Report - pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html

Report Overview

Submitted URL

pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html
IP

142.250.74.161

ASN

#15169 GOOGLE
Submitted

2022-12-06T02:52:47Z

Access
Website Title
Final URL
Tags

None
urlquery detections

No alerts detected

Detections

urlquery

0
Network Intrusion Detection

0
Threat Detection Systems

2

Domain Summary

Domain	Rank	First Seen	Last Seen	Sent	Received	IP
bdv.bidvertiser.com (3)	289264	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1238	9997	54.241.51.109
www.linkwithin.com (2)	115766	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	598	724	3.19.188.212
s7.addthis.com (3)	1504	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1201	144141	23.38.200.123
banners.needearn.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	323	328	94.229.72.115
www.advertlets.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	604	748	199.115.116.43
img-getpocket.cdn.mozilla.net (6)	1631	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	3245	66044	34.120.237.76
z.moatads.com (1)	374	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	396	1431	2.18.173.140
ocsp.pki.goog (7)	175	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2401	4899	216.58.211.3
pouchnote.blogspot.com (4)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2371	21712	172.217.21.161
i155.photobucket.com (2)	492446	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	760	1994	143.204.55.106
synad2.nuffnang.com.my (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	287	853	18.138.110.223
firefox.settings.services.mozilla.com (2)	867	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	782	2374	34.102.187.140
v1.addthisedge.com (1)	1721	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	426	338	23.38.200.123
contile.services.mozilla.com (1)	1114	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	333	229	34.117.237.239
ocsp.digicert.com (4)	86	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1364	2769	93.184.220.29
content-signature-2.cdn.mozilla.net (1)	1152	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	413	5843	34.160.144.191
www.google-analytics.com (2)	40	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	1205	18038	142.250.74.110
apis.google.com (2)	105	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	912	80772	172.217.21.174
pagead2.googlesyndication.com (1)	101	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	317	656	142.250.74.162
www.needearn.com (2)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	708	1948	94.229.72.115
push.services.mozilla.com (1)	2140	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	606	127	52.43.158.219
r3.o.lencr.org (6)	344	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2028	5316	23.36.77.32
d2b9l3u54v5v39.cloudfront.net (3)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	948	6931	54.230.245.28
4.bp.blogspot.com (1)	11215	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	390	26470	142.250.74.65
s10.histats.com (2)	15211	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	658	11203	46.105.201.240
track.bloglog.com (1)	unknown	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	310	1118	54.205.85.227
www.blogger.com (4)	8975	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	2324	70034	216.58.207.233
blogmalaysia.com (2)	336932	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	720	6525	188.114.96.1
www.blogtopsites.com (1)	738733	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	314	325	54.205.85.227
m.addthis.com (1)	1448	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	813	360	23.38.200.123
s4.histats.com (1)	12782	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	698	179	54.39.128.117
resources.blogblog.com (1)	13274	0001-01-01T00:00:00Z	0001-01-01T00:00:00Z	425	937	216.58.207.233

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

OpenPhish

No alerts detected

PhishTank

No alerts detected

Fortinet's Web Filter

Scan Date	Severity	Indicator	Alert
2022-12-06	medium	pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html	Phishing
2022-12-06	medium	pouchnote.blogspot.com/js/cookienotice.js	Phishing

mnemonic secure dns

No alerts detected

Quad9 DNS

No alerts detected

HTTP Transactions (72)

URL IP Response Size

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

cfec3d7283a9b66d2be426ce54d210f3

808c1feb1ba918951d1928c1f6bfc0c253262774

1bad6c06aa3e88dcbc125fc98a6cb753eb2b18d2c8dd61da21d12209aeeda3f9

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1BAD6C06AA3E88DCBC125FC98A6CB753EB2B18D2C8DD61DA21D12209AEEDA3F9"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4203
Expires: Tue, 06 Dec 2022 04:02:38 GMT
Date: Tue, 06 Dec 2022 02:52:35 GMT
Connection: keep-alive

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

ee088fab9b287e174cfd1f2c735a909f

25c3335b514a36ad1a24d00413d60c3d394f5161

494e96358ff12366213d7cc0f9197648c6c62ec14fa0d2c78732a683fa26b192

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4837
Cache-Control: max-age=118761
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:35 GMT
Etag: "638dc877-1d7"
Expires: Wed, 07 Dec 2022 11:51:56 GMT
Last-Modified: Mon, 05 Dec 2022 10:31:19 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

1ea206ac3c440825741687351f8c6e4e

2f38dafd8c43dcce2411a0590bc5c02cd6286735

7d7232c8c91bcd18161ba2c9d23e3bff159604e058bd5b3fc1c7fcbcd03a7ee3

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7D7232C8C91BCD18161BA2C9D23E3BFF159604E058BD5B3FC1C7FCBCD03A7EE3"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3042
Expires: Tue, 06 Dec 2022 03:43:17 GMT
Date: Tue, 06 Dec 2022 02:52:35 GMT
Connection: keep-alive

firefox.settings.services.mozilla.com/v1/

34.102.187.140

200 OK

939

URL HTTP/2

firefox.settings.services.mozilla.com/v1/
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (939), with no line terminators

Size

939
Hash

14cd9a0afb6ba9a763651d5112760d1e

75d7b104ab9ab11fbb73c3f348b43b0119b5adfa

4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e

HTTP Headers

                                        GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Retry-After, Alert, Backoff, Content-Length, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 06 Dec 2022 02:20:20 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1935
alt-svc: clear
X-Firefox-Spdy: h2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain

34.160.144.191

200 OK

5348

URL HTTP/2

content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP

34.160.144.191:0
ASN

#15169 GOOGLE

Magic

PEM certificate\012- , ASCII text

Size

5348
Hash

53341dea33f4f3d9b4966f80589f429a

20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d

651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0

HTTP Headers

                                        GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: 27WpaEiT4wmIUAAFONh4wz6wBJxPRrYJxMGVDvV9LtG1VdVefrkCqrZdknzYRUkmwhkQCpO3JkA=
x-amz-request-id: G84604R326HB8M3Z
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 06 Dec 2022 02:46:56 GMT
age: 339
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2

contile.services.mozilla.com/v1/tiles

34.117.237.239

200 OK

URL HTTP/2

contile.services.mozilla.com/v1/tiles
IP

34.117.237.239:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with no line terminators

Size

12
Hash

23e88fb7b99543fb33315b29b1fad9d6

a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce

7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3

HTTP Headers

                                        GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
date: Tue, 06 Dec 2022 02:52:36 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US

34.102.187.140

200 OK

329

URL HTTP/2

firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP

34.102.187.140:0
ASN

#15169 GOOGLE

Magic

JSON data\012- , ASCII text, with very long lines (329), with no line terminators

Size

329
Hash

0333b0655111aa68de771adfcc4db243

63f295a144ac87a7c8e23417626724eeca68a7eb

60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300

HTTP Headers

                                        GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Last-Modified, Retry-After, Cache-Control, Content-Type, Pragma, Backoff, ETag, Expires, Content-Length, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Tue, 06 Dec 2022 02:11:20 GMT
cache-control: public,max-age=3600
age: 2476
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2

pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html

172.217.21.161

200 OK

16800

URL HTTP/1.1

pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2909)

Size

16800
Hash

b0b6674c5ec29c1c076c3e9d4dc3b5f8

46ab19cc7e6b3852a05cdd0b74026ffe6aa8fafd

24a5e981da7d62b0497ea6aa426e2005fdab4039d22478ca55c9b8d06698f168

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /2010/09/anwar-syukur-pendedahan-kes-saham.html HTTP/1.1
Host: pouchnote.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1

                                        HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 06 Dec 2022 02:52:36 GMT
Date: Tue, 06 Dec 2022 02:52:36 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 18 Aug 2022 16:36:42 GMT
ETag: W/"2613cb1e809f1ebe2221db8e8dbb05f4fddac44b672b6eb9bdd0bd1199a0ae15"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 16800
Server: GSE

ocsp.digicert.com/

93.184.220.29

200 OK

471

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

471
Hash

2b9d6a686aa3c4ea24568425e43a5221

d53bb4c9579bd1db78a0520619e888aec79f750f

c38734a8dbe51217d73896c0bf7f5c38c107fd79e0dee24b717f130377e9b5f7

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4823
Cache-Control: max-age=113679
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:36 GMT
Etag: "638db4ac-1d7"
Expires: Wed, 07 Dec 2022 10:27:15 GMT
Last-Modified: Mon, 05 Dec 2022 09:06:52 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471

www.google-analytics.com/ga.js

142.250.74.110

200 OK

17168

URL HTTP/1.1

www.google-analytics.com/ga.js
IP

142.250.74.110:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1305)

Size

17168
Hash

01d5892e6e243b52998310c2925b9f3a

58180151b6a6ee4af73583a214b68efb9e8844d4

7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d

HTTP Headers

                                        GET /ga.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 17168
Date: Tue, 06 Dec 2022 01:06:03 GMT
Expires: Tue, 06 Dec 2022 03:06:03 GMT
Cache-Control: public, max-age=7200
Age: 6393
Last-Modified: Tue, 27 Sep 2022 22:01:05 GMT
Content-Type: text/javascript

s7.addthis.com/js/250/addthis_widget.js

23.38.200.123

308 Permanent Redirect

171

URL HTTP/1.1

s7.addthis.com/js/250/addthis_widget.js
IP

23.38.200.123:0
ASN

#16625 AKAMAI-AS

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

171
Hash

3c417e9efbcaeb3bf7e7df75cf3b22fd

00465aec6b8ec302eae8abb99678fc5c09c3f343

21bd143d38dbbae427615a7266a86a18dc95c417f3e510632d7a9180d98d3571

HTTP Headers

                                        GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 308 Permanent Redirect
Server: nginx/1.15.8
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/250/addthis_widget.js
Date: Tue, 06 Dec 2022 02:52:36 GMT
Connection: keep-alive
X-Distribution: 99
X-Host: s7.addthis.com

pouchnote.blogspot.com/js/cookienotice.js

172.217.21.161

200 OK

2026

URL HTTP/1.1

pouchnote.blogspot.com/js/cookienotice.js
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

ASCII text

Size

2026
Hash

c4e1ed83d89245089b8a1203be20a377

f3940e1215b89300ef97d57a25993f25243b8688

afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2

Detections

Analyzer	Verdict	Alert
fortinet	Phishing

HTTP Headers

                                        GET /js/cookienotice.js HTTP/1.1
Host: pouchnote.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 02:49:20 GMT
Expires: Tue, 13 Dec 2022 02:49:20 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 05 Dec 2022 23:52:53 GMT
Content-Type: text/javascript
Age: 196

s7.addthis.com/js/250/addthis_widget.js

23.38.200.123

200 OK

116414

URL HTTP/2

s7.addthis.com/js/250/addthis_widget.js
IP

23.38.200.123:0
ASN

#16625 AKAMAI-AS

Magic

ASCII text, with very long lines (54602)

Size

116414
Hash

14e2e0006b364c6ad29237c051a7135a

c00bd5f066026989a29d7c8cfcb9922141377c4e

ed876ac813786bdb92dc732bf7a4209d619ce7e01d4c99f7e4b6be19600b0860

HTTP Headers

                                        GET /js/250/addthis_widget.js HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pouchnote.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx/1.15.8
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: "5f971164-5834c"
cache-control: public, max-age=600
strict-transport-security: max-age=15724800; includeSubDomains
content-type: application/javascript
content-encoding: gzip
content-length: 116414
date: Tue, 06 Dec 2022 02:52:36 GMT
vary: Accept-Encoding
x-distribution: 99
x-host: s7.addthis.com
X-Firefox-Spdy: h2

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

d9eb2870e59b2313c46529a862dd2abc

710d2370fd65b0bb34d0c633497f4494258a94e4

3c5603cc9fc783be2538c54616e719e129e59c2cd9f9769f52adf3ebc933bfce

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

471

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

471
Hash

1e5e51fbc58282a2410de240a13bac3d

03e7151c23e4ed5efc5a4415fc5dcb01f0d5e019

ad20d69cf3f84ec6bee56a570acbce60d0ade6bdf201397a1de2417fed11b3fd

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

resources.blogblog.com/img/icon18_edit_allbkg.gif

216.58.207.233

200 OK

162

URL HTTP/2

resources.blogblog.com/img/icon18_edit_allbkg.gif
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

GIF image data, version 89a, 18 x 18\012- data

Size

162
Hash

c991641178ff05adf0d004298b5eafa9

d8f6ce8ecd92b86d49849360f6b81ceb10b4c941

ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b

HTTP Headers

                                        GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:19:01 GMT
expires: Tue, 06 Dec 2022 14:19:01 GMT
cache-control: public, max-age=604800
last-modified: Mon, 28 Nov 2022 19:53:31 GMT
content-type: image/gif
age: 563615
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/2342155703-widgets.js

216.58.207.233

200 OK

56726

URL HTTP/2

www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (2221)

Size

56726
Hash

1217c8e34acb09c7cea97bae4d386ea1

55ee17703d0a7710943e93913bacb49220d98b4b

c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b

HTTP Headers

                                        GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 05:43:29 GMT
expires: Wed, 29 Nov 2023 05:43:29 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/javascript
age: 594547
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css

216.58.207.233

200 OK

6620

URL HTTP/2

www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (30596)

Size

6620
Hash

6f46e6f68353c7911fe34f31faa1518f

ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472

0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f

HTTP Headers

                                        GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 14:01:43 GMT
expires: Wed, 29 Nov 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 28 Nov 2022 14:50:39 GMT
content-type: text/css
age: 564653
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

blogmalaysia.com/images/reciprocal.gif

188.114.96.1

301 Moved Permanently

URL HTTP/1.1

blogmalaysia.com/images/reciprocal.gif
IP

188.114.96.1:0
ASN

#13335 CLOUDFLARENET

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET /images/reciprocal.gif HTTP/1.1
Host: blogmalaysia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 301 Moved Permanently
Date: Tue, 06 Dec 2022 02:52:36 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 06 Dec 2022 03:52:36 GMT
Location: https://blogmalaysia.com/images/reciprocal.gif
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=w7hKZsSVVKfvjymFEDsPbDlb9ebutSioMnlqZbU0hJFB1OtBeGdR3Ov5dLP%2FhMLW8hO9tx8Xz2ZQteZXaHJbXkN6x08xMTXGDG0iHu1yTEiaH%2BrsRg3jYeZ%2FK04oLCg8dNpV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7751b9f9fb48b524-OSL
alt-svc: h2=":443"; ma=60

apis.google.com/js/platform.js

172.217.21.174

200 OK

20984

URL HTTP/2

apis.google.com/js/platform.js
IP

172.217.21.174:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1279)

Size

20984
Hash

7ac44ef24e267df17ff72f195b252806

62db12d9ce11a576ccd7fa3544d851c5fd42f3b7

aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61

HTTP Headers

                                        GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Tue, 06 Dec 2022 02:52:36 GMT
expires: Tue, 06 Dec 2022 02:52:36 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1699162227&utmhn=pouchnote.blogspot.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=POUCH%20NOTE%3A%20Anwar%20Syukur%20Pendedahan%20Kes%20Saham%20Realmild%20Bersihkan%20Nama&utmhid=1103809051&utmr=-&utmp=%2F2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&utmht=1670295153923&utmac=UA-22451205-2&utmcc=__utma%3D207088402.1183018855.1670295154.1670295154.1670295154.1%3B%2B__utmz%3D207088402.1670295154.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1366781613&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~

142.250.74.110

200 OK

URL HTTP/1.1

www.google-analytics.com/r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1699162227&utmhn=pouchnote.blogspot.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=POUCH%20NOTE%3A%20Anwar%20Syukur%20Pendedahan%20Kes%20Saham%20Realmild%20Bersihkan%20Nama&utmhid=1103809051&utmr=-&utmp=%2F2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&utmht=1670295153923&utmac=UA-22451205-2&utmcc=__utma%3D207088402.1183018855.1670295154.1670295154.1670295154.1%3B%2B__utmz%3D207088402.1670295154.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1366781613&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~
IP

142.250.74.110:0
ASN

#15169 GOOGLE

Magic

GIF image data, version 89a, 1 x 1\012- data

Size

35
Hash

28d6814f309ea289f847c69cf91194c6

0f4e929dd5bb2564f7ab9c76338e04e292a42ace

8337212354871836e6763a41e615916c89bac5b3f1f0adf60ba43c7c806e1015

HTTP Headers

                                        GET /r/__utm.gif?utmwv=5.7.2&utms=1&utmn=1699162227&utmhn=pouchnote.blogspot.com&utmcs=UTF-8&utmsr=1280x1024&utmvp=1280x939&utmsc=24-bit&utmul=en-us&utmje=0&utmfl=-&utmdt=POUCH%20NOTE%3A%20Anwar%20Syukur%20Pendedahan%20Kes%20Saham%20Realmild%20Bersihkan%20Nama&utmhid=1103809051&utmr=-&utmp=%2F2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&utmht=1670295153923&utmac=UA-22451205-2&utmcc=__utma%3D207088402.1183018855.1670295154.1670295154.1670295154.1%3B%2B__utmz%3D207088402.1670295154.1.1.utmcsr%3D(direct)%7Cutmccn%3D(direct)%7Cutmcmd%3D(none)%3B&utmjid=1366781613&utmredir=1&utmu=qAAAAAAAAAAAAAAAAAAAAAAE~ HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Date: Tue, 06 Dec 2022 02:52:36 GMT
Pragma: no-cache
Expires: Fri, 01 Jan 1990 00:00:00 GMT
Cache-Control: no-cache, no-store, must-revalidate
Last-Modified: Sun, 17 May 1998 03:00:00 GMT
X-Content-Type-Options: nosniff
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 35

i155.photobucket.com/albums/s282/theviejo/recurso_10_1.jpg

143.204.55.106

301 Moved Permanently

167

URL HTTP/1.1

i155.photobucket.com/albums/s282/theviejo/recurso_10_1.jpg
IP

143.204.55.106:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

167
Hash

f5d40b7259645010f9a248858ad14178

b3051d17a6ec8c9e166bf09a62b48261ab86957b

7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d

HTTP Headers

                                        GET /albums/s282/theviejo/recurso_10_1.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 06 Dec 2022 02:52:36 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i155.photobucket.com/albums/s282/theviejo/recurso_10_1.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 9dd61138197a68f8d69f12574aab6930.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: UTELGvnsZG_aTSzIg21hS4Vf5jJhPxlg1agUI_8L8SuDZjCVVSVGWg==
Vary: Origin

banners.needearn.com/banner_1_120x240.jpg

United Kingdom UK Dedicated Servers Limited

94.229.72.115

404 Not Found

URL HTTP/1.1

banners.needearn.com/banner_1_120x240.jpg
IP

94.229.72.115:0
ASN

#42831 UK Dedicated Servers Limited

Magic

ASCII text, with no line terminators

Size

9
Hash

d8f4a1993546cc4b850cde3599e27aec

094b763b4cfcc0b05e5d040581cd513c3ca08067

907ba78b4545338d3539683e63ecb51cf51c10adc9dabd86e92bd52339f298b9

HTTP Headers

                                        GET /banner_1_120x240.jpg HTTP/1.1
Host: banners.needearn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 404 Not Found
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 9
date: Tue, 06 Dec 2022 02:52:36 GMT
server: nginx
set-cookie: sid=0a723812-7511-11ed-8762-ec8a56ac130d; path=/; domain=.needearn.com; expires=Sun, 24 Dec 2090 06:06:43 GMT; max-age=2147483647; HttpOnly

apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs

172.217.21.174

200 OK

57794

URL HTTP/2

apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP

172.217.21.174:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (580)

Size

57794
Hash

813b15c3004464f6bd39fd0773b04757

bd2218fe1e647f61132aad70d29cd91fd0416f26

446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf

HTTP Headers

                                        GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 29 Nov 2022 19:47:40 GMT
expires: Wed, 29 Nov 2023 19:47:40 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 543896
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

pagead2.googlesyndication.com/pagead/js/google_top_exp.js

142.250.74.162

200 OK

URL HTTP/1.1

pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP

142.250.74.162:0
ASN

#15169 GOOGLE

Magic

ASCII text

Size

67
Hash

9bbc3ca32ec951a484589ce0e6b4db73

753d6f6183b33b2dee5dde2208fca91c17f5bb13

b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c

HTTP Headers

                                        GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 05 Dec 2022 12:25:29 GMT
Expires: Mon, 19 Dec 2022 12:25:29 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 52027

www.needearn.com/affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de

94.229.72.115

200 OK

532

URL HTTP/1.1

www.needearn.com/affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de
IP

94.229.72.115:0
ASN

#42831 UK Dedicated Servers Limited

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (532), with no line terminators

Size

532
Hash

74117a37049321aeb73914fc5948389f

edd3415633f239d7914be390b946aaa24d30a840

24a6fff7c5a82c707848e588cc61db949e565a7ba14abc06b2e9334e39b0393d

HTTP Headers

                                        GET /affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de HTTP/1.1
Host: www.needearn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 532
content-type: text/html; charset=utf-8
date: Tue, 06 Dec 2022 02:52:36 GMT
server: nginx
set-cookie: sid=0a78a512-7511-11ed-b259-ec8a301b0349; path=/; domain=.needearn.com; expires=Sun, 24 Dec 2090 06:06:43 GMT; max-age=2147483647; HttpOnly

push.services.mozilla.com/

52.43.158.219

101 Switching Protocols

URL HTTP/1.1

push.services.mozilla.com/
IP

52.43.158.219:0
ASN

#16509 AMAZON-02

Magic

Size

0
Hash

d41d8cd98f00b204e9800998ecf8427e

da39a3ee5e6b4b0d3255bfef95601890afd80709

e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

                                        GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: pWXN3MX0FU6zEooSQo+RTg==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket

                                        HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: lFbyBr6NzoOAThkZksqg7DkK8lI=

bdv.bidvertiser.com/BidVertiser.dbm?pid=134131%26bid=694631

54.241.51.109

200 OK

9014

URL HTTP/1.1

bdv.bidvertiser.com/BidVertiser.dbm?pid=134131%26bid=694631
IP

54.241.51.109:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with CRLF line terminators

Size

9014
Hash

0d489677aaa27440619b64706f2cafe9

b87bf2207059e1db5a939e804c7e586e7b8ad125

0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539

HTTP Headers

                                        GET /BidVertiser.dbm?pid=134131%26bid=694631 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014

www.blogtopsites.com/v_55767.gif

54.205.85.227

200 OK

185

URL HTTP/1.1

www.blogtopsites.com/v_55767.gif
IP

54.205.85.227:0
ASN

#14618 AMAZON-AES

Magic

GIF image data, version 89a, 80 x 15\012- data

Size

185
Hash

7d24d6f4a887395557c92c667471bc97

ce1adac745de02c64bd3d2343cc14dd33fa6d611

f67a913ee89796cb650409918fe647628ae39c12ebe02e74394db17c6f081d93

HTTP Headers

                                        GET /v_55767.gif HTTP/1.1
Host: www.blogtopsites.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 02:52:36 GMT
Content-Type: image/gif
Content-Length: 185
Connection: keep-alive
Server: Apache

www.linkwithin.com/pixel.png

3.19.188.212

200 OK

URL HTTP/1.1

www.linkwithin.com/pixel.png
IP

3.19.188.212:0
ASN

#16509 AMAZON-02

Magic

PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data

Size

83
Hash

ca1dba98f5e46c0e7a1549b3d8af9b93

37284bda145ed93cee64997e3d6688cae7d98468

88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081

HTTP Headers

                                        GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 06 Dec 2022 02:52:36 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes

track.bloglog.com/v_3244.gif

54.205.85.227

200 OK

978

URL HTTP/1.1

track.bloglog.com/v_3244.gif
IP

54.205.85.227:0
ASN

#14618 AMAZON-AES

Magic

GIF image data, version 87a, 123 x 22\012- data

Size

978
Hash

813049dadfd499702ca3f81fd8c72156

5d18b145a489a8f394c12378d5ece4cc73530fe1

1c7e6197e52c21b88b5b810c88ec57644d2f2eeb865a30fae543f0f793dd6aff

HTTP Headers

                                        GET /v_3244.gif HTTP/1.1
Host: track.bloglog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Date: Tue, 06 Dec 2022 02:52:36 GMT
Content-Type: image/gif
Content-Length: 978
Connection: keep-alive
Server: Apache

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

29335a536fd47c44f11a984665f501f6

46dbfa43c5a94c6baec55a9e89cb1cb0cee7eb69

39d8bc234639a4fceeee88f10319692733e37388c06ae5567971f9dbb7c0aab5

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

ocsp.pki.goog/gts1c3

216.58.211.3

200 OK

472

URL HTTP/1.1

ocsp.pki.goog/gts1c3
IP

216.58.211.3:0
ASN

#15169 GOOGLE

Magic

data

Size

472
Hash

8ead0ac4ce19cef2471bae0458759d89

af02fd3fcd2e10cfa2458407c0c2e59a43e18517

507b93c64bab73e393cf8d8131415ef4d4b01e65e0f2ab73597715197845e75e

HTTP Headers

                                        POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

4.bp.blogspot.com/__t3_XOcHzbI/TIAwYH5Rp1I/AAAAAAAAWXw/Tk149rByEf8/s320/04dc724f9c91e6e97c1e3ccfb0bd5872.jpg

142.250.74.65

200 OK

25998

URL HTTP/1.1

4.bp.blogspot.com/__t3_XOcHzbI/TIAwYH5Rp1I/AAAAAAAAWXw/Tk149rByEf8/s320/04dc724f9c91e6e97c1e3ccfb0bd5872.jpg
IP

142.250.74.65:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 260x303, components 3\012- data

Size

25998
Hash

d9a88a30b96cf7a715c712a9c5b7f71c

cbd3cc7ace4bc7d22346f3b9229cd9dd9d00a159

98598b370c4e7069cb178bd401621b52bd700b0d482b6ca3600deb493a45ea25

HTTP Headers

                                        GET /__t3_XOcHzbI/TIAwYH5Rp1I/AAAAAAAAWXw/Tk149rByEf8/s320/04dc724f9c91e6e97c1e3ccfb0bd5872.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v597c"
Expires: Wed, 07 Dec 2022 02:52:37 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="04dc724f9c91e6e97c1e3ccfb0bd5872.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 06 Dec 2022 02:52:37 GMT
Server: fife
Content-Length: 25998
X-XSS-Protection: 0

i155.photobucket.com/albums/s282/theviejo/recurso_10_1.jpg

143.204.55.106

200 OK

780

URL HTTP/2

i155.photobucket.com/albums/s282/theviejo/recurso_10_1.jpg
IP

143.204.55.106:0
ASN

#16509 AMAZON-02

Magic

RIFF (little-endian) data, Web/P image\012- data

Size

780
Hash

de3922a1249527b63680271bc5eb4206

9dac02b1348c1036350bba6d27a2f86df6c8333d

67a90de4e2bbb88665c4c09e2766782576042c3e18143600eaa6ac2e141fcffd

HTTP Headers

                                        GET /albums/s282/theviejo/recurso_10_1.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pouchnote.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
content-type: image/webp
content-length: 780
date: Tue, 06 Dec 2022 02:52:37 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_10_1.webp"
expires: Wed, 06 Dec 2023 02:52:37 GMT
server: photobucket
x-amzn-trace-id: Root=1-638eae75-0df398a924d1f5d84a185d8f
x-request-id: xRiSmNy5ejgovsNzDpZra
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: LLsaw6CH0KhCE0VMSUFcQ6JyyM9DRQa0chM7vSdU6ui6PyLhc2svBw==
vary: Accept, Origin
X-Firefox-Spdy: h2

www.advertlets.com/_/js/advertlets_lite.js

199.115.116.43

404 Not Found

196

URL HTTP/1.1

www.advertlets.com/_/js/advertlets_lite.js
IP

199.115.116.43:0
ASN

#30633 LEASEWEB-USA-WDC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

196
Hash

62962daa1b19bbcc2db10b7bfd531ea6

d64bae91091eda6a7532ebec06aa70893b79e1f8

80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

HTTP Headers

                                        GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 404 Not Found
date: Tue, 06 Dec 2022 02:52:37 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
content-type: text/html; charset=iso-8859-1
connection: close

ocsp.digicert.com/

93.184.220.29

200 OK

280

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

280
Hash

5111bd95d122c17d59fa0fd125de2adb

4cc0666259901b2d66e8111cc999b47d37568661

542d67fe4957ac0d21714316509c9b4c0061eb07ba6cc6b90547a59ea23175cf

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=129758
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:37 GMT
Etag: "638e0653-118"
Expires: Wed, 07 Dec 2022 14:55:15 GMT
Last-Modified: Mon, 05 Dec 2022 14:55:15 GMT
Server: nginx
Content-Length: 280

synad2.nuffnang.com.my/k.js

18.138.110.223

302 Found

314

URL HTTP/1.1

synad2.nuffnang.com.my/k.js
IP

18.138.110.223:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

314
Hash

2dc70b6c45bf3273ce02cc411906180e

3e706e22af3600df7ca611184af391f70755d256

32a8cb54b2eda028acc7b6cc832de6dcc6f82b4ec288620ec870def3f74b1b6c

HTTP Headers

                                        GET /k.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 302 Found
Date: Tue, 06 Dec 2022 02:52:37 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/k.js
Cache-Control: max-age=86400
Expires: Wed, 07 Dec 2022 02:52:37 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1

blogmalaysia.com/images/reciprocal.gif

188.114.96.1

200 OK

5071

URL HTTP/2

blogmalaysia.com/images/reciprocal.gif
IP

188.114.96.1:0
ASN

#13335 CLOUDFLARENET

Magic

GIF image data, version 89a, 124 x 124\012- data

Size

5071
Hash

c80da3eb9dd6cb1bff777d860d292f56

281a018c878f33592855ba1714727396522f8d6d

c23beff8a8c3eba49b22c379c109bee42671cb3715abe0d4f4b7c13388554aa0

HTTP Headers

                                        GET /images/reciprocal.gif HTTP/1.1
Host: blogmalaysia.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pouchnote.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Tue, 06 Dec 2022 02:52:37 GMT
content-type: image/gif
content-length: 5071
cache-control: public, max-age=31536000
expires: Wed, 07 Dec 2022 03:49:26 GMT
etag: "13cf-63325255-813ff;;;"
last-modified: Tue, 27 Sep 2022 01:31:01 GMT
cf-cache-status: HIT
age: 514991
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=87ysV6tGDDPQ4KfRNaYz6mjPYZtjPT1lMdTcNFtr7DvUR0o2gwSBpQD0JbKAguc987rWIixNmAE5GIrtgEmSnZIYu8tFxoX%2FUTLhAQGhp9P%2FPmRzO2ND03ygCD6D1OBxTEB7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7751b9fd884ab4f3-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2

ocsp.digicert.com/

93.184.220.29

200 OK

280

URL HTTP/1.1

ocsp.digicert.com/
IP

93.184.220.29:0
ASN

#15133 EDGECAST

Magic

data

Size

280
Hash

5111bd95d122c17d59fa0fd125de2adb

4cc0666259901b2d66e8111cc999b47d37568661

542d67fe4957ac0d21714316509c9b4c0061eb07ba6cc6b90547a59ea23175cf

HTTP Headers

                                        POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=129758
Content-Type: application/ocsp-response
Date: Tue, 06 Dec 2022 02:52:37 GMT
Etag: "638e0653-118"
Expires: Wed, 07 Dec 2022 14:55:15 GMT
Last-Modified: Mon, 05 Dec 2022 14:55:15 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 280

www.linkwithin.com/widget.js

3.19.188.212

404 Not Found

162

URL HTTP/1.1

www.linkwithin.com/widget.js
IP

3.19.188.212:0
ASN

#16509 AMAZON-02

Magic

HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators

Size

162
Hash

1b7c22a214949975556626d7217e9a39

d01c97e2944166ed23e47e4a62ff471ab8fa031f

340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87

HTTP Headers

                                        GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 06 Dec 2022 02:52:37 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive

www.blogger.com/dyn-css/authorization.css?targetBlogID=1435446059861683708&zx=2247df43-2d85-4880-9945-bf1f6f2ada96

216.58.207.233

200 OK

URL HTTP/2

www.blogger.com/dyn-css/authorization.css?targetBlogID=1435446059861683708&zx=2247df43-2d85-4880-9945-bf1f6f2ada96
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

very short file (no magic)

Size

21
Hash

a62e4d501434033d5d177e67d3aafdd0

34f7300c9ed47334cf10826d57af785321e3138b

b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522

HTTP Headers

                                        GET /dyn-css/authorization.css?targetBlogID=1435446059861683708&zx=2247df43-2d85-4880-9945-bf1f6f2ada96 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 02:52:37 GMT
last-modified: Tue, 06 Dec 2022 02:52:37 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.blogger.com/navbar.g?targetBlogID=1435446059861683708&blogName=POUCH+NOTE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://pouchnote.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://pouchnote.blogspot.com/&targetPostID=9216931269153855190&blogPostOrPageUrl=http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html&vt=4843541467987722735&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__

216.58.207.233

200 OK

2649

URL HTTP/2

www.blogger.com/navbar.g?targetBlogID=1435446059861683708&blogName=POUCH+NOTE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://pouchnote.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://pouchnote.blogspot.com/&targetPostID=9216931269153855190&blogPostOrPageUrl=http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html&vt=4843541467987722735&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__
IP

216.58.207.233:0
ASN

#15169 GOOGLE

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (3172)

Size

2649
Hash

ab83a72134277f51494999098fafdf64

0ea0e9160684098fae370bab368daff231642028

2be2a85de860a70fc5e4c9e555fc2afef0d720f7780afd59f174e8cc46948423

HTTP Headers

                                        GET /navbar.g?targetBlogID=1435446059861683708&blogName=POUCH+NOTE&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=BLUE&layoutType=LAYOUTS&searchRoot=https://pouchnote.blogspot.com/search&blogLocale=ms&v=2&homepageUrl=http://pouchnote.blogspot.com/&targetPostID=9216931269153855190&blogPostOrPageUrl=http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html&vt=4843541467987722735&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__ HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src   'self' *.google.com *.google-analytics.com 'unsafe-inline'   'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com   *.googleapis.com uds.googleusercontent.com https://s.ytimg.com   https://i18n-cloud.appspot.com   https://www.youtube.com   www-onepick-opensocial.googleusercontent.com   www-bloggervideo-opensocial.googleusercontent.com   www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/html; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 06 Dec 2022 02:52:37 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 2649
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2

www.needearn.com/affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de

94.229.72.115

200 OK

532

URL HTTP/1.1

www.needearn.com/affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de
IP

94.229.72.115:0
ASN

#42831 UK Dedicated Servers Limited

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (532), with no line terminators

Size

532
Hash

1487f877583898e48ea22754d56d6df7

ddd4712250ee3e75f3eee081208df36f9832fb8e

d99fb415a182ebdbb56b0fb0b607338a7b9ee3b0c26d51b787152b56bef1b772

HTTP Headers

                                        GET /affiliate/scripts/imp.php?a_aid=2f461da3&a_bid=be47f2de HTTP/1.1
Host: www.needearn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
accept-ch: Sec-CH-UA, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile
cache-control: max-age=0, private, must-revalidate
connection: close
content-length: 532
content-type: text/html; charset=utf-8
date: Tue, 06 Dec 2022 02:52:37 GMT
server: nginx
set-cookie: sid=0ae36028-7511-11ed-bf20-ec8ace5aedd6; path=/; domain=.needearn.com; expires=Sun, 24 Dec 2090 06:06:44 GMT; max-age=2147483647; HttpOnly

d2b9l3u54v5v39.cloudfront.net/css/default.css

54.230.245.28

200 OK

1489

URL HTTP/1.1

d2b9l3u54v5v39.cloudfront.net/css/default.css
IP

54.230.245.28:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with CRLF line terminators

Size

1489
Hash

8ea20baef891abad5a169261301f1b0d

b983c5b36da773d38fc2d9d56fb1e462080ac0f8

27306e4a14ab04d39e59d9d73d6fac0fca90bbab3da5d9358c0000b9119c90af

HTTP Headers

                                        GET /css/default.css HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/

                                        HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Last-Modified: Mon, 21 Sep 2015 08:25:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Mon, 05 Dec 2022 07:36:57 GMT
ETag: "70d0ec1947f4d01:0"
X-Cache: Hit from cloudfront
Via: 1.1 5bcfe2deda0bdbc6bade0af9b61602ca.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: kClagcb5D21I1BUD0QNyLUeIZ6u2-Vz0x1SlnlQGN95zpLHR37Nk7w==
Age: 69340

d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2

54.230.245.28

200 OK

2866

URL HTTP/1.1

d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
IP

54.230.245.28:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with CRLF line terminators

Size

2866
Hash

4168b5a2517e8d07be159017f22759e7

ade414bcff8b8babb58bf6369fdbc7b8e2cf67b6

816427321da11d1632fac7711648e373bcbc01cf8b7b372d7b9178827906430a

HTTP Headers

                                        GET /css/88x726.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/

                                        HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2866
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:19:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Mon, 05 Dec 2022 02:59:00 GMT
ETag: "8ae83247890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: XZMStJzJ5hxi1hlVEx2itR5fLJy7Pq_h2ccclxndjnvqxfhoKoasXg==
Age: 86016

d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js

54.230.245.28

200 OK

1199

URL HTTP/1.1

d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
IP

54.230.245.28:0
ASN

#16509 AMAZON-02

Magic

ASCII text, with CRLF line terminators

Size

1199
Hash

263303c015aaddbd3c417327b3b50823

c5c4f7ec9f5c1a2cfafad6b5810ed0da2080d3cb

871bcbf1631eba9d4218fddb8dd96a075fdf33725e1ff991b345808c15c66617

HTTP Headers

                                        GET /activejs/bdv_fsthd.js HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/

                                        HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1199
Connection: keep-alive
Last-Modified: Thu, 14 Jan 2021 11:27:17 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Mon, 05 Dec 2022 22:43:32 GMT
ETag: "977ef3668ead61:0"
X-Cache: Hit from cloudfront
Via: 1.1 4bbc14b5834fc74ccd249b954b43a08c.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sQjD25VXDLqt4nuvjoean1hIsStUtnmv_L6i5aYo3SG5o4R1tZTaJg==
Age: 16367

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4830
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:52:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4830
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:52:37 GMT
Connection: keep-alive

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

83e0936435ad95a15c9ec5ff9520f4fe

a8225ee0d8ae117f977f7ff817c342c62e91b5a9

ef0f5b2ab2055446d4ea8b738f605c3bf835cf72e872d6a9c9a6c9b2917737e7

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EF0F5B2AB2055446D4EA8B738F605C3BF835CF72E872D6A9C9A6C9B2917737E7"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4830
Expires: Tue, 06 Dec 2022 04:13:07 GMT
Date: Tue, 06 Dec 2022 02:52:37 GMT
Connection: keep-alive

www.advertlets.com/_/js/advertlets_lite.js

199.115.116.43

404 Not Found

196

URL HTTP/1.1

www.advertlets.com/_/js/advertlets_lite.js
IP

199.115.116.43:0
ASN

#30633 LEASEWEB-USA-WDC

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text

Size

196
Hash

62962daa1b19bbcc2db10b7bfd531ea6

d64bae91091eda6a7532ebec06aa70893b79e1f8

80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880

HTTP Headers

                                        GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 404 Not Found
date: Tue, 06 Dec 2022 02:52:37 GMT
server: Apache/2.4.38 (Debian)
content-length: 196
content-type: text/html; charset=iso-8859-1
connection: close

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb60ffdb0-9abd-43ed-ba00-442492cc7b45.jpeg

34.120.237.76

200 OK

8287

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb60ffdb0-9abd-43ed-ba00-442492cc7b45.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8287
Hash

4c0e37b32bf91d9877ad7cb9f4f875a5

cec2ccf17ae08fe009c09563d214564c3499ad4c

4cec4e669ba4b149573de59df16d8cae06a6d4393092d7e06150596f38dc6856

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb60ffdb0-9abd-43ed-ba00-442492cc7b45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8287
x-amzn-requestid: 185e51d2-36b6-4d31-a35f-49520d8fba85
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csTNcGGWIAMF-Sw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6589-43a985971c5fb18a03fb4a92;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:41:29 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: DnKkiHQS_AhhZQOADenY0FbD4Fh_vQXoZAmL59WX0ReInKipGCXJlg==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:53 GMT
etag: "cec2ccf17ae08fe009c09563d214564c3499ad4c"
content-type: image/jpeg
age: 18644
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8424

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5220d724-28cf-4a09-a474-466d05000e9f.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8424
Hash

608271b2522dc7e726dd2ad4af7ffe02

8182a51b3060e7b6ffaf840c1c2ef50ab06abd10

dde60941a5eec5a314d4c7c7303188769ae810d9f84ba9ae9f088d0d107f59a6

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5220d724-28cf-4a09-a474-466d05000e9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8424
x-amzn-requestid: 52481098-a257-4529-b85a-094d2bf39871
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSuYEdKIAMFc9g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64c2-2b1f26e951823d4f1cd2507d;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:10 GMT
x-amz-cf-pop: SEA19-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: cq7s5taxMAwOO4vq776dk4842DfboBgSx5FnNfK2Ilcn8evZYaTfGQ==
via: 1.1 599f04a365a179d553682d476509c388.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:56 GMT
etag: "8182a51b3060e7b6ffaf840c1c2ef50ab06abd10"
content-type: image/jpeg
age: 18641
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

4827

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ca09fa3-9c1c-4e27-b763-2de04564da9d.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

4827
Hash

73b9f329cd3a39d0756de62dd5f190b7

0f1c7567b89cc3de60196e47e37879296359bc78

e15711efe27a3d302a9869cf01d27fd65bd0beca9d03a19d93bbf11e28f3e1d8

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0ca09fa3-9c1c-4e27-b763-2de04564da9d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 4827
x-amzn-requestid: 26ac5a48-3e41-4638-88d6-c94ba8b7a6c8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csS3nFxPoAMFcpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64fd-28f8cb92130706e3652eb971;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:39:09 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: YUk1Nt1XioDColWXDiEZsL8BmFpyWaV5tRbsbmAiR6A2psM_Gx3j_A==
via: 1.1 a20e81b65d2465c729ce2f6bfe539dd0.cloudfront.net (CloudFront), 1.1 760139201585481b26f947c5f776103a.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:41:49 GMT
age: 18648
etag: "0f1c7567b89cc3de60196e47e37879296359bc78"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

8469

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

8469
Hash

2f60a6490f38a772dcd50a1132e98e1b

ff254a1df087d2c157d88a6ef04e395dc49efe5e

653e40becd103cd76cc2f194a87e933e8c548d346f87520fefca3b16430fc4ab

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa99f7bcf-386e-4655-b6f0-99abdf67f097.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 8469
x-amzn-requestid: c17eff92-da62-4f0f-9e75-2741012ec43a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: co_sqFSjoAMFQ6w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638d131d-61d61d2f0bb01ecb21b809ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 21:37:33 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: TKSlCefkyQ7VDufJJOh1D7zhioft93jfOsoXxTD4ncAK5ktxlPvIoA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:52:07 GMT
age: 18030
etag: "ff254a1df087d2c157d88a6ef04e395dc49efe5e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

18490

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b9928a3-5708-47a4-8d92-f3af8d54a81d.png
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

18490
Hash

f4bbfe2037fd1658cad81b5b8e4d885c

9487451d24db59cc0f426410da2b55f94f3bb34b

2a124c75c6c90c5633f3538c8b84422262f81cb35d8f4cf4ed0032cc897a5ab9

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0b9928a3-5708-47a4-8d92-f3af8d54a81d.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 18490
x-amzn-requestid: f01c056f-b0bc-4833-9934-d0c37f4d701c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csS4wE5NIAMFQmQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6504-1111ee0221c3c4165a9ef2ab;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:39:16 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: L83k-5N1ntWkhPbKsReH19NWajYEVyQSBQIKM6aSZSovDKHTYeXhUQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 324a68a6c25ee50d774953f3e15a611c.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 22:30:52 GMT
age: 15705
etag: "9487451d24db59cc0f426410da2b55f94f3bb34b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

34.120.237.76

200 OK

11175

URL HTTP/2

img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg
IP

34.120.237.76:0
ASN

#15169 GOOGLE

Magic

JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data

Size

11175
Hash

38b97436af942d5eb1111ca7043259a0

0234fe32c84c4711f0619714f3ac6d3db1b717d3

a76a7721355abbaecd5c8cb5218e7e4626dc345eb26e7541c71bf4ceaa7ae5d8

HTTP Headers

                                        GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6d735c66-8946-4145-a67f-e17dd48087bc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
server: nginx
content-length: 11175
x-amzn-requestid: 9c93ddca-1247-44af-a364-e617f69ace26
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csSzYEnEoAMFa2A=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e64e2-7d38ea383725901524bc2ca0;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:38:42 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fNsYsKfPUM8QaG7-F1tSBDdsNit1BfYpWddNssXwyFO2HgdA0RpjAQ==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 05 Dec 2022 21:54:21 GMT
age: 17896
etag: "0234fe32c84c4711f0619714f3ac6d3db1b717d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2

s10.histats.com/js15.js

46.105.201.240

200 OK

4405

URL HTTP/1.1

s10.histats.com/js15.js
IP

46.105.201.240:0
ASN

#16276 OVH SAS

Magic

HTML document, ASCII text, with very long lines (11088), with no line terminators

Size

4405
Hash

688a4c6f6b98b3bfb618172e90695341

432a0d43c31e466673d13308db9e1ba5e519619c

becf42e9318b096cf691c11947c601c75b0b5ba2a6421fd2e676f62c646c17c5

HTTP Headers

                                        GET /js15.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/

                                        HTTP/1.1 200 OK
date: Tue, 06 Dec 2022 02:52:06 GMT
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 983304696
etag: W/"980881274"
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4405
x-iplb-request-id: 5B5A2A9A:E679_2E69C9F0:0050_638EAE76_21D9:23520
x-iplb-instance: 42306

s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html

23.38.200.123

200 OK

26421

URL HTTP/2

s7.addthis.com/static/sh.f48a1a04fe8dbf021b4cda1d.html
IP

23.38.200.123:0
ASN

#16625 AKAMAI-AS

Magic

HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (63757)

Size

26421
Hash

707317ccaabe08d32d1bd781754e6871

bb82dcd3e044c960e0861c2ce878f5504e628f78

d0a164ece41c61aec26517fb645646f5ba91f72ea5448eff1ee6c393b7c53051

HTTP Headers

                                        GET /static/sh.f48a1a04fe8dbf021b4cda1d.html HTTP/1.1
Host: s7.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
server: nginx/1.15.8
content-type: text/html
last-modified: Mon, 26 Oct 2020 18:11:48 GMT
etag: W/"5f971164-11adc"
timing-allow-origin: *
cache-control: public, max-age=86313600
p3p: CP="NON ADM OUR DEV IND COM STA"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
content-length: 26421
date: Tue, 06 Dec 2022 02:52:38 GMT
vary: Accept-Encoding
x-host: s7.addthis.com
X-Firefox-Spdy: h2

pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY48CRyOucj40__DFaACnxJSG7zyNQ%3A1670295156405

172.217.21.161

200 OK

609

URL HTTP/1.1

pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY48CRyOucj40__DFaACnxJSG7zyNQ%3A1670295156405
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

ASCII text, with very long lines (1436)

Size

609
Hash

ac7a05549c2308ad774f2ccc2f425864

79bbe1f49adbc6cfd830a421cd17047137b5ddb9

0e21cd8e179f9de4b5da55f18dc6c964f5cff5c54460367ca1c907a910c08d4c

HTTP Headers

                                        GET /2010/09/anwar-syukur-pendedahan-kes-saham.html?action=getFeed&widgetId=Feed1&widgetType=Feed&responseType=js&xssi_token=AOuZoY48CRyOucj40__DFaACnxJSG7zyNQ%3A1670295156405 HTTP/1.1
Host: pouchnote.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html
Cookie: __utma=207088402.1183018855.1670295154.1670295154.1670295154.1; __utmb=207088402.1.10.1670295154; __utmc=207088402; __utmz=207088402.1670295154.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; HstCfa758660=1670295155271; HstCla758660=1670295155271; HstCmu758660=1670295155271; HstPn758660=1; HstPt758660=1; HstCnv758660=1; HstCns758660=1

                                        HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
Expires: Tue, 06 Dec 2022 02:52:38 GMT
Date: Tue, 06 Dec 2022 02:52:38 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 18 Aug 2022 16:36:42 GMT
ETag: "2247df43-2d85-4880-9945-bf1f6f2ada96"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 609
Server: GSE

z.moatads.com/addthismoatframe568911941483/moatframe.js

2.18.173.140

200 OK

948

URL HTTP/2

z.moatads.com/addthismoatframe568911941483/moatframe.js
IP

2.18.173.140:0
ASN

#16625 AKAMAI-AS

Magic

ASCII text, with very long lines (523)

Size

948
Hash

f14b4e1f799b14f798a195f43cf58376

b6fd3b3d407fb4c0a00fb8a31862235e2a6e0a86

92ed3e9fda5fa4d738ff4d9023846b56633617363dda6a750cacb4fba53241ac

HTTP Headers

                                        GET /addthismoatframe568911941483/moatframe.js HTTP/1.1
Host: z.moatads.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
x-amz-id-2: TYrAmp44ddThNKrHeBmfOrJOox8ItZdAJeP4Uj7Uut6T7Jvp1PpX/XFzXT0gU1oJH/SwK8Irisw=
x-amz-request-id: 598E0BAF9E725A50
last-modified: Fri, 08 Nov 2019 20:13:52 GMT
etag: "f14b4e1f799b14f798a195f43cf58376"
content-encoding: gzip
accept-ranges: bytes
content-type: application/x-javascript
content-length: 948
server: AmazonS3
vary: Accept-Encoding
unused62: 8096267
cache-control: max-age=34493
date: Tue, 06 Dec 2022 02:52:40 GMT
X-Firefox-Spdy: h2

r3.o.lencr.org/

23.36.77.32

200 OK

503

URL HTTP/1.1

r3.o.lencr.org/
IP

23.36.77.32:0
ASN

#20940 Akamai International B.V.

Magic

data

Size

503
Hash

408b9ba72dc83c47c6821c825897d586

39c533b3ecadd39dcc4be7e5d6b1a5fece62de8b

3b1904ae01a75c6c530b0d4e952f53b823b8ebc3bd4eaf62794dac74999d6b23

HTTP Headers

                                        POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

                                        HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3B1904AE01A75C6C530B0D4E952F53B823B8EBC3BD4EAF62794DAC74999D6B23"
Last-Modified: Sat, 03 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9205
Expires: Tue, 06 Dec 2022 05:26:05 GMT
Date: Tue, 06 Dec 2022 02:52:40 GMT
Connection: keep-alive

s10.histats.com/counters/cc_511.js

46.105.201.240

200 OK

5984

URL HTTP/2

s10.histats.com/counters/cc_511.js
IP

46.105.201.240:0
ASN

#16276 OVH SAS

Magic

HTML document, ASCII text, with very long lines (14926), with no line terminators

Size

5984
Hash

e0963faf9f8d4dd4683c649033bfe3e6

8b8365dac8c2d50836e19456f025370ee782598f

80ac8877a54d16e397e9518ce7221d0abad87a39ffd0221a99227540eeb8b2a8

HTTP Headers

                                        GET /counters/cc_511.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site

                                        HTTP/2 200 OK
date: Tue, 06 Dec 2022 02:45:18 GMT
etag: "1364484781"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 171901993
content-type: application/javascript; charset=UTF-8
content-encoding: br
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 5984
X-Firefox-Spdy: h2

pouchnote.blogspot.com/favicon.ico

172.217.21.161

200 OK

412

URL HTTP/1.1

pouchnote.blogspot.com/favicon.ico
IP

172.217.21.161:0
ASN

#15169 GOOGLE

Magic

MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data

Size

412
Hash

501c61a70f5c41181aa050d9110909ca

5b985d5671a7caf686fdfb1df13488c4407f6c9f

c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e

HTTP Headers

                                        GET /favicon.ico HTTP/1.1
Host: pouchnote.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/2010/09/anwar-syukur-pendedahan-kes-saham.html
Cookie: __utma=207088402.1183018855.1670295154.1670295154.1670295154.1; __utmb=207088402.1.10.1670295154; __utmc=207088402; __utmz=207088402.1670295154.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); __utmt=1; HstCfa758660=1670295155271; HstCla758660=1670295155271; HstCmu758660=1670295155271; HstPn758660=1; HstPt758660=1; HstCnv758660=1; HstCns758660=1; __atuvc=1%7C49; __atuvs=638eae726fc14447000

                                        HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Tue, 06 Dec 2022 02:52:40 GMT
Date: Tue, 06 Dec 2022 02:52:40 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 18 Aug 2022 16:36:42 GMT
ETag: W/"2613cb1e809f1ebe2221db8e8dbb05f4fddac44b672b6eb9bdd0bd1199a0ae15"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE

v1.addthisedge.com/live/boost/budakkampungonline/_ate.track.config_resp

23.38.200.123

200 OK

URL HTTP/2

v1.addthisedge.com/live/boost/budakkampungonline/_ate.track.config_resp
IP

23.38.200.123:0
ASN

#16625 AKAMAI-AS

Magic

ASCII text, with no line terminators

Size

47
Hash

24c668b115f75423506f2ea21d1b49c2

14f956ddb2d9e8b072cd5f605c3f39526490b391

b542daef470a9730029174f975ce3ce236b3e58bf9183b11956acce994b13a16

HTTP Headers

                                        GET /live/boost/budakkampungonline/_ate.track.config_resp HTTP/1.1
Host: v1.addthisedge.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-disposition: attachment; filename=1.txt
content-encoding: gzip
content-length: 47
cache-control: public, max-age=56, s-maxage=86400
date: Tue, 06 Dec 2022 02:52:40 GMT
vary: Accept-Encoding
X-Firefox-Spdy: h2

m.addthis.com/live/red_lojson/300lo.json?si=638eae72c510baab&bkl=0&bl=1&pdt=1082&sid=638eae72c510baab&pub=budakkampungonline&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=pouchnote.blogspot.com&fp=2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Keywords%20of%20the%20post&colc=1670295155312&jsl=32&uvs=638eae726fc14447000&skipb=1&callback=addthis.cbs.jsonp__99127391239113830

23.38.200.123

200 OK

URL HTTP/2

m.addthis.com/live/red_lojson/300lo.json?si=638eae72c510baab&bkl=0&bl=1&pdt=1082&sid=638eae72c510baab&pub=budakkampungonline&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=pouchnote.blogspot.com&fp=2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Keywords%20of%20the%20post&colc=1670295155312&jsl=32&uvs=638eae726fc14447000&skipb=1&callback=addthis.cbs.jsonp__99127391239113830
IP

23.38.200.123:0
ASN

#16625 AKAMAI-AS

Magic

ASCII text, with no line terminators

Size

89
Hash

0c269e3eac29b4ea71026601ba5e08ab

52a5d1284637a2d0e7e489ca39397e725e6cc20a

8dee6f933258fcee92de60ccef6779ff91678853511b33df50ccc22e0c28bc25

HTTP Headers

                                        GET /live/red_lojson/300lo.json?si=638eae72c510baab&bkl=0&bl=1&pdt=1082&sid=638eae72c510baab&pub=budakkampungonline&rev=v8.28.8-wp&ln=en&pc=men&cb=0&ab=-&dp=pouchnote.blogspot.com&fp=2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&fr=&of=0&pd=0&irt=0&vcl=0&md=0&ct=1&tct=0&abt=0&cdn=0&pi=1&rb=0&gen=100&chr=UTF-8&mk=Keywords%20of%20the%20post&colc=1670295155312&jsl=32&uvs=638eae726fc14447000&skipb=1&callback=addthis.cbs.jsonp__99127391239113830 HTTP/1.1
Host: m.addthis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pouchnote.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers

                                        HTTP/2 200 OK
content-type: application/javascript;charset=utf-8
content-length: 89
cache-control: max-age=0, no-cache, no-store, no-transform
pragma: no-cache
content-disposition: attachment; filename=1.txt
date: Tue, 06 Dec 2022 02:52:40 GMT
X-Firefox-Spdy: h2

s4.histats.com/stats/0.php?758660&@f16&@g1&@h1&@i1&@j1670295155271&@k0&@l1&@mPOUCH%20NOTE%3A%20Anwar%20Syukur%20Pendedahan%20Kes%20Saham%20Realmild%20Bersihkan%20Nama&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:-81729947&@b3:1670295155&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fpouchnote.blogspot.com%2F2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&@w

54.39.128.117

200 OK

URL HTTP/1.1

s4.histats.com/stats/0.php?758660&@f16&@g1&@h1&@i1&@j1670295155271&@k0&@l1&@mPOUCH%20NOTE%3A%20Anwar%20Syukur%20Pendedahan%20Kes%20Saham%20Realmild%20Bersihkan%20Nama&@n0&@o1000&@q0&@r0&@s511&@ten-US&@u1280&@b1:-81729947&@b3:1670295155&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fpouchnote.blogspot.com%2F2010%2F09%2Fanwar-syukur-pendedahan-kes-saham.html&@w
IP

54.39.128.117:0
ASN

Report Overview

Submitted URL

IP

ASN

Submitted

Access

Website Title

Final URL

Tags

urlquery detections

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

OpenPhish

PhishTank

Fortinet's Web Filter

mnemonic secure dns

Quad9 DNS

JavaScript (43)

#1 JS:Script (size: 34)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#2 JS:Script (size: 122)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#3 JS:Script (size: 52)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#4 JS:Script (size: 11088)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#5 JS:Script (size: 6513)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#6 JS:Script (size: 269)

URL

IP

ASN

Introduced by

Inline HTML

Observations

Hash

#7 JS:Script (size: 55094)

URL

IP

ASN

Introduced by

Inline HTML

Observations