r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 408d1564e8f59e6626e41be4106ce2e6
4149a1f17e8f7c446e7aa4963f3a49b6a00b6164
46e2e79c7977854058dec9cde88f963dd498dd235c3bb15b39a9e5ce1027d7fe
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "46E2E79C7977854058DEC9CDE88F963DD498DD235C3BB15B39A9E5CE1027D7FE"
Last-Modified: Thu, 09 Feb 2023 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4303
Expires: Thu, 09 Feb 2023 13:55:53 GMT
Date: Thu, 09 Feb 2023 12:44:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6086
Expires: Thu, 09 Feb 2023 14:25:36 GMT
Date: Thu, 09 Feb 2023 12:44:10 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 50a2f8cdbbd1059f5318753155bba7ef
405e63ea4683be44f876feae34b5cb645ff751f2
f6ac743a5a17d64d2858fec5791050d2dc8074ddd823826c93e67bffdb2f0868
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F6AC743A5A17D64D2858FEC5791050D2DC8074DDD823826C93E67BFFDB2F0868"
Last-Modified: Thu, 09 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18618
Expires: Thu, 09 Feb 2023 17:54:28 GMT
Date: Thu, 09 Feb 2023 12:44:10 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash ff250d3ef3fa45322bf05039a0122a9f
b3e7a2c383bce1bab807dbe1a03c375258b51f1d
d07f109a96e0ae6ec7b1d46ce8761b3f06fe845769ce65d69e053dd40aa561ba
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Length, Content-Type, Alert, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 09 Feb 2023 12:36:49 GMT
content-type: application/json
age: 441
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: EZUqYUz/5frU7y8VXKg1JdmJOKhfU6uIkQn0+hboWnci3361+iigY34EW3QwHIf5moSCuGLCByo=
x-amz-request-id: 00GP62SZWX54AAHP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 09 Feb 2023 12:36:22 GMT
age: 468
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 12:44:10 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Content-Type, Expires, Pragma, Retry-After, Last-Modified, ETag, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 09 Feb 2023 11:51:21 GMT
age: 3170
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html
172.217.21.161200 OK 19 kB URL HTTP/1.1 photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html
IP 172.217.21.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1495)
Hash b4e11dfebb0d98c820cb5fa343fd7b44
56f980aca4605e4305e5cf58a08bc567ee0288f4
8644e1beb7e03f433cc016c73e121176c696cae95853c10ec2136402bebe2b86
Analyzer Verdict Alert fortinet Phishing
GET /2012/08/gambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: photoimagepics.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 09 Feb 2023 12:44:11 GMT
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 23 Jan 2023 09:31:13 GMT
ETag: W/"18503d7a28b243321f4ea1d0c023177a25d658ac6d23f16f694ca179066cb82a"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 18617
Server: GSE
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 248ce16379b12f11927ecc3142aec450
fa5b189f2d9182479170cb61cc1723571e437bd2
a8d259b331bdefb00625b9bf057d44d0b3290fda0734c57eda187b04e23d59d4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8D259B331BDEFB00625B9BF057D44D0B3290FDA0734C57EDA187B04E23D59D4"
Last-Modified: Wed, 08 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5232
Expires: Thu, 09 Feb 2023 14:11:23 GMT
Date: Thu, 09 Feb 2023 12:44:11 GMT
Connection: keep-alive
tags.chitika.net/oneliners/hook/beta.js
54.230.111.21301 Moved Permanently 167 B URL HTTP/1.1 tags.chitika.net/oneliners/hook/beta.js
IP 54.230.111.21:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /oneliners/hook/beta.js HTTP/1.1
Host: tags.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Thu, 09 Feb 2023 12:44:11 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://tags.chitika.net/oneliners/hook/beta.js
X-Cache: Redirect from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6AdCdgGh3Mk3HMn1vaxDtzUB9fumLFKSxot-2G1sKMzXBJC-oDHU1Q==
photoimagepics.blogspot.com/js/cookienotice.js
172.217.21.161200 OK 2.0 kB URL HTTP/1.1 photoimagepics.blogspot.com/js/cookienotice.js
IP 172.217.21.161:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Phishing
GET /js/cookienotice.js HTTP/1.1
Host: photoimagepics.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 09 Feb 2023 12:44:11 GMT
Expires: Thu, 16 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 09 Feb 2023 11:51:50 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.statcounter.com/counter/counter_xhtml.js
104.20.218.77200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP 104.20.218.77:0
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:11 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Wed, 08 Feb 2023 18:26:33 GMT
ETag: W/"aa70-5f43467695dff"
Cache-Control: max-age=43200
Expires: Thu, 09 Feb 2023 18:17:56 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 23175
Server: cloudflare
CF-RAY: 796cb1ed1ac00b3d-OSL
resources.infolinks.com/js/infolinks_main.js
172.66.41.9200 OK 2.1 kB URL HTTP/1.1 resources.infolinks.com/js/infolinks_main.js
IP 172.66.41.9:0
File type ASCII text, with very long lines (3592)
Hash ada3ccf733ec60b27f50fcb11ee8ea2c
da41a40163c8c34f54e5f30801d5a8e4b109e5d3
f5f007f7f3a853fe715bb291e29fde0c764a1cb291f4690c577df9988685b362
GET /js/infolinks_main.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:11 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 09 Feb 2023 10:17:31 GMT
ETag: W/"e09-5f441b0538281"
Cache-Control: max-age=3600
Expires: Thu, 09 Feb 2023 11:17:57 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 8774
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796cb1ed390bb509-OSL
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 79408ca7246d1453a4d940001108528c
6485fceacb572c95bf5c2cdcb9a1330047c4cd85
935033a1e7f7c5a165aa3014a893514fe733d2f82709845aca5c3cda704e0731
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6250bcba58c2659a296fe4f3151b1e16
307b32afca5148b6faef5b40284906b649f6d963
d6e8d31cae981d39085629a8bd20894b1612fa2b638a6adef331b34c7e912dac
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 433af7e1e2f0f14adb78a739bbae1832
fab933db47af9ab3f4f86befee579ac9972b82fd
a6be621f8cdc57bd55a8e73ff58a34b6a816eb558cb88b49cc031222042f82a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 433af7e1e2f0f14adb78a739bbae1832
fab933db47af9ab3f4f86befee579ac9972b82fd
a6be621f8cdc57bd55a8e73ff58a34b6a816eb558cb88b49cc031222042f82a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
216.58.207.233200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP 216.58.207.233:0
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 16:38:36 GMT
expires: Thu, 08 Feb 2024 16:38:36 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Feb 2023 20:16:52 GMT
content-type: text/css
age: 72335
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 79408ca7246d1453a4d940001108528c
6485fceacb572c95bf5c2cdcb9a1330047c4cd85
935033a1e7f7c5a165aa3014a893514fe733d2f82709845aca5c3cda704e0731
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
172.217.21.174200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 172.217.21.174:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Thu, 09 Feb 2023 12:44:11 GMT
expires: Thu, 09 Feb 2023 12:44:11 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/4056224860-widgets.js
216.58.207.233200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4056224860-widgets.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (2221)
Hash 3111894a1cadb69770cf801999144225
a0fccd45a5b0ee66afa14ce2ec78a33433a38270
4dc31995fe450b07b159d7e1e4a5b22aac30865f0299d80aade55ba26905ed08
GET /static/v1/widgets/4056224860-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56559
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 08 Feb 2023 02:10:45 GMT
expires: Thu, 08 Feb 2024 02:10:45 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 07 Feb 2023 20:16:52 GMT
content-type: text/javascript
age: 124406
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
216.58.207.233200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 14:16:56 GMT
expires: Tue, 14 Feb 2023 14:16:56 GMT
cache-control: public, max-age=604800
last-modified: Mon, 06 Feb 2023 17:52:33 GMT
content-type: image/gif
age: 167235
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/AHs97-lD1rXd2mzyr2fdL0TFhma2Vbuwbz__N-k_V41JRkyxAhtriYnknlxKq2DfSNOLLlTuxkY0BZoztnLkgY34DNOojOhVIIyXhi6PRhCFjwm3LIHFCz3RQQOuXsB3R4syWsd76S-60ZSx6zQJsizZK9Mv53E9AszUcsMYETm0cJmyFv5JSiUvEGvBzSNIOTI=w72-h72-p-k-no-nu
142.250.74.97404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-lD1rXd2mzyr2fdL0TFhma2Vbuwbz__N-k_V41JRkyxAhtriYnknlxKq2DfSNOLLlTuxkY0BZoztnLkgY34DNOojOhVIIyXhi6PRhCFjwm3LIHFCz3RQQOuXsB3R4syWsd76S-60ZSx6zQJsizZK9Mv53E9AszUcsMYETm0cJmyFv5JSiUvEGvBzSNIOTI=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 0b29f842d07e0e59de7fbb61dafcd03e
00b3f7f6389eb5c2ef8b1e94106aa9bf27cbf2da
2786ce5f56b0960de985002be7a951ba11fe4b8e783d61db8de6df33ae377cc2
GET /blogger_img_proxy/AHs97-lD1rXd2mzyr2fdL0TFhma2Vbuwbz__N-k_V41JRkyxAhtriYnknlxKq2DfSNOLLlTuxkY0BZoztnLkgY34DNOojOhVIIyXhi6PRhCFjwm3LIHFCz3RQQOuXsB3R4syWsd76S-60ZSx6zQJsizZK9Mv53E9AszUcsMYETm0cJmyFv5JSiUvEGvBzSNIOTI=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:11 GMT
server: fife
content-length: 1792
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
216.58.207.233200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 05 Feb 2023 22:08:46 GMT
expires: Mon, 05 Feb 2024 22:08:46 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 04 Feb 2023 23:49:32 GMT
content-type: text/javascript
age: 311725
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
push.services.mozilla.com/
52.12.59.47101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.12.59.47:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: J1VW0N+cBRHjAlsaJ1IKRQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: p03iuJa4AxqRMvIBY9p1TZrnJ08=
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 79408ca7246d1453a4d940001108528c
6485fceacb572c95bf5c2cdcb9a1330047c4cd85
935033a1e7f7c5a165aa3014a893514fe733d2f82709845aca5c3cda704e0731
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/AHs97-mIo9dMm--P4DB0A56kzOwuRB1ZCvGV3uVCouEM33KaiesfiEjgysxPHuwlfB6P9t4o4EQPfwt-DEK3KDYidQdVinL8lIWKG4zwTfqcyryuG59Mtow_-VFHyTmbAJ5itBAQxaLLqL0Y9IS7sfpix9dWDJdlMc5Znck9N74Rk8tz6i_MWbqkPy0SOS_k3z0_mQ=w72-h72-p-k-no-nu
142.250.74.97404 Not Found 1.8 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-mIo9dMm--P4DB0A56kzOwuRB1ZCvGV3uVCouEM33KaiesfiEjgysxPHuwlfB6P9t4o4EQPfwt-DEK3KDYidQdVinL8lIWKG4zwTfqcyryuG59Mtow_-VFHyTmbAJ5itBAQxaLLqL0Y9IS7sfpix9dWDJdlMc5Znck9N74Rk8tz6i_MWbqkPy0SOS_k3z0_mQ=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 6e91d44ce628efbdcc6a5340a2b93196
85779fa5ff261387cbf1afcc212b4e011a01d0ec
0b1ce15c44e47b5c55ca6cecb60b25066e05217cea6f35a0b38a4ab3dd607b60
GET /blogger_img_proxy/AHs97-mIo9dMm--P4DB0A56kzOwuRB1ZCvGV3uVCouEM33KaiesfiEjgysxPHuwlfB6P9t4o4EQPfwt-DEK3KDYidQdVinL8lIWKG4zwTfqcyryuG59Mtow_-VFHyTmbAJ5itBAQxaLLqL0Y9IS7sfpix9dWDJdlMc5Znck9N74Rk8tz6i_MWbqkPy0SOS_k3z0_mQ=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:11 GMT
server: fife
content-length: 1795
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
recent-post-thumb.googlecode.com/files/recentposts_thumbnail.js
64.233.165.82404 Not Found 1.6 kB URL HTTP/1.1 recent-post-thumb.googlecode.com/files/recentposts_thumbnail.js
IP 64.233.165.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash be5417b18ca03be2222e4939d294f8e2
1d3c9182f28f4f222f156ace193085cbb2ba8b50
1a2c8a755c4f514f45948563a1f2ad94639fe24bc4a09733875a4ced0023d6c6
GET /files/recentposts_thumbnail.js HTTP/1.1
Host: recent-post-thumb.googlecode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1591
Date: Thu, 09 Feb 2023 12:44:11 GMT
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 433af7e1e2f0f14adb78a739bbae1832
fab933db47af9ab3f4f86befee579ac9972b82fd
a6be621f8cdc57bd55a8e73ff58a34b6a816eb558cb88b49cc031222042f82a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
172.217.21.174200 OK 61 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP 172.217.21.174:0
File type ASCII text, with very long lines (1448)
Hash 62f98a42acaa85f40e228f65e5ee2361
a41c1755a6a2708340b74638f11ebdeed8e977db
54acbd2f18406888cbe8ee3fc76b512081c7c1c0102a4b1f7eef6cd11fc60f15
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60741
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Feb 2023 02:19:08 GMT
expires: Fri, 09 Feb 2024 02:19:08 GMT
cache-control: public, max-age=31536000
age: 37503
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
172.217.21.162200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 172.217.21.162:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 09 Feb 2023 10:20:19 GMT
Expires: Thu, 23 Feb 2023 10:20:19 GMT
Cache-Control: public, max-age=1209600
Age: 8632
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogblog.com/1kt/awesomeinc/body_background_dark.png
216.58.207.233200 OK 106 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/body_background_dark.png
IP 216.58.207.233:0
File type PNG image data, 5 x 5, 1-bit colormap, non-interlaced\012- data
Hash 1de2f5d595cb35714e69a0f86e5f058a
c1ecb1aa5b2112d67dbe4644594a984a8df8d933
50d8a5573603d9819f10428efb4bdb6ff418aedbeb830d19e8c848b8f1df8677
GET /1kt/awesomeinc/body_background_dark.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 106
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 03:16:44 GMT
Expires: Tue, 14 Feb 2023 03:16:44 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 06 Feb 2023 07:51:32 GMT
Content-Type: image/png
Age: 206847
www.blogblog.com/1kt/awesomeinc/body_gradient_dark.png
216.58.207.233200 OK 141 B URL HTTP/1.1 www.blogblog.com/1kt/awesomeinc/body_gradient_dark.png
IP 216.58.207.233:0
File type PNG image data, 8 x 276, 8-bit/color RGBA, non-interlaced\012- data
Hash 3eae035d0731c30445e8469cefc7a185
0e9abf4f6203ba4e0dfae0d889b6adf3cb55a929
625d4151db99dc578ae3e643b34ec849ed01078bbc6c8f368d5ca0d7e90c6186
GET /1kt/awesomeinc/body_gradient_dark.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 141
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 15:39:36 GMT
Expires: Tue, 14 Feb 2023 15:39:36 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 07 Feb 2023 08:53:27 GMT
Content-Type: image/png
Age: 162275
bdv.bidvertiser.com/BidVertiser.dbm?pid=252920%26bid=1245288
54.241.51.109200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=252920%26bid=1245288
IP 54.241.51.109:0
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=252920%26bid=1245288 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
1.bp.blogspot.com/-E_RV2WHbFXM/Tde0j9xzijI/AAAAAAAACf0/JzuqYfZJYAE/w72-h72-p-k-no-nu/tanah+runtuh+6.jpg
142.250.74.161404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-E_RV2WHbFXM/Tde0j9xzijI/AAAAAAAACf0/JzuqYfZJYAE/w72-h72-p-k-no-nu/tanah+runtuh+6.jpg
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-E_RV2WHbFXM/Tde0j9xzijI/AAAAAAAACf0/JzuqYfZJYAE/w72-h72-p-k-no-nu/tanah+runtuh+6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:11 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
lh3.googleusercontent.com/blogger_img_proxy/AHs97-lXJa31iuGt6t34DuuWhHZ5hKZecGnLXCjInhp6mZe1WzHFreQM4K1E8NgKQRPlktR1aA2cLylEVnTk6IZ-_TR553psUXE4k6jwX5ezv0h-a3jXyXKqmW73Pum2LGdfBg=w72-h72-p-k-no-nu
142.250.74.97200 OK 3.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-lXJa31iuGt6t34DuuWhHZ5hKZecGnLXCjInhp6mZe1WzHFreQM4K1E8NgKQRPlktR1aA2cLylEVnTk6IZ-_TR553psUXE4k6jwX5ezv0h-a3jXyXKqmW73Pum2LGdfBg=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=NEW YORK - AUGUST 31: Singer Christina Aguilera attends the 2006 MTV Video Music Awards at Radio City Music Hall August 31, 20, software=Picasa], baseline, precision 8, 72x72, components 3\012- data
Hash 278dd7b34555da7034a258cd266a4ff0
041eea09213510c07882f7e853170f4f484e9ede
4808139cc9281b6d3bcd207b08e4f89aafeca6223b0cd27ab843047af534a7a5
GET /blogger_img_proxy/AHs97-lXJa31iuGt6t34DuuWhHZ5hKZecGnLXCjInhp6mZe1WzHFreQM4K1E8NgKQRPlktR1aA2cLylEVnTk6IZ-_TR553psUXE4k6jwX5ezv0h-a3jXyXKqmW73Pum2LGdfBg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 10 Feb 2023 12:44:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:12 GMT
server: fife
content-length: 3864
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/AHs97-kNYs2jcv4DKwpPIaYg7Zdjm99IAgge0Z44lEPS5usMnM0hl4jBNGa9QQuCHB625Aj5L4qAjJN1pjoDtVeaWohuYY_e8gNyi89PDPXsC_r-ySNfi_G8IWeyDMCWtNaM2Xk=w72-h72-p-k-no-nu
142.250.74.97200 OK 3.1 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-kNYs2jcv4DKwpPIaYg7Zdjm99IAgge0Z44lEPS5usMnM0hl4jBNGa9QQuCHB625Aj5L4qAjJN1pjoDtVeaWohuYY_e8gNyi89PDPXsC_r-ySNfi_G8IWeyDMCWtNaM2Xk=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 7c2025c7efa117b26e962ccfd2a4d30e
57f0d99b80785729035437964e6225b6ffa93500
986efaca44616ddcdd00ebb4c075cc9823de3c8c5609431fe76838f15c903061
GET /blogger_img_proxy/AHs97-kNYs2jcv4DKwpPIaYg7Zdjm99IAgge0Z44lEPS5usMnM0hl4jBNGa9QQuCHB625Aj5L4qAjJN1pjoDtVeaWohuYY_e8gNyi89PDPXsC_r-ySNfi_G8IWeyDMCWtNaM2Xk=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 10 Feb 2023 12:44:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:12 GMT
server: fife
content-length: 3137
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/_ah2wAm4VUY4/TIJcSuZIVEI/AAAAAAAAArI/pY-u9FqL6D8/s1600/katonwan.jpg
142.250.74.161200 OK 51 kB URL HTTP/1.1 3.bp.blogspot.com/_ah2wAm4VUY4/TIJcSuZIVEI/AAAAAAAAArI/pY-u9FqL6D8/s1600/katonwan.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 580x407, components 3\012- data
Hash 522966c74746ba4d2c62f8bfaf46bde9
af07d42aac1e69262c425aa66ffb9a38b48afd50
aec698847e40f6579546424595a0c6723bedb9a4e223a43300784c18b80112d7
GET /_ah2wAm4VUY4/TIJcSuZIVEI/AAAAAAAAArI/pY-u9FqL6D8/s1600/katonwan.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2b2"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="katonwan.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 51420
X-XSS-Protection: 0
lh3.googleusercontent.com/blogger_img_proxy/AHs97-ld3YbaTP5KaDSNSOQeSDZytMswnX-IIkLZTnImtdBGYJvQtvm6X9piGomyG215F527J_6XoCdh9QCIPBheVsz5W_253CInv7xnUzADrSCHjC8lZQ86tJwcx6K9u-Lx0BeVbBwowV2FW6PUxlHx8v1QbOFksaiXTg=w72-h72-p-k-no-nu
142.250.74.97200 OK 4.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-ld3YbaTP5KaDSNSOQeSDZytMswnX-IIkLZTnImtdBGYJvQtvm6X9piGomyG215F527J_6XoCdh9QCIPBheVsz5W_253CInv7xnUzADrSCHjC8lZQ86tJwcx6K9u-Lx0BeVbBwowV2FW6PUxlHx8v1QbOFksaiXTg=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 64eb8a1125f4a893d7a674bb31e68898
da57b0afa0e47fabaa0ff21c9c7a8c973ca4c6bd
1801c024a136fb2976d0453733d95c280632adaffa6884cc95b362647a480a36
GET /blogger_img_proxy/AHs97-ld3YbaTP5KaDSNSOQeSDZytMswnX-IIkLZTnImtdBGYJvQtvm6X9piGomyG215F527J_6XoCdh9QCIPBheVsz5W_253CInv7xnUzADrSCHjC8lZQ86tJwcx6K9u-Lx0BeVbBwowV2FW6PUxlHx8v1QbOFksaiXTg=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Fri, 10 Feb 2023 12:44:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:12 GMT
server: fife
content-length: 4663
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
54.230.80.227200 OK 471 B URL HTTP/1.1 ocsp.r2m02.amazontrust.com/
IP 54.230.80.227:0
Hash 0f5f697387bfb0c923bb6f785357fb83
5aa6cc7f590c969fa49a8dd96d800e1847f3e26c
20bcac7f8181c7e43d289603639481a16ae8b0a2edf9e95f9608edc09bbbd51a
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=99988
Date: Thu, 09 Feb 2023 12:44:12 GMT
Etag: "63e3ce30-1d7"
Expires: Fri, 10 Feb 2023 16:30:40 GMT
Last-Modified: Wed, 08 Feb 2023 16:30:40 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: wE3Ajpt4fnxVGHvk6RU71bRGGYg1uIDnmkwcI-fQmUyfb_V5MvbaRQ==
lh4.googleusercontent.com/-oV27QvzRZ94/TYcVBKbYOiI/AAAAAAAAAEI/77NgGu0Db4I/w72-h72-p-k-no-nu/gambartunangdannyxfactor8.jpg
142.250.74.97200 OK 4.7 kB URL HTTP/2 lh4.googleusercontent.com/-oV27QvzRZ94/TYcVBKbYOiI/AAAAAAAAAEI/77NgGu0Db4I/w72-h72-p-k-no-nu/gambartunangdannyxfactor8.jpg
IP 142.250.74.97:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 88bc7d5a9ea7e4b031f30843e2e7201b
0d370a349757d09f4bd263b3115240448258360a
56fb58b5ed86790cf5f0a352b74f35f2c5f3779e50aabe61688363f2fa49297a
GET /-oV27QvzRZ94/TYcVBKbYOiI/AAAAAAAAAEI/77NgGu0Db4I/w72-h72-p-k-no-nu/gambartunangdannyxfactor8.jpg HTTP/1.1
Host: lh4.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v42"
expires: Fri, 10 Feb 2023 12:44:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="gambartunangdannyxfactor8.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:12 GMT
server: fife
content-length: 4745
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-CNgyXVCJH1Y/TfZwcnxTibI/AAAAAAACEiE/dq23SNBRlHk/w72-h72-p-k-no-nu/worlds-scariest-tree.jpg
142.250.74.161200 OK 4.2 kB URL HTTP/1.1 4.bp.blogspot.com/-CNgyXVCJH1Y/TfZwcnxTibI/AAAAAAACEiE/dq23SNBRlHk/w72-h72-p-k-no-nu/worlds-scariest-tree.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, description=The only tree that kids could be afraid to climb this weekend!, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 87eba51250dd493a2ba69f293b34c0f4
97ddb6e32639433edff74898b11295c408d7cacb
3526be870691cfe472f6b348387c6c16ca0fe691edf7f8873ce41a187f2eb812
GET /-CNgyXVCJH1Y/TfZwcnxTibI/AAAAAAACEiE/dq23SNBRlHk/w72-h72-p-k-no-nu/worlds-scariest-tree.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v21221"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="worlds-scariest-tree.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 4178
X-XSS-Protection: 0
3.bp.blogspot.com/_t_NRDGji6fg/TK68QN9scKI/AAAAAAAAAOA/ve5-Reu1nfk/s1600/hari-raya-pic.jpg
142.250.74.161200 OK 47 kB URL HTTP/1.1 3.bp.blogspot.com/_t_NRDGji6fg/TK68QN9scKI/AAAAAAAAAOA/ve5-Reu1nfk/s1600/hari-raya-pic.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x385, components 3\012- data
Hash e47e4769cf6329b7fb863501b512d8e3
407d330f2f98f0a5797fe1c916964fab2fbb9c8a
3f34596e43225cbef17e6a46914845a3f8b6aa8bb33cfd578f4d293de4881b83
GET /_t_NRDGji6fg/TK68QN9scKI/AAAAAAAAAOA/ve5-Reu1nfk/s1600/hari-raya-pic.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ve0"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="hari-raya-pic.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 46935
X-XSS-Protection: 0
4.bp.blogspot.com/-kDbpcy-DdQg/TzzUDJLNZ9I/AAAAAAAAIvY/sfnhlTMAp-Y/w72-h72-p-k-no-nu/ADNAN%2BSEMPIT%2B2%2B5.jpg
142.250.74.161200 OK 5.1 kB URL HTTP/1.1 4.bp.blogspot.com/-kDbpcy-DdQg/TzzUDJLNZ9I/AAAAAAAAIvY/sfnhlTMAp-Y/w72-h72-p-k-no-nu/ADNAN%2BSEMPIT%2B2%2B5.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash fd92efefd4ba73f7203739f0e9a19287
c64f609c8d8ec9b0848cdd381649eb2e011b4bf2
6eca3e4b79460bbb8b0f80c6828a1cdbf5ac913c26a3eb09f4e06fb62573ca80
GET /-kDbpcy-DdQg/TzzUDJLNZ9I/AAAAAAAAIvY/sfnhlTMAp-Y/w72-h72-p-k-no-nu/ADNAN%2BSEMPIT%2B2%2B5.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v22f6"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ADNAN SEMPIT 2 5.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 5149
X-XSS-Protection: 0
2.bp.blogspot.com/_vLwoCZrvbyU/TIelnASwhEI/AAAAAAAAAvs/sfZjtB0edRk/s1600/selamat-hari-raya-abu-musaddad-11.jpg
142.250.74.161200 OK 114 kB URL HTTP/1.1 2.bp.blogspot.com/_vLwoCZrvbyU/TIelnASwhEI/AAAAAAAAAvs/sfZjtB0edRk/s1600/selamat-hari-raya-abu-musaddad-11.jpg
IP 142.250.74.161:0
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=4, orientation=upper-left, software=Google], baseline, precision 8, 461x714, components 3\012- data
Size 114 kB (113876 bytes)
Hash 5f84e661b9645907e20fd1f00f0961a8
271a8ad5e4a97ee5f2c11b9ed44a8d03f43f975d
83eb8372e07c7bbd4b8aa8a54a76f7ce2628d98efb37338b78448a63e6a40ad0
GET /_vLwoCZrvbyU/TIelnASwhEI/AAAAAAAAAvs/sfZjtB0edRk/s1600/selamat-hari-raya-abu-musaddad-11.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vad4"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="selamat-hari-raya-abu-musaddad-11.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 113876
X-XSS-Protection: 0
1.bp.blogspot.com/_MuGfCmiNLMA/TRozlRCj55I/AAAAAAAAA4Y/LzOSA-A-UXE/w72-h72-p-k-no-nu/Perkahwinan+Artis+-+Aqasha001.jpg
142.250.74.161200 OK 3.6 kB URL HTTP/1.1 1.bp.blogspot.com/_MuGfCmiNLMA/TRozlRCj55I/AAAAAAAAA4Y/LzOSA-A-UXE/w72-h72-p-k-no-nu/Perkahwinan+Artis+-+Aqasha001.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash a29fe9131eb7e23e0e510617706057ee
d00f0650245d833621fa081c051ed3451aad7e09
898acfa631ce79b874f8b1c0d645e65f7bf7191810cc5525e7fc4dbdfe0514ea
GET /_MuGfCmiNLMA/TRozlRCj55I/AAAAAAAAA4Y/LzOSA-A-UXE/w72-h72-p-k-no-nu/Perkahwinan+Artis+-+Aqasha001.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v386"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Perkahwinan Artis - Aqasha001.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 3622
X-XSS-Protection: 0
api.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
208.82.16.81301 Moved Permanently 164 B URL HTTP/1.1 api.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
IP 208.82.16.81:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 0ddfe38fe52729401ec28b0c671ff9cc
168fb534ee60922a73876b99d57259cb09a5be73
639762e638bc698ac208f1a8d5f5af04901e9df719978deb315e9e6c7b817f9a
GET /files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg HTTP/1.1
Host: api.ning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 09 Feb 2023 12:44:12 GMT
Content-Type: text/html
Content-Length: 164
Connection: keep-alive
Location: https://www.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
Server: Unknown
tags.chitika.net/oneliners/hook/beta.js
54.230.111.21404 Not Found 718 B URL HTTP/2 tags.chitika.net/oneliners/hook/beta.js
IP 54.230.111.21:0
File type ASCII text, with CRLF line terminators
Hash b4f3922b40d19bc8564edf20e48343a5
75a32e99c272b1544d940c056df4155f394d4aca
71ea8260d8b55a97aff6aba468f00379bf1ec49eda696da760447f79aa9090c3
GET /oneliners/hook/beta.js HTTP/1.1
Host: tags.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
content-length: 718
last-modified: Tue, 07 Mar 2017 19:36:54 GMT
etag: "b4f3922b40d19bc8564edf20e48343a5"
x-amz-error-code: NoSuchKey
x-amz-error-message: The specified key does not exist.
x-amz-error-detail-key: oneliners/hook/beta.js
date: Thu, 09 Feb 2023 12:44:11 GMT
server: AmazonS3
x-cache: Error from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: RI8o_f-9uNfOO1JXZZsc9-QmNm17uOPB-fq4U9wr2iI69RduBdVL9A==
X-Firefox-Spdy: h2
1.bp.blogspot.com/-KSwLYHMUaYs/TlaCzKxuA1I/AAAAAAAAALs/nYLYAFK3BKc/s1600/Selamat-Hari-Raya1.jpg
142.250.74.161200 OK 94 kB URL HTTP/1.1 1.bp.blogspot.com/-KSwLYHMUaYs/TlaCzKxuA1I/AAAAAAAAALs/nYLYAFK3BKc/s1600/Selamat-Hari-Raya1.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 338x505, components 3\012- data
Hash 1b5f22925618734990b413e80a04ffc5
02a7d3775a79b2921cf8783e695665219199bbbf
4dc8204a10ad80f3e09df50d598b9752e0aa3491a9eb378562b7ce3087f9124e
GET /-KSwLYHMUaYs/TlaCzKxuA1I/AAAAAAAAALs/nYLYAFK3BKc/s1600/Selamat-Hari-Raya1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vbb"
Expires: Fri, 10 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Selamat-Hari-Raya1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 09 Feb 2023 12:44:12 GMT
Server: fife
Content-Length: 93882
X-XSS-Protection: 0
d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
54.230.245.28200 OK 1.2 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
IP 54.230.245.28:0
File type ASCII text, with CRLF line terminators
Hash 263303c015aaddbd3c417327b3b50823
c5c4f7ec9f5c1a2cfafad6b5810ed0da2080d3cb
871bcbf1631eba9d4218fddb8dd96a075fdf33725e1ff991b345808c15c66617
GET /activejs/bdv_fsthd.js HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1199
Connection: keep-alive
Last-Modified: Thu, 14 Jan 2021 11:27:17 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Thu, 09 Feb 2023 09:29:48 GMT
ETag: "977ef3668ead61:0"
X-Cache: Hit from cloudfront
Via: 1.1 4c07121ca6e32bcda85cc9091b92050e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: iJ4zKsZOzZ2HIklD-JNkfDMQscUWzNRnxN8T-bDA3RGK_JM9edm4eA==
Age: 11664
d2b9l3u54v5v39.cloudfront.net/css/default.css
54.230.245.28200 OK 1.5 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/default.css
IP 54.230.245.28:0
File type ASCII text, with CRLF line terminators
Hash 8ea20baef891abad5a169261301f1b0d
b983c5b36da773d38fc2d9d56fb1e462080ac0f8
27306e4a14ab04d39e59d9d73d6fac0fca90bbab3da5d9358c0000b9119c90af
GET /css/default.css HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Last-Modified: Mon, 21 Sep 2015 08:25:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Thu, 09 Feb 2023 08:48:21 GMT
ETag: "70d0ec1947f4d01:0"
X-Cache: Hit from cloudfront
Via: 1.1 9037b7743a833da13439f0d4e2619b52.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: _2YRRm2ZusxyvJIeUDbl51P2KW-4b4z2n9b8icNgEkXY_aopSH8kZw==
Age: 14151
d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
54.230.245.28200 OK 2.9 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
IP 54.230.245.28:0
File type ASCII text, with CRLF line terminators
Hash 4168b5a2517e8d07be159017f22759e7
ade414bcff8b8babb58bf6369fdbc7b8e2cf67b6
816427321da11d1632fac7711648e373bcbc01cf8b7b372d7b9178827906430a
GET /css/88x726.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2866
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:19:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Thu, 09 Feb 2023 12:44:12 GMT
ETag: "8ae83247890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 94eee494c19905cb6933ec8a32a577a0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: PpnwYmOSyJ740JenDv2r1PxEwI1C4H6cjAn-RCRrI-gmRPvKdFdKfg==
Age: 18998
www.blogger.com/dyn-css/authorization.css?targetBlogID=4106343682948763947&zx=ff2ffcd7-cecd-4ac6-ac2e-f0d0c43dde05
216.58.207.233200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=4106343682948763947&zx=ff2ffcd7-cecd-4ac6-ac2e-f0d0c43dde05
IP 216.58.207.233:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=4106343682948763947&zx=ff2ffcd7-cecd-4ac6-ac2e-f0d0c43dde05 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Feb 2023 12:44:12 GMT
last-modified: Thu, 09 Feb 2023 12:44:12 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
recent-post-thumb.googlecode.com/files/recentposts_thumbnail.js
64.233.165.82404 Not Found 1.6 kB URL HTTP/1.1 recent-post-thumb.googlecode.com/files/recentposts_thumbnail.js
IP 64.233.165.82:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash be5417b18ca03be2222e4939d294f8e2
1d3c9182f28f4f222f156ace193085cbb2ba8b50
1a2c8a755c4f514f45948563a1f2ad94639fe24bc4a09733875a4ced0023d6c6
GET /files/recentposts_thumbnail.js HTTP/1.1
Host: recent-post-thumb.googlecode.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1591
Date: Thu, 09 Feb 2023 12:44:12 GMT
www.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
208.82.16.81301 Moved Permanently 169 B URL HTTP/2 www.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
IP 208.82.16.81:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd6987d71fad7058a993a9028dc40454
3ed872fa3a00837bb008ad9d201850e2ea57a79f
f0e759f444eb3a324b621f0548919424455e81441d42ea6bc6bcd2b24fce1b92
GET /files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg HTTP/1.1
Host: www.ning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 09 Feb 2023 12:44:12 GMT
content-type: text/html
content-length: 169
location: https://cdn.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
server: Unknown
x-request-id: 690de127e99065491511efbec8a108a1
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash f16eecdd472f99af839e8e6dfc101bc0
33e345a8e9f776920b90dc78acefc457e15da35c
9a819ca8ca6890f29a418e976b224ae9095b72538324800f38eefc4d95050448
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
216.58.211.13302 Found 481 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
IP 216.58.211.13:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (537)
Hash d3e5ce12c4b317fa926ce813dac4d3e3
11885f26cf09464f03f90a2b98136c6794713366
d63ba95977352fe251d5f5ef70777188f565b3eebcbda5300a99f38023e85288
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D4106343682948763947%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4402850024190546305%26origin%3Dhttp://photoimagepics.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 09 Feb 2023 12:44:12 GMT
location: https://www.blogger.com/followers.g?blogID=4106343682948763947&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNmZmZmZmYiByNmZmZmZmYqByMwMDAwMDAyByNmZmZmZmY6ByNmZmZmZmZCByNmZmZmZmZKByM2NjY2NjZSByNmZmZmZmZaC3RyYW5zcGFyZW50&pageSize=21&postID=4402850024190546305&origin=http%3A%2F%2Fphotoimagepics.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce--BJ-IQSKtQ_R0OTgDSmVYw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 481
server: GSE
set-cookie: __Host-GAPS=1:D7jyTDte5iCRRySfC_ez8p2aZrD5Sg:OL4PXvKbIeFTDKFa;Path=/;Expires=Sat, 08-Feb-2025 12:44:12 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 84889b914548f7820766f27a40699cfa
bc674cdb5819759b5ecd5aabfde47f56127f5d89
e2a69fe4edd028d00a8a744b62ef51dada2aff144da0cd9813efc887a11f70a8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
142.250.74.164200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP 142.250.74.164:0
File type ASCII text, with very long lines (1034), with no line terminators
Hash c7f89fdd783e35486b22625cb506da04
7a45defd22786b1ca257b21bb74d758149037426
3a695a81a72e80c5b9ce0889c960c64c9af49fc5e6c7e90a377686943020e4ad
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 09 Feb 2023 12:44:12 GMT
date: Thu, 09 Feb 2023 12:44:12 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 986afab4bad851da3c4a2b8db670c876
c58b7142ce3bebda918b77649973715dbd71b4d2
24e4025e6576d86e781fd0861a0a87338b7b5d52b9e559ae76ca52755cc3a865
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7596
Expires: Thu, 09 Feb 2023 14:50:49 GMT
Date: Thu, 09 Feb 2023 12:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7596
Expires: Thu, 09 Feb 2023 14:50:49 GMT
Date: Thu, 09 Feb 2023 12:44:13 GMT
Connection: keep-alive
r3.o.lencr.org/
95.101.11.115200 OK 503 B IP 95.101.11.115:0
ASN #20940 Akamai International B.V.
Hash 1d885cfc22a04f1216c98dd64df5338a
589916a844b81fac40af88a772865b8e28dfb64e
40c0e55533794d72bbba4bc9d0f07fe0741e24ca23fd9b3e31d2830c77a51bf3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "40C0E55533794D72BBBA4BC9D0F07FE0741E24CA23FD9B3E31D2830C77A51BF3"
Last-Modified: Wed, 08 Feb 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7596
Expires: Thu, 09 Feb 2023 14:50:49 GMT
Date: Thu, 09 Feb 2023 12:44:13 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
34.120.237.76200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 95081172f8e19d19921acc802488e019
8531c150cb11de44361a95624b11cf46b9e0ba02
7a2d8f012c7d590f3f39ad834d4f3f9fb729143b7395bc588bd608b5bdee039b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff8db31dc-3366-48e5-8c4b-ebe994dd40ef.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 15019
x-amzn-requestid: a615a5fa-a2d8-4cde-b315-a211c7f49bef
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ACn9WEA4IAMFsFg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e42055-7a6fbfa40614816b1c2e9fed;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 22:21:09 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: KITnAMHAS6sESZ2OenwNX5RYRsBMkaBRfcKyvvyB-Dq15o3zJEYPvg==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 12:41:30 GMT
age: 163
etag: "8531c150cb11de44361a95624b11cf46b9e0ba02"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
34.120.237.76200 OK 9.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1d7814305f961caded310b6f2089219b
efcb6a067bb023865823625e67d9de60d44685e0
3c01637a052e2394774fc8f6dd37a284afaf76b423219ecd26a89c2d8b69c121
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7d76b3c3-ea90-47d3-83f3-8f1550aa26fa.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9846
x-amzn-requestid: 4e6cc2be-bc18-4d66-b338-833a05d0d998
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fsaDlGV4oAMFoZA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63db3d49-14fc32183d3c6afb3a64c27d;Sampled=0
x-amzn-remapped-date: Thu, 02 Feb 2023 04:34:17 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: BNBH60bI_wBqaKAFD_FeZHbzfIeJh9-x-JiMsF0Uh9pxKHFPdAH6Vw==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:02:08 GMT
age: 52925
etag: "efcb6a067bb023865823625e67d9de60d44685e0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4b42802dc628e38e9631a01b6320040a
c83355f0828815ecbff47d8195d2deed8077e368
d0f093b1769b568a5d68ada359eadfd1ab3360488a20e1deeb99b0a51b649441
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc04429b-38db-4e0a-96bf-5a6d2bc7e8cf.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11256
x-amzn-requestid: fc079b98-a94a-4945-8e51-9b5941fda799
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fwD8SEOMIAMFomA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63dcb381-72b83330325d280821ecf4c1;Sampled=0
x-amzn-remapped-date: Fri, 03 Feb 2023 07:10:57 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8BUL5SSz4_Jh8-i92w6IGXQEnW6RH2580LbDBIul4S45Mtji53ieTw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 22:06:10 GMT
age: 52683
etag: "c83355f0828815ecbff47d8195d2deed8077e368"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
142.250.74.99200 OK 164 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js
IP 142.250.74.99:0
File type ASCII text, with very long lines (633)
Size 164 kB (163841 bytes)
Hash fe98364486b3206867b17008f995646f
35a5e9aa210970f7abd718d99e629c6982a3cc02
1fd703cb16e3f6f3f7192109d19c69d6e5ac1cfa0feb5b105a86564b7970d28a
GET /recaptcha/releases/gEr-ODersURoIfof1hiDm7R5/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163841
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Feb 2023 04:43:22 GMT
expires: Fri, 09 Feb 2024 04:43:22 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 31 Jan 2023 02:51:47 GMT
content-type: text/javascript
age: 28851
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
34.120.237.76200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ea55fd1053c19123cb789a7d14479ccc
45fb06a6feeceff6a06c8c3f37e259ddf6e09820
393290f5ec8379a09da72b2554c30023b688489ffda79f5edfe6f114250ee4c7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe40cbcc3-f3e1-4c53-87ef-2b07e5039a1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6061
x-amzn-requestid: cf552847-17d0-4820-9711-3fb129090686
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f8xbCG8jIAMF7Vg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1c913-0f2af41d6063340d483c3a55;Sampled=0
x-amzn-remapped-date: Tue, 07 Feb 2023 03:44:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 3WFg806rwKxFrS_8AcUHawHWXa5ED-6AOEZPlp1R2_Sm7Owm1x_jMg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 09 Feb 2023 05:14:13 GMT
age: 27000
etag: "45fb06a6feeceff6a06c8c3f37e259ddf6e09820"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 403cadd5f6beb14f5d2a4dd9eafc68d3
4724b4929c1afcc134ead274238725e4ce729b26
13d7b7ca88de8341e3ec835a5a7d8c79bc50a136aff8eb90aa3c2267f3e8cc08
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9614e0f-1b62-40ec-b140-9464c5527d5e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5241
x-amzn-requestid: 3ffb8a54-178e-4574-9662-8dc7696203fd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ACiy0FOqIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e41811-26219fa14a85f6e81e4cf129;Sampled=0
x-amzn-remapped-date: Wed, 08 Feb 2023 21:45:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8U_d5u2rtXAyLLBhRZ3BbQkFOc5gxZIPhnyL5XOvjGV6-8KqWyn8FQ==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 21:45:53 GMT
etag: "4724b4929c1afcc134ead274238725e4ce729b26"
content-type: image/jpeg
age: 53900
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0e9c6d739031209088f6dbbf08f19e59
649a29bfcc9fa92c656231bad3ce41e88c4037a6
520f00562077664a006b427c200a9f3c42dbeba3fed67bdc61537e71adcf6fc4
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fffa089b5-b6af-40bb-98d7-cfce928d0761.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9872
x-amzn-requestid: 62e9b3ff-7a27-4d74-90b0-ef7aeabaad39
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f53QlGE4oAMF53A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e09f36-79e1ef9f3c167abb05cfefd4;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 06:33:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i887GcI8RbG4H_MBORz2PmKh4q33pZ2jLz1f4MZNbolHX4b9O_f-aw==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 981753271eb5b6d11bc29d52f173a5da.cloudfront.net (CloudFront), 1.1 google
date: Wed, 08 Feb 2023 23:57:48 GMT
age: 45985
etag: "649a29bfcc9fa92c656231bad3ce41e88c4037a6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
142.250.74.163200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Feb 2023 10:05:58 GMT
expires: Fri, 09 Feb 2024 10:05:58 GMT
cache-control: public, max-age=31536000
age: 9495
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
142.250.74.163200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 09 Feb 2023 03:13:01 GMT
expires: Fri, 09 Feb 2024 03:13:01 GMT
cache-control: public, max-age=31536000
age: 34272
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
feeds.feedburner.com/Buzzera?format=sigpro
142.250.74.142200 OK 6.6 kB URL HTTP/1.1 feeds.feedburner.com/Buzzera?format=sigpro
IP 142.250.74.142:0
Hash df62717f29401e5f335948bfdb6fb244
c4956724a6f036a855eb71478c7d9ab08809b916
280c5cc179b4ec5c78ac3f40bcba33ea460b634e0d62eeed944e0ed28bcc261f
GET /Buzzera?format=sigpro HTTP/1.1
Host: feeds.feedburner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
Last-Modified: Mon, 6 Feb 2023 20:04:49 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport, script-src 'nonce-DXVPRMlC4bdSdTrKtyHXQw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/RaichuFeedServer/cspreport/allowlist
Cross-Origin-Resource-Policy: same-site
Report-To: {"group":"RaichuFeedServer","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/RaichuFeedServer/external"}]}
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
Cross-Origin-Opener-Policy: same-origin; report-to="RaichuFeedServer"
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
resources.infolinks.com/js/1845.006-3.025.ab.1847.008-3.025/ice.js
172.66.41.9200 OK 57 kB URL HTTP/1.1 resources.infolinks.com/js/1845.006-3.025.ab.1847.008-3.025/ice.js
IP 172.66.41.9:0
File type ASCII text, with very long lines (65536), with no line terminators
Hash c6ee2f5ee5d8108c139d7995eb7235be
fe8501fa91bf7692c9b40163c95089fc699c56e1
c79263ce4c0b60c655507bc9530cdcbeb56b09a745b060ce1902179795ee6e7c
GET /js/1845.006-3.025.ab.1847.008-3.025/ice.js HTTP/1.1
Host: resources.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 10:12:57 GMT
ETag: W/"2d3a3-5f42d82229e4f"
Cache-Control: max-age=2592000
Expires: Sat, 11 Mar 2023 10:06:05 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 9488
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796cb1f92952b509-OSL
Content-Encoding: gzip
tcr.tynt.com/ti.js
172.64.151.83200 OK 16 kB IP 172.64.151.83:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1213)
Hash f2e61c526994de00d69f6747bcc76b50
11345f2c5ff1eae34a9fed3667b39a7ee7fdb219
e763c743fef8c09d4890ed3bbe78c6885053e43ff2b2f63ca521eaa7d3c4b8bb
GET /ti.js HTTP/1.1
Host: tcr.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Tue, 10 Jan 2023 20:39:09 GMT
vary: Accept-Encoding
etag: W/"63bdcced-b4d2"
content-encoding: gzip
CF-Cache-Status: HIT
Age: 222137
Expires: Sun, 12 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=259200
Server: cloudflare
CF-RAY: 796cb1f93c340b06-OSL
cdn.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
205.185.216.10404 Not Found 18 B URL HTTP/1.1 cdn.ning.com/files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg
IP 205.185.216.10:0
File type ASCII text, with no line terminators
Hash 817ae1ffa9d8bb15c6edd06322e71611
2d1d4c2765a85142f33f1cc48fe83f9d97d5ca09
739e3da4d1b298800721f9456cf16ce627973250c04a518f94906cec0ff8e6c3
GET /files/RqZgvaT9O4SJZ*q9SzeuPBuAbleVboSRdjzNDOM4JUAlGBC06MdexbZAwz8SnoEaAuB2MYpbsSAjgZSc2d2CxklJPIaEvYmm/SELAMAT_HARI_RAYA_AIDIFITRI_by_netcyber.jpg HTTP/1.1
Host: cdn.ning.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Thu, 09 Feb 2023 12:44:13 GMT
Connection: Keep-Alive
Accept-Ranges: bytes
Cache-Control: max-age=60
Content-Length: 18
Content-Type: text/html
X-HW: 1675946653.dop201.sk1.t,1675946653.cds066.sk1.shn,1675946653.dop201.sk1.t,1675946653.cds257.sk1.p
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 44fc0cb48c26edb9ce36736707b9182a
62de7faa3e8171c0d38a2e03a604d2545a3ede7f
9e511ad6ed9e7c5f28f573422e3891d2f4e5c2ba5107f7eda808c529a95931a2
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.chitika.net/getads.js
54.230.111.21200 OK 0 B URL HTTP/2 cdn.chitika.net/getads.js
IP 54.230.111.21:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getads.js HTTP/1.1
Host: cdn.chitika.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 0
last-modified: Fri, 19 Apr 2019 16:40:37 GMT
server: AmazonS3
date: Thu, 09 Feb 2023 05:18:34 GMT
etag: "d41d8cd98f00b204e9800998ecf8427e"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PzFyPkoSEImQo4PbqEaxHz4whK3OOmZdIo7D7tw3fG-3D_o3B7GXVA==
age: 26740
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
216.58.207.238200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 216.58.207.238:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 09 Feb 2023 12:44:13 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+530; expires=Sat, 08-Feb-2025 12:44:13 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 09 Feb 2023 12:44:13 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true
216.58.207.238200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true
IP 216.58.207.238:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1774
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 09 Feb 2023 12:44:13 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+017; expires=Sat, 08-Feb-2025 12:44:13 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 09 Feb 2023 12:44:13 GMT
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
216.58.207.238200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 216.58.207.238:0
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1558
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Thu, 09 Feb 2023 12:44:13 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+005; expires=Sat, 08-Feb-2025 12:44:13 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Thu, 09 Feb 2023 12:44:13 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
24.media.tumblr.com/tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg
74.114.154.22301 Moved Permanently 166 B URL HTTP/1.1 24.media.tumblr.com/tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg
IP 74.114.154.22:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg HTTP/1.1
Host: 24.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://64.media.tumblr.com/tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg
24.media.tumblr.com/tumblr_m8gigfCuBW1qi47k6o1_500.jpg
74.114.154.22301 Moved Permanently 166 B URL HTTP/1.1 24.media.tumblr.com/tumblr_m8gigfCuBW1qi47k6o1_500.jpg
IP 74.114.154.22:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /tumblr_m8gigfCuBW1qi47k6o1_500.jpg HTTP/1.1
Host: 24.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://64.media.tumblr.com/tumblr_m8gigfCuBW1qi47k6o1_500.jpg
25.media.tumblr.com/tumblr_m8gj6fTYC31qi47k6o1_500.png
74.114.154.22301 Moved Permanently 166 B URL HTTP/1.1 25.media.tumblr.com/tumblr_m8gj6fTYC31qi47k6o1_500.png
IP 74.114.154.22:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 3ea1c8d079b38532a6e01a96216ba5e2
598d3ff91d3e252f1e13df8cf0348b270ff2da3f
87a9323ac85ce28867d5d7ce590c8f29b8d1a999961fca71bb33adef48683691
GET /tumblr_m8gj6fTYC31qi47k6o1_500.png HTTP/1.1
Host: 25.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: openresty
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: text/html
Content-Length: 166
Connection: keep-alive
Location: https://64.media.tumblr.com/tumblr_m8gj6fTYC31qi47k6o1_500.png
4.bp.blogspot.com/-DpL3O3Jga8w/UIi-qa9MhMI/AAAAAAAABhg/y4y1Z7nJD8o/s45-c/beautiful-hairstyles-for-a-romantic-date-011.jpg
142.250.74.161200 OK 1.9 kB URL HTTP/2 4.bp.blogspot.com/-DpL3O3Jga8w/UIi-qa9MhMI/AAAAAAAABhg/y4y1Z7nJD8o/s45-c/beautiful-hairstyles-for-a-romantic-date-011.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 3370bf1ff0a906680e88a870e9678273
2641c63331ac8e222b85b5a1388098c16dc9b0da
89156d5456b10f005ae6f76d7f0638d8a4aacd089388ec6c28f6c55161ddc5b6
GET /-DpL3O3Jga8w/UIi-qa9MhMI/AAAAAAAABhg/y4y1Z7nJD8o/s45-c/beautiful-hairstyles-for-a-romantic-date-011.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="beautiful-hairstyles-for-a-romantic-date-011.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1872
x-xss-protection: 0
date: Thu, 09 Feb 2023 12:44:13 GMT
expires: Thu, 02 Feb 2023 06:10:34 GMT
cache-control: public, max-age=86400, no-transform
etag: "v618"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 278 B IP 93.184.220.29:0
Hash fbb9800d0e88c68f8bcb3779ee556842
15a00b48faea69acdad5ddfac70c364920f6a5d3
f9a7618e6036430489492100368da2b01a0f399ca533c0242c32d9accfd09b38
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6210
Cache-Control: max-age=104450
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Etag: "63e3c75d-116"
Expires: Fri, 10 Feb 2023 17:45:03 GMT
Last-Modified: Wed, 08 Feb 2023 16:01:33 GMT
Server: ECS (ska/F6FC)
X-Cache: HIT
Content-Length: 278
1.bp.blogspot.com/-U6Qk4Bi87EM/Ywd7iSlOXMI/AAAAAAAAaJU/1sVFtztrW-47XFP0AIWe-IelzL9Pth0FACK4BGAYYCw/s45-c/25276650-jogging-girl-running-along-the-beach.jpg
142.250.74.161200 OK 1.4 kB URL HTTP/2 1.bp.blogspot.com/-U6Qk4Bi87EM/Ywd7iSlOXMI/AAAAAAAAaJU/1sVFtztrW-47XFP0AIWe-IelzL9Pth0FACK4BGAYYCw/s45-c/25276650-jogging-girl-running-along-the-beach.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash fbd5154a9d197c1caef900f0bd2357a8
2ce825f8d30305242663b218133d36f0f8eb9191
7f694f48a3aef67f0dd70bb43909fafa7329c4412d8b0cb815fd4d2aab3bfce7
GET /-U6Qk4Bi87EM/Ywd7iSlOXMI/AAAAAAAAaJU/1sVFtztrW-47XFP0AIWe-IelzL9Pth0FACK4BGAYYCw/s45-c/25276650-jogging-girl-running-along-the-beach.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="25276650-jogging-girl-running-along-the-beach.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1398
x-xss-protection: 0
date: Thu, 09 Feb 2023 12:44:13 GMT
expires: Thu, 09 Feb 2023 17:47:30 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6898"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
104.18.32.68200 OK 472 B IP 104.18.32.68:0
Hash 61d478faa89367a80894816ec3477057
a1adece785b4023969912ff69f3f44ca23474838
e4cdcf23a08cd9db8874059179d4f83e5763ddbc45ee07a8ea53641d4bb75f5c
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 07 Feb 2023 06:34:04 GMT
Expires: Tue, 14 Feb 2023 06:34:03 GMT
Etag: "a1adece785b4023969912ff69f3f44ca23474838"
Cache-Control: max-age=409189,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796cb1fadeecfac4-OSL
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 130bb82172a26b674a54e53bb927cccb
cea15a831d1deb00f6f5bc213d885419ea33a70d
974654b2305d1a603b85bcd46a8f12e57ab2cd0d0042cbebf206d2067e0ab25b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:13 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgets.amung.us/tab.js
104.22.74.171200 OK 19 kB IP 104.22.74.171:0
File type ASCII text, with very long lines (29322), with no line terminators
Hash c9ed731944024702b435ba1cc59ef389
80ed46e16bd892d709d35f5ba8dfef01e4d6e320
34b786e8399cc681809345c8e92d95927bc67234f4e592adc1ef2a5d8e4ed449
GET /tab.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:13 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 12 Jan 2023 17:19:48 GMT
etag: W/"63c04134-728a"
expires: Fri, 10 Feb 2023 12:44:13 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: EXPIRED
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 796cb1f94f6409ac-ARN
1.bp.blogspot.com/_EJyHGaxQNDs/TCC3qu9wSkI/AAAAAAAAAOE/hCeABp8lKBA/S45-s45-c/14062010185.jpg
142.250.74.161404 Not Found 904 B URL HTTP/2 1.bp.blogspot.com/_EJyHGaxQNDs/TCC3qu9wSkI/AAAAAAAAAOE/hCeABp8lKBA/S45-s45-c/14062010185.jpg
IP 142.250.74.161:0
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /_EJyHGaxQNDs/TCC3qu9wSkI/AAAAAAAAAOE/hCeABp8lKBA/S45-s45-c/14062010185.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
router.infolinks.com/usync/manage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
172.66.42.247200 OK 0 B URL HTTP/2 router.infolinks.com/usync/manage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 172.66.42.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/manage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-length: 0
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796cb1fae8dfb4f1-OSL
X-Firefox-Spdy: h2
router.infolinks.com/gsd?evt=afterGSD&pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&jsv=1845.006-3.025.ab.1847.008-3.025&_cb=16759467128510
172.66.42.247200 OK 0 B URL HTTP/1.1 router.infolinks.com/gsd?evt=afterGSD&pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&jsv=1845.006-3.025.ab.1847.008-3.025&_cb=16759467128510
IP 172.66.42.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /gsd?evt=afterGSD&pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&jsv=1845.006-3.025.ab.1847.008-3.025&_cb=16759467128510 HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:14 GMT
Content-Length: 0
Connection: keep-alive
Via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796cb1fa1d66b529-OSL
synad2.nuffnang.com.my/lb.js
18.138.110.223302 Found 315 B URL HTTP/1.1 synad2.nuffnang.com.my/lb.js
IP 18.138.110.223:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 43e57bdc55f596f50440bc4166523aae
170ea997fd02a695bce16a22a0c6c692aae7bbb6
95f4c6e62743abfc1d7f71e2bf6f2efc5d0ff643e6da4ec7604f3bf69768c5ee
GET /lb.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 302 Found
Date: Thu, 09 Feb 2023 12:44:14 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/lb.js
Cache-Control: max-age=86400
Expires: Fri, 10 Feb 2023 12:44:14 GMT
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1
4.bp.blogspot.com/-kThvkle-_1I/T0ep7_tnDZI/AAAAAAAAAEg/9TTyUmHL3oM/s45-c/227964_215515251806331_100000435739066_784165_1526012_n.jpg
142.250.74.161404 Not Found 904 B URL HTTP/2 4.bp.blogspot.com/-kThvkle-_1I/T0ep7_tnDZI/AAAAAAAAAEg/9TTyUmHL3oM/s45-c/227964_215515251806331_100000435739066_784165_1526012_n.jpg
IP 142.250.74.161:0
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-kThvkle-_1I/T0ep7_tnDZI/AAAAAAAAAEg/9TTyUmHL3oM/s45-c/227964_215515251806331_100000435739066_784165_1526012_n.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
IP 142.250.74.131:0
Hash a1c41b6480e25a6e7696bdf77d62a010
31c837ad49e101f72be7e3bf59b681437e74ceda
0a047b2f18afc3b590c695085c957a59c8da8d0455f6f057c5d5712cf0983ee7
POST /s/gts1p5/97q-VzuQ-Mw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 09 Feb 2023 12:44:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
router.infolinks.com/usync/lcmanage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
172.66.42.247200 OK 0 B URL HTTP/2 router.infolinks.com/usync/lcmanage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 172.66.42.247:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /usync/lcmanage?pid=434225&wsid=5&pdom=photoimagepics.blogspot.com&purl=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: router.infolinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-length: 0
via: 1.1 google
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796cb1fae8deb4f1-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash fa2b5248ad492a29f24895dfc8921cd6
4423b0780b9a6a93e58f5b3dbfce36bc717eafef
aac46293faf15fc6d7bd1753a1bf07987410b104317d370ee18f540eb6b74a9f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 23:33:40 GMT
Expires: Wed, 15 Feb 2023 23:33:39 GMT
Etag: "4423b0780b9a6a93e58f5b3dbfce36bc717eafef"
Cache-Control: max-age=556764,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796cb1fb4f65fac4-OSL
synad2.nuffnang.com.my/ss.js
18.138.110.223302 Found 315 B URL HTTP/1.1 synad2.nuffnang.com.my/ss.js
IP 18.138.110.223:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 51f316438686c03cef13e0cfbf8c505a
5679098c6a8f7e945c1d342fb926dec9725ca338
3d20dd5cb58039151bb0d7c0aafec903479f53078031aeeba45dfe56e955d796
GET /ss.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 302 Found
Date: Thu, 09 Feb 2023 12:44:14 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/ss.js
Cache-Control: max-age=86400
Expires: Fri, 10 Feb 2023 12:44:14 GMT
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/lr.js
18.138.110.223302 Found 315 B URL HTTP/1.1 synad2.nuffnang.com.my/lr.js
IP 18.138.110.223:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1e5a58c4069ab1dfac01c1427d79281e
3fb8451f31d1b7dcd0a6397eb5197838de52a09c
6909936fd0b322677a32c29850af205428ed53367b5aef713c5efe9dcca8ac18
GET /lr.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 302 Found
Date: Thu, 09 Feb 2023 12:44:14 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/lr.js
Cache-Control: max-age=86400
Expires: Fri, 10 Feb 2023 12:44:14 GMT
Content-Length: 315
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash fa2b5248ad492a29f24895dfc8921cd6
4423b0780b9a6a93e58f5b3dbfce36bc717eafef
aac46293faf15fc6d7bd1753a1bf07987410b104317d370ee18f540eb6b74a9f
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:14 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 08 Feb 2023 23:33:40 GMT
Expires: Wed, 15 Feb 2023 23:33:39 GMT
Etag: "4423b0780b9a6a93e58f5b3dbfce36bc717eafef"
Cache-Control: max-age=556764,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796cb1fc6ff3b50c-OSL
64.media.tumblr.com/tumblr_m8gigfCuBW1qi47k6o1_500.jpg
192.0.77.3200 OK 58 kB URL HTTP/2 64.media.tumblr.com/tumblr_m8gigfCuBW1qi47k6o1_500.jpg
IP 192.0.77.3:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x375, components 3\012- data
Hash b4c38f243fe508548f00f9e8df91da28
eeec8bdd84768222f25bb6a9f7e6e6387a63144a
d935a1525aa315cbbe504422c3e0d6a5a91baa59e553753c95dce0edff43bbce
GET /tumblr_m8gigfCuBW1qi47k6o1_500.jpg HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: image/jpeg
content-length: 58292
etag: "d0fa65671ecc91af265fc49383554311-1498089600-00605cb"
last-modified: Sat, 12 Dec 2020 10:14:50 GMT
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: MISS arn 6
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=MISS;dur=274.0
X-Firefox-Spdy: h2
3.bp.blogspot.com/-O_3BAICrB30/T9W0iOGvLpI/AAAAAAAAAEU/PlcT3xgWr0A/s45-c/536595_359210894126017_248247379_n.jpg
142.250.74.161200 OK 1.7 kB URL HTTP/2 3.bp.blogspot.com/-O_3BAICrB30/T9W0iOGvLpI/AAAAAAAAAEU/PlcT3xgWr0A/s45-c/536595_359210894126017_248247379_n.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 922f0e701b87c233f01b804f9099a11f
fc1bcc7bda34aca7124618b933161a730b38ae32
fbe3cc1ec42bcd85ee8c12a492ef8cd216ea1715b32df7dd7427e1f9710b9318
GET /-O_3BAICrB30/T9W0iOGvLpI/AAAAAAAAAEU/PlcT3xgWr0A/s45-c/536595_359210894126017_248247379_n.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v45"
expires: Fri, 10 Feb 2023 12:44:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="536595_359210894126017_248247379_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 1731
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
64.media.tumblr.com/tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg
192.0.77.3200 OK 47 kB URL HTTP/2 64.media.tumblr.com/tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg
IP 192.0.77.3:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 450x500, components 3\012- data
Hash bf2c414ce2e904302fdcf35908381663
08b8e029a0902d5ab53c7d6fe25903b3f08d6730
62d2859d38fc840ceb29a1e187e20360a387948d0b109867c12efcc768d0d7aa
GET /tumblr_m8gi5z7Hmh1qi47k6o1_500.jpg HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: image/jpeg
content-length: 46586
etag: "190c4c0e0284eff949f65c07c5fff9ac-1498089600-00605cb"
last-modified: Mon, 14 Dec 2020 07:48:50 GMT
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: MISS arn 8
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=MISS;dur=301.0
X-Firefox-Spdy: h2
64.media.tumblr.com/tumblr_m8gj6fTYC31qi47k6o1_500.png
192.0.77.3200 OK 99 kB URL HTTP/2 64.media.tumblr.com/tumblr_m8gj6fTYC31qi47k6o1_500.png
IP 192.0.77.3:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 500x424, components 3\012- data
Hash f541cd2082f226c5501a10a8afff6003
dc4dfeb6610307022382a075a5e844b99eba4f09
a3933f9b73a3d953f68565e5e93283e9ba9f841cd1b98d99b43d90b99e71329f
GET /tumblr_m8gj6fTYC31qi47k6o1_500.png HTTP/1.1
Host: 64.media.tumblr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://photoimagepics.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: image/jpeg
content-length: 99449
etag: "bbfe5a17568ff09195c72fd7ba4b24f4-1498089600-00605cb"
last-modified: Mon, 30 Nov 2020 14:22:01 GMT
x-frames: 1
timing-allow-origin: *
cache-control: max-age=315360000
x-nc: MISS arn 8
access-control-allow-methods: GET
access-control-allow-origin: *
access-control-max-age: 86400
strict-transport-security: max-age=31536000; preload
server-timing: dc;desc=arn, cache;desc=MISS;dur=315.0
X-Firefox-Spdy: h2
1.bp.blogspot.com/--aN58_RUdW8/WHi8mbtZXbI/AAAAAAAADYI/_fwJm0XzMKERfnTWj_93nipLAj3xmjpZQCK4B/s45-c/beautiful-clothes-draw-drawning-Favim.com-2466672.jpg
142.250.74.161200 OK 1.7 kB URL HTTP/2 1.bp.blogspot.com/--aN58_RUdW8/WHi8mbtZXbI/AAAAAAAADYI/_fwJm0XzMKERfnTWj_93nipLAj3xmjpZQCK4B/s45-c/beautiful-clothes-draw-drawning-Favim.com-2466672.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 31e8095c1e7f7582dd8bd89dd40654da
9d911432753fe47268ab306c90b26fd9d662163a
c18437cfb655400095b064abc47a23ff77a8bd10e65e557d795f8cf27bda15d6
GET /--aN58_RUdW8/WHi8mbtZXbI/AAAAAAAADYI/_fwJm0XzMKERfnTWj_93nipLAj3xmjpZQCK4B/s45-c/beautiful-clothes-draw-drawning-Favim.com-2466672.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vd84"
expires: Fri, 10 Feb 2023 12:44:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="beautiful-clothes-draw-drawning-Favim.com-2466672.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 1695
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-tsUaXSFJlSA/VATTCE5jUqI/AAAAAAAAAl8/XnaqnJSsgqE/s45-c/*
142.250.74.161200 OK 2.4 kB URL HTTP/2 2.bp.blogspot.com/-tsUaXSFJlSA/VATTCE5jUqI/AAAAAAAAAl8/XnaqnJSsgqE/s45-c/*
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 43250f60d22b78d62cc77a4eb9615c26
b7ff302df9743be17f953c12020f5ef73f47e1ac
dde3d3f65a3c436cfb18c1a3b69adece07473f11e5eebbfbda1b94e6fd6bb0d9
GET /-tsUaXSFJlSA/VATTCE5jUqI/AAAAAAAAAl8/XnaqnJSsgqE/s45-c/* HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v260"
expires: Fri, 10 Feb 2023 12:44:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="*.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 2418
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-MDH1ofEd76w/TWkw_RavHVI/AAAAAAAAAAo/UTxTYvK5ZiE/s45-c/24720_105396572815162_100000344600713_132022_8196039_n.jpg
142.250.74.161200 OK 2.0 kB URL HTTP/2 4.bp.blogspot.com/-MDH1ofEd76w/TWkw_RavHVI/AAAAAAAAAAo/UTxTYvK5ZiE/s45-c/24720_105396572815162_100000344600713_132022_8196039_n.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash bcf9eeb6f49bc4f226583cd9a95205b4
c283b09c3b656bd672792a813c9ec2cc5bd00992
edb2ea8e81affaee333c7298b073bd54136cdc762a25a40540512ce11dbbe676
GET /-MDH1ofEd76w/TWkw_RavHVI/AAAAAAAAAAo/UTxTYvK5ZiE/s45-c/24720_105396572815162_100000344600713_132022_8196039_n.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "va"
expires: Fri, 10 Feb 2023 12:44:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="24720_105396572815162_100000344600713_132022_8196039_n.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 2024
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=xcn5perqrm98&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&c=t&x=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&y=&a=0&d=2.878&v=27&r=8409
104.22.75.171200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=xcn5perqrm98&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&c=t&x=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&y=&a=0&d=2.878&v=27&r=8409
IP 104.22.75.171:0
File type ASCII text, with no line terminators
Hash 540a87d145e22797dff39f0103874ef3
552cb64b61cb53849ce46ec1c56376465029667a
b015888798037a40f2ae7b732b31163508e4f911713e6427b0a2e3beb9c1b3a4
GET /pingjs/?k=xcn5perqrm98&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&c=t&x=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&y=&a=0&d=2.878&v=27&r=8409 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 09 Feb 2023 12:44:14 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 796cb1fc88170a2c-ARN
ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri
67.202.105.34204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri
IP 67.202.105.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Thu, 09 Feb 2023 12:44:14 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-1abowsM4IBg/UMHT-PjXyeI/AAAAAAAAAdk/dtSNosrMETI/s45-c/Photo0704E001E001.jpg
142.250.74.161200 OK 1.8 kB URL HTTP/2 3.bp.blogspot.com/-1abowsM4IBg/UMHT-PjXyeI/AAAAAAAAAdk/dtSNosrMETI/s45-c/Photo0704E001E001.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 13db99cb4e3c52dfeba17c95365691ed
6e6dc1bc02d56ed8feeadb6cfcb97b8eb97030ff
5a7d37e36e0063acb0c9cd5c30e42764ad2a3aa5c2e2cfcfb1ec972033b8823b
GET /-1abowsM4IBg/UMHT-PjXyeI/AAAAAAAAAdk/dtSNosrMETI/s45-c/Photo0704E001E001.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Photo0704E001E001.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1777
x-xss-protection: 0
date: Thu, 09 Feb 2023 12:44:14 GMT
expires: Sat, 04 Feb 2023 07:58:50 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1d9"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-Ln-dR2zR-Mg/TteUMSkbhtI/AAAAAAAAARc/StqOXp86r1k/s45-c/2011-09-18%25252B08.37.10_001.jpg
142.250.74.161200 OK 1.9 kB URL HTTP/2 2.bp.blogspot.com/-Ln-dR2zR-Mg/TteUMSkbhtI/AAAAAAAAARc/StqOXp86r1k/s45-c/2011-09-18%25252B08.37.10_001.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 09cf990094fe7a0e7d5948bc5a555d4b
0462fe3a9d2e3dfe61ff4cecb12198e01d68f8ef
81b2d4181e1cf5cb32970c892205693b3e5f115f9b1584af46804fa6d32cc775
GET /-Ln-dR2zR-Mg/TteUMSkbhtI/AAAAAAAAARc/StqOXp86r1k/s45-c/2011-09-18%25252B08.37.10_001.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v117"
expires: Fri, 10 Feb 2023 12:44:14 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="2011-09-18%2B08.37.10_001.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 09 Feb 2023 12:44:14 GMT
server: fife
content-length: 1866
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=ac44hgGjer4yu3acwqm_6l&dn=TI&cc=1&r=&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
67.202.105.34200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=ac44hgGjer4yu3acwqm_6l&dn=TI&cc=1&r=&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 67.202.105.34:0
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=ac44hgGjer4yu3acwqm_6l&dn=TI&cc=1&r=&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
expires: Fri, 10 Feb 2023 12:44:14 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Thu, 09 Feb 2023 12:44:14 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
www.iconj.com/icon.php?pid=mbzazk03jt
23.234.237.154404 Not Found 2.1 kB URL HTTP/1.1 www.iconj.com/icon.php?pid=mbzazk03jt
IP 23.234.237.154:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (661)
Hash 3c07b1c3450a5b0981a44a4dec840b1f
178477f39a80a7ede3861a52309cfded7f6c7ceb
e32bacaa8641e7c3f0c0a161256747dd7a2f2c99fc1d62cdac584addc792f5d4
GET /icon.php?pid=mbzazk03jt HTTP/1.1
Host: www.iconj.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html
last-modified: Wed, 15 Dec 2021 15:58:33 GMT
accept-ranges: bytes
content-encoding: gzip
vary: Accept-Encoding
content-length: 2095
date: Thu, 09 Feb 2023 12:44:14 GMT
server: LiteSpeed
ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri
67.202.105.34204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri
IP 67.202.105.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Thu, 09 Feb 2023 12:44:14 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
67.202.105.34204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 67.202.105.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Thu, 09 Feb 2023 12:44:14 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
67.202.105.34204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 67.202.105.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Thu, 09 Feb 2023 12:44:14 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
67.202.105.34204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html
IP 67.202.105.34:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=ac44hgGjer4yu3acwqm_6l&lm=0&ts=1675946712790&dn=TI&iso=0&pu=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Thu, 09 Feb 2023 12:44:14 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
sc.tynt.com/script/sc/ac44hgGjer4yu3acwqm_6l.js
104.18.36.173200 OK 0 B URL HTTP/2 sc.tynt.com/script/sc/ac44hgGjer4yu3acwqm_6l.js
IP 104.18.36.173:0
GET /script/sc/ac44hgGjer4yu3acwqm_6l.js HTTP/1.1
Host: sc.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: text/javascript; charset=utf-8
vary: Accept-Encoding
status: 200 OK
x-rack-cache: fresh
cache-control: max-age=86400, public, s-maxage=172800
last-modified: Tue, 07 Feb 2023 15:08:15 GMT
x-xss-protection: 1; mode=block
x-request-id: d2f385be-40f7-4cb7-ab93-636b4455c5f6
x-content-digest: f9a914150cbe0b787e41887cc5ab1f6f1aff8a9c
x-runtime: 0.002848
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
expires: Thu, 09 Feb 2023 06:48:31 GMT
content-encoding: gzip
cf-cache-status: MISS
server: cloudflare
cf-ray: 796cb1fc8ea00b69-OSL
X-Firefox-Spdy: h2
t.dtscout.com/pv/?_a=v&_h=photoimagepics.blogspot.com&_ss=74kwyhkxla&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=41ci&_cb=_dtspv.c
141.101.120.10200 OK 0 B URL HTTP/2 t.dtscout.com/pv/?_a=v&_h=photoimagepics.blogspot.com&_ss=74kwyhkxla&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=41ci&_cb=_dtspv.c
IP 141.101.120.10:0
GET /pv/?_a=v&_h=photoimagepics.blogspot.com&_ss=74kwyhkxla&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=41ci&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Cookie: m=1; oa=1; df=1675946654
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: application/javascript
x-t: 0.157
x-c: 0
expires: Thu, 09 Feb 2023 12:44:13 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=N6H9L2z56IvJwXTzgO1Jdz6t7GSGOeAHMLeqB4Em2fw6S4P8DnZUxnEX2YzO7uqwBFGYt94Zf5HEdShVLx%2B16Ham%2BGTybQX4iReQvo9K%2BJGJrkT2PuIORNC53onUTBw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 796cb1fdede72d8c-ARN
content-encoding: br
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=252920&bid=1245288&RD=4635786502616&DIF=1&bd_ref_v=photoimagepics.blogspot.com&tref=1&win_name=null&docref=&jsrand=4635786502616&js1loc=-&loctitle=pictures
54.241.51.109200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=252920&bid=1245288&RD=4635786502616&DIF=1&bd_ref_v=photoimagepics.blogspot.com&tref=1&win_name=null&docref=&jsrand=4635786502616&js1loc=-&loctitle=pictures
IP 54.241.51.109:0
GET /BidVertiser.dbm?pid=252920&bid=1245288&RD=4635786502616&DIF=1&bd_ref_v=photoimagepics.blogspot.com&tref=1&win_name=null&docref=&jsrand=4635786502616&js1loc=-&loctitle=pictures HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thursday, 09-Feb-2023 12:44:12 GMT
Cache-Control: no-store
Last-Modified: Wednesday, 09-Feb-2022 12:44:12 GMT
Set-Cookie: bdv_c2p=244; domain=.bidvertiser.com; path=/; expires=Fri, 10-Feb-2023 12:44:12 GMT
bdv_c2p=1_1_1; domain=.bidvertiser.com; path=/; expires=Fri, 10-Feb-2023 12:44:12 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5303
CONNECTION: Close
feeds.feedburner.com/Buzzera?format=sigpro
142.250.74.142200 OK 0 B URL HTTP/1.1 feeds.feedburner.com/Buzzera?format=sigpro
IP 142.250.74.142:0
GET /Buzzera?format=sigpro HTTP/1.1
Host: feeds.feedburner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/xml; charset=utf-8
Vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
feedburnerv2:
Last-Modified: Mon, 6 Feb 2023 20:04:49 GMT
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 09 Feb 2023 12:44:12 GMT
Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/RaichuFeedServer/cspreport, script-src 'nonce-UIoovpB6rBY6Q7ktoD0u0Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/RaichuFeedServer/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/RaichuFeedServer/cspreport/allowlist
Cross-Origin-Opener-Policy: same-origin
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Cross-Origin-Resource-Policy: same-site
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
bdv.bidvertiser.com/bidvertiser.dbm?pid=252920&bid=1245288&RD=9657394169759&DIF=2
54.241.51.109200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=252920&bid=1245288&RD=9657394169759&DIF=2
IP 54.241.51.109:0
GET /bidvertiser.dbm?pid=252920&bid=1245288&RD=9657394169759&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
HTTP/1.1 200 OK
Date: Thursday, 09-Feb-2023 12:44:13 GMT
Cache-Control: no-store
Last-Modified: Wednesday, 09-Feb-2022 12:44:13 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
c.statcounter.com/t.php?sc_project=6439179&u1=9F9304F74C314F00B70B242F9BB1F1C1&java=1&security=578a30dc&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&invisible=1&sc_rum_e_s=2824&sc_rum_e_e=2828&get_config=true
104.20.219.77200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=6439179&u1=9F9304F74C314F00B70B242F9BB1F1C1&java=1&security=578a30dc&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&invisible=1&sc_rum_e_s=2824&sc_rum_e_e=2828&get_config=true
IP 104.20.219.77:0
GET /t.php?sc_project=6439179&u1=9F9304F74C314F00B70B242F9BB1F1C1&java=1&security=578a30dc&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//photoimagepics.blogspot.com/2012/08/gambar-selamat-hari-raya-aidilfitri.html&t=Gambar%20Selamat%20Hari%20Raya%20Aidilfitri&invisible=1&sc_rum_e_s=2824&sc_rum_e_e=2828&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://photoimagepics.blogspot.com
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc6439179.1675946654.0; SameSite=None; Secure; Expires=Tuesday, 08-Feb-2028 20:44:14 +08; Path=/; Domain=.statcounter.com
access-control-allow-origin: http://photoimagepics.blogspot.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 796cb1fb2cdcb505-OSL
content-encoding: br
X-Firefox-Spdy: h2
t.dtscout.com/i/?l=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&j=
141.101.120.10200 OK 0 B URL HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&j=
IP 141.101.120.10:0
GET /i/?l=http%3A%2F%2Fphotoimagepics.blogspot.com%2F2012%2F08%2Fgambar-selamat-hari-raya-aidilfitri.html&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://photoimagepics.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 09 Feb 2023 12:44:14 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Thu, 09-Feb-2023 14:07:34 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Thu, 09-Feb-2023 16:44:14 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1675946654; Domain=dtscout.com; Expires=Sat, 20-May-2023 12:44:14 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.634
expires: Thu, 09 Feb 2023 12:44:13 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v1J2Cn1F1aGYtkDF%2BRKo%2BqUE0%2BEK8CHdQJoiOI0uUrbPSokQayPIqTv8MXyqTKsNRbC8QKTf1d%2Bw8I%2Fi1rhkts6qddKcGH7A5UXY3mX%2BqvQjHeg6STpqYGXqFnwc6QA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 796cb1fc7c3f2d8c-ARN
content-encoding: br
X-Firefox-Spdy: h2