Overview

URL kkbnpontian.blogspot.my/
IP172.217.22.161
ASNAS15169 Google Inc.
Location United States
Report completed2017-10-13 13:34:12 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro
Timestamp Severity Source IP Destination IP Alert
2017-10-13 13:39:42 CEST 2  91.191.155.69 Client IP ET INFO http string in hex Possible Obfuscated Exploit Redirect
2017-10-13 13:39:57 CEST 1  34.198.118.202 Client IP ET WEB_CLIENT Possible HTTP 500 XSS Attempt (External Source)
2017-10-13 13:39:41 CEST 2  91.191.155.69 Client IP ET INFO http string in hex Possible Obfuscated Exploit Redirect
2017-10-13 13:40:00 CEST 1  34.198.118.202 Client IP ET WEB_CLIENT Possible HTTP 500 XSS Attempt (External Source)


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 172.217.22.161

Date UQ / IDS / BL URL IP
2017-12-11 22:00:18 +0100
0 - 0 - 2 lorelose1810.blogspot.de/search/label/floaty% (...) 172.217.22.161
2017-12-11 22:00:09 +0100
0 - 0 - 2 beatrice-borromeo-news.blogspot.de/search/lab (...) 172.217.22.161
2017-12-11 21:56:42 +0100
0 - 0 - 3 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:56:45 +0100
0 - 0 - 2 josh-morgan-subways-news.blogspot.de/2011/09/ (...) 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/blog-post.htm 172.217.22.161
2017-12-11 21:41:43 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012/12/toko-accre (...) 172.217.22.161
2017-12-11 21:41:42 +0100
0 - 0 - 2 tokoaccretiaa.blogspot.com/2012_12_01_archive.html 172.217.22.161
2017-12-11 21:37:57 +0100
0 - 0 - 4 lorelose1810.blogspot.ca/search/label/winter% (...) 172.217.22.161
2017-12-11 21:36:43 +0100
1 - 0 - 3 tektekdunk.blogspot.com.es/2013/03/efax-corpo (...) 172.217.22.161
2017-12-11 17:58:21 +0100
0 - 0 - 2 hakingandsecurity.blogspot.com/2013/11/make-b (...) 172.217.22.161

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2017-12-12 02:00:57 +0100
0 - 0 - 4 community.idealwebtech.com/index.php?s=b80544 (...) 146.148.45.143
2017-12-12 01:59:27 +0100
0 - 0 - 2 southsongz4all.blogspot.ru/p/dmca-link-remova (...) 216.58.211.129
2017-12-12 01:53:47 +0100
0 - 0 - 1 goo.gl/d2ztRM 216.58.211.142
2017-12-12 01:49:05 +0100
0 - 0 - 1 www2.stardollbedavalari.gen.tr/2012/08/stardo (...) 173.194.73.121
2017-12-12 01:43:10 +0100
0 - 0 - 1 1lira.blogspot.com/2007/11/sabun-nasl-yaplr.h (...) 216.58.211.129
2017-12-12 01:41:23 +0100
0 - 0 - 2 1lira.blogspot.in/2009/08/dunyada-en-fazla-se (...) 216.58.211.129
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:39:12 +0100
0 - 0 - 0 michaelharden1978@gmail.com 216.58.211.133
2017-12-12 01:37:15 +0100
0 - 0 - 1 thecreationfallacy.blogspot.de/2012/09/emily- (...) 216.58.211.129
2017-12-12 01:37:13 +0100
0 - 0 - 1 overloadoverlook2110.blogspot.de/2011/09/off- (...) 216.58.211.129

No other reports on domain: kkbnpontian.blogspot.my



JavaScript

Executed Scripts (95)


Executed Evals (1)

#1 JavaScript::Eval (size: 76, repeated: 1) - SHA256: c1ad0fcc1ce825ce5070bb4af6e3c3df2c7cb26101fb4adadacac20ad5f20c84

                                        ((function() {
    var a = 3762171571;
    var b = -1820827519;
    return 418859 + '.' + (a + b)
})())
                                    

Executed Writes (29)

#1 JavaScript::Write (size: 0, repeated: 11) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 814, repeated: 1) - SHA256: e271d5fb9b756b6505f7e410e205219b9441de87ee945b47a38eea6eb2e0077d

                                        <!-- WARNING : SWF FILES THAT ARE ACCESSED BY URL WILL BE DELETED, SWF FILES ABUSING SYSTEM RESOURCES WILL BE DELETED --><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0" width="160" height="161"><param name="movie" value="http://h1.flashvortex.com/files/60/2_1323919483_12137_151_0_160_161_6_1_60.swf" /><param name="quality" value="best" /><param name="menu" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://h1.flashvortex.com/files/60/2_1323919483_12137_151_0_160_161_6_1_60.swf" quality="best" menu="true" width="160" height="161" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" allowScriptAccess="always"></embed></object>
                                    

#3 JavaScript::Write (size: 810, repeated: 1) - SHA256: 4034f0a005eb1794ee0a8549b5094ab2cc1c308ccf50c45bd54e77db3d9e6019

                                        <!-- WARNING : SWF FILES THAT ARE ACCESSED BY URL WILL BE DELETED, SWF FILES ABUSING SYSTEM RESOURCES WILL BE DELETED --><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=6,0,0,0" width="468" height="60"><param name="movie" value="http://h2.flashvortex.com/files/55/2_1320395169_51223_155_0_468_60_6_2_55.swf" /><param name="quality" value="best" /><param name="menu" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://h2.flashvortex.com/files/55/2_1320395169_51223_155_0_468_60_6_2_55.swf" quality="best" menu="true" width="468" height="60" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" allowScriptAccess="always"></embed></object>
                                    

#4 JavaScript::Write (size: 814, repeated: 1) - SHA256: 6b8dd4bb57cf786637d6766c4a51f823c4e6523be5422a4077ac99462baf4ef8

                                        <!-- WARNING : SWF FILES THAT ARE ACCESSED BY URL WILL BE DELETED, SWF FILES ABUSING SYSTEM RESOURCES WILL BE DELETED --><object classid="clsid:D27CDB6E-AE6D-11cf-96B8-444553540000" codebase="http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0" width="300" height="250"><param name="movie" value="http://h1.flashvortex.com/files/53/2_1340612678_45266_716_0_300_250_8_1_53.swf" /><param name="quality" value="best" /><param name="menu" value="true" /><param name="allowScriptAccess" value="always" /><embed src="http://h1.flashvortex.com/files/53/2_1340612678_45266_716_0_300_250_8_1_53.swf" quality="best" menu="true" width="300" height="250" type="application/x-shockwave-flash" pluginspage="http://www.macromedia.com/go/getflashplayer" allowScriptAccess="always"></embed></object>
                                    

#5 JavaScript::Write (size: 9, repeated: 1) - SHA256: f8c5dd5f4adb0822628e543f8a9b73e554ec99cb336e830e10c54189f373aa4b

                                        < /OBJECT>
                                    

#6 JavaScript::Write (size: 34, repeated: 1) - SHA256: 1188c8d2f5bfb1f1488bd62c2db43fb1fa5ffa009ea705c2bcb440ff877242d8

                                        < /OBJECT><!-- 0.00656 | 012357 -->
                                    

#7 JavaScript::Write (size: 7, repeated: 1) - SHA256: 2dc393090aadc8f1e34678d68c27c0cf945d0fad8e8cb2291e5cf6a7b86c0df6

                                        < /left>
                                    

#8 JavaScript::Write (size: 181, repeated: 1) - SHA256: be27be2789e2de6fbb91a0958df4cebe83a8d383c62fdec78f50bb30556ab5ec

                                        < OBJECT classid = "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase = "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0"
WIDTH = "200"
HEIGHT = "150" >
                                    

#9 JavaScript::Write (size: 180, repeated: 1) - SHA256: 82dc4e1d21703991f919029b1ce5bdb0dbe640b7fa376be8c0afd63200618697

                                        < OBJECT classid = "clsid:D27CDB6E-AE6D-11cf-96B8-444553540000"
codebase = "http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab#version=8,0,0,0"
WIDTH = "800"
HEIGHT = "50" >
                                    

#10 JavaScript::Write (size: 87, repeated: 1) - SHA256: a8a16f03397c6abf92cb231d63ec668e9a50e20cd03caee2f69a1f0442f588be

                                        < PARAM NAME = "flashvars"
VALUE = "bt=Selamat Datang Ke KKBN Pontian Blog     &cl=rainbow" >
                                    

#11 JavaScript::Write (size: 111, repeated: 1) - SHA256: 94e81d4f6007ea5edd2604df9fe777a65b603f3ebb62236ba53ad27dd3e5bcb7

                                        < PARAM NAME = "movie"
VALUE = "http://cdnovh.widgeo.net/geocompteur/swf/geolive_caroussel.swf?id=2039437&online=1" >
                                    

#12 JavaScript::Write (size: 76, repeated: 1) - SHA256: c58d996a3d560ef22592a5781b30dc5818c56701e896dc3d498051cb61de2d99

                                        < PARAM NAME = "movie"
VALUE = "http://cdnovh.widgeo.net/message/messagebig.swf" >
                                    

#13 JavaScript::Write (size: 35, repeated: 2) - SHA256: 8233a7fd268f87545b57e207929d71e5ad5d09f3ce1ba7f067042a9225c61f2e

                                        < PARAM NAME = "quality"
VALUE = "high" >
                                    

#14 JavaScript::Write (size: 40, repeated: 2) - SHA256: 7ef83a0435c03c33ad72143626fd4d31c6fc300b828b801364b14a44cce8df61

                                        < PARAM NAME = "wmode"
VALUE = "transparent" >
                                    

#15 JavaScript::Write (size: 142, repeated: 1) - SHA256: 710ea6b4c03c4c8b3d615bdb0a326169cd260cf9129817e1b22705b6c95d26b2

                                        < a href = "http://www.checkingtools.com/webmaster_tools" > < img src = "http://api.checkingtools.com/getsignimage.php?id=3&font_color="
border = 0 > < /a>
                                    

#16 JavaScript::Write (size: 99, repeated: 1) - SHA256: aec63f11934cc45b20cc9b0b330d5601c25d5b86bc2823c878442e8ca254412f

                                        < a href = "http://www.tracemyip.org/"
target = "_new" > < img id = "tmipTrT0.5183601860846528"
border = 0 > < /a>
                                    

#17 JavaScript::Write (size: 314, repeated: 1) - SHA256: 8dbe34832a6ad89e32a4758271196e79d9a1f1ad5152fc0336340e0f2d80d235

                                        < div class = "smv_main" > < div class = "smv0_title" > Today 's success idea:</div><div class="smv1_quote">We need men who can dream of things that never were.</div><div class="smv1_quote_author">John F. Kennedy (1917-1963)</div><div class="smv2_link"><a href="http://selfmadevip.com/_idea.php">more ideas...</a></div></div>
                                    

#18 JavaScript::Write (size: 28, repeated: 1) - SHA256: 02a30378b586dc03985957f9e19c893c277976dd109c5deb1c14ce4efa3a970f

                                        < div id = 'nuffnang_lb' > < /div>
                                    

#19 JavaScript::Write (size: 28, repeated: 2) - SHA256: a23d6073a514912248e913edf4dcf92514d264772a6cd09dd1b36640474b7128

                                        < div id = 'nuffnang_ss' > < /div>
                                    

#20 JavaScript::Write (size: 365, repeated: 1) - SHA256: 36610a0f8305bc7a81c32b48e6108a8a307fc957405a401d9c78dbc5ee85f271

                                        < embed wmode = "transparent"
FlashVars = "bt=Selamat Datang Ke KKBN Pontian Blog     &cl=rainbow"
src = "http://cdnovh.widgeo.net/message/messagebig.swf"
quality = "high"
wmode = "transparent"
bgcolor = "000000"
width = "800"
height = "50"
align = "middle"
allowScriptAccess = "sameDomain"
type = "application/x-shockwave-flash"
pluginspage = "http://www.macromedia.com/go/getflashplayer" >
                                    

#21 JavaScript::Write (size: 261, repeated: 1) - SHA256: 7c49b5ad420a9ea3a986cfe376cb5147d930b26d263485d877b83e691662e118

                                        < embed wmode = "transparent"
width = "200"
height = "150"
src = "http://cdnovh.widgeo.net/geocompteur/swf/geolive_caroussel.swf?id=2039437&online=1"
pluginspage = "http://www.macromedia.com/shockwave/download/"
type = "application/x-shockwave-flash"
quality = "high" > < /embed>
                                    

#22 JavaScript::Write (size: 382, repeated: 1) - SHA256: ed5190be636529fe44951890e8fa47120431aae198c2f6684fd65620546c2fff

                                        < head > < meta http - equiv = "Content-Type"
content = "text/html; charset=UTF8" > < link rel = "stylesheet"
type = "text/css"
href = "https://translate.googleapis.com/translate_static/css/translateelement.css" > < /head><body scroll="no" style="margin:0px;overflow:hidden" dir="ltr" marginHeight=0 marginWidth=0 leftMargin=0 topMargin=0 border=0><div id=":1.menuBody" class="goog-te-menu"></div > < /body>
                                    

#23 JavaScript::Write (size: 838, repeated: 1) - SHA256: 29938cd8322616affaf63c8823b733e5764a5c10965fa139b34391c6ae591e04

                                        < iframe height = "200"
width = "300"
src = "http://feed.mikle.com/widget/?rssmikle_url=http%3A%2F%2Fwww.iluvislam.com%2Findex.php%3Fformat%3Dfeed%26type%3Drss&rssmikle_frame_width=300&rssmikle_frame_height=200&rssmikle_target=_blank&rssmikle_font_size=12&rssmikle_border=on&rssmikle_css_url=http%3A%2F%2Ffeed.mikle.com%2Fsample%2Fblue160_500.css&rssmikle_title=on&rssmikle_title_bgcolor=%230066FF&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%23FFFFFF&rssmikle_item_title_length=20&rssmikle_item_title_color=%23666666&rssmikle_item_border_bottom=on&rssmikle_item_description=on&rssmikle_item_description_length=40&rssmikle_item_description_color=%23666666&rssmikle_item_description_tag=on&rssmikle_item_podcast=off&"
scrolling = "no"
name = "rssmikle_frame"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
frameborder = "0" > < /iframe>
                                    

#24 JavaScript::Write (size: 116, repeated: 1) - SHA256: 793a0f135a6b284efb3b05c4264b82885cbb8080978c2e634ad35b2cc5755ffb

                                        < iframe src = "http://cdnovh.widgeo.net/hitparade.php?pagexiti=message"
width = "0"
height = "0"
frameborder = "0" > < /iframe>
                                    

#25 JavaScript::Write (size: 131, repeated: 1) - SHA256: 83235654d24d8532f23a3255a516b7598e3a12adbcc08bc26c6696575f7600fe

                                        < iframe src = "http://www.widgeo.net/hitparade.php?pagexiti=geolive"
width = "0"
height = "0"
frameborder = "0"
resize = "noresize" > < /iframe>
                                    

#26 JavaScript::Write (size: 187, repeated: 1) - SHA256: 34fcfc9934ab822c7df0ae8dd88710d301868761caf87bf6f578ffd96ca419d8

                                        < img width = "39"
height = "25"
border = "0"
src = "http://logv33.xiti.com/hit.xiti?s=281802&p=geolive&hl=13x39x52&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/"
title = "Internet Audience" >
                                    

#27 JavaScript::Write (size: 187, repeated: 1) - SHA256: ecdb9800ecca4f3575f35c2267b60ddf6176bd9918892bd8db9db6e07e93093d

                                        < img width = "39"
height = "25"
border = "0"
src = "http://logv33.xiti.com/hit.xiti?s=281802&p=message&hl=13x39x44&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/"
title = "Internet Audience" >
                                    

#28 JavaScript::Write (size: 456, repeated: 1) - SHA256: e18b6681b044e646d45525ee2a3f654997ab5b89a7bc440ecd19e3ed4d17855b

                                        < left > < div style = "font-size:12px;color:#383838;font-family:arial;" > Dari Sahl bin Sa & #8217;ad r.a meriwayatkan bahawa Nabi SAW bersabda: Jika dunia ini mempunyai nilai sebesar kepak nyamuk sekalipun, maka Allah SWT tidak akan memberi minum kepada orang kafir walaupun seteguk air (oleh kerana dunia ini tidak bernilai walaupun sekadar ini, kerana itulah dunia ini diberi kepada orang-orang kafir dan orang-orang yang berdosa tanpa batasan. (HR Muslim)</div>
                                    

#29 JavaScript::Write (size: 24, repeated: 1) - SHA256: a3ba8250ebf2c8e28e99b0cbcb48488777fa3f512e83a7a56930803eb5d35e05

                                        < xmp style = display: none >
                                    


HTTP Transactions (213)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: kkbnpontian.blogspot.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://kkbnpontian.blogspot.no/
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:39:41 GMT
Expires: Fri, 13 Oct 2017 11:39:41 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   179
Md5:    f7b85e3c00323291615a4118402a0d9b
Sha1:   d8941ca6328731c36a697f2a5efc1485b607500a
Sha256: 7521a3ece638ca33cda829558271a556ef99a4789ec01b3838b85c2e906ae081
                                        
                                            GET / HTTP/1.1 
Host: kkbnpontian.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 11:39:41 GMT
Date: Fri, 13 Oct 2017 11:39:41 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 29 Jul 2017 08:29:38 GMT
Etag: W/"70a6ff445e8a9aca584c0cf9f61bf0c5420d8212bdb9185399da813f4db8cc03"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 53622
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   53622
Md5:    659b8010e9b010af9f45cfed5ed5a1aa
Sha1:   a9f9babdf180be3a3a8f697904874111398c9e73
Sha256: 28ab0cb5456a8f064a3c3121484f0e6d5d486ffa10fe707fac1bfd7e4939a049
                                        
                                            GET /-nXhboejkwi0/UDJOAf_MYzI/AAAAAAAABGQ/LQHJ8Ls1sQ0/s1600/bloggertrix.com-google-plus-icon.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v464"
Expires: Sat, 14 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bloggertrix.com-google-plus-icon.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: fife
Content-Length: 4027
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   4027
Md5:    6c958a28edd9ebb0d99d053378692afb
Sha1:   f35e465f2584f170bab2a8fc4d9f4868d1ec9623
Sha256: 0ff3114996ff56a57ea2bbc168138d94dbf54e6319393ba0b52966b30d668c84
                                        
                                            GET /-Fv9K5Q7uTKY/UDJN_d5ExwI/AAAAAAAABGI/npsZxxIIaSo/s1600/bloggertrix.com-facebook-icon.png HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v462"
Expires: Sat, 14 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bloggertrix.com-facebook-icon.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: fife
Content-Length: 3242
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   3242
Md5:    675c9e22b2ce1a5403b09336d1495607
Sha1:   033de7f566b7b9af8ee03e4686eaa4f5bb1dbdf1
Sha256: 51ce17a90bd469a239683cf92c21cade88f4ecb43c56f75f2c6fada14fb33beb
                                        
                                            GET /-BeRe9v06tDM/UDJOCEE80QI/AAAAAAAABGg/0mmoppmVGjY/s1600/bloggertrix.com-twitter-icon.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v468"
Expires: Sat, 14 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bloggertrix.com-twitter-icon.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: fife
Content-Length: 3828
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   3828
Md5:    918788fbe4416ff4810c3be0bddfd81d
Sha1:   3ddddd7fa8191df1bfc30f9ee4c1267208b06754
Sha256: 5ab6735fcba5fd36dbb50510349ab1dbce6913972752a71bfdac8f9412ddf956
                                        
                                            GET /-EL79ERwq2Bc/UDJOBW1BdpI/AAAAAAAABGY/3_UEUy5nuIc/s1600/bloggertrix.com-rss-icon.png HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v466"
Expires: Sat, 14 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bloggertrix.com-rss-icon.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: fife
Content-Length: 4176
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 64 x 64, 8-bit/color RGBA, non-interlaced
Size:   4176
Md5:    1a213a1f2acf1af6d0271c52c1d7d301
Sha1:   4c896dbc5cae92c2991919d83ce682b167a3e019
Sha256: ff7beb5f06ba7d12e0ae4c1deba7ff791e8cfd709b6c32e5de705aefeac983af
                                        
                                            GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1 
Host: translate.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, must-revalidate
Content-Language: en
Pragma: no-cache
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: HTTP server (unknown)
Content-Length: 771
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   771
Md5:    4c4bc0a1f48256b800158c6363109faf
Sha1:   6dd27fc690de8a7e92aa61f45dcf3f0496295358
Sha256: ac52b9d001623714202e9f5ca35241415e26470f1803acb980fcd0db6e11e797
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Expires: Tue, 17 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c588b5e7f5749d9d056036ba1cfed2e3
Sha1:   9705100a2d064fd97528af037834bf03768ce199
Sha256: 3a24566634cdc1cc85455d337eca0f8d2b1ebe90deef8ed1b72effa37c5aaee1
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Expires: Tue, 17 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    6bf50ec404fb4a8b4a94be8390d11938
Sha1:   0caaab7704d6221abc5e0342909a4928cee50b1c
Sha256: 63b592179b1e9a528344ce1d430b9479fc55f43420a468ec35aaeaa9dff911cf
                                        
                                            GET /message.php?msg=Selamat%20Datang%20Ke%20KKBN%20Pontian%20Blog%20%20%20%20%20&adult=0&cat=art&big=big&cl=rainbow HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Set-Cookie: monpays=no; expires=Thu, 11-Jan-2018 11:39:41 GMT; path=/
Cache-Control: max-age=180
Expires: Fri, 13 Oct 2017 11:42:41 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   2234
Md5:    2922e7a012d61dee108e2acdc31f6ab4
Sha1:   0234c28e4aee086ec1dd30636f2f1d255792d48c
Sha256: 4fe693c7babafe8d30a1e6c78a947abbcc18c4650f9b7fa65eae01b751a797ae

Alerts:
  IDS:
    - ET INFO http string in hex Possible Obfuscated Exploit Redirect
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: kkbnpontian.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Fri, 13 Oct 2017 11:39:41 GMT
Date: Fri, 13 Oct 2017 11:39:41 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 29 Jul 2017 08:29:38 GMT
Etag: W/"70a6ff445e8a9aca584c0cf9f61bf0c5420d8212bdb9185399da813f4db8cc03"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 941
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   941
Md5:    ad7d4e2c80d8e2f6e1e6987698e8b696
Sha1:   6cda891a8159ea0047b44604ac3f3edba87e13b8
Sha256: 5795e397bfad915b32028e6106844feef17b5f1a85bb09aedc23503f26f15134
                                        
                                            GET /static/v1/widgets/73244247-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9609
Date: Tue, 03 Oct 2017 00:59:20 GMT
Expires: Wed, 03 Oct 2018 00:59:20 GMT
Last-Modified: Mon, 02 Oct 2017 22:05:25 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 902421
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9609
Md5:    0f31846649ae2c2c0aaa43f1f2d45662
Sha1:   c4e46209ffa4052f6caa01c7c9408a42859a2e2f
Sha256: 5a95b901eba5846ebff70ffca4ba09c36a157cbc2222155850896da73218f841
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Expires: Tue, 17 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    63c0c42876b179e938da75d435caf455
Sha1:   2496362f8b1e77dfa75695dc7c63d02afd31ef67
Sha256: e186173a64acae1a86f9725f1f063c69dd7b05c9ffaacf03329212c6411a892a
                                        
                                            GET /-nvax4ptTfRM/Tu6_OGrWhNI/AAAAAAAAAQ0/UjKZ2s_abN0/s250/435232-3d-Magnifying-Glass-Hovering-Over-A-Finger-Print-With-Binary-Code-Poster-Art-Print.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10d"
Expires: Sat, 14 Oct 2017 11:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="435232-3d-Magnifying-Glass-Hovering-Over-A-Finger-Print-With-Binary-Code-Poster-Art-Print.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: fife
Content-Length: 30729
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   30729
Md5:    9172f479ca69d157c15d30e7ba3e7894
Sha1:   dcc6864961918ab2c1b3c99e17efbf6a50a6c1af
Sha256: 11494698538db7840ebedafa3416a8cc6d7010245b8928600de1455bfa1570d9
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Tue, 10 Oct 2017 15:35:01 GMT
Expires: Tue, 17 Oct 2017 15:35:01 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 245080
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /display.php?id=2_1340612678_45266_716_0_300_250_8_1_53 HTTP/1.1 
Host: h1.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         72.52.168.255
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.5.31
Keep-Alive: timeout=2, max=150
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   833
Md5:    5948b44f5fcc1669c0128f423fe0ee78
Sha1:   e0fbd35e7b9655a6a221557d41c7acb8e2c13a26
Sha256: e64ac7f570a3d1eaa658a0a4e7a44fa5d99f13b6d088d9d4a24a5e29c048d6e2
                                        
                                            GET /-LEw0TxUlPuU/TuVVbp3Rl1I/AAAAAAAAAMI/GCw_hdsGBP4/s1600/Header%2BBlog.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vc2"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Header Blog.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 24277
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   24277
Md5:    10edcfd28ee22cf95da10c0d53bcdbae
Sha1:   6bbb38f3171b896528471362076f89797de3b328
Sha256: 333faa828f59f4a7ed1d7c7c95018bdd42968b9601a5bfe71223f060384bdd7b
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Tue, 10 Oct 2017 16:25:35 GMT
Expires: Tue, 17 Oct 2017 16:25:35 GMT
Last-Modified: Tue, 10 Oct 2017 11:46:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 242047
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "ff43a59f940b9e31a0283d768b2237d6"
Expires: Fri, 13 Oct 2017 11:39:42 GMT
Date: Fri, 13 Oct 2017 11:39:42 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs;Domain=.google.com;Path=/;Expires=Sat, 14-Apr-2018 11:39:42 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17423
Md5:    df210cafcf0432f63b4d1e9017b50492
Sha1:   fb60ebec4c23783d2168550604d871d4efd2a800
Sha256: 282712f4c148ca337b742d000fb85617e37d467f755b4cd563c7ea12451adb95
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=4288780031225422185&zx=afff3505-2570-4afe-8cc2-f22400400056 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: private, max-age=1800
Pragma: no-cache
Expires: Fri, 13 Oct 2017 11:39:42 GMT
Date: Fri, 13 Oct 2017 11:39:42 GMT
Last-Modified: Fri, 13 Oct 2017 11:39:42 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /image?id=0BwVBOzw_-hbMYTM3ZTRlZTktYzE4ZC00NWU0LWEyMzctOWFlZjVkZTkzNGY4&options=w1200 HTTP/1.1 
Host: themes.googleusercontent.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v1"
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: private, max-age=86400, no-transform
Content-Disposition: inline;filename="unnamed.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 176987
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   176987
Md5:    a92cb49be67d57c8073c5ce1395ff28e
Sha1:   b9a7c32fe6950122fdceaf56c9f31928b458cf07
Sha256: 6191d6aa68d97e47a9acb63702e2ab5b0a6c6dafb9a1ba93096e9ecd8efae1b1
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46907
Date: Thu, 12 Oct 2017 19:31:29 GMT
Expires: Fri, 12 Oct 2018 19:31:29 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58093
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   46907
Md5:    663da4522821133a5116f57abe7d6a86
Sha1:   1b157f22c825d5bee65867d2709bfcbb4c04a086
Sha256: 8010ae2811b2cf468d24a4e896dcdcd1457c10af769525ad1928c502b56550fb
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         216.58.211.130
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Date: Thu, 12 Oct 2017 23:13:33 GMT
Expires: Thu, 26 Oct 2017 23:13:33 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=1209600
Age: 44769


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /1kt/travel/bg_black_70.png HTTP/1.1 
Host: blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: http://www.blogblog.com/1kt/travel/bg_black_70.png
X-Content-Type-Options: nosniff
Date: Thu, 28 Sep 2017 19:14:17 GMT
Expires: Sat, 28 Oct 2017 19:14:17 GMT
Server: sffe
Content-Length: 247
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=2592000
Age: 1268725


--- Additional Info ---
Magic:  HTML document text
Size:   247
Md5:    9ee12c3b3131aca9f7501ad3ab6e948c
Sha1:   d1854e0127339d8af2c58a9f4cf1dcbb748cab3e
Sha256: cd0cf8c6eb88093f351e6dca3e7f13b09144c7dfbd566f1d9cfcd7d189a7d55c
                                        
                                            GET /blogblog/data/1kt/travel/bg_black_50.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 83
Date: Tue, 10 Oct 2017 16:39:03 GMT
Expires: Tue, 17 Oct 2017 16:39:03 GMT
Last-Modified: Mon, 09 Oct 2017 18:24:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241239
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 5 x 5, 8-bit/color RGBA, interlaced
Size:   83
Md5:    f7417b83fa976977f788364905aa5dd7
Sha1:   a6ede06565a88ef03ca33ad1b40a3c43e6c7f91f
Sha256: 8ad5d8cd8999e56275e12e5a5325b108bd15146fefe072af726fffecfe6ab862
                                        
                                            GET /-Not_VNuyZlk/Tp6AqOwNwcI/AAAAAAAAAGM/2Yma0TAhAeA/s80/wp6c760cb9.png HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v63"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="wp6c760cb9.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 11959
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 80 x 80, 8-bit/color RGBA, non-interlaced
Size:   11959
Md5:    e5caf029210066233d66f1a2c9f53526
Sha1:   6a005fef8ff465c3cdc8503be268fa41b7351396
Sha256: a66d81476e31f424c60d247b8ad20a37dca824bd842ccde37eb6e0e25594dc42
                                        
                                            GET /-1pw-R8kSX9M/T8cuhNS3xOI/AAAAAAAAAng/cqlcc2VJQhI/s320/social-intranet.gif HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v878"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="social-intranet.gif"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 34636
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  GIF image data, version 87a, 320 x 288
Size:   34636
Md5:    cf2b16a455edd1df4e9f0a52fed6eb2f
Sha1:   88c7b35a7781bc0ef47e416e7cd9dfe14d2ba3e2
Sha256: 9caa1003c8cd377f4f915fdf4cc4e2bf792712e03b3a82edfd22b1cd1af78581
                                        
                                            GET /img/logopm.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: monpays=no

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:26:20 GMT
Accept-Ranges: bytes
Content-Length: 847
Cache-Control: max-age=3600
Expires: Fri, 13 Oct 2017 12:39:42 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   847
Md5:    4e34866014e9f89c5e2266c093c1f757
Sha1:   a5cbf8aec733f3d476d47db2d7d2f9784130d8b8
Sha256: f6ce56e3b22a6957c54d515a96d4b653982bdbe0fd7e3685a95a80cfddd30b65
                                        
                                            GET /-E1bpWlHUg40/Tu7JSjgBrMI/AAAAAAAAARA/VCJgRHSZsK4/s400/be_succes22.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v110"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="be_succes22.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 39425
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   39425
Md5:    1f68fd5a2c0db8c57d76611b015d6ce3
Sha1:   5919fb45e062ca3640f01c0b9fb019c1508ad6e2
Sha256: 2c6c4e7cd0d4357c09cdba4b715cf1f93d2b16cd29bbedd900527ed11701141e
                                        
                                            GET /geocompteur/geolive.php?c=geolive_caroussel&adult=0&cat=informatique&id=2039437 HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: monpays=no

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Set-Cookie: monpays=NO; expires=Thu, 11-Jan-2018 11:39:42 GMT; path=/ pays=Norway; expires=Thu, 11-Jan-2018 11:39:42 GMT; path=/ idcompteurcc_2039437=done; expires=Sat, 14-Oct-2017 11:39:42 GMT; path=/ online_idcompteurcc_2039437=done; expires=Fri, 13-Oct-2017 11:49:42 GMT; path=/ online_2039437=1; expires=Fri, 13-Oct-2017 11:49:42 GMT; path=/
Cache-Control: max-age=180
Expires: Fri, 13 Oct 2017 11:42:42 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   2108
Md5:    570340f0b8cd2c199aaa9300d6b05aa3
Sha1:   ee33e4e09d0f34e8095a3d76a8f4ed539e33840c
Sha256: e584b7b16711a5a12f1893a54d15013d62825dd8900e122222cc15fad49052c5

Alerts:
  IDS:
    - ET INFO http string in hex Possible Obfuscated Exploit Redirect
                                        
                                            GET /9dyhp8.png HTTP/1.1 
Host: dgdm.daisypath.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         104.225.9.66
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache/2.4.27
X-Powered-By: PHP/7.1.9
Content-Length: 6499
Connection: close


--- Additional Info ---
Magic:  PNG image, 200 x 80, 8-bit colormap, non-interlaced
Size:   6499
Md5:    99ca30f495c1745080ea9f08f6e618a6
Sha1:   105eccb168a11035feeba54dd83e92371b0ddc8a
Sha256: a1bde0440f7052f17acbb14590015ab55aed01ffd2be21e337b89c046386702c
                                        
                                            GET /TikiPic.php/9dyhF9U.jpg HTTP/1.1 
Host: dgdm.daisypath.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         104.225.9.66
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache/2.4.27
X-Powered-By: PHP/7.1.9
Accept-Ranges: bytes
Content-Length: 2462
Connection: close


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01, comment: "CREATOR: gd-jpeg v1.0 (using IJ"
Size:   2462
Md5:    cf802d529562fedb510ce160f9b01e9f
Sha1:   d10d8f2fd6dd273b3e1250114b152f88faf37b41
Sha256: eb74e44e3089b49d41eda657bb2fecbd15e9844fe43da7370c61bec7f5563f6c
                                        
                                            GET /-62_P6dnzw0o/Tu64aOjIg3I/AAAAAAAAAP4/FlblqqbFrD0/s250/rss2.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vfe"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="rss2.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 16475
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   16475
Md5:    ef94f158336bd7f0c4eaf2510669e45b
Sha1:   0e6fd7b13bdb95dbfaa73e3edff2ab0d7b7f6422
Sha256: 5acc7cf42419b68d1fca486f36a5a099f35d439046a21ad9be9b1d940028560e
                                        
                                            GET /-BgtbnsF63sY/T8cp9ArshkI/AAAAAAAAAnQ/cCWHRyg7WB0/s400/index.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v274"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="index.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 6873
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   6873
Md5:    efe24274f963616ce34d1012f261590a
Sha1:   c5817ff7517778137db01b7e65ad69d61d5552eb
Sha256: 708bd5a4b75457513711861db1a2609374d47ef48a584b58d32725ae45b1660b
                                        
                                            GET /html/buttons/blogger-ipower-blue.gif HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 984
Date: Tue, 10 Oct 2017 16:40:20 GMT
Expires: Tue, 17 Oct 2017 16:40:20 GMT
Last-Modified: Mon, 09 Oct 2017 18:24:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241162


--- Additional Info ---
Magic:  GIF image data, version 89a, 88 x 30
Size:   984
Md5:    844564f46fd338722e26e9d57808e3e6
Sha1:   02a5fa9037b53ee0278b5cb3a5bff756b5875e12
Sha256: e442a96ee7b97f5b1427de340acb16ba5013a2e3eada6428a7a64e8654358768
                                        
                                            GET /_success3.js HTTP/1.1 
Host: selfmadevip.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         146.120.89.201
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:22:45 GMT
Content-Length: 341
Connection: keep-alive
Keep-Alive: timeout=15
Last-Modified: Tue, 29 Oct 2013 12:06:02 GMT
Etag: "b24414-155-4e9e00a52fe80"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  ASCII text, with very long lines
Size:   341
Md5:    30f51a414e1ffdbdcaec446efba0bebc
Sha1:   1e03ee67d9a5494cbef5218bc36126b68b0d718f
Sha256: 1757e00dd8d2711bc72d7279767b649c3b2104453968f6da9988e28a1b716e97
                                        
                                            GET / HTTP/1.1 
Host: kkbnpontian.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://kkbnpontian.blogspot.no/
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:39:42 GMT
Expires: Fri, 13 Oct 2017 11:39:42 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   179
Md5:    f7b85e3c00323291615a4118402a0d9b
Sha1:   d8941ca6328731c36a697f2a5efc1485b607500a
Sha256: 7521a3ece638ca33cda829558271a556ef99a4789ec01b3838b85c2e906ae081
                                        
                                            GET /-dMoL93spMcM/T7SyDEQd8AI/AAAAAAAAAkY/E7RzETdXjEs/s150/Logo%2BUpdate%2BLatest.JPG HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v246"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Logo Update Latest.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 12257
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   12257
Md5:    b78074aeb04c96f21d2f9ad2b1d5b8b8
Sha1:   84aa44bf0d2cf652874717ca61190a4fb35bafce
Sha256: a7fd96bdb8b5105f409b20622c808dfae4bf8f5ea8cde5fd82f714f29f73895f
                                        
                                            GET /-Bw-wd6jRrUA/Tu7rAgfISBI/AAAAAAAAARM/VMzdDpBmgXs/s250/sport%2Bzone.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v113"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sport zone.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 25829
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   25829
Md5:    1d95fe58f48a479b5bab1c8caeeef88d
Sha1:   240e35ebb633f3aff090a6ce23d2ca805da00a76
Sha256: c1b37ad54d90f2bccf2a6477e5cd1f6cc1dcb2e187be697e92a0bb20a8f5a5c8
                                        
                                            GET /-es1zBLhHfFg/Tu67C3B_OiI/AAAAAAAAAQc/RMg-Phbp9ak/s400/gambar2.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v107"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="gambar2.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 27755
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   27755
Md5:    c1fa7a99037a0bbe25190591142ff71d
Sha1:   24c8c08e78d11925cb4f56a2ae2cf461f350eef8
Sha256: 595f0a93b5a865bc2b0f6ceddd940762d1ef68d8f1715eda207bf5428a588bca
                                        
                                            GET /display.php?id=2_1323919483_12137_151_0_160_161_6_1_60 HTTP/1.1 
Host: h1.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         72.52.168.255
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
X-Powered-By: PHP/5.5.31
Keep-Alive: timeout=2, max=150
Connection: Keep-Alive
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   833
Md5:    7b9f7099f91b5b5b2eb068676f28ed8d
Sha1:   6f6d7e07fb1f9f5873c437c853491cdf1dc128a9
Sha256: 8dd7026eee21b31bf35f11af126c26c44171a3e7ee7e743dc2250248ad6960d8
                                        
                                            GET /display.php?id=2_1320395169_51223_155_0_468_60_6_2_55 HTTP/1.1 
Host: h2.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         52.70.70.118
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache
Content-Length: 829
Connection: close


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   829
Md5:    c40d6e71e51e162c3609983bb43c365f
Sha1:   5034f22d0f3d402644b6a4b8cb3fea40234fe4cf
Sha256: 535a603d96fb87a70a3d6079d77f5d63304072b9362c19ec18e642d4b005a41e
                                        
                                            GET /js/rssmikle.js HTTP/1.1 
Host: feed.mikle.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         34.198.118.202
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Server: nginx/1.8.1
Last-Modified: Fri, 19 Feb 2016 07:29:48 GMT
Etag: W/"56c6c46c-1c39"
Expires: Sun, 12 Nov 2017 11:39:41 GMT
Cache-Control: max-age=2592000
X-XSS-Protection: 0
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1729
Md5:    033073fd233e9597b87d3f2765e689af
Sha1:   81183e129c10a7c1d2e0a0ab38986d563bc94ec2
Sha256: 5f3f59e7d9e635be9fa596cd1a57aac73a972b5840f79c1676a92cf61484dc17
                                        
                                            GET /-7oCmVHaEapc/T4eSMIFo1bI/AAAAAAAAAYE/nhJCqyiqOuU/s320/Poster5.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v181"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Poster5.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 32092
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   32092
Md5:    8ed73d85719327a772a1108f5a6d8fb8
Sha1:   d9a22196f0f21109b556ac980c7520f001e4727f
Sha256: 9fa0b5fa7190a5bc233c03167571710a16e85e1bce9a0a555eefe02a7b1744f7
                                        
                                            GET /getsign.js.php?id=3&font_color= HTTP/1.1 
Host: api.checkingtools.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         155.94.65.43
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx/1.6.2
Date: Fri, 13 Oct 2017 11:57:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Content-Encoding: gzip


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   142
Md5:    14b280b83d603909ae33e9a39b0d2e88
Sha1:   96425ac7ad282a034303012fb2d2b7556995ee35
Sha256: ee3191872954cd0fd1e1c6917fa0d71e86af8281c2eed8245884fadb63f01177
                                        
                                            GET /-lEvHtvMUrVA/Tu68c1tomuI/AAAAAAAAAQo/iQhlJLzGNfQ/s250/laptop_success_iStock_000004333554Large2.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v10a"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="laptop_success_iStock_000004333554Large2.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 15946
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   15946
Md5:    70f0c982b2b921392d246150924d75b0
Sha1:   2916344e770ab05a836cef4eb981b81d8caf4773
Sha256: 0d5ce8d7abd32477eea5c495f0898745ef813fadd1c8681a2463a1e522390904
                                        
                                            GET /-DkAyGLhAyyA/Tu65jdvGtJI/AAAAAAAAAQE/G036sib5oyo/s400/onlinesearch2.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v101"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="onlinesearch2.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 23559
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   23559
Md5:    716125a6ee04302a7a3f50414dfc4e94
Sha1:   86125adb976a8e65958afa2d9b1bd4b2feead8f8
Sha256: 56add4e02c033d7b8c7076a22c19e2732a936d299f9f61ea0b1e024035833015
                                        
                                            GET /images/banner_125x125_01.gif HTTP/1.1 
Host: www.trafficdigger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         144.217.82.104
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Location: http://trafficdigger.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /-LiGB724ODWs/UGTuhmenLuI/AAAAAAAABUQ/XpNVWHCMRcI/s410/390469_10152099642720084_1639287949_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v544"
Expires: Sat, 14 Oct 2017 11:39:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="390469_10152099642720084_1639287949_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:43 GMT
Server: fife
Content-Length: 25309
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   25309
Md5:    21310f0b94c3da7b00b8d6b6b86daa63
Sha1:   21bca426a906bcc1b8a0962bb75dcaaac50cf255
Sha256: e13870c77e66018e584b46937c85f26264fd131f8a9687a1ec4bec5e8605fa8c
                                        
                                            GET /--3lecOkluMY/T955Vb0zd0I/AAAAAAAAArU/t24voXX0UDw/s400/congret.JPG HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v2b5"
Expires: Sat, 14 Oct 2017 11:39:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="congret.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:43 GMT
Server: fife
Content-Length: 29570
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   29570
Md5:    36b29fd4ba256a43b2c93a1551354182
Sha1:   482caedb3dd37127a56f1cebb8a86af74ba987e6
Sha256: 4f06f4d4e27fccbbecb892bfec92fcaf89822aed3808908e64497abcbbf9df76
                                        
                                            GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1 
Host: myblogtalk.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         69.64.146.224
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache
Pragma: no-cache
Content-Length: 6690
Expires: -1
Server: Microsoft-IIS/8.5
X-AspNet-Version: 4.0.30319
P3P: CP="CAO PSA OUR"
Set-Cookie: SessionID=c060e502-713e-48b3-b633-d3b0a98cfbd9; path=/ VisitorID=91ce6b99-74b3-476f-b4cb-fcc9b3db3940&Exp=10/13/2020 4:39:42 AM; expires=Tue, 13-Oct-2020 11:39:42 GMT; path=/
X-Powered-By: ASP.NET
Date: Fri, 13 Oct 2017 11:39:42 GMT


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   6690
Md5:    30416841db343a0ccf599a72a937135b
Sha1:   1b1f30b491584df29a329867c0af0fb87990efad
Sha256: 4e150a25f3eed2913ae1ef648c9fa3f65408c52ef1270d999ea9e8f8af791c79
                                        
                                            GET /cursor.png HTTP/1.1 
Host: cur.cursors-4u.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         173.208.177.162
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.10.1
Date: Fri, 13 Oct 2017 16:46:15 GMT
Content-Length: 1237
Last-Modified: Wed, 27 Feb 2013 17:33:08 GMT
Connection: keep-alive
Etag: "512e4354-4d5"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  PNG image, 27 x 27, 8-bit/color RGBA, interlaced
Size:   1237
Md5:    fcdb7a84fa88ca84c54edda3ea9dc226
Sha1:   b49079475e9b5d80d02d36108e5f87dec6778d56
Sha256: 9f4185f44c07da894dee2b3f016585769af454b43bd06376e13804d88cfc3a54
                                        
                                            GET /tracker/lgUrl.php?stlVar2=1206&rgtype=4684NR-IPIB&pidnVar2=324468810&prtVar2=3&scvVar2=12 HTTP/1.1 
Host: www.tracemyip.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         162.221.184.93
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: Apache
X-Powered-By: PHP/5.3.29
P3P: cp=ALL DSP COR CURa ADMa DEVa CONa SAMa BUS", policyref="/w3c/p3p.xml"
X-XSS-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  ASCII HTML document text, with very long lines, with CRLF line terminators
Size:   17176
Md5:    79511c82ae84927dfa9bc477ce6f6faf
Sha1:   c853638e2233f27bb664903dc3937c0c8dbc72d0
Sha256: f7e1464411723f5acc3738182606887c1fdf00bf612026ace0ce229b5c8050f7
                                        
                                            GET /albums/gg594/kkbnpontian/BenderaKKBNPontian_zps63179f9e.gif HTTP/1.1 
Host: i1245.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         8.254.229.244
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Content-Length: 488533
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "77455-4ca2e03fc10c0"
Expires: Fri, 13 Oct 2017 17:39:41 GMT
Last-Modified: Fri, 21 Sep 2012 03:41:31 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept
Access-Control-Allow-Origin: *
Age: 1


--- Additional Info ---
Magic:  GIF image data, version 89a, 400 x 300
Size:   488533
Md5:    a983c18fb1cdc0c8568fa85874a22a9b
Sha1:   c84598fb12921fb2b0db82cf77a0a47508eb2d54
Sha256: 43b7bbdb8722e12288135fd9d847f61549df5fadd7c09fae3f5194a11617b849
                                        
                                            GET /tcm.js HTTP/1.1 
Host: www.topcpm.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:39:43 GMT
Server: Apache
Last-Modified: Wed, 05 Apr 2017 01:49:49 GMT
Etag: "16066c8-14a6-54c619b900940"
Accept-Ranges: bytes
Content-Length: 5286
Connection: close
X-Pad: avoid browser bug


--- Additional Info ---
Magic:  ASCII text, with very long lines, with no line terminators
Size:   5286
Md5:    aeb54c7b4ec5c400e355284a3ad458ed
Sha1:   8deceb2be974ebb57c6ba92e2b4fd222459bd620
Sha256: 74254a3c9ccffa3be044de98739e3d28d53043b68e6c2f08b2d0861de9494261
                                        
                                            GET /1kt/travel/bg_black_70.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 84
Date: Tue, 10 Oct 2017 18:47:18 GMT
Expires: Tue, 17 Oct 2017 18:47:18 GMT
Last-Modified: Tue, 10 Oct 2017 13:40:04 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 233545


--- Additional Info ---
Magic:  PNG image, 5 x 5, 8-bit/color RGBA, interlaced
Size:   84
Md5:    4fc6c14642616095c0b1c90baa826951
Sha1:   25cacf250fad4290661fe8849069769f4eb40aba
Sha256: 4f01951293a11116b89b6e19f70cb9b72b2e3a68b2005c75d1d9b8e7b85eb35a
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 11:39:43 GMT
Etag: "59e05686-1d7"
Expires: Sun, 15 Oct 2017 11:39:43 GMT
Last-Modified: Fri, 13 Oct 2017 06:00:38 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0b5a0af812310c2209ad64395fe869d0
Sha1:   2471ae4f36c06b1cd0ebe3838837322e008209c0
Sha256: a8a51afda9134029f1aaf911ecf649526c17e8b89d3fed451ff481bdc6901cdf
                                        
                                            GET /-57fZCILhsF0/UE0_annhEBI/AAAAAAAABIc/FBN5Z8wkwCg/s410/Poster%2BTilawah%2BTahniah.png HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v487"
Expires: Sat, 14 Oct 2017 11:39:42 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Poster Tilawah Tahniah.png"
Vary: Origin
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:42 GMT
Server: fife
Content-Length: 101528
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 410 x 160, 8-bit/color RGB, non-interlaced
Size:   101528
Md5:    168afd3d16711a2f666aa1d1c00ffce9
Sha1:   1b07e88d6e05fe5c8b625baf4a01ace4c138f362
Sha256: 68559380a37e52e622891c32eea1374ed3996bcf4e2f23ca3fdbe4ade27259e6
                                        
                                            GET /hitparade.php?pagexiti=message HTTP/1.1 
Host: cdnovh.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         46.105.203.40
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:36:48 GMT
Cache-Control: max-age=180
Expires: Fri, 13 Oct 2017 11:39:48 GMT
Content-Encoding: gzip
Vary: Accept-Encoding
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.32/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
Content-Length: 571
X-IPLB-Instance: 4750


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   571
Md5:    c5cddd8e0286811b1becf1628da52167
Sha1:   ad23585d0507476fa761beb4a2f037398aa01bda
Sha256: e540d5f43df84953d32d23b10aed1bb46527ce3664d9877e95a415fc8bf2e971
                                        
                                            GET / HTTP/1.1 
Host: kkbnpontian.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
If-Modified-Since: Sat, 29 Jul 2017 08:29:38 GMT
If-None-Match: W/"70a6ff445e8a9aca584c0cf9f61bf0c5420d8212bdb9185399da813f4db8cc03"

                                         
                                         172.217.22.161
HTTP/1.1 304 Not Modified
                                        
Expires: Fri, 13 Oct 2017 11:39:43 GMT
Date: Fri, 13 Oct 2017 11:39:43 GMT
Cache-Control: private, max-age=0
Etag: W/"70a6ff445e8a9aca584c0cf9f61bf0c5420d8212bdb9185399da813f4db8cc03"
Server: GSE


--- Additional Info ---
                                        
                                            GET / HTTP/1.1 
Host: trafficdigger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         144.217.82.104
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:43 GMT
Server: Apache
Link: <http://trafficdigger.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6912
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6912
Md5:    e1b1cac5c4807a489799afefb126aae7
Sha1:   7cc2702ac23c027db4ce6f652057ca9103e58bf2
Sha256: f08e9d26d0e17e98bb4285e0cd2e0dfe661088dd5c16e795bcf0ba27d33d871f
                                        
                                            GET /lb.js HTTP/1.1 
Host: synad2.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         110.4.44.125
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 13 Oct 2017 11:39:43 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Location: https://eccdn1.synad3.nuffnang.com.my/lb.js
Cache-Control: max-age=86400
Expires: Sat, 14 Oct 2017 11:39:43 GMT
Content-Length: 227
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   227
Md5:    e2d563ddb2b91bf7a597c78315b5621f
Sha1:   f662c75526d3ce9900af3bd894e3c75d40d9543f
Sha256: 73577228a14834a440c46446f9fec555454f03922032181aad23e38c50e1e627
                                        
                                            GET /message/messagebig.swf HTTP/1.1 
Host: cdnovh.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         46.105.203.40
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Fri, 13 Oct 2017 11:21:43 GMT
Expires: Fri, 13 Oct 2017 12:21:43 GMT
Cache-Control: max-age=3600
Content-Length: 13363
Last-Modified: Tue, 04 Mar 2014 20:27:30 GMT
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.32/27
X-Cacheable: Matched cache
Accept-Ranges: bytes
X-IPLB-Instance: 4750


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 8
Size:   13363
Md5:    b6b674faeea69677fa412c5522fcf268
Sha1:   a28c36527641a19732d444068809255cdf0c816a
Sha256: 4569026933690749175636b8fbebc1228c1f56b4f801b15740ea4f5ee72dc7b1
                                        
                                            POST / HTTP/1.1 
Host: ocsp.digicert.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         93.184.220.29
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Accept-Ranges: bytes
Cache-Control: max-age=172800
Date: Fri, 13 Oct 2017 11:39:44 GMT
Etag: "59e048c9-1d7"
Expires: Sun, 15 Oct 2017 11:39:44 GMT
Last-Modified: Fri, 13 Oct 2017 05:02:01 GMT
Server: ECS (arn/4694)
X-Cache: HIT
Content-Length: 471


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0f3ed45c89df7555fe40ad65e8a4fd28
Sha1:   b23f571516ff2a01828deb6ac4948e53a6499e44
Sha256: fe338ba2ad75395978117444521a0bd63bef724f8c4ecb0525a2f73d78a00cff
                                        
                                            GET /hit.xiti?s=281802&p=message&hl=13x39x44&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/ HTTP/1.1 
Host: logv33.xiti.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdnovh.widgeo.net/hitparade.php?pagexiti=message

                                         
                                         62.161.94.220
HTTP/1.1 302 Moved Temporarily
                                        
Content-Length: 0
Location: /hit.xiti?s=281802&p=message&hl=13x39x44&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/&Rdt=On
Set-Cookie: idrxvr=C9648B2D-31E1-4C0E-ABC3-D3D2B1BA8039; expires=Mon, 12-Nov-2018 11:39:44 GMT; domain=xiti.com; path=/;
P3P: policyref="/w3c/p3p.xml",CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
Date: Fri, 13 Oct 2017 11:39:44 GMT
Connection: close


--- Additional Info ---
                                        
                                            GET /img/widgets/arrow_dropdown.gif HTTP/1.1 
Host: img2.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 141
Date: Tue, 10 Oct 2017 11:07:35 GMT
Expires: Tue, 17 Oct 2017 11:07:35 GMT
Last-Modified: Mon, 09 Oct 2017 21:49:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 261130
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  GIF image data, version 89a, 13 x 10
Size:   141
Md5:    2964a07d60a4e76b299130fb1b4115f6
Sha1:   3b72dcc19f3ad685513eaba612e07e0ed495f2e1
Sha256: 28ab89f0285c48d2faed701905c185c302f2b389584a52ceaa76a91ea64dc3a7
                                        
                                            GET /albums/gg594/kkbnpontian/Malaysia-240-animated-flag-gifs.gif HTTP/1.1 
Host: i1245.photobucket.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         8.254.229.244
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:39:41 GMT
Content-Length: 1315035
Connection: keep-alive
Cache-Control: max-age=21600
Etag: "1410db-4c5b715b96040"
Expires: Fri, 13 Oct 2017 17:39:41 GMT
Last-Modified: Thu, 26 Jul 2012 08:07:21 GMT
Accept-Ranges: bytes
Server: Apache
Vary: Accept
Access-Control-Allow-Origin: *
Age: 0


--- Additional Info ---
Magic:  GIF image data, version 89a, 240 x 180
Size:   1315035
Md5:    1837a7dcae2ec2012f70cf0dbc604e65
Sha1:   a5273d3cd0e6e3338201144163b6d46284c95202
Sha256: 070fbbeb629f1a36829fec7ff21acba61438782301cf2ce1f014d05e2658a605
                                        
                                            GET /get/flashplayer/update/current/xml/version_en_win_pl.xml HTTP/1.1 
Host: fpdownload2.macromedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         91.135.34.11
HTTP/1.1 200 OK
Content-Type: text/xml
                                        
Server: Apache
Last-Modified: Tue, 10 Oct 2017 09:00:43 GMT
Etag: "60c-55b2d8aca2f07"
Accept-Ranges: bytes
Content-Length: 1548
Date: Fri, 13 Oct 2017 11:39:45 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  XML document text\012 XML document text
Size:   1548
Md5:    e7664061d466c21a4f6b843a5a803007
Sha1:   3cbe9ab67ec553511440bc401627930461d1d2cd
Sha256: cf8c939324f5a50cc7fbf9739d230bc3b99dd80db106b005bef3be53aeb8b28a
                                        
                                            GET /hit.xiti?s=281802&p=message&hl=13x39x44&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/&Rdt=On HTTP/1.1 
Host: logv33.xiti.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://cdnovh.widgeo.net/hitparade.php?pagexiti=message
Cookie: idrxvr=C9648B2D-31E1-4C0E-ABC3-D3D2B1BA8039

                                         
                                         62.161.94.220
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 373
Last-Modified: Thu, 30 Nov 2006 13:52:45 GMT
Accept-Ranges: bytes
Etag: "58b630d08614c71:0"
Server: Microsoft-IIS/8.5
Date: Fri, 13 Oct 2017 11:39:45 GMT
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 39 x 25
Size:   373
Md5:    29cb2a1e585dff1f4282449fdbbab2d7
Sha1:   075d147195f9dba1862a6f3990d219d7c4389225
Sha256: 86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 116
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:46 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 11:06:00 GMT
Expires: Wed, 18 Oct 2017 11:06:00 GMT
Etag: B5C89A515974601CFB5468E9ED7477013959F055
Cache-Control: max-age=429373,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 472
Connection: close


--- Additional Info ---
Magic:  data
Size:   472
Md5:    249fffaf7469c3d101e456710c32c05f
Sha1:   b5c89a515974601cfb5468e9ed7477013959f055
Sha256: 77e7d157eb9ab6d10808fb75a064690f8116da074debae1efb4797176ab2e272
                                        
                                            POST / HTTP/1.1 
Host: ocsp.comodoca.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:46 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: CAE2D4E36B01556EB5A7DFCAC91643A06697B94B
Cache-Control: max-age=424382,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 727
Connection: close


--- Additional Info ---
Magic:  data
Size:   727
Md5:    b1e50e73281d4487d8b1cf3cdaf74bd5
Sha1:   cae2d4e36b01556eb5a7dfcac91643a06697b94b
Sha256: ba282a3cc79d8121086cb931af7199775bd48fef7699ba80e61d794c382b880c
                                        
                                            POST / HTTP/1.1 
Host: ocsp.usertrust.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         178.255.83.1
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:46 GMT
Server: Apache
Last-Modified: Wed, 11 Oct 2017 09:42:49 GMT
Expires: Wed, 18 Oct 2017 09:42:49 GMT
Etag: 8A7BC9885D9FFAFD7270D5324F22275F2B2C0D13
Cache-Control: max-age=424382,public,no-transform,must-revalidate
X-OCSP-Reponder-ID: rmdccaocsp35
Content-Length: 471
Connection: close


--- Additional Info ---
Magic:  data
Size:   471
Md5:    d7daaf5088b1b8633e7e0d6600507656
Sha1:   8a7bc9885d9ffafd7270d5324f22275f2b2c0d13
Sha256: 9ea32e88334ce42853f79b00abaff0d4ee00214175cd3e1d189a0aa1b4a4ceba
                                        
                                            GET /static/v1/widgets/2682751544-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 46164
Date: Fri, 06 Oct 2017 01:50:20 GMT
Expires: Sat, 06 Oct 2018 01:50:20 GMT
Last-Modified: Thu, 05 Oct 2017 23:11:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 640165
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   46164
Md5:    7035c45baf033ca693de092b42a02000
Sha1:   ec2136e5613226a45279a0b3dfe79a3cf4d8f1a7
Sha256: 5cd86ef91ebf028d0c1673b662e640dbd682cb5f0732ab8998022c2599b591ed
                                        
                                            GET /img/widgets/subscribe-netvibes.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1445
Date: Tue, 10 Oct 2017 16:38:33 GMT
Expires: Tue, 17 Oct 2017 16:38:33 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241272
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 91 x 17, 8-bit colormap, non-interlaced
Size:   1445
Md5:    c52a5f4ecb6be5d7e93b23ef4122ee4e
Sha1:   4e698a5f455daf3a8ea1e219b1998079f0546716
Sha256: 71b8ad79c680b3e5d452a792c3b418b23f739a0a34005e0f37ec674f4c78cb5d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16938
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58080
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16938
Md5:    6aae7bc152acc744cf63755ed47be736
Sha1:   79cc54dc61a1ef9944e6e5611a334c5bc8f194bf
Sha256: 62fee77a073cb0944c55664aa5c61ee35e83e567fa41155fd9b94b6f4f0a3a1c
                                        
                                            GET /img/icon_feed12.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 500
Date: Tue, 10 Oct 2017 16:38:32 GMT
Expires: Tue, 17 Oct 2017 16:38:32 GMT
Last-Modified: Mon, 09 Oct 2017 18:24:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241274
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 12 x 12, 8-bit colormap, non-interlaced
Size:   500
Md5:    44e7355a788fd1082deff0018883758e
Sha1:   50e3a28a44978e85d13c30522e0c71c8d0b24675
Sha256: 3cd341f37642f8a58b0fe14c2645913449c0ffe10be6ba0986275bfef29bc319
                                        
                                            GET /img/widgets/subscribe-yahoo.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 580
Date: Tue, 10 Oct 2017 16:38:32 GMT
Expires: Tue, 17 Oct 2017 16:38:32 GMT
Last-Modified: Mon, 09 Oct 2017 18:24:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241274
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 91 x 17, 8-bit colormap, non-interlaced
Size:   580
Md5:    79f602b6ac18bee79b4e2353a6674010
Sha1:   28accf82263aa1a11bb821439d4d185865662530
Sha256: bbf9b924cc32bff4738bb54d86905476349f90c8b20f748633e56f64379d553e
                                        
                                            GET /navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:39:46 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2697
Md5:    f33b0908a7dbba1370263e334fd47f57
Sha1:   327e6ecd90e71f0adc06061815fd50d010a22316
Sha256: 07515f40ea1f578f05d9b49d3340240aa0d681748305f81746ba5e1eac50bd41
                                        
                                            GET /img/navbar/icons_peach.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 907
Date: Tue, 10 Oct 2017 16:38:32 GMT
Expires: Tue, 17 Oct 2017 16:38:32 GMT
Last-Modified: Mon, 09 Oct 2017 20:50:39 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241274
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   907
Md5:    3718077fe5eb689b0ded987a52881d06
Sha1:   f0ce5596ef43f850c400cbbc0556697fb3e7b232
Sha256: 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
                                        
                                            GET /img/navbar/arrows-light.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 117
Date: Tue, 10 Oct 2017 12:41:28 GMT
Expires: Tue, 17 Oct 2017 12:41:28 GMT
Last-Modified: Mon, 09 Oct 2017 15:42:15 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 255498
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   117
Md5:    25c2b0cfe0ad4dcda4a0e3727d091d80
Sha1:   b9d16f4311e64648b7970baf00cb9841e3c3351b
Sha256: bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "04daa091e8f5885baefc06708bb31518"
Expires: Fri, 13 Oct 2017 11:39:46 GMT
Date: Fri, 13 Oct 2017 11:39:46 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17435
Md5:    86c2d83bc5b0ec7b3e646a472f962689
Sha1:   293dfb7d17ebd1e56064481daaaca0958aa0a29d
Sha256: 7529b8e1e8414b222b8a5b6308b150d19c8c1bb6d83f1f47f5ee754b45166686
                                        
                                            GET /lb.js HTTP/1.1 
Host: eccdn1.synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         110.4.42.161
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 11:39:46 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Last-Modified: Wed, 04 May 2016 03:32:47 GMT
Etag: "17bf81b2-f94-531fbe11ed5c0"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=29030400,public
Content-Length: 2218
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2218
Md5:    32befc31928d3dcb39e50c48b31e2c85
Sha1:   931d8f6014632d5e33e2d3e22252389cc34aaba3
Sha256: e54b735c21c514b242baf637314cf583ea1fd5c3c168d6e7262e2065fdeef1cc
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 58976
Date: Thu, 12 Oct 2017 20:13:59 GMT
Expires: Fri, 12 Oct 2018 20:13:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 55547
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   58976
Md5:    19c76688d8c32cad0bc39aa1ebd2de70
Sha1:   7d4321f4521b894dafdcbaaf3b396cf93a00b334
Sha256: 6cf6e0443b0d9b73af2eacfd2910e417875dd16594487563f5596fd230f9dd61
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Tue, 10 Oct 2017 13:48:12 GMT
Expires: Tue, 17 Oct 2017 13:48:12 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 251495
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes_style_common,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 19422
Date: Thu, 12 Oct 2017 20:26:09 GMT
Expires: Fri, 12 Oct 2018 20:26:09 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 54818
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   19422
Md5:    ac80b1c4b4c427abb05209c3cd2e1b8b
Sha1:   3f0e766aa8942538b0b15ea6d3d7c998b7831fae
Sha256: 77f6eded601b1c7c62c6d89c21b359206819c5b7992420ac178362a4f07f3ad0
                                        
                                            GET /badge/259280697441337.1913.1590045948.png HTTP/1.1 
Host: badge.facebook.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         31.13.72.8
HTTP/1.1 200 OK
Content-Type: image/png
                                        
content-security-policy: default-src * data: blob:;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.virtualearth.net *.google.com 127.0.0.1:* *.spotilocal.com:* 'unsafe-inline' 'unsafe-eval' fbstatic-a.akamaihd.net fbcdn-static-b-a.akamaihd.net *.atlassolutions.com blob: data: 'self';style-src data: blob: 'unsafe-inline' *;connect-src *.facebook.com *.fbcdn.net *.facebook.net *.spotilocal.com:* *.akamaihd.net wss://*.facebook.com:* https://fb.scanandcleanlocal.com:* *.atlassolutions.com attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self';
X-Frame-Options: DENY
X-XSS-Protection: 0
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://badge.facebook.com
Access-Control-Expose-Headers: X-FB-Debug, X-Loader-Length
Pragma: no-cache
Vary: Origin, Accept-Encoding
public-key-pins-report-only: max-age=600; pin-sha256="WoiWRyIOVNa9ihaBciRSC7XHjliYS9VwUGOIud4PB18="; pin-sha256="k2v657xBsOVe1PQRwOsHsw3bsGT2VzIqz5K+59sNQws="; pin-sha256="gMxWOrX4PMQesK9qFNbYBxjBfjUvlkn/vN1n+L9lE5E="; pin-sha256="q4PO2G2cbkZhZ82+JgmRUyGMoAeozA+BSXVXQWB8XWQ="; report-uri="http://reports.fb.com/hpkp/"
access-control-allow-method: OPTIONS
Expires: Sat, 01 Jan 2000 00:00:00 GMT
Strict-Transport-Security: max-age=15552000; preload
X-Content-Type-Options: nosniff
Cache-Control: private, no-cache, no-store, must-revalidate
Content-Encoding: gzip
X-FB-Debug: qVT0GDKObIabeuzEYyFw0e56J/MDh40tXV7MWRq9SIi3R89hFTJkcatJzlc63yQ9TCUvEY4hkPtGXhOzd270uA==
Date: Fri, 13 Oct 2017 11:39:47 GMT
Connection: keep-alive
Content-Length: 29966


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   29966
Md5:    8b91a5c5218d6d9769928a38e856bf90
Sha1:   eb0716138edff7778ada25e21add562caf6e0885
Sha256: 306f5c87f723dbd8f4714672866536467085005c0dd4b84d64f787150ac1a585
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:47 GMT
Date: Fri, 13 Oct 2017 11:39:47 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4021
Md5:    46a5de02174ad227ffe9ae3131c6a7f5
Sha1:   55e8499986e2a71b8e3710099667fff0ac8f3dd5
Sha256: cae2b3db0283e822b260e58da4b26e43b97b79388f32b259dce17dab94344424
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=googleapis_client,gapi_iframes_style_common,gapi_iframes_iframer/am=AQ/rt=j/d=1/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://apis.google.com/se/0/_/+1/fastbutton?usegapi=1&source=blogger%3Anavbar%3Aplusone&size=medium&hl=no&origin=https%3A%2F%2Fwww.blogger.com&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 44716
Date: Thu, 12 Oct 2017 18:17:58 GMT
Expires: Fri, 12 Oct 2018 18:17:58 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 62510
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   44716
Md5:    95050c9c51441ce7aedcb15c820b1b6f
Sha1:   069e96a92ce71a14833c53bd3516f5f8a2556d91
Sha256: 1da03bc638069e15274f8bcf41401e46837ceea995075934702afc3aa9e5a933
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:48 GMT
Expires: Tue, 17 Oct 2017 11:39:48 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    a352c8963f53bbddb3c2ee43ae62b276
Sha1:   8553e71b2e4c06afea3bf11df2ae53b03e24cc8b
Sha256: 0957480062e48be7163da3a9ec8f5598b368cede5b8822753f40ae78c03b5c9a
                                        
                                            GET /track/banner/leaderboard/78a7f72c22fd5c4d5ab69e9f372e559d/http%253A%252F%252Fkkbnpontian.blogspot.no%252F/visit/visit/async/1 HTTP/1.1 
Host: synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         110.4.44.125
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:39:47 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
P3P: CP="NOI DSP CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; expires=Sat, 13-Oct-2018 11:39:48 GMT; path=/; domain=.nuffnang.com.my bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; expires=Sat, 13-Oct-2018 11:39:48 GMT; path=/; domain=.nuffnang.com.my
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1410
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1410
Md5:    8a666387806f9ba3e3c9202c2d1be51c
Sha1:   2ffa968fb49fce100715bbc08491907f4d614173
Sha256: 00ac57f6a70a2de0d16c56e98d7655f63504d3816a516fe6c99a7bf5aa61fa94
                                        
                                            POST / HTTP/1.1 
Host: g.symcd.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         23.43.139.27
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Server: nginx/1.10.2
Content-Length: 1390
Content-Transfer-Encoding: binary
Cache-Control: max-age=305927, public, no-transform, must-revalidate
Last-Modified: Tue, 10 Oct 2017 00:34:08 GMT
Expires: Tue, 17 Oct 2017 00:34:08 GMT
Date: Fri, 13 Oct 2017 11:39:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  data
Size:   1390
Md5:    fccd40351d25d6f5eecda73fdef9b3d8
Sha1:   0d2d2f37814bb53b7dca796acc9ee278ef6297ba
Sha256: 23e276d6aa20791de9110019cb7992bae490040d4cc3a06678449d1b3f2063e4
                                        
                                            GET /quant.js HTTP/1.1 
Host: edge.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         91.135.34.122
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Server: Apache
Last-Modified: Thu, 25 May 2017 20:26:55 GMT
Accept-Ranges: bytes
Content-Length: 5458
Vary: Accept-Encoding
Content-Encoding: gzip
Cache-Control: private, max-age=86400
Expires: Sat, 14 Oct 2017 11:39:48 GMT
Date: Fri, 13 Oct 2017 11:39:48 GMT
Connection: keep-alive


--- Additional Info ---
Magic:  gzip compressed data, was "quant.min.js", from Unix, last modified: Fri Apr 28 00:50:56 2017
Size:   5458
Md5:    cce1e5cdade201139c4d113078d26d74
Sha1:   63afb7b77e7806f60aa2dc681933add1354fcea6
Sha256: bbcee65263cc43a1a863c95825c4ec7855acb416c4337ddd291796b4c1a8e4b6
                                        
                                            GET /assets/img/my/nuffnang_footer_2.png HTTP/1.1 
Host: eccdn1.static.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788

                                         
                                         93.184.221.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cache-Control: max-age=29030400,public
Date: Fri, 13 Oct 2017 11:39:48 GMT
Etag: "19188520-101b-51a6ee1c40d00"
Last-Modified: Thu, 09 Jul 2015 10:40:20 GMT
Server: ECAcc (arn/46DC)
X-Cache: HIT
Content-Length: 4123


--- Additional Info ---
Magic:  PNG image, 133 x 24, 8-bit/color RGBA, non-interlaced
Size:   4123
Md5:    95833ef61318314b4f3d70a449daa770
Sha1:   7b5226c0e063b3642a6ec7610547c9d5162a2df9
Sha256: 326b4a70b4084205562f96a53a0ea959673a6a360abd125c56467a4338e73b18
                                        
                                            GET /o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=4288780031225422185&blogName=KKBN+PONTIAN&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=http://kkbnpontian.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://kkbnpontian.blogspot.com/&vt=-4879529699828529956&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 11:39:48 GMT
Date: Fri, 13 Oct 2017 11:39:48 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http:;object-src 'none';base-uri 'none';report-uri /_/cspreport
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   365
Md5:    b589c8cee8068373148b6ef4cb051bd2
Sha1:   33902f957f4744e0460c5ff66b502815b3d85ee2
Sha256: 986fac08004178d69ce9fe46a2b1ad4fb69923f71b4c35f162c4e5ba4822539f
                                        
                                            GET /assets/js/log_placement.js HTTP/1.1 
Host: synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 11:39:48 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Last-Modified: Fri, 06 May 2016 09:36:05 GMT
Etag: "17bf817c-bfa-532293010ab40"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=29030400,public
Content-Length: 1179
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1179
Md5:    e60a2e1cb79bcdeab532eca6a1a78d69
Sha1:   1fd9a8d455b3160b8a8267ebcc603a284ce64bfc
Sha256: 19b6c1ed9754f4025bfbf161802dae7b3cfcc55413c6405da086dc4b01f4a30a
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:49 GMT
Expires: Tue, 17 Oct 2017 11:39:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    0a14338a299b2c02742cd6f9e33596b0
Sha1:   a69501c94549c32d1b3b25358a2305e9d628ea16
Sha256: c3cc36c99da38011eda1ff5ddf24d8367eb22fd9668046f8c4857ddb55e7b82e
                                        
                                            GET /img/logo-16.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 279
Date: Tue, 10 Oct 2017 09:16:32 GMT
Expires: Tue, 17 Oct 2017 09:16:32 GMT
Last-Modified: Mon, 09 Oct 2017 16:50:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 267797


--- Additional Info ---
Magic:  PNG image, 16 x 16, 8-bit/color RGBA, non-interlaced
Size:   279
Md5:    5ffecab6c722bb0adc3fce8d83b27993
Sha1:   0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
Sha256: cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
                                        
                                            GET /maps/ms?msa=0&msid=217323840413545027761.0004b3541941f4b47c108&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed HTTP/1.1 
Host: maps.google.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.163
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:39:49 GMT
Location: https://maps.google.com.my/maps/ms?msa=0&msid=217323840413545027761.0004b3541941f4b47c108&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 297
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   297
Md5:    76926f2c09d5031bcb1393f194fb54a8
Sha1:   f49035918eae12d0b4291cdbe859cf48a4519e3a
Sha256: 6650576590b6c3ede34a53e6f59939dd99766a319c4a80cc1df24f2162f39731
                                        
                                            GET /track/beacon/leaderboard/1153951/8511452/kkbnpontian.blogspot.no HTTP/1.1 
Host: synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:48 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
P3P: CP="NOI DSP CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; expires=Sat, 13-Oct-2018 11:39:48 GMT; path=/; domain=.nuffnang.com.my al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788; expires=Sat, 13-Oct-2018 11:39:48 GMT; path=/; domain=.nuffnang.com.my
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 21
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   21
Md5:    1a60c330fb42841e8dcf3cd507a70bfc
Sha1:   9ba9c8d18f6be7851b4d88e3b608a9979f56a083
Sha256: 7fa5a93246b84491c51c9c8b4493d30518932a2bb45d67df757bc8a332b1f2d1
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:49 GMT
Expires: Tue, 17 Oct 2017 11:39:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    c26d19cfb2cf80da024dca34a52d07ee
Sha1:   20e7a5a5251819a67413644d22a48cc29e58231b
Sha256: 1d8888fe4341af8b314cdff3bf4ab478b14824141d5bd044a9332a78cec3cf94
                                        
                                            GET /files/53/2_1340612678_45266_716_0_300_250_8_1_53.swf HTTP/1.1 
Host: h1.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         72.52.168.255
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Fri, 13 Oct 2017 11:39:49 GMT
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Mon, 03 Apr 2017 11:56:03 GMT
Etag: "1bab8c-43e9-54c41d7f759c1"
Accept-Ranges: bytes
Content-Length: 17385
Keep-Alive: timeout=2, max=150
Connection: Keep-Alive


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 8
Size:   17385
Md5:    de6a2c82265f8804fdaf688dedf21118
Sha1:   344b9e7830e30c35a9e84352122c7a90eef245e4
Sha256: 419b64c5e94589ea8d0a12a3ddecda2d4413d71902b9c523cab87ffddae6cf15
                                        
                                            GET /accounts/o/971028622-postmessagerelay.js HTTP/1.1 
Host: ssl.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 4512
Date: Thu, 12 Oct 2017 18:15:26 GMT
Expires: Fri, 12 Oct 2018 18:15:26 GMT
Last-Modified: Wed, 11 Oct 2017 22:34:08 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 62663
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4512
Md5:    c41dc9da703c13b923ba04f7f4dd9137
Sha1:   0c4fc1bdf44857be1104d9eb4c87fcfa88b6a066
Sha256: b0161a7902e960e4de936ed83bfcc4af8b6063d5503ca13edd7eea8f86af03a9
                                        
                                            GET /img/widgets/s_top.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 335
Date: Tue, 10 Oct 2017 10:51:07 GMT
Expires: Tue, 17 Oct 2017 10:51:07 GMT
Last-Modified: Mon, 09 Oct 2017 14:41:09 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 262122
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 144 x 400, 4-bit colormap, non-interlaced
Size:   335
Md5:    c4908f4189f7698dc8afdd67df8ce041
Sha1:   b6f7cd64ff84e7cedb4b8b92ceb8b9800ad7624a
Sha256: cfe1d5dd45c7f0897d769e6c95ae9036fbdc7dad76ac9ed6ce6b21a785ecd6de
                                        
                                            GET /translate_static/js/element/main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1512
Date: Fri, 13 Oct 2017 11:37:10 GMT
Expires: Fri, 13 Oct 2017 12:37:10 GMT
Last-Modified: Thu, 14 Sep 2017 18:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Age: 159
Cache-Control: public, max-age=3600
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1512
Md5:    f0face2803929896766489beb403daed
Sha1:   6670aacb37bac6bb335ce13cb4d8f427f567e222
Sha256: 4702156d6e0ba94a770ce765d30be717a51be393b2f34fcdb9ac237e091adbe1
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:49 GMT
Expires: Tue, 17 Oct 2017 11:39:49 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    d08de8f1df097dfa86476d167c16db0b
Sha1:   bb3dabcf8372a92be2323159722ea3e28b0bd553
Sha256: 196cf7a568b969c0a41487aa4671e4dca20b0ab22ae5993f538927a54e344c84
                                        
                                            GET /js/rpc:shindig_random.js?onload=init HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "862447553fc7f21eefa0f5321e562c86"
Expires: Fri, 13 Oct 2017 11:39:49 GMT
Date: Fri, 13 Oct 2017 11:39:49 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   5456
Md5:    ac397d26c01a6b9c4c4d6abbf610a356
Sha1:   1a8c65bc3c48432c46b2310760c418447d2c3a2a
Sha256: 06d9001b61ee40837e6221e22b1b50401463180d73d293a96418bdebd935fa1d
                                        
                                            GET /img/widgets/s_bottom.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 172
Date: Tue, 10 Oct 2017 13:53:14 GMT
Expires: Tue, 17 Oct 2017 13:53:14 GMT
Last-Modified: Mon, 09 Oct 2017 18:24:16 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 251196
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 144 x 3, 4-bit colormap, non-interlaced
Size:   172
Md5:    a9bbd1bf495055e06e61aec7f8c1b6c4
Sha1:   491c1a006da8a9eea4f3d1bb27e5815ab66a9f45
Sha256: 91fe35689444e53c1bf3e04f24c154fa0468be9edd3c84344f9f64c2eff89eeb
                                        
                                            GET /translate_static/css/translateelement.css HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3619
Date: Fri, 13 Oct 2017 10:44:26 GMT
Expires: Fri, 13 Oct 2017 11:44:26 GMT
Last-Modified: Tue, 03 Jan 2017 23:15:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=3600
Age: 3324
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3619
Md5:    026feece41808720d7daf983e1aeecad
Sha1:   277a95ad77e6bd2a3be17ea406628fa24c771379
Sha256: 07805211e21a7433cc8c05f820a0f86aca292d9139828a97196540ec60ccfdad
                                        
                                            GET /maps/ms?msa=0&msid=217323840413545027761.0004b3541941f4b47c108&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed HTTP/1.1 
Host: maps.google.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.163
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:39:50 GMT
Location: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info.", CP="This is not a P3P policy! See g.co/p3phelp for more info."
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: NID=114=ebw674IjnNaLX7hJPGqbYkActW6R_U0UsFC1HNhE94ToU5WGR8d13mYnmWpp-VkcsqTjJ0YAZecHQj2m1hzF62JPdPDO6ulUrMGDQKJPovQrGPRro1noAAtKhgTmrxH8;Domain=.google.com.my;Path=/;Expires=Sat, 14-Apr-2018 11:39:50 GMT;HttpOnly NID=114=d6dSnaWP0dw39DboQ_hXWMhn1hMIcKbGW_Sr5MpHRU2Ko2K-jfiu3Gqdp-1MIc1MpjI5UvWpiqKKkG9HwXWD6h1k1hbIcuIWjP3AXajcyne04040v5kAzlZBAZ-QjZne;Domain=.google.com.my;Path=/;Expires=Sat, 14-Apr-2018 11:39:50 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   290
Md5:    85d31b4bf87c46eb0bc00d841b586c6f
Sha1:   63dfa3b8b8b59b2c2023d8ac549979a678671ae9
Sha256: 2741e077edaf0aa3908d103cf59765214e93149fc753e5daf39f295d7acc5319
                                        
                                            GET /element/TE_20170911_00/e/js/element/element_main.js HTTP/1.1 
Host: translate.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         173.194.220.95
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Length: 87012
Date: Thu, 12 Oct 2017 20:18:40 GMT
Expires: Fri, 12 Oct 2018 20:18:40 GMT
Last-Modified: Mon, 11 Sep 2017 09:50:21 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 55270
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   87012
Md5:    cbb78a2bb94e17d53ca2e6bf22af703d
Sha1:   f5e1c8525c0ee3451c1b198231c546a40656ab4e
Sha256: 815ef68dd0a3233c6a7a3522d2c62b05a2aaba850c7aac1f056dfa952ab707ff
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=https%3A%2F%2Fwww.blogger.com&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 16477
Date: Thu, 12 Oct 2017 18:17:59 GMT
Expires: Fri, 12 Oct 2018 18:17:59 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 62511
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   16477
Md5:    456c107e71e6baabd35161f27bac6414
Sha1:   260083dd624f008fc37e8b3b450e01408e3c16b5
Sha256: e686866e5db4c98de53f2fe74970d3146da36eb3a0ce4b14ba2f6e583cbbe5cc
                                        
                                            POST /ocsp HTTP/1.1 
Host: clients1.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 107
Content-Type: application/ocsp-request
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Fri, 13 Oct 2017 11:39:51 GMT
Expires: Tue, 17 Oct 2017 11:39:51 GMT
Cache-Control: public, max-age=345600
Server: ocsp_responder
Content-Length: 463
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   463
Md5:    f99c8fd2106061228e04e44345827db9
Sha1:   3d8a35a963b5d0481e02b6dad5feb9be33471993
Sha256: 57b59a56c619c145d4800ded6e727e32aa7a48e271c8708424527a7576c14f04
                                        
                                            GET /embed/ulMXaoOK5lk HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         172.217.22.174
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache
Expires: Tue, 27 Apr 1971 19:44:06 EST
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Location: https://www.youtube.com/embed/ulMXaoOK5lk
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Content-Length: 0
X-Content-Type-Options: nosniff
Date: Fri, 13 Oct 2017 11:39:52 GMT
Server: YouTube Frontend Proxy
Set-Cookie: VISITOR_INFO1_LIVE=6RqLK4Ks72c; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 23:32:52 GMT; httponly YSC=d3aaSXxG8Ro; path=/; domain=.youtube.com; httponly VISITOR_INFO1_LIVE=6RqLK4Ks72c; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 23:32:52 GMT; httponly


--- Additional Info ---
                                        
                                            GET /hitparade.php?pagexiti=geolive HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: monpays=NO; pays=Norway; idcompteurcc_2039437=done; online_idcompteurcc_2039437=done; online_2039437=1

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:52 GMT
Server: Apache
X-Powered-By: PHP/5.2.17-pl0-gentoo
Cache-Control: max-age=180
Expires: Fri, 13 Oct 2017 11:42:52 GMT
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  HTML document text
Size:   1016
Md5:    dca3d5f2db667d348f04ed14ddb4a79b
Sha1:   d3c3ab83c9dc6924c2780de2c52b62788e316c83
Sha256: 957871bc69ef5bcc759c802d261fd24903c2b2cf8f01bdc85f583c1949043905
                                        
                                            GET /geocompteur/swf/geolive_caroussel.swf?id=2039437&online=1 HTTP/1.1 
Host: cdnovh.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         46.105.203.40
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Fri, 13 Oct 2017 11:39:52 GMT
Content-Length: 5197
Last-Modified: Tue, 04 Mar 2014 20:21:06 GMT
Cache-Control: max-age=3600
Expires: Fri, 13 Oct 2017 12:39:52 GMT
X-CDN-Pop: sbg
X-CDN-Pop-IP: 137.74.120.32/27
X-Cacheable: Cacheable
Accept-Ranges: bytes
X-IPLB-Instance: 4764


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 8
Size:   5197
Md5:    daf4e2aa92045a3017ee99319b0c17c7
Sha1:   5774d013da95e4e5d083bc9404b8bcf87d4dae9a
Sha256: 043fb3313a479cbd1361e73e57d7acbbb9cd086e5b84e61f2576f1ff6b6d964a
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8191
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58090
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8191
Md5:    b0bd9e3d50772d490411c2ca7da0507b
Sha1:   7ac7ef7c35d0939da2b9324f1b6d4517dfe1ac11
Sha256: be8fc68d1c599657b90baa2b8e29e2f4f03d0113315c19aa1e16792df373cd9c
                                        
                                            GET /hit.xiti?s=281802&p=geolive&hl=13x39x52&r=1176x885x24x24&ref=http://kkbnpontian.blogspot.no/ HTTP/1.1 
Host: logv33.xiti.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www.widgeo.net/hitparade.php?pagexiti=geolive
Cookie: idrxvr=C9648B2D-31E1-4C0E-ABC3-D3D2B1BA8039

                                         
                                         62.161.94.220
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Content-Length: 373
Last-Modified: Thu, 30 Nov 2006 13:52:45 GMT
Accept-Ranges: bytes
Etag: "58b630d08614c71:0"
Server: Microsoft-IIS/7.5
X-Powered-By: ASP.NET
Date: Fri, 13 Oct 2017 11:39:51 GMT
Connection: close


--- Additional Info ---
Magic:  GIF image data, version 89a, 39 x 25
Size:   373
Md5:    29cb2a1e585dff1f4282449fdbbab2d7
Sha1:   075d147195f9dba1862a6f3990d219d7c4389225
Sha256: 86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
                                        
                                            GET /ss.js HTTP/1.1 
Host: synad2.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 13 Oct 2017 11:39:52 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Location: https://eccdn1.synad3.nuffnang.com.my/ss.js
Cache-Control: max-age=86400
Expires: Sat, 14 Oct 2017 11:39:52 GMT
Content-Length: 227
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   227
Md5:    8ff1a0eb8f762f6fb03a7c2431376456
Sha1:   c3a621da02354e610fe4a06e35d59fa264ae6400
Sha256: d09e5e06b8a4b9f033560f99e37dd415be2eee85d0fa34a8353b00a903cd0cbb
                                        
                                            GET /geocompteur/img/geocaroussel_bleu.png HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: monpays=NO; pays=Norway; idcompteurcc_2039437=done; online_idcompteurcc_2039437=done; online_2039437=1

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 11:39:52 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:08:37 GMT
Accept-Ranges: bytes
Content-Length: 2942
Cache-Control: max-age=3600
Expires: Fri, 13 Oct 2017 12:39:52 GMT
Connection: close


--- Additional Info ---
Magic:  PNG image, 79 x 79, 8-bit/color RGBA, non-interlaced
Size:   2942
Md5:    24bcc2672be129f7f2df54411af9c109
Sha1:   c125a0d4fd839d5cfcd47d6595b66153774e60b8
Sha256: 402d03c70f30ce5a0cfae3aa9e6d54d60a78de7de6af989ca4413b7eac0a473c
                                        
                                            GET /crossdomain.xml HTTP/1.1 
Host: www.widgeo.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: monpays=NO; pays=Norway; idcompteurcc_2039437=done; online_idcompteurcc_2039437=done; online_2039437=1

                                         
                                         91.191.155.69
HTTP/1.1 200 OK
Content-Type: application/xml
                                        
Date: Fri, 13 Oct 2017 11:39:52 GMT
Server: Apache
Last-Modified: Tue, 04 Mar 2014 20:07:14 GMT
Accept-Ranges: bytes
Content-Length: 120
Cache-Control: max-age=3600
Expires: Fri, 13 Oct 2017 12:39:52 GMT
Connection: close


--- Additional Info ---
Magic:  XML document text
Size:   120
Md5:    14194a39247ff494538e5b5425bf058e
Sha1:   5980b085a48ec85fb91a85d0ac83351da4dfbef9
Sha256: 4eb895260a2e7a0439dbaf831c07042a4d441146361d068f34283348db966881
                                        
                                            GET /maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.164
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 13 Oct 2017 11:39:52 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2222
Md5:    5a7d8d4785b50dd6ac331fdccc2b61bb
Sha1:   f113f2d14333ed7d0930a5fce3954203f78a90a0
Sha256: eb671314b4d775addca09f8c53c9dcd228d94f02cba8fcd0472d65847e60fe33
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ms&origin=http%3A%2F%2Fkkbnpontian.blogspot.no&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F2014%2F08%2Fsayonara-tomo.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:52 GMT
Date: Fri, 13 Oct 2017 11:39:52 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4040
Md5:    6ce1b140d87f22a1d4321ee5f6712218
Sha1:   45aba2a85a0f0a938cf6b2a275348e22f732c6ac
Sha256: b30e46deae1698282112707116478344d3d8a5b7892ec37227a32e5affc5d609
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=auth/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18760
Date: Thu, 12 Oct 2017 19:31:42 GMT
Expires: Fri, 12 Oct 2018 19:31:42 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58090
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18760
Md5:    2d797cea7686e8bfdf687e7e3f1185f8
Sha1:   18508fd8d4d7d1a60260f374ff44143287448b43
Sha256: ff5a84ffa0a43f93e1ea6bfd87c95185fd97fdbf8e9c890a9c3bcf854a4aa8af
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ms&origin=http%3A%2F%2Fkkbnpontian.blogspot.no&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F2014%2F06%2Fprogram-karnival-kerjaya-daerah-pontian.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:53 GMT
Date: Fri, 13 Oct 2017 11:39:53 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4055
Md5:    834ed953a9db876a55ef4a2ab153064a
Sha1:   30ccc1af07e4452510b39add2814cd07cae0186a
Sha256: abfbe35ad784c4631da5ee5f4b07b8a2305b3759c5a82ad539a33b4f2b86499a
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ms&origin=http%3A%2F%2Fkkbnpontian.blogspot.no&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F2014%2F06%2Fundangan-anugerah-lagu-patriotik-johor.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:53 GMT
Date: Fri, 13 Oct 2017 11:39:53 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4058
Md5:    9cbea4e9806cdb1b44d6fa214715a0a9
Sha1:   199031d01eba63343052a25df16428af22e0eb92
Sha256: 2099453a8dc413419137c2dfd062d3421f85612c5b319fc6698d5bbe824c8e51
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ms&origin=http%3A%2F%2Fkkbnpontian.blogspot.no&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F2014%2F08%2Fmajlis-khatam-al-quran-dan-majlis.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:54 GMT
Date: Fri, 13 Oct 2017 11:39:54 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4051
Md5:    24739707aee50c9a690b77bae461df72
Sha1:   95ce4c35651d653c8230e422b529e9b16d1fbb9c
Sha256: e96ec1bd5c57e097c5948da1a265ef100020c6c2cacbee1b95fde1d9980aaf09
                                        
                                            GET /mapspro/_/ss/k=mapspro.gmeviewer.-1ikpyiqxgdpum.L.G.O/d=0/rs=ABjfnFUr-uBVx7DX75X8rSELXe9oE3UEwg HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 40681
Date: Fri, 13 Oct 2017 03:41:51 GMT
Expires: Sat, 13 Oct 2018 03:41:51 GMT
Last-Modified: Mon, 09 Oct 2017 19:35:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 28683
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   40681
Md5:    cf9d7c35ef3e34f9a1e024e656c6c113
Sha1:   682265d38530d221591415d95fc86c624471e785
Sha256: b23f3989820aad830d97df25a34e2949ed88abb5d9a67f98ac3cb1ff52d76691
                                        
                                            GET /se/0/_/+1/fastbutton?usegapi=1&annotation=inline&width=300&size=medium&source=blogger%3Ablog%3Aplusone&hl=ms&origin=http%3A%2F%2Fkkbnpontian.blogspot.no&url=http%3A%2F%2Fkkbnpontian.blogspot.com%2F2014%2F06%2Fgerbang-kerjaya.html&gsrc=3p&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Vary: Accept-Encoding
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:54 GMT
Date: Fri, 13 Oct 2017 11:39:54 GMT
Cache-Control: private, max-age=3600
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   4042
Md5:    ca179dc0ba45a87b71fb7beac480fdf2
Sha1:   4c5c810ff4e8e5182776d383e5f106d7bdfa0b72
Sha256: ef435258c1c29b5dc2c075be877f1e59972296a269866ba4115a7e5d6a59ed18
                                        
                                            GET /ss.js HTTP/1.1 
Host: eccdn1.synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         110.4.42.161
HTTP/1.1 200 OK
Content-Type: application/javascript
                                        
Date: Fri, 13 Oct 2017 11:39:55 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Last-Modified: Wed, 04 May 2016 03:32:47 GMT
Etag: "17bf81be-f57-531fbe11ed5c0"
Accept-Ranges: bytes
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Cache-Control: max-age=29030400,public
Content-Length: 2184
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2184
Md5:    cef97900be105a54b53cc725435cf62b
Sha1:   246595a82558ced23c5be3bd3072400f698356d6
Sha256: 26c83ae4a6d236fe735d629f1c2187dcd4ed4b097b1f8bbb809262a82b46504e
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.no.m2rCJFJyJGQ.O/m=gapi_iframes_style_slide_menu/exm=auth,gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=AQ/rs=AGLTcCMZGXZwD7bR521s-ul1oChzQaGabg/cb=gapi.loaded_4 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2796
Date: Thu, 12 Oct 2017 19:31:43 GMT
Expires: Fri, 12 Oct 2018 19:31:43 GMT
Last-Modified: Thu, 12 Oct 2017 01:56:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, immutable, max-age=31536000
Age: 58093
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2796
Md5:    a0cb0280a2d32fb0dfb1f6aa54fc4506
Sha1:   7f639f15db9d088a82b7903a474ba7fd88986823
Sha256: 2f4c40a0a8410f3ed654b849712db8ac821cb6c0a7e48c830ad0600f5e144609
                                        
                                            GET /mapspro/_/js/k=mapspro.gmeviewer.en.ycF9m0jR3HE.O/m=gmeviewer_base/rt=j/d=0/rs=ABjfnFUwaZnPmZPAuPCf9QMNtsz9QzCIRg HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed

                                         
                                         172.217.22.163
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 194525
Date: Fri, 13 Oct 2017 03:57:37 GMT
Expires: Sat, 13 Oct 2018 03:57:37 GMT
Last-Modified: Mon, 09 Oct 2017 19:35:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 27739
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   194525
Md5:    8bde00a4769e05937edb1d77f8fcae23
Sha1:   284baf445854c4cbf6314080afa5f397c1fb72f9
Sha256: a441702a9deb01661683f8552d4f8f0b443f90ef0b8a68d5c5b87e0df5817616
                                        
                                            GET /ss.js HTTP/1.1 
Host: synad2.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 302 Found
Content-Type: text/html; charset=iso-8859-1
                                        
Date: Fri, 13 Oct 2017 11:39:56 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Location: https://eccdn1.synad3.nuffnang.com.my/ss.js
Cache-Control: max-age=86400
Expires: Sat, 14 Oct 2017 11:39:56 GMT
Content-Length: 227
Connection: close


--- Additional Info ---
Magic:  HTML document text\012 exported SGML document text
Size:   227
Md5:    8ff1a0eb8f762f6fb03a7c2431376456
Sha1:   c3a621da02354e610fe4a06e35d59fa264ae6400
Sha256: d09e5e06b8a4b9f033560f99e37dd415be2eee85d0fa34a8353b00a903cd0cbb
                                        
                                            GET /o/oauth2/postmessageRelay?parent=http%3A%2F%2Fkkbnpontian.blogspot.no&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.no.m2rCJFJyJGQ.O%2Fm%3D__features__%2Fam%3DAQ%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCMZGXZwD7bR521s-ul1oChzQaGabg HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: NID=114=icoGXOhdqi9HZeI68-e70bcVzLU8XD1KOmGUAhRq2_lrcr5yV8-lUfeVnTjhOkQ9e-BnQyA6RSLDS4O17v72qgSO7Ww8kZwpvFD71xDusmsjGNnj8kM7OWMY7nK3seQs

                                         
                                         172.217.22.173
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Sat, 14 Oct 2017 11:39:55 GMT
Date: Fri, 13 Oct 2017 11:39:55 GMT
Cache-Control: public, max-age=86400
Content-Security-Policy-Report-Only: script-src 'unsafe-inline' https: http:;object-src 'none';base-uri 'none';report-uri /_/cspreport
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   362
Md5:    294db80d63c77422cca7eb7d07c7a97b
Sha1:   7cafc21615971ee9465ade42cefcfaa107e6d590
Sha256: 617d39875a629553df7731991ce9658a25a651a3771c0df3c9ec4011dabebc3a
                                        
                                            GET /track/banner/skyscraper/78a7f72c22fd5c4d5ab69e9f372e559d/http%253A%252F%252Fkkbnpontian.blogspot.no%252F/visit/novisit/async/1 HTTP/1.1 
Host: synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:39:56 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
P3P: CP="NOI DSP CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 1270
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   1270
Md5:    affbc969dda61aa67e1a93e533cc53ea
Sha1:   a445c8889cf579ab0e357a29b2cbe082d64aafac
Sha256: c60be757828c439ecd6c7ecd719748073e86c0d3fabadf3baedfa5488cabec66
                                        
                                            GET /assets/ads/1101591/1153991.png HTTP/1.1 
Host: eccdn1.static.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         93.184.221.133
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Cache-Control: max-age=29030400,public
Date: Fri, 13 Oct 2017 11:39:57 GMT
Etag: "af3002d-4e19-52b939dd93d00"
Last-Modified: Fri, 12 Feb 2016 14:38:12 GMT
Server: ECAcc (arn/45D2)
X-Cache: HIT
Content-Length: 19993


--- Additional Info ---
Magic:  PNG image, 160 x 160, 8-bit/color RGBA, non-interlaced
Size:   19993
Md5:    3593ed078760e6a44919c712611f712a
Sha1:   a06e29ebcaba93a92fe1ccd704e102362c9b8e70
Sha256: e37b9adfb28972dd650e567684453c1f2026213b278f0fed8c61b587e3ff1af4
                                        
                                            GET /pixel;r=957150896;labels=synad_my;rf=3;a=p-KAmbFRXjwDgHE;url=http%3A%2F%2Fkkbnpontian.blogspot.no%2F;fpan=1;fpa=P0-995153613-1507894797150;ns=0;ce=1;cm=;ref=;je=1;sr=1176x885x24;enc=n;dst=1;et=1507894797148;tzo=-120;ogl=url.http%3A%2F%2Fkkbnpontian%252Eblogspot%252Ecom%2F%2Ctitle.KKBN%20PONTIAN%2Cdescription. HTTP/1.1 
Host: pixel.quantserve.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         95.172.94.62
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Connection: close
Set-Cookie: mc=59e0a60d-50497-95cd2-f843f; expires=Tue, 13-Nov-2018 11:39:57 GMT; path=/; domain=.quantserve.com
P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAo PSDo OUR SAMa IND COM NAV"
Cache-Control: private, no-cache, no-store, proxy-revalidate
Pragma: no-cache
Expires: Fri, 04 Aug 1978 12:00:00 GMT
Content-Length: 35
Date: Fri, 13 Oct 2017 11:39:57 GMT
Server: QS


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    55d25e9dc950d5db4d53a3b195c046c6
Sha1:   75e91ae3e549dab12ed1c9787ade9131aef1c981
Sha256: a0d3a0aff7dc3bf32d2176fc3dcda6e7aba2867c4f4d1f7af6355d2cfc6c44f8
                                        
                                            GET /widgets/alhabib/3D-Rotation---Islamic-Hijri-Calendar-2829-8192_134217728.widget?__install_id=1324256753627&__view=expanded HTTP/1.1 
Host: www.widgipedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         38.113.119.45
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:39:57 GMT
Last-Modified: Sun, 11 Sep 2016 12:09:18 GMT
Etag: "69106-2b-53c3a3fb2b780"
Accept-Ranges: bytes
Content-Length: 43
Keep-Alive: timeout=15, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   43
Md5:    d3e941fe204d0a9cc5b92782bbf882c8
Sha1:   682a77b3dd546b61ae894285128ffba13a33cf7d
Sha256: 281c5ae8bf152f644e12a943ec5d59681e1950c54fb6c0b3cc77539bf5e69340
                                        
                                            GET /track/beacon/skyscraper/1153991/8511452/kkbnpontian.blogspot.no HTTP/1.1 
Host: synad3.nuffnang.com.my
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: b_leaderboard=cookie_id%3DZGVhY2NhOWQwMTkzMGRmMmQxOTk5M2%26blog_8511452%3D1507894788; bl_leaderboard=long_lived_cookie_id%3DYTEwZDFkMDJjZGY0MWMwN2YzMDJjZW%26blog_8511452%3D1507894788; a_leaderboard=cookie_id%3DMDM2YjU5OGFiMTg0NDk5N2ZlYzRjND%26ad_8511452_1101611%3D1507894788; al_leaderboard=long_lived_cookie_id%3DZjdjZWY3NWQ5YmI5ODM1NTQxMmExMz%26ad_8511452_1101611%3D1507894788

                                         
                                         110.4.44.125
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:57 GMT
Server: Apache/2.2.17 (Unix) mod_ssl/2.2.17 OpenSSL/0.9.8e-fips-rhel5 mod_gnutls/0.2.0
Cache-Control: no-store, no-cache, must-revalidate, max-age=0
P3P: CP="NOI DSP CURa ADMa DEVa TAIa OUR BUS IND UNI COM NAV INT"
Set-Cookie: a_skyscraper=cookie_id%3DYmZjZjA4NzM5ZmY2YTU1MTdlZWY4Yz%26ad_8511452_1101591%3D1507894797; expires=Sat, 13-Oct-2018 11:39:57 GMT; path=/; domain=.nuffnang.com.my al_skyscraper=long_lived_cookie_id%3DYWYxMzcwZjUxZWExMGYzMDY0NTBjOT%26ad_8511452_1101591%3D1507894797; expires=Sat, 13-Oct-2018 11:39:57 GMT; path=/; domain=.nuffnang.com.my
Vary: Accept-Encoding,User-Agent
Content-Encoding: gzip
Content-Length: 21
Connection: close


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   21
Md5:    1a60c330fb42841e8dcf3cd507a70bfc
Sha1:   9ba9c8d18f6be7851b4d88e3b608a9979f56a083
Sha256: 7fa5a93246b84491c51c9c8b4493d30518932a2bb45d67df757bc8a332b1f2d1
                                        
                                            GET /widget/?rssmikle_url=http%3A%2F%2Fwww.iluvislam.com%2Findex.php%3Fformat%3Dfeed%26type%3Drss&rssmikle_frame_width=300&rssmikle_frame_height=200&rssmikle_target=_blank&rssmikle_font_size=12&rssmikle_border=on&rssmikle_css_url=http%3A%2F%2Ffeed.mikle.com%2Fsample%2Fblue160_500.css&rssmikle_title=on&rssmikle_title_bgcolor=%230066FF&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%23FFFFFF&rssmikle_item_title_length=20&rssmikle_item_title_color=%23666666&rssmikle_item_border_bottom=on&rssmikle_item_description=on&rssmikle_item_description_length=40&rssmikle_item_description_color=%23666666&rssmikle_item_description_tag=on&rssmikle_item_podcast=off& HTTP/1.1 
Host: feed.mikle.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         34.198.118.202
HTTP/1.1 500 Internal Server Error
Content-Type: text/html;charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:58 GMT
Content-Length: 743
Connection: keep-alive
Server: nginx/1.8.1


--- Additional Info ---
Magic:  HTML document text
Size:   743
Md5:    147cae3c302d71763790ff31becf0f72
Sha1:   6c87416ecf54412687198f97fbd3059b22adc473
Sha256: 901d6ea2dd14d358267c9dfa8591a8226607f0c3565970847a787ef398ffee98

Alerts:
  IDS:
    - ET WEB_CLIENT Possible HTTP 500 XSS Attempt (External Source)
    - ET WEB_CLIENT Possible HTTP 500 XSS Attempt (External Source)
                                        
                                            GET /box/?boxid=667878&boxtag=w3nj49&sec=form HTTP/1.1 
Host: www6.cbox.ws
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         104.24.105.247
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dcf1bb4654f1a306a4e28fd90efd65fca1507894798; expires=Sat, 13-Oct-18 11:39:58 GMT; path=/; domain=.cbox.ws; HttpOnly
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Sat, 13 Oct 2018 11:39:58 GMT
Cache-Control: public, max-age=31536000
X-Srv: 6
Content-Encoding: gzip
Server: cloudflare-nginx
CF-RAY: 3ad2057832e64261-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2339
Md5:    f29847cfe677ec7e1dc1fe06ed75bf04
Sha1:   5d440190a6089997b46795a4080378601fc26cef
Sha256: 6d0678e4ad9b4cca8092ba462b8eaf3f3a4f59e6d98743c9811bf3e1193f40e5
                                        
                                            GET /box/?boxid=667878&boxtag=w3nj49&sec=main HTTP/1.1 
Host: www6.cbox.ws
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         104.24.105.247
HTTP/1.1 200 OK
Content-Type: text/html
                                        
Date: Fri, 13 Oct 2017 11:39:58 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: __cfduid=dd7dbcfdd598ac402ceb1fd403d33e0681507894798; expires=Sat, 13-Oct-18 11:39:58 GMT; path=/; domain=.cbox.ws; HttpOnly
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 17 Nov 2004 05:00:00 GMT
Cache-Control: private, must-revalidate, max-age=0
Last-Modified: Fri, 13 Oct 2017 11:39:58 GMT
X-Srv: 6
Content-Encoding: gzip
Server: cloudflare-nginx
CF-RAY: 3ad2057836da4279-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   2328
Md5:    e9f71986c79ac9dc9f91da5c3f23e8e6
Sha1:   0020c30158f45213012402fa1f07ce9588119c33
Sha256: 5e6f3e3c275e987c45bd525a3988605d3f356e8145dfcdf852302728a939506d
                                        
                                            GET /images/widget/button_back.gif HTTP/1.1 
Host: bizinformation.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         185.53.177.20
HTTP/1.1 400 Bad Request
Content-Type: text/html; charset=UTF-8
                                        
Server: nginx
Date: Fri, 13 Oct 2017 11:38:29 GMT
Transfer-Encoding: chunked
Connection: keep-alive
X-Blocked: 11015.10


--- Additional Info ---
Magic:  ASCII text, with no line terminators
Size:   20
Md5:    64b3d0bcb16e406cdd665ec49fefb7f1
Sha1:   8da5d8ac9123e50bbd4293b111f6f640f864256b
Sha256: cfe229c58e25f36ffab9053add1dcfdf3abe1cb26b7b0a3d22e9514f757b98d5
                                        
                                            GET /images/banner_125x125_01.gif HTTP/1.1 
Host: www.trafficdigger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         144.217.82.104
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:39:58 GMT
Server: Apache
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Location: http://trafficdigger.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
                                        
                                            GET /movie/mov-1/mov9.cur HTTP/1.1 
Host: cur.cursors-4u.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         173.208.177.162
HTTP/1.1 200 OK
Content-Type: application/octet-stream
                                        
Server: nginx/1.10.1
Date: Fri, 13 Oct 2017 16:46:31 GMT
Content-Length: 4286
Last-Modified: Wed, 27 Feb 2013 18:12:12 GMT
Connection: keep-alive
Etag: "512e4c7c-10be"
Accept-Ranges: bytes


--- Additional Info ---
Magic:  Lotus 1-2-3
Size:   4286
Md5:    a957bc3e1cac074c05cdaadd323b626f
Sha1:   d3d646481af30a68f111fcc51be13eb4fac759d0
Sha256: b48c22a3a2a6bbdafddcbbce782cc252af9f34dc6ce74c4e12091bf0fa6f6c1e
                                        
                                            GET /getsignimage.php?id=3&font_color= HTTP/1.1 
Host: api.checkingtools.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         155.94.65.43
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Server: nginx/1.6.2
Date: Fri, 13 Oct 2017 11:58:14 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Jul 1997 05:00:00 GMT
Last-Modified: Fri, 13 Oct 2017 11:58:14 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache


--- Additional Info ---
Magic:  PNG image, 160 x 160, 8-bit/color RGBA, non-interlaced
Size:   21761
Md5:    83ab9e60fa994fc9fb294f4a5585f3f4
Sha1:   6de77e31e7e8310a6b6368642277feebe72486e1
Sha256: 584613fb76ea3826ad8357a1c2fd37864cf5a0eca5ac444dcd90acb7e5877682
                                        
                                            GET /tracker/logs.php?tc=2&pidnVar2=324468810&stlVar2=1206&erDu=0&erCk=0&prtVar2=3&agt=Mozilla/5.0%20%28Windows%3B%20U%3B%20Windows%20NT%206.1%3B%20en-US%3B%20rv%3A1.9.2.13%29%20Gecko/20101203%20Firefox/3.6.13&url=http%3A//kkbnpontian.blogspot.no/&resW=1176&resH=885&rurl=&tgh01=KKBN%20PONTIAN&tgh06=&tgh07=undefined&tgh09=24&tgh11=true&tgh12=10.0%20r45&tgh13=true&tgh19=en-US&scvVar2=12&_T2rand=0.8096644112986773&vID=&vDs=&vQt=&vSb=&vTx=&vSh=&vTt=&vM1=&vM2=&rJsAPI=0&tFShnN=&tFShnU= HTTP/1.1 
Host: www.tracemyip.org
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         162.221.184.93
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:39:58 GMT
Server: Apache
X-Powered-By: PHP/5.3.29
P3P: CP="IDC DSP COR CURa ADMa OUR IND PHY ONL COM STA", cp=ALL DSP COR CURa ADMa DEVa CONa SAMa BUS", policyref="/w3c/p3p.xml"
Access-Control-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:39:59 GMT
Pragma: no-cache
Cache-Control: no-transform
Etag: PUB1507894799
Last-Modified: Fri, 13 Oct 2017 11:39:58 GMT
X-XSS-Protection: 1; mode=block
Connection: close
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  GIF image data, version 89a, 122 x 24
Size:   686
Md5:    e0a815289654b0ee1ed3397c4c730dc3
Sha1:   d493e82da6977c1b96e643376d90132ab9426c12
Sha256: 5af0366bbc2609c7ea8e356e166df9f67c33bff4812c9a3f64c4756418d4ca4c
                                        
                                            GET /styles/v4s12_2.css?20160907 HTTP/1.1 
Host: static.cbox.ws
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www6.cbox.ws/box/?boxid=667878&boxtag=w3nj49&sec=form
Cookie: __cfduid=dcf1bb4654f1a306a4e28fd90efd65fca1507894798

                                         
                                         104.24.105.247
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Date: Fri, 13 Oct 2017 11:40:00 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Etag: W/"57d00e83-8f1"
Expires: Mon, 11 Oct 2027 11:40:00 GMT
Cache-Control: public, max-age=315360000
Content-Encoding: gzip
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3ad20584d7504285-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   792
Md5:    cffb77cf89cb1479a0aba5e0231d88c5
Sha1:   d73aed829210d582d568d5e1c18a8eb168b4f806
Sha256: 8d6ee5680cbf2f0f919f3420483e7438b8caa80025c6ece43dc3078a44d6d233
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://feed.mikle.com/widget/?rssmikle_url=http%3A%2F%2Fwww.iluvislam.com%2Findex.php%3Fformat%3Dfeed%26type%3Drss&rssmikle_frame_width=300&rssmikle_frame_height=200&rssmikle_target=_blank&rssmikle_font_size=12&rssmikle_border=on&rssmikle_css_url=http%3A%2F%2Ffeed.mikle.com%2Fsample%2Fblue160_500.css&rssmikle_title=on&rssmikle_title_bgcolor=%230066FF&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%23FFFFFF&rssmikle_item_title_length=20&rssmikle_item_title_color=%23666666&rssmikle_item_border_bottom=on&rssmikle_item_description=on&rssmikle_item_description_length=40&rssmikle_item_description_color=%23666666&rssmikle_item_description_tag=on&rssmikle_item_podcast=off&

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Fri, 13 Oct 2017 09:51:48 GMT
Expires: Fri, 13 Oct 2017 11:51:48 GMT
Last-Modified: Thu, 28 Sep 2017 22:31:34 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 14089
Age: 6492
Cache-Control: public, max-age=7200


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14089
Md5:    7b1f226d2f5f01597e62889513d4bc8c
Sha1:   ff78ed289a65fa3c91b0ff470fb0c6536bcab745
Sha256: 80eeeea7639a7b6a6205b8862b9060a7c60da47855e8dd9c74e64b0a0fce8b9a
                                        
                                            GET /smilies/1/smile.gif HTTP/1.1 
Host: static.cbox.ws
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www6.cbox.ws/box/?boxid=667878&boxtag=w3nj49&sec=main
Cookie: __cfduid=dd7dbcfdd598ac402ceb1fd403d33e0681507894798

                                         
                                         104.24.105.247
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Date: Fri, 13 Oct 2017 11:40:00 GMT
Content-Length: 936
Connection: keep-alive
Etag: "3f6d82de-3a8"
Expires: Mon, 11 Oct 2027 11:40:00 GMT
Cache-Control: public, max-age=315360000
CF-Cache-Status: HIT
Vary: Accept-Encoding
Accept-Ranges: bytes
Server: cloudflare-nginx
CF-RAY: 3ad20584f7584285-OSL


--- Additional Info ---
Magic:  GIF image data, version 89a, 15 x 15
Size:   936
Md5:    7558079291febbee7effe2bd4b70bea2
Sha1:   3dde9459b5b61c678275bc61bf9ecb12495b8bbe
Sha256: 4015f87a9931d687de36a2b85dcbf0b43aa1babf027bb4aa50d70667c97ac402
                                        
                                            GET / HTTP/1.1 
Host: trafficdigger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         144.217.82.104
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:40:00 GMT
Server: Apache
Link: <http://trafficdigger.com/wp-json/>; rel="https://api.w.org/"
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 6912
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   6912
Md5:    e1b1cac5c4807a489799afefb126aae7
Sha1:   7cc2702ac23c027db4ce6f652057ca9103e58bf2
Sha256: f08e9d26d0e17e98bb4285e0cd2e0dfe661088dd5c16e795bcf0ba27d33d871f
                                        
                                            GET /widgets/alhabib/3D-Rotation---Islamic-Hijri-Calendar-2829-8192_134217728.widget?__install_id=1324256753627&__view=expanded HTTP/1.1 
Host: www.widgipedia.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
If-Modified-Since: Sun, 11 Sep 2016 12:09:18 GMT
If-None-Match: "69106-2b-53c3a3fb2b780"

                                         
                                         38.113.119.45
HTTP/1.1 304 Not Modified
                                        
Date: Fri, 13 Oct 2017 11:40:01 GMT
Connection: Keep-Alive
Keep-Alive: timeout=15, max=99
Etag: "69106-2b-53c3a3fb2b780"


--- Additional Info ---
                                        
                                            GET /wildfire/swf/wildfirehost3.swf HTTP/1.1 
Host: cdn.gigya.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         91.135.34.104
HTTP/1.1 404 Not Found
                                        
Server: Microsoft-IIS/7.5
X-Server: web515
P3P: CP="IDC COR PSA DEV ADM OUR IND ONL"
Content-Length: 0
Cache-Control: max-age=900
Expires: Fri, 13 Oct 2017 11:55:01 GMT
Date: Fri, 13 Oct 2017 11:40:01 GMT
Connection: keep-alive


--- Additional Info ---
                                        
                                            GET /jsc/jsc_1502443193.js HTTP/1.1 
Host: static.cbox.ws
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://www6.cbox.ws/box/?boxid=667878&boxtag=w3nj49&sec=form
Cookie: __cfduid=dd7dbcfdd598ac402ceb1fd403d33e0681507894798

                                         
                                         104.24.105.247
HTTP/1.1 200 OK
Content-Type: application/x-javascript
                                        
Date: Fri, 13 Oct 2017 11:40:01 GMT
Content-Length: 16841
Connection: keep-alive
Last-Modified: Fri, 11 Aug 2017 09:20:06 GMT
Etag: "598d76c6-41c9"
Content-Encoding: gzip
Expires: Mon, 11 Oct 2027 11:40:01 GMT
Cache-Control: public, max-age=315360000
Access-Control-Allow-Origin: *
CF-Cache-Status: HIT
Vary: Accept-Encoding
Server: cloudflare-nginx
CF-RAY: 3ad2058cb13a4285-OSL


--- Additional Info ---
Magic:  gzip compressed data, from Unix, last modified: Fri Aug 11 11:20:06 2017, max compression
Size:   16841
Md5:    b509c4193249ab47876e15d132c5bf38
Sha1:   1c936b90ed8f7cd5472743e83dcdb1677291a017
Sha256: 9eea36dbb1ffd27389c16258a2044c1d4601cc56f63a22de511f93d8883ca939
                                        
                                            GET /files/55/2_1320395169_51223_155_0_468_60_6_2_55.swf HTTP/1.1 
Host: h2.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         52.70.70.118
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Fri, 13 Oct 2017 11:40:01 GMT
Server: Apache
Last-Modified: Wed, 18 Nov 2015 07:52:47 GMT
Etag: "433f9-8c7a-524cbeda6997f"
Accept-Ranges: bytes
Content-Length: 35962
Connection: close


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 6
Size:   35962
Md5:    a9b66d85f47782b6dd9a14a5bf942369
Sha1:   378f2357ebeec6c0f04687bb60b1fe556a9a198d
Sha256: 0935f7783974e5ea48bb8c4c7188a1784503175c090c5cf6b02ef4774c3e9e4f
                                        
                                            GET /b/stats?style=BLACK_TRANSPARENT&timeRange=ALL_TIME&token=c9k_F18BAAA.zn8pzhLTRlenRXYvwr9NmNoc0hmmKEkCT-fN88s_0CU.dvdvOjX1OsiGmTJ053VcSA HTTP/1.1 
Host: kkbnpontian.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: __qca=P0-995153613-1507894797150

                                         
                                         172.217.22.161
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Content-Encoding: gzip
Date: Fri, 13 Oct 2017 11:40:01 GMT
Expires: Fri, 13 Oct 2017 11:40:01 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 218
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   218
Md5:    b17dcc94e1dd539f9fd9b4c260a0d325
Sha1:   e319f0bdf806962e50a86a5ce048c7dc45a28310
Sha256: 7376d57ae8347a8e9a3522e98c99971fc97c4cddcec0943ef2b294d11e00d212
                                        
                                            GET /r/collect?v=1&_v=j64&a=1474532944&t=pageview&_s=1&dl=http%3A%2F%2Ffeed.mikle.com%2Fwidget%2F%3Frssmikle_url%3Dhttp%253A%252F%252Fwww.iluvislam.com%252Findex.php%253Fformat%253Dfeed%2526type%253Drss%26rssmikle_frame_width%3D300%26rssmikle_frame_height%3D200%26rssmikle_target%3D_blank%26rssmikle_font_size%3D12%26rssmikle_border%3Don%26rssmikle_css_url%3Dhttp%253A%252F%252Ffeed.mikle.com%252Fsample%252Fblue160_500.css%26rssmikle_title%3Don%26rssmikle_title_bgcolor%3D%25230066FF%26rssmikle_title_color%3D%2523FFFFFF%26rssmikle_item_bgcolor%3D%2523FFFFFF%26rssmikle_item_title_length%3D20%26rssmikle_item_title_color%3D%2523666666%26rssmikle_item_border_bottom%3Don%26rssmikle_item_description%3Don%26rssmikle_item_description_length%3D40%26rssmikle_item_description_color%3D%2523666666%26rssmikle_item_description_tag%3Don%26rssmikle_item_podcast%3Doff%26&dr=http%3A%2F%2Fkkbnpontian.blogspot.no%2F&ul=en-us&de=UTF-8&dt=Error&sd=24-bit&sr=1176x885&vp=300x200&je=1&fl=10.0%20r45&_u=IEBAAEQAI~&jid=405390963&gjid=1536906367&cid=1969020863.1507894801&tid=UA-199268-12&_gid=1094056432.1507894801&_r=1&z=1282707486 HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://feed.mikle.com/widget/?rssmikle_url=http%3A%2F%2Fwww.iluvislam.com%2Findex.php%3Fformat%3Dfeed%26type%3Drss&rssmikle_frame_width=300&rssmikle_frame_height=200&rssmikle_target=_blank&rssmikle_font_size=12&rssmikle_border=on&rssmikle_css_url=http%3A%2F%2Ffeed.mikle.com%2Fsample%2Fblue160_500.css&rssmikle_title=on&rssmikle_title_bgcolor=%230066FF&rssmikle_title_color=%23FFFFFF&rssmikle_item_bgcolor=%23FFFFFF&rssmikle_item_title_length=20&rssmikle_item_title_color=%23666666&rssmikle_item_border_bottom=on&rssmikle_item_description=on&rssmikle_item_description_length=40&rssmikle_item_description_color=%23666666&rssmikle_item_description_tag=on&rssmikle_item_podcast=off&

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 11:40:01 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Server: Golfe2
Content-Length: 35


--- Additional Info ---
Magic:  GIF image data, version 89a, 1 x 1
Size:   35
Md5:    28d6814f309ea289f847c69cf91194c6
Sha1:   0f4e929dd5bb2564f7ab9c76338e04e292a42ace
Sha256: 8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015
                                        
                                            GET /files/60/2_1323919483_12137_151_0_160_161_6_1_60.swf HTTP/1.1 
Host: h1.flashvortex.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         72.52.168.255
HTTP/1.1 200 OK
Content-Type: application/x-shockwave-flash
                                        
Date: Fri, 13 Oct 2017 11:40:01 GMT
Server: Apache/2.2.31 (Unix) mod_ssl/2.2.31 OpenSSL/1.0.1e-fips mod_bwlimited/1.4
Last-Modified: Mon, 03 Apr 2017 12:15:37 GMT
Etag: "1bc618-7e50-54c421df91b08"
Accept-Ranges: bytes
Content-Length: 32336
Keep-Alive: timeout=2, max=150
Connection: Keep-Alive


--- Additional Info ---
Magic:  Macromedia Flash data (compressed), version 6
Size:   32336
Md5:    54c460a8d268e1a1ef4112c5d4c46261
Sha1:   56da34d186d966ec8b78abdb92cab87923bf0d73
Sha256: 379074b4a2bac16991ff18fa529bdfd7eb86ceadf0c47264b43bea4ba1608fd1
                                        
                                            GET /chart?cht=lfi&chd=s:ikEEgYYOKEKRXOHaOSSeTMRGqqyTkO&chds=0.0,100.0&chs=75x30&chco=202020c8&chf=bg,s,00000014&chls=2.0,0.0,0.0&chm=B,40404064,0,0.0,0.0&hl=en-US HTTP/1.1 
Host: chart.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Date: Fri, 13 Oct 2017 11:40:02 GMT
Expires: Sat, 14 Oct 2017 11:40:02 GMT
Cache-Control: public, max-age=86400
Last-Modified: Wed, 06-Sep-2017 18:25:34 GMT
X-Frame-Options: ALLOWALL
Access-Control-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: GoogleChartAPI/1.0
Content-Length: 2171
X-XSS-Protection: 1; mode=block


--- Additional Info ---
Magic:  PNG image, 75 x 30, 8-bit/color RGBA, non-interlaced
Size:   2171
Md5:    f66ded75f1bb5762e234402aba2180e6
Sha1:   c99620f49be12dea1341e594de3b610072c7ded7
Sha256: d39ad1d82d50dc6b9ad7bcf82a72b023161059de75c7b8b0b6cca438b71b7b85
                                        
                                            GET /css?family=Roboto:300,400,500,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed

                                         
                                         64.233.164.95
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 13 Oct 2017 11:40:00 GMT
Date: Fri, 13 Oct 2017 11:40:00 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   322
Md5:    8a41458b9e1f57ed052e1fd896792fee
Sha1:   659abe71193bd92d79c05b6cd6e6c8859f4fc16d
Sha256: e612ab973b6c72eb7185b2722b9b61c092867377f61017cb9da47a025e95f3c8
                                        
                                            GET /maps/api/js?v=3.29&client=google-maps-pro&language=en&region=NO&libraries=places,visualization,geometry HTTP/1.1 
Host: maps.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed

                                         
                                         216.58.211.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Date: Fri, 13 Oct 2017 11:32:39 GMT
Expires: Fri, 13 Oct 2017 12:02:39 GMT
Content-Encoding: gzip
Server: mafe
Content-Length: 27095
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN
Cache-Control: public, max-age=1800
Age: 438
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   27095
Md5:    84d0530df1ac0ad7d604255e8de0879b
Sha1:   348790cd1f47ab6e3b900638e5a2b8d5e8d30f2f
Sha256: 1573771bbc8f506745d4c6ab2342868848db6a42a6f33b23f5950ec0b0330e21
                                        
                                            GET /embed/ulMXaoOK5lk HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/
Cookie: VISITOR_INFO1_LIVE=6RqLK4Ks72c; YSC=d3aaSXxG8Ro

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/html; charset=utf-8
                                        
Expires: Tue, 27 Apr 1971 19:44:06 EST
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info."
Cache-Control: no-cache
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block; report=https://www.google.com/appserve/security-bugs/log/youtube
Date: Fri, 13 Oct 2017 11:40:03 GMT
Server: YouTube Frontend Proxy
Set-Cookie: PREF=f1=50000000; path=/; domain=.youtube.com; expires=Wed, 13-Jun-2018 23:33:03 GMT
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   14218
Md5:    8ed8c50a18d52fdbfb42e10635532ff5
Sha1:   db87cf5159f67326730d2b3d950d46a252694953
Sha256: 3bbe7f9803ba84b8b46abf174a875293982aad027eac719dee3cbac88e0771db
                                        
                                            GET /img/widgets/stats-flipper.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/73244247-css_bundle_v2.css

                                         
                                         172.217.22.169
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 233
Date: Tue, 10 Oct 2017 16:39:01 GMT
Expires: Tue, 17 Oct 2017 16:39:01 GMT
Last-Modified: Tue, 10 Oct 2017 05:05:55 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=604800
Age: 241264
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  PNG image, 88 x 30, 8-bit grayscale, non-interlaced
Size:   233
Md5:    99a2cb03ed5a76104972e477196f1f09
Sha1:   4e12527ed6d99f198728c6631bf7a787911bf4bc
Sha256: 2911f4e04096744757ceab7a895e0ee51494b6feaefaef9f1870272b3dc2dcca
                                        
                                            GET /csi?v=2&s=mapsapi3&v3v=29.14b&action=apiboot2&libraries=places%2Cvisualization%2Cgeometry&e=google-maps-pro&rt=main.10 HTTP/1.1 
Host: csi.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.google.com/maps/d/embed?mid=18jP36MZTFthORBgs-TD8Qyas0_0&msa=0&hl=en&ie=UTF8&t=p&vpsrc=6&ll=1.5657,103.351994&spn=0.051479,0.051498&z=13&output=embed

                                         
                                         216.58.212.163
HTTP/1.1 204 No Content
Content-Type: image/gif
                                        
Access-Control-Allow-Origin: *
Date: Fri, 13 Oct 2017 11:40:07 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Wed, 21 Jan 2004 19:51:30 GMT
Server: Golfe2
Content-Length: 0
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
                                        
                                            GET /yts/jsbin/www-embed-player-vflWYCwde/www-embed-player.js HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/ulMXaoOK5lk
Cookie: VISITOR_INFO1_LIVE=6RqLK4Ks72c; YSC=d3aaSXxG8Ro; PREF=f1=50000000

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 31835
Date: Thu, 12 Oct 2017 18:15:57 GMT
Expires: Fri, 20 Oct 2017 18:15:57 GMT
Last-Modified: Thu, 12 Oct 2017 10:55:44 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=691200
Age: 62650
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   31835
Md5:    804bd76b540bd6eac8cea253e363a286
Sha1:   fbb2fdd65ea698d8b0eb94d8af5cc25e11e56010
Sha256: 4d97e45b6696a722a63f435ea9354b67907a9e2df40b140ed9103f38c69d7426
                                        
                                            GET /yts/cssbin/www-player-vflITOHz1.css HTTP/1.1 
Host: www.youtube.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.youtube.com/embed/ulMXaoOK5lk
Cookie: VISITOR_INFO1_LIVE=6RqLK4Ks72c; YSC=d3aaSXxG8Ro; PREF=f1=50000000

                                         
                                         172.217.22.174
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Timing-Allow-Origin: https://www.youtube.com
Content-Length: 45058
Date: Tue, 10 Oct 2017 01:17:25 GMT
Expires: Wed, 10 Oct 2018 01:17:25 GMT
Last-Modified: Mon, 09 Oct 2017 23:44:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 1; mode=block
Cache-Control: public, max-age=31536000
Age: 296562
Alt-Svc: quic=":443"; ma=2592000; v="39,38,37,35"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   45058
Md5:    8eb5b34ffe71b36386a23250a8b38ce5
Sha1:   874284afa9735f95aa5bcf0b41c1bbf81883ee85
Sha256: 0aa932821f3f2d2f8bdb52d98b924eec3923aeda4ea735d59b56bdb06fcc0395
                                        
                                            GET /images/cleardot.gif HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://kkbnpontian.blogspot.no/