Report - marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html

Report Overview

Submitted URL
marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html
IP
172.217.21.161
ASN
#15169 GOOGLE
Submitted
2022-11-30 15:57:39
Access
Website Title
Final URL
Tags
None
urlquery detections
No alerts detected

Detections

urlquery
0
Network Intrusion Detection
0
Threat Detection Systems
4

Domain Summary

Domain / FQDN	Rank	First Seen	Last Seen	Sent	Received	IP
pagead2.googlesyndication.com	101	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	408 B	848 B	142.250.74.2
tzkrh.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	422 B	48 kB	172.67.144.218
content-signature-2.cdn.mozilla.net	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413 B	5.8 kB	34.160.144.191
marshallkruwgamble.blogspot.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	918 B	42 kB	172.217.21.161
www.blogger.com	8975	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.3 kB	66 kB	216.58.207.233
iklan.diraya.my.id	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	379 B	22 kB	104.21.24.51
slideplayer.info	326205	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	450 B	65 kB	136.243.147.41
e1.o.lencr.org	6159	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.0 kB	4.4 kB	23.33.119.27
cdn.sb4you1.com	22321	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.2 kB	46 kB	104.21.51.177
fonts.googleapis.com	8877	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	377 B	12 kB	142.250.74.138
img-getpocket.cdn.mozilla.net	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2.7 kB	47 kB	34.120.237.76
www.google.com	7	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	432 B	1.3 kB	216.58.211.4
clenchedyouthmatching.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	391 B	157 B	142.0.197.108
exportspring.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	5.9 kB	8.1 kB	173.233.137.44
contile.services.mozilla.com	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333 B	229 B	34.117.237.239
push.services.mozilla.com	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606 B	127 B	54.148.77.40
fonts.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.5 kB	45 kB	216.58.207.227
r3.o.lencr.org	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	4.4 kB	12 kB	95.101.11.115
i.pinimg.com	689	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	435 B	77 kB	151.101.84.84
firefox.settings.services.mozilla.com	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782 B	2.4 kB	34.102.187.140
s4.histats.com	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	718 B	238 B	149.56.240.130
s10.histats.com	15211	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	377 B	4.7 kB	46.105.201.240
play.google.com	34	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.6 kB	2.8 kB	216.58.211.14
cdn.barscreative1.com	25648	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	477 B	9.3 kB	45.133.44.4
lh3.googleusercontent.com	66	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	567 B	18 kB	142.250.74.129
ocsp.pki.goog	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	6.2 kB	13 kB	142.250.74.131
imgv2-1-f.scribdassets.com	42675	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	912 B	154 kB	151.101.66.152
www.gstatic.com	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	441 B	164 kB	142.250.74.99
ocsp.digicert.com	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1.7 kB	3.6 kB	93.184.220.29
apis.google.com	105	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	381 B	22 kB	216.58.207.238
litemarca2223.github.io	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	421 B	18 kB	185.199.111.153

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-11-30	medium	clenchedyouthmatching.com/advertisers.js	Phishing
2022-11-30	medium	cdn.barscreative1.com/sb/interstitial/software/flashPlayer/mac/multi/1/index.html	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

JavaScript (77)

	URL	Size	First Seen	Last Seen
	apis.google.com/js/platform.js	55 kB	2023-03-08	2023-03-17
Pretty URL apis.google.com/js/platform.js IP 216.58.207.238 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:23 Last Seen2023-03-17 23:35:13 Times Seen1 Hash 82b37d5e95d1e985a554cf000e9bb15c 8973b2e12ea8de1b8a14c8b7ea3be6c1c25eae07 4c6520efed0ab3222ea84da3fb4d6cdc929353fdfa0ac12422253be3ffcf525a Loading...

	iklan.diraya.my.id/socbar.js	34 kB	2023-03-07	2023-12-26
Pretty URL iklan.diraya.my.id/socbar.js IP 104.21.24.51 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:34 Times Seen9 Hash f0d49464edc9d86dc458e37352cc3251 da5b45b5f091c99fb2e6cdc2e6f1e6d3bf2079ac 16e6140f8daedbf27044665dc14f33ced0544055194cef66d3592ab2384620c4 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	126 B	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 93af84e6af6b63d8bddc05b9354eb3d1 2517702ea8513f74aa6e8ab9437bb08b4e399df2 7bb5eb85bf1a0664625e590841cdda7a274f57682f692381aa1f3e709659cfac Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	94 B	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash f964a1aacb81e15414413d8b6294d101 da42143ce5e3e0add39e416f82f79ee9430b885d bfe8c2bdd5fd2d8dbe7cffa55acbb44defcb2effb54d5b9a9121889ec4c0149b Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	427 B	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen4 Hash c17f93e7bb4db30e7ecec7436a48655c df36243f0dc2854a678d26594f69ebc82dd01354 c45766f28d4bae27e9268f9f411dd49995408f7148bcd770efc077655ac7fe5b Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	170 B	2023-03-08	2023-03-11
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash cedcf976d509c1da8123e2238918f79b c3ce42faba1cf92980324b0af56479c317f3a046 08e12ecfe1828eeb956fc398ee2fa92fd579703074782919f3210fba729bc088 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	63 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 09:46:29 Times Seen30528 Hash 3ca9fc059879b598f3d6d3003cf130b3 d641a68a8bccf23c0fe85576609870d5f36cdd9d 3d2b5964246a6a054c9fb0a3a79e72b47de369280fd18b7e5e0bb42a441bb38b Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	486 B	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash a0e06f68b43cda27ad75100104e19ec2 9da761b45abcd83d5b57e18d721b3235bb8158c2 d2928478be65c4e40ef144aa64e8f915396b669f047f6cd68b6e87bc436b5df1 Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Nak?alt=json-in-script&callback=bacaJuga&max-results=5	5.0 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Nak?alt=json-in-script&callback=bacaJuga&max-results=5 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 58211d25bc44831109ba468f7cb4adeb 99971cb4b14f692ced741b86f5b0821582925182 b0e44f3b2e0886f6465e61aae3bcb639564c86d6a16e53e584fb46a2b8edfb48 Loading...

	pagead2.googlesyndication.com/pagead/js/google_top_exp.js	47 B	2023-03-07	2024-04-18
Pretty URL pagead2.googlesyndication.com/pagead/js/google_top_exp.js IP 142.250.74.2 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:56 Last Seen2024-04-18 08:48:01 Times Seen47681 Hash 7f5f2be159837d73b72a4b37616bce44 c93d7f25b530b05c26440d3352213b683d03dcc3 ccecd185ac16ba0a538840f37701053fbb861f7fbbdd86039c7415fcd924d1f2 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=_b,_r,_tp/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=n73qwf,ws9Tlc,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,WO9ee,WzT7ae,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,S2r0ad,XVMNvd,L1AAkb,KUM7Z,Mlhmy,hc6Ubd,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,ZfAoz,mdR7q,Z5uLle,I6YDgd,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,MdUzUe,BVgquf,ovKuLd,hKSk3e,yDVVkb,zbML3c,zr1jrb,KG2eXe,Uas9Hd,VwDzFe,ZDqTJc,eD1YLc,A7fCU,pjICDe	286 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=_b,_r,_tp/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=n73qwf,ws9Tlc,GkRiKb,e5qFLc,IZT63,vfuNJf,UUJqVe,O1Gjze,byfTOb,lsjVmc,xUdipf,OTA3Ae,COQbmf,fKUV3e,aurFic,U0aPgd,ZwDk9d,V3dDOb,mI3LFb,WO9ee,WzT7ae,gZjhIf,O6y8ed,PrPYRd,MpJwZc,LEikZe,NwH0H,OmgaI,lazG7b,S2r0ad,XVMNvd,L1AAkb,KUM7Z,Mlhmy,hc6Ubd,lwddkf,gychg,w9hDv,EEDORb,RMhBfe,SdcwHb,aW3pY,SpsfSb,EFQ78c,Ulmmrd,ZfAoz,mdR7q,Z5uLle,I6YDgd,xQtZb,JNoxi,kWgXee,MI6k7c,kjKdXe,MdUzUe,BVgquf,ovKuLd,hKSk3e,yDVVkb,zbML3c,zr1jrb,KG2eXe,Uas9Hd,VwDzFe,ZDqTJc,eD1YLc,A7fCU,pjICDe IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash 031fb229c662d99040d655eb6f3d13c1 bc834f681e18f4b80d05d97ad331c5fc73be727e 13f94df14595fc405509e1a0b5af7d54467e0545dbc62c89a2726d9887259d9a Loading...

	www.blogger.com/navbar.g?targetBlogID=7924696308711122894&blogName=MarshallkruwGamble&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://marshallkruwgamble.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://marshallkruwgamble.blogspot.com/&targetPostID=776024142220358198&blogPostOrPageUrl=https://marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html&vt=-8150274529277234996&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fmarshallkruwgamble.blogspot.com&pfname=&rpctoken=14863935	184 B	2023-03-07	2023-04-05
Pretty URL www.blogger.com/navbar.g?targetBlogID=7924696308711122894&blogName=MarshallkruwGamble&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://marshallkruwgamble.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://marshallkruwgamble.blogspot.com/&targetPostID=776024142220358198&blogPostOrPageUrl=https://marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html&vt=-8150274529277234996&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fmarshallkruwgamble.blogspot.com&pfname=&rpctoken=14863935 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:56 Last Seen2023-04-05 02:12:11 Times Seen6539 Hash 55222ba6bc3c6d1b4e917bf57803f724 41907640a176f6c9e549bfd1e1bacaa29a302475 3cb3e98d555f2381f9ef9439a915bd523225a0fd1cb4303f2c676da5494e1428 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=i6Ko2d,fgj8Rb,XvDhNc,fgib1c	30 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=i6Ko2d,fgj8Rb,XvDhNc,fgib1c IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:48:34 Times Seen1 Hash 05ad1ca2be05e36150e4ff29ce2e1a13 921ef96a2f95e47fe26efd54adf153486e0f9fdd 5283e0f3705d719a06a6f547065dad25d8cb68b078638c9e3e712bcacd887cb7 Loading...

	http:blank	10 kB	2023-03-08	2023-03-11
Pretty URL http:blank IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 16:17:41 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 4f2fb0bacc4ed691ba2003ac17427e3c b5a32b8b678e38b2dfb0d51ec32600341149f3bc b2602718e11e88c184aae3ed361f4b69097f685fe65a1ffc29f937c6db2ca9e0 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/am=MxwAQQ/d=1/excm=_b,_r,_tp,commentformiframeview/ed=1/dg=0/wt=2/rs=AEy-KP3eD9IevHleYJcjPCVKypD2Q4ZUeg/m=_b,_tp,_r	180 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/am=MxwAQQ/d=1/excm=_b,_r,_tp,commentformiframeview/ed=1/dg=0/wt=2/rs=AEy-KP3eD9IevHleYJcjPCVKypD2Q4ZUeg/m=_b,_tp,_r IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash 28b9a29d1382fcbd3d900eb7ab297c00 a33c4f4919bb2dc0fc1ab4931943b38fdd22723c 7329510ccbdf971944bc085a2722835f3d6833045b29b0e9691dc672030d8646 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	864 B	2023-03-07	2023-11-22
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2023-11-22 14:56:24 Times Seen4689 Hash 7454e38fa6cde44ee932663aecc94c26 0f461cebf19b9bd4c738eff4aac7214c6d1eefc0 ccb6deb78c9a464300938c9cd2581ddb610ad8d4a1756f0d80361c04c014d9da Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	865 B	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 7fe8a8e4eb2d2dd0e4e40e5e080530bf b2ddc3d01b84d829fc86c072a226f9d22f85f201 9b762e622984870356e8e0c00497cbf8ebe58f02ee3ad8da522307fa3665df78 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	14 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash d246dca7d8b61449253686331b559093 ba8769d931481591e35f6236c5864c546917d883 3af16d242c326ce5369d898c722594f6b91e9c7edc32ede87092bd693a9c191d Loading...

	apis.google.com/js/platform:gapi.iframes.style.common.js	55 kB	2023-03-08	2023-03-17
Pretty URL apis.google.com/js/platform:gapi.iframes.style.common.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:34 Last Seen2023-03-17 23:14:57 Times Seen1 Hash 0f33e12fa3290716d243f3162bb63cb0 32f9b00bfd7449ebd5382871d1c083db9c1b2b95 82c53629d9ff53cc334633ac037d1dc1f843008d6e1347ce784b9f255bacb42f Loading...

	www.blogger.com/static/v1/jsbin/4209298352-lbx.js	376 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/static/v1/jsbin/4209298352-lbx.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:23:40 Last Seen2023-03-11 23:52:30 Times Seen1 Hash 94d5e8ead160bcc236b611ac34b148cd 2271ca62330eab3540d73900fc19e87219887932 7de0884a1d7fec8b09380ef158fe9139ffb44806feb2c3ec03a1de74cf4dcf9e Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	168 B	2023-03-07	2024-04-18
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:15:47 Last Seen2024-04-18 09:53:40 Times Seen169 Hash be224d7e09b97c73d5d5baf21a04fc28 b5a979acf127200ea2899c1ad1c80fe19f002be0 0db9eb6805c1583e1a7ade0907531cdba75713994816123c142fb97bab996c23 Loading...

	marshallkruwgamble.blogspot.com/js/cookienotice.js	6.5 kB	2023-03-07	2024-04-18
Pretty URL marshallkruwgamble.blogspot.com/js/cookienotice.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-04-18 09:53:40 Times Seen112685 Hash a705132a2174f88e196ec3610d68faa8 3bad57a48d973a678fec600d45933010f6edc659 068ffe90977f2b5b2dc2ef18572166e85281bd0ecb31c4902464b23db54d2568 Loading...

	litemarca2223.github.io/klandiraya/a5ca9dabbf3c9c63d2fa67c92f46eccd.js	60 kB	2023-03-07	2023-12-26
Pretty URL litemarca2223.github.io/klandiraya/a5ca9dabbf3c9c63d2fa67c92f46eccd.js IP 185.199.111.153 ASN #54113 FASTLY Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:34 Times Seen7 Hash a67fb7bd91a42d7a5751c7b5250ff7d7 67395c0b26d56bc577a1ca9f249797c108cb995d 1a2fbeed9b61287359da6e806f70015b24a8fdf14de3aaad027ca2db12e307fd Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&callback=bacaJuga&max-results=5	5.0 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&callback=bacaJuga&max-results=5 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 76d60c7aad82d3b53e067cbb896cbe60 73f139929a51b0824c9114ff95b38248e3573b13 22ac30dac856b6503e9ef015900db958cb636324928ad3f1afd52de61eb32021 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	992 B	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash b1f81c653593f4f61008a529f67af83c cd14f9afecdad9234a6db89875d328450aa48f49 ce61acfcc986e89c0cf489f555b82e22813742ce2cf37188efdfe317d6176c04 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	269 B	2023-03-07	2024-04-18
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:56 Last Seen2024-04-18 08:48:00 Times Seen27872 Hash 6e880fa46f41c3a142b32e22ca7c06a0 cb7725608bf21d4a5fab1e9050328ab9b024d285 95df5b72788a5634d46797321652a339cd37eeba06d33166541e76a0deb42b61 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	12 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 09:46:29 Times Seen30496 Hash e5b17204cd55d18a8a2a41824d9fec28 40e8060add70f00c034257f9d49a50dd799ba846 3d0c04a7592aa05499634991244c8d7cce5e5f8b7a414ef8b83d6442b6d52612 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	43 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 08:09:55 Times Seen27193 Hash 5482bd576fe18ff505188b5fd74c4f43 a45df5d0e151738f6042507c1ebe4f47a8953ac1 6d265f94d2ec05109a8ec3d16726b901d9ab981ecc5a04ceb59c830d845e7aa0 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	1.9 kB	2023-03-11	2023-03-11
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash b96cb3f60979c90d583a3f0117f4fe2e bd04cc6bad38464fd00444e41c3c12b26d85c4b0 c178e74473e7441e2708d08eb118b2acfa0fb15490872669a6bdde4485d64ed7 Loading...

	www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js	409 kB	2023-03-08	2023-03-17
Pretty URL www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js IP 142.250.74.99 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:03 Last Seen2023-03-17 23:14:58 Times Seen1 Hash b2507198388fcc94ca9e94ed4c5561c5 8853fc86f1c616bd20a73e3e24442036fd90fd2f 02c7565a86d6d3a80295b85161d78fc88d8c79a0e314c0c7777570237a365ed0 Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Km9gKuG06He-isPsP6saG8cn&size=invisible&cb=5us69wr8dtcy	35 kB	2023-03-11	2023-03-11
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Km9gKuG06He-isPsP6saG8cn&size=invisible&cb=5us69wr8dtcy IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash ee7366563942620140212ad3833f1c88 4b7f431628fd7bff8d4fb1c7e2d749b7899d34b9 bd0e2dfdd7a28ad0f63d8b4249fafebdee41ba4c565601cc706bda0453730b69 Loading...

	s4.histats.com/stats/4638569.php?4638569&@f16&@g1&@h1&@i1&@j1669823851071&@k0&@l1&@mCara%20Nak%20Memupuk%20Nilai%20Murni%20Dalam%20Keluarga%20-%20MarshallkruwGamble&@n0&@o1000&@q0&@r0&@s9&@ten-US&@u1280&@b1:-48670802&@b3:1669823851&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmarshallkruwgamble.blogspot.com%2F2022%2F06%2Fcara-nak-memupuk-nilai-murni-dalam.html&@w	105 B	2023-03-11	2023-03-11
Pretty URL s4.histats.com/stats/4638569.php?4638569&@f16&@g1&@h1&@i1&@j1669823851071&@k0&@l1&@mCara%20Nak%20Memupuk%20Nilai%20Murni%20Dalam%20Keluarga%20-%20MarshallkruwGamble&@n0&@o1000&@q0&@r0&@s9&@ten-US&@u1280&@b1:-48670802&@b3:1669823851&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmarshallkruwgamble.blogspot.com%2F2022%2F06%2Fcara-nak-memupuk-nilai-murni-dalam.html&@w IP 149.56.240.130 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 081ff9b110e3024424ec971d47927ad9 7c8f85da7bcf901d3e3cbac3de8e4040bb89f08c 954d842de7dbe7d01d72cecc25c8454d45e5afcb02971396e474805b3680b9ea Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	1.7 kB	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen13 Hash a905d6160891ca18fa77739e89021862 e608195c96c4796143053fe60965773c8f40d79b 45e135c2349d5bd9c88d3967687103267bf5800e25bad8bd0d812213f1aa96ee Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	275 B	2023-03-07	2024-04-18
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-04-18 09:53:40 Times Seen57020 Hash 38ee2f6ddbe8a478e5795030e72ba35d d332319b04b273e3b9a93ffa22ba9036d59b8e99 97d98978d5864e77cd83bd79a0d31ced40631a6134a154e8f049bcc20f49a319 Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Nilai?alt=json-in-script&callback=bacaJuga&max-results=5	5.0 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Nilai?alt=json-in-script&callback=bacaJuga&max-results=5 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash c39b04da2926ef6e42049504f3e35ef1 7b6b668605e6924ae610df689fd21e277e0990a6 c990cad2f63822d9b87291b3309016d3d0531804b58a5ad7a59f65f80f3a982e Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	3.0 kB	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash c2e8fcaada93da74e181cbf2d5273699 542cc94023105ac4a35c60d2e0fb39934b08db31 af27b68fa8c02d0c3b66d1bf8de0c6a40949b7d6e0a62f94608220d4be07aaa3 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	73 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:14:42 Last Seen2024-04-18 08:09:55 Times Seen1471 Hash 5657bd7ba587c384380b42959c806934 dc30b7d23650b4c8ecb7acc080696ee96b2e9cbd 4fffd50f56e34b6d9a2a3cca725730a459d02adf86ed9744beeb8469e24ded85 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	1.3 kB	2023-03-11	2023-03-11
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash b0057af8044d8d97f9ad8242eadada2d cbe1395b5cb2fa06b8dcd030c49d30522191b053 0d75ad6bf11eea90818d51f9345bc940c30037baac37741def189778f72a8c34 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	77 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 08:09:55 Times Seen8897 Hash f2ce051b9726657f82dcb6f75cd51ca9 7f3e6dcc1f61f2f8c1953f002cebf38107673535 1f4ddc2aa5caebd1c325b608d3e8daefa8f9c30911349fd06b2bca6d514d57a9 Loading...

	cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js	84 kB	2023-03-07	2024-03-31
Pretty URL cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js IP 104.21.51.177 ASN #13335 CLOUDFLARENET Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:10:11 Last Seen2024-03-31 06:06:50 Times Seen542 Hash 6326c600df01e3bfb9b40e1aa08176f8 6b4fb754d29b297b539bf62ba9b4eaf0f33f314a df34524351c5fabc921a89183b5da5667aebd7b9e9a1c52255c76ff722935ea3 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	1.7 kB	2023-03-08	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:24:32 Last Seen2024-04-18 08:09:55 Times Seen8991 Hash deaf0cb0a603ae39eb914c99686050ef cebb2876d8540e0f16c6dc1e39ff8bcd5c301b78 630686f5b9dde847c0e7a50d25a91004d1bce21abd1a58c2638998afc900cae9 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=pxq3x	15 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=pxq3x IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:48:34 Times Seen1 Hash 54af316d6a8ae2fc38826d1f328bb4a2 d12329fb07e5764981a90988ea4e08acaa43f718 7e04b7b10c9f963e1403527c57ea608e66773439f6680c625907e3af039e73d8 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	1.5 kB	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash 1b73f801009bf4fddeef3ebf47333174 cd885897ca36e439c147bd7c34cd26217a373973 13d82b915193d0c6ab1408126d5e342378d8806923ec501f811d9e8c3b51b580 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	302 B	2023-03-07	2024-04-18
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:56 Last Seen2024-04-18 08:48:00 Times Seen28553 Hash 5a9442d8fb9a2077b3ebaf7aa6f763fb 1ad7b70635d1b80ddf645acb12b5f17e0ecf0c99 0665437bacd7ab06df7300ed254eac6729ed5e062da4cfb3895416289cfc647a Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	130 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 09:46:29 Times Seen30508 Hash b90579d967def1905d8e58bde1d6baa6 d90906655ce68eb39abb59c16153675683d53d5c f984f4834618294a8c88f19ce3af90459eb4eef60144b2b9cb6a79d12a4621d5 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=A4UTCb,VXdfxd	18 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=A4UTCb,VXdfxd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:48:34 Times Seen1 Hash 2a9101050315376f81a84d0e77bf797d d5ac7575f9324e82290e29e32551c01b4bc8aa9a 0b76273164fbf2ae5ce2c3c513ec96b3838e5b07e06669625c7cc7bdbad40256 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	670 B	2023-03-11	2023-03-11
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:04 Last Seen2023-03-11 23:06:04 Times Seen1 Hash 6b9be1ef27cd9965142f4dea538792ea 4418c52e3fe16d276992ad84a7492532ea64a1da 5c9664d19902c08461b3d2aef4f4b886245e05440ecb907e82c536fb38591293 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	86 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 08:09:55 Times Seen8966 Hash ca62aeda78389ab3211271656e8eab92 1a72a954e7d5d653f4ebce44c81418cc5372facb 32a3478caba9994a9080b708949a982e77ed573b0ec204237ffdcd3dd4f7e927 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	542 B	2023-03-08	2023-03-26
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:24:32 Last Seen2023-03-26 00:12:48 Times Seen227 Hash a94a19f795b1d4f6d1f70b667a2eae06 ba89d38db6bd30469fa42fe6d149536f6e74ed25 b8665f012aa5a1a22d5653b75ec290c442070ee6a21751507defd97819e73f23 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	9.3 kB	2023-03-08	2023-12-28
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:40:13 Last Seen2023-12-28 13:53:53 Times Seen97 Hash 20ba3fe0dfecfc38270121edf9c13c33 4d2f000bae4ea626b1c7a48797935df19739a78e 7c8de7e50826afbea60887ae4b31e8928cb98e901c31c6964e66f6c1c187a70d Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	84 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 09:46:32 Times Seen30570 Hash 50371200cd5f1f923ab39ef2ef84f798 5a3bbc0639a7a75c53fc1ce7a8c7a0433f6b3285 6f32e65215e120986a7ab3e61b08961abcf448f7d1986d12f94dbab7ac2ccadc Loading...

	s10.histats.com/js15_as.js	11 kB	2023-03-07	2024-03-25
Pretty URL s10.histats.com/js15_as.js IP 46.105.201.240 ASN #16276 OVH SAS Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:06 Last Seen2024-03-25 09:24:29 Times Seen1978 Hash e959fbdd13def4b9a9d0a5fc9a7de4d4 1e39712307e3673b40c0bdb8c7d3e86a3e8b60a0 2defe59e357a7d0683c8283ac42841db404a0884cae2eaecebf4b676e559dede Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&orderby=updated&max-results=0&callback=indexAcak	2.9 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&orderby=updated&max-results=0&callback=indexAcak IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 75ab325267018c0f339a4083f422f7a7 587abcfdedd1fc7fd22649545c8fdb6baf0240db 4f714006d5e30f4ce6761c185bd78d51d2275da966f2dd5f0f65512d32537a9c Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	105 B	2023-03-07	2024-04-18
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:11:32 Last Seen2024-04-18 09:46:32 Times Seen30468 Hash b47393a011801ae3c2e20bffd05ff81e 3e12884bf79d0b71a980f852b7577324b505dce4 bd5de7d4323c02ad258b93b291b368aa5a2dfb49f8ff1add3deca73fe6ad76a3 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=RqjULd	12 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=RqjULd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash dbadd080356858b063d7ecc71059c158 034147917536014a196672c686f990a4f768d1d1 dfeddc8a22967ecdc98498d4c365b543ab3a4618b1edece3d4dba7a970c01643 Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=YwHGTd	11 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=YwHGTd IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:48:34 Times Seen1 Hash 827ae46104a6c83e5fff74deffcd1d16 2e29c92a38105716f6c8fa230b032bf739f1fe66 9abf5a742cac855faca4246491abab772241c3ac6f5ad2a2353f152f48ac0908 Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&orderby=updated&start-index=1&max-results=5&callback=printRelated	5.0 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Dalam?alt=json-in-script&orderby=updated&start-index=1&max-results=5&callback=printRelated IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 875d503c738f97d53bced136fefe7364 25892b5c1d17d6b011ede55889b235ca78a1f484 76f839efe72c5dc8c3ba136ecb734dbdc3511a90b43473f02ba52cb788afb50f Loading...

	marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Cara?alt=json-in-script&callback=bacaJuga&max-results=5	7.0 kB	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/feeds/posts/summary/-/Cara?alt=json-in-script&callback=bacaJuga&max-results=5 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 86ee2ef7ad7d893674a8f3b225d7716d 8ede64ab3947d38d70e2e591371d1e184ce55e41 930e31dc6c153afb6978dbfd5333b74e48ba765ec69b7ae01ca4c19a1aed81d7 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	12 kB	2023-03-07	2023-12-26
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:30:47 Last Seen2023-12-26 10:47:33 Times Seen7 Hash 14aaf4bcd0c733d4b2e51d9553d3e5cf e0012f96b0955aa48bc331a84e8cafb0d9c6f8fc 7eabf5995785989771e7aac8df53e08194b8e2d46d547ef184cd3c3468121412 Loading...

	www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726	8.6 kB	2023-03-08	2023-03-17
Pretty URL www.blogger.com/comment/frame/7924696308711122894?po=776024142220358198&hl=en&skin=contempo&blogspotRpcToken=3445726 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:31:12 Last Seen2023-03-17 22:17:08 Times Seen1 Hash ac086aab35e2974968fee4d32f6969ae 3604c2f821872fa6fdf0b1e9a39a100ddf60adba a19e6fe3f834df34c188e213a7627891869d0c27b806b7356f9775460ca270de Loading...

	www.blogger.com/navbar.g?targetBlogID=7924696308711122894&blogName=MarshallkruwGamble&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://marshallkruwgamble.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://marshallkruwgamble.blogspot.com/&targetPostID=776024142220358198&blogPostOrPageUrl=https://marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html&vt=-8150274529277234996&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fmarshallkruwgamble.blogspot.com&pfname=&rpctoken=14863935	471 B	2023-03-07	2023-04-05
Pretty URL www.blogger.com/navbar.g?targetBlogID=7924696308711122894&blogName=MarshallkruwGamble&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://marshallkruwgamble.blogspot.com/search&blogLocale=en&v=2&homepageUrl=https://marshallkruwgamble.blogspot.com/&targetPostID=776024142220358198&blogPostOrPageUrl=https://marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html&vt=-8150274529277234996&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__#id=navbar-iframe&_gfid=navbar-iframe&parent=https%3A%2F%2Fmarshallkruwgamble.blogspot.com&pfname=&rpctoken=14863935 IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:56 Last Seen2023-04-05 02:12:11 Times Seen6549 Hash 817a2f878be59f132a6d67ba3dc44c12 74fa163d8e9121fc4be1b4b05974f7f08ac90267 7f417083e329ac4c097585dbe92c0de4527419243615b5a0c4245704cd09ccfc Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,YwHGTd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=Wt6vjf,hhhU8,FCpbqb,WhJNk	6.0 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A4UTCb,A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,RqjULd,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VXdfxd,VwDzFe,WO9ee,WzT7ae,XVMNvd,XvDhNc,YwHGTd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,bm51tf,byfTOb,e5qFLc,eD1YLc,fKUV3e,fgib1c,fgj8Rb,gZjhIf,gychg,hKSk3e,hc6Ubd,i6Ko2d,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,pxq3x,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=Wt6vjf,hhhU8,FCpbqb,WhJNk IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash ff823cda37fdd84b022e6641c922f9d6 78760aeb25cdf350b7636453cb4791791603b3e6 76019595ee54285b1452177e1aabedf915d4b21788e6b154d2b55a2f9e504772 Loading...

	s10.histats.com/counters/cc_9.js	19 kB	2023-03-07	2023-04-20
Pretty URL s10.histats.com/counters/cc_9.js IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:16:33 Last Seen2023-04-20 22:01:22 Times Seen15 Hash f99aed525fa155ba8738812a7bef7a9b 17e2bcc0cc9b7f4401ba2b9d2eb4c3a270031080 d242f0fedca4b7742c498147fb648d8473d2862c2f8f05609ef2ce0c3b863738 Loading...

	unknown	0 B	2023-03-07	2024-04-18
Pretty Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:01:59 Last Seen2024-04-18 09:54:08 Times Seen36934380 Hash d41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	390 B	2023-03-11	2023-03-11
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash d13c48e19ade179cd5decc0b5676bde7 dabd5371f167545f26466a5d92f278ce9955df81 1a0bc5445c08af39cba70a524c23144781044db51d1c543872a33558d7a8d87e Loading...

	apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs	176 kB	2023-03-08	2023-03-17
Pretty URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:34 Last Seen2023-03-17 23:14:57 Times Seen1 Hash 56e3c588ced8ba4b5f2fc17026a9d57e 85f89594b97d49984b826d511fb82271bfddb85b b1370ea109344f61415c6a6414837fd2089a02bcd1d6bc88fad765fe7640541a Loading...

	apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs	129 kB	2023-03-08	2023-11-05
Pretty URL apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:22:34 Last Seen2023-11-05 00:33:19 Times Seen5 Hash ebaa2506c5b4b13ecfc737a1e3b7eb3d e75a7603d9e5016c0c774ab99d5c0b9b756e1a03 9e6d60f06b6332ed1831d9d501e602656f3c884480c6d7034542866281ea3086 Loading...

	www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Km9gKuG06He-isPsP6saG8cn&size=invisible&cb=5us69wr8dtcy	69 B	2023-03-07	2024-04-18
Pretty URL www.google.com/recaptcha/api2/anchor?ar=1&k=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu&co=aHR0cHM6Ly93d3cuYmxvZ2dlci5jb206NDQz&hl=en&v=Km9gKuG06He-isPsP6saG8cn&size=invisible&cb=5us69wr8dtcy IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:05 Last Seen2024-04-18 09:50:34 Times Seen98959 Hash 45ecf7458f42da80ac248ad42d610372 a5b3edf8328769bc754e6e616a957ceed4fdadd7 75867e75b209895995014b43c3d711476e3437481e5fbec91a4da674302558bf Loading...

	www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js	17 kB	2023-03-08	2023-03-26
Pretty URL www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js IP 216.58.207.233 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 05:26:24 Last Seen2023-03-26 03:01:41 Times Seen2 Hash f18def4ccec463cf908f91e7cba7f2c1 02d95f67edd84a44c82255ca7abcdbf7f4d0cee5 12b91cbf31131a10b1fc2aa05047c027caeac0d6e0ca5deadf418fff63d68082 Loading...

	marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html	789 B	2023-03-07	2024-02-13
Pretty URL marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html IP 172.217.21.161 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-07 01:02:24 Last Seen2024-02-13 16:43:35 Times Seen49861 Hash 0699fb3015610319b1639f47466451f0 5f4d8a4022f3a687921d7b3dce01cfc5bd62248f 2443e5c9c4ba5a75e030860f998bcf800907b0d4b3c4017999c2ed7ac84eeefa Loading...

	www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=bm51tf	1.3 kB	2023-03-08	2023-03-11
Pretty URL www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en.1t2aAGU53UU.es5.O/ck=boq-blogger.BloggerCommentUi.4b_cGPwM1uI.L.F4.O/am=MxwAQQ/d=1/exm=A7fCU,BVgquf,COQbmf,EEDORb,EFQ78c,GkRiKb,I6YDgd,IZT63,JNoxi,KG2eXe,KUM7Z,L1AAkb,LEikZe,MI6k7c,MdUzUe,Mlhmy,MpJwZc,NwH0H,O1Gjze,O6y8ed,OTA3Ae,OmgaI,PrPYRd,RMhBfe,S2r0ad,SdcwHb,SpsfSb,U0aPgd,UUJqVe,Uas9Hd,Ulmmrd,V3dDOb,VwDzFe,WO9ee,WzT7ae,XVMNvd,Z5uLle,ZDqTJc,ZfAoz,ZwDk9d,_b,_r,_tp,aW3pY,aurFic,byfTOb,e5qFLc,eD1YLc,fKUV3e,gZjhIf,gychg,hKSk3e,hc6Ubd,kWgXee,kjKdXe,lazG7b,lsjVmc,lwddkf,mI3LFb,mdR7q,n73qwf,ovKuLd,pjICDe,vfuNJf,w9hDv,ws9Tlc,xQtZb,xUdipf,yDVVkb,zbML3c,zr1jrb/excm=_b,_r,_tp,commentformiframeview/ed=1/wt=2/rs=AEy-KP0qymspKtIAXNHIf3QRW541s26o4Q/ee=cEt90b:ws9Tlc;QGR0gd:Mlhmy;uY49fb:COQbmf;yxTchf:KUM7Z;qddgKe:xQtZb;iFQyKf:vfuNJf;dIoSBb:SpsfSb;EmZ2Bf:zr1jrb;zxnPse:GkRiKb;NSEoX:lazG7b;nAFL3:NTMZac;oGtAuc:sOXFj;eBAeSb:zbML3c;Pjplud:EEDORb;io8t5d:yDVVkb;j7137d:KG2eXe;Oj465e:KG2eXe;ul9GGd:VDovNc;sP4Vbe:VwDzFe;kMFpHd:OTA3Ae;NPKaK:SdcwHb;pXdRYb:MdUzUe;SNUn3:ZwDk9d;LBgRLc:SdcwHb;wR5FRb:O1Gjze/m=bm51tf IP 0.0.0.0 ASN #0 Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:25:03 Last Seen2023-03-11 23:51:11 Times Seen1 Hash 51f67ce80cf46499fb6e5a5b75cd9876 748b286e42eee50f3555ce19d91b2f9514435c2e 9f95f2016f96e474caa65b7dde1cf29ff66e4781e6ecf9a6579a4658503a149f Loading...

	www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu	1.0 kB	2023-03-08	2023-03-17
Pretty URL www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu IP 216.58.211.4 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2023-03-08 14:24:32 Last Seen2023-03-17 22:17:08 Times Seen1 Hash 7e4f46060031b79611e6f45b53f2f125 4592e75395bdd73b846e729291993eabc293189b 8bd3bdce13c525170f9d40000e25a24f24db32564204da62ac4ef3a7e0cc0220 Loading...

		Size	First Seen	Last Seen
	#1 Eval - fba1b70efc8b76a94dba85c8cedda52c	16 kB	2023-03-08	2023-11-27
Pretty Observations First Seen2023-03-08 15:11:02 Last Seen2023-11-27 18:41:34 Times Seen6 Hash fba1b70efc8b76a94dba85c8cedda52c 9be3e7cd439d0f20baa4f353e8c44a472195e796 d4be0587aacd19697ae508209e99aa30536e2b75393db507b1cd329131d8e19c Loading...

	#2 Eval - dd094b41102e445694a12d22f18a0a42	22 B	2023-03-08	2023-11-27
Pretty Observations First Seen2023-03-08 15:11:02 Last Seen2023-11-27 18:41:34 Times Seen7 Hash dd094b41102e445694a12d22f18a0a42 60b620c007b5f0a0b23d1fe2f5000f6b8ee33e38 662748d1507b16ab56d1bceff58b8302eb43f21ce0de70b24b21b8ef39aeff35 Loading...

	#3 Eval - 43aac3fc116b956cae4aeb20cfdc98d2	22 kB	2023-03-11	2023-03-11
Pretty Observations First Seen2023-03-11 23:06:05 Last Seen2023-03-11 23:06:05 Times Seen1 Hash 43aac3fc116b956cae4aeb20cfdc98d2 f002f36e3c1b5c213c155a4e2c8a35fff7f3f08d 32af30e1d04f56a4eddb8e9ad76753dfec28a60ee6cdefacce357aebc75d7c31 Loading...

	#4 Eval - c2239b252cbc75a06b64813caea5b634	22 B	2023-03-08	2023-11-27
Pretty Observations First Seen2023-03-08 15:11:02 Last Seen2023-11-27 18:41:34 Times Seen7 Hash c2239b252cbc75a06b64813caea5b634 864e590dcd20c840b49589a5f0d5a92af3226abf 355b9b382781cde432ccca7627a8fdecad5040be2910428d5fc5b4b57fed949b Loading...

	#5 Eval - 46183603a054f61e78d236cd32155e01	64 B	2023-03-08	2023-11-27
Pretty Observations First Seen2023-03-08 15:11:02 Last Seen2023-11-27 18:41:34 Times Seen7 Hash 46183603a054f61e78d236cd32155e01 dd12f5d1b52edb18fcda3543fb3e986d462fc19a 9908576f4e1cce70106175d94488f9071022d3485f8a8ccf0655b399b318a7c4 Loading...

HTTP Transactions (91)

URL IP Response Size

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
a5daf4dc99951793ae2315d4795e8146
4427507ca4d3a5632cc8f598afbc85e2195d00bd
94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8829
Expires: Wed, 30 Nov 2022 18:24:37 GMT
Date: Wed, 30 Nov 2022 15:57:28 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
f3cf023c797da81728c0ac84c8759331
fa07c5e39e4b0741ea484101cccb2202acea9d9c
5206a0bac8bf78d6b84322519271a1ece2c1039a0090e583de6d6192d88873d0

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2147
Cache-Control: max-age=155378
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:28 GMT
Etag: "638730f7-1d7"
Expires: Fri, 02 Dec 2022 11:07:06 GMT
Last-Modified: Wed, 30 Nov 2022 10:31:19 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9fce5679881bf302a8978a0b462f01a9
b699fe030ea13ac73813e655c42ed9b531925e2b
a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3954
Expires: Wed, 30 Nov 2022 17:03:22 GMT
Date: Wed, 30 Nov 2022 15:57:28 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Size
939 B (939 bytes)
Hash
14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 30 Nov 2022 15:18:03 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 2365
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain

34.160.144.191

200 OK

5.3 kB

URL HTTP/2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
34.160.144.191:0
ASN
#15169 GOOGLE

File type
PEM certificate\012- , ASCII text
Size
5.3 kB (5348 bytes)
Hash
9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5

HTTP Headers

GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
x-amz-id-2: StVxMYkbR7PqwBiT6Ef7L56CGpV8SMxRGq1LtIYyBz2O0X9r1AcECx3W2U7CdCE1s2iGgFdzS+4=
x-amz-request-id: 8BYJ5HSTFHQ685F6
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 30 Nov 2022 15:45:55 GMT
age: 693
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

12 B

URL HTTP/2
contile.services.mozilla.com/v1/tiles
IP
34.117.237.239:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
12 B (12 bytes)
Hash
23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
date: Wed, 30 Nov 2022 15:57:28 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329 B

URL HTTP/2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
34.102.187.140:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Size
329 B (329 bytes)
Hash
0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 30 Nov 2022 15:08:56 GMT
cache-control: public,max-age=3600
age: 2912
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html

172.217.21.161

301 Moved Permanently

224 B

URL HTTP/1.1
marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html
IP
172.217.21.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Size
224 B (224 bytes)
Hash
e61fe6612eb13ace327c3c5fdd34d6bd
c817e827338a3818f68d060654c14b9dc4b999bd
e049add9f05612bab6d408481f31e3290b299a421ef9531f0b03a9dc1664f89d

HTTP Headers

GET /2022/06/cara-nak-memupuk-nilai-murni-dalam.html HTTP/1.1
Host: marshallkruwgamble.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

HTTP/1.1 301 Moved Permanently
Location: https://marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Wed, 30 Nov 2022 15:57:28 GMT
Expires: Wed, 30 Nov 2022 15:57:28 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 224
Server: GSE

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8c7740729b3e689d0f033aae372325c2
c6daa75cb90188534367ab0a3ef263a7f8b15ff8
077d3bf6932d231023142ad1deb36203e7f59f0fa3e3838f56852c781b1b959c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
cfdd00e67ee6ca21712b867eb5288ab6
b61d5d6ec3b7ad71619e13e32c87f2d01871b88a
f740cac6dfedc1bf0f82efb10dac4f6ffb22f9bb5d4a9b68a4cd971dd2f65793

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2136
Cache-Control: max-age=150298
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:29 GMT
Etag: "63871d2b-1d7"
Expires: Fri, 02 Dec 2022 09:42:27 GMT
Last-Modified: Wed, 30 Nov 2022 09:06:51 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

push.services.mozilla.com/

54.148.77.40

101 Switching Protocols

0 B

URL HTTP/1.1
push.services.mozilla.com/
IP
54.148.77.40:0
ASN
#16509 AMAZON-02

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: bkj5Nvt+3R6podWf60QbhA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9CKe7Vim28ulYPWqSxa/ZFZQNkw=

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
8c7740729b3e689d0f033aae372325c2
c6daa75cb90188534367ab0a3ef263a7f8b15ff8
077d3bf6932d231023142ad1deb36203e7f59f0fa3e3838f56852c781b1b959c

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html

172.217.21.161

200 OK

40 kB

URL HTTP/2
marshallkruwgamble.blogspot.com/2022/06/cara-nak-memupuk-nilai-murni-dalam.html
IP
172.217.21.161:0
ASN
#15169 GOOGLE

File type
HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (10263)
Size
40 kB (40466 bytes)
Hash
924870657ab42b145e75c2cba0a6a943
d9a71bac8125fea20e5a5a6f6b836ff3fb3292b0
6c5f62164479af897de23a8053b34da14008a5ce8ebcf42bbeaf69152b6e1369

HTTP Headers

GET /2022/06/cara-nak-memupuk-nilai-murni-dalam.html HTTP/1.1
Host: marshallkruwgamble.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1

HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Wed, 30 Nov 2022 15:57:30 GMT
date: Wed, 30 Nov 2022 15:57:30 GMT
cache-control: private, max-age=0
last-modified: Sun, 20 Nov 2022 11:50:47 GMT
etag: W/"1551b0c39a2548f79aca239632fc0e24903c647ebec22eec73fd602a2a6b3115"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 40466
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
663d7a15e6575b4513f2f419c6c7c091
c8a76ecc119f9b4b81a192720713377d2e521b34
ee7ad65e8b239c9f51bab0e58e8495bc6bc7144e40f55503f1084da047462ef8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
663d7a15e6575b4513f2f419c6c7c091
c8a76ecc119f9b4b81a192720713377d2e521b34
ee7ad65e8b239c9f51bab0e58e8495bc6bc7144e40f55503f1084da047462ef8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

471 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
471 B (471 bytes)
Hash
b1a5da6636cd444028100566c55137cd
0c50a145e941e1aa6e3e2dede461248c67a789a2
bd83c87b7f38d37a7b443b4b7aa7f34b6c127070b332ac4f34d16aa17c6e301a

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.blogger.com/static/v1/widgets/2342155703-widgets.js

216.58.207.233

200 OK

57 kB

URL HTTP/2
www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
216.58.207.233:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (2221)
Size
57 kB (56726 bytes)
Hash
1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b

HTTP Headers

GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 05:43:29 GMT
expires: Wed, 29 Nov 2023 05:43:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/javascript
age: 123241
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2

216.58.207.227

200 OK

11 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v20/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 11016, version 1.0\012- data
Size
11 kB (11016 bytes)
Hash
15fa3062f8929bd3b05fdca5259db412
6ff06a34f68ad0324ddec1bbe4d453c959178b36
5d1bc9b443f3f81fa4b4ad4634c1bb9702194c1898e3a9de0ab5e2cdc0e9f479

HTTP Headers

GET /s/roboto/v20/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://marshallkruwgamble.blogspot.com
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 11016
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 15:42:47 GMT
expires: Wed, 29 Nov 2023 15:42:47 GMT
cache-control: public, max-age=31536000
age: 87283
last-modified: Wed, 24 Jul 2019 01:18:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js

216.58.207.233

200 OK

6.6 kB

URL HTTP/2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
216.58.207.233:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1441)
Size
6.6 kB (6573 bytes)
Hash
f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde

HTTP Headers

GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 13:44:05 GMT
expires: Wed, 29 Nov 2023 13:44:05 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/javascript
age: 94405
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

apis.google.com/js/platform.js

216.58.207.238

200 OK

21 kB

URL HTTP/2
apis.google.com/js/platform.js
IP
216.58.207.238:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1279)
Size
21 kB (20984 bytes)
Hash
7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61

HTTP Headers

GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 30 Nov 2022 15:57:30 GMT
expires: Wed, 30 Nov 2022 15:57:30 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
663d7a15e6575b4513f2f419c6c7c091
c8a76ecc119f9b4b81a192720713377d2e521b34
ee7ad65e8b239c9f51bab0e58e8495bc6bc7144e40f55503f1084da047462ef8

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
608e4d04a251ebcd51660e801f388303
fcb9aa48fd6ed504a1a9fed7990c5ccde63e6a1d
cc1a34cd0a99e301df97cf184ab0ded2e229659f86f43e4eff479dee221695dc

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.blogger.com/dyn-css/authorization.css?targetBlogID=7924696308711122894&zx=45669b72-14d0-464b-ac30-263876744660

216.58.207.233

200 OK

21 B

URL HTTP/2
www.blogger.com/dyn-css/authorization.css?targetBlogID=7924696308711122894&zx=45669b72-14d0-464b-ac30-263876744660
IP
216.58.207.233:0
ASN
#15169 GOOGLE

File type
very short file (no magic)
Size
21 B (21 bytes)
Hash
a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522

HTTP Headers

GET /dyn-css/authorization.css?targetBlogID=7924696308711122894&zx=45669b72-14d0-464b-ac30-263876744660 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 30 Nov 2022 15:57:30 GMT
last-modified: Wed, 30 Nov 2022 15:57:30 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

litemarca2223.github.io/klandiraya/a5ca9dabbf3c9c63d2fa67c92f46eccd.js

185.199.111.153

200 OK

18 kB

URL HTTP/2
litemarca2223.github.io/klandiraya/a5ca9dabbf3c9c63d2fa67c92f46eccd.js
IP
185.199.111.153:0
ASN
#54113 FASTLY

File type
HTML document, ASCII text, with very long lines (59590)
Size
18 kB (17516 bytes)
Hash
bd130daef8605da462ce070334f5ad37
0e38f83e0b9207708b82dc3d2969a6655e758728
5354b3a425999e4c6fce4a2f3b1503f1a30efca8e25b95222508dd35535fe419

HTTP Headers

GET /klandiraya/a5ca9dabbf3c9c63d2fa67c92f46eccd.js HTTP/1.1
Host: litemarca2223.github.io
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: GitHub.com
content-type: application/javascript; charset=utf-8
permissions-policy: interest-cohort=()
last-modified: Wed, 16 Mar 2022 15:06:58 GMT
access-control-allow-origin: *
strict-transport-security: max-age=31556952
etag: W/"6231fd12-e8c7"
expires: Wed, 30 Nov 2022 16:07:30 GMT
cache-control: max-age=600
content-encoding: gzip
x-proxy-cache: MISS
x-github-request-id: 0F3E:4F7B:75084D:9C827B:63877D6A
accept-ranges: bytes
date: Wed, 30 Nov 2022 15:57:30 GMT
via: 1.1 varnish
age: 0
x-served-by: cache-bma1648-BMA
x-cache: MISS
x-cache-hits: 0
x-timer: S1669823850.356694,VS0,VE100
vary: Accept-Encoding
x-fastly-request-id: d19ac5043b543c5324d802f2737a05523add0a3d
content-length: 17516
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
dd1014c5f4df816f8d206dfe784c245c
b9f15fdc18b3acb61aae6e0e80be54d7c6b3be5b
4a64345c9d0323d179d04f40f44cbaaff2876eef1cad8145b1adf393ad27a9fb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=129824
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:30 GMT
Etag: "6386d58a-118"
Expires: Fri, 02 Dec 2022 04:01:14 GMT
Last-Modified: Wed, 30 Nov 2022 04:01:14 GMT
Server: nginx
Content-Length: 280

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1dd8df8190b51c837c7d3501ab0c11b4
fc98b33a54f3aecb3d06c6975d907b0fd9226a98
2f654ee8deade49e82494abb85506e917e4e840d236c85cfc7bb012d445fb2d5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F654EE8DEADE49E82494ABB85506E917E4E840D236C85CFC7BB012D445FB2D5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Wed, 30 Nov 2022 21:57:13 GMT
Date: Wed, 30 Nov 2022 15:57:30 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9235305bd988a9e4656cdddf219cd789
a4a91723e58f66bfab3552c31fed53c15b522128
62ae7b79a2c323df37c971e226c78fca7489ef064d0999c695268fa0f3ea7930

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62AE7B79A2C323DF37C971E226C78FCA7489EF064D0999C695268FA0F3EA7930"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 21:57:30 GMT
Date: Wed, 30 Nov 2022 15:57:30 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
1dd8df8190b51c837c7d3501ab0c11b4
fc98b33a54f3aecb3d06c6975d907b0fd9226a98
2f654ee8deade49e82494abb85506e917e4e840d236c85cfc7bb012d445fb2d5

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2F654EE8DEADE49E82494ABB85506E917E4E840D236C85CFC7BB012D445FB2D5"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21583
Expires: Wed, 30 Nov 2022 21:57:13 GMT
Date: Wed, 30 Nov 2022 15:57:30 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
ac3edd07bb0a4ebdaae6ec26e91d2079
b6efe3811dfa37cdcde1e9d411c171732ac7e12a
c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6695
Expires: Wed, 30 Nov 2022 17:49:05 GMT
Date: Wed, 30 Nov 2022 15:57:30 GMT
Connection: keep-alive

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg

34.120.237.76

200 OK

7.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
7.3 kB (7298 bytes)
Hash
e00769bd1391b8f4f5b8ab128a825355
e4ddf955e8ac1986045ed55880c43c69e588a021
81ca4d20c28fed8fd3135515daadc1fdbfb4198535d7c46021b418b8b98e59a5

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F67bb1888-5971-4b4a-923b-dc9d4050182b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 7298
x-amzn-requestid: 381e55bb-876b-46ad-84b6-1ddf9f876f56
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDcE3poAMFaAA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-7c12394600900afc7281e858;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7mRG070F4NZnewfowUhVhMerJaGjJd4G6O1tvTPiKyvTAzq-Y16-jw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 b2f9564ebf9c745cc2ceae96d434977e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:56:51 GMT
etag: "e4ddf955e8ac1986045ed55880c43c69e588a021"
content-type: image/jpeg
age: 64839
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

5.8 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
5.8 kB (5785 bytes)
Hash
59baec8db5ced0210ab766ea5636a5fd
f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b
33ff55891f18c22970804f1b8b2ba6821ddfd7426b01486410bd43f2b4295a8d

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F250668cd-c9db-4014-b576-3aaad4eb9150.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 5785
x-amzn-requestid: ee77265b-8e90-4035-8ef1-92a2d26aaefa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgDaHdWoAMFqmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a15-0d10d74030e7aee74804b654;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:01 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: GydenCzPtpFdVLqN4ssiZ4dKN48WGneS3mwzEdDE81pobtLznfC4VQ==
via: 1.1 38eecd3ca21bf068d69a2f9cfe668d14.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:07:59 GMT
age: 64171
etag: "f7cf3a0f89751a02fbcf8d21f505f24a74e8b30b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

10 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
10 kB (10176 bytes)
Hash
03014221d7f49b50ffc2d1b0a0e75457
772d86ad983042a728ee3490630a9cf1134ad0dd
81fb954fa569955907952987e9d8efd1dac80e0e4a682826abf3c5d90eb31771

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1c32283b-8309-408e-85df-cad97da6bc80.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 10176
x-amzn-requestid: c2231955-5c78-4073-8399-b8b90f1add78
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMo3oHpSoAMF5Qw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6381bb63-55a1cb004ac73c8b02f2fb8d;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 07:08:19 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 7LVxajVjJ1N2W-jxCmKpYHg1rS1MbrRnAVc15QmM0iH94CH1yJnR0w==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 caf6806821bc479b28a6f1ce3043b8a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 30 Nov 2022 04:53:01 GMT
age: 39869
etag: "772d86ad983042a728ee3490630a9cf1134ad0dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

iklan.diraya.my.id/socbar.js

104.21.24.51

200 OK

21 kB

URL HTTP/2
iklan.diraya.my.id/socbar.js
IP
104.21.24.51:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (33804)
Size
21 kB (20806 bytes)
Hash
d27c4a8d75239add5f710baadf2d8e9e
396eacc48cc820be25c84062465d1f0d47f6ec96
03de33a1ffd61cdf4579eca1655797d50672398f7369b3c656d808d8a6a02758

HTTP Headers

GET /socbar.js HTTP/1.1
Host: iklan.diraya.my.id
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:30 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"9b78b2efe144289dfeed02c65741aa04"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ohe8sl4P92jE4rWkp%2BUjqT3sXyHqo1CLbMXfM9jXhk7jSWDOzHmxBgulkXhiGFMRvvkz7vB1nZmqQQBdBMKTGufiKiwJsMqtIN2q1mc7YIgBiV%2FqV71sOfjls5Jl2AeRuXCPpvY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: REVALIDATED
server: cloudflare
cf-ray: 7724c779ec98b500-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.3 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.3 kB (9330 bytes)
Hash
bbe350ea797a0fec5a19a450fc5de4b4
2f3a39a528d3b759060203931de33c12303592e1
4d661dac2e19e07ae15d0f8cf00bd268c6c2defb2f5e4de38fcb6e7031dfd605

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F13e1db4e-7108-464a-85b6-24ac0c4609f9.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9330
x-amzn-requestid: 3fad352d-7664-43e0-9395-e840f671ca61
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYgFQFIdoAMFSmw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867a21-5e9847852f8435231d401fe6;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:31:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: mCEtSOenWKxay4vNy5mN9cexxXKXKt7TMuLaLw-M86tLKwQ2MwuxPg==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 22:11:32 GMT
age: 63958
etag: "2f3a39a528d3b759060203931de33c12303592e1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

9.1 kB

URL HTTP/2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg
IP
34.120.237.76:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Size
9.1 kB (9051 bytes)
Hash
05196ec43964cf559caa0c0279148d62
6170d6776615503e3e29f86783febc3e3e78ca66
47f3a5cde661987e3496ce110a0170b10087dd9ba8d4fd691c4830587ba3fa3f

HTTP Headers

GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff2730750-552d-4852-8ce1-503874565f75.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
server: nginx
content-length: 9051
x-amzn-requestid: 1032dd9c-a15e-4e8a-9c81-07419e8caf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cYhGvEMNIAMFaKw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63867bc4-1005c20a33320dbf6567ca31;Sampled=0
x-amzn-remapped-date: Tue, 29 Nov 2022 21:38:12 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rtfl896JX35oFFEVmqyH9Nm62iSY6rqwzkLwZMcM45p_ySF6J2QwEQ==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 21:44:47 GMT
age: 65563
etag: "6170d6776615503e3e29f86783febc3e3e78ca66"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

slideplayer.info/slide/15491991/93/images/7/Kasih+sayang+terhadap+keluarga.jpg

136.243.147.41

200 OK

64 kB

URL HTTP/1.1
slideplayer.info/slide/15491991/93/images/7/Kasih+sayang+terhadap+keluarga.jpg
IP
136.243.147.41:0
ASN
#24940 Hetzner Online GmbH

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 200x200, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=7, name=Kasih sayang terhadap keluarga, description=Menyayangi adik-adik. Menjaga adik dengan baik. Toleransi dengan adik-beradik. Saling memahami. Saudara mara. Ziarah menziarahi, xresolution=302, yresolution=310, resolutionunit=2, software=SlidePlayer], baseline, precision 8, 1024x768, components 3\012- data
Size
64 kB (64044 bytes)
Hash
0d2992e844132b8eb8ee57cf1cf4bc8d
d6b370d0effd977907aac4650b9451dd6b5cd0de
bb27b4f856117787a505b6a9d040e8204ab708c7ca12fcee226d1885b4773170

HTTP Headers

GET /slide/15491991/93/images/7/Kasih+sayang+terhadap+keluarga.jpg HTTP/1.1
Host: slideplayer.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx
Date: Wed, 30 Nov 2022 15:57:30 GMT
Content-Type: image/jpeg
Content-Length: 64044
Connection: keep-alive
Last-Modified: Thu, 17 Jan 2019 08:36:29 GMT
ETag: "5c403e8d-fa2c"
Cache-Backend-Server: slideplayer-21
Accept-Ranges: bytes
Expires: Wed, 07 Dec 2022 15:57:30 GMT
Cache-Control: max-age=604800
Set-Cookie: country=NO; domain=.slideplayer.info; path=/
Link: <https://slideplayer.info/slide/15491991/93/images/7/Kasih+sayang+terhadap+keluarga.jpg>; rel="canonical"

imgv2-1-f.scribdassets.com/img/document/221135721/original/e23beefe2b/1653345876?v=1

151.101.66.152

200 OK

77 kB

URL HTTP/2
imgv2-1-f.scribdassets.com/img/document/221135721/original/e23beefe2b/1653345876?v=1
IP
151.101.66.152:0
ASN
#54113 FASTLY

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
77 kB (77158 bytes)
Hash
9dbbdeeb39edb2ef0e2fe5fd0d79f3b3
e9fbde6fd8b9bb915bb14aa28e5dc4f6b8fe1611
d3cb09b8aebc82e887b0a01047fdd9236fa11cfdf6937cda538e1ce4c05dcd3d

HTTP Headers

GET /img/document/221135721/original/e23beefe2b/1653345876?v=1 HTTP/1.1
Host: imgv2-1-f.scribdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: max-age=864000,stale-while-revalidate=86400,stale-if-error=86400
content-type: image/webp
etag: "yHT/HK2Fe6S+Sz1HSuIaQdCSxHpOybHWVIQ1KXXSimo"
fastly-io-info: ifsz=159997 idim=768x1024 ifmt=jpeg ofsz=77158 odim=768x1024 ofmt=webp
fastly-stats: io=1
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 30 Nov 2022 15:57:30 GMT
age: 0
x-served-by: cache-chi-kigq8000100-CHI, cache-bma1675-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1669823850.353349,VS0,VE362
vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 77158
X-Firefox-Spdy: h2

imgv2-1-f.scribdassets.com/img/document/203482277/original/33aaa26400/1650477351?v=1

151.101.66.152

200 OK

76 kB

URL HTTP/2
imgv2-1-f.scribdassets.com/img/document/203482277/original/33aaa26400/1650477351?v=1
IP
151.101.66.152:0
ASN
#54113 FASTLY

File type
RIFF (little-endian) data, Web/P image, VP8 encoding, 768x1024, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Size
76 kB (75844 bytes)
Hash
3c19316a34201531a11cf914a4cb00d3
aa363a6f5e4d3fd3c39e1fdc1e2d7d56c9e70001
aaf6175e4119ae0ce20f668968e51be94c29c221a7af0523b2ab2caed1a7a797

HTTP Headers

GET /img/document/203482277/original/33aaa26400/1650477351?v=1 HTTP/1.1
Host: imgv2-1-f.scribdassets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
cache-control: max-age=864000,stale-while-revalidate=86400,stale-if-error=86400
content-type: image/webp
etag: "7AfqkLlf+twW5NotgljDVXps0cLYu2H93S/U2XhfrFg"
fastly-io-info: ifsz=149256 idim=768x1024 ifmt=jpeg ofsz=75844 odim=768x1024 ofmt=webp
fastly-stats: io=1
via: 1.1 varnish, 1.1 varnish
accept-ranges: bytes
date: Wed, 30 Nov 2022 15:57:30 GMT
age: 0
x-served-by: cache-chi-klot8100161-CHI, cache-bma1675-BMA
x-cache: MISS, MISS
x-cache-hits: 0, 0
x-timer: S1669823850.349717,VS0,VE405
vary: Accept
alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
content-length: 75844
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
4ddc505d8b24d8535d1ab641ab2d6e3d
64d74b665862abbca3a9b6cbd4a8259a58a133e5
0c903829f02812e43283f72cf95096140935eb6ac46a2391b10a3832da309d9b

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0C903829F02812E43283F72CF95096140935EB6AC46A2391B10A3832DA309D9B"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5421
Expires: Wed, 30 Nov 2022 17:27:51 GMT
Date: Wed, 30 Nov 2022 15:57:30 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

pagead2.googlesyndication.com/pagead/js/google_top_exp.js

142.250.74.2

200 OK

67 B

URL HTTP/2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
142.250.74.2:0
ASN
#15169 GOOGLE

File type
ASCII text
Size
67 B (67 bytes)
Hash
9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c

HTTP Headers

GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Tue, 29 Nov 2022 20:43:36 GMT
expires: Tue, 13 Dec 2022 20:43:36 GMT
cache-control: public, max-age=1209600
age: 69235
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

tzkrh.com/wp-content/uploads/2017/12/familypic.jpg

172.67.144.218

200 OK

48 kB

URL HTTP/2
tzkrh.com/wp-content/uploads/2017/12/familypic.jpg
IP
172.67.144.218:0
ASN
#13335 CLOUDFLARENET

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 75", baseline, precision 8, 1160x660, components 3\012- data
Size
48 kB (47779 bytes)
Hash
d6347ba37fbcdf00f72e4eb6773fdb9f
5e1077ed11521ab5d0c8151c1b3d26fd6fb378f3
00c45bc94a4389e594f98b0dccd6dcc34e5d7ea886b2f5a96f148cd52536a5f4

HTTP Headers

GET /wp-content/uploads/2017/12/familypic.jpg HTTP/1.1
Host: tzkrh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:31 GMT
content-type: image/jpeg
content-length: 47779
cache-control: public, max-age=604800
expires: Wed, 07 Dec 2022 15:57:30 GMT
last-modified: Fri, 29 Dec 2017 04:20:53 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MKueNwG65FOsj1cF0pJP%2Fpz3L4ogMLJTePanUfkuZ8XWh8Y4RlRabheKRQLXCJACjo%2B7OHJu1nmsz8t0LcVhpvB%2Baw%2Buh4gYdJ2NUSlXoite6Ail2LwDXVq8mQQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c7799d8eb515-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
5d950b70d3b1532276ed817249b72618
dca7faf727b8afdd481c8f8bcc3e9129fdadadc3
afe3fbe5f269179e18a66ca806664b7f96b903150b364129e2f2b30087198e34

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.digicert.com/

93.184.220.29

200 OK

280 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
280 B (280 bytes)
Hash
dd1014c5f4df816f8d206dfe784c245c
b9f15fdc18b3acb61aae6e0e80be54d7c6b3be5b
4a64345c9d0323d179d04f40f44cbaaff2876eef1cad8145b1adf393ad27a9fb

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1
Cache-Control: max-age=129824
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:31 GMT
Etag: "6386d58a-118"
Expires: Fri, 02 Dec 2022 04:01:15 GMT
Last-Modified: Wed, 30 Nov 2022 04:01:14 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8f58cd30443a495eed3ec0d9827550c1
fd0f53d2acc63ae015b7b42155136ade5841ebc7
333a3cae36081ea37371e32dc9587faacfda5970daa476b3b36cd6f587ce1594

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu

216.58.211.4

200 OK

665 B

URL HTTP/2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
216.58.211.4:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (1034), with no line terminators
Size
665 B (665 bytes)
Hash
34e37af4d526255a20a2056cd5f4addf
bcac186d6a49539e69a3f67aa08d0188966f5623
51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634

HTTP Headers

GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
expires: Wed, 30 Nov 2022 15:57:31 GMT
date: Wed, 30 Nov 2022 15:57:31 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js

142.250.74.99

200 OK

163 kB

URL HTTP/2
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
142.250.74.99:0
ASN
#15169 GOOGLE

File type
ASCII text, with very long lines (730)
Size
163 kB (162976 bytes)
Hash
79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6

HTTP Headers

GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 30 Nov 2022 12:41:16 GMT
expires: Thu, 30 Nov 2023 12:41:16 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 11775
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d4a6ec935a99b6c9215ecb07dec2a24b
6a0e5b0192622d7f64d42845551f0a9b468c801e
09e73686a6ef42280715bf0711beb857218254c44d5c00503dfa978694daeda0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09E73686A6EF42280715BF0711BEB857218254C44D5C00503DFA978694DAEDA0"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16199
Expires: Wed, 30 Nov 2022 20:27:30 GMT
Date: Wed, 30 Nov 2022 15:57:31 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
d4a6ec935a99b6c9215ecb07dec2a24b
6a0e5b0192622d7f64d42845551f0a9b468c801e
09e73686a6ef42280715bf0711beb857218254c44d5c00503dfa978694daeda0

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "09E73686A6EF42280715BF0711BEB857218254C44D5C00503DFA978694DAEDA0"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12951
Expires: Wed, 30 Nov 2022 19:33:22 GMT
Date: Wed, 30 Nov 2022 15:57:31 GMT
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
432ea1e7ddb1a80cd9d353a81d2da69a
fa00138cbe5166522699b48783d4e492a9de5a4e
471398654d31f83ed50d136eaddcc89b3540287ccd456989b568fd47a786dd25

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "471398654D31F83ED50D136EADDCC89B3540287CCD456989B568FD47A786DD25"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 21:57:32 GMT
Date: Wed, 30 Nov 2022 15:57:32 GMT
Connection: keep-alive

fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2

216.58.207.227

200 OK

15 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Size
15 kB (15344 bytes)
Hash
5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc

HTTP Headers

GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:48:03 GMT
expires: Fri, 24 Nov 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 497369
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2

216.58.207.227

200 OK

16 kB

URL HTTP/2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
216.58.207.227:0
ASN
#15169 GOOGLE

File type
Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Size
16 kB (15552 bytes)
Hash
285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7

HTTP Headers

GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 16:40:43 GMT
expires: Fri, 24 Nov 2023 16:40:43 GMT
cache-control: public, max-age=31536000
age: 515809
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
5946293de07f462acaf7911368fa2fcb
7c48a92efee86c367eb3f6d6c21e0bde5a45ac9a
815b297511094288f745f230c7f3cb097f8f823c9cf67de63713aeceaf98d356

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "815B297511094288F745F230C7F3CB097F8F823C9CF67DE63713AECEAF98D356"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5062
Expires: Wed, 30 Nov 2022 17:21:54 GMT
Date: Wed, 30 Nov 2022 15:57:32 GMT
Connection: keep-alive

s10.histats.com/js15_as.js

46.105.201.240

200 OK

4.4 kB

URL HTTP/2
s10.histats.com/js15_as.js
IP
46.105.201.240:0
ASN
#16276 OVH SAS

File type
HTML document, ASCII text, with very long lines (11440), with no line terminators
Size
4.4 kB (4364 bytes)
Hash
ed192092c129db6123a3397855f42619
067e9b8e26cf6246eb84c6b9cf3da0c192ce7b3e
998fff486a7fb38b6ed445edc36c9b317b70950cd39efcf4012ca641312fcee1

HTTP Headers

GET /js15_as.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:48:19 GMT
etag: "-375139978"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 748717747
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4364
X-Firefox-Spdy: h2

clenchedyouthmatching.com/advertisers.js

142.0.197.108

200 OK

0 B

URL HTTP/1.1
clenchedyouthmatching.com/advertisers.js
IP
142.0.197.108:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /advertisers.js HTTP/1.1
Host: clenchedyouthmatching.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Wed, 30 Nov 2022 15:57:32 GMT
Content-Type: application/javascript
Content-Length: 0
Connection: keep-alive

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
9f3c940e013c7fc074a97f1549aa9721
277f4efacd3e86ea4b4f10a0cc274cba035beb1a
b649a24e8e8b8aeafcd116b467c3cdd7aa28582484495f1da0cd52a36d5c9490

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B649A24E8E8B8AEAFCD116B467C3CDD7AA28582484495F1DA0CD52A36D5C9490"
Last-Modified: Mon, 28 Nov 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 30 Nov 2022 21:57:32 GMT
Date: Wed, 30 Nov 2022 15:57:32 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
cd528f6c2c45e38c52095a73a9cd8c68
dca2df874a830edac932136d474453c18d933024
4c7e75aaccb4b74e227ada3b56829f52cb7f14ad05454f7bd6eccf3e94185218

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

play.google.com/log?format=json&hasfast=true&authuser=0

216.58.211.14

200 OK

0 B

URL HTTP/2
play.google.com/log?format=json&hasfast=true&authuser=0
IP
216.58.211.14:0
ASN
#15169 GOOGLE

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 30 Nov 2022 15:57:32 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+954; expires=Fri, 29-Nov-2024 15:57:32 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 30 Nov 2022 15:57:32 GMT
cache-control: private
X-Firefox-Spdy: h2

play.google.com/log?format=json&hasfast=true

216.58.211.14

200 OK

131 B

URL HTTP/2
play.google.com/log?format=json&hasfast=true
IP
216.58.211.14:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
131 B (131 bytes)
Hash
babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd

HTTP Headers

POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1523
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 30 Nov 2022 15:57:32 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+656; expires=Fri, 29-Nov-2024 15:57:32 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 30 Nov 2022 15:57:32 GMT
X-Firefox-Spdy: h2

play.google.com/log?format=json&hasfast=true&authuser=0

216.58.211.14

200 OK

131 B

URL HTTP/2
play.google.com/log?format=json&hasfast=true&authuser=0
IP
216.58.211.14:0
ASN
#15169 GOOGLE

File type
JSON data\012- , ASCII text, with no line terminators
Size
131 B (131 bytes)
Hash
babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd

HTTP Headers

POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2975
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 30 Nov 2022 15:57:32 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+649; expires=Fri, 29-Nov-2024 15:57:32 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 30 Nov 2022 15:57:32 GMT
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

471 B

URL HTTP/1.1
ocsp.digicert.com/
IP
93.184.220.29:0
ASN
#15133 EDGECAST

File type
data
Size
471 B (471 bytes)
Hash
a4a80a825ad3407ead967ca6ce3f1132
181a92b417726adca7a43dbbb773428fa656fad9
560470c3ca8c6e34043f4095783defea486a8406d9181a99cb420df3e839e683

HTTP Headers

POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 972
Cache-Control: max-age=123582
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:32 GMT
Etag: "6386b95e-1d7"
Expires: Fri, 02 Dec 2022 02:17:14 GMT
Last-Modified: Wed, 30 Nov 2022 02:01:02 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471

i.pinimg.com/474x/97/e4/d6/97e4d6d1b8e61ecb509d969937d998fd.jpg

151.101.84.84

200 OK

77 kB

URL HTTP/2
i.pinimg.com/474x/97/e4/d6/97e4d6d1b8e61ecb509d969937d998fd.jpg
IP
151.101.84.84:0
ASN
#54113 FASTLY

File type
JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 474x687, components 3\012- data
Size
77 kB (76797 bytes)
Hash
032f01f01b0d4dc20ca855a36ab1e3ea
1ef7129ef2adfb1b808af978c3dd26e211ea6a7e
5216118925a4640d304bfa7c3892f3089c72a34d7cd29af9b50f815062c4ca46

HTTP Headers

GET /474x/97/e4/d6/97e4d6d1b8e61ecb509d969937d998fd.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
etag: "032f01f01b0d4dc20ca855a36ab1e3ea"
content-type: image/jpeg
cache-control: max-age=31536000, immutable
accept-ranges: bytes
vary: Origin
x-cdn: fastly
alt-svc: h3=":443";ma=600,h3-29=":443";ma=600,h3-27=":443";ma=600
date: Wed, 30 Nov 2022 15:57:32 GMT
content-length: 76797
X-Firefox-Spdy: h2

exportspring.com/sbar.json?key=2722dd66f563bb16a425590a94c099d2

173.233.137.44

200 OK

4.1 kB

URL HTTP/1.1
exportspring.com/sbar.json?key=2722dd66f563bb16a425590a94c099d2
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type
JSON data\012- , ASCII text, with very long lines (5714), with no line terminators
Size
4.1 kB (4127 bytes)
Hash
b4f1c1edfaeccd7172a7770ab5606043
1d2949114ab920d07707e8b4b65e0b1f49bf8b5b
f2843d3573788341bd42f9ce7137efd6a50af6e5357fc383b070ca322dd555bf

HTTP Headers

GET /sbar.json?key=2722dd66f563bb16a425590a94c099d2 HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://marshallkruwgamble.blogspot.com
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:32 GMT
Content-Type: text/plain; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://marshallkruwgamble.blogspot.com
Access-Control-Allow-Origin: https://marshallkruwgamble.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: u_pl=16704277; expires=Thu, 01 Dec 2022 15:57:32 GMT; secure; SameSite=None
pdhtkv=true; expires=Thu, 01 Dec 2022 15:57:32 GMT; secure; SameSite=None
uncs=1; expires=Thu, 01 Dec 2022 15:57:32 GMT; secure; SameSite=None
pdhtkv29=true; expires=Thu, 01 Dec 2022 15:57:32 GMT; secure; SameSite=None
uncs29=1; expires=Thu, 01 Dec 2022 15:57:32 GMT; secure; SameSite=None
slec2722dd66f563bb16a425590a94c099d2=[3760946]; expires=Wed, 30 Nov 2022 15:57:37 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 64a799d52ba5569fd21280b7cbd42a16
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip

s4.histats.com/stats/4638569.php?4638569&@f16&@g1&@h1&@i1&@j1669823851071&@k0&@l1&@mCara%20Nak%20Memupuk%20Nilai%20Murni%20Dalam%20Keluarga%20-%20MarshallkruwGamble&@n0&@o1000&@q0&@r0&@s9&@ten-US&@u1280&@b1:-48670802&@b3:1669823851&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmarshallkruwgamble.blogspot.com%2F2022%2F06%2Fcara-nak-memupuk-nilai-murni-dalam.html&@w

149.56.240.130

200 OK

105 B

URL HTTP/1.1
s4.histats.com/stats/4638569.php?4638569&@f16&@g1&@h1&@i1&@j1669823851071&@k0&@l1&@mCara%20Nak%20Memupuk%20Nilai%20Murni%20Dalam%20Keluarga%20-%20MarshallkruwGamble&@n0&@o1000&@q0&@r0&@s9&@ten-US&@u1280&@b1:-48670802&@b3:1669823851&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmarshallkruwgamble.blogspot.com%2F2022%2F06%2Fcara-nak-memupuk-nilai-murni-dalam.html&@w
IP
149.56.240.130:0
ASN
#16276 OVH SAS

File type
ASCII text, with no line terminators
Size
105 B (105 bytes)
Hash
081ff9b110e3024424ec971d47927ad9
7c8f85da7bcf901d3e3cbac3de8e4040bb89f08c
954d842de7dbe7d01d72cecc25c8454d45e5afcb02971396e474805b3680b9ea

HTTP Headers

GET /stats/4638569.php?4638569&@f16&@g1&@h1&@i1&@j1669823851071&@k0&@l1&@mCara%20Nak%20Memupuk%20Nilai%20Murni%20Dalam%20Keluarga%20-%20MarshallkruwGamble&@n0&@o1000&@q0&@r0&@s9&@ten-US&@u1280&@b1:-48670802&@b3:1669823851&@b4:js15_as.js&@b5:0&@a-_0.2.1&@vhttps%3A%2F%2Fmarshallkruwgamble.blogspot.com%2F2022%2F06%2Fcara-nak-memupuk-nilai-murni-dalam.html&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Date: Wed, 30 Nov 2022 15:57:32 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 105
Connection: close

exportspring.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2F0TNo9BNd1ZXF%2F4u5KbkJ1VfWkTHVXU9U9PQkK0QXdg4cRL97svEk2qEHcgxfxj8lelgFhx4PkYC6ePCjKwuJJZCYDwQ%2Bqvq%2FqPYr3HvX%2BVnFIXBT0YPm83pBK0UZQd2vPrciU69LWLlypeW7dPVlbkWm7dbLWn26m96LnBnX3%2Bdqrgq3phu96ruu5Xu2MNCLW%2FcYMhcz2Qq8euvWWX%2FeCFvrm%2F2dbOLDUAe8dkocg%2BeTe1Vs3INkIafLVaWHXcp298EpSKJprgx7ffSNdS3WZIjkeY%2BMgTnfnbGg7IeSTE9Dp7twBdG976gCRnBDnFw9RujuXiai3c6Q0UhApIv4Ayt4IQo0g6QhMX4XktwnAOC5cRJpcv6BNSdePUDpFJ2Th7h3IckIWfn0YafLlKSX7tctaFbnUqUU%2FriD7I8juCFmxj3zDgSz3wfL3IPlPpHH3HNJk%2B6JVGpJXM%2FdSjiDjEZQYgFoHxXRJB0XsoMgcJPygRoMwdt1OHMXN5mKLMdZsMhYstnnAm63F2EXBpvIGyLMBmBqAmU1kZhNrcgBT%2FAi7WsFyBzafEOf1TfR4hVIQlJagpASlJChzgrJX7XBlfVtd58oWkTfv%2Frw3q6HOu1t0R%2BddkZKt7JA8OMvl398ewZo4qPkd3%2Be83Y6DdjOKvDZt%2BUEQujRsMTcMuQ8rK0h7YmZ1Q07Io%2B8%2BjkxOyELjH0R0H1btg8mnQIunQcthx3dBV4etRRcb6de2SAUvGJ2m3TW6yOpMJ%2BC6QpYvIF93ttQheWImKGQ%2BBBsv%2Ff3Nm8HS23%2BCmQqZqfCWvEnQVdeGl3RJti%2Fp0pIbF7NcJnJj9uzlnOZi4fPXxHqpDT972g4%2Be4lNgem4d0XY%2FBxNuUy7lnxxSnIuzBltmCDfnbUrIlou7OqpwqRFdm755TNnk8wIa6VOR6DydudjMDkh95%2FfnH3PZz68CWlGMEWFpBiTeUHqfbBsEzYbL%2F3RePLT73u3YDWBUcecKHNQFtXQ%2BNHxpZIT4t95DEqMl77du8979vd10KiCFccxRGL8w19H%2FC17DV3jgOZXkSYVeqZCT1WgagBb3DPMMzNe%2Brk5K0TKGUbKONuRMuqjo3itPKiJIHZj4foiisMo7lCXh3ErjGjoiU4UUA%2B5nbAP3lH%2FAQAA%2F%2F8BAAD%2F%2F0IWM2Z6BAAA

173.233.137.44

200 OK

7 B

URL HTTP/1.1
exportspring.com/ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2F0TNo9BNd1ZXF%2F4u5KbkJ1VfWkTHVXU9U9PQkK0QXdg4cRL97svEk2qEHcgxfxj8lelgFhx4PkYC6ePCjKwuJJZCYDwQ%2Bqvq%2FqPYr3HvX%2BVnFIXBT0YPm83pBK0UZQd2vPrciU69LWLlypeW7dPVlbkWm7dbLWn26m96LnBnX3%2Bdqrgq3phu96ruu5Xu2MNCLW%2FcYMhcz2Qq8euvWWX%2FeCFvrm%2F2dbOLDUAe8dkocg%2BeTe1Vs3INkIafLVaWHXcp298EpSKJprgx7ffSNdS3WZIjkeY%2BMgTnfnbGg7IeSTE9Dp7twBdG976gCRnBDnFw9RujuXiai3c6Q0UhApIv4Ayt4IQo0g6QhMX4XktwnAOC5cRJpcv6BNSdePUDpFJ2Th7h3IckIWfn0YafLlKSX7tctaFbnUqUU%2FriD7I8juCFmxj3zDgSz3wfL3IPlPpHH3HNJk%2B6JVGpJXM%2FdSjiDjEZQYgFoHxXRJB0XsoMgcJPygRoMwdt1OHMXN5mKLMdZsMhYstnnAm63F2EXBpvIGyLMBmBqAmU1kZhNrcgBT%2FAi7WsFyBzafEOf1TfR4hVIQlJagpASlJChzgrJX7XBlfVtd58oWkTfv%2Frw3q6HOu1t0R%2BddkZKt7JA8OMvl398ewZo4qPkd3%2Be83Y6DdjOKvDZt%2BUEQujRsMTcMuQ8rK0h7YmZ1Q07Io%2B8%2BjkxOyELjH0R0H1btg8mnQIunQcthx3dBV4etRRcb6de2SAUvGJ2m3TW6yOpMJ%2BC6QpYvIF93ttQheWImKGQ%2BBBsv%2Ff3Nm8HS23%2BCmQqZqfCWvEnQVdeGl3RJti%2Fp0pIbF7NcJnJj9uzlnOZi4fPXxHqpDT972g4%2Be4lNgem4d0XY%2FBxNuUy7lnxxSnIuzBltmCDfnbUrIlou7OqpwqRFdm755TNnk8wIa6VOR6DydudjMDkh95%2FfnH3PZz68CWlGMEWFpBiTeUHqfbBsEzYbL%2F3RePLT73u3YDWBUcecKHNQFtXQ%2BNHxpZIT4t95DEqMl77du8979vd10KiCFccxRGL8w19H%2FC17DV3jgOZXkSYVeqZCT1WgagBb3DPMMzNe%2Brk5K0TKGUbKONuRMuqjo3itPKiJIHZj4foiisMo7lCXh3ErjGjoiU4UUA%2B5nbAP3lH%2FAQAA%2F%2F8BAAD%2F%2F0IWM2Z6BAAA
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

HTTP Headers

GET /ren.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2F0TNo9BNd1ZXF%2F4u5KbkJ1VfWkTHVXU9U9PQkK0QXdg4cRL97svEk2qEHcgxfxj8lelgFhx4PkYC6ePCjKwuJJZCYDwQ%2Bqvq%2FqPYr3HvX%2BVnFIXBT0YPm83pBK0UZQd2vPrciU69LWLlypeW7dPVlbkWm7dbLWn26m96LnBnX3%2Bdqrgq3phu96ruu5Xu2MNCLW%2FcYMhcz2Qq8euvWWX%2FeCFvrm%2F2dbOLDUAe8dkocg%2BeTe1Vs3INkIafLVaWHXcp298EpSKJprgx7ffSNdS3WZIjkeY%2BMgTnfnbGg7IeSTE9Dp7twBdG976gCRnBDnFw9RujuXiai3c6Q0UhApIv4Ayt4IQo0g6QhMX4XktwnAOC5cRJpcv6BNSdePUDpFJ2Th7h3IckIWfn0YafLlKSX7tctaFbnUqUU%2FriD7I8juCFmxj3zDgSz3wfL3IPlPpHH3HNJk%2B6JVGpJXM%2FdSjiDjEZQYgFoHxXRJB0XsoMgcJPygRoMwdt1OHMXN5mKLMdZsMhYstnnAm63F2EXBpvIGyLMBmBqAmU1kZhNrcgBT%2FAi7WsFyBzafEOf1TfR4hVIQlJagpASlJChzgrJX7XBlfVtd58oWkTfv%2Frw3q6HOu1t0R%2BddkZKt7JA8OMvl398ewZo4qPkd3%2Be83Y6DdjOKvDZt%2BUEQujRsMTcMuQ8rK0h7YmZ1Q07Io%2B8%2BjkxOyELjH0R0H1btg8mnQIunQcthx3dBV4etRRcb6de2SAUvGJ2m3TW6yOpMJ%2BC6QpYvIF93ttQheWImKGQ%2BBBsv%2Ff3Nm8HS23%2BCmQqZqfCWvEnQVdeGl3RJti%2Fp0pIbF7NcJnJj9uzlnOZi4fPXxHqpDT972g4%2Be4lNgem4d0XY%2FBxNuUy7lnxxSnIuzBltmCDfnbUrIlou7OqpwqRFdm755TNnk8wIa6VOR6DydudjMDkh95%2FfnH3PZz68CWlGMEWFpBiTeUHqfbBsEzYbL%2F3RePLT73u3YDWBUcecKHNQFtXQ%2BNHxpZIT4t95DEqMl77du8979vd10KiCFccxRGL8w19H%2FC17DV3jgOZXkSYVeqZCT1WgagBb3DPMMzNe%2Brk5K0TKGUbKONuRMuqjo3itPKiJIHZj4foiisMo7lCXh3ErjGjoiU4UUA%2B5nbAP3lH%2FAQAA%2F%2F8BAAD%2F%2F0IWM2Z6BAAA HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Cookie: u_pl=16704277; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2722dd66f563bb16a425590a94c099d2=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:32 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a0077fb906de3618c2c50fcb54abeb7d
Strict-Transport-Security: max-age=0; includeSubdomains

r3.o.lencr.org/

95.101.11.115

200 OK

503 B

URL HTTP/1.1
r3.o.lencr.org/
IP
95.101.11.115:0
ASN
#20940 Akamai International B.V.

File type
data
Size
503 B (503 bytes)
Hash
38bb14620de55e1982559251c0ebeac9
2a0778a21ec60d9f3cfdf4d5772123a4149729d1
ada2027e8be54e2bb79d0a88473871db54ba9f329a0034cac5413d80d80af1a1

HTTP Headers

POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "ADA2027E8BE54E2BB79D0A88473871DB54BA9F329A0034CAC5413D80D80AF1A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15603
Expires: Wed, 30 Nov 2022 20:17:35 GMT
Date: Wed, 30 Nov 2022 15:57:32 GMT
Connection: keep-alive

cdn.barscreative1.com/sb/interstitial/software/flashPlayer/mac/multi/1/index.html

45.133.44.4

200 OK

8.9 kB

URL HTTP/2
cdn.barscreative1.com/sb/interstitial/software/flashPlayer/mac/multi/1/index.html
IP
45.133.44.4:0
ASN
#39572 DataWeb Global Group B.V.

File type
data
Size
8.9 kB (8871 bytes)
Hash
428960c82e56a132d7e41c1a108f0a4e
5973eeb140d78612ff477005f0cc7c509b357544
c0e19aabd56a9383a78e866b79b1511ec90f507b68f8255adbb35a45f2c74f67

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/index.html HTTP/1.1
Host: cdn.barscreative1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://marshallkruwgamble.blogspot.com
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:32 GMT
content-type: text/html; charset=utf-8
server: nginx/1.17.6
last-modified: Wed, 01 Sep 2021 12:22:33 GMT
etag: W/"612f7089-cfb"
cache-control: max-age=3600
access-control-allow-origin: *
access-control-expose-headers: Date
content-encoding: gzip
expires: Wed, 30 Nov 2022 16:57:32 GMT
x-proxy-cache: HIT
X-Firefox-Spdy: h2

exportspring.com/pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=165

173.233.137.44

200 OK

0 B

URL HTTP/1.1
exportspring.com/pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=165
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.barscreative1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Findex.html&l=3323&fd=165 HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Cookie: u_pl=16704277; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2722dd66f563bb16a425590a94c099d2=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:32 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

e1.o.lencr.org/

23.33.119.27

200 OK

344 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
f3ace5c26952cefe2704f5eca1b92de1
57c4a35c71917ace23ad5b286e437ffa16490692
de6cb7b8f951f4a069c1c48873ddd42bb641d4f69770b6920887619b9f5d6ef6

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "DE6CB7B8F951F4A069C1C48873DDD42BB641D4F69770B6920887619B9F5D6EF6"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7799
Expires: Wed, 30 Nov 2022 18:07:32 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

e1.o.lencr.org/

23.33.119.27

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
aa48a4adc29fae10440f5214d5daefa6
6612ca74e101aa24a92572f3642194115470e20c
267934cce57e4bf7fca62ba70108ca48d9342ade07ed01296fcfda65dff653ae

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "267934CCE57E4BF7FCA62BA70108CA48D9342ADE07ED01296FCFDA65DFF653AE"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12039
Expires: Wed, 30 Nov 2022 19:18:12 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

e1.o.lencr.org/

23.33.119.27

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
aa48a4adc29fae10440f5214d5daefa6
6612ca74e101aa24a92572f3642194115470e20c
267934cce57e4bf7fca62ba70108ca48d9342ade07ed01296fcfda65dff653ae

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "267934CCE57E4BF7FCA62BA70108CA48D9342ADE07ED01296FCFDA65DFF653AE"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11962
Expires: Wed, 30 Nov 2022 19:16:55 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

e1.o.lencr.org/

23.33.119.27

200 OK

345 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
345 B (345 bytes)
Hash
aa48a4adc29fae10440f5214d5daefa6
6612ca74e101aa24a92572f3642194115470e20c
267934cce57e4bf7fca62ba70108ca48d9342ade07ed01296fcfda65dff653ae

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "267934CCE57E4BF7FCA62BA70108CA48D9342ADE07ED01296FCFDA65DFF653AE"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16394
Expires: Wed, 30 Nov 2022 20:30:47 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png

104.21.51.177

200 OK

9.4 kB

URL HTTP/2
cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png
IP
104.21.51.177:0
ASN
#13335 CLOUDFLARENET

File type
PNG image data, 240 x 240, 8-bit colormap, non-interlaced\012- data
Size
9.4 kB (9360 bytes)
Hash
910542c04f8bf2f90ee33d17d538a006
18d5943e5d51539038f7988c34bccef2937c5545
5969cb3c5c4f573f5c05035ddf9748ee17d5c71df6fca4e484f65d30e2694e57

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/img/flash-logo.png HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:33 GMT
content-type: image/png
content-length: 9360
last-modified: Wed, 01 Sep 2021 12:22:39 GMT
etag: "612f708f-2490"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 97273
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9Lsw3YYOjgw9Cwm0M6pFQ7SZMdxXTOMxs13HXWnwDdW6xEdB8DFRbfwgrj1VGfS0Fqt%2FWNGu1roAjL89oB9cxtJl8MCZR0HKu757fzSqI16ORv91z5zTTnpDfxM7s5DiAbo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c78a2eb80b41-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

e1.o.lencr.org/

23.33.119.27

200 OK

344 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
f3ace5c26952cefe2704f5eca1b92de1
57c4a35c71917ace23ad5b286e437ffa16490692
de6cb7b8f951f4a069c1c48873ddd42bb641d4f69770b6920887619b9f5d6ef6

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "DE6CB7B8F951F4A069C1C48873DDD42BB641D4F69770B6920887619B9F5D6EF6"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6974
Expires: Wed, 30 Nov 2022 17:53:47 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

e1.o.lencr.org/

23.33.119.27

200 OK

344 B

URL HTTP/1.1
e1.o.lencr.org/
IP
23.33.119.27:0
ASN
#20940 Akamai International B.V.

File type
data
Size
344 B (344 bytes)
Hash
f3ace5c26952cefe2704f5eca1b92de1
57c4a35c71917ace23ad5b286e437ffa16490692
de6cb7b8f951f4a069c1c48873ddd42bb641d4f69770b6920887619b9f5d6ef6

HTTP Headers

POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "DE6CB7B8F951F4A069C1C48873DDD42BB641D4F69770B6920887619B9F5D6EF6"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6974
Expires: Wed, 30 Nov 2022 17:53:47 GMT
Date: Wed, 30 Nov 2022 15:57:33 GMT
Connection: keep-alive

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
146dac10a93604a686550631e14eefb9
b4af601ce6d515d9ec124938ce626060e0d43099
bac5bc94c1a95af45522dadbf1639aff31e691fa2314314c6cce1ab1e70bba87

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js

104.21.51.177

200 OK

31 kB

URL HTTP/2
cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js
IP
104.21.51.177:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text, with very long lines (32025), with CRLF line terminators
Size
31 kB (31133 bytes)
Hash
d57aa6628eb1694d8635d1064c7a2725
e92d06d4be3c270bafa50d79a600d68f87d432f5
7b8a8b2fd47ad2d2fe00e579419d379b3af6bf0cf3f27f6c5ce0c65d95d6dd6c

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/js/jquery.min.js HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:33 GMT
content-type: application/javascript
last-modified: Wed, 01 Sep 2021 12:22:37 GMT
etag: W/"612f708d-149a0"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 97273
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PjwhJj22uFIkcdEi4etUWM%2BhvobVphe7Cf8ej8CWJ7%2Fnf6L%2Bp06dzR7Gcvqme%2F9k9rd%2B%2BHxlQuQ6zn2Yuz8BSNaim%2FtpXVKj03KQC6qNjZc0koYyo5sp1y8POfg52rMzcjs%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c78a2ec30b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

exportspring.com/pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=502

173.233.137.44

200 OK

0 B

URL HTTP/1.1
exportspring.com/pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=502
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbls?bv=21.49.3976&tmpl=482&u=https%3A%2F%2Fcdn.sb4you1.com%2Fsb%2Finterstitial%2Fsoftware%2FflashPlayer%2Fmac%2Fmulti%2F1%2Fcss%2Fanimate.css&l=79249&fd=502 HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Cookie: u_pl=16704277; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2722dd66f563bb16a425590a94c099d2=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:33 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css

104.21.51.177

200 OK

1.3 kB

URL HTTP/2
cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css
IP
104.21.51.177:0
ASN
#13335 CLOUDFLARENET

File type
ASCII text
Size
1.3 kB (1341 bytes)
Hash
b0b362d133eb4904706bb0622229b74f
22d89f78efb4c1cf967ac7e28821f4f39df8baf7
79b0f34463059aaa97b3b2f0f3319f64e893a595ce9e300d86fb031cc7fa28c0

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/css/style.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://marshallkruwgamble.blogspot.com
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:33 GMT
content-type: text/css
last-modified: Wed, 01 Sep 2021 12:22:34 GMT
etag: W/"612f708a-11aa"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AhJ842drW4rjRVJUeSjC3v7210mv6IZwoXDlJ7IYHUHo35p%2BskSXyombcvN3%2FgoznlJRUK9uJLcTsWXoK56KA6dDX9WnrfRZozyQ0Xq7UP5%2BdKNzyx6O%2Brdpx4QbTTyJnsU%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c789ded4b506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap

142.250.74.138

200 OK

12 kB

URL HTTP/2
fonts.googleapis.com/css?family=Roboto:300,400,700&display=swap
IP
142.250.74.138:0
ASN
#15169 GOOGLE

File type
data
Size
12 kB (11540 bytes)
Hash
d21e57396a265f441bcc76c55c2a33aa
7efbaf4e164f96f0f47bb8103ff2ebff8142f063
7abb79b0b4637cfe12f620051352d2561c0fee6b48ab7948f6035fffc051d616

HTTP Headers

GET /css?family=Roboto:300,400,700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 30 Nov 2022 15:57:33 GMT
date: Wed, 30 Nov 2022 15:57:33 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

exportspring.com/pixel/sbs?c=1

173.233.137.44

200 OK

0 B

URL HTTP/1.1
exportspring.com/pixel/sbs?c=1
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /pixel/sbs?c=1 HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Cookie: u_pl=16704277; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2722dd66f563bb16a425590a94c099d2=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:33 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range

exportspring.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2B%2Fewiu68ribhJ3V3ITqqtqJmWqu5qqrulJUIgu6B48jHjxZudNskEN4h68iH9M9rIMCDseJAdz8eRBURYWTyIzGQh%2BUPV9Ve9RvPeo97fdEfHh6OHKRb0plaKVetkvPbcqE65zW1q6Ugr8sn%2B6tCqTRu10qT%2FdTO%2FFwK%2BX%2FedLrwq2riuhH%2Fh%2B4Aelc9KIju5XZihkut8Oym2%2FXAvLQb2Gvvn%2F2ToPlnrgvSPyECSf3Lt26wYkGyGJvzor7Hqm0xdeiZ2imTbo8b03kvVE5wnik7FjPHSSvTkb2k4I%2BeQUdLI3dwDd25k6QCQnxPslQJTszWUi6u0eK40URIKIP4C8N4JQI0g6AtNXIfltAjCOpWUk8fUlbXK6cYzSKTohC3fvQOYTsvDrw0jiL88o2S9d1splUicW%2FU4B2R9BdkdI3QGyTQ8yPwDL3oPkP5HK3QtI4p1lqzQkL2bupRxBdkZQYgBqPbjpkh5cx4NLPcT8sETr7Y7vNztRp1pt1Rhj1Spj9VaD13m11ur4cGwqb4AsHYCpAZjZQmq2sC4HMO5H2LUClnuw2YR4r2%2BhxwvkgiC3BDklyCVBnhHkvWKXKxva4jpX1kXBvIfzXi2GOutu012ddUVCttMj8uAsl39%2FewTr4rAUNsOQ80ajU29Uoyho0FpYr7d92q4xv93mIawsIO2pmdVNOSGPvvs4UjkhC5V%2FENEDWHUAJp8CdU%2BD5sNm6IOuDWstH5vJ19YlgjtGp2l3jXZpmekYXBdIswVkG962OiJPzAS1WQjBxot%2Ff%2FNmffHtP8FMgdQUeEveJOiqa8NLOic7l3RuyY3lNJOx3Jw9ezmjmVj4%2FDWxkWvDz5%2B1g89eYlNgOu5fETa7QBMuk64lX5yRnAtzThsmyHfn7aqIVpxdO%2BNM4tILKy%2BfOx%2BnRlgrdTIClbebH4PJCbn%2F4tbsez7z4U1IM4JxBWI3JvOC1Adg6RZsOl78o%2FLkp9%2F3bsFqAqNOOFHqIXfF0ITRyaWSExLeeQxKjBe%2F3b8vePb3DdCogBUnMURi%2FMNfx%2Fxtew1d44FmV5HEBXqmQE8VoGoA6%2B4ZZqkZL%2F5cnRUi5Q0jZbydSBn10XG8Vh6W6kFNtKJWk3EeCcaDZlhtVX0%2F5LzWbIugjcxO2AfvqP8AAAD%2F%2FwEAAP%2F%2FVh69gHoEAAA%3D

173.233.137.44

200 OK

7 B

URL HTTP/1.1
exportspring.com/impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2B%2Fewiu68ribhJ3V3ITqqtqJmWqu5qqrulJUIgu6B48jHjxZudNskEN4h68iH9M9rIMCDseJAdz8eRBURYWTyIzGQh%2BUPV9Ve9RvPeo97fdEfHh6OHKRb0plaKVetkvPbcqE65zW1q6Ugr8sn%2B6tCqTRu10qT%2FdTO%2FFwK%2BX%2FedLrwq2riuhH%2Fh%2B4Aelc9KIju5XZihkut8Oym2%2FXAvLQb2Gvvn%2F2ToPlnrgvSPyECSf3Lt26wYkGyGJvzor7Hqm0xdeiZ2imTbo8b03kvVE5wnik7FjPHSSvTkb2k4I%2BeQUdLI3dwDd25k6QCQnxPslQJTszWUi6u0eK40URIKIP4C8N4JQI0g6AtNXIfltAjCOpWUk8fUlbXK6cYzSKTohC3fvQOYTsvDrw0jiL88o2S9d1splUicW%2FU4B2R9BdkdI3QGyTQ8yPwDL3oPkP5HK3QtI4p1lqzQkL2bupRxBdkZQYgBqPbjpkh5cx4NLPcT8sETr7Y7vNztRp1pt1Rhj1Spj9VaD13m11ur4cGwqb4AsHYCpAZjZQmq2sC4HMO5H2LUClnuw2YR4r2%2BhxwvkgiC3BDklyCVBnhHkvWKXKxva4jpX1kXBvIfzXi2GOutu012ddUVCttMj8uAsl39%2FewTr4rAUNsOQ80ajU29Uoyho0FpYr7d92q4xv93mIawsIO2pmdVNOSGPvvs4UjkhC5V%2FENEDWHUAJp8CdU%2BD5sNm6IOuDWstH5vJ19YlgjtGp2l3jXZpmekYXBdIswVkG962OiJPzAS1WQjBxot%2Ff%2FNmffHtP8FMgdQUeEveJOiqa8NLOic7l3RuyY3lNJOx3Jw9ezmjmVj4%2FDWxkWvDz5%2B1g89eYlNgOu5fETa7QBMuk64lX5yRnAtzThsmyHfn7aqIVpxdO%2BNM4tILKy%2BfOx%2BnRlgrdTIClbebH4PJCbn%2F4tbsez7z4U1IM4JxBWI3JvOC1Adg6RZsOl78o%2FLkp9%2F3bsFqAqNOOFHqIXfF0ITRyaWSExLeeQxKjBe%2F3b8vePb3DdCogBUnMURi%2FMNfx%2Fxtew1d44FmV5HEBXqmQE8VoGoA6%2B4ZZqkZL%2F5cnRUi5Q0jZbydSBn10XG8Vh6W6kFNtKJWk3EeCcaDZlhtVX0%2F5LzWbIugjcxO2AfvqP8AAAD%2F%2FwEAAP%2F%2FVh69gHoEAAA%3D
IP
173.233.137.44:0
ASN
#7979 SERVERS-COM

File type
ASCII text, with no line terminators
Size
7 B (7 bytes)
Hash
132d6af1b46048b45cf86cdee7991d31
eb7007d03d59b65bc6da7e098c4d38fc6dfb6285
ab852e838deccd742a03ca81d4a8d75cf1a00b327db3eaf46bd7da6b6db9384c

HTTP Headers

GET /impr.gif?sid=H4sIAAAAAAAC%2F1RSTWgkRRitXiOInhT%2FUZmTKMhMd8%2B%2Fewiu68ribhJ3V3ITqqtqJmWqu5qqrulJUIgu6B48jHjxZudNskEN4h68iH9M9rIMCDseJAdz8eRBURYWTyIzGQh%2BUPV9Ve9RvPeo97fdEfHh6OHKRb0plaKVetkvPbcqE65zW1q6Ugr8sn%2B6tCqTRu10qT%2FdTO%2FFwK%2BX%2FedLrwq2riuhH%2Fh%2B4Aelc9KIju5XZihkut8Oym2%2FXAvLQb2Gvvn%2F2ToPlnrgvSPyECSf3Lt26wYkGyGJvzor7Hqm0xdeiZ2imTbo8b03kvVE5wnik7FjPHSSvTkb2k4I%2BeQUdLI3dwDd25k6QCQnxPslQJTszWUi6u0eK40URIKIP4C8N4JQI0g6AtNXIfltAjCOpWUk8fUlbXK6cYzSKTohC3fvQOYTsvDrw0jiL88o2S9d1splUicW%2FU4B2R9BdkdI3QGyTQ8yPwDL3oPkP5HK3QtI4p1lqzQkL2bupRxBdkZQYgBqPbjpkh5cx4NLPcT8sETr7Y7vNztRp1pt1Rhj1Spj9VaD13m11ur4cGwqb4AsHYCpAZjZQmq2sC4HMO5H2LUClnuw2YR4r2%2BhxwvkgiC3BDklyCVBnhHkvWKXKxva4jpX1kXBvIfzXi2GOutu012ddUVCttMj8uAsl39%2FewTr4rAUNsOQ80ajU29Uoyho0FpYr7d92q4xv93mIawsIO2pmdVNOSGPvvs4UjkhC5V%2FENEDWHUAJp8CdU%2BD5sNm6IOuDWstH5vJ19YlgjtGp2l3jXZpmekYXBdIswVkG962OiJPzAS1WQjBxot%2Ff%2FNmffHtP8FMgdQUeEveJOiqa8NLOic7l3RuyY3lNJOx3Jw9ezmjmVj4%2FDWxkWvDz5%2B1g89eYlNgOu5fETa7QBMuk64lX5yRnAtzThsmyHfn7aqIVpxdO%2BNM4tILKy%2BfOx%2BnRlgrdTIClbebH4PJCbn%2F4tbsez7z4U1IM4JxBWI3JvOC1Adg6RZsOl78o%2FLkp9%2F3bsFqAqNOOFHqIXfF0ITRyaWSExLeeQxKjBe%2F3b8vePb3DdCogBUnMURi%2FMNfx%2Fxtew1d44FmV5HEBXqmQE8VoGoA6%2B4ZZqkZL%2F5cnRUi5Q0jZbydSBn10XG8Vh6W6kFNtKJWk3EeCcaDZlhtVX0%2F5LzWbIugjcxO2AfvqP8AAAD%2F%2FwEAAP%2F%2FVh69gHoEAAA%3D HTTP/1.1
Host: exportspring.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Cookie: u_pl=16704277; pdhtkv=true; uncs=1; pdhtkv29=true; uncs29=1; slec2722dd66f563bb16a425590a94c099d2=[3760946]
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/1.1 200 OK
Server: nginx/1.19.5
Date: Wed, 30 Nov 2022 15:57:33 GMT
Content-Type: image/gif
Content-Length: 7
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1ba0dbd8ef89de294dfc370875b1b40d
Strict-Transport-Security: max-age=0; includeSubdomains

lh3.googleusercontent.com/blogger_img_proxy/ANbyha2eOuvDEiD9VF6DXdDO7ciJYcUNU7fhNZ0VVOEbknRGus6O-RyFibpvrq9GYMZPPX1VJutOWxgIelvnEgiIeNZGKOWSuAncqiY1FpCHdCvBtni1pXhDyb_Zyu83K68=w300-h168-p-k-no-nu

142.250.74.129

200 OK

18 kB

URL HTTP/2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha2eOuvDEiD9VF6DXdDO7ciJYcUNU7fhNZ0VVOEbknRGus6O-RyFibpvrq9GYMZPPX1VJutOWxgIelvnEgiIeNZGKOWSuAncqiY1FpCHdCvBtni1pXhDyb_Zyu83K68=w300-h168-p-k-no-nu
IP
142.250.74.129:0
ASN
#15169 GOOGLE

File type
JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x168, components 3\012- data
Size
18 kB (17536 bytes)
Hash
863afb86f6b300062b6a88bdcb79d8bc
6401800341ff4c52a01d676ea60c0acc328e6df5
93df3c4eed6d9c85652d16d0b1538a51b1c3307cc03599d06bb789e738c62c0f

HTTP Headers

GET /blogger_img_proxy/ANbyha2eOuvDEiD9VF6DXdDO7ciJYcUNU7fhNZ0VVOEbknRGus6O-RyFibpvrq9GYMZPPX1VJutOWxgIelvnEgiIeNZGKOWSuAncqiY1FpCHdCvBtni1pXhDyb_Zyu83K68=w300-h168-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Thu, 01 Dec 2022 15:57:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 30 Nov 2022 15:57:34 GMT
server: fife
content-length: 17536
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

142.250.74.131

200 OK

472 B

URL HTTP/1.1
ocsp.pki.goog/gts1c3
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
8d5f53eac27302554bb029ae36aa283c
2d71b909d1a1bbe2e81269d0c6200ba807fcd4aa
a4644d46e0e2b270572d06530145486bac01335dada14ccd6079bd9543e710d4

HTTP Headers

POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 30 Nov 2022 15:57:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg

104.21.51.177

200 OK

0 B

URL HTTP/2
cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg
IP
104.21.51.177:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/img/close.svg HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:33 GMT
content-type: image/svg+xml
last-modified: Wed, 01 Sep 2021 12:22:39 GMT
etag: W/"612f708f-4ff"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: HIT
age: 1947
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QfIbrEpdS8ekMoxMefHzNO3wHDjeqokkjjtyBXW6gKlsUSpl6SUC%2BpdXzx2l868TEoXV%2F3WByUJDATiR0IEMUqLIUD9ZGVlLccVP6Ts1QBHGBndLDdIPh4rqjJ4gORDRMow%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c78a2eba0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css

104.21.51.177

200 OK

0 B

URL HTTP/2
cdn.sb4you1.com/sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css
IP
104.21.51.177:0
ASN
#13335 CLOUDFLARENET

File type

Size
0 B (0 bytes)
Hash

HTTP Headers

GET /sb/interstitial/software/flashPlayer/mac/multi/1/css/animate.css HTTP/1.1
Host: cdn.sb4you1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://marshallkruwgamble.blogspot.com
Connection: keep-alive
Referer: https://marshallkruwgamble.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

HTTP/2 200 OK
date: Wed, 30 Nov 2022 15:57:33 GMT
content-type: text/css
last-modified: Wed, 01 Sep 2021 12:22:34 GMT
etag: W/"612f708a-13591"
expires: Thu, 31 Dec 2037 23:55:55 GMT
cache-control: public, max-age=315360000
access-control-allow-origin: *
access-control-expose-headers: Date
cf-cache-status: MISS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=TJ1WI5Uf798i67YyWBqDHCPWDCur%2F2FI4ztUYSHG6BFcM0O5MD%2BVj4mJe48a9PB9nMI48u%2Fu3tI%2BrtfPWBR%2BioMyj4UJmWETrCgiXylNNfW4%2Fvm%2B02t%2BTh0WiP57D4o7nXc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7724c789cecdb506-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (77)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations