r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 9e164a845d32db8fa51fdb5b1aa218d9
169099b4d2f8e119ab6cf6fca279b6fb535b1759
402ffbf1404cf05c0516c5a8cd5344bd53537ac5150d387730a90c81c17dc9e4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "402FFBF1404CF05C0516C5A8CD5344BD53537AC5150D387730A90C81C17DC9E4"
Last-Modified: Sun, 06 Nov 2022 12:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4415
Expires: Wed, 09 Nov 2022 05:00:15 GMT
Date: Wed, 09 Nov 2022 03:46:40 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 7908acd0c083145e2b454aaeb063c236
0696647bb0a4118327f637a50ebcc21bac39d592
ffc30b68df0b33d67f31e37bbf5ae5cf4c23e1c8b8197bf76a95ee06bec4cd36
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3630
Cache-Control: max-age=114301
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Etag: "636a2fef-1d7"
Expires: Thu, 10 Nov 2022 11:31:41 GMT
Last-Modified: Tue, 08 Nov 2022 10:31:11 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash dc90abd8b3ea8e75a68c144d74d75788
1ce29dca1ee9ca8931397de31ffb6cf7833baaf8
807000997bcf1b7a1fa35e43908cbfa54cd1704a5a0f53c09e1ae154638f10e0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "807000997BCF1B7A1FA35E43908CBFA54CD1704A5A0F53C09E1AE154638F10E0"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6135
Expires: Wed, 09 Nov 2022 05:28:55 GMT
Date: Wed, 09 Nov 2022 03:46:40 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain
IP
File type PEM certificate\012- , ASCII text
Hash 67d5a988edcda47bc3b3b3f65d32b4b6
d4f0e0da8b3690cc7da925026d3414b68c7d954f
55e4848e3ec682e808ce7ee70950f86179c43af4f81926d826a95edfda395a78
GET /chains/remote-settings.content-signature.mozilla.org-2022-11-19-18-50-54.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: +/Qjqlb7VWr6Pt3WWhGNtALgF6O6GSCDztvJv/SjW03Ss34zsQJ3Hbh5IEPpr7FH/Ub28YA+fBQ=
x-amz-request-id: 133EX5V9S9CMJJGB
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Wed, 09 Nov 2022 03:11:34 GMT
age: 2106
last-modified: Fri, 30 Sep 2022 18:50:55 GMT
etag: "67d5a988edcda47bc3b3b3f65d32b4b6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 03:46:40 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Droid+Sans|BenchNine
200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Sans|BenchNine
IP
Hash 8b6f85a2197a9a728afdd69caeab445c
585da1b7925202ea9e8ffc97d27bbca85cfa394a
336a6969fd14ae199beeada1a339cb913324bd397bd5c86eb77244a9fbda1d5b
GET /css?family=Droid+Sans|BenchNine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Wed, 09 Nov 2022 03:46:40 GMT
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a58132d725c9fa526f2830bc42011d04
74a6c9d4c5bdef2cdd5e62dc4dd41287e3dcc54a
5bb29c01f4d32d60b59ff5c9fba7210dd06b6a4e2dea1960f09d01a24ebbbdc3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4e48180712e2e140b9748591e3228a70
49d4292426ddfbc6e98cff6d468e3bdf1be41ff7
16ebf61312b22e0032171995a665bad4ea8c7fd80636fc04eb6456d0f60397ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 04 Nov 2022 06:44:50 GMT
expires: Sat, 04 Nov 2023 06:44:50 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 03 Nov 2022 17:52:21 GMT
content-type: text/css
age: 421310
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 20:38:47 GMT
expires: Sun, 05 Nov 2023 20:38:47 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 05 Nov 2022 18:51:56 GMT
content-type: text/javascript
age: 284873
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
200 OK 38 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 337f3a5435b5948f814356c2278b00b5
4e161ef82af0c4c49aef472bde44540a8af0e0d8
195abf0b3e6d5fbdff582eac1ad989accc61b4bb11eb3d6365e8936498c085fa
Analyzer Verdict Alert fortinet Phishing
GET /2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 09 Nov 2022 03:46:40 GMT
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 03:06:38 GMT
ETag: W/"d896c86e064821b630a117378abd9b84148c36e16d2e6be5c86fb85e70e4e341"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 37948
Server: GSE
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 14:43:55 GMT
expires: Tue, 15 Nov 2022 14:43:55 GMT
cache-control: public, max-age=604800
last-modified: Mon, 07 Nov 2022 17:54:03 GMT
content-type: image/gif
age: 46965
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 08 Nov 2022 16:26:29 GMT
expires: Wed, 08 Nov 2023 16:26:29 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 40811
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
macamlawak.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 macamlawak.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 06 Nov 2022 08:11:38 GMT
Expires: Sun, 13 Nov 2022 08:11:38 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 05 Nov 2022 19:49:04 GMT
Content-Type: text/javascript
Age: 243302
www.blogger.com/static/v1/widgets/1514103161-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1514103161-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash b2daf7333beae7cbd9bee394108d44c4
98e8bcfa1d80706beb4f2231037c919aedbb975d
0e0e7635bb43ea55b550f6a0eeca9244c5982d10c81cc07dd43e51cb0718438f
GET /static/v1/widgets/1514103161-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56678
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 02:15:59 GMT
expires: Tue, 07 Nov 2023 02:15:59 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 07 Nov 2022 00:49:37 GMT
content-type: text/javascript
age: 178241
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7673cbea9c56d7f320987d7994106e80
6a6c593ec4b523d584d7940bd2576d35ba7b485b
1af0f6f0520737abc8b1e3b730af375e9b1234bcf61d83e5a54fd7104a64aee6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7673cbea9c56d7f320987d7994106e80
6a6c593ec4b523d584d7940bd2576d35ba7b485b
1af0f6f0520737abc8b1e3b730af375e9b1234bcf61d83e5a54fd7104a64aee6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
200 OK 1.6 kB URL HTTP/1.1 3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
IP
File type PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash fdb7528e7ccebcfe1daea52aa0195bd6
caa9b43d3056743538e12cb11a7320f9216712ea
08ee145d75eed8be290285f1a8b9fd40b9b8dc029ad10cc6283945b536270506
GET /-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="PhoXo2.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1610
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:30:08 GMT
Expires: Sat, 08 Oct 2022 07:19:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 992
ETag: "v8b5"
Content-Type: image/png
1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
200 OK 4.3 kB URL HTTP/2 1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4969f55f38298ce8b64e50c7256162d4
8cfd6f1939b1d189410c894d704fd2f554e12a62
abf3a18c7179167981435df2a623974d4b8de806ba04a0148d95a4fdbc290873
GET /-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="p6.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4283
x-xss-protection: 0
date: Wed, 09 Nov 2022 00:59:03 GMT
expires: Sun, 06 Nov 2022 02:46:54 GMT
cache-control: public, max-age=86400, no-transform
age: 10057
etag: "vbfa8"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
200 OK 4.5 kB URL HTTP/2 1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9b7344f5521aa04d976b2cfad6f7a8c2
9995760dc29120bcd34877448a305d0b4c39a1b3
917b7d172e92722ee272dd4344a6a958c5a5c5d283087f0b0da4e3232d7de22a
GET /-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="FB_IMG_1579940468844.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4524
x-xss-protection: 0
date: Wed, 09 Nov 2022 00:59:03 GMT
expires: Sun, 06 Nov 2022 02:46:54 GMT
cache-control: public, max-age=86400, no-transform
age: 10057
etag: "v64b0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c89b3e4cc3d6462ae9580470a315791d
fd3be63550a4ef169863fca193012ece884df54f
2c694057ea793e99fb49186866251ab4e548d17a08e0230ecf3cfefb8d6c6bab
GET /-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="10408547_10154511905900454_8487754128025911440_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4755
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:40 GMT
Expires: Sat, 05 Nov 2022 20:53:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1177"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
200 OK 4.7 kB URL HTTP/2 1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 914cb50b25dc47e3ed42f95d23441c63
ef24e0d012ecf092bac18441337a9e6c991c0c82
9e959670380178206298ea5a13c8c80d9393ba7cf3a65146b665e92380ba8777
GET /-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="jatuh-kapalterbang.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4695
x-xss-protection: 0
date: Wed, 09 Nov 2022 03:46:40 GMT
expires: Sun, 06 Nov 2022 03:03:00 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2426"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/blank.gif
200 OK 43 B URL HTTP/1.1 resources.blogblog.com/img/blank.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /img/blank.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 43
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 04 Nov 2022 19:43:02 GMT
Expires: Fri, 11 Nov 2022 19:43:02 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 04 Nov 2022 15:54:10 GMT
Content-Type: image/gif
Age: 374618
1-ps.googleusercontent.com/x/www.hmetro.com.my/w1.hmetro.com.my/myMetro/articles/Cucuhanuanakdenganbararokok/xpix_gal1,qharianmetro.pagespeed.ic.REHNmVHAEY.webp
404 Not Found 1.7 kB URL HTTP/1.1 1-ps.googleusercontent.com/x/www.hmetro.com.my/w1.hmetro.com.my/myMetro/articles/Cucuhanuanakdenganbararokok/xpix_gal1,qharianmetro.pagespeed.ic.REHNmVHAEY.webp
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1136)
Hash 2cf8c95c6f46f7086cbe9cb3fb66d147
deb58c0362a0674cdf290aaa8c4d61eccaf35fb8
f2ad462d09540b5fe702726ff91cbc10b97f1c46efdd20fa9327eb39dac0ac03
GET /x/www.hmetro.com.my/w1.hmetro.com.my/myMetro/articles/Cucuhanuanakdenganbararokok/xpix_gal1,qharianmetro.pagespeed.ic.REHNmVHAEY.webp HTTP/1.1
Host: 1-ps.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:40 GMT
Server: sffe
Content-Length: 1694
X-XSS-Protection: 0
ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
200 OK 428 B URL HTTP/1.1 ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (428), with no line terminators
Hash 974151780a57bb57d9c088d0781c385d
cf2f6db006239af3be8ab9aa6ef2bb5ad8214c3f
7db7885376404a3213518a3bc741e0074cc16f3dd5f385878d77d531c2e33267
GET /banner.php?section=General&pub=636673&format=300x250&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 09 Nov 2022 03:46:40 GMT
Last-Modified: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
200 OK 0 B URL HTTP/1.1 ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
IP
ASN #201702 skHosting.eu s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /layer.php?section=General&pub=636673&ga=g&show=1&fp HTTP/1.1
Host: ylx-4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:40 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 28 Nov 2022 02:40:25 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 954374
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kGGakbeqyFNvWdvx6bN7Veal9D5t4WEiKvG3%2BHbgSCZC1mAvheyZPyuGUwkNj%2FkT4qKScZ4VffFya5l7mJrzk2XPnzfoYy7nLT98NSYcItZCjAiKP4prSTv22JtsLXH3"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7673900cfd3b1c0e-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7673cbea9c56d7f320987d7994106e80
6a6c593ec4b523d584d7940bd2576d35ba7b485b
1af0f6f0520737abc8b1e3b730af375e9b1234bcf61d83e5a54fd7104a64aee6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a58132d725c9fa526f2830bc42011d04
74a6c9d4c5bdef2cdd5e62dc4dd41287e3dcc54a
5bb29c01f4d32d60b59ff5c9fba7210dd06b6a4e2dea1960f09d01a24ebbbdc3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 09 Nov 2022 03:46:40 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:45:53 GMT
ETag: "6324a841-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_G98lbBQBHHLYghq0CiGssSu9swzewKKfo8jl+suFInBG4LaWA7Eb6I3nbYukuTAXt0CI6X5j6CC6w1DTC+8EGA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:40 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4e48180712e2e140b9748591e3228a70
49d4292426ddfbc6e98cff6d468e3bdf1be41ff7
16ebf61312b22e0032171995a665bad4ea8c7fd80636fc04eb6456d0f60397ec
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a58132d725c9fa526f2830bc42011d04
74a6c9d4c5bdef2cdd5e62dc4dd41287e3dcc54a
5bb29c01f4d32d60b59ff5c9fba7210dd06b6a4e2dea1960f09d01a24ebbbdc3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
200 OK 20 kB URL HTTP/1.1 fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20196, version 1.0\012- data
Hash d056bf3055437ed0bccae4176b65336e
9049f5482de61d9a66806a292701787d5524fb85
f60c3e8ac9f319f101cf1d20290469aba1eb7cdc63c64d092a02764beae55d9f
GET /s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20196
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 03 Nov 2022 22:15:29 GMT
Expires: Fri, 03 Nov 2023 22:15:29 GMT
Cache-Control: public, max-age=31536000
Age: 451871
Last-Modified: Tue, 19 Apr 2022 19:06:50 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4dc4a177d25f666a9ba1cf6225354467
8975f2e5cc9cadc4a1e369da45471eb1f0830c5e
6c9e54a13abc265cac7bdee51c6fa49e5e7590fec7a1cc99096c384dabef31be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4026d8be4b1f00820fac8ec4f2d1ab55
42992483837947e24fbd561d038b0b74bb185580
b7d0da4bc988c742d2f81ce6743b2c08b52dc845c8794d50ebdfd7ec73e10ddb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
200 OK 2.2 kB URL HTTP/2 1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash f1a6797f91242287a33a4fbd390461c0
1faa0cba38f656d320b66ffd54167243c3a11b2a
f7e3c056e77fe5a256f5fb37d6084d43b660632f34dc0a77cefa9224ffd15e64
GET /-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="mains.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2150
x-xss-protection: 0
date: Wed, 09 Nov 2022 03:46:40 GMT
expires: Sat, 05 Nov 2022 20:53:25 GMT
cache-control: public, max-age=86400, no-transform
etag: "v54f9"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 7673cbea9c56d7f320987d7994106e80
6a6c593ec4b523d584d7940bd2576d35ba7b485b
1af0f6f0520737abc8b1e3b730af375e9b1234bcf61d83e5a54fd7104a64aee6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
200 OK 12 kB URL HTTP/2 encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 229x143, components 3\012- data
Hash 5a91ff00521c9c039138078d4258cf99
9d3937bc37fff0bfa98daac390ff5a9bab3ff07b
b87f3792f68189504233cf81d5d06decf0f3011b79123bdcc3299c7cfc2541f3
GET /images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw HTTP/1.1
Host: encrypted-tbn3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 12346
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 09 Nov 2022 03:46:40 GMT
expires: Thu, 09 Nov 2023 03:46:40 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Jul 2016 07:36:38 GMT
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 71e5222c0f9051545890bb00c38ca28d
3c2c124c2c60c827c1eaade9842a6fe23112c36e
998e9a7323f70813bf8d9a1dd15868cc990caa8952957edd6c7d2a3cc9d07b0b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20987
date: Wed, 09 Nov 2022 03:46:40 GMT
expires: Wed, 09 Nov 2022 03:46:40 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "849328c364e52e6e"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
200 OK 2.6 kB URL HTTP/1.1 1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9d2936e5ada19cf70ebcba407d9d9155
c59d9c8ef9d14b135fe15b31d9122cc9fcba58eb
a0ecc02e048826f41bb9b5da70fa1791db5f25297f95fc15e67e2cde369a40a7
GET /-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2647
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:40 GMT
Expires: Sun, 06 Nov 2022 03:15:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v41ff"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4dc4a177d25f666a9ba1cf6225354467
8975f2e5cc9cadc4a1e369da45471eb1f0830c5e
6c9e54a13abc265cac7bdee51c6fa49e5e7590fec7a1cc99096c384dabef31be
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.P0B2vZm_jJk.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_nmCaDbrwZCe_WiNZEgKVKQ-FnSA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.P0B2vZm_jJk.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_nmCaDbrwZCe_WiNZEgKVKQ-FnSA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 9ea8895b3fb6e5873f0bfd716806e63a
7e202dcb6ab039c4c7d2834654c1ca315ca877ea
339fa68761f532655be151a885e98f897c7689d77bcf9b585c267d6f9e2b83b7
GET /_/scs/abc-static/_/js/k=gapi.lb.en.P0B2vZm_jJk.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo_nmCaDbrwZCe_WiNZEgKVKQ-FnSA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 58116
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:19:43 GMT
expires: Fri, 03 Nov 2023 21:19:43 GMT
cache-control: public, max-age=31536000
age: 455217
last-modified: Tue, 04 Oct 2022 15:24:13 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Tue, 08 Nov 2022 11:33:33 GMT
Expires: Tue, 22 Nov 2022 11:33:33 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 58387
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c4c9c21e826ed9dd1520ac96dea393c
106bc7d84ae02a77a4006f2cae1cf7b5093d36c0
1201a34924da1af919077623ac06926d89f890b33b843d30e1e129fee007783f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
404 Not Found 1.7 kB URL HTTP/2 4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Wed, 09 Nov 2022 03:46:40 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 06285d400bb092a25f4739f1f443dbb1
e58d2bc7eda37224d4da9c778b33e6aafd79ce58
379cedbd0f80f3ada94e6d603eb58e7a0f576b3e0ea53d601493f6f06015cbac
GET /-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vad3"
Expires: Thu, 10 Nov 2022 03:46:40 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Melihat Suasana Di Dalam Bilik Persalinan Model-Model Catwalk.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:40 GMT
Server: fife
Content-Length: 10975
X-XSS-Protection: 0
ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166796560042441&xtt=3949552
200 OK 1.3 kB URL HTTP/1.1 ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166796560042441&xtt=3949552
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1335), with no line terminators
Hash 9e16bf3c5d451cafe2d643ac9241a6ec
93b1714fccd4c9bece4846df4ef46d4e8727c7fa
a7c6f8a55be0668aa9a90d226db7a68ae44fe32970aa68b16390b622549fa987
GET /bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166796560042441&xtt=3949552 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:40 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 09 Nov 2022 03:46:40 GMT
Last-Modified: Wed, 09 Nov 2022 03:46:40 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
Set-Cookie: used_ad2706771=1; expires=Wed, 09-Nov-2022 05:00:00 GMT; Max-Age=4400; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Wed, 09-Nov-2022 05:00:00 GMT; Max-Age=4400; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=300x250_881516516_0; expires=Fri, 09-Dec-2022 03:46:40 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
200 OK 4.1 kB URL HTTP/1.1 2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6d57e4858ab729e9db89b4a12996c30f
33d340600545ca608cc05649f9de69947ecbada5
99998e4b1f2f6a36badeb95410638ff41f5903dae2d93330ef556d99235a115b
GET /-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="hmkiasus_01.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4072
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:41 GMT
Expires: Fri, 04 Nov 2022 08:25:43 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8bf2"
Content-Type: image/jpeg
Age: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 2a47d129a3af5f02c654faf925c60273
9ad27ed9f4500c939260a677c12e702599b00fa9
0e031af077bf7009ffefada782407a247bbd31bddc96994c68de7bfe902bf992
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1349
Cache-Control: max-age=106954
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a1c26-1d7"
Expires: Thu, 10 Nov 2022 09:29:15 GMT
Last-Modified: Tue, 08 Nov 2022 09:06:46 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 471
2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
200 OK 3.8 kB URL HTTP/1.1 2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0df95f70ada2fd798ee29fd931a698f7
621494a4fd57382d9e3a8241c4bb456b09982ac6
d3503b6ffe77f928919fa21e4863ccb764a0dd9fa4f8f85bd3b07daccc4f1bcc
GET /-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="kanak-kanak-disembelih.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3770
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:41 GMT
Expires: Wed, 09 Nov 2022 00:56:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8103"
Content-Type: image/jpeg
Age: 0
ocsp.sectigo.com/
200 OK 472 B IP
Hash c356c3a7fb507a7621ced5dd3f85a129
12b50e1401e126b707dac69f191374789d46c4e3
431938cc1c325e4623605e3f3ca27c1f98ca9fde0c27a133bcc6d2d44689820e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 21:35:57 GMT
Expires: Tue, 15 Nov 2022 21:35:56 GMT
Etag: "12b50e1401e126b707dac69f191374789d46c4e3"
Cache-Control: max-age=581954,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7673900d6851b51b-OSL
www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
200 OK 2.4 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
IP
File type ASCII text, with very long lines (2149)
Hash cbafe83972442e457a19e0f65df92c8b
bed10a8306cb9202d1832adbe0ab4f2a0d9358b4
6f07bee420a11253512b4b4051bb0e045e84eb9f856e3a9b4f50dcba3f5db335
GET /geocompteur/trackwidget.php?idec=1009871715 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: application/javascript
Content-Length: 2373
Connection: keep-alive
set-cookie: ville_idec=diff; expires=Wed, 16-Nov-2022 03:46:39 GMT; Max-Age=604800; path=/; domain=widgeo.net
country_idec=diff; expires=Wed, 16-Nov-2022 03:46:39 GMT; Max-Age=604800; path=/; domain=widgeo.net
w_js_ads_code=ok; expires=Tue, 15-Nov-2022 03:46:39 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Wed, 16 Nov 2022 03:46:39 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BK600%2BDLEY3365lz4YYZArcLCSzqLfLwMttq8bGnJrQ7uCYrno8xGejmgUpsP%2FXuwA3UdBlgXis7uWK1Wk413zkynQHQORRJ1TBAPj39Lyol95e%2Fiuacf4710XmtysCE"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7673900c3cbfb509-OSL
alt-svc: h2=":443"; ma=60
2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
200 OK 4.0 kB URL HTTP/1.1 2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1a7922b370e02385ee179c6e36297225
c3190c9f94ad43eea3ca4ce261206b9fea758e9b
5fbb684a31c3623382278b03b38c773df6bfa2f1bc398f78e13bae2aaf50efac
GET /-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Pertandingan Membuka 8r4 Paling Cepat Di Stesen Tv Indonesia (edit).jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4047
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:41 GMT
Expires: Thu, 03 Nov 2022 10:46:55 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v278"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
200 OK 4.5 kB URL HTTP/1.1 2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ee7cfb7abd5d834441781bde52da8df3
e59b4e8421dd29d1a94223c6aa086d438ced5cf5
4352c9009643e75015c483e8030b7b4cb04171241209c7a4a70e601927a7da80
GET /-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="festival_01.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4541
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:41 GMT
Expires: Thu, 03 Nov 2022 10:46:55 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8997"
Content-Type: image/jpeg
Age: 0
ylx-1.com/show.php?u47061667965600=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=b85b337b14710c151d419235759966fa&cc=NO&useAf=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
200 OK 1.7 kB URL HTTP/1.1 ylx-1.com/show.php?u47061667965600=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=b85b337b14710c151d419235759966fa&cc=NO&useAf=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (594), with CRLF line terminators
Hash 532fd19bc5c4852dd5e0a79ef4151124
775c50d2b4335ac826fa60c3ae60b17166d76c0d
082418012140d5efb51d9fbd3c5d0a4db9cfcab36d35e1bec815ae8b0a1bbdd4
GET /show.php?u47061667965600=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=b85b337b14710c151d419235759966fa&cc=NO&useAf=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw== HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166796560042441&xtt=3949552
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Wed, 09 Nov 2022 03:46:41 GMT
Last-Modified: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
4.bp.blogspot.com/-WvZVBrv4VuU/U_18PeeowCI/AAAAAAAAgZI/dCi9u17cMqo/s72-c/IP270814LM002.JPG.transformed_0.jpg
200 OK 3.9 kB URL HTTP/1.1 4.bp.blogspot.com/-WvZVBrv4VuU/U_18PeeowCI/AAAAAAAAgZI/dCi9u17cMqo/s72-c/IP270814LM002.JPG.transformed_0.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 87a5d8eea526a3a90ef6049a9d43c403
5b26d5b562190c79b705061a0173a1d9f203ded6
a3d48954dde27861a746160bbf34b1fa58f96ecab1efa98e98c1812786bbfb32
GET /-WvZVBrv4VuU/U_18PeeowCI/AAAAAAAAgZI/dCi9u17cMqo/s72-c/IP270814LM002.JPG.transformed_0.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8193"
Expires: Thu, 10 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IP270814LM002.JPG.transformed_0.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:41 GMT
Server: fife
Content-Length: 3866
X-XSS-Protection: 0
yllix.com/images/aff/pub_7nc2s6.jpg
200 OK 74 kB URL HTTP/2 yllix.com/images/aff/pub_7nc2s6.jpg
IP
ASN #201702 skHosting.eu s.r.o.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=250, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x250, components 3\012- data
Hash 7a19e68cca2f5d28d919bb6db6faa8f0
877535b8821515cf43269fc2dfdcde54b5ec339f
d0af19a5198d12ead1c743bd66b969baef0a4682b8a7eb4fa05df216888da209
GET /images/aff/pub_7nc2s6.jpg HTTP/1.1
Host: yllix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/jpeg
content-length: 74258
last-modified: Sun, 17 Apr 2016 08:55:25 GMT
etag: "57134f7d-12212"
expires: Fri, 09 Dec 2022 03:46:41 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dee3039809fc2026852697eaa005560c
f4f6b76cf09e0a9e756ab6b9b8be26cb6e15b2c7
8091750102499bbd5d92ea3e89cf364e833df30e186963d67a0d66a13751ef8a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=92877440-c901-4543-ac94-de8657ae35e7
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=92877440-c901-4543-ac94-de8657ae35e7
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=92877440-c901-4543-ac94-de8657ae35e7 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 09 Nov 2022 03:46:41 GMT
last-modified: Wed, 09 Nov 2022 03:46:41 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c4c9c21e826ed9dd1520ac96dea393c
106bc7d84ae02a77a4006f2cae1cf7b5093d36c0
1201a34924da1af919077623ac06926d89f890b33b843d30e1e129fee007783f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: k8XQ2Hrj/2i4hhn89DrPiQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 2+ljpUy/jU0tCRqG5CHK21Tdp7g=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5c4c9c21e826ed9dd1520ac96dea393c
106bc7d84ae02a77a4006f2cae1cf7b5093d36c0
1201a34924da1af919077623ac06926d89f890b33b843d30e1e129fee007783f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 278 B IP
Hash 693519d9dedbe5de8c6079fe1123f98b
ed9a2717ec080ce82467015b08f56e1d4bd70e46
ee5edf0026bfcc415a60bc25564b8596b68f3744db1bf2a305b456f751345c78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=105973
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a1d96-116"
Expires: Thu, 10 Nov 2022 09:12:54 GMT
Last-Modified: Tue, 08 Nov 2022 09:12:54 GMT
Server: nginx
Content-Length: 278
ocsp.digicert.com/
200 OK 280 B IP
Hash 5c67790fb2d52e7bd8ceae03be4735b1
d928b2932b7911677df7df481511e80d28d079ea
5aeed4849ecf9b236b79e09b0428debab6359e945da9e225fb68a791b1ced6f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5308
Cache-Control: max-age=142955
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a9950-118"
Expires: Thu, 10 Nov 2022 19:29:16 GMT
Last-Modified: Tue, 08 Nov 2022 18:00:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Wed, 09 Nov 2022 03:46:41 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+197; expires=Fri, 08-Nov-2024 03:46:41 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 09 Nov 2022 03:46:41 GMT
cache-control: private
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
cf-polished: origSize=4360
cache-control: public, max-age=604800
expires: Thu, 10 Nov 2022 20:39:03 GMT
last-modified: Sat, 01 Oct 2022 00:32:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 457657
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=48a94TrW7vLH9EUGqZMtwd9VOUVz8VdQNqyLeilRVYKag3qwEDc2rcBZ6kdsOu06xI1s1B8VbcRyT753FUZ%2Fz0f3tWjS92N%2FeOXQ%2FpeND%2FWL0NDFaly44nf%2Fdgqcmju4"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76739010c948b51e-OSL
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 9854f5bd4803e3efa3955490085899af
271bba7dd46d88634e82cc830db00532821f4666
ede4d0952d07599d8151270dbefc3e679aae845dbbd1786b43e9ef50548b9230
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Wed, 09 Nov 2022 03:46:41 GMT
date: Wed, 09 Nov 2022 03:46:41 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1560
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Wed, 09 Nov 2022 03:46:41 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+391; expires=Fri, 08-Nov-2024 03:46:41 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Wed, 09 Nov 2022 03:46:41 GMT
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 693519d9dedbe5de8c6079fe1123f98b
ed9a2717ec080ce82467015b08f56e1d4bd70e46
ee5edf0026bfcc415a60bc25564b8596b68f3744db1bf2a305b456f751345c78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5456
Cache-Control: max-age=111429
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a1d96-116"
Expires: Thu, 10 Nov 2022 10:43:50 GMT
Last-Modified: Tue, 08 Nov 2022 09:12:54 GMT
Server: ECS (amb/6B80)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 693519d9dedbe5de8c6079fe1123f98b
ed9a2717ec080ce82467015b08f56e1d4bd70e46
ee5edf0026bfcc415a60bc25564b8596b68f3744db1bf2a305b456f751345c78
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 387
Cache-Control: max-age=106360
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a1d96-116"
Expires: Thu, 10 Nov 2022 09:19:21 GMT
Last-Modified: Tue, 08 Nov 2022 09:12:54 GMT
Server: ECS (amb/6B7C)
X-Cache: HIT
Content-Length: 278
www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html&title=KEJAM!!!%20Cucuh%20anu%20anak%20dengan%20bara%20rokok%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
200 OK 3.3 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html&title=KEJAM!!!%20Cucuh%20anu%20anak%20dengan%20bara%20rokok%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2950)
Hash 34ba82acdb8e84baeb971df0d11f057d
9a64e1fe9ef251e9566a7aae12cebc7ec6527fb7
20ef9e4c3989e4a32764a908e5f6516cc29fb14fc11e3052ff839c09977a6226
GET /geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html&title=KEJAM!!!%20Cucuh%20anu%20anak%20dengan%20bara%20rokok%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Tue, 07-Feb-2023 03:46:40 GMT; Max-Age=7776000; path=/; domain=widgeo.net
country_name=Norway; expires=Tue, 07-Feb-2023 03:46:40 GMT; Max-Age=7776000; path=/; domain=widgeo.net
idcompteurcc_1410487131622=done; expires=Thu, 10-Nov-2022 03:46:40 GMT; Max-Age=86400; path=/
get_data_1410487131622=ok; expires=Wed, 09-Nov-2022 03:49:40 GMT; Max-Age=180; path=/; domain=widgeo.net
bonus_1410487131622=705; expires=Thu, 10-Nov-2022 03:46:40 GMT; Max-Age=86400; path=/
bonus_j_1410487131622=1; expires=Wed, 09-Nov-2022 03:49:40 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Wed, 09 Nov 2022 03:49:40 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Knt4h1er1yqGeYj4S0YijriFYZsnsFsTC6iHpfWxG1zH3Q38F6yH0dRTqY7u66iQkRzt7wtOGIagCCCEO7Qlzk3RFKz2PL1A517Y1mzExHR923eENqndopJZV02Ry5fd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 767390102e4cb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:36 GMT
ETag: "6324a86c-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_G98lbBQBHHLYghq0CiGssSu9swzewKKfo8jl+suFInBG4LaWA7Eb6I3nbYukuTAXt0CI6X5j6CC6w1DTC+8EGA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
ocsp.digicert.com/
200 OK 280 B IP
Hash 5c67790fb2d52e7bd8ceae03be4735b1
d928b2932b7911677df7df481511e80d28d079ea
5aeed4849ecf9b236b79e09b0428debab6359e945da9e225fb68a791b1ced6f8
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5308
Cache-Control: max-age=142955
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Etag: "636a9950-118"
Expires: Thu, 10 Nov 2022 19:29:16 GMT
Last-Modified: Tue, 08 Nov 2022 18:00:48 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 280
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
200 OK 1.3 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 961dcad940bcae720f8f0ead6409f9d2
7199f8b763df9aec9c55bad14795e2166e6b1501
a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
ETag: W/"58409a4a-631"
Expires: Fri, 09 Dec 2022 03:46:41 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
200 OK 797 B URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (615)
Hash 12ada224297d742d3bc2d6b5ee8f7157
8eb55ecf304300bbba0c33a674b4ebdce7ad8b22
5c6b749ece122d76be2b812759d4eee654f110215c93c87dc0369a5f651da181
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip
www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js
200 OK 162 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js
IP
File type ASCII text, with very long lines (590)
Size 162 kB (162282 bytes)
Hash 05e06c50dab6f3d7f8bfde22301888db
64b3c20c788d298a672fabf9627eac914d95ed08
95176711feca1110e764a31e36764d5b331b033ed56fb372b42250329b33e1d6
GET /recaptcha/releases/Ixi5IiChXmIG6rRkjUa1qXHT/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162282
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 07 Nov 2022 15:58:35 GMT
expires: Tue, 07 Nov 2023 15:58:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 31 Oct 2022 04:02:45 GMT
content-type: text/javascript
age: 128886
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
200 OK 26 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash f46784dcc71c42f9406d242fede794f4
79269678d6fb002908aae6c5616ddd2f94f9691a
0df87463e7f01f1abbb4144ed58c36de50d1fdb3bc56046e0976ab642ed2f1bc
GET /aff/pub_s9c2nm.png?1480419364 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:04 GMT
ETag: W/"583d6824-68a8"
Expires: Fri, 09 Dec 2022 03:46:41 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html&title=KEJAM!!!%20Cucuh%20anu%20anak%20dengan%20bara%20rokok%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 13:16:42 GMT
ETag: W/"636a56ba-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1uuRNc74gCjxjwbBcquGi7L%2FJrnpamu%2BKuFCCjbSnB5IBnFO85YN%2FrpfuID%2FF7yDEuoo%2Bhxhbk%2FfLDeZbdiFDW2aHXH3o6f6hgUns6FOsKGMowSqwLlpOP5lNTRNRPtQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76739011be631c0e-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Fri, 11 Nov 2022 03:46:41 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/css/tipTip.css
200 OK 593 B URL HTTP/1.1 www.widgeo.net/geocompteur/css/tipTip.css
IP
File type ASCII text, with very long lines (2057), with no line terminators
Hash a747347fbc4841ea98b69cc6b9e82340
9ff90c2abcbd22df2a8f618400421dc0c87ee3f2
181311b58305877b33a71d8f6b968783df4a5be2fbc51e6e2439c6272050626d
GET /geocompteur/css/tipTip.css HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html&title=KEJAM!!!%20Cucuh%20anu%20anak%20dengan%20bara%20rokok%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=2441
cache-control: public, max-age=604800
expires: Wed, 09 Nov 2022 09:27:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 584332
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=k33BmBYEcAtqNrNigNjOHcuhpeI6yqgJ9%2B0P1uuiyheg2JVKjnB%2FekO0yQTj%2Fn8TRSZLXpV2hImyF%2FDk8QWcQ7NDHFyHwEbUcnOQmyWSlAXtN%2FHb%2BhRPV0zqOnlpY%2BLQ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76739011bf1fb509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d9ed1e536d31e1c2dad0f461782aa72f
e217690dafb74c7609daaa55ae1ecb9518be318d
6f20bdd488c3710142427d77667b15e2ae306457ecb402f2b7153535aa3ced82
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6F20BDD488C3710142427D77667B15E2AE306457ECB402F2B7153535AA3CED82"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9294
Expires: Wed, 09 Nov 2022 06:21:35 GMT
Date: Wed, 09 Nov 2022 03:46:41 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2cc2a9c89cbd9d2da1fd4a79a7d8b1d8
b2a4971855e26ff842f71d5dd4fff2596a83bd59
3bdf6aea6d003d0b087c13a74034f422cb09a59fd5c97b2b48ce590dfca6109a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=483188874592&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
200 OK 3.4 kB URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=483188874592&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (20027), with no line terminators
Hash ac0177ef8d0a965a7ff0b46a74b877f0
54def6f632a8eb8089a682609ef25e81f853f316
45b9414a930be15d0189cbd5c3a1d169145627de3c3cc13ece87053e5109849f
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_76216&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1NTkxNw==&adApiR=loaded_string_8435635b0bce9d250429df012c0426f88d0bd_2706771_1667965600.9689_49467&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=483188874592&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: total_impressions=1; expires=Wed, 09-Nov-2022 04:59:59 GMT; Max-Age=4398; secure; SameSite=None
used_ad2706771=1; expires=Wed, 09-Nov-2022 04:59:59 GMT; Max-Age=4398; path=/; secure; SameSite=None
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 17cc52cf9663213f8a1e46b70e605426
9d27893e20e4ccdbcd27130c89cd78fe7dd890da
6189977b544f2ad6d35ea9ef548d18012df76f8bc167a136d0c620984053756e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6189977B544F2AD6D35EA9EF548D18012DF76F8BC167A136D0C620984053756E"
Last-Modified: Tue, 08 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Wed, 09 Nov 2022 09:46:41 GMT
Date: Wed, 09 Nov 2022 03:46:41 GMT
Connection: keep-alive
1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b2eb20feb0cf76247b06b09fa0d9643e
39cfc489626188762fc83269d25fac275849b2b2
8258ce2affbce3c1555082bca3ff2514f2d13350b38bb3d2a67cf4147c9310e3
GET /-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12197
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23ef"
Content-Type: image/gif
1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
200 OK 32 kB URL HTTP/1.1 1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
IP
File type GIF image data, version 89a, 47 x 36\012- data
Hash de8786141e6d1977bf7e2e6de7f1576b
eca2cf38a29141c00223120e03ddb0266d0eae5c
a66d397b2074119260adcf349ba9aa2d1de08ed098a6cb77c49f40e45795f9f6
GET /-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="06.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 31605
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23f1"
Content-Type: image/gif
4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
200 OK 7.1 kB URL HTTP/1.1 4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b24f42a157fe0fd0c0670b82cdf4ed80
23cd6f155ff3ccd1b972446cd9769b95d7760fb3
97d910d193ef3ba80d2ec9e3fcc8c3e7669420389bbfa263d484d3626ed2cfa5
GET /-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="01.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7139
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23f3"
Content-Type: image/gif
3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
200 OK 7.7 kB URL HTTP/1.1 3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9cc44dc0d9d256729214bad1f2f203e
58090dfe6c40f94742026e6c995d1efa1528cea9
f738a2d77df5130907ab4d6ace1233bee0766be9bfbdcffef3c4c1a789843ede
GET /-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="02.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7678
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Wed, 05 Oct 2022 17:25:45 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23f5"
Content-Type: image/gif
3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e0efb02c657f5cd002fe98568c94a93b
e79c6d48316d628653fa0f2234c85fa4fc77c261
25ad56a82cd57d11572d9e28d8b1ce5e02d1422d4a523d9d336adcad45e2cd0f
GET /-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03a.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10557
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Fri, 11 Mar 2022 11:40:49 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23f8"
Content-Type: image/gif
2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
200 OK 2.0 kB URL HTTP/1.1 2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
IP
File type GIF image data, version 89a, 36 x 35\012- data
Hash 1b9200f411ac88d26abae6047bfb4839
0f583fbd1433ec2ce11d73a3a5d8d6fe6ec4afe7
93b826c061859ace5120ecf13154150954d1728e81964eb780fab9dbf7aedc0a
GET /-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="04.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1988
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Sun, 06 Nov 2022 03:46:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23f9"
Content-Type: image/gif
3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 1d6914eb78b0e6ba05418a388ab0abc8
1af2bc2925d92c78ab617e05d95784881ef0f28f
0fe6fda5d85b2370a5e27820a0dc5dc2bb53fe256bbd1470d76a5f0061295ee9
GET /-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="05.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11864
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:44 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 57
ETag: "v23fd"
Content-Type: image/gif
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.448.1
200 OK 13 kB URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.448.1
IP
Hash c32085b05ffb3d824babc1b157b4dfa6
6ee0489359e3bc550f4b244502f25dffffd34743
9fc83d9547534da2fb85f5f65d06996e62c9d8f881da3a0b1153f15b927c7b09
GET /5/3294720/?oo=1&js_build=iclick-v1.448.1 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/json
x-trace-id: 1949abad7a9e5d623281f88876d3ec7f
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=497ca1005f7f47bbb42b0b1ea45240a2; expires=Thu, 09 Nov 2023 03:46:41 GMT; path=/; secure; SameSite=None
oaidts=1667965601; expires=Thu, 09 Nov 2023 03:46:41 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
200 OK 14 kB IP
File type HTML document, ASCII text, with very long lines (673)
Hash 85a6fc2351ca425152d5a445a79c2c15
b94473fa8b62ec77874db9e00bb197bc7889ebf2
5f542dd77d2d86ef300d2edcf1fe9b0702dd0f64a70195c376dcbb9fd8b63187
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3693
cache-control: public, max-age=604800
expires: Sat, 12 Nov 2022 04:00:55 GMT
last-modified: Wed, 12 Oct 2022 00:08:47 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 344744
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O9Ze%2FumrId%2Bv81y2V%2FJVqvij%2B33Ug%2B7Cp%2F%2FUmUrIlcMpCMoJYbm49EGPtN202bLQCNq57QVOTplL%2FUbfmu8MKsBKD7NxMfgbN7EIA%2BYDXIEyDvD31Ez6XfXFPIAfm9hF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390111989b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 27c2fbd98af4e80cfd9a0ea066053744
839c502889b0a4d6e928ed211e9d201b596c26c4
020f931d362228610e97493a931d9b5771fe9d732c4171756ecceda2814427af
GET /-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="8.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12211
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Wed, 17 Nov 2021 07:42:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v23ff"
Content-Type: image/gif
ylx-1.com/trk/?b85b337b14710c151d419235759966fa
200 OK 43 B URL HTTP/2 ylx-1.com/trk/?b85b337b14710c151d419235759966fa
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?b85b337b14710c151d419235759966fa HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/gif
content-length: 43
last-modified: Wed, 09 Nov 2022 03:46:41 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2754d2f6cd3621d09343cff0f3b3a6ef
0466a0996870b85bcb4de07a6028efdded023092
8bbd1eff8b018e50fa1189dc220a56bb0e7906ccc861bd59b0a57a6fecf8d0a1
GET /-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="11.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11140
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2407"
Content-Type: image/gif
1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
200 OK 8.6 kB URL HTTP/1.1 1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 4b4f6e15739d67050873ca3f1a65786e
f42e1c5e677d6da97dbfbd32161fbe87202a27fd
ba67fba16537316a624f0f8344d77524e19c2df5f85b28aa86b702c5cf1285e1
GET /-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="12.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8611
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Tue, 11 Oct 2022 10:58:43 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2409"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b10986024b7c43560e2e76cb10764ec4
dcb10e65ceffd902d240df3c5682be4388119a96
6b9d5fdaeaf7b5c35fa5db97477ec3cde32b64b54b44c0d48b41fef1857630e9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
200 OK 9.2 kB URL HTTP/1.1 2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 7f8668e6d3ad490f26348cc7282a4f90
2e166126a1217dcc5ce4cdf31716da22e6bd59d1
fa148f161258d3dc721eee88a5cc174559c6f1430176d647d2e9e2dc8b0a7209
GET /-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="13.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9176
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sat, 08 Oct 2022 02:39:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v240b"
Content-Type: image/gif
4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
200 OK 9.5 kB URL HTTP/1.1 4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash a3c63680b985a24cbc8470ce9915903c
b3099a767e94ce488e94eff9fff8672b7b29c822
fc15f81adba6e04d314c5ec08ef968eeea29aeb6286af4108db1bfcf928ed73b
GET /-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="14.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9530
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v240e"
Content-Type: image/gif
1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash abf8a5999f654d65c90a962779ebe9ff
e81b0d3b64b7bd830ec204d8c54c52e983d5fe15
5d72dd878b3b6e37f8c0d66ac059d78850f04613fa9b3bf3a7ee21b6042ba028
GET /-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="15.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3705
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sat, 29 Oct 2022 23:28:11 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v240f"
Content-Type: image/gif
2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
200 OK 7.9 kB URL HTTP/1.1 2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6229e0dc57d33c3b51d1b067ca69c625
2e445e3ab75ca465569838aa2d17c7609c8c45b9
0ac371efd8c7403e232169bd9b08de8676116b3768996abdc899bd91340beb8d
GET /-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="17.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7860
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Wed, 11 May 2022 19:21:33 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2413"
Content-Type: image/gif
3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 0c7de4432447b874c2b6337fe6f675fe
845af5f406010c1462e1da4ec9c50ac84bb5679b
4b401f70a2d0a9e48f2826eb0c81554a868fbe202adee608d193b68d5f5763cc
GET /-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="16.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11938
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2411"
Content-Type: image/gif
1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
200 OK 2.3 kB URL HTTP/1.1 1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 10bb241722f4180ff2149995133249c7
ecdba88ef548a01c63e04f1d6385f933904fcffe
1d7297ae79305a59aa464c72240610364da0e4424c57e5e4539644948e48e978
GET /-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="18.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2259
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sun, 06 Nov 2022 03:46:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2415"
Content-Type: image/gif
1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
200 OK 30 kB URL HTTP/1.1 1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2922070489895cdda39211911bb2e19b
9086810a13c3a1975637ce6432f833e536ba75ca
d35863d1bd2faa137b042ae5e673490891cd5170350085844981671895392e28
GET /-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="19.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30419
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Wed, 30 Mar 2022 13:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2417"
Content-Type: image/gif
3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
IP
File type GIF image data, version 89a, 34 x 35\012- data
Hash 83e1107d6c3aab9177481cfae5a85766
62052a6816003bcb433f9d9156124873f304abc2
2f3a10a4dac6b35eb5e7c71c8e08b15af49d486a6bc94d09e2679f0f5e61cca8
GET /-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="22.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11966
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Wed, 02 Nov 2022 15:15:17 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v241a"
Content-Type: image/gif
1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b16f3ef0d022879f521011b331f1f751
e3272da7a66d6ed1d275fcec3b154c8c0c34fdec
363e15dc2577e03ef8183224677d69d26ecaa07691d66b1c45fc0d4b7fe6b647
GET /-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="21.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4771
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sat, 08 Oct 2022 04:13:12 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2418"
Content-Type: image/gif
3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
200 OK 2.1 kB URL HTTP/1.1 3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash bfb5c4ad3077b6067c24d727e85e4d55
683a3c57084227c6f3a94d1feda97a63eb8c902d
be82914e30dc50b25809b031abc0ebcb7c69fecf69b2c0848f81d8aedae88812
GET /-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="25.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2127
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sun, 06 Nov 2022 03:46:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2436"
Content-Type: image/gif
3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ee6d6b52c53c776577813dd3b5e67346
a938b694e2aed81a1177a76a32b66b518e9fea78
585ea39592df809c30b51e7d367aeafa0413b2476beac6e9912484aacb0e326f
GET /-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="23.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12154
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v241b"
Content-Type: image/gif
1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 758a0518d4e16817962190748c2ed65b
7834a60870315b25a26610eadbf1cb76cb57425a
9f334e753336e3ddef1c187a36cefbd28723e13c9fe982d587be75c4bf25a399
GET /-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="26.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11518
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Tue, 22 Mar 2022 19:57:38 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2420"
Content-Type: image/gif
2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 178ae7bc8ba7f2c93fce38923aa0a0e0
1a53ce687d64a38c5ec245dc32f25535d39df767
b78339e9b4454feb9a8a903a72b1526a0da4626d1d237e36287c27c8a8b9c3f6
GET /-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="27.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14382
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Wed, 20 Jul 2022 09:05:34 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2425"
Content-Type: image/gif
1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
200 OK 9.7 kB URL HTTP/1.1 1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9451c0f97aade01a0ee5fe500f91819
bccaad828c715be199eac75210ee248a9fed69cb
cc49b2fd8a07e1765061ae5893ec7700de8cc2dd53b9506b55c079f98fb5ccb9
GET /-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="28.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9651
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Tue, 29 Mar 2022 00:14:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2424"
Content-Type: image/gif
1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
200 OK 6.2 kB URL HTTP/1.1 1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash d32de0777c3455570b8316da2e55c151
3d8f8c8ea71003845021291517263f2cf597e75d
60be4a95d4774dcb77aba69aa1bca4e98d5596aed56d584d49cf0f5c405f07e9
GET /-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="30.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6200
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Mon, 20 Jun 2022 06:51:03 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2429"
Content-Type: image/gif
4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
200 OK 6.0 kB URL HTTP/1.1 4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6f597a032fa3941248175f066ea7d85c
8d11b4fafa5dd5fa501507fec2541d6c41eb0980
8904c280153182d0ca0258b0163364994c8d644c06ccd3527819adc860d71fb4
GET /-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="29.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5978
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Mon, 03 Oct 2022 06:38:16 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v2427"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dacb6df08b90bf743c8171b474c45ab0
1efade0f09bdc50845ad9fef25bb818c136aa87b
db06ebe5ca7ec61c2a8304751e119d159cac6a5237f01f88b6c4452642e168d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
200 OK 7.0 kB URL HTTP/1.1 4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 86a790169f7ee3eab648f73a3577d1db
484f5ef646ca88f04e42eec22b14dd4c4182f5ba
610f74fc26a960624833800cd25fe47635e75b9287dd89c78f3b137d683ef33d
GET /-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="31.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6957
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v242b"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dacb6df08b90bf743c8171b474c45ab0
1efade0f09bdc50845ad9fef25bb818c136aa87b
db06ebe5ca7ec61c2a8304751e119d159cac6a5237f01f88b6c4452642e168d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
200 OK 6.9 kB URL HTTP/2 lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash c3f6f37a1facf33abac47f1c5d5cedb2
34c323bc28abe8bb44598b94f56325827bbda75e
0ddd89667f12408f11369f673d035c1e9c329dbea848bffe05cca4d8a3b7bb5d
GET /-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="10.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6893
x-xss-protection: 0
date: Wed, 09 Nov 2022 00:37:22 GMT
expires: Fri, 04 Nov 2022 08:27:17 GMT
cache-control: public, max-age=86400, no-transform
age: 11359
etag: "v10fa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
200 OK 7.5 kB URL HTTP/2 lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 19c1058bce48182f99d8defd40d7cc37
d3a356987b4b26ce3f7b1e6ffe948b83280470e7
d47ce018c59039146898b2bec0ca49d2b6e6c5aac3d9b54549490b7b0a7702f2
GET /-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="32.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7480
x-xss-protection: 0
date: Wed, 09 Nov 2022 00:37:22 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 11359
etag: "v10da"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
200 OK 2.5 kB URL HTTP/1.1 2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
IP
File type GIF image data, version 89a, 24 x 24\012- data
Hash faa74e8c61fc64d5edb11613c7eead2c
e043879d3ee94a3edf10260f21f44bfa4a6fc66e
483c4a0396691993a641ec409c44b8b7e1daab0ae7e2b2944c4bc59520bb7655
GET /-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="progress_ani.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2545
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:45:45 GMT
Expires: Sat, 08 Oct 2022 10:31:02 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 56
ETag: "v23eb"
Content-Type: image/gif
lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
200 OK 11 kB URL HTTP/2 lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ab3f2cda071a82b6dbc067404699fb84
f1aa69bdc7f29e7737413a82be8b97d93b15a6eb
4d3958cb51bc42b95a3257d96b16acca6e53dbcf32847704b1b441f9a7651c93
GET /-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="20.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11225
x-xss-protection: 0
date: Wed, 09 Nov 2022 00:37:22 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 11359
etag: "v10b8"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dacb6df08b90bf743c8171b474c45ab0
1efade0f09bdc50845ad9fef25bb818c136aa87b
db06ebe5ca7ec61c2a8304751e119d159cac6a5237f01f88b6c4452642e168d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
200 OK 10 kB URL HTTP/2 lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2f6fd5905d46763e4250381d18a413eb
f35c7f8ddc23a44a543beacd1a42c9dd961f0529
fa5a337841922b3a6e6f9f25decd416ef368f002e34ac6b01ea7ee3e839b0df6
GET /-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="24.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 9958
x-xss-protection: 0
date: Wed, 09 Nov 2022 01:33:46 GMT
expires: Mon, 18 Apr 2022 10:29:06 GMT
cache-control: public, max-age=86400, no-transform
age: 7975
etag: "v10aa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dacb6df08b90bf743c8171b474c45ab0
1efade0f09bdc50845ad9fef25bb818c136aa87b
db06ebe5ca7ec61c2a8304751e119d159cac6a5237f01f88b6c4452642e168d3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
200 OK 1.7 kB URL HTTP/2 www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
IP
File type ASCII text, with very long lines (4420), with no line terminators
Hash 8819beb43513435f5f93ea5f97610f4a
2c231f30117783fedfd7c44cad7d1cf6d2323ce2
0ecfb6de870c9ce496688f4cd80122158c8265ba1e6ba40055fd5b6318a017f7
GET /geocompteur/js/jquery.tipTip.minified.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5251
cache-control: public, max-age=604800
expires: Thu, 10 Nov 2022 00:13:26 GMT
last-modified: Mon, 22 Mar 2010 15:10:00 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 531194
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=JKsLEJ7xbGmpMxLKKZHy%2BnxExFDKZtk%2BfsjTIrLMq4V7g1GWVkHZAi24cTsbgahj1oBxA6LG1Y82AiEWH3XN1nCKzSGnNjYNdWSAbi9qM6gFSR5h%2FIhzgmME1m4N1pN1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390139a96b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 28 Nov 2022 02:52:21 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 953659
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ce3ZoyFW8MlynP56oJijcJboZkZ%2FrVjJd2iZXLvMC30St5kJnE95bpitmZwVhFkbRd%2FqUF2jPRmYKAv36GeZRvkWNy8D%2FmM8vfFIEbChT%2BtAj9JZ5KC1fyBnliF8szd7"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390140ac6b51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_korea,%20republic%20of.png
200 OK 814 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_korea,%20republic%20of.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash ec4b0c854ec18061c7bafbe9ac9d1c3b
77c850ef6479e29a631dba64d06ccc1eefb1adc6
48f6236fb62cb417c5d00552052f378bfd1a82ca9f21f341c69390fd346fd439
GET /geocompteur/shadow/flag_korea,%20republic%20of.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/webp
content-length: 814
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1163
content-disposition: inline; filename="flag_korea,%20republic%20of.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 05 Dec 2022 08:18:14 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 329305
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tg1ek8evkxy7M1KxJ3Q0lcpLj2FkAMQ4qj5Fu7ZrVIW%2BHJabFT2iImmZnyXA4vWzrhknHNAxnyXVHHMl%2BPqUGZGbVyXOZETWUBRoAx%2Bqutt5sr7RO%2FQJMVuh9s1UnVzq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390140ac7b51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 28 Nov 2022 00:25:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 962488
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=b%2B5eJQSZG3AN3oDqTODBQWbvBWv6g1lX%2BN0lk6dBw7XgBoxTM1%2B5GAtWjXwXWJVizGmvo9U5sBQs8dCJFwSi0N88oTbJUbl%2BXiUGWOdRl2LpFvNdepUEpimVAYFENpzd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390140ac5b51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_norway.png
200 OK 880 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_norway.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e186cd78997ba86002ffe37b1bf7ea64
ec8365cf9b6db82cac866c92865cd8d6d4146ae5
de0cb6c3eada763844403b680fa08dcc451a48df4a234a7f607558987ee3371c
GET /geocompteur/shadow/flag_norway.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: image/webp
content-length: 880
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1041
content-disposition: inline; filename="flag_norway.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 04 Dec 2022 06:00:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 423953
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9mBS5GM2tHIOhJPkhs2ftoILUBOPhogR0PyEKCsE2jwTY%2Fip3tgOxMEjLn68Im1W7mfMGp1a7YfvGS%2BGc00cKwYnd2Uexwg5DaKzsmaaqKY4KyENidZGruZK5oQP2%2FvF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390140ac4b51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/trackwidget_js.js
200 OK 45 kB URL HTTP/2 www.widgeo.net/geocompteur/trackwidget_js.js
IP
File type ASCII text, with very long lines (746)
Hash 72350d97e95dd5c76b077076ae7be5f8
464ce1706ea51721c57ae56f178acc83e8671cd1
407e7b33183100ddaf5a60ba8e38d9668951a571b214094accd7516f7dd3f2a1
GET /geocompteur/trackwidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2426
cache-control: public, max-age=604800
expires: Thu, 10 Nov 2022 00:13:26 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 531194
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DJPj6BN%2Fa6XaiZH8RQQozfHpuPCH5OfQ45HT3mHpI1U7vC%2FW%2FiMXDgH56E7tyFFAN9d8EDhi6xC3PF%2FtwBLvFVRKW8nKgCQ4OB%2Bw%2BxGW245dMnv4ll8umDRRHYyj59MG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390139a97b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
macamlawak.blogspot.com/feeds/posts/summary/-/national?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18307065947259179676_1667965597419&_=1667965598555
200 OK 3.0 kB URL HTTP/1.1 macamlawak.blogspot.com/feeds/posts/summary/-/national?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18307065947259179676_1667965597419&_=1667965598555
IP
File type Unicode text, UTF-8 text, with very long lines (12497)
Hash 72d9bd0c7856590bd8fdc83d064f904f
908b3fa14c07d4759de5f1bceeda2fec20ffede4
7f477d952b800370a2a47cec7a343eaee8bb8cc89148dbc1505fb7ecef3282ab
GET /feeds/posts/summary/-/national?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18307065947259179676_1667965597419&_=1667965598555 HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"de8a2e29574e73eb89df1677a0026ef9c9c65dfd25f0ced8205be3035a135a49"
Date: Wed, 09 Nov 2022 03:46:41 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Wed, 09 Nov 2022 03:46:42 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Tue, 08 Nov 2022 03:06:38 GMT
Content-Encoding: gzip
Content-Length: 3000
X-Frame-Options: SAMEORIGIN
macamlawak.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 macamlawak.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Wed, 09 Nov 2022 03:46:42 GMT
Date: Wed, 09 Nov 2022 03:46:42 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 08 Nov 2022 03:06:38 GMT
ETag: W/"d896c86e064821b630a117378abd9b84148c36e16d2e6be5c86fb85e70e4e341"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3b26e900b9be930a07101e0d5f5de579
fc84082e3eef2e000f255f1cbd4cf45b694a2118
1dff9aae4984871070d193b60d41548a8a816f0ba20839d41d6e73a08e548afe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 92 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
Hash 457ffed5c3567836ac309fa64d028b3b
2f7c19ebe4e0c3ccd4130c4893f6d670e8738834
fc80d443279f8424bf7e13ed43359aaf9d4444d2f606f63c1538a64b963c4b1e
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Wed, 09 Nov 2022 03:46:42 GMT
expires: Wed, 09 Nov 2022 03:46:42 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75833
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 3b26e900b9be930a07101e0d5f5de579
fc84082e3eef2e000f255f1cbd4cf45b694a2118
1dff9aae4984871070d193b60d41548a8a816f0ba20839d41d6e73a08e548afe
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
302 Found 147 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
IP
File type HTML document, ASCII text
Hash bbd3b33d97da10901574fc6785df7c5f
dca46c0ff5a293efe9025aaf67a77b266dd99f6c
e1976d1763d980d4fb88a14157af73e38c33a51fedeb202d221b2312021909d4
GET /hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 147
date: Wed, 09 Nov 2022 03:46:42 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=A99F54C6-8F2C-496B-A500-F8AA99A9E16D; Path=/; Domain=xiti.com; Expires=Sat, 09 Dec 2023 03:46:42 GMT; HttpOnly
atidx=A99F54C6-8F2C-496B-A500-F8AA99A9E16D; Path=/; Domain=xiti.com; Expires=Sat, 09 Dec 2023 03:46:42 GMT; HttpOnly; Secure
atid=A99F54C6-8F2C-496B-A500-F8AA99A9E16D; Path=/; Domain=xiti.com; Expires=Sat, 09 Dec 2023 03:46:42 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 68126347056de2d05be3dd362ccba986.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-C1
x-amz-cf-id: F99A7jEJkEcyYf0MDuzfHtR1wsj_yB8ezABlgCVa1ZP2vVc7GqEA9g==
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=trackwidget&hl=3x46x38&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Wed, 09 Nov 2022 03:46:42 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 68126347056de2d05be3dd362ccba986.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-C1
x-amz-cf-id: ksSeIA8_GsJDUQZDYdSsyQkXzFK3fTz2c1vUDPcOnKgZNz12nbvkVg==
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash e40af3689f66400e4ed3f44776b38285
3fe5cd0b8e515aa1fb19d1da51bc48d700704d01
c62af8fdbb7594a40c6f4c759fa5db1a93f5cafec254837a00d89ce3c810f11b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3632
Cache-Control: max-age=106366
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:42 GMT
Etag: "636a10f0-117"
Expires: Thu, 10 Nov 2022 09:19:28 GMT
Last-Modified: Tue, 08 Nov 2022 08:18:56 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9247
Expires: Wed, 09 Nov 2022 06:20:49 GMT
Date: Wed, 09 Nov 2022 03:46:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9247
Expires: Wed, 09 Nov 2022 06:20:49 GMT
Date: Wed, 09 Nov 2022 03:46:42 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4599ea4ab89bca0461dfc4e86cf90610
d513a3fca97e06dbc1a6cdd02fbdd3c7253c865a
6056ef181a66539dd449318a89c133c3711e3244394126a66b8ebd29cff4692b
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6056EF181A66539DD449318A89C133C3711E3244394126A66B8EBD29CFF4692B"
Last-Modified: Tue, 08 Nov 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9247
Expires: Wed, 09 Nov 2022 06:20:49 GMT
Date: Wed, 09 Nov 2022 03:46:42 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d4ddd67-c616-4121-a20d-93a46ca683a5.jpeg
200 OK 7.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d4ddd67-c616-4121-a20d-93a46ca683a5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b52a8b78f7273b02455e93107edb9633
7a09033d8e92af7e492e5ec41d6d90c473b848f6
b239606b1c37e680536a899808e845ccf270b1eadec03476e0cbfdf9911c149b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2d4ddd67-c616-4121-a20d-93a46ca683a5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7620
x-amzn-requestid: 4938029b-6e40-4549-8404-63ca28e79961
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bTU_WEQgIAMFU2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636acec8-2bda1b015e94c4127df2b052;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 21:48:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: N-7W40j1csZhuoQvk_awKDRBjxJukydzyRVHvJNBSBx-AqYJQrUYGg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 68fadeb91f97256bb67b03bfca74d830.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 22:02:26 GMT
age: 20656
etag: "7a09033d8e92af7e492e5ec41d6d90c473b848f6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1.bp.blogspot.com/-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png
200 OK 191 B URL HTTP/1.1 1.bp.blogspot.com/-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash 8fad4931d9f0f8a25b1a0e538c0963be
4dc416a330db497b9239b687c4961d7979c07ab6
3b607a6d761360fb4006f9064e899b3e9a7a563e6f0526766ccae09bbd509012
GET /-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="grey.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 191
X-XSS-Protection: 0
Date: Wed, 09 Nov 2022 03:46:42 GMT
Expires: Sun, 06 Nov 2022 03:46:31 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2438"
Content-Type: image/png
Age: 0
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b1448b9-c14a-494a-b2b3-d4d430f83cd7.jpeg
200 OK 7.1 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b1448b9-c14a-494a-b2b3-d4d430f83cd7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da90dc6a5f2fc0c07e1e3d7ac0f1a67c
131acddbc0fefa19de876f5254d21370691b4653
60a17b9d4f66a571b54b17bcdd5ae19942bd8540569663611a3a64c07734417c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9b1448b9-c14a-494a-b2b3-d4d430f83cd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7108
x-amzn-requestid: bf8302ba-8138-4b4a-8821-fe1c1d1864fc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bMYDHEoFoAMFqVA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636806e0-7b5856224000122233ad81ea;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 19:11:28 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4BaZ-LMJyYy_6UTMKjwjUulT4nAc0pxyJvmTmsy-M_WGXw9doIO0Vg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 e95ec8f1dc02e32f0cb9e113963ceb4e.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 22:03:36 GMT
age: 20586
etag: "131acddbc0fefa19de876f5254d21370691b4653"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc585a69-ebe7-4753-b2fd-ad259cd42072.jpeg
200 OK 2.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc585a69-ebe7-4753-b2fd-ad259cd42072.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 547f07effeda1f7041b06fa3f10f90bf
d453f8017ebbbb8362f745a15c95acbddf55ac26
c4c4063cae55e4e2192ab2ac98543f4495a81879b8001fd2efb7989ca6eddba9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcc585a69-ebe7-4753-b2fd-ad259cd42072.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2808
x-amzn-requestid: 47475ac7-05a1-484f-ab46-c44c804b152d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bTSsUHrdIAMFwNQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-636acb1b-10cd67f67a61ddba16769db9;Sampled=0
x-amzn-remapped-date: Tue, 08 Nov 2022 21:33:15 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: UwYDSFfv9pZsgYa2vnFmsQSqaMWZI1XmeVog35jJMrpxM67nMFI6QQ==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 22:02:27 GMT
etag: "d453f8017ebbbb8362f745a15c95acbddf55ac26"
content-type: image/jpeg
age: 20655
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba11c7c9-77b7-4b0d-aa7f-493ab46c77b1.jpeg
200 OK 2.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba11c7c9-77b7-4b0d-aa7f-493ab46c77b1.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1b4ae74d6a926ef85ce993a33f7d8a3f
9ce8d453c5ab8f7682e5ee3641a37b1abe1a8857
61b2fea439945e122a8502ab05e6c68bc1b3a9d8c639344ef5b04dfcc6889a65
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fba11c7c9-77b7-4b0d-aa7f-493ab46c77b1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 2766
x-amzn-requestid: 934d6215-528a-4e78-bc46-3b0838d94671
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bG3d2HMGIAMF7Gg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6365d2be-0c11c2fb6ebc48eb1f0a3aef;Sampled=0
x-amzn-remapped-date: Sat, 05 Nov 2022 03:04:30 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: OMbpNCSxrKRiI5pF-AOJuTpFYdCHl00zMOLWxyXZAqWxnq3FJPsSaA==
via: 1.1 d8d9c12d1a621129f4bc739038e7c72e.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 09:36:18 GMT
age: 65424
etag: "9ce8d453c5ab8f7682e5ee3641a37b1abe1a8857"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash e40af3689f66400e4ed3f44776b38285
3fe5cd0b8e515aa1fb19d1da51bc48d700704d01
c62af8fdbb7594a40c6f4c759fa5db1a93f5cafec254837a00d89ce3c810f11b
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3632
Cache-Control: max-age=106366
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:42 GMT
Etag: "636a10f0-117"
Expires: Thu, 10 Nov 2022 09:19:28 GMT
Last-Modified: Tue, 08 Nov 2022 08:18:56 GMT
Server: ECS (ska/F712)
X-Cache: HIT
Content-Length: 279
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4e2853cc6ec6223160471401e6871f4b
f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c
bf4b9145ea043d87a30fd3aeeae21a1a0aa27004cd2467e7aa843bc894ae1f60
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc6fadd94-b1a4-4bdc-bcf4-b6bade4840a0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10462
x-amzn-requestid: 43480a38-fd89-4c47-b8c4-e6ba90b1321c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: aMF6oEz_oAMF8Hg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-634e5043-6617fd2e59cab00135301cdd;Sampled=0
x-amzn-remapped-date: Tue, 18 Oct 2022 07:05:39 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C7GYpM3mXSf0hVyGO9Zzlxa3IHXHdyPlXsvr3i0GoQnaPZF6lO-OwA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 06:28:01 GMT
age: 76721
etag: "f052e1f8b2bf4a8eeecfa5b82e27ada1b7719a0c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cb56270-7d8d-4ba2-bc30-de736a42e1dd.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cb56270-7d8d-4ba2-bc30-de736a42e1dd.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash bb3fe96fee7d9da0905d9d565b44fc32
c0d68e81500af89bb4a3ac2c9bf010d941f7b5ee
2b602aa92c61c060a0cfa9b13a7bbbcb65388b91559702c4d509bf199cf30bed
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0cb56270-7d8d-4ba2-bc30-de736a42e1dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12796
x-amzn-requestid: 31108e5a-3c69-4b62-99ea-1816df71a2aa
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: bKuDcEzooAMF1iA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63675d49-708c32857b683c5a39046202;Sampled=0
x-amzn-remapped-date: Sun, 06 Nov 2022 07:07:53 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: hRbYl8z9BgnFvtV-7f14N5JoCSebFBrKB7-seyEJAFPN628ccXDjLw==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Tue, 08 Nov 2022 07:43:06 GMT
age: 72216
etag: "c0d68e81500af89bb4a3ac2c9bf010d941f7b5ee"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash 2fe5c9e4eb3628bf2ec24516ac5b1efd
d5d6e1081969ccb5a2c859dbb08ac31079d6ab75
11f8421ed48150683cdab40019b712583b575b36adc3878142b336138607da0a
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:42 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 07 Nov 2022 06:25:22 GMT
Expires: Mon, 14 Nov 2022 06:25:21 GMT
Etag: "d5d6e1081969ccb5a2c859dbb08ac31079d6ab75"
Cache-Control: max-age=440918,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76739018dcc1b51b-OSL
my.rtmark.net/gid.js?userId=497ca1005f7f47bbb42b0b1ea45240a2
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=497ca1005f7f47bbb42b0b1ea45240a2
IP
File type JSON data\012- , ASCII text
Hash b4d464a00a7c93c4a8d946ecac6d283b
34651716fdcc47cff77dbe427a6b3945252c2a66
097c64076ddc329353d8898b80eac734a3c4a2dbdfc554b3833adc3177b6f124
GET /gid.js?userId=497ca1005f7f47bbb42b0b1ea45240a2 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Wed, 09 Nov 2022 03:46:42 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=497ca1005f7f47bbb42b0b1ea45240a2; expires=Thu, 09 Nov 2023 03:46:42 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 05 Nov 2022 12:31:58 GMT
expires: Sun, 05 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 314084
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 03 Nov 2022 21:46:16 GMT
expires: Fri, 03 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 453626
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=uudhDNuKbzQZdexGHnmYO4GJEdCeqF7KL7o5vVbuWW3ITU7ntuCpUu_9_6tvc4RSWrD0QGcfGtetnLFtUrc_myEyRWkP10eIcXqDFWv9w2unNZiT9WpKXTQpHrVNY1Y8-nDt6BYD1SwDRKwDuApSvVwCy3vrLmAYTyoMkcMEescBfjJXBZMBZAQageXYX3vnjxDkK7SQMtdSURixeGYO2WMpY5lqGKs8im-pRX7DOc-o5zoPhGKpzg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=921&cw=1140&wih=836&wiw=1152&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=b542ff92-b29a-4148-952e-0f7774237acf&userId=497ca1005f7f47bbb42b0b1ea45240a2&m=link
200 OK 1.8 kB URL HTTP/1.1 onmarshtompor.com/?rb=uudhDNuKbzQZdexGHnmYO4GJEdCeqF7KL7o5vVbuWW3ITU7ntuCpUu_9_6tvc4RSWrD0QGcfGtetnLFtUrc_myEyRWkP10eIcXqDFWv9w2unNZiT9WpKXTQpHrVNY1Y8-nDt6BYD1SwDRKwDuApSvVwCy3vrLmAYTyoMkcMEescBfjJXBZMBZAQageXYX3vnjxDkK7SQMtdSURixeGYO2WMpY5lqGKs8im-pRX7DOc-o5zoPhGKpzg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=921&cw=1140&wih=836&wiw=1152&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=b542ff92-b29a-4148-952e-0f7774237acf&userId=497ca1005f7f47bbb42b0b1ea45240a2&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2355), with no line terminators
Hash d62243501193f069e636f17e5d348181
88b185d1fe33fd00ed4f93c5338634b91f00f576
42ec5d6664d28608a929e7523dd722432dcf1047051455a504ee5dba2a3478c7
GET /?rb=uudhDNuKbzQZdexGHnmYO4GJEdCeqF7KL7o5vVbuWW3ITU7ntuCpUu_9_6tvc4RSWrD0QGcfGtetnLFtUrc_myEyRWkP10eIcXqDFWv9w2unNZiT9WpKXTQpHrVNY1Y8-nDt6BYD1SwDRKwDuApSvVwCy3vrLmAYTyoMkcMEescBfjJXBZMBZAQageXYX3vnjxDkK7SQMtdSURixeGYO2WMpY5lqGKs8im-pRX7DOc-o5zoPhGKpzg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.448.1&fs=0&cf=0&sw=1280&sh=1024&sah=1024&wx=0&wy=0&ww=1152&wh=921&cw=1140&wih=836&wiw=1152&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F11%2Fkejam-cucuh-anu-anak-dengan-bara-rokok.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.448.1&bs=b542ff92-b29a-4148-952e-0f7774237acf&userId=497ca1005f7f47bbb42b0b1ea45240a2&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://macamlawak.blogspot.com/
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Wed, 09 Nov 2022 03:46:42 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 5141b3476c2d4f78c4a10e3a104188ad
Access-Control-Allow-Origin: http://macamlawak.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=497ca1005f7f47bbb42b0b1ea45240a2; expires=Thu, 09 Nov 2023 03:46:42 GMT; path=/
oaidts=1667965602; expires=Thu, 09 Nov 2023 03:46:42 GMT; path=/
syncedCookie=true; expires=Wed, 16 Nov 2022 03:46:42 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 471 B IP
Hash 678de2273bbf1e05b6ab7ccd72f1603b
2cc55f29a75014a38d23a1fc839c8ea56bea4346
02a089d1dae348c29665b5cf650ca9fd5450f63ff93e7986304fb70d95460e36
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Wed, 09 Nov 2022 03:46:43 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 08 Nov 2022 01:33:19 GMT
Expires: Tue, 15 Nov 2022 01:33:18 GMT
Etag: "2cc55f29a75014a38d23a1fc839c8ea56bea4346"
Cache-Control: max-age=509795,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 767390198cf7b51b-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 945
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Wed, 09 Nov 2022 03:46:43 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://macamlawak.blogspot.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
2.bp.blogspot.com/-hSgGcKojlnw/UxTAcDep8cI/AAAAAAAABBE/eQKHTuXfq4g/s70-c/Pasar-Malam-1.jpg
200 OK 4.8 kB URL HTTP/1.1 2.bp.blogspot.com/-hSgGcKojlnw/UxTAcDep8cI/AAAAAAAABBE/eQKHTuXfq4g/s70-c/Pasar-Malam-1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash 3ed8f11167e4dbbbcf73bc4044992be8
5e9415f695324c204f88fad3c7b7095102e8fba6
8dae2a117cf7e1f27e05d10320a28a24d78bb2911f147d898923a05ab937091e
GET /-hSgGcKojlnw/UxTAcDep8cI/AAAAAAAABBE/eQKHTuXfq4g/s70-c/Pasar-Malam-1.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v412"
Expires: Thu, 10 Nov 2022 03:46:43 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Pasar-Malam-1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:43 GMT
Server: fife
Content-Length: 4844
X-XSS-Protection: 0
macamlawak.blogspot.com/2014/11/benar-ramai-penderma-pahala-di-internet.html
200 OK 36 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/11/benar-ramai-penderma-pahala-di-internet.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 3dd607dd23e0086988a60cfe5cc10ed6
69616e5f1a40c5ac4c9d17fbb9510b067f64ff38
e3148267b5e2c54dfae3b09d18a2fdb99796cf65b26a4e16c99b7f378b7c9565
Analyzer Verdict Alert fortinet Phishing
GET /2014/11/benar-ramai-penderma-pahala-di-internet.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
Cookie: ck_TCM_pop=1; prefetchAd_3294720=true
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 09 Nov 2022 03:46:43 GMT
Date: Wed, 09 Nov 2022 03:46:43 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 03:06:38 GMT
ETag: W/"d896c86e064821b630a117378abd9b84148c36e16d2e6be5c86fb85e70e4e341"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35803
Server: GSE
macamlawak.blogspot.com/2015/01/loom-band-jika-dikunyah.html
200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2015/01/loom-band-jika-dikunyah.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 2556ac287ff8427ffd362226ad9909bc
8444e626cf3863a64d1d61d48fe47464a5fce5e8
0b80147c4a92eff645c1ca3ddaa9b068b7a1a312e163b830e8e27f9c35807a3f
GET /2015/01/loom-band-jika-dikunyah.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/11/kejam-cucuh-anu-anak-dengan-bara-rokok.html
Cookie: ck_TCM_pop=1; prefetchAd_3294720=true
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Wed, 09 Nov 2022 03:46:43 GMT
Date: Wed, 09 Nov 2022 03:46:43 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 03:06:38 GMT
ETag: W/"d896c86e064821b630a117378abd9b84148c36e16d2e6be5c86fb85e70e4e341"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35346
Server: GSE
www.sinarharian.com.my/polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.sinarharian.com.my/polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg HTTP/1.1
Host: www.sinarharian.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Wed, 09 Nov 2022 03:46:43 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Wed, 09 Nov 2022 04:46:43 GMT
Location: https://www.sinarharian.com.my/polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg
Server-Timing: cf-q-config;dur=6.0000002122251e-06
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7673901f5c890b02-OSL
alt-svc: h2=":443"; ma=60
ocsp.digicert.com/
200 OK 279 B IP
Hash ba29b2c7a06b159490f6189e4ea90c7b
c299626ab980b2406badf2d5deb64466a4deb1c6
7d997ba85fb486b7f9be072f248b50d8357c3c633a7f5789158fc08af4980c34
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=120387
Content-Type: application/ocsp-response
Date: Wed, 09 Nov 2022 03:46:43 GMT
Etag: "636a55e6-117"
Expires: Thu, 10 Nov 2022 13:13:10 GMT
Last-Modified: Tue, 08 Nov 2022 13:13:10 GMT
Server: nginx
Content-Length: 279
2.bp.blogspot.com/-pl5QXQ6GUhw/VAp0MvvXl5I/AAAAAAAAgok/8JYFKQLP_pY/s1600/download.jpg
200 OK 10 kB URL HTTP/1.1 2.bp.blogspot.com/-pl5QXQ6GUhw/VAp0MvvXl5I/AAAAAAAAgok/8JYFKQLP_pY/s1600/download.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 290x174, components 3\012- data
Hash a4f1261dc86a4f51fd272b6a71719fa0
02529cdfd4a5f8da7627ef1cbca49de044ff624d
b6c31beeb73abc46403a121033203d044130f7f3371318132bdc216b115339f7
GET /-pl5QXQ6GUhw/VAp0MvvXl5I/AAAAAAAAgok/8JYFKQLP_pY/s1600/download.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v828a"
Expires: Thu, 10 Nov 2022 03:46:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="download.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Wed, 09 Nov 2022 03:46:44 GMT
Server: fife
Content-Length: 9971
X-XSS-Protection: 0
www.blogger.com/comment/frame/3754588090277075421?po=159351627420887841&hl=en-GB&blogspotRpcToken=355253
200 OK 0 B URL HTTP/2 www.blogger.com/comment/frame/3754588090277075421?po=159351627420887841&hl=en-GB&blogspotRpcToken=355253
IP
GET /comment/frame/3754588090277075421?po=159351627420887841&hl=en-GB&blogspotRpcToken=355253 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Wed, 09 Nov 2022 03:46:40 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
content-security-policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport, script-src 'nonce-pEzmnD_tNeS0ya5h64RECA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
report-to: {"group":"BloggerCommentUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/BloggerCommentUi/external"}]}
cross-origin-resource-policy: same-site
cross-origin-opener-policy: same-origin; report-to="BloggerCommentUi"
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=ec9S-I-XPUF_JZBWhCfP2bQZYCJOjshFa6M5UcatFPBj-NQbdLRGi-mog0E8yKiMk5hBAya6d5on8y2zjB7_gG-VtzGiriVRHt5zmRG69fWFfqjvwOo53BSH59oAplXzMw9VoOIF5j9xrRcocd-yXHXv501YCzGWl414e6nY3O0; expires=Thu, 11-May-2023 03:46:40 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
inklinkor.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 7268202be4f77555bc670543e8b180b8
cache-control: max-age=86400
last-modified: Mon, 07 Nov 2022 13:55:15 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Thu, 10 Nov 2022 03:26:10 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 1231
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=D3Uc1UOVeAVRtrkZu6uORLPTI5r1p%2B1XhizpDk6kkyM63pHwxiNmSRooP05T9eL9%2F4nN0%2BEMr3rUmEJIprvTrt6aTk9hdoTdhhfu9JFmjd71O7L2LK3tAgX1gVlWYe4U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76739010db21b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:42 GMT
content-type: application/javascript
last-modified: Tue, 18 Oct 2022 14:05:58 GMT
etag: W/"634eb2c6-32d9"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 1366
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=F3rxxg0NQVnLRMixc14DS6GRH%2FdHoNr1PvpH2M6UeZ0vV2RXi7HzzlOIVsZyduXQKMyV5sFSHpGW37%2BCa8hr9EKj5kO7bjw74Jz5Dp8Uvc0wgXjP%2B6Nowj2QDlrFKA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767390186bc9b4ee-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Wed, 09 Nov 2022 03:46:41 GMT
date: Wed, 09 Nov 2022 03:46:41 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=trackwidget
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: application/javascript
last-modified: Tue, 08 Nov 2022 13:16:42 GMT
etag: W/"636a56ba-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HFd71R8rPR6PSxmx8oZewAKS3AR8kKG4OvBuz9N4UX%2Fn8ddLqTOSgsD%2F%2FuNtaDUid0A8AbDcfZSQKOs140FMos4UBnGlFuE4SivyTIkyiroECar9V3UEK%2BguzA3%2B2g07"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 767390144ae6b51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Fri, 11 Nov 2022 03:46:41 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=trackwidget
200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=trackwidget
IP
GET /hitparade.php?pagexiti=trackwidget HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Wed, 09 Nov 2022 03:46:41 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Wed, 09 Nov 2022 03:49:40 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M4N6EExxz0K1ikB1bA%2FfY5S%2FXct7bg3tZ2F9ec9xRqvalkhoDZHgY48Tv52R6%2BvwqT8B1WB5eDpZ2ZxE%2Bwoj1Vcs8VywRneOEaYXma2tkcFFMF3Dv2HYUzTCCarQsJff"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 767390111988b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.sinarharian.com.my/polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg
500 Internal Server Error 0 B URL HTTP/2 www.sinarharian.com.my/polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg
IP
GET /polopoly_fs/1.9318.1337503561!/image/image.jpg_gen/derivatives/landscape_490/image.jpg HTTP/1.1
Host: www.sinarharian.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://macamlawak.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 500 Internal Server Error
date: Wed, 09 Nov 2022 03:46:44 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.2.34
x-cache: Error from cloudfront
via: 1.1 5916f6b8d469d1bee1e905ff13761ebc.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZVnRndfI7soubqMR17E8W_KXsX09MvTgW85C0pqHk4zRsCTKPgJCZQ==
cf-cache-status: MISS
vary: Accept-Encoding
server: cloudflare
cf-ray: 7673901ffce6fab4-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.161
23.36.77.32
104.21.91.63
37.48.68.71
139.45.197.234
185.66.200.224