r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dca68db7aea32f6683ce8d542c078f04
19c495238df74fca680e21f18627ff94de5dd2e5
35cab3987fc0e4a41b305cb208c1e33fa38ce8bdfd9f386c3dc0411dd4d5ac61
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "35CAB3987FC0E4A41B305CB208C1E33FA38CE8BDFD9F386C3DC0411DD4D5AC61"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10542
Expires: Tue, 07 Feb 2023 13:31:35 GMT
Date: Tue, 07 Feb 2023 10:35:53 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 565c1bbc5c1c40be1988b3bf6fd9dc1a
cfdba5bc597130461dd67bf6cda53183be592493
60ceb36a8329c92fc49a3caf50daf511a38e01eac21a07d7a0a838166bea058d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "60CEB36A8329C92FC49A3CAF50DAF511A38E01EAC21A07D7A0A838166BEA058D"
Last-Modified: Mon, 06 Feb 2023 23:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3892
Expires: Tue, 07 Feb 2023 11:40:45 GMT
Date: Tue, 07 Feb 2023 10:35:53 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Backoff, Alert, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 07 Feb 2023 10:34:08 GMT
content-type: application/json
age: 105
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash cc14b0d2f7c451f6431dc87ba54d1d60
bab8bfda6fa3e2f17125353f5147211787dc25d0
b58fe18a5cc8fe5aaf49ba7eadd0ef34692892e68e9c52eb5bb56ea27e1300ad
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B58FE18A5CC8FE5AAF49BA7EADD0EF34692892E68E9C52EB5BB56EA27E1300AD"
Last-Modified: Mon, 06 Feb 2023 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Tue, 07 Feb 2023 12:21:18 GMT
Date: Tue, 07 Feb 2023 10:35:53 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash e76071a28ee566dababb3834f46d68ed
aebb4e68c1ba2de0f90025283e8ed8470944fde0
78b6df2627172e5b35476bc31020f02898cdc412aaf4337af2c3b049a60912b6
GET /chains/remote-settings.content-signature.mozilla.org-2023-03-20-18-44-46.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: 2FEAhxpr+CF+V1zn+t3wtBW+qBSG/KOroqBAeWknu+jPeDeIjqTFW/wgRpxysu7VRILLNHrEJGQ=
x-amz-request-id: BF76JPY0B60X4VWG
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 07 Feb 2023 10:35:29 GMT
age: 24
last-modified: Sun, 29 Jan 2023 18:44:47 GMT
etag: "e76071a28ee566dababb3834f46d68ed"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 10:35:53 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Retry-After, Content-Length, Content-Type, ETag, Cache-Control, Alert, Pragma, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 07 Feb 2023 09:51:19 GMT
age: 2674
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 9b88bae61bca33aba8aa99f6128db8d9
a07b61fb2458917699613fcae68710941b595416
54915c2f79822732e06a592d027da421ad1e7a6458c545f98333db25612b3dea
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "54915C2F79822732E06A592D027DA421AD1E7A6458C545F98333DB25612B3DEA"
Last-Modified: Mon, 06 Feb 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8731
Expires: Tue, 07 Feb 2023 13:01:25 GMT
Date: Tue, 07 Feb 2023 10:35:54 GMT
Connection: keep-alive
catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html
142.250.74.1200 OK 27 kB URL HTTP/1.1 catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html
IP 142.250.74.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (24589)
Hash b56d9ce945c63c619ded8bc6c16267e0
d406ced18aebd666348ca6c4bda9f06f34d1dada
12047a8336ca3f558c724701528eb49bf1b7289a8aa5270d2188b168d5e4c7cf
GET /2011/07/transformers-2-revenge-of-fallen.html HTTP/1.1
Host: catatanmathin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 07 Feb 2023 10:35:54 GMT
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 01 Dec 2022 01:03:31 GMT
ETag: W/"d4f9feea4379439223cb6ddb9faedda027224f7ab295b493264687059a0749e0"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 27129
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6a24862b6ce51c945cd18a05ca4594cc
a8276e3db453c4a8f0d585dd6e77ec4a79dd44ba
3ebaa32aa407d3b21bff2f84adad62c2caf2f82439c99bf9fba2c4018688364a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 955a3e4f7728788a3d0359d56ad39244
a5484db5068e9b6029cb7a54e358716fd26dff28
07cad89b22e5c7552012bf9b6dad19585e1633ed8e6e47cf0c020e41809bb584
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
142.250.74.73200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 142.250.74.73:0
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 07 Feb 2023 04:54:37 GMT
expires: Wed, 07 Feb 2024 04:54:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Feb 2023 04:49:26 GMT
content-type: text/css
age: 20477
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
catatanmathin.blogspot.com/js/cookienotice.js
142.250.74.1200 OK 2.0 kB URL HTTP/1.1 catatanmathin.blogspot.com/js/cookienotice.js
IP 142.250.74.1:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: catatanmathin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Tue, 14 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 07 Feb 2023 02:53:42 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ajax.googleapis.com/ajax/libs/mootools/1.3.1/mootools-yui-compressed.js
142.250.74.138200 OK 88 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/mootools/1.3.1/mootools-yui-compressed.js
IP 142.250.74.138:0
File type ASCII text, with very long lines (889)
Hash db755e0f865877dd0ae47a55b6039204
fe91b37266d1cdb4b4f51297f69326e271704f35
aefc79031c1cb04fed78f296150c4c60730de2b99b4fde2f0c0682ae86f52849
GET /ajax/libs/mootools/1.3.1/mootools-yui-compressed.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 88496
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 03 Feb 2023 02:48:57 GMT
expires: Sat, 03 Feb 2024 02:48:57 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 373617
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/3801814646-widgets.js
142.250.74.73200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3801814646-widgets.js
IP 142.250.74.73:0
File type ASCII text, with very long lines (2221)
Hash 4b866f80aa72c49d02f36338402a59e5
ca95baa3565ec41d9635387ac90b2add0e05a47d
aff6590600f8a33efdbaf01cc67e5a435e38ec8997b3c6b1f34a1ca8ff72fe7e
GET /static/v1/widgets/3801814646-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56575
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 06 Feb 2023 02:58:16 GMT
expires: Tue, 06 Feb 2024 02:58:16 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 06 Feb 2023 00:50:58 GMT
content-type: text/javascript
age: 113858
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
216.58.207.238200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 216.58.207.238:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Tue, 07 Feb 2023 10:35:54 GMT
expires: Tue, 07 Feb 2023 10:35:54 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d8fdc3f3fcd0a67e69f28b56f4f0c65
4971af943010d5bbb9d714deef8c44597f6b3092
3342a5a542b3dcd7f44f490609d077b00aad3be7d1ce6474073a9f589c32e403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-OLOyknjcuag/TdetB9UqsvI/AAAAAAAAGrs/mz21C7KPlxg/s1600/date.png
142.250.74.161200 OK 919 B URL HTTP/1.1 3.bp.blogspot.com/-OLOyknjcuag/TdetB9UqsvI/AAAAAAAAGrs/mz21C7KPlxg/s1600/date.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash f2d4c679a1c9d22d7b94bdd7cbb3555d
67dd08e62830861199cf789f43c6264d2176a743
4285e671aa668c14b3c1e23e0bf95cbdb051feea776af3862c4505ede90184f1
GET /-OLOyknjcuag/TdetB9UqsvI/AAAAAAAAGrs/mz21C7KPlxg/s1600/date.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="date.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 919
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Thu, 02 Feb 2023 08:58:02 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1abb"
Content-Type: image/png
Age: 0
3.bp.blogspot.com/-mjXbxHRAiH4/TeisEVvEBOI/AAAAAAAAAnE/bXPMwiAbw60/s1600/download.png
142.250.74.161200 OK 7.6 kB URL HTTP/1.1 3.bp.blogspot.com/-mjXbxHRAiH4/TeisEVvEBOI/AAAAAAAAAnE/bXPMwiAbw60/s1600/download.png
IP 142.250.74.161:0
File type PNG image data, 142 x 54, 8-bit/color RGBA, non-interlaced\012- data
Hash 0e14aa1c43f9bd38ea1d4a3f88468b12
7e346de29d8c7d80a3bf22f47a89f528fe4e9206
284d254ea73d9905e311a5bd97183ef8b45ef77766fdf66acff55617da6556cc
GET /-mjXbxHRAiH4/TeisEVvEBOI/AAAAAAAAAnE/bXPMwiAbw60/s1600/download.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="download.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7623
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Mon, 06 Feb 2023 01:25:48 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6e2"
Content-Type: image/png
Age: 0
3.bp.blogspot.com/-NUCM1N1iWP4/T2M2PPgtZKI/AAAAAAAAAY4/EhweheWeUWk/s400/logo+(1).png
142.250.74.161200 OK 29 kB URL HTTP/1.1 3.bp.blogspot.com/-NUCM1N1iWP4/T2M2PPgtZKI/AAAAAAAAAY4/EhweheWeUWk/s400/logo+(1).png
IP 142.250.74.161:0
File type PNG image data, 400 x 107, 8-bit/color RGBA, non-interlaced\012- data
Hash 093bb52031f634f36f2f40ff7fce6cbf
138a52b41a2d0cdf4ce544ac83a32435b12c28f6
99d0ec300e04188c93e2660874c446d643b45b2bdf481ef518973eeb7f837792
GET /-NUCM1N1iWP4/T2M2PPgtZKI/AAAAAAAAAY4/EhweheWeUWk/s400/logo+(1).png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v18e"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="logo (1).png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 28802
X-XSS-Protection: 0
1.bp.blogspot.com/-cs-hj_vTx0E/T_bJOBg5o4I/AAAAAAAADV8/G-2dbkJcNDc/w72-h72-p-k-no-nu/l15v33a60sfM.jpg
142.250.74.161200 OK 4.3 kB URL HTTP/1.1 1.bp.blogspot.com/-cs-hj_vTx0E/T_bJOBg5o4I/AAAAAAAADV8/G-2dbkJcNDc/w72-h72-p-k-no-nu/l15v33a60sfM.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6339733a30fe7ca383cce6dbc9c6a345
a553c7827ea2db685a8f9e793cb0e6848a1aa20c
028ddf385ac2e72b5cd30c697d5a18d9a3077c900173ad9416cc89adbcf53ed7
GET /-cs-hj_vTx0E/T_bJOBg5o4I/AAAAAAAADV8/G-2dbkJcNDc/w72-h72-p-k-no-nu/l15v33a60sfM.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vd5f"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="l15v33a60sfM.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 4270
X-XSS-Protection: 0
push.services.mozilla.com/
52.25.208.227101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.25.208.227:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Z1+gfLnyZz2KrtcVTSHt8Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: acbpkKLF3kl2+DN3HxMSGprkk+4=
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
216.58.207.238200 OK 61 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs
IP 216.58.207.238:0
File type ASCII text, with very long lines (1448)
Hash 62f98a42acaa85f40e228f65e5ee2361
a41c1755a6a2708340b74638f11ebdeed8e977db
54acbd2f18406888cbe8ee3fc76b512081c7c1c0102a4b1f7eef6cd11fc60f15
GET /_/scs/abc-static/_/js/k=gapi.lb.en.AMZ27oQJoUI.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 60741
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 02 Feb 2023 00:32:58 GMT
expires: Fri, 02 Feb 2024 00:32:58 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 07 Jan 2023 15:19:07 GMT
content-type: text/javascript; charset=UTF-8
age: 468176
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
1.bp.blogspot.com/_4HKUHirY_2U/TUlLCdh4WbI/AAAAAAAAMc8/fNWAMMf4lnU/s1600/folder.png
142.250.74.161200 OK 608 B URL HTTP/1.1 1.bp.blogspot.com/_4HKUHirY_2U/TUlLCdh4WbI/AAAAAAAAMc8/fNWAMMf4lnU/s1600/folder.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash aeeb89a0648d7514aaad4875e9664548
59069d509d667c609147c1fdd24817944ad778e3
594e22be98bf18f07504fef7b4c0bb36ee0c801feacbd53e17297bad508932ab
GET /_4HKUHirY_2U/TUlLCdh4WbI/AAAAAAAAMc8/fNWAMMf4lnU/s1600/folder.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="folder.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 608
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Mon, 06 Feb 2023 14:53:49 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v31cf"
Content-Type: image/png
Age: 0
1.bp.blogspot.com/-O0ruwujqdVE/TePQd4k4gBI/AAAAAAAAHTI/C39i08JwXCo/s1600/rss.png
142.250.74.161200 OK 1.6 kB URL HTTP/1.1 1.bp.blogspot.com/-O0ruwujqdVE/TePQd4k4gBI/AAAAAAAAHTI/C39i08JwXCo/s1600/rss.png
IP 142.250.74.161:0
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash d1e3744d8a65d004047b2ed8311b49ae
7b777bda47b84437dea4935fa835c21227f44b18
7bbd453552fbbe6837b0e05af365c5869ae5bf72ba4bbcd306ab2fb6b0563d08
GET /-O0ruwujqdVE/TePQd4k4gBI/AAAAAAAAHTI/C39i08JwXCo/s1600/rss.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d32"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="rss.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 1647
X-XSS-Protection: 0
b.babylon.com/RESOURCES/Babylon/2011030715281146/tabs9_468x60_en.gif
108.163.228.179200 OK 14 kB URL HTTP/1.1 b.babylon.com/RESOURCES/Babylon/2011030715281146/tabs9_468x60_en.gif
IP 108.163.228.179:0
File type GIF image data, version 89a, 468 x 60\012- data
Hash c44c9574bebeff922bdb72c414d242bb
1be3e31b29c12c8b9e7d60094bc61ba96185f475
70110462297faaafe58b5b78e7e9174251f51f26235fdfefe8afc394e9a6bcee
GET /RESOURCES/Babylon/2011030715281146/tabs9_468x60_en.gif HTTP/1.1
Host: b.babylon.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.13.4
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: image/gif
Content-Length: 13689
Last-Modified: Mon, 07 Mar 2011 13:44:35 GMT
Connection: keep-alive
Keep-Alive: timeout=20
ETag: "4d74e143-3579"
Expires: Tue, 14 Feb 2023 10:35:54 GMT
Cache-Control: max-age=604800, public
Accept-Ranges: bytes
www.getfreebl.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0CB4834C7AAB5EA52ACBC233214B6D89C17132344F7139C830162C23D81597BA7B4BBFE8
172.67.149.192200 OK 198 B URL HTTP/1.1 www.getfreebl.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0CB4834C7AAB5EA52ACBC233214B6D89C17132344F7139C830162C23D81597BA7B4BBFE8
IP 172.67.149.192:0
File type GIF image data, version 87a, 66 x 13\012- data
Hash 93e044bd37ec47fb3f7d7b1464b887b8
9c02ef252e5daca616e282d9221399b6a565968c
796b371a139266064cb546fa61c52a0891be30866727fa048da835b4082aab61
GET /services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0CB4834C7AAB5EA52ACBC233214B6D89C17132344F7139C830162C23D81597BA7B4BBFE8 HTTP/1.1
Host: www.getfreebl.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: public
Expires: Mon, 26 Jul 2019 05:00:00 GMT
Cache-Control: max-age=904800
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2krS%2BttMsm6Ldw9ILM9A11MFv6sXDlbt9OE6J%2BUy%2FdwxxNKgKz32%2F78H9829c9gJfKepEEj9JuMijwGXKj0FzGGZqxXJewv6DYdXWAnJYMISfNMWLNB%2BFb%2Fd26R%2B2vV%2Fwr1JmQ%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 795b7b410929b500-OSL
alt-svc: h2=":443"; ma=60
2.bp.blogspot.com/-BYa4qjKAZuY/ThATDvX6zdI/AAAAAAAABYI/BwLagpI6yKc/w72-h72-p-k-no-nu/9318517337.jpg
142.250.74.161200 OK 4.3 kB URL HTTP/1.1 2.bp.blogspot.com/-BYa4qjKAZuY/ThATDvX6zdI/AAAAAAAABYI/BwLagpI6yKc/w72-h72-p-k-no-nu/9318517337.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d7f8f4a2c062fc9a1c4c9df41895d0b9
0bf9d62ecee908e1af77bcd4d49ce2691b8c0ef0
6f8042b0d9b1baff22b2453a5f286e7e846b42c6185c20aa060d47dfb50e6d21
GET /-BYa4qjKAZuY/ThATDvX6zdI/AAAAAAAABYI/BwLagpI6yKc/w72-h72-p-k-no-nu/9318517337.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v582"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="9318517337.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 4255
X-XSS-Protection: 0
2.bp.blogspot.com/-DsA63FdqFDw/Tlj5ztmNpzI/AAAAAAAABjg/J2-lNu242-U/w72-h72-p-k-no-nu/GZ2.jpg
142.250.74.161200 OK 3.4 kB URL HTTP/1.1 2.bp.blogspot.com/-DsA63FdqFDw/Tlj5ztmNpzI/AAAAAAAABjg/J2-lNu242-U/w72-h72-p-k-no-nu/GZ2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1b1cc2bc8f5f5ec707abfefe17eba8d0
02ab0d3fc7a92e9307ac960506157d933f4cedc5
0a378e81d6627ce6a114417b968a63f5c9e713e4497034442c86fc0825b4a3b8
GET /-DsA63FdqFDw/Tlj5ztmNpzI/AAAAAAAABjg/J2-lNu242-U/w72-h72-p-k-no-nu/GZ2.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v638"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="GZ2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 3406
X-XSS-Protection: 0
2.bp.blogspot.com/-M826ELvpcaA/TePQvcRPYnI/AAAAAAAAHT4/zREPzxU5qfs/s1600/wrapper-bg.jpg
142.250.74.161200 OK 109 kB URL HTTP/1.1 2.bp.blogspot.com/-M826ELvpcaA/TePQvcRPYnI/AAAAAAAAHT4/zREPzxU5qfs/s1600/wrapper-bg.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1354x326, components 3\012- data
Size 109 kB (108866 bytes)
Hash fb6c3db9dc1d7c18fd3e588b02ad88bb
4b84a72431eab85a4e91da2ea57456e30777f22a
aed02f4632cc9e3cf53496a3dfa7ad66e2b06a0a773aeb0376b87ba63df8bfe9
GET /-M826ELvpcaA/TePQvcRPYnI/AAAAAAAAHT4/zREPzxU5qfs/s1600/wrapper-bg.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v3151"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="wrapper-bg.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 108866
X-XSS-Protection: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=3719337579064215406&zx=e0d5b186-a6d7-4222-a99c-33cfd1c67ca2
142.250.74.73200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3719337579064215406&zx=e0d5b186-a6d7-4222-a99c-33cfd1c67ca2
IP 142.250.74.73:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3719337579064215406&zx=e0d5b186-a6d7-4222-a99c-33cfd1c67ca2 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 Feb 2023 10:35:54 GMT
last-modified: Tue, 07 Feb 2023 10:35:54 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/-31EPxdSpP98/TfHig83N2eI/AAAAAAAAA4Q/h5KEiMXK6xA/w72-h72-p-k-no-nu/Portable+Grand+Theft+Auto+III+%2528Rip%2529.jpg
142.250.74.161200 OK 5.7 kB URL HTTP/1.1 2.bp.blogspot.com/-31EPxdSpP98/TfHig83N2eI/AAAAAAAAA4Q/h5KEiMXK6xA/w72-h72-p-k-no-nu/Portable+Grand+Theft+Auto+III+%2528Rip%2529.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e226b85479bf5849041a2326b972c276
5eeef32eb4ed0bc4c2305ad1ec78f2121d609bbb
19132f2999312daebd9394b1182375d3ff2c89ba570351e59d352e526fa1077a
GET /-31EPxdSpP98/TfHig83N2eI/AAAAAAAAA4Q/h5KEiMXK6xA/w72-h72-p-k-no-nu/Portable+Grand+Theft+Auto+III+%2528Rip%2529.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Portable Grand Theft Auto III (Rip).jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 5686
X-XSS-Protection: 0
2.bp.blogspot.com/-sO-eE7xnLrw/UEM2Zsl7iXI/AAAAAAAAANY/ySId_hly8UQ/s320/im.png
142.250.74.161200 OK 18 kB URL HTTP/1.1 2.bp.blogspot.com/-sO-eE7xnLrw/UEM2Zsl7iXI/AAAAAAAAANY/ySId_hly8UQ/s320/im.png
IP 142.250.74.161:0
File type PNG image data, 320 x 96, 8-bit/color RGB, non-interlaced\012- data
Hash fcd4a39da940202a0513759b7de4e016
a62692cbcd620aa88390a4a71865d4ea7a62a9f6
be4513677ddcd7c367a014afc356acfeef187becf564c9c3e2b1edf327940f3a
GET /-sO-eE7xnLrw/UEM2Zsl7iXI/AAAAAAAAANY/ySId_hly8UQ/s320/im.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vd6"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="im.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 18462
X-XSS-Protection: 0
4.bp.blogspot.com/-FGBGiZHriPU/TePQvGwiVHI/AAAAAAAAHTw/ismEpNQYcbc/s1600/twitter.png
142.250.74.161200 OK 1.7 kB URL HTTP/1.1 4.bp.blogspot.com/-FGBGiZHriPU/TePQvGwiVHI/AAAAAAAAHTw/ismEpNQYcbc/s1600/twitter.png
IP 142.250.74.161:0
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash e6b5a5d05450681a488d10c5c834d85c
4f1e875d05e396ce4915acf4f3e2d8f6ce1be38a
9b512679727afdce95c5c9457668452138aa2d002ec8571dc7a0147376b34513
GET /-FGBGiZHriPU/TePQvGwiVHI/AAAAAAAAHTw/ismEpNQYcbc/s1600/twitter.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d3c"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="twitter.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
4.bp.blogspot.com/-idEHLiWIsBI/TgAHGeDjxWI/AAAAAAAABHQ/BrSOc107wQs/w72-h72-p-k-no-nu/918782_front.jpg
142.250.74.161200 OK 3.3 kB URL HTTP/1.1 4.bp.blogspot.com/-idEHLiWIsBI/TgAHGeDjxWI/AAAAAAAABHQ/BrSOc107wQs/w72-h72-p-k-no-nu/918782_front.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d13894eb6bbe94782030fd197c09c2fe
228940f44739dd137373a38b07c3fdf156dc9b29
52b375b6052de8023c4a60b2f534314b9cfcdfeb573ef2fe6afcff2cc11e8fa4
GET /-idEHLiWIsBI/TgAHGeDjxWI/AAAAAAAABHQ/BrSOc107wQs/w72-h72-p-k-no-nu/918782_front.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="918782_front.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 3257
X-XSS-Protection: 0
4.bp.blogspot.com/-7mTgV8CRH80/TdetCDV2AvI/AAAAAAAAGr0/yzdHMtNbPBU/s1600/user.png
142.250.74.161200 OK 871 B URL HTTP/1.1 4.bp.blogspot.com/-7mTgV8CRH80/TdetCDV2AvI/AAAAAAAAGr0/yzdHMtNbPBU/s1600/user.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash b56db8b49702539b80881cea2b626cd9
93c297610f65fdc8e62413578b4636bbd8f6a053
6ff1dcf3605772068aae35e25f264a0d19897e19cedc06e3638a417a9cab24e7
GET /-7mTgV8CRH80/TdetCDV2AvI/AAAAAAAAGr0/yzdHMtNbPBU/s1600/user.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="user.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 871
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Mon, 06 Feb 2023 11:55:57 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1abd"
Content-Type: image/png
Age: 0
www.linkwithin.com/widget.js
3.19.188.212404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP 3.19.188.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
4.bp.blogspot.com/-cUoKWX_86Co/TdetCY_dLwI/AAAAAAAAGr8/Bma3hWeQmDs/s1600/comments.png
142.250.74.161200 OK 492 B URL HTTP/1.1 4.bp.blogspot.com/-cUoKWX_86Co/TdetCY_dLwI/AAAAAAAAGr8/Bma3hWeQmDs/s1600/comments.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash a648d7aa740e4c6791502493458d8bfd
e8ec628d74fb5731c2712474378695dfbaedf3b6
24588da675dcec2f9a03c1688c3ecbf638c36afd7b308644f44264ccdf3d4a35
GET /-cUoKWX_86Co/TdetCY_dLwI/AAAAAAAAGr8/Bma3hWeQmDs/s1600/comments.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="comments.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 492
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Wed, 01 Feb 2023 14:18:40 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1abf"
Content-Type: image/png
Age: 0
www.indonesia-blogger.com/img/indonesiablogger.jpg
15.197.142.173404 Not Found 125 B URL HTTP/1.1 www.indonesia-blogger.com/img/indonesiablogger.jpg
IP 15.197.142.173:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with no line terminators
Hash 2995357b538ef792ce59b1b7cca539c4
d33d8ce38719b45d0731f075f71593351023318c
aef27e8433e35954afe1798da5bde96145b020160cc2f16b1424425253fb545b
GET /img/indonesiablogger.jpg HTTP/1.1
Host: www.indonesia-blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 404 Not Found
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: text/html; charset=utf-8
Content-Length: 125
Connection: keep-alive
Server: ip-100-74-2-211.eu-west-2.compute.internal
X-Request-Id: ecfe0d5e-8862-41e7-92e4-dd1966546764
lh3.googleusercontent.com/blogger_img_proxy/AHs97-mT6IOF-CH-Yfn2WjVnGTABEYp07AR9dTYCRc7JWwU-K5DWVAUTtD2ckNzrttIv07Hw9rMaZ1gY9styb8Ak5UwlKRDWyFJDiq8jHFwZd3ZJRTgihiTSDxTjtfVLz9lP2Jc=w72-h72-p-k-no-nu
142.250.74.97404 Not Found 1.7 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/AHs97-mT6IOF-CH-Yfn2WjVnGTABEYp07AR9dTYCRc7JWwU-K5DWVAUTtD2ckNzrttIv07Hw9rMaZ1gY9styb8Ak5UwlKRDWyFJDiq8jHFwZd3ZJRTgihiTSDxTjtfVLz9lP2Jc=w72-h72-p-k-no-nu
IP 142.250.74.97:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 944df476fbe3ef869cc6e478ee08072a
75f3e7ccb9a941c5cc4896850998f18003351679
e560744a2beed6b3eaed7bbf7fa7ecea2048c48c89eec7b0b46fce02014e468f
GET /blogger_img_proxy/AHs97-mT6IOF-CH-Yfn2WjVnGTABEYp07AR9dTYCRc7JWwU-K5DWVAUTtD2ckNzrttIv07Hw9rMaZ1gY9styb8Ak5UwlKRDWyFJDiq8jHFwZd3ZJRTgihiTSDxTjtfVLz9lP2Jc=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
date: Tue, 07 Feb 2023 10:35:54 GMT
server: fife
content-length: 1732
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.34200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.34:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 06 Feb 2023 12:42:33 GMT
Expires: Mon, 20 Feb 2023 12:42:33 GMT
Cache-Control: public, max-age=1209600
Age: 78801
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
lh6.ggpht.com/__LDKTfLchOU/TRy7tzrO4XI/AAAAAAAAABo/UJDotaCK-Cc/s800/toplinkindo-backlink-gratis.jpg
216.58.207.225200 OK 4.0 kB URL HTTP/1.1 lh6.ggpht.com/__LDKTfLchOU/TRy7tzrO4XI/AAAAAAAAABo/UJDotaCK-Cc/s800/toplinkindo-backlink-gratis.jpg
IP 216.58.207.225:0
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 160x30, components 3\012- data
Hash 6f5473f8ff780dc86fdbc6e894d6c232
97e50914e062065584e844f2f4d08c7698a8ee0c
cbcc46fba44756bd74a2f9207a115892657ba35f1828af1b3fcbdee5283d0026
GET /__LDKTfLchOU/TRy7tzrO4XI/AAAAAAAAABo/UJDotaCK-Cc/s800/toplinkindo-backlink-gratis.jpg HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="toplinkindo-backlink-gratis.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3984
X-XSS-Protection: 0
Date: Tue, 07 Feb 2023 10:35:54 GMT
Expires: Mon, 06 Feb 2023 11:11:19 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1a"
Content-Type: image/jpeg
Age: 0
www.linkwithin.com/pixel.png
3.19.188.212200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP 3.19.188.212:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
www.getfreebacklinks.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DA4DB0CB4854A7AD421A02FC8C133214B6D89C171323442713DC9253F2224C73C88A35C48B0A3371BCFC74D
172.67.146.176200 OK 190 B URL HTTP/1.1 www.getfreebacklinks.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DA4DB0CB4854A7AD421A02FC8C133214B6D89C171323442713DC9253F2224C73C88A35C48B0A3371BCFC74D
IP 172.67.146.176:0
File type GIF image data, version 87a, 57 x 13\012- data
Hash d29e7a6d10bbb104307b470e78af84fc
329584c8653afb19f76d9aa8b01591328250ec9e
96368a48f2485e3f9eecdf67d98d1e8251aa399bce316d83d64f2c48683320b6
GET /services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DA4DB0CB4854A7AD421A02FC8C133214B6D89C171323442713DC9253F2224C73C88A35C48B0A3371BCFC74D HTTP/1.1
Host: www.getfreebacklinks.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: public
Expires: Mon, 26 Jul 2019 05:00:00 GMT
Cache-Control: max-age=904800
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=r5aLSlA5xptueTqcDWtQSHAvST23m9AE0t2e1C1XMlweYr5xLy%2F6w45qqBJ5lh6r%2F%2BmOeSW8%2BzGMaMFrWSHuARvEiDMK9xthkjfBl%2B9I%2FDu%2B38QbGK%2B2SXB9v4w6VwlAgHHMu7o7q02%2F75o%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 795b7b42baf7b4ff-OSL
alt-svc: h2=":443"; ma=60
www.blogger.com/img/icon_delete13.gif
142.250.74.73200 OK 140 B URL HTTP/1.1 www.blogger.com/img/icon_delete13.gif
IP 142.250.74.73:0
File type GIF image data, version 89a, 13 x 13\012- data
Hash e7f55c98f18368f2ba26a008b1d40fc3
bb509d770d2d149060707c2c2c01776e86b858c4
69ff07a31a102649f3e0d08a967c39b134286293b85aac0885b3102a9120f1a6
GET /img/icon_delete13.gif HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 140
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 06 Feb 2023 13:41:38 GMT
Expires: Mon, 13 Feb 2023 13:41:38 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 06 Feb 2023 04:49:26 GMT
Content-Type: image/gif
Age: 75256
www.blogger.com/img/blogger_logo_round_35.png
142.250.74.73200 OK 2.5 kB URL HTTP/1.1 www.blogger.com/img/blogger_logo_round_35.png
IP 142.250.74.73:0
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2531
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 02 Feb 2023 00:36:48 GMT
Expires: Thu, 09 Feb 2023 00:36:48 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 01 Feb 2023 17:54:33 GMT
Content-Type: image/png
Age: 467946
3.bp.blogspot.com/-MbyYYRUNOhM/TeVfK3Z8NXI/AAAAAAAAAhk/ebwiuinWwh4/s1600/transformers-revenge-of-the-fallen-3.jpg
142.250.74.161200 OK 22 kB URL HTTP/1.1 3.bp.blogspot.com/-MbyYYRUNOhM/TeVfK3Z8NXI/AAAAAAAAAhk/ebwiuinWwh4/s1600/transformers-revenge-of-the-fallen-3.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x180, components 3\012- data
Hash 7924631f8379ecfdda87032795100b09
5fa39f618eb765f9278f546ca49b933ba9223264
568426472f7cf526c0359587e13302a8a4646985b646f5745b7a1f1b1eb78a43
GET /-MbyYYRUNOhM/TeVfK3Z8NXI/AAAAAAAAAhk/ebwiuinWwh4/s1600/transformers-revenge-of-the-fallen-3.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="transformers-revenge-of-the-fallen-3.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 22539
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash ad2d72821808ee5f77c0598fed0f8bd1
adcd92881d1c5ac3cca4687dc6347369240f4726
c7ce86611bf0b0063c0bcb2c6a6a4b85fe6be2d89e382b8907e8bbb2e1e5962d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
94.130.218.80301 Moved Permanently 178 B URL HTTP/1.1 www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP 94.130.218.80:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: www.auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: text/html
Content-Length: 178
Connection: keep-alive
Location: https://www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 6a24862b6ce51c945cd18a05ca4594cc
a8276e3db453c4a8f0d585dd6e77ec4a79dd44ba
3ebaa32aa407d3b21bff2f84adad62c2caf2f82439c99bf9fba2c4018688364a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 45214010f2ef8a835d723fcd5b485977
346507b6da40928a8c600ef9c52fd6a7e0875344
4b4e5c2038d6fe241aedc738e0bd22052078bf365b6dade88cae752d0f06fa54
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.21sme.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD1AE0CB48C437AD421A52ABBB233741F6A82D677383B5F411BE0301D2039CF
172.67.128.107200 OK 174 B URL HTTP/1.1 www.21sme.com/services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD1AE0CB48C437AD421A52ABBB233741F6A82D677383B5F411BE0301D2039CF
IP 172.67.128.107:0
File type GIF image data, version 87a, 51 x 13\012- data
Hash d76bfe9b99f78abd741502e4538077d3
d486a9b973ecd181a5929a258b80eb855f79577f
0c23d0c7a6061e70e67e8188b6ca5983740bdf5196b9ff654eeb72c6a1fc30a5
GET /services/backlink/backlink.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD1AE0CB48C437AD421A52ABBB233741F6A82D677383B5F411BE0301D2039CF HTTP/1.1
Host: www.21sme.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Pragma: public
Expires: Mon, 26 Jul 2019 05:00:00 GMT
Cache-Control: max-age=904800
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3%2Boaa%2FujDAIehfnOmksmsKKeM1rvo1tCG5Sh6QFgN6jIta2arl1OHJvN%2FfS2%2BneDJqIdXIGt0BF4IDUvMn34yOyJYxtZbq9u6T5YKz%2FaF8LWkZsukKmzoIEGZrE%2FObLQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 795b7b42e8c3b517-OSL
alt-svc: h2=":443"; ma=60
1.bp.blogspot.com/-pG6-Z3wL1J4/TePQTapulaI/AAAAAAAAHSY/Uf3alzw8qd8/s1600/background.png
142.250.74.161200 OK 198 B URL HTTP/1.1 1.bp.blogspot.com/-pG6-Z3wL1J4/TePQTapulaI/AAAAAAAAHSY/Uf3alzw8qd8/s1600/background.png
IP 142.250.74.161:0
File type PNG image data, 1 x 39, 8-bit/color RGB, non-interlaced\012- data
Hash 2de4c2aa8c424bf111d912e872112671
bc417d22a2ad721c0fc0bd75c8ead8f285ed1316
c3c4b37bf63eed14ee3b70c6ac4f8d53fec24001a1efb59741cd28899428dfbd
GET /-pG6-Z3wL1J4/TePQTapulaI/AAAAAAAAHSY/Uf3alzw8qd8/s1600/background.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d26"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="background.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 198
X-XSS-Protection: 0
3.bp.blogspot.com/-d2-HPgUIixU/TePQUBRBLtI/AAAAAAAAHSw/OcT8EEi32Sw/s1600/nav-background.png
142.250.74.161200 OK 216 B URL HTTP/1.1 3.bp.blogspot.com/-d2-HPgUIixU/TePQUBRBLtI/AAAAAAAAHSw/OcT8EEi32Sw/s1600/nav-background.png
IP 142.250.74.161:0
File type PNG image data, 2 x 48, 8-bit/color RGB, non-interlaced\012- data
Hash 3f37e57d243324924f49895bc0ba3cbf
bcba23548fccfbd6faf8993e2a8bc7d76667a7aa
0d8c7b85f61cd88a4ad74c1f888f25b47f53f6580673e886d233337d9ffc6fd1
GET /-d2-HPgUIixU/TePQUBRBLtI/AAAAAAAAHSw/OcT8EEi32Sw/s1600/nav-background.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d2c"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nav-background.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 216
X-XSS-Protection: 0
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
35.186.238.101200 OK 2.8 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP 35.186.238.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2826), with no line terminators
Hash bc186b2285de2ff9290e70a0abc0d540
f3e78e6109df41d7bc5c763f25ed63904aaebf63
d3e8ebda72162d441bb37d6b69041d0734497fe3efbf4dcb2f4694a31bdc0f99
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: text/html
Content-Length: 2826
Last-Modified: Mon, 23 Jan 2023 23:54:39 GMT
ETag: "63cf1e3f-b0a"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_G98lbBQBHHLYghq0CiGssSu9swzewKKfo8jl+suFInBG4LaWA7Eb6I3nbYukuTAXt0CI6X5j6CC6w1DTC+8EGA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
2.bp.blogspot.com/-1WIlm1qJj9M/TePQdjLKfqI/AAAAAAAAHS4/_lo02HrYr4U/s1600/nav-background-hover.png
142.250.74.161200 OK 269 B URL HTTP/1.1 2.bp.blogspot.com/-1WIlm1qJj9M/TePQdjLKfqI/AAAAAAAAHS4/_lo02HrYr4U/s1600/nav-background-hover.png
IP 142.250.74.161:0
File type PNG image data, 2 x 48, 8-bit/color RGB, non-interlaced\012- data
Hash 351cf19b039906ed0289f7e334c380dd
6f7c59afdf6b1a83d899ef91dbf584f5ea666f54
a1e1ab88d8451a8e574c41abd004ad637890fca960604775d6a1b95bae83f936
GET /-1WIlm1qJj9M/TePQdjLKfqI/AAAAAAAAHS4/_lo02HrYr4U/s1600/nav-background-hover.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d2e"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nav-background-hover.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 269
X-XSS-Protection: 0
3.bp.blogspot.com/-YJ3TlaE0O1c/TePQdkA3k2I/AAAAAAAAHTA/nDOVe4nuFyI/s1600/nav-separator.png
142.250.74.161200 OK 205 B URL HTTP/1.1 3.bp.blogspot.com/-YJ3TlaE0O1c/TePQdkA3k2I/AAAAAAAAHTA/nDOVe4nuFyI/s1600/nav-separator.png
IP 142.250.74.161:0
File type PNG image data, 2 x 48, 8-bit/color RGB, non-interlaced\012- data
Hash 1579a27da6d50f52b3c5d75c132c26a0
d77d7e9ed5962a30e553c7393d7e7d049f246ee0
86c0d2ae2ba9ad439047133fa4b5ef09f8e72f2c9796a726e18043d100ff731c
GET /-YJ3TlaE0O1c/TePQdkA3k2I/AAAAAAAAHTA/nDOVe4nuFyI/s1600/nav-separator.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d30"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nav-separator.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 205
X-XSS-Protection: 0
scr.kliksaya.com/js-ad.php?zid=108301
134.119.176.28302 Found 11 B URL HTTP/1.1 scr.kliksaya.com/js-ad.php?zid=108301
IP 134.119.176.28:0
ASN #29066 Host Europe GmbH
File type ASCII text, with no line terminators
Hash 32682312d17c7cbf18e73594f5570319
60e22121bdd0bc71cdb2bae2a3aa577006b2eae9
e55fb1a1d731153e943b68844af12dcce8bfac917c98ffdea64c80da0607dd47
GET /js-ad.php?zid=108301 HTTP/1.1
Host: scr.kliksaya.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 302 Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 11
date: Tue, 07 Feb 2023 10:35:54 GMT
location: https://mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XEuPzWq_Ou9UWXoti0TOP_-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGVatJqgR1xMoDKoyvP4nOUq_FGGVOyllxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYiCMsr_ulNOYaCn805125FSZYRDbahPCgt6xMweQPe7RZORWTM9PNYIHAgSOaIlL2FbPQm9updSqrRet_i-QysuCuC7Ai3vVz-utPwUQLmck-mOVqqPo8313Gt8Za9yVtUvkA9QjrVIJ4PMjbG_xrO_OECgwsDFXOROYHTTuoT3isQ-YlreW2CQNeHbvGrF9q-Z5VKlx-z0QpcFoxRNCl6CTNpuoCwlSGGcf0bhH61xZ94rN6UFfnY2jYMB49itlXPe2RBTq8sCdk5eLPcnbcS9ijjSYBMdpCETWnZXPrR37tL2ZaD71U_ZzuC2-3TlK-7-GhmoL-fUk-SYV1Qbqjetls_HxzCmehbs4uOTzzleXNmWXsaD02FQizA9sUQkHL4lOtS1Tw--xxcR-VLxRCgkeUy3rx5RMAfgQ7uj6UnBsleQ31WVEj4xDIIvMSsDK2pgcb6J1m-Pz06VLN4U6PEbJ1PALLUd_tdPPVCMY1N0jalvIQQnKavl1NSN-SfByYhqFusT-IiMq8EGD5vKPzkaqmwJAszADO_i_NJRAy3PM3DRH1FvR3N66b0Y2uYSo2FPmdMT9GnOIUBnLwYrUOheDrgtjNKz4z6bGYyS522O1oFifPDzHNxSKyyxSF2K-A2sY0WZJnt_1a9zt_qR5aBi63JmEwd8N0jOppOP3SO9RJapjDFybn-H2-fN1SGTOfY0H9nUjmczxJuvsPOFs-HrGM6vbEMjnHvzyl9URgnRlvg5ZKUVAejphu-hqdm-8VaxjOZPxQx-SYfalSQaibODnj8e-Cc2IjiCjRjhYmWDrqOdw2knT34lgFunUYYAdGqV-G2erxItMd30bG0qja_Q6qeV-0Lw-3tAB9nhXL4xRevZ5EK4GiJCskgwC09xOkpIM2eX2MGMnSTlGH1k24l_9Ivr1rKGS8w_zX1SnydbuNSIOF75IipjXd3-l2sWw2Qc_u_OVv-XdR8zckXACGeJtScmtpzvi55Aek8ZELW3gWtnI0VLoAshK_5PBVx0qoAH-DYDFvyJblRvDp0aNK9RN9QIBVQ4G0uzmM5BOPqTP4KsnwO1hQkrVy2SPnaC8B5YJwREdV81GH5Ftc5FKLl7L7CCKX_VgeaJOYTSNaX7SCYkQl8Mh6uNyQbwzYlmEyH33rjqdZ0jA625zF4b_mHgQfSdSEMrHkCF9D18dxxgg4rX30M_z0wzPew_WXGy8qQACw8m2_yetodsjqwCYyJOc6Z3mdMU-EgQQvHws6wUcLST2CQP9qRbGt7D2zR4WCsW6m0JxJttsEyDQIZN5p5WFds9BTtmLfvlh8MX8ujas3obo73xBRjs3BGvkYZwnBpoj9OYCx5kOsJ9ezAk87TtXik4Qcn1gfbuO4dFgz0fqpkqJbzoOwJk6-ydaJqHReHfmZF53UpRm-w7aUeV7q7ctCSivH-7av8WZBCypUgt-zVtwJ2CKr9YHwKBdSultdUXKZLbNLOQfuHxHeN3pBA4FZRXc_6obQAxHp2DWtr9ZefgMhodgNxnnyVfPiZDt45K1KTetGKkTiHqzSk-KRg7qb2PPeTclojXmPyZ7KLga-yzkt54L1JiI8z1hX-jh2tlQEZUze64St6-gKIW275ciWmyic5LKRhjjq-D96pKbzXVyF1S08xmL9JvVDV9nj28eyFZqBb8sfqXeOtS6rR5RZ3XcGcO7jtpb_vUK1ucLbqzPHkjaRbP8RWiR6-Z-Rt21skxThwXj7BuaSUIfw1HqkwZhl4kCumx-yNBZu5BcLplZyjyoigpu2EVJExlw6Wy1IayUIeWkBdwpztyCho4xGAiRAaEsDLxaYvPCg_6ufxfw-xcLoheDEReIRf_1Fmol4htfLVJRJevH-9Dup1eKscr2wtf-xpPp8ZQ705PnRv2R3khMsaDFOUD5e5FLaFbzMHeQ2j6wlcLmr06ZeDjT6fGUO9OT51Hz0Bp88emttONyCIAd5se-Enx24tEQ5BWW6tLoqm1V8lNkLpIq9Fy5s66ZOZll-DVsew0BMiueGPS6QzEn_EYhMAp0UP6TiUs9Cn0l2TcNoaFIazE2Q3GnsCKfGyeJoijXs6r8LZhinSG_GsPHf0wsPAe_j0zYMx3r94mOd6HGrVbtM_geRck9xkXAG2Q1A3L2wolnNLYd1XLp4xaz4bbPQ_tyL-egqd2SCEbk-HlDJDIlASYdwhqom3L1k1jRiqNmfwBIZLLmJi-eU4AWN_fATTUVJdyoJkzoh-DM86UabOfmUZ2ZvRZkqi1M5tm7WMs_u39r8sUAQRt0moGqzieLtEh3R_3xJmt7mm3lHZK1XGc9uuOt2Y-RLo49Ft7kVI8oUU91bK23XHgqKei9m3y2l9pz0AS-iNHhS_fhvu8rU0paHs_pUITanUw8UQc6Nv2MF3pMg3GAWNx4RU7kv1Wno3gah83g7SvP4S6465I4pagL4oAK9Tiz2nfMYtBdPrYgG7afTXkyA
server: nginx
set-cookie: sid=3320c0c8-a6d3-11ed-895b-7dd9f4d543ae; path=/; domain=.kliksaya.com; expires=Sun, 25 Feb 2091 13:50:01 GMT; max-age=2147483647; HttpOnly
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 5d8fdc3f3fcd0a67e69f28b56f4f0c65
4971af943010d5bbb9d714deef8c44597f6b3092
3342a5a542b3dcd7f44f490609d077b00aad3be7d1ce6474073a9f589c32e403
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/--Yn2IV3qRl4/TeVfGTZfBLI/AAAAAAAAAhY/Y31fPYByFP0/s1600/Transformers+2.jpg
142.250.74.161200 OK 32 kB URL HTTP/1.1 2.bp.blogspot.com/--Yn2IV3qRl4/TeVfGTZfBLI/AAAAAAAAAhY/Y31fPYByFP0/s1600/Transformers+2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 225x320, components 3\012- data
Hash 4e510ef473cebdd1329e15258fcfab5b
6ca179db2a4906b6008f2259e6da0be13a3a46ab
4e41657de6cf8b39f7c629be7a80c2b2587efea9d6b12df5c2ddfb2797f6b839
GET /--Yn2IV3qRl4/TeVfGTZfBLI/AAAAAAAAAhY/Y31fPYByFP0/s1600/Transformers+2.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Transformers 2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 32469
X-XSS-Protection: 0
www.cpmfun.com/getad.php?34555;62124;160x600
3.130.204.160302 Found 0 B URL HTTP/1.1 www.cpmfun.com/getad.php?34555;62124;160x600
IP 3.130.204.160:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getad.php?34555;62124;160x600 HTTP/1.1
Host: www.cpmfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 302 Found
content-length: 0
date: Tue, 07 Feb 2023 10:35:54 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=cpmfun.com
blog-indonesia.com/image/6.gif
52.217.227.149403 Forbidden 2.1 kB URL HTTP/1.1 blog-indonesia.com/image/6.gif
IP 52.217.227.149:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash b43a994b8b85d0e8ae9335d728b7361f
5ed538414f2b55481edd739ba13e510a1948735f
3dee65f0bcaaa8b10673d9c53a5d5f0f34128592f33361c7b79972754b996ead
GET /image/6.gif HTTP/1.1
Host: blog-indonesia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 403 Forbidden
Last-Modified: Tue, 29 Nov 2016 14:33:11 GMT
ETag: "b43a994b8b85d0e8ae9335d728b7361f"
x-amz-error-code: AccessDenied
x-amz-error-message: Access Denied
x-amz-request-id: KXZYRCFHT550F72K
x-amz-id-2: vb47WErWkSTH4IuO/50j9g2z5YlY7FYyBpGcSugh1JHKC+BuzTce2vVYZQkuQE2PYdADEyQ8Qeo=
Content-Type: text/html
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: AmazonS3
Content-Length: 2116
www.cpmfun.com/getad.php?34555;62124;728x90
3.130.204.160302 Found 0 B URL HTTP/1.1 www.cpmfun.com/getad.php?34555;62124;728x90
IP 3.130.204.160:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getad.php?34555;62124;728x90 HTTP/1.1
Host: www.cpmfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 302 Found
content-length: 0
date: Tue, 07 Feb 2023 10:35:54 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=cpmfun.com
www.cpmfun.com/getad.php?34555;62124;468x60
3.130.204.160302 Found 0 B URL HTTP/1.1 www.cpmfun.com/getad.php?34555;62124;468x60
IP 3.130.204.160:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getad.php?34555;62124;468x60 HTTP/1.1
Host: www.cpmfun.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 302 Found
content-length: 0
date: Tue, 07 Feb 2023 10:35:54 GMT
location: https://www.hugedomains.com/domain_profile.cfm?d=cpmfun.com
www.allseotools.net/ads/s-backlink.png
207.226.173.130301 Moved Permanently 0 B URL HTTP/1.1 www.allseotools.net/ads/s-backlink.png
IP 207.226.173.130:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /ads/s-backlink.png HTTP/1.1
Host: www.allseotools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Tue, 07 Feb 2023 10:35:54 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.3-4ubuntu2.17
Location: http://www.valencia-hotels.net/en/allseotools.html
X-Request-Id: 5fc8a1cb7021515b6b4b635e5b829ce8
2.bp.blogspot.com/-sN0a487q85I/TeVfJYU-WnI/AAAAAAAAAhg/vYuXYtPaNh8/s1600/transformers-revenge-of-the-fallen-2.jpg
142.250.74.161200 OK 19 kB URL HTTP/1.1 2.bp.blogspot.com/-sN0a487q85I/TeVfJYU-WnI/AAAAAAAAAhg/vYuXYtPaNh8/s1600/transformers-revenge-of-the-fallen-2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x180, components 3\012- data
Hash 8a9c99dd616e76b31f5a58433c3a5097
27d9028a01aeba021555a974073890f155183757
331eda5f08d52bbd87c5d458efd53d7a81aaea951637b27a30a1be89ce0a58dc
GET /-sN0a487q85I/TeVfJYU-WnI/AAAAAAAAAhg/vYuXYtPaNh8/s1600/transformers-revenge-of-the-fallen-2.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="transformers-revenge-of-the-fallen-2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 19122
X-XSS-Protection: 0
ocsp.digicert.com/
93.184.220.29200 OK 279 B IP 93.184.220.29:0
Hash 90ada96d1264ae8d9913b7963ff4e8bf
17b04f417d8926b52b5c33a2a8ba237715a8987b
e48ebd909d6e71d0f2f8d36d4bba971de09035b8a69c44cd15f5d595a52321a2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5161
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 07 Feb 2023 10:35:54 GMT
Last-Modified: Tue, 07 Feb 2023 09:09:53 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 279
4.bp.blogspot.com/-liTtR_jPD_A/TeVfILy3VtI/AAAAAAAAAhc/yxUJssVRDpQ/s1600/transformers-revenge-of-the-fallen1.jpg
142.250.74.161200 OK 20 kB URL HTTP/1.1 4.bp.blogspot.com/-liTtR_jPD_A/TeVfILy3VtI/AAAAAAAAAhc/yxUJssVRDpQ/s1600/transformers-revenge-of-the-fallen1.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x180, components 3\012- data
Hash 9c371703b60a65bbb4c783fb43e1fdf5
3332ec9e6b2a3318d36d6e24ae697b701c5a85b6
156d6d5efdee061d252788158c0dfb2362348a2bea3dade4f7d2a4d4efdc4285
GET /-liTtR_jPD_A/TeVfILy3VtI/AAAAAAAAAhc/yxUJssVRDpQ/s1600/transformers-revenge-of-the-fallen1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e2"
Expires: Wed, 08 Feb 2023 10:35:54 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="transformers-revenge-of-the-fallen1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 07 Feb 2023 10:35:54 GMT
Server: fife
Content-Length: 19913
X-XSS-Protection: 0
kewlrank.com/getrank.php?id=1345997975&type=8915
66.115.173.179301 Moved Permanently 0 B URL HTTP/1.1 kewlrank.com/getrank.php?id=1345997975&type=8915
IP 66.115.173.179:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /getrank.php?id=1345997975&type=8915 HTTP/1.1
Host: kewlrank.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
location: http://www.kewlrank.com/getrank.php?id=1345997975&type=8915
x-litespeed-cache: hit
content-length: 0
date: Tue, 07 Feb 2023 10:35:54 GMT
server: LiteSpeed
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 5990989d921d8f907340802dae1856e3
e6b1e865d9f09d68dcd78b24b635d86de54432f1
f810fccbfbd7bf53bfcd119ebdda8bd8825e5f386e8c9c24f143a44c92ff58f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F810FCCBFBD7BF53BFCD119EBDDA8BD8825E5F386E8C9C24F143A44C92FF58F0"
Last-Modified: Sun, 05 Feb 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7525
Expires: Tue, 07 Feb 2023 12:41:20 GMT
Date: Tue, 07 Feb 2023 10:35:55 GMT
Connection: keep-alive
www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
94.130.218.80301 Moved Permanently 178 B URL HTTP/2 www.auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP 94.130.218.80:0
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash bd2695f4b079c71dbddde3436286fb9c
733c05da132193d6cf1d8e242d12e2525c03bab4
2e04a18ff185ba5b16f762a0538339bc4049aceaef9738edd43af77d2ceb788b
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: www.auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx/1.18.0 (Ubuntu)
date: Tue, 07 Feb 2023 10:35:55 GMT
content-type: text/html
content-length: 178
location: https://auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
X-Firefox-Spdy: h2
www.overshopping.com/images/backlink.gif
103.224.182.246200 OK 0 B URL HTTP/1.1 www.overshopping.com/images/backlink.gif
IP 103.224.182.246:0
ASN #133618 Trellian Pty. Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/backlink.gif HTTP/1.1
Host: www.overshopping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
date: Tue, 07 Feb 2023 10:35:55 GMT
server: Apache/2.4.38 (Debian)
set-cookie: __tad=1675766155.6249225; expires=Fri, 04-Feb-2033 10:35:55 GMT; Max-Age=315360000
content-length: 0
content-type: text/html; charset=UTF-8
connection: close
www.blogger.com/navbar.g?targetBlogID=3719337579064215406&blogName=Mathin+Games&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://catatanmathin.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://catatanmathin.blogspot.com/&targetPostID=2846565068888577062&blogPostOrPageUrl=http://catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html&vt=-72320840207351415&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
142.250.74.73200 OK 2.7 kB URL HTTP/2 www.blogger.com/navbar.g?targetBlogID=3719337579064215406&blogName=Mathin+Games&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://catatanmathin.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://catatanmathin.blogspot.com/&targetPostID=2846565068888577062&blogPostOrPageUrl=http://catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html&vt=-72320840207351415&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__
IP 142.250.74.73:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3170)
Hash 43cb5141d4f07ef22189d1745aa745fc
ce356dbe67d2aab92645012ccc1cf54072a70eb1
fcd709d753ac956a5abd6a9d82382677c5a70119a4ea4285b832b0bfd2171de1
GET /navbar.g?targetBlogID=3719337579064215406&blogName=Mathin+Games&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://catatanmathin.blogspot.com/search&blogLocale=in&v=2&homepageUrl=http://catatanmathin.blogspot.com/&targetPostID=2846565068888577062&blogPostOrPageUrl=http://catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html&vt=-72320840207351415&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 07 Feb 2023 10:35:55 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2654
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.hugedomains.com/domain_profile.cfm?d=cpmfun.com
172.67.70.191200 OK 48 kB URL HTTP/2 www.hugedomains.com/domain_profile.cfm?d=cpmfun.com
IP 172.67.70.191:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1487), with CRLF, LF line terminators
Hash 9954b48e319217b5ea9fc29f2b094c77
fcf96b81987ee2c476cdcc7dc6ff2cc943f92d6b
cf67db048df521283479596d83355858b8c9f9a8e8665375581f4e7b93f92012
GET /domain_profile.cfm?d=cpmfun.com HTTP/1.1
Host: www.hugedomains.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 07 Feb 2023 10:35:55 GMT
content-type: text/html; charset=utf-8
cache-control: private
vary: Accept-Encoding
set-cookie: site_version_phase=108; expires=Fri, 02-Feb-2024 10:35:55 GMT; path=/
site_version=HDv3; expires=Fri, 02-Feb-2024 10:35:55 GMT; path=/
captcha-tracker=; expires=Mon, 06-Feb-2023 10:35:55 GMT; path=/
x-powered-by: ASP.NET
lb: TclPrdLbHd1
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AzXdpeZn%2B30qAF0mJivWOOZYWa1GASFzp4UUTPwIfO74uRpP%2Bo97ksIvO9TPIgCLmFj7bTvjAOrvDIf3vE8MwrgEEqUs4n7HDAY7G1NVHZ%2F%2BaH1x38onlsxJJXA4UlKkoXZwX24%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 795b7b44ad8db523-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 952103a86d045593e6a8e2bc97229a54
0d82ddae98e0750efd42254909536b8ae5d50c73
1eabd8042a524e2bb49d2ace4feeaee7a999ef133d06ef863d2c80617ef9c0d5
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:55 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 05 Feb 2023 19:25:47 GMT
Expires: Sun, 12 Feb 2023 19:25:46 GMT
Etag: "0d82ddae98e0750efd42254909536b8ae5d50c73"
Cache-Control: max-age=463190,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb1
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 795b7b45f895b527-OSL
mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XEuPzWq_Ou9UWXoti0TOP_-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGVatJqgR1xMoDKoyvP4nOUq_FGGVOyllxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYiCMsr_ulNOYaCn805125FSZYRDbahPCgt6xMweQPe7RZORWTM9PNYIHAgSOaIlL2FbPQm9updSqrRet_i-QysuCuC7Ai3vVz-utPwUQLmck-mOVqqPo8313Gt8Za9yVtUvkA9QjrVIJ4PMjbG_xrO_OECgwsDFXOROYHTTuoT3isQ-YlreW2CQNeHbvGrF9q-Z5VKlx-z0QpcFoxRNCl6CTNpuoCwlSGGcf0bhH61xZ94rN6UFfnY2jYMB49itlXPe2RBTq8sCdk5eLPcnbcS9ijjSYBMdpCETWnZXPrR37tL2ZaD71U_ZzuC2-3TlK-7-GhmoL-fUk-SYV1Qbqjetls_HxzCmehbs4uOTzzleXNmWXsaD02FQizA9sUQkHL4lOtS1Tw--xxcR-VLxRCgkeUy3rx5RMAfgQ7uj6UnBsleQ31WVEj4xDIIvMSsDK2pgcb6J1m-Pz06VLN4U6PEbJ1PALLUd_tdPPVCMY1N0jalvIQQnKavl1NSN-SfByYhqFusT-IiMq8EGD5vKPzkaqmwJAszADO_i_NJRAy3PM3DRH1FvR3N66b0Y2uYSo2FPmdMT9GnOIUBnLwYrUOheDrgtjNKz4z6bGYyS522O1oFifPDzHNxSKyyxSF2K-A2sY0WZJnt_1a9zt_qR5aBi63JmEwd8N0jOppOP3SO9RJapjDFybn-H2-fN1SGTOfY0H9nUjmczxJuvsPOFs-HrGM6vbEMjnHvzyl9URgnRlvg5ZKUVAejphu-hqdm-8VaxjOZPxQx-SYfalSQaibODnj8e-Cc2IjiCjRjhYmWDrqOdw2knT34lgFunUYYAdGqV-G2erxItMd30bG0qja_Q6qeV-0Lw-3tAB9nhXL4xRevZ5EK4GiJCskgwC09xOkpIM2eX2MGMnSTlGH1k24l_9Ivr1rKGS8w_zX1SnydbuNSIOF75IipjXd3-l2sWw2Qc_u_OVv-XdR8zckXACGeJtScmtpzvi55Aek8ZELW3gWtnI0VLoAshK_5PBVx0qoAH-DYDFvyJblRvDp0aNK9RN9QIBVQ4G0uzmM5BOPqTP4KsnwO1hQkrVy2SPnaC8B5YJwREdV81GH5Ftc5FKLl7L7CCKX_VgeaJOYTSNaX7SCYkQl8Mh6uNyQbwzYlmEyH33rjqdZ0jA625zF4b_mHgQfSdSEMrHkCF9D18dxxgg4rX30M_z0wzPew_WXGy8qQACw8m2_yetodsjqwCYyJOc6Z3mdMU-EgQQvHws6wUcLST2CQP9qRbGt7D2zR4WCsW6m0JxJttsEyDQIZN5p5WFds9BTtmLfvlh8MX8ujas3obo73xBRjs3BGvkYZwnBpoj9OYCx5kOsJ9ezAk87TtXik4Qcn1gfbuO4dFgz0fqpkqJbzoOwJk6-ydaJqHReHfmZF53UpRm-w7aUeV7q7ctCSivH-7av8WZBCypUgt-zVtwJ2CKr9YHwKBdSultdUXKZLbNLOQfuHxHeN3pBA4FZRXc_6obQAxHp2DWtr9ZefgMhodgNxnnyVfPiZDt45K1KTetGKkTiHqzSk-KRg7qb2PPeTclojXmPyZ7KLga-yzkt54L1JiI8z1hX-jh2tlQEZUze64St6-gKIW275ciWmyic5LKRhjjq-D96pKbzXVyF1S08xmL9JvVDV9nj28eyFZqBb8sfqXeOtS6rR5RZ3XcGcO7jtpb_vUK1ucLbqzPHkjaRbP8RWiR6-Z-Rt21skxThwXj7BuaSUIfw1HqkwZhl4kCumx-yNBZu5BcLplZyjyoigpu2EVJExlw6Wy1IayUIeWkBdwpztyCho4xGAiRAaEsDLxaYvPCg_6ufxfw-xcLoheDEReIRf_1Fmol4htfLVJRJevH-9Dup1eKscr2wtf-xpPp8ZQ705PnRv2R3khMsaDFOUD5e5FLaFbzMHeQ2j6wlcLmr06ZeDjT6fGUO9OT51Hz0Bp88emttONyCIAd5se-Enx24tEQ5BWW6tLoqm1V8lNkLpIq9Fy5s66ZOZll-DVsew0BMiueGPS6QzEn_EYhMAp0UP6TiUs9Cn0l2TcNoaFIazE2Q3GnsCKfGyeJoijXs6r8LZhinSG_GsPHf0wsPAe_j0zYMx3r94mOd6HGrVbtM_geRck9xkXAG2Q1A3L2wolnNLYd1XLp4xaz4bbPQ_tyL-egqd2SCEbk-HlDJDIlASYdwhqom3L1k1jRiqNmfwBIZLLmJi-eU4AWN_fATTUVJdyoJkzoh-DM86UabOfmUZ2ZvRZkqi1M5tm7WMs_u39r8sUAQRt0moGqzieLtEh3R_3xJmt7mm3lHZK1XGc9uuOt2Y-RLo49Ft7kVI8oUU91bK23XHgqKei9m3y2l9pz0AS-iNHhS_fhvu8rU0paHs_pUITanUw8UQc6Nv2MF3pMg3GAWNx4RU7kv1Wno3gah83g7SvP4S6465I4pagL4oAK9Tiz2nfMYtBdPrYgG7afTXkyA
52.116.53.155302 Found 0 B URL HTTP/2 mybettermb.com/aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XEuPzWq_Ou9UWXoti0TOP_-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGVatJqgR1xMoDKoyvP4nOUq_FGGVOyllxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYiCMsr_ulNOYaCn805125FSZYRDbahPCgt6xMweQPe7RZORWTM9PNYIHAgSOaIlL2FbPQm9updSqrRet_i-QysuCuC7Ai3vVz-utPwUQLmck-mOVqqPo8313Gt8Za9yVtUvkA9QjrVIJ4PMjbG_xrO_OECgwsDFXOROYHTTuoT3isQ-YlreW2CQNeHbvGrF9q-Z5VKlx-z0QpcFoxRNCl6CTNpuoCwlSGGcf0bhH61xZ94rN6UFfnY2jYMB49itlXPe2RBTq8sCdk5eLPcnbcS9ijjSYBMdpCETWnZXPrR37tL2ZaD71U_ZzuC2-3TlK-7-GhmoL-fUk-SYV1Qbqjetls_HxzCmehbs4uOTzzleXNmWXsaD02FQizA9sUQkHL4lOtS1Tw--xxcR-VLxRCgkeUy3rx5RMAfgQ7uj6UnBsleQ31WVEj4xDIIvMSsDK2pgcb6J1m-Pz06VLN4U6PEbJ1PALLUd_tdPPVCMY1N0jalvIQQnKavl1NSN-SfByYhqFusT-IiMq8EGD5vKPzkaqmwJAszADO_i_NJRAy3PM3DRH1FvR3N66b0Y2uYSo2FPmdMT9GnOIUBnLwYrUOheDrgtjNKz4z6bGYyS522O1oFifPDzHNxSKyyxSF2K-A2sY0WZJnt_1a9zt_qR5aBi63JmEwd8N0jOppOP3SO9RJapjDFybn-H2-fN1SGTOfY0H9nUjmczxJuvsPOFs-HrGM6vbEMjnHvzyl9URgnRlvg5ZKUVAejphu-hqdm-8VaxjOZPxQx-SYfalSQaibODnj8e-Cc2IjiCjRjhYmWDrqOdw2knT34lgFunUYYAdGqV-G2erxItMd30bG0qja_Q6qeV-0Lw-3tAB9nhXL4xRevZ5EK4GiJCskgwC09xOkpIM2eX2MGMnSTlGH1k24l_9Ivr1rKGS8w_zX1SnydbuNSIOF75IipjXd3-l2sWw2Qc_u_OVv-XdR8zckXACGeJtScmtpzvi55Aek8ZELW3gWtnI0VLoAshK_5PBVx0qoAH-DYDFvyJblRvDp0aNK9RN9QIBVQ4G0uzmM5BOPqTP4KsnwO1hQkrVy2SPnaC8B5YJwREdV81GH5Ftc5FKLl7L7CCKX_VgeaJOYTSNaX7SCYkQl8Mh6uNyQbwzYlmEyH33rjqdZ0jA625zF4b_mHgQfSdSEMrHkCF9D18dxxgg4rX30M_z0wzPew_WXGy8qQACw8m2_yetodsjqwCYyJOc6Z3mdMU-EgQQvHws6wUcLST2CQP9qRbGt7D2zR4WCsW6m0JxJttsEyDQIZN5p5WFds9BTtmLfvlh8MX8ujas3obo73xBRjs3BGvkYZwnBpoj9OYCx5kOsJ9ezAk87TtXik4Qcn1gfbuO4dFgz0fqpkqJbzoOwJk6-ydaJqHReHfmZF53UpRm-w7aUeV7q7ctCSivH-7av8WZBCypUgt-zVtwJ2CKr9YHwKBdSultdUXKZLbNLOQfuHxHeN3pBA4FZRXc_6obQAxHp2DWtr9ZefgMhodgNxnnyVfPiZDt45K1KTetGKkTiHqzSk-KRg7qb2PPeTclojXmPyZ7KLga-yzkt54L1JiI8z1hX-jh2tlQEZUze64St6-gKIW275ciWmyic5LKRhjjq-D96pKbzXVyF1S08xmL9JvVDV9nj28eyFZqBb8sfqXeOtS6rR5RZ3XcGcO7jtpb_vUK1ucLbqzPHkjaRbP8RWiR6-Z-Rt21skxThwXj7BuaSUIfw1HqkwZhl4kCumx-yNBZu5BcLplZyjyoigpu2EVJExlw6Wy1IayUIeWkBdwpztyCho4xGAiRAaEsDLxaYvPCg_6ufxfw-xcLoheDEReIRf_1Fmol4htfLVJRJevH-9Dup1eKscr2wtf-xpPp8ZQ705PnRv2R3khMsaDFOUD5e5FLaFbzMHeQ2j6wlcLmr06ZeDjT6fGUO9OT51Hz0Bp88emttONyCIAd5se-Enx24tEQ5BWW6tLoqm1V8lNkLpIq9Fy5s66ZOZll-DVsew0BMiueGPS6QzEn_EYhMAp0UP6TiUs9Cn0l2TcNoaFIazE2Q3GnsCKfGyeJoijXs6r8LZhinSG_GsPHf0wsPAe_j0zYMx3r94mOd6HGrVbtM_geRck9xkXAG2Q1A3L2wolnNLYd1XLp4xaz4bbPQ_tyL-egqd2SCEbk-HlDJDIlASYdwhqom3L1k1jRiqNmfwBIZLLmJi-eU4AWN_fATTUVJdyoJkzoh-DM86UabOfmUZ2ZvRZkqi1M5tm7WMs_u39r8sUAQRt0moGqzieLtEh3R_3xJmt7mm3lHZK1XGc9uuOt2Y-RLo49Ft7kVI8oUU91bK23XHgqKei9m3y2l9pz0AS-iNHhS_fhvu8rU0paHs_pUITanUw8UQc6Nv2MF3pMg3GAWNx4RU7kv1Wno3gah83g7SvP4S6465I4pagL4oAK9Tiz2nfMYtBdPrYgG7afTXkyA
IP 52.116.53.155:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert fortinet Phishing
GET /aS/feedclick?s=HFz5zNIIs96fzq49jFkHXa3dDnCBF-q5XEuPzWq_Ou9UWXoti0TOP_-5cgJn_QpsVVH-ImtJpPaG_Nh80WMmwqfTqqBykvhwGVatJqgR1xMoDKoyvP4nOUq_FGGVOyllxlOmzgR5fh3nQoQZVtH1UcHY6z5T2K7NFT_4ZRcycYiCMsr_ulNOYaCn805125FSZYRDbahPCgt6xMweQPe7RZORWTM9PNYIHAgSOaIlL2FbPQm9updSqrRet_i-QysuCuC7Ai3vVz-utPwUQLmck-mOVqqPo8313Gt8Za9yVtUvkA9QjrVIJ4PMjbG_xrO_OECgwsDFXOROYHTTuoT3isQ-YlreW2CQNeHbvGrF9q-Z5VKlx-z0QpcFoxRNCl6CTNpuoCwlSGGcf0bhH61xZ94rN6UFfnY2jYMB49itlXPe2RBTq8sCdk5eLPcnbcS9ijjSYBMdpCETWnZXPrR37tL2ZaD71U_ZzuC2-3TlK-7-GhmoL-fUk-SYV1Qbqjetls_HxzCmehbs4uOTzzleXNmWXsaD02FQizA9sUQkHL4lOtS1Tw--xxcR-VLxRCgkeUy3rx5RMAfgQ7uj6UnBsleQ31WVEj4xDIIvMSsDK2pgcb6J1m-Pz06VLN4U6PEbJ1PALLUd_tdPPVCMY1N0jalvIQQnKavl1NSN-SfByYhqFusT-IiMq8EGD5vKPzkaqmwJAszADO_i_NJRAy3PM3DRH1FvR3N66b0Y2uYSo2FPmdMT9GnOIUBnLwYrUOheDrgtjNKz4z6bGYyS522O1oFifPDzHNxSKyyxSF2K-A2sY0WZJnt_1a9zt_qR5aBi63JmEwd8N0jOppOP3SO9RJapjDFybn-H2-fN1SGTOfY0H9nUjmczxJuvsPOFs-HrGM6vbEMjnHvzyl9URgnRlvg5ZKUVAejphu-hqdm-8VaxjOZPxQx-SYfalSQaibODnj8e-Cc2IjiCjRjhYmWDrqOdw2knT34lgFunUYYAdGqV-G2erxItMd30bG0qja_Q6qeV-0Lw-3tAB9nhXL4xRevZ5EK4GiJCskgwC09xOkpIM2eX2MGMnSTlGH1k24l_9Ivr1rKGS8w_zX1SnydbuNSIOF75IipjXd3-l2sWw2Qc_u_OVv-XdR8zckXACGeJtScmtpzvi55Aek8ZELW3gWtnI0VLoAshK_5PBVx0qoAH-DYDFvyJblRvDp0aNK9RN9QIBVQ4G0uzmM5BOPqTP4KsnwO1hQkrVy2SPnaC8B5YJwREdV81GH5Ftc5FKLl7L7CCKX_VgeaJOYTSNaX7SCYkQl8Mh6uNyQbwzYlmEyH33rjqdZ0jA625zF4b_mHgQfSdSEMrHkCF9D18dxxgg4rX30M_z0wzPew_WXGy8qQACw8m2_yetodsjqwCYyJOc6Z3mdMU-EgQQvHws6wUcLST2CQP9qRbGt7D2zR4WCsW6m0JxJttsEyDQIZN5p5WFds9BTtmLfvlh8MX8ujas3obo73xBRjs3BGvkYZwnBpoj9OYCx5kOsJ9ezAk87TtXik4Qcn1gfbuO4dFgz0fqpkqJbzoOwJk6-ydaJqHReHfmZF53UpRm-w7aUeV7q7ctCSivH-7av8WZBCypUgt-zVtwJ2CKr9YHwKBdSultdUXKZLbNLOQfuHxHeN3pBA4FZRXc_6obQAxHp2DWtr9ZefgMhodgNxnnyVfPiZDt45K1KTetGKkTiHqzSk-KRg7qb2PPeTclojXmPyZ7KLga-yzkt54L1JiI8z1hX-jh2tlQEZUze64St6-gKIW275ciWmyic5LKRhjjq-D96pKbzXVyF1S08xmL9JvVDV9nj28eyFZqBb8sfqXeOtS6rR5RZ3XcGcO7jtpb_vUK1ucLbqzPHkjaRbP8RWiR6-Z-Rt21skxThwXj7BuaSUIfw1HqkwZhl4kCumx-yNBZu5BcLplZyjyoigpu2EVJExlw6Wy1IayUIeWkBdwpztyCho4xGAiRAaEsDLxaYvPCg_6ufxfw-xcLoheDEReIRf_1Fmol4htfLVJRJevH-9Dup1eKscr2wtf-xpPp8ZQ705PnRv2R3khMsaDFOUD5e5FLaFbzMHeQ2j6wlcLmr06ZeDjT6fGUO9OT51Hz0Bp88emttONyCIAd5se-Enx24tEQ5BWW6tLoqm1V8lNkLpIq9Fy5s66ZOZll-DVsew0BMiueGPS6QzEn_EYhMAp0UP6TiUs9Cn0l2TcNoaFIazE2Q3GnsCKfGyeJoijXs6r8LZhinSG_GsPHf0wsPAe_j0zYMx3r94mOd6HGrVbtM_geRck9xkXAG2Q1A3L2wolnNLYd1XLp4xaz4bbPQ_tyL-egqd2SCEbk-HlDJDIlASYdwhqom3L1k1jRiqNmfwBIZLLmJi-eU4AWN_fATTUVJdyoJkzoh-DM86UabOfmUZ2ZvRZkqi1M5tm7WMs_u39r8sUAQRt0moGqzieLtEh3R_3xJmt7mm3lHZK1XGc9uuOt2Y-RLo49Ft7kVI8oUU91bK23XHgqKei9m3y2l9pz0AS-iNHhS_fhvu8rU0paHs_pUITanUw8UQc6Nv2MF3pMg3GAWNx4RU7kv1Wno3gah83g7SvP4S6465I4pagL4oAK9Tiz2nfMYtBdPrYgG7afTXkyA HTTP/1.1
Host: mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
server: nginx
date: Tue, 07 Feb 2023 10:35:55 GMT
content-length: 0
set-cookie: rhid=82839614296; Max-Age=15552000; Expires=Sun, 06-Aug-2023 10:35:55 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
location: https://p185689.mybettermb.com/adServe/domainClick?ai=eHdHhnjefhzGDsa2d8YjgWmQiT-1fLZROuTZFBjirzTybCxZe0Igm2y1CzvnPMmWEV0VpJMZWeky-0abnAxmU4Xi9ydSyjfMw96ss0F1rXyz7LFRtDCzoPkjQsIxQLx4ehq9_TnVDg7d2dtLpsxnej86kHf_XOzc4gzAyVQJAonaHMa6T6JXZVVlypJAQOEB1fpwhlRk8r1PSUgoZRIDW7f-smo9vT2hpgbTH0-B3xa1FH8BMppt5mSYOQEdHvqd504wHbEjADtukn-p3SwYTtBeZ3S0WZgBYvhL0s_6fcCW3E4v6rd9oiT9J34A6qDrFZwobw64lGvA7i2YC5AAX2ry45yJhMAtkJdfRLzNmeHc6AzY3U8-3HX2VRITifiaenWItYlt6tpVpciFFJQeenS_bNxPDHCsi9ujYcb7W4qWm47xmj5LZ0-nxlDvTk-dX36l8zzCIDmtmCaUXMnywOjk7b-dfaEe8Y9CAkQlislmPxkWRCR7f2pxQOhL-xvWHBvIjlsBiABmPxkWRCR7fyFF2BECF7hLmERB8F-MixY5fmo3ywQY79383RgyfMRwRoFz3tbaHFScNOsqdDPf3B2GPgvKKtCp8R3-Lf5i2NypfGdSqTDcr7Z5MAaYNWvz5DGbd_IM9PQCozyvMhv4-JfE6wGTHpfnUYhV1QiHNxae2-kMvWtZh0Wd13BnDu47S_sQnzFC-Jp7Jl4Hi3-y6jbZeKmnzd5LDcWyqPzyF1j0QXCBs73sXqwWcH55acyZGeGhSsbl8GGPUzxeCLpsmc0eliZCcGSK1QlvVKC08ytv0-cfxRgHaSCijZY_SNQadM5ECUeELJfkQmjZE96sjp8DPbGbSNtJN0JJKTQdChujiGYQ-VGfM1BKQ8__OyXIgafZ9sDvHt0Fy9LbfW_6duFoOnPfBtp4nikxEDznWgUW0YeVoTdAMXo_8JgIlG3qZZJCxAdeOqU&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPe3HqOQ2HCjBnUGe1faqM8HaaKXom34XdwXHK2yytxVgXidl5idWNRbBI0pp1DeWO6OthoF4Ljgw&si=1&oref=320d8a9e16d091be3daf87219fe5dd96&optunit=RZ3XcGcO7jutK6Mz5FaVqw&rb=6HrvxnDas3s&rr=4&abtg=0
X-Firefox-Spdy: h2
www.kewlrank.com/getrank.php?id=1345997975&type=8915
66.115.173.179404 Not Found 6.7 kB URL HTTP/1.1 www.kewlrank.com/getrank.php?id=1345997975&type=8915
IP 66.115.173.179:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (7739)
Hash 6186188504b1dd5e585b5f40852ebd7e
6a500174c0dd9f8b1ab0cde378357a03b894bce0
3a6309d7b6d8434cc67f6af6d6d3c5cd3406ba75c808596fc052c865299b9f29
GET /getrank.php?id=1345997975&type=8915 HTTP/1.1
Host: www.kewlrank.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
HTTP/1.1 404 Not Found
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
content-type: text/html; charset=UTF-8
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <http://www.kewlrank.com/wp-json/>; rel="https://api.w.org/"
x-litespeed-cache: hit
content-encoding: gzip
vary: Accept-Encoding
content-length: 6692
date: Tue, 07 Feb 2023 10:35:55 GMT
server: LiteSpeed
www.allnewssite.com/images/backlink.gif
198.57.150.161200 OK 720 B URL HTTP/1.1 www.allnewssite.com/images/backlink.gif
IP 198.57.150.161:0
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 80 x 15\012- data
Hash 1b808dee3dc3b51fd622764bb88175d4
50d9a5e3015dba344a56076630ed22369158c456
3c39ebbb1a782a061ddf999d5ead0753eed961bc9708ad0ef0659a23be37d1c1
GET /images/backlink.gif HTTP/1.1
Host: www.allnewssite.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:55 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 06 Mar 2018 21:48:32 GMT
Accept-Ranges: bytes
Content-Length: 720
Keep-Alive: timeout=5, max=75
Content-Type: image/gif
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2187
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 10:35:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2187
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 10:35:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2187
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 10:35:55 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 68273225f74fbf7493f395610d7a73fc
5a8779ef5656aeeba23b365aad60b7901c5dd7fc
c83f285a1f3df0f7ac758a68ee95cc3d2671f80264c2e143cc0561cc574e3f19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C83F285A1F3DF0F7AC758A68EE95CC3D2671F80264C2E143CC0561CC574E3F19"
Last-Modified: Mon, 06 Feb 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2187
Expires: Tue, 07 Feb 2023 11:12:22 GMT
Date: Tue, 07 Feb 2023 10:35:55 GMT
Connection: keep-alive
www.valencia-hotels.net/en/allseotools.html
82.223.110.146200 OK 19 kB URL HTTP/1.1 www.valencia-hotels.net/en/allseotools.html
IP 82.223.110.146:0
Hash f73564f1a0e88c89767b19563218be53
f8d1ea36aac18c2c56b9867f5244a2239fc1a1c7
0cd0190f25419d9e7109740088c6c2236f8429246e454e46b2bd3b36cc232538
GET /en/allseotools.html HTTP/1.1
Host: www.valencia-hotels.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:55 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Rnd: p31tYqNgqMbpeqj8
Set-Cookie: lang=1; path=/; domain=.valencia-hotels.net
_mobile=0; path=/; domain=.valencia-hotels.net
btest=297; path=/; domain=.valencia-hotels.net
bteststep=5; path=/; domain=.valencia-hotels.net
btesthotel=297; expires=Thu, 09-Mar-2023 10:35:55 GMT; Max-Age=2592000; path=/; domain=.valencia-hotels.net
_wsl=p31tYqNgqMbpeqj8; expires=Sun, 06-Aug-2023 10:35:55 GMT; Max-Age=15552000; path=/; domain=.valencia-hotels.net
currency=22; path=/; domain=.valencia-hotels.net
subacc=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.valencia-hotels.net
cutype=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.valencia-hotels.net
from=2023-02-08; path=/; domain=.valencia-hotels.net
to=2023-02-09; path=/; domain=.valencia-hotels.net
use_dates=0; path=/; domain=.valencia-hotels.net
adults=2; path=/; domain=.valencia-hotels.net
children=0; path=/; domain=.valencia-hotels.net
rooms_info=%5B%7B%22adults%22%3A2%2C%22children%22%3A%5B%5D%7D%5D; path=/; domain=.valencia-hotels.net
_sort=0; expires=Tue, 07-Feb-2023 09:35:55 GMT; Max-Age=0; path=/; domain=.valencia-hotels.net
csort=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.valencia-hotels.net
corder=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/; domain=.valencia-hotels.net
Content-Encoding: gzip
Server: Apache/1.3.37 (CentOS)Communique/4.2.1
X-Powered-By: PHP/7.1.3-3-1+deb.sury.org~trusty+1
X-Request-Id: 988ffcf231caeb147d9a4e01c9f80365
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 75b0935816ca54d5d20a9fffa5531e0d
bd8374980c16b7d5a28e55b8bef2215713b1ebb2
4ab6f49d22d029681754b617001f93467d63035acdaf12905c2314cab77991af
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc3c48c35-4645-41c0-a6fa-b700208324c7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13390
x-amzn-requestid: 0664e077-13a4-4a97-afc2-3969cee56958
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f2pu6Fb7oAMF_0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63df565f-057ee8fa26aa83d21f875d73;Sampled=0
x-amzn-remapped-date: Sun, 05 Feb 2023 07:10:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cAwOWu-_JYTMa0l-1A07FxgOGtG7P59D7XlovXByRA9dQxfsS2An7w==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 18:44:40 GMT
age: 57075
etag: "bd8374980c16b7d5a28e55b8bef2215713b1ebb2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
94.130.218.80404 Not Found 34 kB URL HTTP/2 auto-ping.com/iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1
IP 94.130.218.80:0
ASN #24940 Hetzner Online GmbH
Hash 61db8f2b5be847c0136f853b1dceb9af
0d82f15a5049d359d5b87902b6cc54484be5a838
247a2ccc1df196c9611698ec8d5f59f50b93ceff539367888a7b359a793e6f19
GET /iping.php?aut=EF60387089C968920487F89D5739455201155A64B924A54A750E6D8DD2AD0BC1854A7AD421A02FC8C1 HTTP/1.1
Host: auto-ping.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
server: nginx/1.18.0 (Ubuntu)
date: Tue, 07 Feb 2023 10:35:55 GMT
content-type: text/html
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3482c5eb-0e83-4722-a14e-ee2eefae5e03.jpeg
34.120.237.76200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3482c5eb-0e83-4722-a14e-ee2eefae5e03.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5eb98d203ce09cf8d1964decb2e44058
004d35f6af8f06b453a4c047e202fddbd410aaf4
80232fe0b4ce7393653076fc39d2d315274e8c17f76a4f754576f4a8a1b3baef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3482c5eb-0e83-4722-a14e-ee2eefae5e03.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6779
x-amzn-requestid: e2a59d9f-577d-4071-8d40-80e54051fc18
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVx6FjwoAMFyNw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033f-1fcd55e1413543440d46307c;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:27 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FZJQ69FF1iyOoekLlK7Vj_Lmyl26qhKWmzXUvMeoob54yr8K_YFRhA==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 10:10:06 GMT
age: 1549
etag: "004d35f6af8f06b453a4c047e202fddbd410aaf4"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
34.120.237.76200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 003fc35e140a75a12b7795c3986426ec
da002b22e2a01f48a545b369d4403eabb17a10d5
bb0754411aa7d0a5036b86b282d0e93d13227765ca9ccaf3a34e8e486cb413d1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6de3153-62d2-494b-8acf-6d3ac8adba7d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13160
x-amzn-requestid: 34aa6dfe-7f14-48d0-89b2-90548621be79
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fzVxSHh7IAMFjAg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63de033b-49587fff75aebe96136137be;Sampled=0
x-amzn-remapped-date: Sat, 04 Feb 2023 07:03:23 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qwSN-ztVJgRfu3bFIjYaVYV8Cnx77j1ugkRjqhRtRXdPju7AhEMg-A==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Tue, 07 Feb 2023 07:15:46 GMT
age: 12009
etag: "da002b22e2a01f48a545b369d4403eabb17a10d5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eedb4de12585c70ddb5b8f94fe6a59e2
83c9437e71a0a03b3e8ff652155a85eafa76cdda
d4493a30f62e9ad224b3595ba3af8a322e2d4a3d9238a1847973f962bdcc0c82
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8ada2635-3335-4f49-9e7f-22d2ae016030.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4227
x-amzn-requestid: b45f2ab7-0102-4542-9514-54fb93a0e27f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: f77sTH4jIAMFnsQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63e1731b-4a24bcb1102e58543cd81343;Sampled=0
x-amzn-remapped-date: Mon, 06 Feb 2023 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: V_4NzIAVBOZMjf_YIM3bowFdlP1y4peI5JI-jO105s3NVjmyYnC0Tg==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 06 Feb 2023 21:48:48 GMT
age: 46027
etag: "83c9437e71a0a03b3e8ff652155a85eafa76cdda"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.mypagerank.net/services/seomonitor/seomonitor.php?aut=84281
104.21.12.69200 OK 145 B URL HTTP/1.1 www.mypagerank.net/services/seomonitor/seomonitor.php?aut=84281
IP 104.21.12.69:0
File type GIF image data, version 87a, 76 x 13\012- data
Hash 9fd5af09c0efba4e4a73ba5d4c4dc3f8
3eaf8fa98453365c02097079f18df015c903f880
c5166cb52210e1d5379fcf64a8d3f638f162038a39926dec063fc3e6c3b126f3
GET /services/seomonitor/seomonitor.php?aut=84281 HTTP/1.1
Host: www.mypagerank.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:58 GMT
Content-Type: image/png
Content-Length: 145
Connection: keep-alive
Pragma: public
Expires: Mon, 26 Jul 2013 05:00:00 GMT
Cache-Control: max-age=604800
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4HZlMb6SAArBzqTu9k4LJ%2BYuqae0aiNT2yzo8RHQB4A77JCxX1PUcJRiNQhiM79M9sCdMozhk3%2FT9l9YKbMEDl1PJ%2F9Ci2xBIP7lj%2F%2BRFiEd7%2BPnd8oL3bsKiH2nFNxWfgzUtk4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 795b7b582ada0b51-OSL
alt-svc: h2=":443"; ma=60
sstatic1.histats.com/0.gif?1994839&101
149.56.240.27200 OK 43 B URL HTTP/1.1 sstatic1.histats.com/0.gif?1994839&101
IP 149.56.240.27:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /0.gif?1994839&101 HTTP/1.1
Host: sstatic1.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 07 Feb 2023 10:35:58 GMT
Content-Type: image/gif
Content-Length: 43
Connection: close
catatanmathin.blogspot.com/2011/07/YOUR-FAVICON-URL
142.250.74.1404 Not Found 23 kB URL HTTP/1.1 catatanmathin.blogspot.com/2011/07/YOUR-FAVICON-URL
IP 142.250.74.1:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (24589)
Hash 6cf609ee42534a6b34de7e39c531570f
9c6d076d21f08d64dc59b8f1c31022e646ea65d7
f842206ec50fb614fbff7a552e6b6f24283c40083c58840ce1e862ebb0088a93
GET /2011/07/YOUR-FAVICON-URL HTTP/1.1
Host: catatanmathin.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://catatanmathin.blogspot.com/2011/07/transformers-2-revenge-of-fallen.html
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 07 Feb 2023 10:35:58 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 23218
Server: GSE
p185689.mybettermb.com/adServe/domainClick?ai=eHdHhnjefhzGDsa2d8YjgWmQiT-1fLZROuTZFBjirzTybCxZe0Igm2y1CzvnPMmWEV0VpJMZWeky-0abnAxmU4Xi9ydSyjfMw96ss0F1rXyz7LFRtDCzoPkjQsIxQLx4ehq9_TnVDg7d2dtLpsxnej86kHf_XOzc4gzAyVQJAonaHMa6T6JXZVVlypJAQOEB1fpwhlRk8r1PSUgoZRIDW7f-smo9vT2hpgbTH0-B3xa1FH8BMppt5mSYOQEdHvqd504wHbEjADtukn-p3SwYTtBeZ3S0WZgBYvhL0s_6fcCW3E4v6rd9oiT9J34A6qDrFZwobw64lGvA7i2YC5AAX2ry45yJhMAtkJdfRLzNmeHc6AzY3U8-3HX2VRITifiaenWItYlt6tpVpciFFJQeenS_bNxPDHCsi9ujYcb7W4qWm47xmj5LZ0-nxlDvTk-dX36l8zzCIDmtmCaUXMnywOjk7b-dfaEe8Y9CAkQlislmPxkWRCR7f2pxQOhL-xvWHBvIjlsBiABmPxkWRCR7fyFF2BECF7hLmERB8F-MixY5fmo3ywQY79383RgyfMRwRoFz3tbaHFScNOsqdDPf3B2GPgvKKtCp8R3-Lf5i2NypfGdSqTDcr7Z5MAaYNWvz5DGbd_IM9PQCozyvMhv4-JfE6wGTHpfnUYhV1QiHNxae2-kMvWtZh0Wd13BnDu47S_sQnzFC-Jp7Jl4Hi3-y6jbZeKmnzd5LDcWyqPzyF1j0QXCBs73sXqwWcH55acyZGeGhSsbl8GGPUzxeCLpsmc0eliZCcGSK1QlvVKC08ytv0-cfxRgHaSCijZY_SNQadM5ECUeELJfkQmjZE96sjp8DPbGbSNtJN0JJKTQdChujiGYQ-VGfM1BKQ8__OyXIgafZ9sDvHt0Fy9LbfW_6duFoOnPfBtp4nikxEDznWgUW0YeVoTdAMXo_8JgIlG3qZZJCxAdeOqU&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPe3HqOQ2HCjBnUGe1faqM8HaaKXom34XdwXHK2yytxVgXidl5idWNRbBI0pp1DeWO6OthoF4Ljgw&si=1&oref=320d8a9e16d091be3daf87219fe5dd96&optunit=RZ3XcGcO7jutK6Mz5FaVqw&rb=6HrvxnDas3s&rr=4&abtg=0
52.116.53.155200 OK 0 B URL HTTP/2 p185689.mybettermb.com/adServe/domainClick?ai=eHdHhnjefhzGDsa2d8YjgWmQiT-1fLZROuTZFBjirzTybCxZe0Igm2y1CzvnPMmWEV0VpJMZWeky-0abnAxmU4Xi9ydSyjfMw96ss0F1rXyz7LFRtDCzoPkjQsIxQLx4ehq9_TnVDg7d2dtLpsxnej86kHf_XOzc4gzAyVQJAonaHMa6T6JXZVVlypJAQOEB1fpwhlRk8r1PSUgoZRIDW7f-smo9vT2hpgbTH0-B3xa1FH8BMppt5mSYOQEdHvqd504wHbEjADtukn-p3SwYTtBeZ3S0WZgBYvhL0s_6fcCW3E4v6rd9oiT9J34A6qDrFZwobw64lGvA7i2YC5AAX2ry45yJhMAtkJdfRLzNmeHc6AzY3U8-3HX2VRITifiaenWItYlt6tpVpciFFJQeenS_bNxPDHCsi9ujYcb7W4qWm47xmj5LZ0-nxlDvTk-dX36l8zzCIDmtmCaUXMnywOjk7b-dfaEe8Y9CAkQlislmPxkWRCR7f2pxQOhL-xvWHBvIjlsBiABmPxkWRCR7fyFF2BECF7hLmERB8F-MixY5fmo3ywQY79383RgyfMRwRoFz3tbaHFScNOsqdDPf3B2GPgvKKtCp8R3-Lf5i2NypfGdSqTDcr7Z5MAaYNWvz5DGbd_IM9PQCozyvMhv4-JfE6wGTHpfnUYhV1QiHNxae2-kMvWtZh0Wd13BnDu47S_sQnzFC-Jp7Jl4Hi3-y6jbZeKmnzd5LDcWyqPzyF1j0QXCBs73sXqwWcH55acyZGeGhSsbl8GGPUzxeCLpsmc0eliZCcGSK1QlvVKC08ytv0-cfxRgHaSCijZY_SNQadM5ECUeELJfkQmjZE96sjp8DPbGbSNtJN0JJKTQdChujiGYQ-VGfM1BKQ8__OyXIgafZ9sDvHt0Fy9LbfW_6duFoOnPfBtp4nikxEDznWgUW0YeVoTdAMXo_8JgIlG3qZZJCxAdeOqU&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPe3HqOQ2HCjBnUGe1faqM8HaaKXom34XdwXHK2yytxVgXidl5idWNRbBI0pp1DeWO6OthoF4Ljgw&si=1&oref=320d8a9e16d091be3daf87219fe5dd96&optunit=RZ3XcGcO7jutK6Mz5FaVqw&rb=6HrvxnDas3s&rr=4&abtg=0
IP 52.116.53.155:0
GET /adServe/domainClick?ai=eHdHhnjefhzGDsa2d8YjgWmQiT-1fLZROuTZFBjirzTybCxZe0Igm2y1CzvnPMmWEV0VpJMZWeky-0abnAxmU4Xi9ydSyjfMw96ss0F1rXyz7LFRtDCzoPkjQsIxQLx4ehq9_TnVDg7d2dtLpsxnej86kHf_XOzc4gzAyVQJAonaHMa6T6JXZVVlypJAQOEB1fpwhlRk8r1PSUgoZRIDW7f-smo9vT2hpgbTH0-B3xa1FH8BMppt5mSYOQEdHvqd504wHbEjADtukn-p3SwYTtBeZ3S0WZgBYvhL0s_6fcCW3E4v6rd9oiT9J34A6qDrFZwobw64lGvA7i2YC5AAX2ry45yJhMAtkJdfRLzNmeHc6AzY3U8-3HX2VRITifiaenWItYlt6tpVpciFFJQeenS_bNxPDHCsi9ujYcb7W4qWm47xmj5LZ0-nxlDvTk-dX36l8zzCIDmtmCaUXMnywOjk7b-dfaEe8Y9CAkQlislmPxkWRCR7f2pxQOhL-xvWHBvIjlsBiABmPxkWRCR7fyFF2BECF7hLmERB8F-MixY5fmo3ywQY79383RgyfMRwRoFz3tbaHFScNOsqdDPf3B2GPgvKKtCp8R3-Lf5i2NypfGdSqTDcr7Z5MAaYNWvz5DGbd_IM9PQCozyvMhv4-JfE6wGTHpfnUYhV1QiHNxae2-kMvWtZh0Wd13BnDu47S_sQnzFC-Jp7Jl4Hi3-y6jbZeKmnzd5LDcWyqPzyF1j0QXCBs73sXqwWcH55acyZGeGhSsbl8GGPUzxeCLpsmc0eliZCcGSK1QlvVKC08ytv0-cfxRgHaSCijZY_SNQadM5ECUeELJfkQmjZE96sjp8DPbGbSNtJN0JJKTQdChujiGYQ-VGfM1BKQ8__OyXIgafZ9sDvHt0Fy9LbfW_6duFoOnPfBtp4nikxEDznWgUW0YeVoTdAMXo_8JgIlG3qZZJCxAdeOqU&ui=HFz5zNIIs96fzq49jFkHXcQzYObQGwwU7xf6tdOZukPe3HqOQ2HCjBnUGe1faqM8HaaKXom34XdwXHK2yytxVgXidl5idWNRbBI0pp1DeWO6OthoF4Ljgw&si=1&oref=320d8a9e16d091be3daf87219fe5dd96&optunit=RZ3XcGcO7jutK6Mz5FaVqw&rb=6HrvxnDas3s&rr=4&abtg=0 HTTP/1.1
Host: p185689.mybettermb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://catatanmathin.blogspot.com/
Connection: keep-alive
Cookie: rhid=82839614296
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Tue, 07 Feb 2023 10:35:55 GMT
content-type: text/html;charset=ISO-8859-1
vary: Accept-Encoding
set-cookie: rhid=82839614296; Max-Age=15552000; Expires=Sun, 06-Aug-2023 10:35:55 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
loi=ad_1079064_off_527380_aff_11454_cid_185689-KLIKSAYA.COM_ts_1675766155; Max-Age=3600; Expires=Tue, 07-Feb-2023 11:35:55 GMT; Domain=mybettermb.com; Path=/; SameSite=None; secure;
content-encoding: gzip
X-Firefox-Spdy: h2