smkscitranegara.sch.id/bonii/login.php
88 B URL smkscitranegara.sch.id/bonii/login.php
IP
ASN #138608 Cloud Host Pte Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text
Hash 25f4889425b3c0b7b14fe7149c2575ad
5d096315fa8eba5aaf6d870e034a455914386293
77cf3a26f2ad6fd43cfa593d8d5dcf0c224b25a624e0e2f63e0947d02edf650b
Analyzer Verdict Alert fortinet Phishing
GET /bonii/login.php HTTP/1.1
Host: smkscitranegara.sch.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
x-powered-by: PHP/7.2.34
location: https://s.id/kY66E
content-type: text/html; charset=UTF-8
content-length: 88
content-encoding: br
vary: Accept-Encoding,User-Agent
date: Thu, 11 May 2023 23:25:20 GMT
server: LiteSpeed
cache-control: no-cache, no-store, must-revalidate, max-age=0
alt-svc: quic=":443"; ma=2592000; v="43,46", h3-Q043=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-25=":443"; ma=2592000, h3-27=":443"; ma=2592000
X-Firefox-Spdy: h2
s.id/kY66E
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /kY66E HTTP/1.1
Host: s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
date: Thu, 11 May 2023 23:25:19 GMT
content-length: 0
location: https://home.s.id/forbidden#action
cache-control: private, max-age=30
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QSO2NGnQAanLLRoTOxDMAU9woXiPN9aOeMstkg6hHvcApdav9u8NIeqVCXJ9S2f0KYD9MQ6FAd2rffeEHNQbtHI28pxorMNSY5ynH0scEiq41dy2CqBx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7c5e2e33f8e61c0a-OSL
X-Firefox-Spdy: h2
smkscitranegara.sch.id/
706 B IP
ASN #138608 Cloud Host Pte Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with CRLF, LF line terminators
Hash 67f3a5933c17b3ab044826d3927d0ba9
5957076d09bacaa6db8ddc832b4fd87ed8f05f8a
97e800f4836b7030dd58fe6296294b7ff5ef1b5eb0e88353f230ea1608d2bb64
Analyzer Verdict Alert fortinet Phishing
GET / HTTP/1.1
Host: smkscitranegara.sch.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Content-Type: text/html
Content-Length: 706
Date: Thu, 11 May 2023 23:25:20 GMT
Server: LiteSpeed
Location: https://smkscitranegara.sch.id/
ocsp.pki.goog/gts1c3
472 B IP
Hash 4ca643eb908b2ebf8e99708e63435736
f5fe3576d1fab4b0958e51a59e1c12e2e927de03
a9377a71a606b86c932196ab7efadacb7ec1b93d67e1e3df06d5bfac71161d56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 4ca643eb908b2ebf8e99708e63435736
f5fe3576d1fab4b0958e51a59e1c12e2e927de03
a9377a71a606b86c932196ab7efadacb7ec1b93d67e1e3df06d5bfac71161d56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash a6ce3d3fa35a7181d798f18939f0d4df
009eb5c2d470414820b9ab723ef55e2e36b326de
c4bc89043c14c0cce7198301f9fb809a878ce2ea48fae3cc9b34b74d7bb2eb62
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100049
Date: Thu, 11 May 2023 23:25:20 GMT
Etag: "645c5d31-1d7"
Expires: Sat, 13 May 2023 03:12:49 GMT
Last-Modified: Thu, 11 May 2023 03:12:49 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 a2c3c8b833b34851dca4f7753ecaae58.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: R7YbvYvlWi9EsDlcMsDq9yhhjvDZoaRSozR6ZfCy8FKlgr0YAO-NdQ==
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash a6ce3d3fa35a7181d798f18939f0d4df
009eb5c2d470414820b9ab723ef55e2e36b326de
c4bc89043c14c0cce7198301f9fb809a878ce2ea48fae3cc9b34b74d7bb2eb62
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=102333
Date: Thu, 11 May 2023 23:25:20 GMT
Etag: "645c5d31-1d7"
Expires: Sat, 13 May 2023 03:50:53 GMT
Last-Modified: Thu, 11 May 2023 03:12:49 GMT
Server: ECAcc (dcb/7FE4)
X-Cache: Miss from cloudfront
Via: 1.1 193a8c13b6e0a6b90db7172f6358335e.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: UaYf9Vfj2EP-x329Ev7HsiBBCA3We5IqShD_tlcRE1iCDV_LDYmRrQ==
Age: 2285
cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/webpack-ea4555d754b5e0a7.js
5.6 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/webpack-ea4555d754b5e0a7.js
IP
File type ASCII text, with very long lines (5598), with no line terminators
Hash 6e8431e57c8376118f7f796918ecb78b
aa5db811a8e5100307651bf1762d777adb767853
4ec07081b076818282e22c7d0c13565573655be68b09b70d38c48f1612f57fde
GET /app/p_230511c8aa95/user/_next/static/chunks/webpack-ea4555d754b5e0a7.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 5598
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "6e8431e57c8376118f7f796918ecb78b"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: h0XPm148HnVFzjObPwe0VGazbd_FFHhj
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: b8pB4gsezobm02Cwnb3eKrPMkB0WcqhY-ZcxtunjD1f642O2XBL0Bg==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_ssgManifest.js
91 B URL cdn.s.id/app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_ssgManifest.js
IP
File type ASCII text, with no line terminators
Hash 5ce0d2713404bd05c9502cc490488dca
552f4970f95812a42a366cf0752db5c4c4218236
ddeea69d5116852145775870dab4d86b4e909e7a02c03465efaa67d5b0f744be
GET /app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_ssgManifest.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 91
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "5ce0d2713404bd05c9502cc490488dca"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: qahNwjH379GVUGSk0V4A_3pTmwkv0M6L
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: WdvHDu_dVDiljmitEnXNqh0EvCN9S5_5RrU7rQAgQZ5p7Rbz7ofDaA==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_buildManifest.js
10 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_buildManifest.js
IP
File type ASCII text, with very long lines (10149), with no line terminators
Hash ff6fbc5382402ea43db85569fecd7bdc
3f9952c0166de337ec576c2ac38ff015402709ea
d0e4a3aa06079aaa220f6e47af8ae9f9fa37dcf4ac461cf7117e50bfcd336aa3
GET /app/p_230511c8aa95/user/_next/static/UBxCushcOXtgWCPctSVaz/_buildManifest.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 10149
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "ff6fbc5382402ea43db85569fecd7bdc"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: vjwQdKcwX9QMb650Mp50aA_mqM0PldUC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: Q1cdh2wFqbS_j4Fg6hUIN6e8Gknezcp4e-9jNDbKcO3ebn3Z802v2g==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/images/sid-logo-new-light.svg
3.9 kB URL cdn.s.id/app/p_230511c8aa95/user/images/sid-logo-new-light.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b3e9be8f1d6a2b7f3f961c636bd7a812
206229a9f6dba2f2aad30dde2ae671a7ae740027
1af5eacc5472d595046d8320feb556463d66ca3711b5fc2e6449e5cc49cd167f
GET /app/p_230511c8aa95/user/images/sid-logo-new-light.svg HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3904
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "b3e9be8f1d6a2b7f3f961c636bd7a812"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: hfqW8e1HD49gXQFQTeh5KO9SJ3MuXuQE
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: -xzlcXkX1IROIq8z14FdQjNjC5sIk6aulJwKwY2pB34Bmjfiw6R1UA==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/images/errors/403.svg
4.4 kB URL cdn.s.id/app/p_230511c8aa95/user/images/errors/403.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (532)
Hash a6f7dffd03977a861d575b73f92240c8
33186c93e96f9a6e2370ac1a21551a9d7bfcc802
92c39b5c986c8a9c713d77081a0272187a847c57192fe03fc152d25fc4c35668
GET /app/p_230511c8aa95/user/images/errors/403.svg HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 4406
date: Thu, 11 May 2023 15:06:55 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "a6f7dffd03977a861d575b73f92240c8"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: IsV26XIlKDq_VCchxfd7EA72GeSXFnUq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: P1frdT-4uz9mnesWbOcxQ0g02lybpUwjA8wwGHdJW9PRaWdjz3ijDg==
age: 29905
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/framework-0203d16360ddbf38.js
141 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/framework-0203d16360ddbf38.js
IP
File type ASCII text, with very long lines (65200)
Size 141 kB (141073 bytes)
Hash 283b599b9087f3bd0b5c7388146fd178
d92b8e5f84d3bee2817767dfd2635d3f14d8102e
dffb777aa00ce1479132f8dbacb4a9446cea81d9fce5c2df882506a8c4c93122
GET /app/p_230511c8aa95/user/_next/static/chunks/framework-0203d16360ddbf38.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 141073
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "283b599b9087f3bd0b5c7388146fd178"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: UlAOTscjiD6J53XfuIecCdK492XJ6Hmz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: c-Xn9qdjZdwXASCHcCp_PWTK02kZUxeAy1v9rSgK4Q32WISUw3kVEg==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 4ca643eb908b2ebf8e99708e63435736
f5fe3576d1fab4b0958e51a59e1c12e2e927de03
a9377a71a606b86c932196ab7efadacb7ec1b93d67e1e3df06d5bfac71161d56
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:20 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/pages/_app-5e944a34882d3fb6.js
310 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/pages/_app-5e944a34882d3fb6.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 310 kB (309657 bytes)
Hash b9afb962ea420a84e3e7be7e9941f902
ace3d08c162f518860338e4a8f68df8bb0a611fe
63469b66091d6f8553f973c343028e139160e773d0b8264b34a03414f9a94bcd
GET /app/p_230511c8aa95/user/_next/static/chunks/pages/_app-5e944a34882d3fb6.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 309657
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "b9afb962ea420a84e3e7be7e9941f902"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: zqIu5qHsFn.ILVaSuxt1Y5___7bwwSmt
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: aw07jTR90ZueGWg58yEPQ6WdFSJ4sKPdNLWhSK_s6RlJgeXgkVyS9Q==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash a6ce3d3fa35a7181d798f18939f0d4df
009eb5c2d470414820b9ab723ef55e2e36b326de
c4bc89043c14c0cce7198301f9fb809a878ce2ea48fae3cc9b34b74d7bb2eb62
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100049
Date: Thu, 11 May 2023 23:25:20 GMT
Etag: "645c5d31-1d7"
Expires: Sat, 13 May 2023 03:12:49 GMT
Last-Modified: Thu, 11 May 2023 03:12:49 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 0e39dca74306d7aab723ed3d73dbfbb4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: bTmos9AdDBwDCGI_9wwxUk-Xk0ttOjCq6dDWgWUR2enOzVk737fAHw==
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash a6ce3d3fa35a7181d798f18939f0d4df
009eb5c2d470414820b9ab723ef55e2e36b326de
c4bc89043c14c0cce7198301f9fb809a878ce2ea48fae3cc9b34b74d7bb2eb62
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100049
Date: Thu, 11 May 2023 23:25:20 GMT
Etag: "645c5d31-1d7"
Expires: Sat, 13 May 2023 03:12:49 GMT
Last-Modified: Thu, 11 May 2023 03:12:49 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 60929bddfcfe8b3a510a9502ad6d8742.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: uNJpfPGpeR46hpvjMijDtcjBPQvYXL9Bv-a4B-D82k35vyoBFm6-6g==
cdn.s.id/app/p_230511c8aa95/user/_next/static/css/4016c3e78ee48766.css
120 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/css/4016c3e78ee48766.css
IP
File type ASCII text, with very long lines (65453)
Size 120 kB (120429 bytes)
Hash 4fa3a95683da52fae1632d12333b1b53
6c0c3b6b8196e6d6744d876a6c8e7638f6c283cf
ba8364a8f985fdc40ee28cfb5d1e5007915baaf9e0c6b2a47e496c85811178cd
GET /app/p_230511c8aa95/user/_next/static/css/4016c3e78ee48766.css HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css
content-length: 120429
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "4fa3a95683da52fae1632d12333b1b53"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: l8VUKWCJ84Rk3SzOk.9xK50IpmkZacuq
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: HcCYC7tT4sPShWK-q6DTi2yNESouiQoe1KkTwlFmg-yJswOCL0xg9w==
age: 33794
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/pages/forbidden-8ba2f2f9e8409d0b.js
3.5 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/pages/forbidden-8ba2f2f9e8409d0b.js
IP
File type ASCII text, with very long lines (3510), with no line terminators
Hash afd3c6c27ec597ea1eae60f8f4788255
cfcac0bba9d401fb7cd13e1d83023ec45f48117e
66e5b55d86c0f08fd4f4eb1b255e67e92e26350c35f70279884ac043117e5825
GET /app/p_230511c8aa95/user/_next/static/chunks/pages/forbidden-8ba2f2f9e8409d0b.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 3510
date: Thu, 11 May 2023 15:06:55 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "afd3c6c27ec597ea1eae60f8f4788255"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: TZr2zoStD6hM_uIO5uYQg4JaX07GrFIX
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: pVnUoQ85Yrb6nFZisytf4TH_BNMJ-cC77jjbyxrTcKq95BESu9xWhg==
age: 29906
vary: Origin
X-Firefox-Spdy: h2
ocsp.r2m02.amazontrust.com/
471 B URL ocsp.r2m02.amazontrust.com/
IP
Hash a6ce3d3fa35a7181d798f18939f0d4df
009eb5c2d470414820b9ab723ef55e2e36b326de
c4bc89043c14c0cce7198301f9fb809a878ce2ea48fae3cc9b34b74d7bb2eb62
POST / HTTP/1.1
Host: ocsp.r2m02.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: max-age=100049
Date: Thu, 11 May 2023 23:25:20 GMT
Etag: "645c5d31-1d7"
Expires: Sat, 13 May 2023 03:12:49 GMT
Last-Modified: Thu, 11 May 2023 03:12:49 GMT
Server: nginx
X-Cache: Miss from cloudfront
Via: 1.1 04c4f064943f75498361739eb063cb7a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 6zisrjkSzNDH_6Hr7fohHMAJLaa3WZcFxuXHqieGc6T_WFk_ReA8xA==
cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/main-84504437487b53da.js
93 kB URL cdn.s.id/app/p_230511c8aa95/user/_next/static/chunks/main-84504437487b53da.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 047faf5eef01a98108ec7e707d6c0a4c
5f07551bda7e2688741d2bc3248d2ea4cbbd612e
98a14d0ac05f3daa1edf06f4b1ed451a24dcf34c2af67f8377db3e19e376d646
GET /app/p_230511c8aa95/user/_next/static/chunks/main-84504437487b53da.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 93359
date: Thu, 11 May 2023 14:02:07 GMT
last-modified: Thu, 11 May 2023 13:13:57 GMT
etag: "047faf5eef01a98108ec7e707d6c0a4c"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: X.8S3q6z5eZTBAVe_9fwbnQ9lTi1MAI6
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 8mKSQ5Yl1ASjk_5MeNSFAMav0dmog8oBq7lmC2Stx2RiBm0PVZbQMA==
age: 33795
vary: Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 89df013e8608d07679738c5bed6b85f6
49951a3cf8def7832e44ef5d8448ccea2f9c0391
2680bd8acd47863cffaafb8d8c7384abe08358ce137bdb2e4fcf9ab61840f7e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816
200 OK 7.3 kB URL GET HTTP/2 static.cloudflareinsights.com/beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint89:79:35:ED:04:A2:CA:50:F7:9A:B8:FE:DF:A5:0C:B1:F2:E6:DD:E8
ValidityMon, 10 Apr 2023 00:00:00 GMT - Tue, 09 Apr 2024 23:59:59 GMT
File type gzip compressed data, from Unix\012- data
Hash ff1abb6ac62e075b34f74e2dc5b2cde7
8c45625ccc60114c4ae9b4f847527cba3bc98524
f21ab47fa0636c2ab844368cf232c00676bbc7304558ca7c1614ea337057894f
GET /beacon.min.js/v52afc6f149f6479b8c77fa569edb01181681764108816 HTTP/1.1
Host: static.cloudflareinsights.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:20 GMT
content-type: text/javascript;charset=UTF-8
access-control-allow-origin: *
cache-control: public, max-age=86400
etag: W/2023.4.2
last-modified: Mon, 17 Apr 2023 20:41:48 GMT
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
server: cloudflare
cf-ray: 7c5e2e3b58110afa-OSL
content-encoding: gzip
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
31 kB URL fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 May 2023 19:27:09 GMT
expires: Thu, 09 May 2024 19:27:09 GMT
cache-control: public, max-age=31536000
age: 100692
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
31 kB URL fonts.gstatic.com/s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 30928, version 1.0\012- data
Hash ac0d2859ea5f8fd6bcb3c305c08ec184
7f6c17e3e592cd8bd346b9cc261d8dd961b8aef7
ae919a7c9f25f0fd97fc18e398ae8e453fcaae487e4a4cb4f896e7fecde4a780
GET /s/montserrat/v25/JTUSjIg1_i6t8kCHKm459Wlhyw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 30928
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 10 May 2023 19:27:09 GMT
expires: Thu, 09 May 2024 19:27:09 GMT
cache-control: public, max-age=31536000
age: 100692
last-modified: Mon, 11 Jul 2022 18:57:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
471 B IP
Hash 89df013e8608d07679738c5bed6b85f6
49951a3cf8def7832e44ef5d8448ccea2f9c0391
2680bd8acd47863cffaafb8d8c7384abe08358ce137bdb2e4fcf9ab61840f7e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 97abca037dc8c43b1e84b02429c6d531
9def2e8d8c41de44e5bd2e86b24260c5213f7382
40246b5758465ea1dd8f9bd4310b8f995acd4f39aad8c6ea9d6b2bb049ecfe22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 97abca037dc8c43b1e84b02429c6d531
9def2e8d8c41de44e5bd2e86b24260c5213f7382
40246b5758465ea1dd8f9bd4310b8f995acd4f39aad8c6ea9d6b2bb049ecfe22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
472 B IP
Hash 97abca037dc8c43b1e84b02429c6d531
9def2e8d8c41de44e5bd2e86b24260c5213f7382
40246b5758465ea1dd8f9bd4310b8f995acd4f39aad8c6ea9d6b2bb049ecfe22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-98MWVCBDD7
80 kB URL www.googletagmanager.com/gtag/js?id=G-98MWVCBDD7
IP
File type ASCII text, with very long lines (3288)
Hash 9b31c9fc2463c7455fbe3a0b96619b98
2ffbadaaeaddb84ca4bf7b388e2444f22b424954
586a72032a605eee445847a2bb9e1f19bd173c56715ad58213e49874bfc2e5c9
GET /gtag/js?id=G-98MWVCBDD7 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80101
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-10823601447
71 kB URL www.googletagmanager.com/gtag/js?id=AW-10823601447
IP
File type ASCII text, with very long lines (4372)
Hash 7036da0d23b3f93abbb178ae7b52257e
9ff88e2206552269dab9c90b1e8f8b7aa85ab09d
de701ce1bfa2b68dc02d4c4deeefcb8e2bdf554e8a1a2a51f2dcd684908cec83
GET /gtag/js?id=AW-10823601447 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
last-modified: Thu, 11 May 2023 22:54:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70927
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LJQ0V44EV5
80 kB URL www.googletagmanager.com/gtag/js?id=G-LJQ0V44EV5
IP
File type ASCII text, with very long lines (3288)
Hash 364f81d678bffd3111dba2ac1d759118
6bbb368a248b3e0b6fc879580c25cb843f4c997c
6c7da07dc75bf858f5d342d36fa1b31b2bef719ce08dcd6dd0bfb3f33e862726
GET /gtag/js?id=G-LJQ0V44EV5 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79519
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash 97abca037dc8c43b1e84b02429c6d531
9def2e8d8c41de44e5bd2e86b24260c5213f7382
40246b5758465ea1dd8f9bd4310b8f995acd4f39aad8c6ea9d6b2bb049ecfe22
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-LJQ0V44EV5&l=dataLayer&cx=c
80 kB URL www.googletagmanager.com/gtag/js?id=G-LJQ0V44EV5&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (3288)
Hash 8579d96b7075d13e51308e2a67c56194
2a373146c0af8fb7709d7e6cca0bf034dbc52b5d
ad93a501df59e66cadcf73f2e00eb7e1307394344a6d60212e03505a65fbb330
GET /gtag/js?id=G-LJQ0V44EV5&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79479
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=AW-10823601447&l=dataLayer&cx=c
71 kB URL www.googletagmanager.com/gtag/js?id=AW-10823601447&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (4372)
Hash e0c97a28b104be7e5ba2d5067b88a67c
b8b00f3cc6038bea136150a20a4c656f6ed29dc8
1de0fb891996209aca0c1d13330641bacc4673bc239fc844c3867e11322af3b2
GET /gtag/js?id=AW-10823601447&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
last-modified: Thu, 11 May 2023 22:54:24 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 70882
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=UA-225238330-2&l=dataLayer&cx=c
46 kB URL www.googletagmanager.com/gtag/js?id=UA-225238330-2&l=dataLayer&cx=c
IP
File type ASCII text, with very long lines (2271)
Hash 060714911bf99a3dd193352dd65320af
498c09ed3d21ba70bb06d73a339fae2b1eb600aa
6fadb41228517689a4f4e1baee7b21ede3cd3505a17bd5c67ef2b3b4e4a38501
GET /gtag/js?id=UA-225238330-2&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:21 GMT
expires: Thu, 11 May 2023 23:25:21 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 46347
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
app.s.id/api/redirect
0 B IP
ASN #132647 Pengelola Nama Domain Internet Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/redirect HTTP/1.1
Host: app.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: ds,x-rpc-lang
Referer: https://home.s.id/
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 11 May 2023 23:25:21 GMT
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://home.s.id
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With, X-RPC-Lang, DS
access-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
app.s.id/api/user/me
0 B IP
ASN #132647 Pengelola Nama Domain Internet Indonesia
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /api/user/me HTTP/1.1
Host: app.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: GET
Access-Control-Request-Headers: ds,x-rpc-lang
Referer: https://home.s.id/
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 204 No Content
date: Thu, 11 May 2023 23:25:21 GMT
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://home.s.id
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With, X-RPC-Lang, DS
access-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash afde1d9523db3c645f0e9831d8990e65
54439b800ca647577daefd26576108b8b10a6ef5
e7901fae832f948e9e458ab15973fa61c93c1cb451af51ffedc5383138fbc135
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:21 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ekr.zdassets.com/compose/4b27aa03-d3da-43eb-8382-660c054fbc9d
254 B URL ekr.zdassets.com/compose/4b27aa03-d3da-43eb-8382-660c054fbc9d
IP
File type JSON data\012- , ASCII text, with very long lines (316), with no line terminators
Hash 66918f2f33d8b17ec2dd97704e1dc472
5473d2207e6b509a8bdf861b63f8e4f44df0e62b
6aba7c84f3243f4c0eafeb8ca8f05eafc1c4d8014f8da689227d9789e8b9cabd
GET /compose/4b27aa03-d3da-43eb-8382-660c054fbc9d HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:21 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
vary: Accept, Origin, Accept-Encoding
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"6aba7c84f3243f4c0eafeb8ca8f05eaf"
x-request-id: 7c25bc58daa5169d-SEA, 7c25bc58daa5169d-SEA
x-runtime: 0.003954
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qksPJlrvyaZ9eSCRKZV9HVx%2FxYEYxJ5SWBNmU1gm8kLnMStf%2BXP52%2BODnvVyLw9%2FLr8wasxqmzbKdCzPKCm9TSpBVs93HTuzLVy3vZF%2FBHeL5cJcQ59eiABfibSND5ktMFQ%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7c5e2e415e2c0b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
app.s.id/api/redirect
469 B IP
ASN #132647 Pengelola Nama Domain Internet Indonesia
File type JSON data\012- , ASCII text, with very long lines (469), with no line terminators
Hash a986c42aab43f215b2cff47a241682ad
6d9a0e2cb5cc1d1fbb2be4c07b7a9bd4876a5d0b
81d6ef397a6d125f2e35713f1329b807851d4040b122463c5106c0f97ef34149
GET /api/redirect HTTP/1.1
Host: app.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-RPC-Lang: en
DS: 1683847521,uigh1z,837c9a700a11d5122cc6d140ea5b1fe3
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:21 GMT
content-type: application/json
content-length: 469
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://home.s.id
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With, X-RPC-Lang, DS
access-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
home.s.id/cdn-cgi/rum?
204 No Content 0 B IP
Requested by https://home.s.id/forbidden#action
Certificate IssuerGoogle Trust Services LLC
Subjects.id
Fingerprint83:8D:A7:3C:E3:A9:84:19:28:12:27:7D:EF:E9:A2:FE:F8:13:2E:0F
ValiditySun, 16 Apr 2023 06:17:19 GMT - Sat, 15 Jul 2023 06:17:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: home.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1060
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/forbidden
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 11 May 2023 23:25:22 GMT
access-control-allow-origin: https://home.s.id
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7c5e2e44981d1c0a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
472 B IP
Hash afde1d9523db3c645f0e9831d8990e65
54439b800ca647577daefd26576108b8b10a6ef5
e7901fae832f948e9e458ab15973fa61c93c1cb451af51ffedc5383138fbc135
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 11 May 2023 23:25:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
region1.analytics.google.com/g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&_gaz=1&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_s=1&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
0 B URL region1.analytics.google.com/g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&_gaz=1&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_s=1&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&_gaz=1&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_s=1&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=page_view&_fv=1&_nsi=1&_ss=1&_ee=1 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
HTTP/2 204 No Content
access-control-allow-origin: https://home.s.id
date: Thu, 11 May 2023 23:25:22 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
app.s.id/api/user/me
58 B IP
ASN #132647 Pengelola Nama Domain Internet Indonesia
File type JSON data\012- , ASCII text, with no line terminators
Hash dc6337924fcba32afbaef2dc7a71ffcf
1bb7b761c6bf8bc117eddd9525d61844fa676190
4bc6fcf8abb0feb0a50bc17148052beafa7b3ac9aeb9e20ecf183791f6a9c50b
GET /api/user/me HTTP/1.1
Host: app.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-RPC-Lang: en
DS: 1683847521,6zmrbk,6aaf1922cbd81947eddaf3e72cb1e2b8
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 401 Unauthorized
date: Thu, 11 May 2023 23:25:21 GMT
content-type: application/json
content-length: 58
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-origin: https://home.s.id
access-control-allow-credentials: true
access-control-allow-headers: Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, accept, origin, Cache-Control, X-Requested-With, X-RPC-Lang, DS
access-control-allow-methods: GET, HEAD, POST, PUT, DELETE, OPTIONS, PATCH
x-ratelimit-limit: 30
x-ratelimit-remaining: 29
x-ratelimit-reset: 15
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
home.s.id/cdn-cgi/rum?
204 No Content 0 B IP
Requested by https://home.s.id/forbidden#action
Certificate IssuerGoogle Trust Services LLC
Subjects.id
Fingerprint83:8D:A7:3C:E3:A9:84:19:28:12:27:7D:EF:E9:A2:FE:F8:13:2E:0F
ValiditySun, 16 Apr 2023 06:17:19 GMT - Sat, 15 Jul 2023 06:17:18 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: home.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Content-Length: 481
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/forbidden
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 204 No Content
date: Thu, 11 May 2023 23:25:23 GMT
access-control-allow-origin: https://home.s.id
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7c5e2e4c1b5e1c0a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/css/b528c02960be808e.css
200 OK 105 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/css/b528c02960be808e.css
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (64935)
Size 105 kB (104645 bytes)
Hash 142d0ec64535a497b2de467fdc878091
eab04a28f72e9a9d9304c770a83c720ffbcbb26e
a0d20fddd46632e0f92ca4047cccd4d59c6874a544c033fc4090ac7e0765d128
GET /app/p_230511c8aa95/blog/_next/static/css/b528c02960be808e.css HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 104645
date: Thu, 11 May 2023 13:24:10 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "142d0ec64535a497b2de467fdc878091"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: W3Lab6tBmkSvanxs_Nh3enT3eRA9GNvT
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: rOy2DFXL1vQN6CZq08oYAXqcqB3F59n-7vicY_mY8xX5Zb4oX7VnNA==
age: 36074
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/css/0ccc702cf5b6f291.css
722 B URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/css/0ccc702cf5b6f291.css
IP
File type ASCII text, with very long lines (722), with no line terminators
Hash 17b149a5ca6bb2e1b1b6a41e8ed22c17
682c9c9739b50e6219758282952f347b44886d3f
ecf1b45e741c358105ec165c66cc44e962e6dbfe4948ea4a4094791472e03c6d
GET /app/p_230511c8aa95/blog/_next/static/css/0ccc702cf5b6f291.css HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/css
content-length: 722
date: Thu, 11 May 2023 13:24:10 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "17b149a5ca6bb2e1b1b6a41e8ed22c17"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: 76PenCfUktqVj2fOfJLZ.QWxulokewTC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 4tLcumKaiR2GF8Gfb09BsRISKobuWrmfPL6SRqXcVf2WrdbQcr9uIQ==
age: 36074
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/webpack-63fa825eceba7404.js
200 OK 2.1 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/webpack-63fa825eceba7404.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (2140), with no line terminators
Hash a12b8b9f0767208eb25cf7afa5da056b
22af20227018d5aa3296a5efdb7bd2f91a17119f
dd33cf8d9bcc0fab97731632283facb5be8fe45bee6dc0441957a4a29b9efad7
GET /app/p_230511c8aa95/blog/_next/static/chunks/webpack-63fa825eceba7404.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2140
date: Thu, 11 May 2023 13:36:09 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "a12b8b9f0767208eb25cf7afa5da056b"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: dGn18TMB53GnAH8RVOb5Hwqw0Bj8TYO0
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 1aahNVwOKXwVWMFimJwU3LgERDjuX_NsOo-EBLVH_zpCs8rv6rFKSA==
age: 35355
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/framework-2647c7e378e02044.js
200 OK 141 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/framework-2647c7e378e02044.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (65202)
Size 141 kB (141057 bytes)
Hash 1639a143b632bdca2ff0b6a30c784aeb
d64cbc59de02eddaaa1e5f361f6927b8c1c0d712
df6ff92ab9484674635dab18aa6d97d4bdea7d26fffc3c53fc890c218e23ff7e
GET /app/p_230511c8aa95/blog/_next/static/chunks/framework-2647c7e378e02044.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 141057
date: Thu, 11 May 2023 13:36:09 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "1639a143b632bdca2ff0b6a30c784aeb"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: qxjiITwtEW9_MgOFRoRI3d4j3U2WrreL
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 9zMAth5ufajBCeAIoqMyHmnP-Oko6eXP_IA7URUBjs9WjmhGHgUVYw==
age: 35354
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/main-ae57ee9c17c390d0.js
93 kB URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/main-ae57ee9c17c390d0.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 1e2fd193041b6a319eb1776ae861be5e
a3599fe7ad22029089faf569ce2e66060527fded
e5da21f851857a02fb23a30c384c45585a17a6aa89cd3957ae10c678a24b9648
GET /app/p_230511c8aa95/blog/_next/static/chunks/main-ae57ee9c17c390d0.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 93058
date: Thu, 11 May 2023 13:36:10 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "1e2fd193041b6a319eb1776ae861be5e"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: wAenyCxm9o7uqtaWEqYZQwYxVmy5_j9H
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: kLedkuw_7drtouAKMNWnU-l-xAq2bfAv7qF7vXJPflrV873trK6J_Q==
age: 35354
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/389-3c58604d16d9e910.js
165 kB URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/389-3c58604d16d9e910.js
IP
File type ASCII text, with very long lines (64667), with CRLF line terminators
Size 165 kB (165026 bytes)
Hash de0723fc0f8847ef36892fad204fd180
47f047705fda7522490c9158e6dba1d6949de3f2
a918e36093fc1bc6aa3ba45dfdda02d32adeda69135a97167213d17f7c52bdbb
GET /app/p_230511c8aa95/blog/_next/static/chunks/389-3c58604d16d9e910.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 165026
date: Thu, 11 May 2023 13:36:11 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "de0723fc0f8847ef36892fad204fd180"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: 6Qjeo9E40vLRRuUy.ycTvHI5xGfSTBGC
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 3GEs_KGT7GRbPeqlN4JayM9C86BDNnhd7Hr6nbFe56wahvamIiFfMg==
age: 35353
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/pages/_app-6940a02d227784e0.js
154 kB URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/pages/_app-6940a02d227784e0.js
IP
File type Unicode text, UTF-8 text, with very long lines (65532), with no line terminators
Size 154 kB (153949 bytes)
Hash 924df73becca75b663908abfcb5735e8
88e42db729611b692d3fe5dadf289fb20fef0275
218a4447156a7263a77b2b5e008c87a34900c199ffd0441532893745091ddb57
GET /app/p_230511c8aa95/blog/_next/static/chunks/pages/_app-6940a02d227784e0.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 153949
date: Thu, 11 May 2023 13:36:11 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "924df73becca75b663908abfcb5735e8"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: YT8KMdYDHbXyfYjZb3JEumvzfAV1CTmz
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: vJ98IjsFz-7_aG1_jY2RWP4GvZKXxygAXzo2k2riJiVCtZyCkPz41g==
age: 35353
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/9849d5b5-45be35bd4b4157cd.js
2.7 kB URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/9849d5b5-45be35bd4b4157cd.js
IP
File type ASCII text, with very long lines (2686), with no line terminators
Hash ce5b46313723bd3cf5036595cef68bd3
db66130bdb125cc740f587250e0eff78a6043e89
3fd155d8504c42656f9a67bde0f6fa8c8313701dce4ca486a7d598dff22e1801
GET /app/p_230511c8aa95/blog/_next/static/chunks/9849d5b5-45be35bd4b4157cd.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 2686
date: Thu, 11 May 2023 13:36:11 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "ce5b46313723bd3cf5036595cef68bd3"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: MMiuII9SksnDMB7.gciBjZ2MEe_SjKHi
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: R2nTJImVrsG0Hk0ukaUO5cYY-UubHJGyBDy41zl_k3eb3mLqozDspQ==
age: 35353
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/852-07b180691608c045.js
200 OK 16 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/852-07b180691608c045.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type HTML document, ASCII text, with very long lines (15946), with no line terminators
Hash 67a4425fba086d8801490760c993e3da
7132c2f2212e2fa2234bbc16d72a12b306e0e9f1
e21615bf36902ffad5b17c62c22da59572374497fe3616589d7eb39d891764b4
GET /app/p_230511c8aa95/blog/_next/static/chunks/852-07b180691608c045.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 15946
date: Thu, 11 May 2023 13:36:11 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "67a4425fba086d8801490760c993e3da"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: mCdYinJiYbbbXMF_AnAXKVP3VmwrI02N
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: WI0PCZhkW4yF_XwDQnzrXAm6-81V7dM5D6LQ1v7Wnfyl8VYPmKFW0A==
age: 35352
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_buildManifest.js
200 OK 999 B URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_buildManifest.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type ASCII text, with very long lines (999), with no line terminators
Hash cf1afaddd3a63353dca46b3525b70ddb
f8256180cc5e32df9f0d074fb7b2dcb4074ad51b
2503a49a3c74e5369bd1b1aab14833abfcbce692f6159394e53f40f1f0d4e922
GET /app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_buildManifest.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 999
date: Thu, 11 May 2023 13:36:12 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "cf1afaddd3a63353dca46b3525b70ddb"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: O0bUhyXaEAKv7hnC_C.DcZ50nP0B9kpi
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 1mrm01WYQqZ6JxqDKzVoZ93ZMESFcFINWHvh4IiPGgPhDR77w4p1kg==
age: 35351
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/pages/post/%5B...article%5D-51c50a194a28d7a1.js
200 OK 23 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/_next/static/chunks/pages/post/%5B...article%5D-51c50a194a28d7a1.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (23081), with no line terminators
Hash f3116f16f654e0dafdc43b1087577abf
25f71306d01b09e2caf25ee602f2e6577eda3039
4b0b85c742b9a2f7dc0cad9a5c33db6318f4965bd48d93ed24e33451a756a51d
GET /app/p_230511c8aa95/blog/_next/static/chunks/pages/post/%5B...article%5D-51c50a194a28d7a1.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 23083
date: Thu, 11 May 2023 13:36:12 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "f3116f16f654e0dafdc43b1087577abf"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: _5Sg93hbyAjbXB1BOH8Q7Ml1HQ7csE_6
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: OSeHWvTMk1IWNFE1g8cE04x7d4XqlCdSOVssBi1m60OZ3ThYC5dwdw==
age: 35352
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_ssgManifest.js
77 B URL cdn.s.id/app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_ssgManifest.js
IP
File type ASCII text, with no line terminators
Hash b6652df95db52feb4daf4eca35380933
65451d110137761b318c82d9071c042db80c4036
6f5b4aa00d2f8d6aed9935b471806bf7acef464d0c1d390260e5fe27f800c67e
GET /app/p_230511c8aa95/blog/_next/static/o3na-76DJYVZGkZrXQrYf/_ssgManifest.js HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript
content-length: 77
date: Thu, 11 May 2023 13:36:13 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "b6652df95db52feb4daf4eca35380933"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: SSTmCVklAvjhLEZd_RnYeJasFcf8V6kR
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: 1A3NFilYmZKOxg8n8L42RlBGNjHMH1k-iLahd-Yf4WVtyQGCpGfLWw==
age: 35351
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/images/sid-logo-new-light.svg
200 OK 3.9 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/images/sid-logo-new-light.svg
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b3e9be8f1d6a2b7f3f961c636bd7a812
206229a9f6dba2f2aad30dde2ae671a7ae740027
1af5eacc5472d595046d8320feb556463d66ca3711b5fc2e6449e5cc49cd167f
GET /app/p_230511c8aa95/blog/images/sid-logo-new-light.svg HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3904
date: Thu, 11 May 2023 13:24:50 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "b3e9be8f1d6a2b7f3f961c636bd7a812"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: eOMo_kc9JGAs2Jjot_FKsdfJud98rnbS
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: tPqkMERpsLaENHjJZoK5_oTz003aNuj-9wsDUwDZs32HGMbD4y1yKA==
age: 36034
vary: Origin
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/images/adg-red-ring.svg
200 OK 6.4 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/images/adg-red-ring.svg
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (6438), with no line terminators
Hash d8656f00411289185175620333fd7531
5cb6bb53297cb7de333679fef32a2e8ac075f59c
c7fb840478ca64f3410fff0ffa40eb38fd8a7cfc36c10f117c3869ea93c00182
GET /app/p_230511c8aa95/blog/images/adg-red-ring.svg HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 6438
date: Thu, 11 May 2023 13:24:50 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "d8656f00411289185175620333fd7531"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: dZ6BogUEBZm0KD9wMDGQQwAbkEuZ50Ct
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: aAktfLz3NPMRKwoXlZHVqr1_WQMbusmM9O7q8SKoko4KKR3hEk3jtA==
age: 36034
vary: Origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 47728, version 1.0\012- data
Hash b1581ddd77372ceb06eb14adfd1bea07
1a3b0fc96fa73b808aa1f91f122a3c9bdcf93ee8
97e82d8eac8d106b28abf1b716982c40c06fffe49cc2f34cd1c299266745ef73
GET /s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blog.s.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 May 2023 06:20:48 GMT
expires: Fri, 10 May 2024 06:20:48 GMT
cache-control: public, max-age=31536000
age: 61475
last-modified: Tue, 23 Aug 2022 17:55:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
zendesk-eu.my.sentry.io/api/113/envelope/?sentry_key=460f708319894406a8ebaea641969c60&sentry_version=7
2 B URL zendesk-eu.my.sentry.io/api/113/envelope/?sentry_key=460f708319894406a8ebaea641969c60&sentry_version=7
IP
ASN #396982 GOOGLE-CLOUD-PLATFORM
File type JSON data\012- , ASCII text, with no line terminators
Hash 99914b932bd37a50b983c5e7c90ae93b
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
POST /api/113/envelope/?sentry_key=460f708319894406a8ebaea641969c60&sentry_version=7 HTTP/1.1
Host: zendesk-eu.my.sentry.io
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 134
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 11 May 2023 23:25:23 GMT
content-type: application/json
content-length: 2
access-control-allow-origin: *
vary: origin,access-control-request-method,access-control-request-headers
access-control-expose-headers: x-sentry-error,x-sentry-rate-limits,retry-after
x-envoy-upstream-service-time: 0
x-upstream-remote-address: 10.2.138.13:3000
x-upstream: relay
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 47728, version 1.0\012- data
Hash b1581ddd77372ceb06eb14adfd1bea07
1a3b0fc96fa73b808aa1f91f122a3c9bdcf93ee8
97e82d8eac8d106b28abf1b716982c40c06fffe49cc2f34cd1c299266745ef73
GET /s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blog.s.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 May 2023 06:20:48 GMT
expires: Fri, 10 May 2024 06:20:48 GMT
cache-control: public, max-age=31536000
age: 61475
last-modified: Tue, 23 Aug 2022 17:55:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
200 OK 48 kB URL GET HTTP/2 fonts.gstatic.com/s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintD2:67:59:66:D0:D5:C9:19:F4:2D:E4:65:4B:EA:E1:50:8D:D2:3E:1D
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
File type Web Open Font Format (Version 2), TrueType, length 47728, version 1.0\012- data
Hash b1581ddd77372ceb06eb14adfd1bea07
1a3b0fc96fa73b808aa1f91f122a3c9bdcf93ee8
97e82d8eac8d106b28abf1b716982c40c06fffe49cc2f34cd1c299266745ef73
GET /s/worksans/v18/QGYsz_wNahGAdqQ43Rh_fKDp.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://blog.s.id
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47728
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 11 May 2023 06:20:48 GMT
expires: Fri, 10 May 2024 06:20:48 GMT
cache-control: public, max-age=31536000
age: 61475
last-modified: Tue, 23 Aug 2022 17:55:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
cdn.s.id/app/p_230511c8aa95/blog/images/sid-logo-new-dark.svg
200 OK 3.9 kB URL GET HTTP/2 cdn.s.id/app/p_230511c8aa95/blog/images/sid-logo-new-dark.svg
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerAmazon
Subjectcdn.s.id
FingerprintFE:A0:2C:D1:AB:F9:CF:31:E4:C9:5A:F7:0F:8A:97:19:7E:04:7F:C3
ValidityTue, 20 Dec 2022 00:00:00 GMT - Thu, 18 Jan 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5f6c6d33de5cabfc68231a77c873ac2a
4d97e1c7d12deb6d6873d5ee5bcc787084d246a7
c62efa11e56d452e201244a46cc0c80d5bbd7d676487f6bb4953d71ac55e4f04
GET /app/p_230511c8aa95/blog/images/sid-logo-new-dark.svg HTTP/1.1
Host: cdn.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3904
date: Thu, 11 May 2023 13:24:22 GMT
last-modified: Thu, 11 May 2023 13:13:56 GMT
etag: "5f6c6d33de5cabfc68231a77c873ac2a"
x-amz-server-side-encryption: AES256
cache-control: immutable,max-age=31536000,public
content-encoding: utf-8
x-amz-version-id: C34dlwPefNjXERn7fvd3dP9.8Wq3Nfyk
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 8b82a0c44466382daf259dbb61c8f23c.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: XxKlSbT-MO6yTRR7OwGzzy5bHy5mFkH-nZP3PxGlv-2UKFKkuoGb1g==
age: 36062
vary: Origin
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-LBWQJM5WLF
200 OK 80 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-LBWQJM5WLF
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCA:2C:8E:2F:14:74:84:57:8C:39:86:59:92:AC:A1:7C:C8:FA:99:CA
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
File type ASCII text, with very long lines (3288)
Hash 7b34b319798c89bac88c0dc65edf7c04
1fef1915e37819240fda732cb0faa4f607ebc6da
053a72ecef515d8c4299c12bfa003c071c71abd6267ea0a9782bec342126d399
GET /gtag/js?id=G-LBWQJM5WLF HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:23 GMT
expires: Thu, 11 May 2023 23:25:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 80114
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.googletagmanager.com/gtag/js?id=G-GJLS9JMJCK
80 kB URL www.googletagmanager.com/gtag/js?id=G-GJLS9JMJCK
IP
File type ASCII text, with very long lines (3288)
Hash 1cb93da440ce4041b7230830ac812f95
fe6fdb2f548921b0c62c6e34f0c6bd926908d2fb
00a803d355557da48de84ba4e1d649b871f058ee96e119ec0f3b4fdafd9cf660
GET /gtag/js?id=G-GJLS9JMJCK HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 11 May 2023 23:25:23 GMT
expires: Thu, 11 May 2023 23:25:23 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 79478
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
blog.s.id/cdn-cgi/rum?
0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /cdn-cgi/rum? HTTP/1.1
Host: blog.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
content-type: application/json
Content-Length: 1207
Origin: https://blog.s.id
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0; _ga_LBWQJM5WLF=GS1.1.1683847523.1.0.1683847523.60.0.0; _ga_GJLS9JMJCK=GS1.1.1683847523.1.0.1683847523.0.0.0
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 204 No Content
date: Thu, 11 May 2023 23:25:23 GMT
access-control-allow-origin: https://blog.s.id
access-control-allow-methods: POST,OPTIONS
access-control-max-age: 86400
vary: Origin
access-control-allow-credentials: true
server: cloudflare
cf-ray: 7c5e2e4f4cda1c0a-OSL
x-frame-options: DENY
x-content-type-options: nosniff
X-Firefox-Spdy: h2
region1.analytics.google.com/g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=scroll&epn.percent_scrolled=90
204 No Content 0 B URL POST HTTP/3 region1.analytics.google.com/g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=scroll&epn.percent_scrolled=90
IP
Requested by https://home.s.id/forbidden#action
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
FingerprintCA:2C:8E:2F:14:74:84:57:8C:39:86:59:92:AC:A1:7C:C8:FA:99:CA
ValidityMon, 17 Apr 2023 08:16:32 GMT - Mon, 10 Jul 2023 08:16:31 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /g/collect?v=2&tid=G-98MWVCBDD7>m=45je35a0&_p=663516666&cid=1666190224.1683847521&ul=en-us&sr=1280x1024&_eu=AEA&_s=2&sid=1683847521&sct=1&seg=0&dl=https%3A%2F%2Fhome.s.id%2Fforbidden&dt=Forbidden%20-%20S.id&en=scroll&epn.percent_scrolled=90 HTTP/1.1
Host: region1.analytics.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://home.s.id
DNT: 1
Connection: keep-alive
Referer: https://home.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0
TE: trailers
HTTP/3 204 No Content
access-control-allow-origin: https://home.s.id
date: Thu, 11 May 2023 23:25:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
access-control-allow-credentials: true
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LBWQJM5WLF&cid=1666190224.1683847521>m=45je35a0&aip=1&z=8548357
42 B URL www.google.no/ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LBWQJM5WLF&cid=1666190224.1683847521>m=45je35a0&aip=1&z=8548357
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?v=1&t=sr&slf_rd=1&_r=4&tid=G-LBWQJM5WLF&cid=1666190224.1683847521>m=45je35a0&aip=1&z=8548357 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 11 May 2023 23:25:23 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
blog.s.id/favicon.ico
374 B IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 2137def2d03d166159c9d82347e2f023
d566cfac9656ce95ba623921422c02b7ff0b49c5
cfe37d249e5eda84e78c2c746fa7c094303fdb0288caa687c895e02a3d46c114
GET /favicon.ico HTTP/1.1
Host: blog.s.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Cookie: _ga_98MWVCBDD7=GS1.1.1683847521.1.0.1683847521.60.0.0; _ga=GA1.1.1666190224.1683847521; _gcl_au=1.1.1764459523.1683847521; _ga_LJQ0V44EV5=GS1.1.1683847521.1.0.1683847521.0.0.0; _ga_LBWQJM5WLF=GS1.1.1683847523.1.0.1683847523.60.0.0; _ga_GJLS9JMJCK=GS1.1.1683847523.1.0.1683847523.0.0.0
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:24 GMT
content-type: image/x-icon
cache-control: public, max-age=14400
last-modified: Fri, 04 Mar 2022 07:03:55 GMT
etag: W/"171-17f53bdff78"
vary: Accept-Encoding
cf-cache-status: EXPIRED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5UHOjvOtd43t6jLx%2FjQ6mT4oeBtVJmJaM1bW5IPAwj9sRLQl0mfIEVqvE0YX4QrhcxJDRZ2W8g0WPYfqk88ZJ5nh7w%2Fa7CQUAlYp40LlbAE0D4hQx846Ymt1JKY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
x-content-type-options: nosniff
server: cloudflare
cf-ray: 7c5e2e505d691c0a-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Work+Sans:wght@400;500;600;700&display=swap
200 OK 12 kB URL GET HTTP/3 fonts.googleapis.com/css2?family=Montserrat:wght@400;500;600;700&family=Work+Sans:wght@400;500;600;700&display=swap
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerGoogle Trust Services LLC
Subjectupload.video.google.com
Fingerprint78:3F:7F:CC:E7:90:DA:64:23:AC:13:1E:55:7A:62:1E:2B:E4:30:5C
ValidityMon, 17 Apr 2023 08:25:28 GMT - Mon, 10 Jul 2023 08:25:27 GMT
Hash b2dfb29442dc1bdbba96360e76a2d8ff
08abbec340dad80efd39b15d0e4729f886214ed7
ac2af12c81be58d6906f22b9dbdb6d9753a775ca31d71c993839c8674acd020f
GET /css2?family=Montserrat:wght@400;500;600;700&family=Work+Sans:wght@400;500;600;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/3 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 11 May 2023 23:25:23 GMT
date: Thu, 11 May 2023 23:25:23 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
ekr.zdassets.com/compose/1dc98855-fcfe-49a8-9ac6-f3d16b24538f
200 OK 319 B URL GET HTTP/2 ekr.zdassets.com/compose/1dc98855-fcfe-49a8-9ac6-f3d16b24538f
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerCloudflare, Inc.
Subjectzdassets.com
Fingerprint8A:25:1A:C6:2D:0B:57:20:0E:AC:67:73:C0:21:62:12:0D:EA:56:28
ValidityThu, 10 Nov 2022 00:00:00 GMT - Thu, 09 Nov 2023 23:59:59 GMT
File type troff or preprocessor input, ASCII text, with very long lines (343), with no line terminators
Hash f3e08ca10b936ea33e525864dcfea4ce
0922b9fc183881c14c5ee65e0f6fc492c6b1fcd4
bd82135bb6113df625761d2eccb17797d6c210b3f90eb949e4b4d50293fc4519
GET /compose/1dc98855-fcfe-49a8-9ac6-f3d16b24538f HTTP/1.1
Host: ekr.zdassets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://blog.s.id
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:23 GMT
content-type: application/json; charset=utf-8
status: 200 OK
access-control-allow-origin: *
access-control-allow-methods: GET, POST, OPTIONS
access-control-expose-headers:
access-control-max-age: 7200
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-download-options: noopen
x-permitted-cross-domain-policies: none
referrer-policy: strict-origin-when-cross-origin
cdn-cache-control: max-age=60
vary: Accept, Origin, Accept-Encoding
cache-control: max-age=600, public, stale-while-revalidate=600, stale-if-error=21600
etag: W/"1748f7fd83003294df841b0b263aebf7"
x-request-id: 7c25e0fb19fb0b55-SEA, 7c25e0fb19fb0b55-SEA
x-runtime: 0.002357
x-zendesk-zorg: yes
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hk%2F3%2FRPcy1zY5pMcwtH9B5ypqj359eDhITSgTlnD7OoUBLd6m%2FsA1Sdq3Sn3750%2FeZIOrtI4UcOPWP8lZo7rhFBaDU5IvFMPJKfCCRBoFx8UrIaxRAlmDdJQWtbRjeiw0pE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=0
server: cloudflare
cf-ray: 7c5e2e4e8bd20b69-OSL
content-encoding: br
X-Firefox-Spdy: h2
protagcdn.com/s/s.id/site.js
200 OK 396 kB URL GET HTTP/2 protagcdn.com/s/s.id/site.js
IP
Requested by https://blog.s.id/post/2022/05/19/oops-you-accessing-forbidden-link-what-is-that-9m00gu9i3?utm_source=home_sid&utm_medium=redirect
Certificate IssuerLet's Encrypt
Subjectprotagcdn.com
Fingerprint77:9F:9C:0E:AB:36:C9:7A:8F:76:3D:6F:68:D8:E4:46:11:80:72:BC
ValidityTue, 02 May 2023 23:36:49 GMT - Mon, 31 Jul 2023 23:36:48 GMT
Size 396 kB (395566 bytes)
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /s/s.id/site.js HTTP/1.1
Host: protagcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://blog.s.id/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Thu, 11 May 2023 23:25:23 GMT
content-type: application/javascript
cache-control: public, max-age=1800
cf-bgj: minify
cf-polished: origSize=396346
expires: Thu, 11 May 2023 23:55:23 GMT
last-modified: Tue, 28 Jun 2022 09:03:45 GMT
pragma: no-cache
vary: Accept-Encoding
cf-cache-status: REVALIDATED
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XmfAR%2FtdnQ8N4iT779xANU1bOMdlv8%2BXniTtBByxDLUy1dJquCuyycbLbnf46Fo%2BjYA3FD%2BPdq1bjm0%2Bde6MBevjoo8%2Bpd%2B%2BkiILajbE5zzNJCyE8LUOUfDsZnu4okY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7c5e2e4f9dbab51e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
103.134.152.1
142.250.74.131
45.126.58.78
34.89.128.121
188.114.96.1
104.18.70.113
0.0.0.0