r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5ceaca9fd4ad000cb435820812fc69c8
8168397aaf7b572c89a9c83f46c0b65e4ac509f2
9c4e52e7e17158307d752db0bc3d1fbedae4f305cc301fd73b260f73ab796492
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9C4E52E7E17158307D752DB0BC3D1FBEDAE4F305CC301FD73B260F73AB796492"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4792
Expires: Wed, 07 Dec 2022 04:11:01 GMT
Date: Wed, 07 Dec 2022 02:51:09 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash f83c5e33ba42e312ee398848bbb711f5
caa1fd23b1fbbe883292ded04404c1cfd861eb09
106d08fba45f1e13f85b4b5abc456594878494238933e54b6a06e21ed8a52bc9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5346
Cache-Control: max-age=119355
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:09 GMT
Etag: "638f19f6-1d7"
Expires: Thu, 08 Dec 2022 12:00:24 GMT
Last-Modified: Tue, 06 Dec 2022 10:31:18 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0abf10fb7e96c1c98dacf2f013a68b4
acdd839bce85eadc78a8e821e32e00a958d5c0c8
b85d98f8df05431777d96c767ce4c152302ec3f653cdf6e61c8c3fa9574f3255
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B85D98F8DF05431777D96C767CE4C152302EC3F653CDF6E61C8C3FA9574F3255"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11482
Expires: Wed, 07 Dec 2022 06:02:31 GMT
Date: Wed, 07 Dec 2022 02:51:09 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Content-Type, Backoff, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Wed, 07 Dec 2022 02:18:44 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1945
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: UOIq4RuzqB5qKNztVDBFe6wCii1VC0uc2w2e6DijrhrYwp4aMw4Hw8GNr+Q+V0DgQqXg6O9n8h0=
x-amz-request-id: ZQ8288M8R3VKHTRP
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 07 Dec 2022 02:47:20 GMT
age: 229
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 02:51:10 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
aniekelate.blogspot.com/search/label/Brita
200 OK 21 kB URL HTTP/1.1 aniekelate.blogspot.com/search/label/Brita
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (1495)
Hash 57813adb1a6657e699aa8d8c2668d2d5
fac8c218e3f9a1411bdbb32ca0cb547f99a070fe
773afd1e64839b8d86fdf6fded1c4fe707be94883cec24895f4d7ea2a139cb8e
GET /search/label/Brita HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 07 Dec 2022 02:51:10 GMT
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 06 Dec 2022 02:59:21 GMT
ETag: W/"d6853915186be2645ba95d0ee6d5f1e4bb91e1917040ad66c0737c1099e2cf31"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 20664
Server: GSE
ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
200 OK 27 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash 88ed7d5a26ffff39cbae41fa7b2c615d
5ea49f5aeeb49e8abd640da2f6d657fb57cc5acc
52943bd40a595c39f84e23ddd74755daa4d013b55c709de9b312661e59103ab3
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 27266
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 07:56:09 GMT
Expires: Thu, 30 Nov 2023 07:56:09 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 586501
ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
200 OK 20 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
IP
File type ASCII text, with very long lines (39660)
Hash 6ad9e9100f68042a634e403e56e3744a
3d148af6eb9f86b03d5a815f4fb3a49c7b2df356
72bbdea3217793991ab87a6c7cb165d267551810d3d88b5fd2fd489748d04b7a
GET /ajax/libs/jquery/1.3.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 19926
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 20:53:42 GMT
Expires: Wed, 06 Dec 2023 20:53:42 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 21448
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
aniekelate.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 aniekelate.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/search/label/Brita
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 04 Dec 2022 02:11:28 GMT
Expires: Sun, 11 Dec 2022 02:11:28 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 03 Dec 2022 20:56:43 GMT
Content-Type: text/javascript
Age: 261582
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: close
Content-Length: 326
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: close
Content-Length: 326
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: close
Content-Length: 326
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: close
Content-Length: 326
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 21:47:55 GMT
expires: Wed, 06 Dec 2023 21:47:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 21:53:25 GMT
content-type: text/css
age: 18195
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.statcounter.com/counter/counter_xhtml.js
200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Thu, 01 Dec 2022 18:49:39 GMT
ETag: W/"aa70-5eec8aeed8fd5"
Cache-Control: max-age=43200
Expires: Wed, 07 Dec 2022 06:35:43 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 29727
Server: cloudflare
CF-RAY: 7759f53e6899b4f1-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4759d6ca26cf8a070066d71b02fac91d
85695e27b097c8d40ea86439854084fc0b3967d3
d20b9793d654c41c562be52e3d5f3840f7bec0db031bda79a42c93959ff88a63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/all.js
301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/all.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: keep-alive
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 3f844a67fba8889a6b2a6da09b8bdb14
6ba076ed0091144165ae9a850d76a15fa920ee0f
bfff84a114e777161054a146a62fb820f58478e79a586d0259fab07bcbc18d23
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee6bfe50f8e4b9c142f971a55496ac26
8c3fd42aaa7fa3ebdedc4f7b0271b8caae166e64
4582e8e1ada92a279cbc5d82904c7fd27b9d4b95bc06c7a8b3c13168978f0b33
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 07 Dec 2022 02:51:10 GMT
expires: Wed, 07 Dec 2022 02:51:10 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/plusone.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1279)
Hash 327d33b72373a953dc7ddef0c6463b48
2fd9b26cb459ff01c3a1dd3507f1c7484cce6ce4
1f9becca80520826519f7908eff9bc2cdf551f9afc5d2a276f9d3c4a55a0e79c
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Wed, 07 Dec 2022 02:51:10 GMT
expires: Wed, 07 Dec 2022 02:51:10 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "34fae0e5dab49917"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d9eb2870e59b2313c46529a862dd2abc
710d2370fd65b0bb34d0c633497f4494258a94e4
3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 157 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Size 157 kB (156915 bytes)
Hash 64d62574443f9d2148012af05abf60ac
16fc9b9b71eb94dbfdc15da12e9b3f21dfe1636e
c752966435826f865df5163012e3066bd9f0339b1959098323533be261741246
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 156915
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 05:43:30 GMT
expires: Wed, 06 Dec 2023 05:43:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 08:51:54 GMT
content-type: text/javascript
age: 76060
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
200 OK 7.2 kB URL HTTP/1.1 www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (17274)
Hash c5fecf4fa10f3e36fe2658fddd879e62
8956976dbc6f6d2607251f8f9a9b8f2451d69d60
f8f53d7b7c5ae5ead293d505176f642410b237a75e96cab0fa759ad67c20b5ee
GET /samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741 HTTP/1.1
Host: www.samsengfb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4886
Cache-Control: max-age=127170
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 14:10:40 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1957)
Hash c4af61732c993c7e6d405095c3523c9e
88a8f5d88211051c9dc5059ff25437007dca19d2
eeb074b64644e81a842d2ce2a29ef2fd179cc2cfb1c08e291e7ff59e9c84fb5d
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: f1d3b6ba25a30b55f126353eaf850a3d
etag: "afab18cab803db10f6d76ec900fbd3df"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 07 Dec 2022 02:59:53 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: xK9hcyyZPH5tQFCVw1I8ng==
x-fb-debug: NcaIKajRXNhofTU0CgEuQc0So/wCxYX3oiHY3iS061Dx7BNx13xQxJrZE2QXSmuTlvBiIeTXt6k60XiSXWED2g==
content-length: 1686
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 02:51:10 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, ETag, Alert, Expires, Cache-Control, Backoff, Content-Length, Content-Type, Pragma, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Wed, 07 Dec 2022 02:08:58 GMT
cache-control: public,max-age=3600
age: 2532
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
302 Found 216 B URL HTTP/2 sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 39e83bbb13ffce196029a2df35b63b32
7b13d6e23356c2708d0a179a117d242c0e152584
eadf76ac5391f5337c16d17794e8e2a09441670121611336c723b1b699b61958
GET /site/unwanted86/javascript/animatedrecentpost.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 02:51:10 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
location: https://sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 216
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1317136 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
200 OK 2.0 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
IP
File type ASCII text, with very long lines (2149)
Hash a8847b4c51707a70c275ad40f47c497f
9d522afaee3d4093626d474468d20ec51f7bb9e7
acfca2cab05002f318d7678734cb1a7f1437dc226e795b6cad01c45ebb1da3a8
GET /geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: application/javascript
Content-Length: 2036
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Tue, 13-Dec-2022 02:51:10 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Wed, 14 Dec 2022 02:51:10 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FePbVp%2Fz5CizFfeM37SmytwV6dFJf0%2FUlUt2OxV83phB8HI7ib9XD356P7u3M7oi%2BTHs3nmTrXlj6wjFzdO75rIxdPyFZymPvrhCTu9dL9U6nZe5n5HMKx7tff4j%2Fdk%2B"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7759f53e6832b51e-OSL
alt-svc: h2=":443"; ma=60
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1317133 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 08:47:06 GMT
Expires: Tue, 20 Dec 2022 08:47:06 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 65044
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 dbfaae0db03f11cf713bbcbdb25be4a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: P7xN5lm37Ybxrfpg-euuHBzLy9vOXkBpk5eB6SScL6_-rNiwtsoliw==
Vary: Origin
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 31 Dec 2022 22:37:17 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 447232
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6MCfRMQO%2FJaapukQD8hWcq4xTOBmo19f4hQzy5hcl8o3jdnkVHBEpbiPxS0OAenHxNL2KMJc%2BQKZsOmihHf9vTO1%2B1gbylRb8jgiL8QwgUlX0dJ66FKRy9bKMvN7M8Ft"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7759f540a8fab51e-OSL
alt-svc: h2=":443"; ma=60
3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:10 GMT
Connection: close
Content-Length: 326
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
ocsp.digicert.com/
200 OK 471 B IP
Hash d44205a852cedc47da2373b3542f2ca0
884e5d2d7ef372a86e7edc3f8c1dc63a3b4fbe82
f2adb5b3e4b05ad953d43f483497243ae66c148f2af8f39473ddc6fcf2623bb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4886
Cache-Control: max-age=127170
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:10 GMT
Etag: "638f3a4a-1d7"
Expires: Thu, 08 Dec 2022 14:10:40 GMT
Last-Modified: Tue, 06 Dec 2022 12:49:14 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
lh4.ggpht.com/-27G8Hnbj7fo/UGk4ubOddBI/AAAAAAAAn8g/DYrVLOsieQM/w72-h72-p-k-no-nu/du_02.1_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 3.2 kB URL HTTP/1.1 lh4.ggpht.com/-27G8Hnbj7fo/UGk4ubOddBI/AAAAAAAAn8g/DYrVLOsieQM/w72-h72-p-k-no-nu/du_02.1_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 95fc7551791050a9b6049b595d2486d2
44829b786b81b59659a63b79d4c47249fa5d0ede
e267389038db7154547a1eda4e6540aa912612f61aa8336c76d446455db9f4a3
GET /-27G8Hnbj7fo/UGk4ubOddBI/AAAAAAAAn8g/DYrVLOsieQM/w72-h72-p-k-no-nu/du_02.1_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v9fc8"
Expires: Thu, 08 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="du_02.1_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: fife
Content-Length: 3212
X-XSS-Protection: 0
www.blogblog.com/1kt/transparent/white80.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/white80.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 94a1820903fb1f98de19df188a6ad531
599ad7d04fd5b1fa13f334e95240a5a9f4a66583
6e232a3693a281342acc16b293dddeafcf91579f1b52df2cf22303b17c2a0e57
GET /1kt/transparent/white80.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 30 Nov 2022 06:05:01 GMT
Expires: Wed, 07 Dec 2022 06:05:01 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 29 Nov 2022 12:51:31 GMT
Content-Type: image/png
Age: 593169
www.linkwithin.com/pixel.png
200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 07 Dec 2022 02:51:10 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
synad2.nuffnang.com.my/lmn.js
302 Found 316 B URL HTTP/1.1 synad2.nuffnang.com.my/lmn.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0b51d68ad3aa17a93ef618d7479f6dd6
a81c838d670ba94af83ddaf7d9f5bcdc4477373a
fea7caa1b9f39836624981f4498503e8f593e343824e2dd366390cf91c6283fd
GET /lmn.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/lmn.js
Cache-Control: max-age=86400
Expires: Thu, 08 Dec 2022 02:51:10 GMT
Content-Length: 316
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/k.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/k.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2dc70b6c45bf3273ce02cc411906180e
3e706e22af3600df7ca611184af391f70755d256
32a8cb54b2eda028acc7b6cc832de6dcc6f82b4ec288620ec870def3f74b1b6c
GET /k.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/k.js
Cache-Control: max-age=86400
Expires: Thu, 08 Dec 2022 02:51:10 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/j.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/j.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 57577e65e048d98e8b1deceb81e22a3d
c261ab50058de936852f367d6b5555f3f99fc290
1d5c5d863b0436f2c77e48b9568f171f343afd9f293697e1bb0ebc7dbbb1cd99
GET /j.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/j.js
Cache-Control: max-age=86400
Expires: Thu, 08 Dec 2022 02:51:10 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
lh4.ggpht.com/-MwxBKLtetE8/T99sawsBg1I/AAAAAAAAC28/dzF60VBbf3g/527782_10150948930071108_2070389480_n_thumb%25255B1%25255D_thumb%25255B3%25255D.jpg?imgmax=800
200 OK 83 kB URL HTTP/1.1 lh4.ggpht.com/-MwxBKLtetE8/T99sawsBg1I/AAAAAAAAC28/dzF60VBbf3g/527782_10150948930071108_2070389480_n_thumb%25255B1%25255D_thumb%25255B3%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 448x365, components 3\012- data
Hash be12c09d428a807fec1004e546990897
15301362f35d60ba2331c47280151d114d6263e1
d2ade4a99b43ab3ed7c53f4bbb4f14b7b41d1ff6f07abfbd132ce283ef695967
GET /-MwxBKLtetE8/T99sawsBg1I/AAAAAAAAC28/dzF60VBbf3g/527782_10150948930071108_2070389480_n_thumb%25255B1%25255D_thumb%25255B3%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb6f"
Expires: Thu, 08 Dec 2022 02:51:10 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="527782_10150948930071108_2070389480_n_thumb[1]_thumb[3].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: fife
Content-Length: 82881
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 0f7dcaa590e32cfd1c075255188d5f06
d4bb4954fefdb3b59560b54adf500e806e252e39
195795c2511b31519134f5eb4442d8708918ecaff72f8e821a5473ad7c97c448
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5333
Cache-Control: max-age=114272
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:11 GMT
Etag: "638f062a-1d7"
Expires: Thu, 08 Dec 2022 10:35:43 GMT
Last-Modified: Tue, 06 Dec 2022 09:06:50 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 471
www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
200 OK 185 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a2d40695f173ddb461829cb8bf9b3dd8
530a14dc6f0baa0de1f90c5a17c28126e0daa812
9f9fb5396ea8566bb59a43a174a5ec23bf4e04ec9cc18b85b69af22d9206ddd6
GET /1kt/transparent/tabs_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 185
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 18:38:08 GMT
Expires: Tue, 13 Dec 2022 18:38:08 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 05 Dec 2022 21:53:25 GMT
Content-Type: image/png
Age: 29583
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a0d3d4088d1dc75d9eb0cb8e64ff0abc
0c3a5e28b4889916c34c976cba4a559ba4cedc40
00526fe44f936b8862b2b310e25613d7b3c4ccfbd413830ce770cb442e2f31c4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "00526FE44F936B8862B2B310E25613D7B3C4CCFBD413830CE770CB442E2F31C4"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=10729
Expires: Wed, 07 Dec 2022 05:50:00 GMT
Date: Wed, 07 Dec 2022 02:51:11 GMT
Connection: keep-alive
www.blogblog.com/1kt/transparent/header_gradient_shade.png
200 OK 424 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/header_gradient_shade.png
IP
File type PNG image data, 88 x 300, 8-bit colormap, non-interlaced\012- data
Hash 68d74f6988b7bcb8d69e382c1769f6af
956161f38d64d4fbf81cafe0b009339dcdbcb73c
4bf4e9296165fffe3661a6a978e175f37f9ff65e6ac2beb9f40a92e2d96710c3
GET /1kt/transparent/header_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 14:22:59 GMT
Expires: Tue, 13 Dec 2022 14:22:59 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 06 Dec 2022 07:54:23 GMT
Content-Type: image/png
Age: 44892
2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
200 OK 5.6 kB URL HTTP/1.1 2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 14636a2212513eaf52b7cf83887208bd
9da1b8ad1c4e4b820d2132062ba4d34253b015d7
d1a2dd943f651fa66cae21cf538d1608f4656a9ad0ec7b2e1a09d0ad3d16ec4e
GET /-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v67e0"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="chicken-biryani.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 5597
X-XSS-Protection: 0
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
lh3.ggpht.com/-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.2 kB URL HTTP/1.1 lh3.ggpht.com/-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash b26415ff385cb1913f4ae1cd97dc0b9d
bc3fb3b16f369b62640a2b915e58173b7e0162a5
1cb854473c22c281b88bbe7f2e87d0a35a0b54525575a0f4da23492bb1c93bb3
GET /-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v678a"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="image (3)_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3168
X-XSS-Protection: 0
lh4.ggpht.com/-WQsuDToBg1I/T_6wPVH0h1I/AAAAAAAAGZw/Ehkkh8TMkdU/download_thumb%25255B2%25255D_thumb.jpg?imgmax=800
200 OK 33 kB URL HTTP/1.1 lh4.ggpht.com/-WQsuDToBg1I/T_6wPVH0h1I/AAAAAAAAGZw/Ehkkh8TMkdU/download_thumb%25255B2%25255D_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 403x294, components 3\012- data
Hash edcb7649e57a625aba2a55967d00c678
666e1310238a6296bf21eae936e5a9dc5d1157c5
8b393c0b481715c119c833e9ceda962e496e09a780de9ca25c21beb5ec7061ed
GET /-WQsuDToBg1I/T_6wPVH0h1I/AAAAAAAAGZw/Ehkkh8TMkdU/download_thumb%25255B2%25255D_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v199c"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="download_thumb[2]_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 33073
X-XSS-Protection: 0
4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
200 OK 3.7 kB URL HTTP/1.1 4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 60x80, components 3\012- data
Hash c93233f793ed806ff86fdae4d003228c
e9809624b85984532903836e7b80b6ee8588ef52
e056e562bab90ce13baba9feb03d199524cfff4ef5d656d960d565a0d56d80b6
GET /-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v563"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="DSC05641.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3676
X-XSS-Protection: 0
lh4.ggpht.com/-Xbpu8qiZBeg/T_5HUZ9EvFI/AAAAAAAAGRU/c6AjPVrbsgA/220px-Asian_elephant_-_melbourne_zoo_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 29 kB URL HTTP/1.1 lh4.ggpht.com/-Xbpu8qiZBeg/T_5HUZ9EvFI/AAAAAAAAGRU/c6AjPVrbsgA/220px-Asian_elephant_-_melbourne_zoo_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 220x244, components 3\012- data
Hash a6e69f71afd2a75bb5fadbe1102516a9
b49dd7917209fc39d887a8d52a4b865d171cbd6f
2d3a4d7d1558f14212d96370ba1d0e79028bc7c9bef0ed9107ace5b5771e7539
GET /-Xbpu8qiZBeg/T_5HUZ9EvFI/AAAAAAAAGRU/c6AjPVrbsgA/220px-Asian_elephant_-_melbourne_zoo_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1915"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="220px-Asian_elephant_-_melbourne_zoo_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 28751
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 66b1963e3ec998ce48e1106afbdd5763
1d2a506015a0f7c1ee4504b9386524b8eaf11710
dd97bb2e1f330964044185336e9c6469684902d43480f018756ffd6f475b85b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
301 Moved Permanently 0 B URL HTTP/1.1 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Wed, 07 Dec 2022 02:51:11 GMT
Location: https://themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
4.bp.blogspot.com/-cYBCuJzufmA/UGAJpE3IxiI/AAAAAAAAmew/1shrbYQftxI/w72-h72-p-k-no-nu/nakula-base.jpg
200 OK 4.7 kB URL HTTP/1.1 4.bp.blogspot.com/-cYBCuJzufmA/UGAJpE3IxiI/AAAAAAAAmew/1shrbYQftxI/w72-h72-p-k-no-nu/nakula-base.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2df028482d12cfc7d8b71148fba998ba
e68bc2b4e19e1144a5e52b1bf8f8508e085ef635
ed9ea8f93f95c043d2e894f833ed72fcb25965e98fcc15f5aa90f61e7a1474fa
GET /-cYBCuJzufmA/UGAJpE3IxiI/AAAAAAAAmew/1shrbYQftxI/w72-h72-p-k-no-nu/nakula-base.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v99ec"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nakula-base.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 4686
X-XSS-Protection: 0
lh3.ggpht.com/-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 4.2 kB URL HTTP/1.1 lh3.ggpht.com/-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2a1e335091c23d65e85b11379d25e1d9
00c404494f349ea3bd9033644f6a990f1fab8abe
32dbcbcc7be41e6508c5ef3904a74b643dc82b0bbf20f65634cc78f266a13cb2
GET /-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e0e"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="image_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 4196
X-XSS-Protection: 0
3.bp.blogspot.com/-0DdEP65TU-4/UFk6J6psWmI/AAAAAAAAi_s/j7aWpoFfR0s/w72-h72-p-k-no-nu/ne_07.1.jpg
200 OK 3.3 kB URL HTTP/1.1 3.bp.blogspot.com/-0DdEP65TU-4/UFk6J6psWmI/AAAAAAAAi_s/j7aWpoFfR0s/w72-h72-p-k-no-nu/ne_07.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=N 52 TAMIN, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 85e4321ac992f215e3aca937cf1ac437
192c06e0d376cca398a44dce0525fdc182550e7b
f7ad16666f9af8d5edc08fd53b7cf8e5dd4963a3f7e2207c978feb39031555b3
GET /-0DdEP65TU-4/UFk6J6psWmI/AAAAAAAAi_s/j7aWpoFfR0s/w72-h72-p-k-no-nu/ne_07.1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bfb"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ne_07.1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3305
X-XSS-Protection: 0
3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
200 OK 3.1 kB URL HTTP/1.1 3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6e45b7967ba56d5acbb4bc6489d34ae0
df158f16e15c047f963588d11e0ee565a323503a
b46cb83ea3cd77840e3dc1020052e5415699c043add0eb4f1eb0f50863e1f9d2
GET /-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="pakai tudung tapi seksi.jpeg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3079
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Expires: Sun, 04 Dec 2022 06:06:41 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1651c"
Content-Type: image/jpeg
Age: 0
cleverjump.org/hit?z0;s1280*1024*24;fvNQSV18QUJWeZKWqtXTVbbNJpH98y2;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita;hBebelan%20Anie%20Kelate%3A%20Brita;0.7532966056800054
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;fvNQSV18QUJWeZKWqtXTVbbNJpH98y2;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita;hBebelan%20Anie%20Kelate%3A%20Brita;0.7532966056800054
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;fvNQSV18QUJWeZKWqtXTVbbNJpH98y2;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita;hBebelan%20Anie%20Kelate%3A%20Brita;0.7532966056800054 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=YpNGpaU4BFZZlVcN9ai6IFagYV8Zpa; expires=Thu, 07-Dec-2023 02:51:11 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
200 OK 3.0 kB URL HTTP/1.1 3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 618f03401052046c8420cffd4f6ccd9c
4c71f8cc34782da2ad4f5a44b01a68f3a0bc860f
77bde2e7864e9b8a3f6ce3e3d80914879384207989423370c81028f3a776a99e
GET /--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="168437_1802777510716_6075141_a.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2989
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Expires: Wed, 30 Nov 2022 09:34:22 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vef20"
Content-Type: image/jpeg
Age: 0
lh4.ggpht.com/-Ms28n9mlN-4/UAvSv2TteMI/AAAAAAAAIPU/ENk4v3JObwo/Kucing-Menyusukan-Tikus--1_thumb2.jpg?imgmax=800
200 OK 46 kB URL HTTP/1.1 lh4.ggpht.com/-Ms28n9mlN-4/UAvSv2TteMI/AAAAAAAAIPU/ENk4v3JObwo/Kucing-Menyusukan-Tikus--1_thumb2.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 471x279, components 3\012- data
Hash 16914b523fcb864d2832b69c1e75ea4d
6a49c35b063ca3ad2243cede2a9d2778a3b66660
b7fa64447d7d20ba254c2667633f1f5a85800f5a6340035659a444f1433f711a
GET /-Ms28n9mlN-4/UAvSv2TteMI/AAAAAAAAIPU/ENk4v3JObwo/Kucing-Menyusukan-Tikus--1_thumb2.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v20f5"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Kucing-Menyusukan-Tikus--1_thumb2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 45869
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 007f06d0a9f50d66be88b3ddf28ecd8b
214ecccda1994c59b0b4e19f05435cb482148e7f
14e4152570b9c55d6cb83965c52a4eb6048d7df7db6b892c770ab66f4700fb51
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
200 OK 746 B URL HTTP/2 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e4122d87cb9a5f68196feea53f8c15bb
00e6127fd0c2d6dbf19a6bd7b4af50fce0c44dbe
f1c68f26be0dc943e60667b1cfff7aa3706dcf91614c1ae9ade2d15250fa11bc
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 746
date: Wed, 07 Dec 2022 02:51:11 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_10_7.webp"
expires: Thu, 07 Dec 2023 02:51:11 GMT
server: photobucket
x-amzn-trace-id: Root=1-638fff9f-14676ecf0040cb3f04cd5ad3
x-request-id: Er2cMtRHkIy-AT0N7nKhW
x-cache: Miss from cloudfront
via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: GLapiOW8VwQxRXvu8_EhpACPRiyBdNZOjYYDES5Uc61YrI24ruNwJw==
vary: Accept, Origin
X-Firefox-Spdy: h2
1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
200 OK 3.3 kB URL HTTP/1.1 1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e214dcb520106f80f45216102370368a
ee450ee79d7a8ebce5f4d4819d6e4583d474b0ca
1663f0d5743e44b72949f17bd51454e370ef70d984a2f8019fa9edf3de733cfb
GET /-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ve4d"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3326
X-XSS-Protection: 0
lh5.ggpht.com/-z9q7R6gtRkM/UAxGtzc1wWI/AAAAAAAAISU/UQy5ffyst6w/lu_06.1_thumb%25255B1%25255D_thumb.jpg?imgmax=800
200 OK 33 kB URL HTTP/1.1 lh5.ggpht.com/-z9q7R6gtRkM/UAxGtzc1wWI/AAAAAAAAISU/UQy5ffyst6w/lu_06.1_thumb%25255B1%25255D_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 356x209, components 3\012- data
Hash 4b930571188b5089ee2f9e5c20d791d7
0a856607cf212c7ac6e70a4a9383a00843b7db17
e276df3e43bce30b97a4a26023b38942a7787473b8e3a3133377a5f3af03b1c1
GET /-z9q7R6gtRkM/UAxGtzc1wWI/AAAAAAAAISU/UQy5ffyst6w/lu_06.1_thumb%25255B1%25255D_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2125"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="lu_06.1_thumb[1]_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 33102
X-XSS-Protection: 0
4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
200 OK 84 kB URL HTTP/1.1 4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1090x290, components 3\012- data
Hash 7a24f6e479883b65a999dc1923608118
a2cbff8e7b6cd2176dd629823d34f7ab0d118349
b0d35cd8c5fc6cbb3ee76e7cbfd5f4aabb6a374c7ce5cff14dad96d587bc70c2
GET /-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va06"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ert.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 83873
X-XSS-Protection: 0
lh5.ggpht.com/-1pdam2Pb38Q/UWR9auN6A6I/AAAAAAABga0/2mLmf6c93T8/w72-h72-p-k-no-nu/amina1_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.2 kB URL HTTP/1.1 lh5.ggpht.com/-1pdam2Pb38Q/UWR9auN6A6I/AAAAAAABga0/2mLmf6c93T8/w72-h72-p-k-no-nu/amina1_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 88712e937282adeb2bce385ac3907971
883f64dece702ad26821a960c3ae217a0b2a0dff
3a13d5e2ff531020f56582562980dc039788a94e71d917066c2decb455973fb8
GET /-1pdam2Pb38Q/UWR9auN6A6I/AAAAAAABga0/2mLmf6c93T8/w72-h72-p-k-no-nu/amina1_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v181ae"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="amina1_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3162
X-XSS-Protection: 0
26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7crdjJhxWx3lwz0K7Vh879PzbZ9FrXpY-WTbhjB-s8eUmBbrx6rkpI6aUVVr1GdbPwLAvgWiG0YJn1pnHD3A4_CYo6OSOVJ-s7suFkvLh_dF5wsgD7xZ_dJQsvQ9TMpdST5cT-6nnYZzNZXHHDfZc5piznRweUAWLz3TjPdRWc190cUrxjwfSuIpL7VDPdY83dfyKnFOWkh8PsHjSHmQ3GbvbBnOsJyhCjuB7KbK181WoaPCyWo%3D&attredirects=0
200 OK 1.4 kB URL HTTP/2 26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7crdjJhxWx3lwz0K7Vh879PzbZ9FrXpY-WTbhjB-s8eUmBbrx6rkpI6aUVVr1GdbPwLAvgWiG0YJn1pnHD3A4_CYo6OSOVJ-s7suFkvLh_dF5wsgD7xZ_dJQsvQ9TMpdST5cT-6nnYZzNZXHHDfZc5piznRweUAWLz3TjPdRWc190cUrxjwfSuIpL7VDPdY83dfyKnFOWkh8PsHjSHmQ3GbvbBnOsJyhCjuB7KbK181WoaPCyWo%3D&attredirects=0
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2566), with CRLF line terminators
Hash 31e1c67012a965c0946f9b1a57e37522
3e4f432c76e07fb51f7d172c646b1e51a9e6dbd5
a2c830719561d83caa19ddab4ad05324909ed460ae65366eee128260a5df41b9
GET /site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7crdjJhxWx3lwz0K7Vh879PzbZ9FrXpY-WTbhjB-s8eUmBbrx6rkpI6aUVVr1GdbPwLAvgWiG0YJn1pnHD3A4_CYo6OSOVJ-s7suFkvLh_dF5wsgD7xZ_dJQsvQ9TMpdST5cT-6nnYZzNZXHHDfZc5piznRweUAWLz3TjPdRWc190cUrxjwfSuIpL7VDPdY83dfyKnFOWkh8PsHjSHmQ3GbvbBnOsJyhCjuB7KbK181WoaPCyWo%3D&attredirects=0 HTTP/1.1
Host: 26ed6613-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 02:51:11 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
content-disposition: attachment; filename="animatedrecentpost.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 1394
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg
200 OK 3.9 kB URL HTTP/1.1 1.bp.blogspot.com/-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 34c63dbbea4d8c5625c675a51878025e
ca332c10a77824cb4f9b980e1863f1e8ead25c66
c3fb872fed3aa2d07afa0f848132f411f013e043658e944f48f465566b8e39e8
GET /-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v86e1"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="du_05.1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3935
X-XSS-Protection: 0
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 06f45b05e37d1765b41333e9b7d1427e
c200e607faf4e5fcfaaad18057c68140499e2db8
8c6266d025ee5b9610e996c42961c5f96c6068af322c1336e0289cf6460f8372
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: FOphOvh72luEhO1ldyan1DbQ5jz1SXGRKlwk8X1KeESp8hwd3Uko8w==
lh6.ggpht.com/-z7kYGuK1eys/UbT9UbwgF0I/AAAAAAABr8Q/GXx37tpAuGo/w72-h72-p-k-no-nu/5944_138130136369989_352559026_n_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.7 kB URL HTTP/1.1 lh6.ggpht.com/-z7kYGuK1eys/UbT9UbwgF0I/AAAAAAABr8Q/GXx37tpAuGo/w72-h72-p-k-no-nu/5944_138130136369989_352559026_n_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash da6b49f8288b98a86dbace92a5fb6f9d
6ba5006fff301c80551ee3420cf865aa068db448
62dd4cfc06d5ee9145b80f055552b4c87404b48584e3d36bbd9da44a5521f96d
GET /-z7kYGuK1eys/UbT9UbwgF0I/AAAAAAABr8Q/GXx37tpAuGo/w72-h72-p-k-no-nu/5944_138130136369989_352559026_n_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1afc5"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="5944_138130136369989_352559026_n_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3708
X-XSS-Protection: 0
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash d2e5703dfd970bf47421f921de37caa6
eb3b8c11d15bc8c5c1fecafb351bfb7c4e32d662
6a5df3207d78258c05548ce5bd8805370c9afc6ae4681f2dd2420ad35ef250bb
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Cookie: _cjuh=YpNGpaU4BFZZlVcN9ai6IFagYV8Zpa
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 66b1963e3ec998ce48e1106afbdd5763
1d2a506015a0f7c1ee4504b9386524b8eaf11710
dd97bb2e1f330964044185336e9c6469684902d43480f018756ffd6f475b85b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
200 OK 168 kB URL HTTP/2 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x2699, components 3\012- data
Size 168 kB (168013 bytes)
Hash 7ee3746ae0a6700164cb1fd3ca54483a
ffeb6d4e14ff136150531dbade87668b2db4563e
e74fa1a411c6eeeb0d1d415a04e2fc5dde7dcd42503b8c105e4754dbb117de61
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Thu, 08 Dec 2022 02:51:11 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:11 GMT
server: fife
content-length: 168013
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 9e83e23c9303fc167d2b23bceba4f304
cc712e67770a00bcc9901a6881f5b1cd343cf054
16378fd60ce4fb8ead3bbc313e6ae0166f68d532d40c586f8c71cb6cd1a91f50
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh4.ggpht.com/-I9DcpZCdTWQ/UY_6p2RRVTI/AAAAAAABlXc/JhaixOJlHDs/w72-h72-p-k-no-nu/train_fight_1jpg1349760353585-data_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.9 kB URL HTTP/1.1 lh4.ggpht.com/-I9DcpZCdTWQ/UY_6p2RRVTI/AAAAAAABlXc/JhaixOJlHDs/w72-h72-p-k-no-nu/train_fight_1jpg1349760353585-data_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash cd53e9ab8438ae1834b03d6f58f9a633
2b1593c676dccf2ec67efd38cd1963a0740481b4
122a116b6b298d2de6ea0f93a6f213e37e7131d4e90c05e52cc01b5c964fc8e8
GET /-I9DcpZCdTWQ/UY_6p2RRVTI/AAAAAAABlXc/JhaixOJlHDs/w72-h72-p-k-no-nu/train_fight_1jpg1349760353585-data_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19577"
Expires: Thu, 08 Dec 2022 02:51:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="train_fight_1jpg1349760353585-data_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: fife
Content-Length: 3875
X-XSS-Protection: 0
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: W8UW683XK9B0fL7Q+PO14Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: aRCKviGcuZT5OSLfTZDZTvqhAL4=
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 07 Dec 2022 02:51:11 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
d2b9l3u54v5v39.cloudfront.net/css/default.css
200 OK 1.5 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/default.css
IP
File type ASCII text, with CRLF line terminators
Hash 8ea20baef891abad5a169261301f1b0d
b983c5b36da773d38fc2d9d56fb1e462080ac0f8
27306e4a14ab04d39e59d9d73d6fac0fca90bbab3da5d9358c0000b9119c90af
GET /css/default.css HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Last-Modified: Mon, 21 Sep 2015 08:25:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Tue, 06 Dec 2022 07:36:58 GMT
ETag: "70d0ec1947f4d01:0"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: IbR6JqZiragLa7H1rTtk3eZdQLziHqJXB7pe-uDtIZTlupcGk7kMdw==
Age: 69253
d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
200 OK 2.9 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
IP
File type ASCII text, with CRLF line terminators
Hash 4168b5a2517e8d07be159017f22759e7
ade414bcff8b8babb58bf6369fdbc7b8e2cf67b6
816427321da11d1632fac7711648e373bcbc01cf8b7b372d7b9178827906430a
GET /css/88x726.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2866
Connection: keep-alive
Date: Tue, 06 Dec 2022 04:11:55 GMT
Last-Modified: Thu, 18 Jan 2018 16:19:40 GMT
Accept-Ranges: bytes
ETag: "8ae83247890d31:0"
Server: Microsoft-IIS/10.0
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: vs93e7sXZdQ2FoNL2nuOhoJIUTDRQyKE6CExbwF_LbrZFqroHTdJNQ==
Age: 81556
d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
200 OK 1.2 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
IP
File type ASCII text, with CRLF line terminators
Hash 263303c015aaddbd3c417327b3b50823
c5c4f7ec9f5c1a2cfafad6b5810ed0da2080d3cb
871bcbf1631eba9d4218fddb8dd96a075fdf33725e1ff991b345808c15c66617
GET /activejs/bdv_fsthd.js HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1199
Connection: keep-alive
Last-Modified: Thu, 14 Jan 2021 11:27:17 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Wed, 07 Dec 2022 02:51:11 GMT
ETag: "977ef3668ead61:0"
X-Cache: Hit from cloudfront
Via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: qsc0ndmiisVa4cSWgjHB-JPx1gwR2uYUM16upVO_79fshqotobG1YQ==
Age: 67
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:11 GMT
Connection: close
Content-Length: 326
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash faec2f9173b0242b292ef70810b1780c
4702d9da9ad091fada1e910a1d9c847b24d8607c
f4026e25ba8717358654bd7659b20330793b7d4770b73a99ef4ea48c1f45fda7
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Wed, 07 Dec 2022 02:51:10 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 6OTpSVckLDGJLqY3DBUUWvLcNL0dlfaLR079rTIen72O7tudQupwTQ==
fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24236, version 1.0\012- data
Hash 0caf6947dd9d590934bb7a28548893b9
e7d4be7452b4c60635726fa7578e5b6aecdf185d
5c2d691a9e7ca08b1fccf8dae98e55b58eca6673080c7cb8a2a5972ef71a97d4
GET /s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 24236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 18:39:08 GMT
Expires: Wed, 06 Dec 2023 18:39:08 GMT
Cache-Control: public, max-age=31536000
Age: 29523
Last-Modified: Tue, 19 Apr 2022 18:58:30 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
200 OK 30 kB URL HTTP/1.1 fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29868, version 1.0\012- data
Hash 8b26cc331e323dda95ea6d0dcf4d7542
1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9
2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 01 Dec 2022 13:02:00 GMT
Expires: Fri, 01 Dec 2023 13:02:00 GMT
Cache-Control: public, max-age=31536000
Age: 481751
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Wed, 07 Dec 2022 02:51:11 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
www.blogger.com/img/logo-16.png
200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 07:09:35 GMT
Expires: Tue, 13 Dec 2022 07:09:35 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 05 Dec 2022 06:50:28 GMT
Content-Type: image/png
Age: 70896
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 82cd1ce897294f8b6283690009066d4d
239c6d29c3574a2b4d591729f0ec5691875f1649
9141e07fa8daf3d95d50d43ad596b80e671693a4dd268f39cc83456cd07e93af
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
302 Found 474 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (514)
Hash 92113504424f142157dc47acfce9bb2d
a6943d6e912b08f1344c224450d544664d45f7d7
7e436bbe10d615a4cd8480242d2d440078014ca2c037e24a3c7b7730e3b3f09d
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 07 Dec 2022 02:51:12 GMT
location: https://www.blogger.com/followers.g?blogID=1412073176525199628&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&origin=http%3A%2F%2Faniekelate.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-7rYgjuGjUpiuyba3OCIeAA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 474
server: GSE
set-cookie: __Host-GAPS=1:84LIR3dLdTwU2l82CIMRNnAtcOjIGQ:NzKMor1cwxC7Hdeb;Path=/;Expires=Fri, 06-Dec-2024 02:51:12 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 13 kB URL HTTP/1.1 aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
IP
File type Unicode text, UTF-8 text, with very long lines (55864)
Hash b1d038d27298eeac213d029dab9500d6
bcd970c226ad9ecabd5568af9c3778372cf60e1a
40d110c3247ddc74bf104be31d8059b31ad0288c16d81555287b95611632c6a8
GET /feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/search/label/Brita
Cookie: cj_uid=YpNGpaU4BFZZlVcN9ai6IFagYV8Zpa
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"d4b759423781ce61ef34fb72b425361c3c1f2b195ac55052957464bf2cd698e3"
Date: Wed, 07 Dec 2022 02:51:11 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Tue, 06 Dec 2022 02:59:21 GMT
Content-Encoding: gzip
Content-Length: 12739
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8720
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8720
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3120
Expires: Wed, 07 Dec 2022 03:43:12 GMT
Date: Wed, 07 Dec 2022 02:51:12 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1ab1615b2c8cc26b12fc0cf41734ff07
a7d54b3709ce75a20210e20013e6f06b0aa88e2d
22b22118173565879d7c4a2d54a3546aeab6a4a30e69268b294a98019fbd6ba1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "22B22118173565879D7C4A2D54A3546AEAB6A4A30E69268B294A98019FBD6BA1"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8720
Expires: Wed, 07 Dec 2022 05:16:32 GMT
Date: Wed, 07 Dec 2022 02:51:12 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a7ee62c5e846e8ad4808f4724f15146d
6d55b299f906908309f91eaf0a720ad65866db04
0d8f51d6f7f3bad4bb9d9c3000999739147f6dd718b290b0dca71a4cba85cb38
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F80a12c85-454b-4e03-bf75-3fa8228659c0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6846
x-amzn-requestid: 53452103-6559-460c-ac40-4685e6816aa4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cdGx4E-mIAMFatg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638851a5-5327ec9a2f247cc91654df80;Sampled=0
x-amzn-remapped-date: Thu, 01 Dec 2022 07:03:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: Znjnq24wuXoi43Bfc9aPdcUHhMh-a00hSCXUHFpHq3sTtQQoUYe6Uw==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 1b74ccf4cb51eacf97a0e6d60ae46a3e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:29:49 GMT
age: 69683
etag: "6d55b299f906908309f91eaf0a720ad65866db04"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b89a7fe1080499e4f7171f962b57fec4
62ef59be034071e667e3476ea0740077c86778c1
e17432ce6af0006ba36fd43e13c56c1bd1dd9b1d1bc250309bc2731ac8f52abb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F084354d3-0d22-4203-844f-c2f6ab2af36d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8906
x-amzn-requestid: 453c8d4f-205d-46ac-8d24-1c9849d71419
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvmAyEMnoAMFZwQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb6d1-7b5051335073a5d2339e02e1;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:40:33 GMT
x-amz-cf-pop: SFO5-P2, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 2LpJmaGp8UzaZHqa9WtCTvFq0oQYOVNAdKBdYHURf2d2v5fh7j44uQ==
via: 1.1 e124ba8d7ba1d81e2fdc59ac89f11b70.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:55:06 GMT
age: 17766
etag: "62ef59be034071e667e3476ea0740077c86778c1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 47 kB URL HTTP/1.1 lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 468x286, components 3\012- data
Hash 8c8b367b666dd9271f929bc40472ed33
662c9d50ed2149d1fb754451af9bf316debb408c
270a1383263a1d1198dab15e686efdb1f391ff5a4e714d9cc5bc9860bd0a88a9
GET /-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d588"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Christian Couple_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 46864
X-XSS-Protection: 0
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd933687b-86e0-407a-9bff-2debb09d5167.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd933687b-86e0-407a-9bff-2debb09d5167.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 550ee57c325ce8d4892400deb24141d3
acece1761a7d4d3926500726c19d528bb204ef4c
7cc68e966362916947e7d6e24d3c001c64298fec2438a97538765d801fa7c92c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd933687b-86e0-407a-9bff-2debb09d5167.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10362
x-amzn-requestid: 7fdd2011-e283-467e-9f04-741946a834ea
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cpl_1EsooAMFhvQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d5065-0cddad1919d984065bd0b03e;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 01:59:01 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WtZWFmfVSXYRQlYwpBxj8JG_WC91ik_p68HjX7-wCfYb0624CvcBSA==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 21:58:02 GMT
age: 71600
etag: "acece1761a7d4d3926500726c19d528bb204ef4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
200 OK 6.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fb1ea0161d261518c99909aff49e6f58
c3b915cb579b651db25442fea0bbedd0d292c0fc
d877a21abfd883a368da0136c4e56d7f590fa9e9ea09dec3675823211fe56385
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1e6c8e9d-aef1-4772-8747-82ef7e4ceeb1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6110
x-amzn-requestid: 2ebf542a-dacc-472a-81c0-0c69cb1ec143
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ctEQAH2doAMFljA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638eb3ff-7173ff7941b57fa163e3cc6b;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 03:16:15 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5fxuPjC35VBDaymSCPY_iBxDnQY4CFHgolHSmnDhCRUjzw5UzY7ovA==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 04:12:54 GMT
etag: "c3b915cb579b651db25442fea0bbedd0d292c0fc"
content-type: image/jpeg
age: 81498
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b92721cbe24623f1713a5248d6a7c1b2
3628390c62642dcc375b28f58c9b48180c4abd73
37d0451c03bc7cf0253aba6d3204cbf38502692a0fbc751a3ead01b07e9a65d6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc501a87-1b50-43f3-8031-2c93f724dc91.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9613
x-amzn-requestid: 3542fd4f-74e3-450b-b7fc-04034d680bf4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cslIEEDtIAMFfuw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e8233-40eaebed627d374d0910e456;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 23:43:47 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2aI7z8gOkQiNDlj2tbsoWibfupjl25ZjoO_QRbfmXQKwO-yF455yXg==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 07:18:37 GMT
age: 70355
etag: "3628390c62642dcc375b28f58c9b48180c4abd73"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0a317faf49d8e057d1da40f9441b6c30
f01497a3eef693b70b18885156f63c9c7305ed7e
5687e273eefa9ba3733fabe234e52bc7db87b4ec6244d12077c5816ae7961576
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F849e6cc4-2b6a-4e78-ba2e-d46bfbadd6ba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12259
x-amzn-requestid: db1b424e-af8a-4a6f-92dc-27ccf3256d25
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: coKPCHc9oAMFygg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638cbd93-56c293d73368cab66819d31e;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 15:32:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 1go6MAGUUThlH59lQ8FRciYwPrzYJbcTKlNPmzqxNWynDV7SHrwmTw==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Tue, 06 Dec 2022 05:47:40 GMT
age: 75812
etag: "f01497a3eef693b70b18885156f63c9c7305ed7e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 41 kB URL HTTP/1.1 lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 433x363, components 3\012- data
Hash aeefa145a6e70802e3bbcd8046cb236a
276ba20b8b260a80dca3fc5f7d62abad4eb190cf
6d9e5016c72e316e6bd5cd94d6c8cfc78efd97af21658798472595e0558157a1
GET /-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d504"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="gambar hantu pocong dirakam di jambatan ke-2 pulau pinang_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 41011
X-XSS-Protection: 0
lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 32 kB URL HTTP/1.1 lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 425x320, components 3\012- data
Hash 119f351890394c0f1041d4fc747a01e0
7e893cc7a2c4b83e7bf3d409f846d71f41fed767
3d3dcf2b1422a31d993acf2b88dec84c4135f9f914e9a5b6c7dae36073a26de3
GET /-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d718"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="9bulan_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 31790
X-XSS-Protection: 0
lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 52 kB URL HTTP/1.1 lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 464x286, components 3\012- data
Hash 8d6617a765dee2343b2d3b58a92c694a
39c90e0129e4fd9b1c85c5058e7613c31e01a23d
1f1d7b736b41372bac73cf4f539128ee4f41623d9d01294da652da960a75a84f
GET /-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d55a"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="rezeki_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 51712
X-XSS-Protection: 0
lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 43 kB URL HTTP/1.1 lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 433x317, components 3\012- data
Hash 4e0eccca6c1363c6c9be1b5ea6daa504
f411306ed5188318a7e3b273ec1fa07d75c5842f
c0c764ea98b2d5f2b1b170e91e3fb9ad527b5ff7ef4fa0e333545ccb22e0f744
GET /-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d718"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MAS-A380_b680x498-565x413_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 42551
X-XSS-Protection: 0
lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 48 kB URL HTTP/1.1 lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 445x331, components 3\012- data
Hash 3c6fb0aee9c2b270d6a6e620d9e36124
a13a333cb2aae8171d4eddd5ebb428b40f4445e8
e18e53045ce465764d7fd99b9129802438a179c29ec5782d25f9b9c7eee453c2
GET /-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d718"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="2_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 48323
X-XSS-Protection: 0
lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 22 kB URL HTTP/1.1 lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 324x363, components 3\012- data
Hash 18e3f663057884d446438fce1800040b
7bcf057ae9454035200992f755e1bae4c8d6d1f3
dc760a9a2722822e5128231bccdf98296c54c3617be270a5a8ae5d95e30e9b00
GET /-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d718"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sutinah_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 21666
X-XSS-Protection: 0
lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 76 kB URL HTTP/1.1 lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 489x510, components 3\012- data
Hash 4f497ac6a23544e505c1fc41e17e6e7b
7c399952a86aeb665b6d0af9b3b764b1d80bf79e
77bdb2fbd799acce5d5073389d498243ee0782be2b5ce71291c372a2611a11c4
GET /-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d718"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="tentera wanita korea utara 3_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 75647
X-XSS-Protection: 0
lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 53 kB URL HTTP/1.1 lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 442x332, components 3\012- data
Hash 0a8f99119a26e9bedb182fa08de6b6f0
bfccfcad5ebea291ba520d449d12cef4f70fa5cb
acee2b6ec3bf02b54a0f3bc25115a4f9082dc7976d028857405a0fc45aef89ff
GET /-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4f6"
Expires: Thu, 08 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IMG_20130924_092759_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 07 Dec 2022 02:51:12 GMT
Server: fife
Content-Length: 52618
X-XSS-Protection: 0
lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 26 kB URL HTTP/1.1 lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 431x289, components 3\012- data
Hash 59f748284a10a2d6d7829c76ab148ff6
43a6801874123746b8deb8d186819a23c25ad1a1
8093677859948505dd22513f631a4196f3bcac7f2fcc3cb7a540674cc593e240
GET /-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Gao-Huayun-565x376_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 26339
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 02:51:12 GMT
Expires: Thu, 01 Dec 2022 03:41:58 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d515"
Content-Type: image/jpeg
Age: 0
lh3.googleusercontent.com/a-/AD5-WClEBNqoBMCllp51GuaYKCuK9gX3Rv7prslYDZHPSw=s45-c
200 OK 2.1 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WClEBNqoBMCllp51GuaYKCuK9gX3Rv7prslYDZHPSw=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2fd8fef45c79064212d50cf135af5392
6e6f63502b90c258684c22816a8cac9612ed096a
00176fefafbe8c28d9002f52ba8af94cc8973b1c4c4eb14164299b5d171058c3
GET /a-/AD5-WClEBNqoBMCllp51GuaYKCuK9gX3Rv7prslYDZHPSw=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2113
x-xss-protection: 0
date: Wed, 07 Dec 2022 00:36:45 GMT
expires: Thu, 08 Dec 2022 00:36:45 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1285"
content-type: image/jpeg
age: 8067
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d2b9l3u54v5v39.cloudfront.net/css/248x298.css?cbst=2
200 OK 2.8 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/248x298.css?cbst=2
IP
File type ASCII text, with CRLF line terminators
Hash f020440d7f52ee37d70575b0cd5e5b24
82e5372b0edc7d3f383460166f8e0f1e6280aa81
a2df6be8c0eb6d9e62a747d71755fdb0251668c571c984d040d7d6108ffaa5ef
GET /css/248x298.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2817
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:20:30 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Wed, 07 Dec 2022 01:09:20 GMT
ETag: "183bf427890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 ab09332bca1a3bd382d2e408f65b98d2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: hRVi5fj0xidj_OkVPE2irNCLtKzXV0XAjeJ47iOoztPzxYKnYvRjIQ==
Age: 8263
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c
200 OK 2.3 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 58bc498fa916d7a72d1ea6e06d248f64
b3852656d68829ae2d8428db8ae4717b0c4b0399
be198d54609961e3b6073376518d11c221b70256977810598d49fa6129c0bc78
GET /a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2315
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:12 GMT
expires: Tue, 06 Dec 2022 23:27:02 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8298"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
200 OK 1.6 kB URL HTTP/2 4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash b93f7dc0cd53989a2c79192d7168b731
692f76c3763bfe76d5b851092c648920e141f362
d639e67f744d24488abb8d54c479c2ff9aa43ce74bf5602d6874683f496fef5a
GET /-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1628
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:12 GMT
expires: Wed, 30 Nov 2022 23:50:39 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1027"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
200 OK 1.8 kB URL HTTP/2 4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 628ac0588bdb98eb2dc69447bc81c3da
c768029c705d42b6b0fa00255e51435f3eb6abb8
40526f8672d1c629147c5b34d6b026fc0a554dd0ac1a4ce04cd8c531e9f5d885
GET /-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1825
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:12 GMT
expires: Tue, 29 Nov 2022 09:13:42 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14f0"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
200 OK 1.7 kB URL HTTP/2 2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 82895e004d3dd1488c1854bd003596a4
53bdd437bd9706bdecbb7190a54bfcc99f285f1c
77994df50cc1dc7234716e49ce3662783bb16f984c9b16ade3282b607c458af8
GET /-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v712"
expires: Thu, 08 Dec 2022 02:51:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="hukhuk.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:12 GMT
server: fife
content-length: 1710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
204 No Content 0 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=648088&boxtag=sblqaq&sec=form HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 204 No Content
Server: nginx
Date: Wed, 07 Dec 2022 02:51:12 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Thu, 07 Dec 2023 02:51:12 GMT
Cache-Control: public, max-age=31536000
X-Cache: MISS
3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
200 OK 1.9 kB URL HTTP/2 3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 48bba68daff578049c43043c87f3b208
76da41ebbc523e223a7191d5cfb9631a7678e433
e264232ba3a862f8eb1465170521e15c55a9879896379c406e7edb405d0f0393
GET /-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="83406512_1293299467522094_3600008267150917632_o.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1915
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:12 GMT
expires: Mon, 28 Nov 2022 11:01:01 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2a99"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
200 OK 653 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d0d05a23cb23fe35908361694e15b565
d14818ca4dc04d998081b92c3975ff6e9f6dcdea
1fe598dd28104053751c17c7371ef1e42ec25c08b513993cbc93a4f6b4b9c716
GET /box/?boxid=648088&boxtag=sblqaq&sec=main HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Dec 2022 02:51:12 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 17 Nov 2004 05:00:00 GMT
Last-Modified: Tue, 07 Dec 2021 02:51:12 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Cache: MISS
Content-Encoding: gzip
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ce278e6fa3d34e3cc75a5ef879018ba5
18bb58a1d5c6057dc635664334edcddca3d085b9
6852446f2900885082395b9cb669fa0f6a4116f919493a1827119bb8c9025e6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:12 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/p/AF1QipMS3lEyzaQm1loXEhkaONmZPaLbcY7X3iY5o-BS=s45-c?key=CJGznqm14PC39QE
200 OK 4.6 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipMS3lEyzaQm1loXEhkaONmZPaLbcY7X3iY5o-BS=s45-c?key=CJGznqm14PC39QE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 9dea05825449d71f4dc5230a0e88d4e4
2f5f9db4e1714247e22e474f44a22d0a541d7dd5
17b0d848ef79b73e4f7cd0da3251ea683ac983743ba790937ad0811ecdedc195
GET /p/AF1QipMS3lEyzaQm1loXEhkaONmZPaLbcY7X3iY5o-BS=s45-c?key=CJGznqm14PC39QE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1d65"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:12 GMT
server: fife
content-length: 4557
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/AD5-WCnaHyw8XgsuG98pvPeyaLMU9M6U7xbZLuif7UsQRg=s45-c
200 OK 2.2 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WCnaHyw8XgsuG98pvPeyaLMU9M6U7xbZLuif7UsQRg=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 1c6ca07d1d26802eda115af801564128
a652ca65b5d97aeb797dbb0c4f41ea3fc5f03cf2
7aab7fd384249327091477051e6a11a5df2a338a6fc32e0d885ec80e9c9b15f5
GET /a-/AD5-WCnaHyw8XgsuG98pvPeyaLMU9M6U7xbZLuif7UsQRg=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v25ff"
expires: Thu, 08 Dec 2022 02:51:12 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:12 GMT
server: fife
content-length: 2190
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:12 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNUw0Ykv-aCNsycPUPSiw6oIOe-6YHIwNSWy-Mn=s45-c?key=CKbxpKm88r3VBg
200 OK 4.7 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNUw0Ykv-aCNsycPUPSiw6oIOe-6YHIwNSWy-Mn=s45-c?key=CKbxpKm88r3VBg
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 84ae07443559963ff96723f2e98c7f95
00060d068d9da633e9138201f603f8c789412906
ca0ce5aed5727a6a7de9adb4565b7069a2365da92d7821d3768642130ac16276
GET /p/AF1QipNUw0Ykv-aCNsycPUPSiw6oIOe-6YHIwNSWy-Mn=s45-c?key=CKbxpKm88r3VBg HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v69c"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4675
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipPk1sRABlGFRUkk5u98N0YIeMuOhCCxLXldTFcX=s45-c?key=CPadz_e26bCstwE
200 OK 4.7 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipPk1sRABlGFRUkk5u98N0YIeMuOhCCxLXldTFcX=s45-c?key=CPadz_e26bCstwE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash a1fdd393d7a5b3c87af78140f8ee5c8d
61de494a6df6cc285647e4d56b6bdabbb0253564
dcacc23a80e6851c8eb60aebefa16fd1dd4c76662e1a725a7379f684b2b5f1ff
GET /p/AF1QipPk1sRABlGFRUkk5u98N0YIeMuOhCCxLXldTFcX=s45-c?key=CPadz_e26bCstwE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1270f"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4735
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNQDcWgNuE5NR14cJspsCBiTTFW3ViXUE_8cE-0=s45-c?key=CPje-8SG8-DR7gE
200 OK 4.3 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNQDcWgNuE5NR14cJspsCBiTTFW3ViXUE_8cE-0=s45-c?key=CPje-8SG8-DR7gE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash b875172e3960209a135f0f8df30b04b1
fc74782bdf835203cad6d71130cbee5bcf519f7d
41bae94a130784c778d10a0d5090b7a948ed8104bd7dc29b98502055a975c6c8
GET /p/AF1QipNQDcWgNuE5NR14cJspsCBiTTFW3ViXUE_8cE-0=s45-c?key=CPje-8SG8-DR7gE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vd07"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4330
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
200 OK 1.5 kB URL HTTP/2 1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2c53c52d7f8e27257535cfddaf818761
2b0aaeae7b0e715d7c6194e514591fd0c2a350b4
8d10c19235052321c5bf4aa25f86083366ca7c2c25e4ed71991d1902148bbd52
GET /-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="boa.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1508
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:13 GMT
expires: Tue, 29 Nov 2022 03:12:59 GMT
cache-control: public, max-age=86400, no-transform
etag: "v545e"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
200 OK 1.9 kB URL HTTP/2 2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 6028b848b44eabd8afb2f33709cb419d
96341495ffc9b35a1e4da8f24afef927d098fe9f
617c9f4afea96b2cb870ca5e5b853a23985f0ce7815040bee9848e0b5e2ddc79
GET /_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vb"
expires: Thu, 08 Dec 2022 02:51:13 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="151220101344.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 1870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-AYwbTOVCy-I/Y1V5Y742m0I/AAAAAAAAXrQ/CCr4lhSmaY01yS7yBz7e07-JWglgOJBVwCK4BGAYYCw/s45-c/orangmuo1.jpg
200 OK 1.8 kB URL HTTP/2 1.bp.blogspot.com/-AYwbTOVCy-I/Y1V5Y742m0I/AAAAAAAAXrQ/CCr4lhSmaY01yS7yBz7e07-JWglgOJBVwCK4BGAYYCw/s45-c/orangmuo1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 9ec638ff6da5c15249471829619a9b69
0840480d908644548d517f6fec3f025e1301bf48
d0e048717a45b38f6ef5319e965d94f18f3c281efd540beca18537c7cb121d9e
GET /-AYwbTOVCy-I/Y1V5Y742m0I/AAAAAAAAXrQ/CCr4lhSmaY01yS7yBz7e07-JWglgOJBVwCK4BGAYYCw/s45-c/orangmuo1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="orangmuo1.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1783
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:51:13 GMT
expires: Tue, 29 Nov 2022 05:48:50 GMT
cache-control: public, max-age=86400, no-transform
etag: "v5eb7"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipMF4onzj-EhKPkTX0_ybfnS9DSA4Gy5aU36C05G=s45-c?key=CLuRlevy086OYQ
200 OK 4.7 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipMF4onzj-EhKPkTX0_ybfnS9DSA4Gy5aU36C05G=s45-c?key=CLuRlevy086OYQ
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 13da12ae2d74170c963eb836263949b4
28057f09aef38eee728b1e43a9554d765b18b140
06b0f9c514cb40345600bfdb32c44703004387f9a05a389805bfc6ca4e964211
GET /p/AF1QipMF4onzj-EhKPkTX0_ybfnS9DSA4Gy5aU36C05G=s45-c?key=CLuRlevy086OYQ HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "ve1d"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4749
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOFUjlB-OJtoXAl40UvTqBLF3k91az-L4WmnnCR=s45-c?key=CO3Kr_fOrtz3fw
200 OK 5.0 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOFUjlB-OJtoXAl40UvTqBLF3k91az-L4WmnnCR=s45-c?key=CO3Kr_fOrtz3fw
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 570c6e097a1c44205590c0df5ab5dadf
b77ff4a3dae7f01b93a72fd7de925c93a5933754
9c1cf4f7a24fd42d619b692a15f862595cbcfdaf470a5807263a007416aecbc2
GET /p/AF1QipOFUjlB-OJtoXAl40UvTqBLF3k91az-L4WmnnCR=s45-c?key=CO3Kr_fOrtz3fw HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vbcc"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4986
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNMgzOs3Eyk-brF1TKzRjbZU8jt2Ieias8h6HSs=s45-c?key=CNO6xYye2MbCgQE
200 OK 4.4 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNMgzOs3Eyk-brF1TKzRjbZU8jt2Ieias8h6HSs=s45-c?key=CNO6xYye2MbCgQE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 4c8c1680a0750ec8cfe336230dea59ae
4225b6130d0b20f4c0c13b28853a4ee0d7651a25
c87eeaca50b4c2513c349863f0b083b5c7cdfc077de30de874428cdde4f53b78
GET /p/AF1QipNMgzOs3Eyk-brF1TKzRjbZU8jt2Ieias8h6HSs=s45-c?key=CNO6xYye2MbCgQE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vbab"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Wed, 07 Dec 2022 02:51:13 GMT
server: fife
content-length: 4445
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
widgets.amung.us/tab.js
200 OK 19 kB IP
File type ASCII text, with very long lines (29322), with no line terminators
Hash c9ed731944024702b435ba1cc59ef389
80ed46e16bd892d709d35f5ba8dfef01e4d6e320
34b786e8399cc681809345c8e92d95927bc67234f4e592adc1ef2a5d8e4ed449
GET /tab.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:13 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 01 Dec 2022 21:21:03 GMT
etag: W/"63891abf-728a"
expires: Thu, 08 Dec 2022 02:38:10 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 783
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7759f553fe9195ea-ARN
www.feedburner.com/fb/images/pub/feed-icon32x32.png
200 OK 1.4 kB URL HTTP/1.1 www.feedburner.com/fb/images/pub/feed-icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f3b2f178bb0fa4f2701ff218f6a6930d
2a1bc7c9589c8d1cde0b96e00c660b6480caf909
55070d3be787cd8ccee8ea0fd75f0e11e944e6f70231f0dcb4c5ae348fcba6be
GET /fb/images/pub/feed-icon32x32.png HTTP/1.1
Host: www.feedburner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/pichu-static
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="pichu-static"
Report-To: {"group":"pichu-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/pichu-static"}]}
Content-Length: 1441
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 02:51:13 GMT
Expires: Wed, 07 Dec 2022 02:51:13 GMT
Cache-Control: public, max-age=0
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/png
Age: 0
connect.facebook.net/en_US/all.js?hash=f6a288cfe99b146d696c277df86ac9fb
200 OK 88 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=f6a288cfe99b146d696c277df86ac9fb
IP
File type ASCII text, with very long lines (18605)
Hash 53a4afe22f90b1ba99085c4b6ae64e17
a5557b7facaa71ee30ad3140683fdfa32b75696d
84d31ac8f9985285bc7f1791341d39b454b96130a5bafed9d646df0f7b0488f6
GET /en_US/all.js?hash=f6a288cfe99b146d696c277df86ac9fb HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 14e351aad288d3d39aa2f5563842be50
etag: "980b97527176f530312e7ea0bf07cc9a"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 07 Dec 2023 01:47:51 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: U6Sv4i+QsbqZCFxLauZOFw==
x-fb-debug: vNTaopXc3Leq4Iai+fdvXjZluMVrBtF5cFfwwYMJI/KfpptPOXOBY+T91Iu/jBWFhTXxdfjpx4t2lUIFfeiKww==
content-length: 88231
x-fb-trip-id: 1679558926
date: Wed, 07 Dec 2022 02:51:13 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
aniekelate.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 aniekelate.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/search/label/Brita
Cookie: cj_uid=YpNGpaU4BFZZlVcN9ai6IFagYV8Zpa
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Wed, 07 Dec 2022 02:51:13 GMT
Date: Wed, 07 Dec 2022 02:51:13 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 06 Dec 2022 02:59:21 GMT
ETag: W/"d6853915186be2645ba95d0ee6d5f1e4bb91e1917040ad66c0737c1099e2cf31"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
IP
Hash d5f2d426c1a4b7f23261e26d37d8dff5
1b62ac29cca3303490f1a78f37c7fca6b4f2215c
0be4496df7dd35d5659d7b5d8e5fc3e9f2f7fc5ed8954b8ff5c733110b7e4029
POST /s/gts1p5/JNJj-Xek6-M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:14 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1317136&RD=71692115927896&DIF=2
200 OK 10 kB URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1317136&RD=71692115927896&DIF=2
IP
Hash c70bf215454d9c88d3b34d31aaf9982e
851fc5a1faa37ac69b23a1d71b66e01d00490fff
f58b5d5cddc7e0ae36882936ed659acb03d04d7841cfa9eaa952917f2570c49f
GET /bidvertiser.dbm?pid=361547&bid=1317136&RD=71692115927896&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wednesday, 07-Dec-2022 02:51:14 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 07-Dec-2021 02:51:14 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
www.blogblog.com/1kt/transparent/black50.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/black50.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 857cf81cfd3449fd408ac0604cd3a326
69209e67fdd7533fb3c76a7f3e2430a63909e4e9
380be71e72fb28899a6cf71bad4434677a6df3a2fcce56d23c28bc4794549047
GET /1kt/transparent/black50.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 07 Dec 2022 00:54:49 GMT
Expires: Wed, 14 Dec 2022 00:54:49 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 06 Dec 2022 13:51:35 GMT
Content-Type: image/png
Age: 6986
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:15 GMT
Connection: close
Content-Length: 326
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
503 Service Unavailable 326 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash bf3231d7fad0292d818aac7d6d669f00
c29683b3788d729a5fc4504279d10e31da60745c
fb2d9f058c2010c57f86a05ae33d282f33e3825290c66b8b120cd177416c6bdf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 503 Service Unavailable
Content-Type: text/html; charset=us-ascii
Server: Microsoft-HTTPAPI/2.0
Date: Wed, 07 Dec 2022 02:51:15 GMT
Connection: close
Content-Length: 326
ocsp.digicert.com/
200 OK 280 B IP
Hash 436c14b3133d071dae2c86eb6719428f
750cc44f683530d4b8ac4e98c9cb900284b3e9d6
b5242f4a30b681bfdda0521fa12177c18d183116e8982a274c414b626b9131c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4904
Cache-Control: max-age=145874
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Etag: "638f834e-118"
Expires: Thu, 08 Dec 2022 19:22:30 GMT
Last-Modified: Tue, 06 Dec 2022 18:00:46 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 278 B IP
Hash 0300f615f291979f4e88a5779f249478
faa360e8656e193e7d142b263b7cc56f1c333af3
fa4d97ace52c4a88c4264950acf000cb1375929276002ed156c84a4a8ee0766a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1349
Cache-Control: max-age=110657
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Etag: "638f07a0-116"
Expires: Thu, 08 Dec 2022 09:35:33 GMT
Last-Modified: Tue, 06 Dec 2022 09:13:04 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 0300f615f291979f4e88a5779f249478
faa360e8656e193e7d142b263b7cc56f1c333af3
fa4d97ace52c4a88c4264950acf000cb1375929276002ed156c84a4a8ee0766a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=109308
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Etag: "638f07a0-116"
Expires: Thu, 08 Dec 2022 09:13:04 GMT
Last-Modified: Tue, 06 Dec 2022 09:13:04 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 0300f615f291979f4e88a5779f249478
faa360e8656e193e7d142b263b7cc56f1c333af3
fa4d97ace52c4a88c4264950acf000cb1375929276002ed156c84a4a8ee0766a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1380
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Etag: "638f07a0-116"
Last-Modified: Wed, 07 Dec 2022 02:28:16 GMT
Server: ECS (amb/6BA4)
X-Cache: HIT
Content-Length: 278
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
cf-polished: origSize=4360
cache-control: public, max-age=604800
expires: Fri, 09 Dec 2022 03:46:03 GMT
last-modified: Sat, 01 Oct 2022 00:32:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 428712
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Uf9b8nDFJr7zTXFO8hTKx6OEL5NZy9h9b416MBaYLSyGDc6wGgKvqfYEGSpcKOarsWQHbB%2FXNAZXRsN9gqh%2FiDMPQQS%2FSXEbu68NJcfWC7B7rif9UGXZm9sE8KFfNP7h"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5630d40b4f4-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash 436c14b3133d071dae2c86eb6719428f
750cc44f683530d4b8ac4e98c9cb900284b3e9d6
b5242f4a30b681bfdda0521fa12177c18d183116e8982a274c414b626b9131c6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1046
Cache-Control: max-age=142016
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Etag: "638f834e-118"
Expires: Thu, 08 Dec 2022 18:18:12 GMT
Last-Modified: Tue, 06 Dec 2022 18:00:46 GMT
Server: ECS (amb/6BAE)
X-Cache: HIT
Content-Length: 280
www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Brita&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
200 OK 2.1 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Brita&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (303)
Hash 5f98a9ab4be68fba703bdd1900787795
d371d8d5e204c10efd6ddfe4bbad85ad9507d1f8
0d992a1325943e0b5d5ead8bccff5a317df66c9edb93f8075637abf0e91872fb
GET /geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Brita&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Tue, 07-Mar-2023 02:51:16 GMT; Max-Age=7776000; path=/
pays=Norway; expires=Tue, 07-Mar-2023 02:51:16 GMT; Max-Age=7776000; path=/
ville=Oslo; expires=Tue, 07-Mar-2023 02:51:16 GMT; Max-Age=7776000; path=/
idcompteurcc_1955922=done; expires=Thu, 08-Dec-2022 02:51:16 GMT; Max-Age=86400; path=/
online_idcompteurcc_1955922=done; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
originecc_1955922=United%2BStates%2523United%2BStates%2BCity%252352341%257CCanada%2523Canada%2BCity%252317119%257CCanada%2523Burnaby%25239401%257CGermany%2523Frankfurt%2BAm%2BMain%25236087%257CUnited%2BKingdom%2523London%25235463%257CNetherlands%2523Amsterdam%25235075%257CUnited%2BStates%2523Santa%2BClara%25233900%257CUnited%2BStates%2523Boardman%25233858%257CUnited%2BStates%2523Clifton%25233563%257CCanada%2523Toronto%25233561%257CIndia%2523Bangalore%25233442%257CSingapore%2523Singapore%25233109%257CUnited%2BStates%2523Fort%2BLauderdale%25232272%257CUnited%2BKingdom%2523Bath%25232194%257CNew%2BZealand%2523Auckland%25231189%257CUnited%2BStates%2523Seattle%2523842%257CRomania%2523Romania%2BCity%2523761%257CRussian%2BFederation%2523Moscow%2523719%257CRussian%2BFederation%2523Russian%2BFederation%2BCity%2523688%257CFrance%2523Paris%2523528%257CIndia%2523New%2BDelhi%2523523%257CIreland%2523Dublin%2523498%257CUnited%2BStates%2523Ashburn%2523485%257CFrance%2523Le%2BLandreau%2523394%257CNetherlands%2523Netherlands%2BCity%2523341%257CUnited%2BStates%2523Chicago%2523329%257CGuatemala%2523Guatemala%2BCity%2523311%257CGermany%2523Aalen%2523298%257CUnited%2BStates%2523Lenexa%2523278%257C; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
online_1955922=1; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
jour_1955922=15; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
total_1955922=147434; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
bonus_1955922=23310; expires=Thu, 08-Dec-2022 02:51:16 GMT; Max-Age=86400; path=/
bonus_j_1955922=1; expires=Wed, 07-Dec-2022 02:54:16 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Wed, 07 Dec 2022 02:54:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UXsPPW1gl5FRI8fWwd6LG3kSmUn8lCiF9fezt3bl3A3un3LGKbYCkgDLIPnzhFeA7GxcwdIVWDxV6lAA9VHi5k6h6zt%2F%2BDBCU6D2vwy0lD%2FY%2FOWijsPYA7Iju23wxrsV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7759f5627e66b51e-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
inklinkor.com/tag.min.js
200 OK 26 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash f7a23204d543e2a18396786b0d4eb747
6e1573f25184c925449bbf9b804ea47cc858c037
655b2da76e7e8bc41faffe537c4dabbefd6483d863addc32381465085eca89df
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: c734e5635fe3ac586482743ede78229f
cache-control: max-age=86400
last-modified: Fri, 02 Dec 2022 10:20:03 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 08 Dec 2022 01:47:47 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 3808
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fYlarOUdb30B3DsaWldqeTJKwRWOXmqDBd6rDHsco%2B2jaHKSmA1mSEcKen8uNZEkr1pgTCYMEaRRkEPBxKEjbP1YIbd9nGosG4LjyvJk3655PpSHgat6wzAiNkjjiDkd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7759f562dd5c0b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
s10.histats.com/js15.js
200 OK 4.4 kB IP
File type HTML document, ASCII text, with very long lines (11088), with no line terminators
Hash 0c3fdf54a35d66a1e272956af95d34af
fd6cf4aa04104d6b48831bbf88bc6256fd5012c3
3adb20fd3b841e10b308345d164ac790a96228c3eac3e063efa505ae3c7d4cf6
GET /js15.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
date: Wed, 07 Dec 2022 02:46:51 GMT
etag: "980881274"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 888571629
content-type: text/javascript
content-length: 4405
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:D550_2E69C9F0:0050_638FFFA4_31FC:25EF9
x-iplb-instance: 40745
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 26 Dec 2022 19:58:36 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 888759
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tlfkriERaKiaCsr%2FAzc%2BEdhYZNdjxYzSh6BD1A5tWF7VSGa65yLfIAVHHnAZ3KT44CexPXKrFtv5C8y4Oe5AVSNYYv1lu2RcIkmees3uXw1Ot3dc4rrRc1U8m6OgY1YV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdedb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
200 OK 680 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 852881aef6d6a8bca3123c3201f64c74
0e5ef2c61383bb79c8a6ea068d9a688631d844fa
41c20a2d0dc8fe26ec1e5c7e71b5d82fc09e7ce0bd30db7abb516474f5c186a1
GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 680
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=857
content-disposition: inline; filename="flag_russian%20federation.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 28 Dec 2022 03:12:56 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 776299
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Oq6BicteRrXdKKJO64c2%2BRgzH%2FjtB9c1GMblOUvd4VrHNFcQTmSFR2uXb8bZVVp1c5V%2FwVUThpOaRmmY7WaSNTRpWrCgY6YIvaeXwW84QeqFd%2BO84rDaFvEyodT5B5Y8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5650dfeb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Brita&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:16 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 02 Dec 2022 17:55:37 GMT
ETag: W/"638a3c19-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sLlSMh1wGv3nDsgbYgCeRcJpAnwRbn0P69LKZTwhtchgC3hycigJuZ2NTIR4J3B67jGpNsAfaWzafKtD%2B%2FHFF%2BKTZry8S4tpW%2BOKMRWs2FeVmVpbcAKyVHbrHiQpJpxN"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7759f5650f8bb51e-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 09 Dec 2022 02:51:16 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 01 Jan 2023 04:21:33 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 426582
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7e4j%2F9tEi%2BoKDYgP2ByWpXCH5qr8llLavbvwDLyjOIDo%2FPPmUOrecuOSisyczr%2FmAZUiEdZ0RaLVlixJQmjQAAZhiPNbo3aAGgAcpXtyQrYfKAKpRUzVUKpPZwTD4BCP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564edecb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 15 Dec 2022 19:39:07 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1840328
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YrKE2Bws1uV%2FVIEfca23K84fpcynvr%2BQHeftyV%2FZe5Yv9gXRQ5IiUZPFYc3Opb%2FIYrBy2pTwUTo%2FvKkGu%2FWikyne0TSYuMdB3%2BHQQayeeuQt6ooW64ZwR5gnKVOaFM84"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564edebb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
200 OK 1.2 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0fca0f8c1f72968c8849d783accae326
6d6f3b4500a3f1fccc3474d59c716b2f60a59ea4
c1319ad29f9822f08a6740f0b89e91127cfb11a449f99528f0a7928156032c9e
GET /geocompteur/shadow/flag_united%20kingdom.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 1220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1459
content-disposition: inline; filename="flag_united%20kingdom.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 27 Dec 2022 07:58:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 845542
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=aMFV4pGwvsSoATed%2FI7x%2FspuNTzCMBX8VSiOCKd%2F3q5SeXM8wtp4yWpd%2FJd2mmYmKOdJ8eMUOrne5lErtPLu5sndDcVwcQjLKvfuTzFz9Gn%2FbzXWFuc7t0MwoyQz1Mza"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdeeb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_netherlands.png
200 OK 710 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_netherlands.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4d48534384964664d122ef558ebf1acd
8cbccb6b66f6161c329f9945b58e79e09640cc90
286ee399704cd53efeabbca51dfc8459fb9633265ae4e9e046610f7d61d087bb
GET /geocompteur/shadow/flag_netherlands.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 710
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=892
content-disposition: inline; filename="flag_netherlands.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 10 Dec 2022 23:05:41 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2259935
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1BZ%2Bm369WIZBrL5rqVh7DmUo1%2FmlptEwfQeU95jebqSA3chmTnZ%2BGQ6pWNxex98tU8fZE%2FPbifxby8svJ47a5wP8HYpXN9Ikf7gwpA%2Br7vRew%2F6Viruos5EjkaK%2Fk%2B4Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdefb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_india.png
200 OK 806 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_india.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 360d08c7d723c9cc21e98b83a9fbe646
b580c8380db1687a6365a95789c7227d325ce00f
b73e30b7030de7ec01db85eb01edfb3d228169583d6ccc6583bec0552d7ce172
GET /geocompteur/shadow/flag_india.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 806
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1027
content-disposition: inline; filename="flag_india.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 26 Dec 2022 20:12:20 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 887936
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KVOc9W%2BJwOSYwmSW9123wVOPr79n8I2V%2B6BJv5cgK3l4mi8SeyeHN6VgVdObjuiED3dHdMUiOpMnxodnFtmIL81Ogo1pP8ZggnhLLqEWrAk%2BvMbrlK%2Bnhi3HxCkxm62q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdf2b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 30aec170d58f580f2ed4da4b92d72cc7
3b11a98ba9563f7f266e7a935e3b78bd0c0712aa
7b25e66e4383cdb29228d0451a4810eeab7d194ca81045e066c00c9467f29312
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.458.0
200 OK 2.3 kB URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.458.0
IP
Hash dfec2dce946a454c8b6edba9e1746801
008a141e97861708afdf589040da3b211ad2d5e9
70f9ae2b53b47d0b7a82e0743291e4a3cc8c18f768868534291ff9be9dd64ab5
GET /5/3294720/?oo=1&js_build=iclick-v1.458.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: application/json
x-trace-id: c5702a89712a9889096dcb1875f9181a
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=19c464779f274abc8318dd6f7a5b4d1e; expires=Thu, 07 Dec 2023 02:51:16 GMT; path=/; secure; SameSite=None
oaidts=1670381476; expires=Thu, 07 Dec 2023 02:51:16 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_romania.png
200 OK 644 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_romania.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a2ef37e3cfe2119759469a219565c145
7d174bb96c9eb762a56b531e8c15a160773fe008
8f45100a446929b8ad38c886a1cc6d033a066a008f8268b6fa1ec8d3f4d74166
GET /geocompteur/shadow/flag_romania.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 644
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=842
content-disposition: inline; filename="flag_romania.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 31 Dec 2022 20:19:37 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 455498
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=P%2FPQKp1M%2BzVC%2FXkoPBWRtgc8HF1%2BHAmaBsjUeUyw3BPnmmzgHWQlMZYwNEnS4neugWLTAHR3gDqJXTB9J83MfYcjLLgawGrbdOsSLiymwaC%2BfiyZ1E0tEbLlkzD1lBWh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdf6b4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_france.png
200 OK 696 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_france.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 40db5c3f7bd9cee685d7e682084fb924
711a4bc728a541423d4444facaee2651747620db
bf91a9e6437f46b4e59f5786b40ac2da0d23f70060729e3e9adbd1bbbd2ab716
GET /geocompteur/shadow/flag_france.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 696
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=901
content-disposition: inline; filename="flag_france.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 15 Dec 2022 19:43:44 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1840051
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BNCHtvrB5bFjGcKWtqrfqg3tSxJe3OWuBKvVAb0uHFClcuCa3Lx6NQkVunp9nk2yyFAAYludDsw5nlpFqD1usRSilm1Fdvx63X7FtfGPGjb1%2FtUcUkHANJ2Lz8xe0WqQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5650dffb4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_ireland.png
200 OK 712 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_ireland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e55f246106bcd5ae49ef1a026ec80d3
a5afe18fe64456cbb16e31287f4106228267f584
eaf4b1563a65fb7bd06ace795835a00a4f491a48506996bd65c161d35002351e
GET /geocompteur/shadow/flag_ireland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 712
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=937
content-disposition: inline; filename="flag_ireland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 23 Dec 2022 12:40:14 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1174261
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PPJgvMGRhzO7jmMsN78l7LdF3aLQTj%2BYPvGkAAVEXfdORhm%2Bdgx%2FfWncQLnKF2okIb1K0hC2tkM7oNGyz6yo%2Bh%2Fuxmdsl3CExKHP429bPpzP6g1yuVreDBGDgKWubrO9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5650e02b4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_guatemala.png
200 OK 940 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_guatemala.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dafe0c345b80e5567b1ff2963e817d9d
e7b2b38df1c3cf0af1e69c5201c196bbaeba8f5e
ee2ee6cbd607e5a3bf1f42625b21f73584a19ba0686a9a255908bff3da86b542
GET /geocompteur/shadow/flag_guatemala.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 940
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1153
content-disposition: inline; filename="flag_guatemala.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 05 Jan 2023 10:57:16 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 57240
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jdkYSUg99WkI%2BOMIewr6yxkyzzsoun4hL%2FyQIMwglPAewSvj6Zq%2Fe8PbTSRHBb3cmx8Bh3qQNLq99ILjFl4fwGUyCefeo1QlcqZRjrsoR4ySY9dG6lOtfn%2FJf6bldkdP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5650e04b4f4-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_singapore.png
200 OK 768 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_singapore.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 931d98f74f8bbb82364a40f7c3c5ea3b
f844a679d51126b38659a25e9c71c748da392714
04f122230781518f0b5807695a1c731e33bea9ba0264d612c799485074204627
GET /geocompteur/shadow/flag_singapore.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 768
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=939
content-disposition: inline; filename="flag_singapore.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 03 Jan 2023 21:38:37 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 191559
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rrzcvyCHYqkfDTd4deR4KZBRbt9zdlQNWHOkCkNviMUr6ww0%2FSR1XH7v%2B5jyBPTuGqlZz600DvC2nykfxebKEWJ%2FAqeTvwaGJGGTvSLSCEuhIDx67umTlyTZ0O66brmr"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564fdf4b4f4-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c10bc583c46449dc192a809398b4e814
ff0f7ad905d32d7f3d01e4054552d0ad551503a5
defd2b2559e55c9c6c0f8be9b23c53c4e781a736feae3dd73b4d203b69cfcc57
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/hitparade.php?pagexiti=geocity_orange
200 OK 81 kB URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geocity_orange
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 8f96b5fe7f1b6bedd140c3535b4844e6
eb497b97eb109199cb04ca4051a6122b6539f4be
77bc432d29fa0c83aa88d1b0fc9fabe2fc3502ac712b7192d90bfac2cb8aef7e
GET /hitparade.php?pagexiti=geocity_orange HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Wed, 07 Dec 2022 02:54:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gdBVYus8rJ7w2hUeYJA0nwr%2F2gDS1iyqxpI4mAGHeamhpTR3qQBZWpis7FWKZ6ZIAQApuKcNfvqgLhlroeU9nkJ8iCh5ofVnHwwjVfMvKfHlq65UwY5DdWUUNHs3eBkM"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f5630d43b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash 9ff7c335f4f00b522da27bd396482eaf
e7fbb9471110f4bc100633c5d6ff7520a66e8473
7229531a4e341e994dca69774fcbc143b8f028067563a12b6249bb1da6b2ab50
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 07 Dec 2022 02:51:16 GMT
date: Wed, 07 Dec 2022 02:51:16 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3074a66f6d9b2e2af9b41ec0e2f4e2db
942e2c49b3848f11da966937f5914c62aed24bce
7c3b21b91aab06aff58cc56ce4b7273a7d320df8b0b4ad685c660e03ba0b72aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b22490b02628e79842aa551994331a2e
238870b8a3e6ef3b6a761154e3abee386643597c
ef2e0268a5ed0ca7d64dfc1baa3d56d55f4062e4d84972bc9423fe56df585673
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF2E0268A5ED0CA7D64DFC1BAA3D56D55F4062E4D84972BC9423FE56DF585673"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16891
Expires: Wed, 07 Dec 2022 07:32:47 GMT
Date: Wed, 07 Dec 2022 02:51:16 GMT
Connection: keep-alive
logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/
302 Found 150 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/
IP
File type HTML document, ASCII text
Hash 9b55b8c64884e4c84fae7447d0b1d8b8
d1be048372b08365554c1e42f456cd6c6fd5cbb8
7dc536ca94af7dd8f27feee4fd9e38731eb611fae9a57221fe223b65d397ba84
GET /hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 150
date: Wed, 07 Dec 2022 02:51:16 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=6C66869C-5CC6-4CFD-88C9-68D18324EF28; Path=/; Domain=xiti.com; Expires=Sun, 07 Jan 2024 02:51:16 GMT; HttpOnly
atidx=6C66869C-5CC6-4CFD-88C9-68D18324EF28; Path=/; Domain=xiti.com; Expires=Sun, 07 Jan 2024 02:51:16 GMT; HttpOnly; Secure
atid=6C66869C-5CC6-4CFD-88C9-68D18324EF28; Path=/; Domain=xiti.com; Expires=Sun, 07 Jan 2024 02:51:16 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: gA2za-3vy3w-mnudbbL8RpbKuNAKhniTMwh-8msjozKD9CcBolATig==
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=19c464779f274abc8318dd6f7a5b4d1e
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=19c464779f274abc8318dd6f7a5b4d1e
IP
File type JSON data\012- , ASCII text
Hash c941ebcdce8fb52587a6df3f4074cde8
9f2f2b51d03679d0c70c3510c079ec29a005981a
08a97c9f647d56da5f73b7547f5abb880c5883d0fe71d713510b4a7a6955398a
GET /gid.js?userId=19c464779f274abc8318dd6f7a5b4d1e HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=19c464779f274abc8318dd6f7a5b4d1e; expires=Thu, 07 Dec 2023 02:51:16 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/img/tmp/earth_beige.png
200 OK 2.4 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/earth_beige.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fcc93f1321561f1c4f13358704fab24
cfd6fcdc3155419a74ad979ef3ae74acb5f20faa
3a14ddb14dd5980eefaf738778056479f512512a6126a383dde2ee1733a2bc08
GET /geocompteur/img/tmp/earth_beige.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: image/webp
content-length: 2396
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3281
content-disposition: inline; filename="earth_beige.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 01 Jan 2023 07:58:17 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 413578
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Dvi2zD6fgFyhvVbVo1QBpUQOvZvpTnCsav48q6PnkDhKI5ceP1xZherJXmu8a2z3OevBcg7Xm687NoE4WAKbtNjoYEKq3G%2B7nYdC3DIDt3iqjBnuha6QJMJy8QSbHHLL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f566eed0b4f4-OSL
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1317133&RD=09280894792744&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=09280894792744&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined
200 OK 10 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1317133&RD=09280894792744&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=09280894792744&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined
IP
Hash b6d36545b829698bee12209a57bcee21
2fd997bd1a10c379162ec438e22d9e57c3190d29
26aef282fe3e59ca33c8ad9b077ed1490a65b2e4ca5e390750355f24ec9a5ba8
GET /BidVertiser.dbm?pid=361547&bid=1317133&RD=09280894792744&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=09280894792744&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wednesday, 07-Dec-2022 02:51:12 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 07-Dec-2021 02:51:12 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Thu, 08-Dec-2022 02:51:12 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Thu, 08-Dec-2022 02:51:12 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5319
CONNECTION: Close
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK 25 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash cc24419c482370498f3c227ac73d666b
37fc103ace873f47102e0ca88eb4735bc6806750
152fa070788f0cf29dc062f03860897c39c7ffa13e6eee2dc3e5dc131ecbc7aa
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 03 Dec 2022 12:33:41 GMT
expires: Sun, 03 Dec 2023 12:33:41 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 310655
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
200 OK 1.7 kB URL HTTP/2 www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
IP
Hash ce5505974f63c9915c67905b929eaf2b
55bf45cdee36928c36d652f638abb4d869b573d6
5a9af7937726b02e62d107427d67468b6e56fdfc2022d674ea7567521c77d220
GET /geocompteur/css/city_css.php?c=geocity_orange HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: text/css;charset=UTF-8
cache-control: public, max-age=604800
expires: Wed, 14 Dec 2022 02:51:16 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7CP6MN7NiJsUg%2FpSPvN8ndGFEYrnRetcKM2Ci1MJiuUNzP5Pyp4vO1lZJeRmoY3acz%2BymfKRiaEUDlkpNZnMWS7NyI35WkGEykQjU%2BAAxh5hR%2Bd3nUVg2TNe%2BzRFxhwy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f564edeab4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geocity_orange&hl=2x51x16&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Wed, 07 Dec 2022 02:51:17 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 a7d2a4ec2f50830f128dc406960aef9a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7dpZmZyOGQo8IQb6bzcw4nNM-CIX91-FbTbiFL7Z5lqwGkMNuxuuwQ==
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Brita&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&y=&a=0&d=7.204&v=27&r=3923
200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Brita&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&y=&a=0&d=7.204&v=27&r=3923
IP
File type ASCII text, with no line terminators
Hash 8a3aa9fa4b1f903b9772b3252cfe7a7a
bbac2436fe36236908d2a9041ad6f0304b5da96e
8474dcf41824a561a9efae3e5f284ded701e1ce18293b7edb4cb8a32c3267189
GET /pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Brita&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&y=&a=0&d=7.204&v=27&r=3923 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759f5668c490a24-ARN
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.widgeo.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 05 Dec 2022 18:52:41 GMT
expires: Tue, 05 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 115116
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 06:19:27 GMT
expires: Mon, 04 Dec 2023 06:19:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Dec 2022 03:14:01 GMT
content-type: text/javascript
age: 246710
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 91c7cac2732867033b820a1ce0471bcb
6359bc69edca83dcd1f41b57634a9d6b9b62b75c
be668cb2fba7220ea82198ca4c70887a11bbe8352f5a47666443dadb561161a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 93cd4106946bc499c4dbdfcab6ea7718
5628412fd5319f549699b48bc27ff0f2f334e6bd
9b471a64f51d01dc302ad60957ad702f536d4e2682ee9a594fe2253e1101d909
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B471A64F51D01DC302AD60957AD702F536D4E2682EE9A594FE2253E1101D909"
Last-Modified: Tue, 06 Dec 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17164
Expires: Wed, 07 Dec 2022 07:37:21 GMT
Date: Wed, 07 Dec 2022 02:51:17 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e24f2da4ed2e3cd07b0999a67550d634
6e2277e734fd0015849c3554dd2cf2ae289c2cf2
74dc14d7d9ba8bba4a162680e59801af1d7c2995639df51f32ff2f3d4d0b0051
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 0be73f837e6aeb740e5c608fb17237b5
4dfd1104c0558f35d83b35ca08e4874052be4bc7
9f57778d4b2af1df4ee9000e3be98a38927c78d4d61b8a70f7a6499c2842fa89
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 06:34:05 GMT
Expires: Tue, 13 Dec 2022 06:34:04 GMT
Etag: "4dfd1104c0558f35d83b35ca08e4874052be4bc7"
Cache-Control: max-age=531166,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759f566cf3eb527-OSL
ocsp.sectigo.com/
200 OK 471 B IP
Hash a4b2661f9faaf638f68d08191f11b9eb
93a120c099c114d90fd533168343641c6768e3fa
65fd78249b3277256ee56b23d213f0816412daa4c2028d2447a90bbc861af5ba
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 04 Dec 2022 11:33:42 GMT
Expires: Sun, 11 Dec 2022 11:33:41 GMT
Etag: "93a120c099c114d90fd533168343641c6768e3fa"
Cache-Control: max-age=376343,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759f567c8700b65-OSL
s4.histats.com/stats/1761712.php?1761712&@f16&@g1&@h1&@i1&@j1670381476399&@k0&@l1&@mBebelan%20Anie%20Kelate%3A%20Brita&@n0&@o1000&@q0&@r0&@s471&@ten-US&@u1280&@b1:20138817&@b3:1670381476&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&@w
200 OK 103 B URL HTTP/1.1 s4.histats.com/stats/1761712.php?1761712&@f16&@g1&@h1&@i1&@j1670381476399&@k0&@l1&@mBebelan%20Anie%20Kelate%3A%20Brita&@n0&@o1000&@q0&@r0&@s471&@ten-US&@u1280&@b1:20138817&@b3:1670381476&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&@w
IP
File type ASCII text, with no line terminators
Hash a06c3224375cd4283df84ef408fa2c86
7adb14fdc578371cbd0e2c2be7dcb427fe772092
40c8cc35ac97c8fe40953e102dd99d2e24fb7d35996dcf0cbdf4dba81006cdc3
GET /stats/1761712.php?1761712&@f16&@g1&@h1&@i1&@j1670381476399&@k0&@l1&@mBebelan%20Anie%20Kelate%3A%20Brita&@n0&@o1000&@q0&@r0&@s471&@ten-US&@u1280&@b1:20138817&@b3:1670381476&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 103
Connection: close
ocsp.sectigo.com/
200 OK 471 B IP
Hash f93fe0c44e63867b7f8553c1ca73460e
e664d98cd9803e5f179af596d8a2f50d79fc92b0
dbb9ed743e3bf5d61dd66e676c81d5e2a43c8287d61ef34d90b6c7790ca6106e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 06 Dec 2022 01:33:16 GMT
Expires: Tue, 13 Dec 2022 01:33:15 GMT
Etag: "e664d98cd9803e5f179af596d8a2f50d79fc92b0"
Cache-Control: max-age=513117,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7759f568c811b527-OSL
onmarshtompor.com/?rb=zMFutvpkree97Rw77ZJVXxAH1nWIFDwVh3AN35STOd2tG5znWwGpUhovs25OIm6G032kBYDdZ16geMnsDxqH4tumUMVx1nD7dDbGwTwWO2NQzZn41rJ3ZSNB7pCwHfkN-Md1BjSsl9Y_h1ZyKPK5X1xO8pR6JebQj4LYsRNXKGXNm4-fVJHLOvfphrLp5dvldtjE_YXFsRlbrPhVJvt1__b9DdzVAtyw-5Do_As1gLibbpOLIZwulI5cP0Y%3D&request_ab2=96001&zoneid=3294720&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=8&pl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=40293020-6574-4807-945f-3b3c784c2488&userId=19c464779f274abc8318dd6f7a5b4d1e&m=link
200 OK 1.9 kB URL HTTP/1.1 onmarshtompor.com/?rb=zMFutvpkree97Rw77ZJVXxAH1nWIFDwVh3AN35STOd2tG5znWwGpUhovs25OIm6G032kBYDdZ16geMnsDxqH4tumUMVx1nD7dDbGwTwWO2NQzZn41rJ3ZSNB7pCwHfkN-Md1BjSsl9Y_h1ZyKPK5X1xO8pR6JebQj4LYsRNXKGXNm4-fVJHLOvfphrLp5dvldtjE_YXFsRlbrPhVJvt1__b9DdzVAtyw-5Do_As1gLibbpOLIZwulI5cP0Y%3D&request_ab2=96001&zoneid=3294720&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=8&pl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=40293020-6574-4807-945f-3b3c784c2488&userId=19c464779f274abc8318dd6f7a5b4d1e&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2386), with no line terminators
Hash 9255fbfe83f2c4fbea79269d5acf3735
02aa216f4a87c4dca5ff64f545501edcb87093c4
0a4b40291d8a2ca38b9e8f7f0b9505991f305031e28b9665c2bea64a1fcd9979
GET /?rb=zMFutvpkree97Rw77ZJVXxAH1nWIFDwVh3AN35STOd2tG5znWwGpUhovs25OIm6G032kBYDdZ16geMnsDxqH4tumUMVx1nD7dDbGwTwWO2NQzZn41rJ3ZSNB7pCwHfkN-Md1BjSsl9Y_h1ZyKPK5X1xO8pR6JebQj4LYsRNXKGXNm4-fVJHLOvfphrLp5dvldtjE_YXFsRlbrPhVJvt1__b9DdzVAtyw-5Do_As1gLibbpOLIZwulI5cP0Y%3D&request_ab2=96001&zoneid=3294720&js_build=iclick-v1.458.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=8&pl=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.458.0&bs=40293020-6574-4807-945f-3b3c784c2488&userId=19c464779f274abc8318dd6f7a5b4d1e&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://aniekelate.blogspot.com/
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: a7050cce03006020f8ffeee966adb96d
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=19c464779f274abc8318dd6f7a5b4d1e; expires=Thu, 07 Dec 2023 02:51:17 GMT; path=/
oaidts=1670381477; expires=Thu, 07 Dec 2023 02:51:17 GMT; path=/
syncedCookie=true; expires=Wed, 14 Dec 2022 02:51:17 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 914
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 07 Dec 2022 02:51:17 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
s10.histats.com/counters/cc_471.js
200 OK 9.8 kB URL HTTP/2 s10.histats.com/counters/cc_471.js
IP
File type HTML document, ASCII text, with very long lines (20593), with no line terminators
Hash 05def13e9ee3ca0aa2eed44fff075497
008d906ad116617434730a15cf1af12f11881af8
b556dd238f410880415c6831e9fe1ff97c83681e01a2657ecb74f52aa174980f
GET /counters/cc_471.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:26:04 GMT
content-type: text/javascript
etag: W/"159130465"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 859111440
content-encoding: br
x-grace: full
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 9779
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 91c7cac2732867033b820a1ce0471bcb
6359bc69edca83dcd1f41b57634a9d6b9b62b75c
be668cb2fba7220ea82198ca4c70887a11bbe8352f5a47666443dadb561161a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 07 Dec 2022 02:51:17 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:17 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=w!fau4sajxrcls&dn=TC&cc=1&r=
200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=w!fau4sajxrcls&dn=TC&cc=1&r=
IP
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=w!fau4sajxrcls&dn=TC&cc=1&r= HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Thu, 08 Dec 2022 02:51:17 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Wed, 07 Dec 2022 02:51:17 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita&cu=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:17 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate&t=Bebelan%20Anie%20Kelate%3A%20Brita HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:17 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:18 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0&ct=Bebelan%20Anie%20Kelate HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:18 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:18 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1670381476944&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Wed, 07 Dec 2022 02:51:18 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/geowidget_js.js
200 OK 879 B URL HTTP/2 www.widgeo.net/geocompteur/geowidget_js.js
IP
File type ASCII text, with very long lines (866)
Hash 0b78535a50086407e72173c9e8ebd7e4
e02627ff4133eaeba4babd7015808c8b927acd04
5fe3197dc5a97a73684f357872afd766d815867d74f6b7e58533b7b906b794ad
GET /geocompteur/geowidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2217
cache-control: public, max-age=604800
expires: Tue, 13 Dec 2022 13:05:49 GMT
last-modified: Thu, 13 Feb 2020 12:35:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 49527
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rpHKmxomneOkh5aTIk4nxFSFSr%2BVHIb%2BQbrXCu6bFKZwfgzHuUmE3tDwIZF8eD6n%2Ff%2BuZVmFdkfKz%2B0sW4BLu6t5umLfCKOdqSfZ21WPoKaYEAOeoLre3slGVGW8R5wB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f566eed2b4f4-OSL
content-encoding: br
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:16 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1404
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=16yhNs06Fe5Q0qf9L%2B%2BRadj%2Fd0yuYF0oItm8Df7q7Ok0YJq97tQws5%2FuFNL0JkrBGQ1Z0sYsgR9pq03c%2BAkQaPY1%2Fq0eUFb%2Bu3xq%2FxQGJwAtVqH7eTYZY3jm0PyYsA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7759f5659eb90b69-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=7516841&u1=38D70D6D3EC24F8A451B5F3A5F1D3626&java=1&security=fe65b181&sc_snum=1&sess=a8f3c4&sc_rum_e_s=7017&sc_rum_e_e=7021&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//aniekelate.blogspot.com/search/label/Brita%23&t=Bebelan%20Anie%20Kelate%3A%20Brita&get_config=true
200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=7516841&u1=38D70D6D3EC24F8A451B5F3A5F1D3626&java=1&security=fe65b181&sc_snum=1&sess=a8f3c4&sc_rum_e_s=7017&sc_rum_e_e=7021&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//aniekelate.blogspot.com/search/label/Brita%23&t=Bebelan%20Anie%20Kelate%3A%20Brita&get_config=true
IP
GET /t.php?sc_project=7516841&u1=38D70D6D3EC24F8A451B5F3A5F1D3626&java=1&security=fe65b181&sc_snum=1&sess=a8f3c4&sc_rum_e_s=7017&sc_rum_e_e=7021&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=http%3A//aniekelate.blogspot.com/search/label/Brita%23&t=Bebelan%20Anie%20Kelate%3A%20Brita&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:17 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc7516841.1670381477.0; SameSite=None; Secure; Expires=Monday, 06-Dec-2027 10:51:17 +08; Path=/; Domain=.statcounter.com
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 7759f568181eb4f1-OSL
content-encoding: br
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1317136&RD=989161303469615&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=989161303469615&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1317136&RD=989161303469615&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=989161303469615&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined
IP
GET /BidVertiser.dbm?pid=361547&bid=1317136&RD=989161303469615&DIF=1&bd_ref_v=aniekelate.blogspot.com&tref=1&win_name=null&docref=&jsrand=989161303469615&js1loc=-&loctitle=%20Bebelan%20Anie%20Kelate%3A%20Brita%20undefined HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wednesday, 07-Dec-2022 02:51:11 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 07-Dec-2021 02:51:11 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Thu, 08-Dec-2022 02:51:11 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Thu, 08-Dec-2022 02:51:11 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5305
CONNECTION: Close
bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1317133&RD=0750710853799&DIF=2
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1317133&RD=0750710853799&DIF=2
IP
GET /bidvertiser.dbm?pid=361547&bid=1317133&RD=0750710853799&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Wednesday, 07-Dec-2022 02:51:14 GMT
Cache-Control: no-store
Last-Modified: Tuesday, 07-Dec-2021 02:51:14 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita&j=
200 OK 0 B URL HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita&j=
IP
GET /i/?l=http%3A%2F%2Faniekelate.blogspot.com%2Fsearch%2Flabel%2FBrita&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:14 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Wed, 07-Dec-2022 04:14:34 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Wed, 07-Dec-2022 06:51:14 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1670381474; Domain=dtscout.com; Expires=Fri, 17-Mar-2023 02:51:14 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.591
expires: Wed, 07 Dec 2022 02:51:13 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9UdvZPb5sg%2F5f2QkPWZ4Au0cu1Dph%2Fawfmad3vboRnzouHN6mYDDit6A%2FHTViSc83eYV5x9ja9YKDfVcG3g0lMBE9aXc6It40I0uS2IS2cDYccNXi%2Fqo0qRLPN8qyIA%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7759f555beaf0a20-ARN
content-encoding: br
X-Firefox-Spdy: h2
cdn.tynt.com/tc.js
200 OK 0 B IP
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 07 Dec 2022 02:51:17 GMT
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 14:57:29 GMT
vary: Accept-Encoding
etag: W/"62d96959-4599"
content-encoding: gzip
cf-cache-status: HIT
age: 41113
expires: Sat, 10 Dec 2022 02:51:17 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 7759f5681d51b523-OSL
X-Firefox-Spdy: h2
developers.google.com/
200 OK 0 B IP
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 10 Nov 2022 18:10:23 GMT
content-type: text/html; charset=utf-8
set-cookie: _ga_devsite=GA1.3.3805074265.1670381477; Expires=Fri, 06 Dec 2024 02:51:17 GMT; Max-Age=63072000; Path=/
content-security-policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-5BYVGajEASXiCk9kiIvmQa0tBKndsK' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
content-encoding: gzip
x-cloud-trace-context: b3031bb48d1771fa81a83571ea924ad3
vary: Accept-Encoding
date: Wed, 07 Dec 2022 02:51:17 GMT
server: Google Frontend
content-length: 25386
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
172.217.21.161
93.184.220.29
23.36.76.226
157.240.200.14
104.21.91.63
46.105.201.240
103.224.182.246
190.2.139.23
54.39.128.162
18.138.110.223