6cb1070
Sha256: 0efab9f8f7b2ac5f32d1e1836a83da1a8a0c0da0d7fedef5ad07d1303916e2f4
                                        
                                            GET /pagead/ads?client=ca-pub-5947334958438263&output=html&h=250&slotname=5777407432&adk=3554384060&adf=807048394&w=300&lmt=1551633458&guci=1.2.0.0.2.2.0.0&format=300x250&url=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&ea=0&flash=10.0.45&hl=en&avail_w=610&wgl=0&adsid=NT&dt=1556169802759&bpp=87&fdt=209&idt=203&shv=r20190422&cbv=r20190131&saldr=aa&abxe=1&correlator=252247063622&frm=20&pv=2&ga_vid=1331057014.1556169804&ga_sid=1556169804&ga_hid=902761567&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=265&ady=1232&biw=1159&bih=754&scr_x=0&scr_y=0&eid=21063245%2C21060853%2C20040081&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=938 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         172.217.21.162
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Thu, 25 Apr 2019 05:23:24 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Thu, 25-Apr-2019 05:38:24 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   82
Md5:    87b49554493c15fb23b8e5d2f13b1ebf
Sha1:   328cbcb1c58530fd3f554ca7386ef7a85e1e982f
Sha256: 590b4bba70579d67368d97259fc85f56fda4fa5cb82f404fa8ec67a43369db17
                                        
                                            GET /v2.0/get_counts?url=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&cb=stButtons.processCB&wd=true HTTP/1.1 
Host: count-server.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         34.198.121.180
HTTP/1.1 200 OK
Content-Type: application/json
                                        
Content-Encoding: gzip
Date: Thu, 25 Apr 2019 05:23:24 GMT
Content-Length: 147
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data
Size:   147
Md5:    ca3c16eb5a087e0ba8b99e406edf972c
Sha1:   eb6702f2d62b755c96add9bcb663d0ab951749ea
Sha256: 91b2a92f6b91adabb9160ea966ba0115fde1cb54701049118c040969a2b61150
                                        
                                            GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         31.13.72.36
HTTP/1.1 302 Found
Content-Type: text/html; charset="utf-8"
                                        
Location: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true
X-FB-Debug: csG8qsBYgBc24IphR9rH11DbZXRmAyGKclafqcQiLZ2dO1dIlUjbPr2HMbmD2r3kwixD9CCKTjatzO5tCr1V0A==
Date: Thu, 25 Apr 2019 05:23:24 GMT
Connection: keep-alive
Content-Length: 0


--- Additional Info ---
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:24 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a118bfd5dd1b24437daaebb3a98c6a40
Sha1:   26c78bd257cc2b49a29e8dd1534edee2ee3cdd67
Sha256: f852fa247220a32845fdea5c03f395a8862c96699dbd3c3ca31a1ecf123b05f8
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=153314
Date: Thu, 25 Apr 2019 05:23:25 GMT
Etag: "5cc0ea93-1d7"
Expires: Fri, 26 Apr 2019 23:58:39 GMT
Last-Modified: Wed, 24 Apr 2019 23:00:35 GMT
Server: ECS (lcy/1D6F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    db212777e9138f1a33d8d1df5af7ae6d
Sha1:   494b36bd5cc97039982734ec1e4923a289a9e00c
Sha256: a5b55584702765d0f90a9030a82e5c4e8c6bf7f73d9dcb5ae822db8ad28c0c88
                                        
                                            GET /banner.jpg HTTP/1.1 
Host: busuk.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         208.91.197.84
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 25 Apr 2019 05:23:24 GMT
Server: Apache
ntCoent-Length: 272
Keep-Alive: timeout=5, max=70
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 195


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   195
Md5:    5c3ae088d22307539515802739da60c8
Sha1:   a9fe93d6740f1dda1d5cd8151b965f3543e69526
Sha256: 5ba5cf6034be99b8a57610c6eb2cf65ecc367dcd2b3e6ab0bd57bedf6b706d28
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=119258
Date: Thu, 25 Apr 2019 05:23:25 GMT
Etag: "5cc05488-1d7"
Expires: Fri, 26 Apr 2019 14:31:03 GMT
Last-Modified: Wed, 24 Apr 2019 12:20:24 GMT
Server: ECS (lcy/1D1F)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    817c82c482584aadf5a5d109cceb7aa9
Sha1:   8ef66322ef02227df38246567568e104e0c9f307
Sha256: 9d3b29fab793a8b8c4324364892ab1b0865ceb58ed79a79c625de9c6309742b9
                                        
                                            GET /comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:25 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: S=blogger=fVhDIMJ7Wfg1mcCGuaL3qMW4zCRAuFAZ; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   1917
Md5:    4b77cfd8f11979b187ef570e2be391e8
Sha1:   97f9dea33cd777c775209ff7aa7a68fbe58468d9
Sha256: 0a08f0357f6ae19edcb144106bfb2550f9d1e4b0856a5dbda6bb65bf29405788
                                        
                                            GET /img/blank.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 43
Date: Fri, 19 Apr 2019 15:29:56 GMT
Expires: Fri, 26 Apr 2019 15:29:56 GMT
Last-Modified: Fri, 19 Apr 2019 13:08:54 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 482009
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    325472601571f31e1bf00674c368d335
Sha1:   2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
Sha256: b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
                                        
                                            GET /static/v1/v-css/2621646369-cmtfp.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Cookie: S=blogger=fVhDIMJ7Wfg1mcCGuaL3qMW4zCRAuFAZ

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3701
Date: Fri, 19 Apr 2019 15:07:48 GMT
Expires: Sat, 18 Apr 2020 15:07:48 GMT
Last-Modified: Thu, 18 Apr 2019 19:13:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 483337
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3701
Md5:    0082ccb3f0b4aba531cb20924526ff55
Sha1:   09396b6d286d8178781002d2090d013edd024432
Sha256: 2afa2cee6d5218e5a43107dbacf4e12e138eb5fcbbf1f5195442e15b0458bceb
                                        
                                            GET /img/cmt/close.gif HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Cookie: S=blogger=fVhDIMJ7Wfg1mcCGuaL3qMW4zCRAuFAZ

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 347
Date: Fri, 19 Apr 2019 15:26:38 GMT
Expires: Fri, 26 Apr 2019 15:26:38 GMT
Last-Modified: Fri, 19 Apr 2019 14:13:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 482207
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 89a, 16 x 16
Size:   347
Md5:    6671b9932cbb79a2c2a018ed2c3bf3fb
Sha1:   40566dd706279a44ebd477df58a4cf75ab99cae8
Sha256: df6cb367e3692c4d2056dd69c54bea18458148ef028ce7b998824f9f49ceafd6
                                        
                                            GET /static/v1/jsbin/1392405426-cmt.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Cookie: S=blogger=fVhDIMJ7Wfg1mcCGuaL3qMW4zCRAuFAZ

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30533
Date: Fri, 19 Apr 2019 15:24:45 GMT
Expires: Sat, 18 Apr 2020 15:24:45 GMT
Last-Modified: Thu, 18 Apr 2019 19:13:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 482320
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   30533
Md5:    efea270c107a2a165e5945371f3d6968
Sha1:   53e960b0a46736c4972766c5ae782c99d114e2be
Sha256: d1f99b76ee1ecbed726f46b88561bdebd303205c37c8dee0a27429282f6aebe4
                                        
                                            GET /ss.js HTTP/1.1 
Host: synad2.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         52.220.154.207
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Thu, 25 Apr 2019 05:23:25 GMT
Content-Length: 315
Connection: keep-alive
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/ss.js
Cache-Control: max-age=86400
Expires: Fri, 26 Apr 2019 05:23:25 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   315
Md5:    51f316438686c03cef13e0cfbf8c505a
Sha1:   5679098c6a8f7e945c1d342fb926dec9725ca338
Sha256: 3d20dd5cb58039151bb0d7c0aafec903479f53078031aeeba45dfe56e955d796
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Thu, 25 Apr 2019 05:23:25 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    73aea00081cbdc8e23d1114d6b64f939
Sha1:   65b2af1d42985bbaf6847abed2572fe5c853c781
Sha256: 7b3e2c66e1f678676092b12ff4a9436927d0c45fb16f73e2bc1074bed0a4e1ae
                                        
                                            GET /js/bg/HArB7JM43q8tuBr31bjD0GTzr8A2e2_5tIyAw7QWxHw.js HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 5171
Date: Fri, 19 Apr 2019 15:22:40 GMT
Expires: Sat, 18 Apr 2020 15:22:40 GMT
Last-Modified: Mon, 08 Apr 2019 10:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 482445
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5171
Md5:    7c24e7e99c8007d2332caae0daa63f42
Sha1:   f8e1b6b3d3dd5e8114adbec7b6aa5ccccdb81a5c
Sha256: a44d8e47d32ba45175663536b658dd074cb4ff2919dcbac22c53c573badb8c1e
                                        
                                            GET /plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: text/html; charset="utf-8"
                                        
Cache-Control: private, no-cache, no-store, must-revalidate
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Content-Encoding: gzip
Timing-Allow-Origin: *
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Expires: Sat, 01 Jan 2000 00:00:00 GMT
X-FB-Debug: /ABN/8JHZesTQRDNO9+13UgZYa3W2M+fwAH7QKDShvnJAZgikF6edj7nMqPQgKpJUKspWw5CdAI2aZn4iHJzkA==
Date: Thu, 25 Apr 2019 05:23:25 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44221
Md5:    baf0222f268f782569e239056a8ebf13
Sha1:   faaf541ae1cfdc5cc72f0636a08baeb9bee47184
Sha256: 6811bfd214836af5527f63426c38e2a5b32c6801e2ace6de5441c1a907d6744a
                                        
                                            GET /img/anon36.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/v-css/2621646369-cmtfp.css

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1654
Date: Fri, 19 Apr 2019 15:16:10 GMT
Expires: Fri, 26 Apr 2019 15:16:10 GMT
Last-Modified: Fri, 19 Apr 2019 14:13:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 482835
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 36 x 36, 8-bit/color RGB, non-interlaced
Size:   1654
Md5:    106b75877485647b4b5618523f541732
Sha1:   c19e26c01d2972a4c895c3688c735158785620c7
Sha256: 19a794aab8d93c3cafd1efa4ae19579369f92ed5f1bb114d05aa0d7c7d1b3c22
                                        
                                            POST / HTTP/1.1 
Host: ocsp.sca1b.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         143.204.51.176
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=151733
Date: Thu, 25 Apr 2019 05:23:26 GMT
Etag: "5cc0e384-1d7"
Expires: Fri, 26 Apr 2019 23:32:19 GMT
Last-Modified: Wed, 24 Apr 2019 22:30:28 GMT
Server: ECS (phd/FD6D)
X-Cache: Miss from cloudfront
Via: 1.1 185768229530368be94556dcab1c486b.cloudfront.net (CloudFront)
X-Amz-Cf-Id: MnlB-h9u528XbyidODKFxqCRlLAKv8iGONl0q3pEadJWDnpIIAYEvg==


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ba32c988d6af05a34885dd90a5813cbe
Sha1:   788ce7747a558702c280dce28cb289c6fb0e95b9
Sha256: 1102bccfdd51c20dce9a23e5fa199540d5331229816d119618e5335ea9b6929e
                                        
                                            POST / HTTP/1.1 
Host: ocsp.rootca1.amazontrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 118
Content-Type: application/ocsp-request

                                         
                                         143.204.51.148
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Content-Length: 1426
Connection: keep-alive
Date: Thu, 25 Apr 2019 05:23:26 GMT
Server: WEBrick/1.3.1 (Ruby/2.3.8/2018-10-18)
X-Cache: Miss from cloudfront
Via: 1.1 9ede9483eb891e14681c7c693b47c862.cloudfront.net (CloudFront)
X-Amz-Cf-Id: 1LDnUC_zQcgrVPUtI0FijYfG3bEAAeDQKrHIG_KBcjuer3WmxCReNQ==


--- Additional Info ---
Magic:  data
Size:   1426
Md5:    c8c7ff5bdfa2afcabf3154aa1e4609ff
Sha1:   761b010d322659e59ed65842ee5eed1d58329d29
Sha256: 3b095a568c934e78b2264885ef968b83d35d61aa6f35633433213dc5a17aa7cd
                                        
                                            GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=HArB7JM43q8tuBr31bjD0GTzr8A2e2_5tIyAw7QWxHw HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Cookie: S=blogger=fVhDIMJ7Wfg1mcCGuaL3qMW4zCRAuFAZ

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:25 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   4031
Md5:    b3327fe7444def49148e2ff8bff2cc8d
Sha1:   6a4658ad4e19766aac040fce186e171f792f0497
Sha256: c64d470a15e23cbd0175a3718686d190c4f5149b7ce4a4c0eba14ec10bdf600b
                                        
                                            GET /rsrc.php/v3/yG/l/0,cross/1wTtydDxtGs.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 22:25:44 GMT
Content-MD5: gvOWuxLM14eDL6OHrSIFfA==
X-FB-Debug: pckqShYVuQMp3AEDI1ZYgIt0yQ2m9PRQIuNVIHGZ5rBawhyC9ekdc+9b/6bO9HEsptKapeYwXwnOhp+DNjrG0w==
Date: Thu, 25 Apr 2019 05:23:25 GMT
Connection: keep-alive
Content-Length: 6206


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6206
Md5:    82f396bb12ccd787832fa387ad22057c
Sha1:   badea4fba631af9a7062063e1c21bfeb5f49de82
Sha256: d282bbe091dc4ed5a7950a4e0527b5b5cf9217748e9b50f8b5c909550da434cc
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=135795
Date: Thu, 25 Apr 2019 05:23:27 GMT
Etag: "5cc08cbc-1d7"
Expires: Fri, 26 Apr 2019 19:06:42 GMT
Last-Modified: Wed, 24 Apr 2019 16:20:12 GMT
Server: ECS (lcy/1D5A)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d3db7c1609e50e8b16ad84cb99ca373b
Sha1:   75b299624b41ff836af7716c682adf5f7f2340c9
Sha256: cf982308861933140533ba097689d1044bc7c0f101c279d1b32fdce352d10a00
                                        
                                            GET /v/t1.0-0/p228x119/57447311_10161994720685529_8601036610013757440_n.jpg?_nc_cat=101&_nc_ht=scontent.fosl1-1.fna&oh=47cb183b644a5497ec0380ce3c7958cc&oe=5D6BEA31 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 22 Apr 2019 14:22:04 GMT
X-Haystack-NeedleChecksum: 691364690
X-Needle-Checksum: 3585986523
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 12591


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   12591
Md5:    1814384256171f5532519cf4236362ec
Sha1:   6b80ca4895fdf540c2a71137e19a40f1c3082d41
Sha256: 2d375beea84fe6f42e627f31f2dbbaf5d11eb63d8620250a076ab5bce0c08833
                                        
                                            GET /v/t1.0-0/p280x280/57726577_10161994579090529_9139696453201952768_n.jpg?_nc_cat=104&_nc_ht=scontent.fosl1-1.fna&oh=5db4076d498d79cb1ae188e496ec5a50&oe=5D3AB1AC HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 22 Apr 2019 13:34:32 GMT
X-Haystack-NeedleChecksum: 3836737716
X-Needle-Checksum: 2081293817
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 28844


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   28844
Md5:    d76099a75a9d6a4482c21391b38c8ac8
Sha1:   491ca93c0d45ee1ecab3dadd54894e161b669c4d
Sha256: ca1d67145a4345d81d49a8d977736561e0c91a4efbbb9a63b5c21ba48af214b8
                                        
                                            GET /rsrc.php/v3/ye/r/9v59o0gqUo5.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 21 Apr 2020 07:24:15 GMT
Content-MD5: nuxx8Jj7yFMJwbcUoSBfBQ==
X-FB-Debug: Ls8OnQ31dHFYvF/sGHs9rsDBmFv50EcWXpbxRYP/9kbSp5vktY5iUxUMUzOqnYXXJzF9GbsRYk8Lu9hUm9BZHQ==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 90530


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   90530
Md5:    9eec71f098fbc85309c1b714a1205f05
Sha1:   16dc3a3a308dd6acc82ae871e7acdd5739b651fa
Sha256: ae75e786de81dbe1fdbf626565caace863ba214aca89d5fffd0e5b630a5dc6e0
                                        
                                            GET /v/t1.0-0/s350x350/47057836_760979750923363_5969257771181277184_n.jpg?_nc_cat=101&_nc_ht=scontent.fosl1-1.fna&oh=3924d89b9fbd7ab02c2353a35747c90b&oe=5D6A6C63 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Wed, 28 Nov 2018 22:43:56 GMT
X-Haystack-NeedleChecksum: 3212679079
X-Needle-Checksum: 289687472
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 17031


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   17031
Md5:    a05d5d7fa0e030114b1a2753528b9124
Sha1:   ff2892494309e4a4ab459da302dd52ed9cee6e85
Sha256: 8836e1b23cc0d4555362dec36f0a21cd4c3c0dfe2e3fed15b3c22836444919b3
                                        
                                            GET /rsrc.php/v3/yV/l/0,cross/eOhYyzbsc3i.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 21 Apr 2020 15:55:54 GMT
Content-MD5: PnOF2caK0Wq8ZY8KBrcA7A==
X-FB-Debug: 1AXV6w1qqkgJCy5RV7CAzLJcgBl505exKvCA9OO1Fqh9uaJowYl5X7+6of/eAB+p7kfCB3+SuePqaeLi5X2WzQ==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 7261


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   7261
Md5:    3e7385d9c68ad16abc658f0a06b700ec
Sha1:   84499aa1dc0e4803b8930980b120b45e6fae3fc9
Sha256: 0dd9d3b21d3ace62120dd921d3d4e33e22f33f324b985716ba97d0b4e6e50d83
                                        
                                            GET /v/t1.0-0/s168x128/47120432_760979737590031_9170649234532204544_n.jpg?_nc_cat=103&_nc_ht=scontent.fosl1-1.fna&oh=d7c8f5b5999054f68400c60ef9b641b0&oe=5D77C1F1 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Wed, 28 Nov 2018 22:43:55 GMT
X-Haystack-NeedleChecksum: 1565737843
X-Needle-Checksum: 2220051566
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 6109


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   6109
Md5:    864a6ebfd58401b90284bf7a063e4b49
Sha1:   0c883258665dcee8fd98a20252a4f5738fe74cef
Sha256: 7f9aa60726aa166f80ebb1e9423daf4bf3db2bc43195848e6e0355d655075b8b
                                        
                                            GET /rsrc.php/v3/yx/r/Y4Ik-H3Nov8.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Sat, 18 Apr 2020 10:52:16 GMT
Content-MD5: zlDV9RcUzhldFxU9SJ6FAw==
X-FB-Debug: GycQ9hmsEQkSbKrQb92IopVdBmJ1zPqSLgQrdlMjAoevvCvG6HOZqBXFPkt8+Wxhh+Zy9AZY1l0I2xD96jLXiA==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 24389


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   24389
Md5:    ce50d5f51714ce195d17153d489e8503
Sha1:   83208e705732bd4aefd301e87881748fe7dc6c3c
Sha256: c967411612061fd35a14f80554a02184e062baea0e413d1c1627db4d7d4df8dc
                                        
                                            GET /v/t1.0-0/s168x128/47093480_760979097590095_4780070795382620160_n.png?_nc_cat=100&_nc_ht=scontent.fosl1-1.fna&oh=b58934a93af98b15e72890fab01f3796&oe=5D309B89 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Wed, 28 Nov 2018 22:43:32 GMT
X-Haystack-NeedleChecksum: 187069613
X-Needle-Checksum: 1537595412
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 17959


--- Additional Info ---
Magic:  PNG image, 168 x 94, 8-bit/color RGB, non-interlaced
Size:   17959
Md5:    74d129a15ed24a0896adc3b9c2df7b3a
Sha1:   010b57ff871bc1b7276079ca7b95863f4773f825
Sha256: 59fb043b820d5af3a803046ac855e999a38d994d26948dab371074bb3bf05c87
                                        
                                            GET /v/t1.0-0/s168x128/46994884_760978764256795_8457110340369383424_n.png?_nc_cat=107&_nc_ht=scontent.fosl1-1.fna&oh=4f34e5308ea8b899a899a8e09339906f&oe=5D33CF24 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Wed, 28 Nov 2018 22:43:16 GMT
X-Haystack-NeedleChecksum: 4041188352
X-Needle-Checksum: 805781207
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 18570


--- Additional Info ---
Magic:  PNG image, 168 x 94, 8-bit/color RGB, non-interlaced
Size:   18570
Md5:    86770453d9d00251122bfe895541f52b
Sha1:   19da975b65257d14a58efc54b3a2b8368395001a
Sha256: 0bbaa95a3f0359d8aadbdad20479b2d71ed0b8541f689355c1e33c1f150407ec
                                        
                                            GET /v/t1.0-0/p296x100/57297725_1200781606780178_8336157807841640448_n.jpg?_nc_cat=111&_nc_ht=scontent.fosl1-1.fna&oh=1408984c8301ff7bfbd60ee4dfdf64e9&oe=5D72327C HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Fri, 19 Apr 2019 15:26:45 GMT
X-Haystack-NeedleChecksum: 1521166834
X-Needle-Checksum: 597733368
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 17552


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   17552
Md5:    e45886caf60b0fa53239c4ac72008283
Sha1:   722dda2181013e4f58c7bef3f69ca9309cafad77
Sha256: 2f0222f6144dd49a5f8916e26038a04d757475dc4d1c7ed7333ee2ffe261d8bc
                                        
                                            GET /ss.js HTTP/1.1 
Host: eccdn1.synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         54.169.11.196
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Thu, 25 Apr 2019 05:23:27 GMT
Content-Length: 4094
Connection: keep-alive
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Last-Modified: Wed, 14 Feb 2018 11:48:38 GMT
Etag: "1c40e2a-ffe-5652ab1297d22"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   4094
Md5:    d880972d1300082083aedb503e9e9f0f
Sha1:   5676626c217a05f0cbd971f3d393bd1d04b1e181
Sha256: 6b1426e24aeef28c171506f72d1e734d4b2628185ab2ff61265100bcbf8cd417
                                        
                                            GET /rsrc.php/v3/y0/r/vW8X7Qgg0pl.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 01:44:50 GMT
Content-MD5: BQvYXContJfffvhLkcFOYA==
X-FB-Debug: xB9uu5hdwT3isPmeEexkTCECmBUsU6Vi5aWTB2s+z5D6FDj/GOpRhY4qL6T8IOko2fj/PmW81lHAUB3mWr9dzw==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 17509


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   17509
Md5:    050bd85c2a27b497df7ef84b91c14e60
Sha1:   1e98a32aa8c1d44f69a865328c0bded3b6a2aab3
Sha256: 81c5ad19d4a4e02875cdf8bee6329415837cd18e9a6e30dd2ac6810f276224cb
                                        
                                            GET /-zt1heJ3mBLg/T7zVmDb7EII/AAAAAAAAA-Q/hpQivcNMPP4/s1600/bullet.gif HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: __unam=5458c72-16a52f2bd92-c1b9ecd-2

                                         
                                         172.217.21.129
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v4ca"
Expires: Fri, 26 Apr 2019 05:23:27 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bullet.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 25 Apr 2019 05:23:27 GMT
Server: fife
Content-Length: 311
X-XSS-Protection: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 11
Size:   311
Md5:    028bcf92cf62e42de0acfa130f3d351e
Sha1:   68e32de8443766f9ed1ddc91c4f6436cc2facf4a
Sha256: a9ded55ec2249c5d0fc740e775d521dc79e6b38bb8f28f80fdd8348975ca11d4
                                        
                                            GET /rsrc.php/v3/yO/r/X1oIHZYScn3.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Mon, 20 Apr 2020 16:39:35 GMT
Content-MD5: 5okuQ5yWcfu/trMql1eDvQ==
X-FB-Debug: J8gJ7n3RyBTNh84K+Ln2iBWVpWfeJvldsDClY1YVtVZVLrrF94ZtNj7Bd3dmnPRB6U6+loK+xGC32Q3IsocyWw==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 9163


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9163
Md5:    e6892e439c9671fbbfb6b32a975783bd
Sha1:   fdf1d20132ebe03629a03b9a2d8a6d5fbffc49d5
Sha256: 21ee0a060cfda418f5df4e6be8111c5b5d41faeb05d0f3e41a8e60c21c71bcc2
                                        
                                            GET /v/t1.0-0/p296x100/57620771_10161994719760529_1442246599202832384_n.jpg?_nc_cat=110&_nc_ht=scontent.fosl1-1.fna&oh=638bcae28afb8a1a3776b1c31034d17a&oe=5D38DB5B HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 22 Apr 2019 14:21:49 GMT
X-Haystack-NeedleChecksum: 3468094500
X-Needle-Checksum: 986334274
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 14499


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   14499
Md5:    b909630d85e3611505dc0608b80887f9
Sha1:   eea2972db7db1c14a000466e6256ea219e186ef5
Sha256: 2b2e74e4a5299be4a48dc0fa4a279123563d356b0c50332897a599a9ceb583a0
                                        
                                            GET /v/t1.0-0/s261x260/58381540_10161994720200529_2973552287340822528_n.jpg?_nc_cat=111&_nc_ht=scontent.fosl1-1.fna&oh=d0032dd75b120f6bf58dfceca0ef29d6&oe=5D6BDDE0 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Mon, 22 Apr 2019 14:21:57 GMT
X-Haystack-NeedleChecksum: 3907328469
X-Needle-Checksum: 1067358676
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 13654


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   13654
Md5:    f186d7c483b47345fb4946366ef9b26d
Sha1:   bfe975fad5fa43745b3ee152e47bb549a4663c62
Sha256: a8dc8793440b8be56892aed125bcc65f26a8a8c92a3ab414a2ad1b12feb0c181
                                        
                                            GET /rsrc.php/v3iLl54/y_/l/en_US/Y2qh9DmTooO.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 21 Apr 2020 16:06:05 GMT
Content-MD5: us5LRnJzYdFHEqZBvjevTA==
X-FB-Debug: tKy6zLIMheZ5buC6ffn5dfKOSnE2celM24vl7bHwL9ULGJrRpyn+3wZgU1+SKDYD3djpxFw3ksktS1ythbbLKQ==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 9938


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   9938
Md5:    bace4b46727361d14712a641be37af4c
Sha1:   b4d5c4c51c02bd83efb9ac052329ea0a07fcc09c
Sha256: e285e2be9e56ffc245d36dd300d137b5ece01e8cc2ead862e29e55e924dc656a
                                        
                                            GET /v/t1.0-0/p296x100/57678098_10162000829410529_7475462197267660800_n.jpg?_nc_cat=104&_nc_ht=scontent.fosl1-1.fna&oh=378644fd931a2b0a6f14905f250f75e1&oe=5D2C7FB2 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Wed, 24 Apr 2019 01:00:36 GMT
X-Haystack-NeedleChecksum: 216545764
X-Needle-Checksum: 1939862088
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 24505


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   24505
Md5:    858a0ec6f0edebbb50ba31844054b5e7
Sha1:   1b28e608b5af3da4f8f939bb14fd134593a11918
Sha256: 731c3981265aad11301bc22f007879379efe8c539e11ac3723dc176f5bb323b9
                                        
                                            GET /widgets.js HTTP/1.1 
Host: platform.twitter.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         93.184.220.66
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Cache-Control: public, max-age=1800
Date: Thu, 25 Apr 2019 05:23:28 GMT
Etag: "4cf9f34505e9344b9a7e4d00e67b6c88+gzip"
Last-Modified: Thu, 07 Mar 2019 17:40:21 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (lcy/1D22)
Vary: Accept-Encoding
X-Cache: HIT
Content-Length: 28028


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Thu Mar 07 18:40:21 2019
Size:   28028
Md5:    a0159fb9dfe4b9876f7403737b6734cb
Sha1:   1246e0a6289c96e8e1f12a7ae61ae1abf7d81f33
Sha256: ae837a1761d19c4e2926565a688c129ec62c9ea22029915953156417ad6fc5de
                                        
                                            GET /v/t1.0-1/c207.24.306.306a/s50x50/247302_10150630962915529_2309814_n.jpg?_nc_cat=106&_nc_ht=scontent.fosl1-1.fna&oh=cbac78e3b3130addaff025d92de84e8f&oe=5D762B82 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
X-Haystack-NeedleChecksum: 1257395527
X-Needle-Checksum: 3721976122
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 1646


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   1646
Md5:    606a19935fe57d38872e4f9691c253d6
Sha1:   a4204fd8a6a7a823b8efa6a9ed08dab28888a39b
Sha256: 74a0e7687f0d00cc822ca4ffb4c4669ea8464f4bdf6c360bc4921d0fe444028d
                                        
                                            GET /rsrc.php/v3/yY/l/0,cross/0xu-MU-vG5W.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 23:56:21 GMT
Content-MD5: rBAaWaQJf2FE1USmpZccRA==
X-FB-Debug: 2haVqYh2I0quR5FJUVmq+Iqvyy30Np+J4UHWv1Ys4rRvd6uBgcQvtfcVB9zm6Kzs3dqSz90YgAhaZztdGpt9CQ==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 1521


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1521
Md5:    ac101a59a4097f6144d544a6a5971c44
Sha1:   9263bd4920db5cb34410f41feb3f6698f6c3976f
Sha256: 796e73522b4394de1b1ee66ca196548ed2fa45361b2b9553577c36a72410834f
                                        
                                            GET /v/t1.0-0/p75x225/26628_10152151913970529_135976903_n.jpg?_nc_cat=100&_nc_ht=scontent.fosl1-1.fna&oh=b57bb3bf77c64c9bd944a9f43df34274&oe=5D6C4332 HTTP/1.1 
Host: scontent.fosl1-1.fna.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         213.52.81.145
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Last-Modified: Sun, 30 Sep 2012 00:00:00 GMT
X-Haystack-NeedleChecksum: 3022983075
X-Needle-Checksum: 4168212833
X-FB-Config-Version-OLB-PROD: 480
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
X-FB-Config-Version-ELB-PROD: 480
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
X-FB-Config-Version-FLB-PROD: 262
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 21698


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   21698
Md5:    0de22e55593838328d56f11848349bc0
Sha1:   c14a041c43715b20d5c85cfaca0dbd90da5618d3
Sha256: 5876873883461ab4b0697106e06982e145c81faf47d9e5b9877c89fbc312f711
                                        
                                            GET /rsrc.php/v3/yy/l/0,cross/EAONfanG403.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Sat, 18 Apr 2020 09:46:42 GMT
Content-MD5: PdxX8BeBE0fP9Ky7rTxFuQ==
X-FB-Debug: RgpEB0es8KElahC+xzfpXgKow0s32GgZYbwQKLmXzBXJ0EDCi/Wv4Afi6s+sdVVadKQ99zM8kVEC3pAJuJh6cQ==
Date: Thu, 25 Apr 2019 05:23:27 GMT
Connection: keep-alive
Content-Length: 6126


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6126
Md5:    3ddc57f017811347cff4acbbad3c45b9
Sha1:   42adc504152dbfda37ec750c78db5e14abd86610
Sha256: 2e9592412081065b10a4f321adcb7cd629a1abe9a65139b5bfa40a8a9009da34
                                        
                                            GET /rsrc.php/v3ilEA4/y6/l/en_US/7dKYeFjlJ2l.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Wed, 22 Apr 2020 07:22:35 GMT
Content-MD5: Oic1ZqL53fEhTPXOwOCvgQ==
X-FB-Debug: JWlEXPGwyAzyri8kHw/qr6lxptNCEFqpRpq1Qv5UE7V0uckmgiSTnpynkvLs4PPUCA07lH8X1JqYONPeafmsbQ==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 29794


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29794
Md5:    3a273566a2f9ddf1214cf5cec0e0af81
Sha1:   643f3197179c5e9a9fe176ace213631c704e5e2a
Sha256: 5891abdf83e3909c1e988953dfe3e4396bfab1c45e90c98ec19cd45b5795bd90
                                        
                                            GET /rsrc.php/v3iF584/yi/l/en_US/a0_6qBof7ct.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Wed, 22 Apr 2020 21:50:01 GMT
Content-MD5: U9kDPBkO/jKRmiGtxXdu5g==
X-FB-Debug: c8KDvUBddxcnaO9pcZuw1Yu6f7/vKeFjDJCU+9URFKJWC/PqW+kkLM8aEVPkoIYUTH59FE7B5s3ofaMs73dYAQ==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 14170


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   14170
Md5:    53d9033c190efe32919a21adc5776ee6
Sha1:   06ab2fbeabb1d0814245c80dd7773d81a50ba948
Sha256: ae8bd2a4ce9ae687efa39e3a557f8391d1aec4999ecf05b78a3cce2ea62024a2
                                        
                                            GET /rsrc.php/v3ifhc4/ya/l/en_US/HjcSRsXYnXe.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 03:15:40 GMT
Content-MD5: rt1QCaXM0tHKQKeMu4hpSQ==
X-FB-Debug: nb+i4k/R5xLnVkLnzaIXmnPyOFJHMJz+2VRp7mDH6l2Ooq4p8jmBgkJNHZJiM3pv9IKC4R9fXXcdbiaUr4uMNg==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 54613


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   54613
Md5:    aedd5009a5ccd2d1ca40a78cbb886949
Sha1:   89fb4f226c3f9d92fd94f7f72e4dfa07a61fc6e2
Sha256: 3d7cfdca97c6b63b8735677637d6fc1f74f716681dfab3d9d6a87790a71a1ce8
                                        
                                            GET /rsrc.php/v3/yE/r/urUBSREw3rA.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 14 Apr 2020 07:40:13 GMT
Content-MD5: xLZn/eMpgtdogSpQABZtKA==
X-FB-Debug: JCag+23HWAMPMMKFDHYpyvLiUpQyoc4AWGvIN+SZYtUq8k1sdRAjZvNDlKhbEa6HpJCuehd7AwAeuDogk9gwmg==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 5404


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5404
Md5:    c4b667fde32982d768812a5000166d28
Sha1:   59f848ee0bd2f5e8d3ae26a40935eebabc7ac8dd
Sha256: 42c3e5ca7279f9c9c6588e13aec16bd87adc066b4d598ea312be2f385ea9c271
                                        
                                            GET /rsrc.php/v3i6z24/yF/l/en_US/ZRC2XT-I_qn.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Fri, 17 Apr 2020 11:43:27 GMT
Content-MD5: lSFbK9FpVLSHrxZNfsH3Vw==
X-FB-Debug: yIPojbhGTAC+BvODqiyAYghBtIl/zNHsELyW3ebJEdEpRJAqWrzk0ePNF1jE/roX4XwViqEYy6fsPcIIIn3Ttw==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 62297


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   62297
Md5:    95215b2bd16954b487af164d7ec1f757
Sha1:   930289257c5a698e7404aece9a2cf72c8ee5b18a
Sha256: 47c168857ec86e0cf34e9d74dc775d03af0235cc3699253a449dcdd0aeca9ae3
                                        
                                            GET /rsrc.php/v3ib_-4/y5/l/en_US/fGlODBdB5LG.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Fri, 24 Apr 2020 03:14:26 GMT
Content-MD5: vKsEwrMCC1Fv6SIThD7ZYg==
X-FB-Debug: qpyKjO39dx8bH1J53P3BIZu00Q6d8e6hp0Z8qDn4bxohcGQKgdhRniP653g3qlqIybwsRxKCYwkBr/1z8jYBdg==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 29557


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29557
Md5:    bcab04c2b3020b516fe92213843ed962
Sha1:   42c3aca8251faa2b690db01594bf88be1d607850
Sha256: 2ea2782048c3bc3a2aca2b4b22a6a4d4b5fe98a8c48a95044b2210c5ef2ef2d5
                                        
                                            GET /rsrc.php/v3/yM/r/zhgVWXcbsu6.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 16 Apr 2020 18:38:09 GMT
Content-MD5: RhenpAIUGC625k1WzL0eaQ==
X-FB-Debug: QNzjV2oZlYhBasUypwWge3nX7Qevl1OEzY/q0aGm2KO8vZcqKYDHFXimIH4R4gkf1JrF7j+seiCbMZj/6fjD1w==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 5735


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5735
Md5:    4617a7a40214182eb6e64d56ccbd1e69
Sha1:   82c1d43b477ada362a11832c9157ffb3ff58f784
Sha256: 5d05314833e7f226cf0a32bbc7bf8215cc1fbb55012f2ee25902201bd888efaa
                                        
                                            GET /rsrc.php/v3iQYn4/y4/l/en_US/8QT6h6vTrPP.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 23:31:57 GMT
Content-MD5: vBiXtgfQrQFbb1URPaU2Ww==
X-FB-Debug: 8vm1QOJiiioFiWNm5QTdiFhTCuw5Ie8jiZl8o4CHoM2CTyvOFHI+svz0fDTzze+jywFo1Z9IzoYW7CclCISJXQ==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 2706


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2706
Md5:    bc1897b607d0ad015b6f55113da5365b
Sha1:   50882f02a2bda44342582b4c23beac14a8ceee9f
Sha256: 92e2d019480581dde1df12ef93be30da2b7e16c3a29a8864701850794224d851
                                        
                                            GET /rsrc.php/v3/yp/l/0,cross/8MIqbuUyUDD.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Sat, 11 Apr 2020 16:16:23 GMT
Content-MD5: o8pI5LKuP+krz7Xunantkg==
X-FB-Debug: 4jcbtFr85WAGSEbt6HjkuOww566xJNC6/uUSqL47nWA7K6j91c7Xvmf7iCm1hubILBftFkWIblIdmQ7q2BG42w==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 1946


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1946
Md5:    a3ca48e4b2ae3fe92bcfb5ee9da9ed92
Sha1:   89ecca10ce285854d0cfc85407345b05879d10b6
Sha256: 15285a6003f391b8f9e0e0655ecfa77e60a5134825b57f03f7a9ec55468bf7a8
                                        
                                            GET /rsrc.php/v3iEpO4/ye/l/en_US/uaZQl4zWaCD.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Mon, 20 Apr 2020 16:42:03 GMT
Content-MD5: ZhZVvOZ2bwjuifmWJngMcA==
X-FB-Debug: PpBM3Fz5ImRdvUeEwAzYYN/273Z1tPk3fz9TqePWPB3BlNPIh91cPSgyTkbdmYtKDaLZFRxwzd/pP9SA3QppbQ==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 27735


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   27735
Md5:    661655bce6766f08ee89f99626780c70
Sha1:   c9c9b99976aebbf8c7175f4c95405570ad3c2401
Sha256: 49b1e0015d5bffe326e7b6a5068dd28b958b70b64eeb319c5398c73dbcd2e51b
                                        
                                            GET /rsrc.php/v3/ya/l/0,cross/ADxCidWEECh.css HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Wed, 22 Apr 2020 04:40:39 GMT
Content-MD5: 1lCYEFVwDFhbpmt1C1DvfQ==
X-FB-Debug: JDnnqVY++Y+lOFgTQjqXr3kb6s9vNr9v2TFg9x3qGksdPNgWVPg3WMpmpyl8OsrGCuysqjfGNMnW1VIyyfIecA==
Date: Thu, 25 Apr 2019 05:23:28 GMT
Connection: keep-alive
Content-Length: 4803


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4803
Md5:    d650981055700c585ba66b750b50ef7d
Sha1:   dd699118c868718e5cf352d226debeb070336d80
Sha256: 75e838823725c8765e970c002335100252134ad9ab7ca86188ade30143967791
                                        
                                            GET /openx/www/delivery//images/top_left.gif HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 25 Apr 2019 05:23:26 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Fri, 05 Dec 2014 01:59:30 GMT
Etag: "1bc1f02-216-5096e6d74f00a"
Accept-Ranges: bytes
Content-Length: 534
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 45 x 30
Size:   534
Md5:    f48aa4b9e4f9f6f45e1e067de62b3588
Sha1:   6f7c776bb283750e3f2361f5a9d90eb3c1474567
Sha256: 62f7c913b3627cdbb01e977e126459c00f9e2a9cb33236c45b1162bf9de91033
                                        
                                            GET /rsrc.php/v3iLl54/yD/l/en_US/6DJJbuWJvXn.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Wed, 22 Apr 2020 03:07:18 GMT
Content-MD5: WKoEvJ6y1sODI8o7QdsQ8w==
X-FB-Debug: WIHYZZnIt+9ImEhrTr6vqkLBO6TP2U1kPGU8CLiiClClQjVQ//YrMLviObeK1bvKMTRsoMmi6KNp+LYhcXAKOw==
Date: Thu, 25 Apr 2019 05:23:29 GMT
Connection: keep-alive
Content-Length: 2068


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2068
Md5:    58aa04bc9eb2d6c38323ca3b41db10f3
Sha1:   b23aecc2033fa3240739002ea81002589dfbb935
Sha256: b40c00b0357260ad0317b57dd554fde8122f8e87fe6ad6b11581ad77dd47986f
                                        
                                            GET /openx/www/delivery/ajs.php?zoneid=1894&cb=28799406326&charset=UTF-8&loc=http%3A//aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Thu, 25 Apr 2019 05:23:26 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.4.35
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=2d4ba3d4378acb9aa6473164522c7453; expires=Fri, 24-Apr-2020 05:23:26 GMT; path=/
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   9367
Md5:    96ef3fe77cdb43282c9bd39219a69a5c
Sha1:   b482685459ae8b5c782b1756fb5c06e1dcebe856
Sha256: ebf35ac2a18ce999bcc00ad9f250e413c207c4b202393cb6401226f5ed463a0b
                                        
                                            GET /rsrc.php/v3/yn/r/_satJssWnaz.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yV/l/0,cross/eOhYyzbsc3i.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: n86jsePgHdK8ls/w9dhqig==
Cache-Control: public,max-age=31536000,immutable
Expires: Tue, 21 Apr 2020 17:59:40 GMT
X-FB-Debug: IYxAORSuif99H18Y6C5uEL3RVk+WTynI2gaURNNUhsJv/AzDBjLAR1+gEPMd0a/jBG040eA2Z/YbS4IjAlwcaw==
Date: Thu, 25 Apr 2019 05:23:30 GMT
Connection: keep-alive
Content-Length: 19094


--- Additional Info ---
Magic:  PNG image, 25 x 823, 8-bit/color RGBA, non-interlaced
Size:   19094
Md5:    9fcea3b1e3e01dd2bc96cff0f5d86a8a
Sha1:   7a6fd28a2f1de279bf3a2902236d4cd505351011
Sha256: 75c6f4d903e8e37c6932418fee41f29fec15afa8a150ea8a1610af6a92d01ae1
                                        
                                            GET /rsrc.php/v3/yk/r/cSPAjzH8RVR.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://static.xx.fbcdn.net/rsrc.php/v3/yG/l/0,cross/1wTtydDxtGs.css

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Content-MD5: wAmYMy3NaegtU8eRN8L31w==
Cache-Control: public,max-age=31536000,immutable
Expires: Sat, 11 Apr 2020 01:29:26 GMT
X-FB-Debug: nCHlFBPErPPvlLpA1n5lqDYyEuomRH2yhUMVBAypaPDaFw0pecZVYVj2Q8F4O3afn1ZVG/3safWWfM/CkXr9qw==
Date: Thu, 25 Apr 2019 05:23:30 GMT
Connection: keep-alive
Content-Length: 12482


--- Additional Info ---
Magic:  PNG image, 64 x 265, 8-bit/color RGBA, non-interlaced
Size:   12482
Md5:    c00998332dcd69e82d53c79137c2f7d7
Sha1:   d424079cc2b448f47761405de2a636e5d812b37c
Sha256: 6be414b0711cb2a7dce973706ef4407dcca3e0219380b970e722419907953222
                                        
                                            GET /images/emoji.php/v9/td4/1/16/1f606.png HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Expires: Thu, 16 Apr 2020 05:17:20 GMT
Access-Control-Allow-Origin: *
Content-MD5: rD+SAp0jjDzEYqeO8A1e3Q==
Cache-Control: public,max-age=31536000,immutable
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
expect-ct: max-age=86400, report-uri="https://reports.fb.com/expectct/"
X-FB-Debug: B8w4JWR+57gcKbWR2qjMzA8dkItzvuu7rHWUMFoN9tVCsx0TrLz/hoLHnk3p0UorcOQePJ6iydTUQSGKLD3Iqg==
Date: Thu, 25 Apr 2019 05:23:30 GMT
Connection: keep-alive
Content-Length: 519


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   519
Md5:    ac3f92029d238c3cc462a78ef00d5edd
Sha1:   732694967898a65fdc905883d991730be0fd8ce8
Sha256: 2bae6a65d8a5ae0b5bec237c76c11afb015647aa80cc26ba1b221b9d9bb64218
                                        
                                            GET /openx/www/delivery/lg.php?bannerid=1338&campaignid=660&zoneid=1894&loc=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&cb=2c32693c0c HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Thu, 25 Apr 2019 05:23:27 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.4.35
Pragma: no-cache
Cache-Control: private, max-age=0, no-cache
Expires: Mon, 26 Jul 1997 05:00:00 GMT
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: OAID=2d4ba3d4378acb9aa6473164522c7453; expires=Fri, 24-Apr-2020 05:23:27 GMT; path=/
Content-Length: 43
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    b4491705564909da7f9eaf749dbbfbb1
Sha1:   279315d507855c6a4351e1e2c2f39dd9cd2fccd8
Sha256: 4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49
                                        
                                            GET /?id=292517=iframe HTTP/1.1 
Host: go.padstm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         88.85.82.154
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:32 GMT
Content-Length: 154
Connection: keep-alive
Location: http://go.padsdel.com/?id=292517=iframe
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *


--- Additional Info ---
Magic:  HTML document text
Size:   154
Md5:    cfbeaf604823f038b8b46f0ac862b98c
Sha1:   7b9eb1dac48e74fa5f418bc456cb410f88b81d98
Sha256: 20c1ab602462b7fc0d5b4cbd555cacf127b69a07a737579598ebcbc0f5b21319
                                        
                                            GET /advertisement/settings/4342.js HTTP/1.1 
Host: cdn.adsoptimal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         23.23.140.180
HTTP/1.1 302 Found
Content-Type: text/plain; charset=utf-8
                                        
Server: Cowboy
Connection: keep-alive
X-Powered-By: Express
Cache-Control: public, max-age=0
Access-Control-Allow-Origin: *
Location: https://remote.vroptimal-3dx-assets.com/advertisement/settings/4342.js
Vary: Accept
Content-Length: 92
Set-Cookie: connect.sid=s%3AZ4ir0Mxt-JorTH4L8zEVP-nKDbyZWREa.nfrWTxtTI0aUYDaDJfqAGuX%2FrA%2BqLU9IvXs%2FmJfmtto; Path=/; HttpOnly
Date: Thu, 25 Apr 2019 05:23:33 GMT
Via: 1.1 vegur


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   92
Md5:    3c8d9a4046951f279ef6e3afbf985f7c
Sha1:   75b028112b41125b1be51feb6ced4e0981a6393a
Sha256: 50bd344fd162988842584b6e01033f07ecd41ec885b0aab0c707787ebb75f730
                                        
                                            GET /advertisement/manual.js HTTP/1.1 
Host: www.adsoptimal.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         54.243.72.35
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=utf-8
                                        
Connection: keep-alive
Server: Cowboy
Date: Thu, 25 Apr 2019 05:23:32 GMT
Content-Length: 511
Cache-Control: no-cache, no-store


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   511
Md5:    a0a688f0affaaa3e52492251fd966a1c
Sha1:   44a8a4d5252486a997b515e49f71fe0037b6d2e6
Sha256: 76d6572622f663533b57c21bf8cc2a62e400eb9fa3eb89e57531122f8c6e1d5f
                                        
                                            GET /openx/www/images/13789efbe756ec8c163b3fbf038ee4efa6172.swf HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Thu, 25 Apr 2019 05:23:32 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Fri, 05 Dec 2014 01:55:20 GMT
Etag: "1bc105e-73bd-5096e5e81d5c2"
Accept-Ranges: bytes
Content-Length: 29629
Connection: close


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 8
Size:   29629
Md5:    efbe756ec8c163b3fbf038ee4efa6172
Sha1:   77f83bb6278d43b34de39acd6008e0e7e2be35ab
Sha256: ff66efc68b2f29b4d70addae68ae6c00803e3561f889719459336bddc2cb3a5d
                                        
                                            GET /?id=292517=iframe HTTP/1.1 
Host: go.padsdel.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         188.42.162.153
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Thu, 25 Apr 2019 05:23:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Timing-Allow-Origin: *, *
P3P: CP="CUR ADM OUR NOR STA NID"
Set-Cookie: SeenToday=1; expires=Fri, 26-Apr-2019 05:23:37 GMT; Max-Age=86400; path=/ OAGEO5580f=17%7CNO%7C03%7COSLO%7CXDSL%7CBROADNET+AS%7C%7C11348%7C11093%7C%3F%7C578270%7C%2B200; expires=Fri, 26-Apr-2019 05:23:37 GMT; Max-Age=86400; path=/
Location: http://google.com
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff


--- Additional Info ---

Alerts:
  Blacklists:
    - fortinet: Malware
                                        
                                            GET / HTTP/1.1 
Host: google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         172.217.21.174
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.google.com/
Date: Thu, 25 Apr 2019 05:23:37 GMT
Expires: Sat, 25 May 2019 05:23:37 GMT
Cache-Control: public, max-age=2592000
Server: gws
Content-Length: 219
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  HTML document text
Size:   219
Md5:    d4b691cd9d99117b2ea34586d3e7eeb8
Sha1:   c79f5572f672361bc097676cb5da9d4aa956c8b9
Sha256: 2178eedd5723a6ac22e94ec59bdcd99229c87f3623753f5e199678242f0e90de
                                        
                                            GET /hads-ak-prn2/1487645_6012475414660_1439393861_n.png HTTP/1.1 
Host: scontent.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Last-Modified: Fri, 06 Dec 2013 20:28:14 GMT
X-Haystack-NeedleChecksum: 954741441
X-Needle-Checksum: 1395790386
X-FB-Config-Version-OLB-PROD: 477
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: max-age=1209600, no-transform
Date: Thu, 25 Apr 2019 05:23:37 GMT
Access-Control-Expose-Headers: X-FB-CEC-Video-Limit
Connection: keep-alive
Content-Length: 79


--- Additional Info ---
Magic:  PNG image, 10 x 10, 8-bit/color RGB, non-interlaced
Size:   79
Md5:    8dc258a49b60fae051e9a7ce11ad05cf
Sha1:   dafef280663f4205fc7f0e47799e9945e6a68d6d
Sha256: c8caed93847affc154cb3d424e34fc146e7340bb29abebd5eba7063e3dca0604
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.10
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 09 Apr 2019 08:37:47 GMT
Etag: "60e-58614de18debd"
Accept-Ranges: bytes
Content-Length: 1550
Date: Thu, 25 Apr 2019 05:23:37 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1550
Md5:    09dbf9f7293c305b88f1362364c4e50c
Sha1:   eb2207714368c57c54eea795d732ffac1b111d31
Sha256: d9e37318666d926d545259baaa11afbc396fd049d40dbcb201d53f27e4c76700
                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=145598
Date: Thu, 25 Apr 2019 05:23:37 GMT
Etag: "5cc0da17-1d7"
Expires: Fri, 26 Apr 2019 21:50:15 GMT
Last-Modified: Wed, 24 Apr 2019 21:50:15 GMT
Server: nginx
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    12437251b247e3ad46903ed91cc4cbfa
Sha1:   fad377cea3544af9cceed091b19f8a2d5741c55a
Sha256: 6fc208106142c057689a1d6f09a9ff0540e8d24a59136826a75ff6361828aa01
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=138862
Date: Thu, 25 Apr 2019 05:23:37 GMT
Etag: "5cc0a8e9-1d7"
Expires: Fri, 26 Apr 2019 19:57:59 GMT
Last-Modified: Wed, 24 Apr 2019 18:20:25 GMT
Server: ECS (lcy/1D68)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    ffc1e142f5d8b6057efa1dd6d795be13
Sha1:   4eab38d22330087b28146d36c5f289bf687c5573
Sha256: b105c4b595aca04ddd3a7c9127e1474db30eade13ecefb38b493e8e6bf17af79
                                        
                                            GET /rsrc.php/v3/yk/r/oYStyCXVJbE.js HTTP/1.1 
Host: static.xx.fbcdn.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true

                                         
                                         31.13.72.12
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Last-Modified: Mon, 01 Jan 2001 08:00:00 GMT
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Timing-Allow-Origin: *
Access-Control-Allow-Origin: *
Cache-Control: public,max-age=31536000,immutable
Expires: Thu, 23 Apr 2020 03:58:28 GMT
Content-MD5: 4vM2jOe7lm2Imi1XD25fsg==
X-FB-Debug: vSLg3hO07n9vbKriW21UHEgGvS7wnajEmaRqKN1eNfq0dNvzU4chT6ZKGu03nbc4e6rakq2c3yV4ML/gyjBAyQ==
Date: Thu, 25 Apr 2019 05:23:37 GMT
Connection: keep-alive
Content-Length: 41855


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   41855
Md5:    e2f3368ce7bb966d889a2d570f6e5fb2
Sha1:   14f82613ba0b81ab17c159edc43214b9cf09b315
Sha256: 2c29309ef5a9ccb46d6ab778758e89aa1e9ed611b18d12db3fb4d6642f3d03bf
                                        
                                            POST /ajax/bz HTTP/1.1 
Host: www.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
Referer: https://www.facebook.com/plugins/likebox.php?href=https%3A%2F%2Fwww.facebook.com%2Fnegerisembilan&width&height=590&colorscheme=light&show_faces=true&header=true&stream=true&show_border=true
Content-Length: 1600
Pragma: no-cache
Cache-Control: no-cache

                                         
                                         31.13.72.36
HTTP/1.1 200 OK
Content-Type: application/x-javascript; charset=utf-8
                                        
Content-Encoding: gzip
X-Frame-Options: DENY
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Pragma: no-cache
Strict-Transport-Security: max-age=15552000; preload
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Access-Control-Allow-Credentials: true
X-Content-Type-Options: nosniff
Vary: Origin, Accept-Encoding
Cache-Control: private, no-cache, no-store, must-revalidate
Access-Control-Allow-Origin: https://www.facebook.com
Access-Control-Allow-Methods: OPTIONS
X-FB-Debug: V3/iBhu6hNW+ui6vIenyqdXnPWS9eWadRlzVXis3xTBZ7h26CJq02o68JBX8kBQEdbVK9qvZtDdjGHkdvApPQg==
Date: Thu, 25 Apr 2019 05:23:37 GMT
Transfer-Encoding: chunked
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   121
Md5:    7b1bdbb6e576587cf9079acf0300f02a
Sha1:   8af0da966cbf3df83131170d79f8b56f1c82cf53
Sha256: c1384cc6bee8f3e3ad5182b33673f1be299af04d30db55dd1dd2c6654c053bc1
                                        
                                            GET /advertisement/settings/4342.js HTTP/1.1 
Host: remote.vroptimal-3dx-assets.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.20.64.164
HTTP/1.1 301 Moved Permanently
                                        
Date: Thu, 25 Apr 2019 05:23:38 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=d091ac5279f9e8999d682cad28f04e9e11556169818; expires=Fri, 24-Apr-20 05:23:38 GMT; path=/; domain=.vroptimal-3dx-assets.com; HttpOnly
Location: https://cdn.omnivirt.com/advertisement/settings/4342.js
Via: 1.1 vegur
CF-Cache-Status: EXPIRED
Expires: Sat, 27 Apr 2019 05:23:38 GMT
Cache-Control: public, max-age=172800
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4ccde2d39eb58721-ARN


--- Additional Info ---
                                        
                                            POST / HTTP/1.1 
Host: status.rapidssl.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=109583
Date: Thu, 25 Apr 2019 05:23:38 GMT
Etag: "5cc04d69-1d7"
Expires: Fri, 26 Apr 2019 11:50:01 GMT
Last-Modified: Wed, 24 Apr 2019 11:50:01 GMT
Server: nginx
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f1ce7b0b9073ad156ac19ef3caf61c07
Sha1:   4c8aa984f355d3681fe2a0379c951146710f05d2
Sha256: 04db3bfa0b95c3255007093eb40508891b984326d03b4ba0dff389325d9dab5b
                                        
                                            GET /advertisement/settings/4342.js HTTP/1.1 
Host: cdn.omnivirt.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.20.40.97
HTTP/1.1 404 Not Found
Content-Type: text/html
                                        
Date: Thu, 25 Apr 2019 05:23:39 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dae8de48c24fa16aa3465749a5dbd7b371556169818; expires=Fri, 24-Apr-20 05:23:38 GMT; path=/; domain=.omnivirt.com; HttpOnly
Via: 1.1 vegur
CF-Cache-Status: EXPIRED
Expires: Mon, 28 Oct 2019 05:23:39 GMT
Cache-Control: public, max-age=16070400
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 4ccde2d7eff286bb-ARN
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   33
Md5:    8874bf02e5b576488740e35ffac374d4
Sha1:   34818fe2fbf54312142e04cef4efb38f86cb4fc6
Sha256: 474e80e45aef5f25213fdfe4b976ec514f4a834eea0abfb65dd5b86e4b51e4d3
                                        
                                            GET /pingjs/?k=4i9xwy74d6y5&t=%27McCacing%27%20Ditemui%20Dalam%20McNugget&c=t&y=&a=0&d=0&v=22&r=7827 HTTP/1.1 
Host: whos.amung.us
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         67.202.94.86
HTTP/1.1 200 OK
Content-Type: text/javascript;charset=UTF-8
                                        
Date: Thu, 25 Apr 2019 05:23:39 GMT
Transfer-Encoding: chunked
Connection: close
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   50
Md5:    fc7cc9bc61e82b3a3baeda9c801aef31
Sha1:   58eb4de7e640cb116408773a5c23647a12c662da
Sha256: d0b9c362c1b293aa199ebba9643b110bb91650296fac50d6272f535c3db7fbcb
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.zzLpjoAXk6I.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 34174
Date: Tue, 23 Apr 2019 18:32:50 GMT
Expires: Wed, 22 Apr 2020 18:32:50 GMT
Last-Modified: Tue, 23 Apr 2019 01:35:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 125451
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   34174
Md5:    fb7777bcc217d350d96bf0d35430cd0e
Sha1:   bb6a04b97565b7dea654fcfb2514f9ecbbdff340
Sha256: 1a0fb4ea7c6d37f482a1a2e4a630bfa32117dfc7d762a5b43b79d34fa8f128fe
                                        
                                            GET /secure5x/index.html HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Content-Encoding: gzip
Etag: W/"5cb63463-390f"
Last-Modified: Tue, 16 Apr 2019 20:00:35 GMT
Server: nginx/1.12.2
Vary: Accept-Encoding
Content-Length: 4080
Date: Thu, 25 Apr 2019 05:23:41 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   4080
Md5:    9ce64a3add1fd3a1f8ef61d79447ebef
Sha1:   911887eaf4103adeda2525b3946ddfba171b15ef
Sha256: a5c57df364db701fdb3c67892a2e15fa0013a22891c6a59bd73a7db72b3a0a0c
                                        
                                            GET /secure5x/js/stcommon.1f60705adac788a51a8240cf535237b0.js HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws.sharethis.com/secure5x/index.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Etag: W/"5cb63463-40f6"
Server: nginx/1.12.2
Vary: Accept-Encoding
Content-Length: 5630
Cache-Control: max-age=30813003
Expires: Wed, 15 Apr 2020 20:33:44 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   5630
Md5:    94b39eb0a8fb0b06a11ad4d75b2e74b9
Sha1:   5d9f3beab6794398f43e43625b651cb16f6514ed
Sha256: db64545fc1dedef33184fb39df6e927e83fb783555622cafe426dc83c87e17c1
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http%3A%2F%2Faans1.blogspot.com&url=http%3A%2F%2Faans1.blogspot.com%2F2015%2F01%2Fmccacing-ditemui-dalam-mcnugget.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.zzLpjoAXk6I.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA%2Fm%3D__features__ HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         216.58.207.206
HTTP/1.1 302 Found
Content-Type: application/binary
                                        
x-ua-compatible: IE=edge, chrome=1
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Location: https://plus.google.com:443/se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http://aans1.blogspot.com&url=http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k%3Doz.gapi.en_US.zzLpjoAXk6I.O/am%3DwQE/d%3D1/rs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA/m%3D__features__
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Faans1.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.zzLpjoAXk6I.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA%2Fm%3D__features__ HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; GAPS=1:gfxfthVyTubZCz9E2I24YXDzP7wmEQ:FI3FpDVuEF0zVDIn; 1P_JAR=2019-04-25-05

                                         
                                         172.217.20.45
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   360
Md5:    e206bde4729fc2f086ffeb9610392e2d
Sha1:   76427a075bd932623f536dfc9b1446057b151c4c
Sha256: 44cc36eded99bea553a2acec5468bae0b64505cb3289ca3bb3b22207d82fc1ff
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Faans1.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.zzLpjoAXk6I.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA%2Fm%3D__features__
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "36106b5393681ae72d4402f813cefe71"
Expires: Thu, 25 Apr 2019 05:23:41 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4855
Md5:    c27204619e4181d2c28094431f8816b0
Sha1:   a7212cedef327aa5efce06daabc353bb29f53ce9
Sha256: bb45988d1d92a76e467e5d28dfa3fabb0c3958204413c632431eb3c195ef6225
                                        
                                            GET /secure5x/js/st.cbaadb0df94eca088fb4641e977688f9.js HTTP/1.1 
Host: ws.sharethis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://ws.sharethis.com/secure5x/index.html

                                         
                                         104.85.189.200
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Content-Encoding: gzip
Etag: W/"5cb63463-1fc00"
Server: nginx/1.12.2
Vary: Accept-Encoding
Cache-Control: max-age=30812991
Expires: Wed, 15 Apr 2020 20:33:32 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Content-Length: 30935
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   30935
Md5:    30d885361f721f528a288fc56ef52b55
Sha1:   ef229b4353fee5cbbd8ffe908932dc1c3aab3038
Sha256: a146eb247695e08d16c9f5d7c5c26bbd660bd09ae9970ccea7d70444c318a02d
                                        
                                            GET /accounts/o/153474676-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Faans1.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.zzLpjoAXk6I.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA%2Fm%3D__features__

                                         
                                         216.58.207.195
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4103
Date: Fri, 19 Apr 2019 15:20:02 GMT
Expires: Sat, 18 Apr 2020 15:20:02 GMT
Last-Modified: Wed, 17 Apr 2019 14:21:19 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 482619
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4103
Md5:    fae3605a3a84801258bb46879a5862b3
Sha1:   ba2aa1367f33090329ad3aa243380bd4ba1b4ab7
Sha256: 61484c1a65ecbf6e30e2791d418b54bd110a4f8c94a4af07d2ecc02496bf114e
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&size=medium&hl=en-US&origin=http://aans1.blogspot.com&url=http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html&gsrc=3p&ic=1&jsh=m;/_/scs/apps-static/_/js/k%3Doz.gapi.en_US.zzLpjoAXk6I.O/am%3DwQE/d%3D1/rs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA/m%3D__features__ HTTP/1.1 
Host: plus.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         172.217.21.174
HTTP/1.1 302 Found
Content-Type: application/binary
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Location: https://plus.google.com/browser-not-supported/?ref=/se/0/_/%2B1/fastbutton
Strict-Transport-Security: max-age=31536000
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.zzLpjoAXk6I.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=http%3A%2F%2Faans1.blogspot.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.zzLpjoAXk6I.O%2Fam%3DwQE%2Fd%3D1%2Frs%3DAGLTcCPNBsdHIPAdVJZn7w7bH-Qkn5OwYA%2Fm%3D__features__
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17922
Date: Tue, 23 Apr 2019 18:17:52 GMT
Expires: Wed, 22 Apr 2020 18:17:52 GMT
Last-Modified: Tue, 23 Apr 2019 01:35:05 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 126349
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   17922
Md5:    7a7eea4728306df033658f1522faa471
Sha1:   60e0fea003313e6c95ec935a24c6a04d3f19b7f4
Sha256: 23a9bc149175268c4df546c7142bad461016bf92ac9e20425b351c2168c556bc
                                        
                                            GET /openx/www/delivery/inline_url_keywords.php?zoneid=1748 HTTP/1.1 
Host: www.clicksasia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: OAGEO=NO%7C%7C%7C%7C%7C%7C%7C%7C%7C%7C; OAID=2d4ba3d4378acb9aa6473164522c7453; OAVARS[ad8818940f]=a%3A3%3A%7Bs%3A8%3A%22bannerid%22%3Bs%3A4%3A%221338%22%3Bs%3A6%3A%22zoneid%22%3Bs%3A4%3A%221894%22%3Bs%3A6%3A%22oadest%22%3Bs%3A20%3A%22http%3A%2F%2Fcplus.com.my%2F%22%3B%7D

                                         
                                         101.99.73.202
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Thu, 25 Apr 2019 05:23:39 GMT
Server: Apache/2.2.29 (Unix) mod_ssl/2.2.29 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.4.35
Content-Length: 0
Connection: close


--- Additional Info ---
                                        
                                            GET /openx/www/delivery/spcjs.php?id=439 HTTP/1.1 
Host: cplus.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/comment-iframe.g?blogID%3D8306328461180016453%26postID%3D8371828816262342215%26blogspotRpcToken%3D7664676%26bpli%3D1&followup=https://www.blogger.com/comment-iframe.g?blogID%3D8306328461180016453%26postID%3D8371828816262342215%26blogspotRpcToken%3D7664676%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         172.217.20.45
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:24 GMT
Location: https://www.blogger.com/comment-iframe.g?blogID=8306328461180016453&postID=8371828816262342215&blogspotRpcToken=7664676&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:gfxfthVyTubZCz9E2I24YXDzP7wmEQ:FI3FpDVuEF0zVDIn;Path=/;Expires=Sat, 24-Apr-2021 05:23:24 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=czpDOrX7XU_Y0IRq7d2ZMlXm2blBYPP0ubMoCCOkvC-3t8Wphl7mFZd8jYleg27-HI_mYX2zqB_DvGvPkbzk8aBdFRemNzn9LTUnpHoaQgPn47ZlkkH12aSCltz1uRd95lTKVP5vC_ljta4x7Qf3MPAc9ljKY3G3usQ_BB5QQv0

                                         
                                         216.58.207.196
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Thu, 25 Apr 2019 05:23:37 GMT
Expires: -1
Cache-Control: private, max-age=0
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: gws
Content-Length: 16001
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Set-Cookie: 1P_JAR=2019-04-25-05; expires=Sat, 25-May-2019 05:23:37 GMT; path=/; domain=.google.com NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; expires=Fri, 25-Oct-2019 05:23:37 GMT; path=/; domain=.google.com; HttpOnly


--- Additional Info ---
                                        
                                            GET /browser-not-supported/?ref=/se/0/_/%2B1/fastbutton HTTP/1.1 
Host: plus.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://aans1.blogspot.com/2015/01/mccacing-ditemui-dalam-mcnugget.html
Cookie: NID=182=4RmKvRwTOZx8i_5dje2el5pZAydR5y5H6hrihdCxQNt8pmjUPCtABkooMnupWfPAGuLVuKlZ2DE0eRFji0BB8XzzOzBdq93zbSG2wcanEhNMS-4gRJir2gOTsRu66e8XPnGVmzPu6O0TgQqK5_8iIa7UybzoOE0l4GeQ_6op7Cs; 1P_JAR=2019-04-25-05

                                         
                                         172.217.21.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 25 Apr 2019 05:23:41 GMT
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---