r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash bcdebf7a2bad5db595e8a0c1abb2ddcb
249dda2fa5e37b8a8f3a8c797193bf0874b6eedc
9b43ec48b16f96449208a0094c4d660806a2a2d344b5862dbff4c393bf3f9f9f
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "9B43EC48B16F96449208A0094C4D660806A2A2D344B5862DBFF4C393BF3F9F9F"
Last-Modified: Thu, 01 Sep 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9464
Expires: Fri, 02 Sep 2022 15:04:25 GMT
Date: Fri, 02 Sep 2022 12:26:41 GMT
Connection: keep-alive
yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html
301 Moved Permanently 208 B URL HTTP/1.1 yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8d05c1485fd6c3045749ccf7bad86a41
04f38a03d4a502664a79785cbb0b85bb90734a87
c97306ffcd8b9e01b938a2176d87c7474a2629498152a812ef5bb5fd17efcdff
GET /2022/08/seksyen-10-wangsa-maju.html HTTP/1.1
Host: yoostewartshort.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Fri, 02 Sep 2022 12:26:41 GMT
Expires: Fri, 02 Sep 2022 12:26:41 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 208
Server: GSE
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 99b7d23c1748d0526782b9ff9ea45f09
eadd801a3ba2aa00632c6fb52e1f9125bd6d5b4f
48f81668f76955320480b484138aebdad5d03c471036b4449c737aca1ecab08e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Content-Length, Backoff, Retry-After, Alert
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Fri, 02 Sep 2022 11:41:44 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 d4fd24ae65d4d2b97cfdea8d2f0c21a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: eQ_s1ZMXHBKuVb4al4WFd9hv43MnsdyA011P3tsSAlLV6_TinE8W5w==
Age: 2697
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 02 Sep 2022 01:15:17 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 057fdebf738f5915bf38a78949190758.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: pfeMjvyul8qk0KogHpn-ZULX91PBZaRNvmeVioXJ2A3ec2w9Ux4GEw==
age: 40284
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 12:26:41 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9db2712076236e277a9606d4730106bf
e8ab1281fa273b228e737acaaacb986f9b2a2c2c
938cfe9830dd8ef41e6dff02cd2aa10d654fb7f5e7aa0b2bee317118e00de4da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:41 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Type, Alert, Cache-Control, Pragma, Backoff, Last-Modified, ETag, Expires, Content-Length, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Fri, 02 Sep 2022 11:38:16 GMT
Expires: Fri, 02 Sep 2022 12:20:56 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 83a23d85c009b0c0e3626072e9f997fe.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: k7ROhsawhMElQccrPW2Tt6W32estcE31iYyEpKSvAua8FKCfVk8H-A==
Age: 2905
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 9db2712076236e277a9606d4730106bf
e8ab1281fa273b228e737acaaacb986f9b2a2c2c
938cfe9830dd8ef41e6dff02cd2aa10d654fb7f5e7aa0b2bee317118e00de4da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html
200 OK 25 kB URL HTTP/2 yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (12227)
Hash bc00cad45afbd0ff5d9418637ab99425
80b0ff1136f7551d69428bc304c8b26794c6e802
afe184014da5f6e30effde1c8d451e87f13fc52bb1af3b151f2cd125fec554fb
GET /2022/08/seksyen-10-wangsa-maju.html HTTP/1.1
Host: yoostewartshort.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 200 OK
content-type: text/html; charset=UTF-8
expires: Fri, 02 Sep 2022 12:26:41 GMT
date: Fri, 02 Sep 2022 12:26:41 GMT
cache-control: private, max-age=0
last-modified: Mon, 22 Aug 2022 21:15:19 GMT
etag: W/"3ed8bf3337e676dd651a042bb02c52a41128e4d7ed57b318c6cc412b95ca659b"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 25366
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 21daf45cdda2eb462873226bb5c1f0fb
4d4621bbf1461f35f7e536c1dbd9de71978ffa23
8164c742d013bdc2836cac1167acfe482547347ab6a1daefa15475f694dae057
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5462
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Last-Modified: Fri, 02 Sep 2022 10:55:40 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2e5114156ac45cec856f3ea7f45872
011859d6358ad9298b557c1a4b33b80a7a5411ab
3a17c68f9f6cb51ef5c39157a5cae6526f7efae019cc9ae96706da80aea667da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 846401c7afd6f6d47ad72e731c1685dc
dbd5c7f876f91b80035c5de6160b05b17be021ef
59df3f4a2f3f4bdddd03f932781edc31bce072f539d643cc0fcd27be4631e5ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 271456a9331dbb4875331d01903169fa
0eb92ee55b4e2b0793389bdba84e29e5020a6875
0d7b4f6fde0f7f373f274a7cb57ebf8050fb9f7176052dd5d8594d0979666cd4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2298587511-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2298587511-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash f464fdcdf304c6b79a91e2a822b695cd
e1329e29712ab125707bedf4c324d2cbb7c177e3
a4a889b07d4d04b7aeda255d273f18207f9803078bc5b28840ef2d380afc1abb
GET /static/v1/widgets/2298587511-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 57040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 21:19:16 GMT
expires: Fri, 01 Sep 2023 21:19:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 31 Aug 2022 20:05:39 GMT
content-type: text/javascript
age: 54446
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6611a729203a60c2980a5a631412c82b
6c7847069495c07f95aea23a3212372a3719f93b
76e1f502b17c27ab178ec6b9d683072498e5811d5ed944f11b268dcd71f7e2de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6611a729203a60c2980a5a631412c82b
6c7847069495c07f95aea23a3212372a3719f93b
76e1f502b17c27ab178ec6b9d683072498e5811d5ed944f11b268dcd71f7e2de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
zaline.diraya.my.id/300-1.js
200 OK 684 B URL HTTP/2 zaline.diraya.my.id/300-1.js
IP
Hash 869d8e7ed2c5fb95b2b87e737b441e07
a0036057371fb1e3ae240fe7362b5919124afdb0
257f3db127836cf70d1db68f408016492eeef4b4eaed72714942b3edc31e9822
GET /300-1.js HTTP/1.1
Host: zaline.diraya.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"c88ed40783b929cacc8b343570ac9c6f"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8a0PVfuHB%2BS8iTrQMA3LFfW9rzzARZG3UTLT%2F9e6PRpy53RMhurXsdYfNNINzoYJurwu5NhfDOABpoSfCIMsVUyYzqdnXbd6IUIqqMcEdmShQDl8RvGEQmaGM6YCdnkHLwrvUHNY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 4795
server: cloudflare
cf-ray: 74463c4e1a3bb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1277)
Hash 202067c443611dc148225b75c0e3d556
9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Fri, 02 Sep 2022 12:26:42 GMT
expires: Fri, 02 Sep 2022 12:26:42 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4e7ea00abe8fbd80"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.12.4/jquery.min.js
IP
File type ASCII text, with very long lines (32077)
Hash fd2b58574f9637ba7ef639267349d848
6eda5ea93f549ceb5693f6f1c038893fa56a510d
75627d4b97e5e6294a8f88f5eeaf9b616696dc8600db9701c47ef05f067880ec
GET /ajax/libs/jquery/1.12.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33951
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 28 Aug 2022 02:16:32 GMT
expires: Mon, 28 Aug 2023 02:16:32 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 468610
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6c2e5114156ac45cec856f3ea7f45872
011859d6358ad9298b557c1a4b33b80a7a5411ab
3a17c68f9f6cb51ef5c39157a5cae6526f7efae019cc9ae96706da80aea667da
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 660657162b524658006a1856e274a946
56c933c6682c0019f6dbd040da6b929044dc216a
9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 660657162b524658006a1856e274a946
56c933c6682c0019f6dbd040da6b929044dc216a
9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
200 OK 48 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 47952, version 1.0\012- data
Hash 17b406b7b8caa297435fa358e194f5a1
e2132f0e97781af56fa966c0fabb49132f2af203
84161c46238fff2c6920ebc28f02cddd7b710cf3d1107853f540b084320f6afd
GET /s/opensans/v34/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 47952
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 18:59:14 GMT
expires: Tue, 29 Aug 2023 18:59:14 GMT
cache-control: public, max-age=31536000
age: 322048
last-modified: Mon, 15 Aug 2022 18:22:41 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 18:53:20 GMT
expires: Tue, 29 Aug 2023 18:53:20 GMT
cache-control: public, max-age=31536000
age: 322402
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha1-zq98IsCuaior5LcgFmShj6zg6lJdKszDSX0xLDBLgjCSTkQK71438uC0hOSG9-yKa9-h7hh2lnA_cpi2aDUbMRsrPQwYhc0XsC00iG_dM8oYD6Ii7BQLXMpa6iwvf3OjVGzBQP50M3gKIDUU5bM=w72-h72-p-k-no-nu
200 OK 5.2 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha1-zq98IsCuaior5LcgFmShj6zg6lJdKszDSX0xLDBLgjCSTkQK71438uC0hOSG9-yKa9-h7hh2lnA_cpi2aDUbMRsrPQwYhc0XsC00iG_dM8oYD6Ii7BQLXMpa6iwvf3OjVGzBQP50M3gKIDUU5bM=w72-h72-p-k-no-nu
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash dea78508fd9d8e4a0b9e0ab16318dcda
0517929daca442a8b12c75d5c07250a310a4a234
fd46a6692f3e1f70dd924763fa94d716b0481880ae4cf7b2f1fc692c9c93e5fb
GET /blogger_img_proxy/ANbyha1-zq98IsCuaior5LcgFmShj6zg6lJdKszDSX0xLDBLgjCSTkQK71438uC0hOSG9-yKa9-h7hh2lnA_cpi2aDUbMRsrPQwYhc0XsC00iG_dM8oYD6Ii7BQLXMpa6iwvf3OjVGzBQP50M3gKIDUU5bM=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 03 Sep 2022 12:26:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 02 Sep 2022 12:26:42 GMT
server: fife
content-length: 5151
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 846401c7afd6f6d47ad72e731c1685dc
dbd5c7f876f91b80035c5de6160b05b17be021ef
59df3f4a2f3f4bdddd03f932781edc31bce072f539d643cc0fcd27be4631e5ab
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dc076b754adaddcb000f3f987b6c5df2
01e9b40591692b8b2a6a94729e9481c7e600d248
9dbf2e71e1cbad91a71154b729e8ef496eda7544828a8bfd4f64e6dd70c4f64d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: uveADdHw+LlYsxxmu0jwiw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: uc0daTN9eDuWDDtxdKS8an0+pZI=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 660657162b524658006a1856e274a946
56c933c6682c0019f6dbd040da6b929044dc216a
9578fc0408868ae40d41af8d13787f4137853c056300524b5558b1c57d39b2b3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6611a729203a60c2980a5a631412c82b
6c7847069495c07f95aea23a3212372a3719f93b
76e1f502b17c27ab178ec6b9d683072498e5811d5ed944f11b268dcd71f7e2de
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:42 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3JR_uZjHU4xVB8m9fwIOWBr7v_XOR6jh6aTJG7ZnVsUD0r8S7TqZLkEjqd40mqW_ebrXhHx-mwl4XAAtoGkSBrJktLxcY3U5VRFgiRFFMjZE5MVRExfGDImOYObJ1dC_oSPJGQB8AwD2A=w72-h72-p-k-no-nu
200 OK 1.9 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3JR_uZjHU4xVB8m9fwIOWBr7v_XOR6jh6aTJG7ZnVsUD0r8S7TqZLkEjqd40mqW_ebrXhHx-mwl4XAAtoGkSBrJktLxcY3U5VRFgiRFFMjZE5MVRExfGDImOYObJ1dC_oSPJGQB8AwD2A=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 320ae4ebcca9bc140098b5bb3798ca12
c8cf0a5c44cb717b63dd4270bdbeeeb2980e4214
47c20f1af18dbfa3beff9f9aae0f7d2941a9cc12d5a1586e0c711ccd9c0ab2b4
GET /blogger_img_proxy/ANbyha3JR_uZjHU4xVB8m9fwIOWBr7v_XOR6jh6aTJG7ZnVsUD0r8S7TqZLkEjqd40mqW_ebrXhHx-mwl4XAAtoGkSBrJktLxcY3U5VRFgiRFFMjZE5MVRExfGDImOYObJ1dC_oSPJGQB8AwD2A=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 03 Sep 2022 12:26:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 02 Sep 2022 12:26:42 GMT
server: fife
content-length: 1944
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0TCYXkGOztDXBCPoVA3NMUmAbvw755Vhm-J3-8CWiEuSnowfUNC8_aTOgDx-EEuNvhY5bvP-UtaI07DtRxZP_L9kHRpPJXfkvI_ayQytAOO6XBszzn840ePg0eAdrJxI0g4ILgCtW_aZnL3cJAVfI=w72-h72-p-k-no-nu
200 OK 4.6 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0TCYXkGOztDXBCPoVA3NMUmAbvw755Vhm-J3-8CWiEuSnowfUNC8_aTOgDx-EEuNvhY5bvP-UtaI07DtRxZP_L9kHRpPJXfkvI_ayQytAOO6XBszzn840ePg0eAdrJxI0g4ILgCtW_aZnL3cJAVfI=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash ed8f74644e963db5636679f6b8f75c18
93526ed27408ac5da82e836d1c4f5a608dfddae9
63f1c80326c23aceb8b8ec5f7fcadf8fa357645d69e82eb6a48f4f2a3964eb47
GET /blogger_img_proxy/ANbyha0TCYXkGOztDXBCPoVA3NMUmAbvw755Vhm-J3-8CWiEuSnowfUNC8_aTOgDx-EEuNvhY5bvP-UtaI07DtRxZP_L9kHRpPJXfkvI_ayQytAOO6XBszzn840ePg0eAdrJxI0g4ILgCtW_aZnL3cJAVfI=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 03 Sep 2022 12:26:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 02 Sep 2022 12:26:42 GMT
server: fife
content-length: 4580
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/blogger_img_proxy/ANbyha0ZeZ9AeqhPrzqh8En5yvOBLMrlf-JoUIMngYIip3PSdXnazQjFCZidJoshwxRjeZ7smzUdBIHR8V3Pk_wLifevBQH43zx_CILkkQEdEDMJ3VCDNiwXJ-uq05QSos6j6E7VruP8-37dizcW=w1600
200 OK 59 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha0ZeZ9AeqhPrzqh8En5yvOBLMrlf-JoUIMngYIip3PSdXnazQjFCZidJoshwxRjeZ7smzUdBIHR8V3Pk_wLifevBQH43zx_CILkkQEdEDMJ3VCDNiwXJ-uq05QSos6j6E7VruP8-37dizcW=w1600
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 736x457, components 3\012- data
Hash 75381a8bda50ccd13f6159de9cd83332
cea445bb1beb276dfbccaed18d5f46b00db652a0
5e3705e8bfcea5b74f0d48c6e54c7d3c394280f8ec02ae16a5bf9b1dc9a01f4b
GET /blogger_img_proxy/ANbyha0ZeZ9AeqhPrzqh8En5yvOBLMrlf-JoUIMngYIip3PSdXnazQjFCZidJoshwxRjeZ7smzUdBIHR8V3Pk_wLifevBQH43zx_CILkkQEdEDMJ3VCDNiwXJ-uq05QSos6j6E7VruP8-37dizcW=w1600 HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 03 Sep 2022 12:26:42 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 02 Sep 2022 12:26:42 GMT
server: fife
content-length: 58993
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b775cfa42e878a8dc685800a96e8ef28
90d0b507a17479f52380982d6e98df6df03a9eff
931b4cf984bab45b32845a306ca4a7b1012434ba614af960cd928ee494014a5e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "931B4CF984BAB45B32845A306CA4A7B1012434BA614AF960CD928EE494014A5E"
Last-Modified: Thu, 01 Sep 2022 19:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Fri, 02 Sep 2022 18:26:42 GMT
Date: Fri, 02 Sep 2022 12:26:42 GMT
Connection: keep-alive
dispatchoffenderbleat.com/431475e49e1926d143ad1caad2092d6e/invoke.js
200 OK 9.8 kB URL HTTP/1.1 dispatchoffenderbleat.com/431475e49e1926d143ad1caad2092d6e/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26945), with no line terminators
Hash 42ed5eb7d9ad532c0e8adb24ffce7b40
eed2ae8aa3d27723a54709e286a2dd320a010ad6
235a3381c80bdd0ec27cd9bf62882d7b5ab8f2c9ea55abaa7c5dd55513ebc3ac
Analyzer Verdict Alert quad9 Sinkholed
GET /431475e49e1926d143ad1caad2092d6e/invoke.js HTTP/1.1
Host: dispatchoffenderbleat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25995766e4f3ddf78e80efd0aff16e81
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
www.blogger.com/dyn-css/authorization.css?targetBlogID=5608318946154228931&zx=86e0d2a2-eb9d-471d-becf-b9d71d4e290a
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=5608318946154228931&zx=86e0d2a2-eb9d-471d-becf-b9d71d4e290a
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=5608318946154228931&zx=86e0d2a2-eb9d-471d-becf-b9d71d4e290a HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Fri, 02 Sep 2022 12:26:43 GMT
last-modified: Fri, 02 Sep 2022 12:26:43 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
dispatchoffenderbleat.com/768320f2a9b589040780a7f24f18f88e/invoke.js
200 OK 9.8 kB URL HTTP/1.1 dispatchoffenderbleat.com/768320f2a9b589040780a7f24f18f88e/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26994), with no line terminators
Hash 9e4b8926d8259454f26cc6dcabf3dc74
17efb540768cfbab5329cc28995cd16e2383456f
c10f172832b2a0d6b0531f1138700636f58d305dfad22717c27a949632a06cb1
Analyzer Verdict Alert quad9 Sinkholed
GET /768320f2a9b589040780a7f24f18f88e/invoke.js HTTP/1.1
Host: dispatchoffenderbleat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 25a84cccc3095239a9bcc73495f5671a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
lh3.googleusercontent.com/blogger_img_proxy/ANbyha3sMMJlxt9SUa8RmJD-83tYqRDLNmfGH2GraWFVIltnzqUyYNhS5TifGVRovMpkMm7zxHI3WRkU6EQPa9P3bQn6i69rJ4BXbtnuVpfG6EEJ9DqJkwxnM1jIA6XtvISnivfakMGst-GpZNfvD6t48Kc=w72-h72-p-k-no-nu
200 OK 3.0 kB URL HTTP/2 lh3.googleusercontent.com/blogger_img_proxy/ANbyha3sMMJlxt9SUa8RmJD-83tYqRDLNmfGH2GraWFVIltnzqUyYNhS5TifGVRovMpkMm7zxHI3WRkU6EQPa9P3bQn6i69rJ4BXbtnuVpfG6EEJ9DqJkwxnM1jIA6XtvISnivfakMGst-GpZNfvD6t48Kc=w72-h72-p-k-no-nu
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 72x72, components 3\012- data
Hash 8b733d9110eb93c186fcd29f92547efd
05b0921478a720f276f20e79e80da64292e5a20a
8cfe31b708ee3113ee8425d0ec2690ab4631ea68035eeba89145ce730d45bb82
GET /blogger_img_proxy/ANbyha3sMMJlxt9SUa8RmJD-83tYqRDLNmfGH2GraWFVIltnzqUyYNhS5TifGVRovMpkMm7zxHI3WRkU6EQPa9P3bQn6i69rJ4BXbtnuVpfG6EEJ9DqJkwxnM1jIA6XtvISnivfakMGst-GpZNfvD6t48Kc=w72-h72-p-k-no-nu HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
expires: Sat, 03 Sep 2022 12:26:43 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Fri, 02 Sep 2022 12:26:43 GMT
server: fife
content-length: 2981
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
200 OK 31 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 31320, version 1.0\012- data
Hash 3fe71527811fbfedd2c07962e1bc49e7
f63e158a0480c5d711b5e268db0e75e57d87a8a5
24c0e724005344165ee0a0ff4c96a914e174bb4caa20c8a533fb194d92853e95
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 31320
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 29 Aug 2022 18:57:58 GMT
expires: Tue, 29 Aug 2023 18:57:58 GMT
cache-control: public, max-age=31536000
age: 322125
last-modified: Mon, 15 Aug 2022 18:11:37 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sca1b.amazontrust.com/
200 OK 471 B URL HTTP/1.1 ocsp.sca1b.amazontrust.com/
IP
Hash b019ba472c2b1d5491e5e72c150878a2
e7e764d18764fcbf7a6d6440d740d3cbd916468e
4076ef6e1b3d631468ed0e3a567dfa4c1c4de437852eada1cc658b3640cdad69
POST / HTTP/1.1
Host: ocsp.sca1b.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Accept-Ranges: bytes
Cache-Control: 'max-age=158059'
Date: Fri, 02 Sep 2022 12:26:43 GMT
Last-Modified: Fri, 02 Sep 2022 11:06:22 GMT
Server: ECS (nyb/1DD2)
X-Cache: Miss from cloudfront
Via: 1.1 a6d89f7e2d55548b941f1ff5d5b3c8d4.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z4PTlUzSad4dXHcLZryupfpvQb3R_FPx5uJ5H0nzd5fhGvpu1DBdTw==
Age: 4821
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 7c54451e69294e4f7eb62c2f965b5fc5
95a181d6b358d0475423d61700d4f604a07e3a3d
83b765f9541569201651d2cdcda1d6755a70369dbb0b6e9948e4a5ea00836deb
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://yoostewartshort.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=fff4c15d-a5f9-461e-9e73-0dbc02d094a3:3:1; expires=Mon, 30 Aug 2032 12:26:43 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
200 OK 14 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14040, version 1.0\012- data
Hash eadd44d829d43ddf48870c2073f1a7ca
fc04b04f37e0988001c81be96bca33c4d866450f
84197a92671b7b7c8715220cea35354699c6221113c0ff531ff087ab8a8aa9e6
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 14040
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 30 Aug 2022 00:01:55 GMT
expires: Wed, 30 Aug 2023 00:01:55 GMT
cache-control: public, max-age=31536000
age: 303888
last-modified: Mon, 15 Aug 2022 18:14:42 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 9352f77c85325fbd7af3d0e8a461a922
f65d05366a185a199382020dae6ac56388f10a8b
0b8a4f80cba4f081ba4a94d44cac00cbcf6090b6a47fdb4c07a671be8e1d7d67
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://yoostewartshort.blogspot.com
access-control-allow-credentials: true
set-cookie: uid_id2=94a3899e-503a-42e3-b449-ba32ef58dcaf:2:1; expires=Mon, 30 Aug 2032 12:26:43 GMT; secure; SameSite=None
X-Firefox-Spdy: h2
dispatchoffenderbleat.com/97264edc4c73fd2d5b41ac5081114f10/invoke.js
200 OK 9.8 kB URL HTTP/1.1 dispatchoffenderbleat.com/97264edc4c73fd2d5b41ac5081114f10/invoke.js
IP
ASN #39572 DataWeb Global Group B.V.
File type exported SGML document, ASCII text, with very long lines (26984), with no line terminators
Hash e7376a767d44392b577af20fbde7e2ed
fc1cd7e92aad6aeef3d251cccda3a3c80e3b87bd
8aaad7dfd4363207ed5769c2b13c3dd0eb0758a344fbca383ed1c2419ecc8929
Analyzer Verdict Alert quad9 Sinkholed
GET /97264edc4c73fd2d5b41ac5081114f10/invoke.js HTTP/1.1
Host: dispatchoffenderbleat.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.9
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: a1af5d2608b80baf4eb875dcc0c17e2e
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
simplewebanalysis.com/stats
200 OK 40 B URL HTTP/2 simplewebanalysis.com/stats
IP
File type ASCII text, with no line terminators
Hash 9352f77c85325fbd7af3d0e8a461a922
f65d05366a185a199382020dae6ac56388f10a8b
0b8a4f80cba4f081ba4a94d44cac00cbcf6090b6a47fdb4c07a671be8e1d7d67
GET /stats HTTP/1.1
Host: simplewebanalysis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Cookie: uid_id2=94a3899e-503a-42e3-b449-ba32ef58dcaf:2:1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:43 GMT
content-type: text/html; charset=UTF-8
content-length: 40
server: fasthttp
access-control-allow-origin: https://yoostewartshort.blogspot.com
access-control-allow-credentials: true
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6f0d13621a550aa591f087c2945aa2c5
18b520f7f9a71966c115f664def155bcacc60096
cf7e40d37010a5aa8ab4cb3091bd665b7401fa42fac3b1de62ca7a48c6b89b4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/2 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
vary: Accept-Encoding
x-content-type-options: nosniff
content-disposition: attachment; filename="f.txt"
content-encoding: gzip
server: cafe
content-length: 67
x-xss-protection: 0
date: Thu, 01 Sep 2022 20:42:11 GMT
expires: Thu, 15 Sep 2022 20:42:11 GMT
cache-control: public, max-age=1209600
age: 56672
etag: 13036835877489095579
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6f0d13621a550aa591f087c2945aa2c5
18b520f7f9a71966c115f664def155bcacc60096
cf7e40d37010a5aa8ab4cb3091bd665b7401fa42fac3b1de62ca7a48c6b89b4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 209d3a78f2cdc9370df9f90dafe16647
f90ef202fab3ddc953824a3ba0bdeb332c8fb150
0eb3933a5c7240922f3aa104d31a43a2172726f0b1062d337036838284ba77e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0EB3933A5C7240922F3AA104D31A43A2172726F0B1062D337036838284BA77E7"
Last-Modified: Fri, 02 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3266
Expires: Fri, 02 Sep 2022 13:21:09 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ca73a82bf17f02730c4fd4fe78e03463
e019d0c4c89fc7c0aeaf107d9fafc7f862949c09
a6e8995cfc3129f5b91ec540ec66d86386ee75328016ecadfa205be09da3b05d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A6E8995CFC3129F5B91EC540EC66D86386EE75328016ECADFA205BE09DA3B05D"
Last-Modified: Wed, 31 Aug 2022 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16031
Expires: Fri, 02 Sep 2022 16:53:54 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Fri, 02 Sep 2022 14:12:08 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aec46917079525c88564fc659ade31de
af5f4157008317e66540a009d688cad9bca64521
4cb83d6afd25897fd9f3107552f1148c7bd09bb9bd1ad5b84bd276cd0f1795b8
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4CB83D6AFD25897FD9F3107552F1148C7BD09BB9BD1AD5B84BD276CD0F1795B8"
Last-Modified: Fri, 02 Sep 2022 01:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2216
Expires: Fri, 02 Sep 2022 13:03:39 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Fri, 02 Sep 2022 14:12:08 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Fri, 02 Sep 2022 14:12:08 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 12f00eac4bda78b5d4c4bc00e96be439
5d6d88dbf72f208bc33c9af693440aec02e5f11c
4a85dc99793413780fdfde032e83995c0a15775eb09123f53a1ba9b789f91a55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A85DC99793413780FDFDE032E83995C0A15775EB09123F53A1BA9B789F91A55"
Last-Modified: Wed, 31 Aug 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6325
Expires: Fri, 02 Sep 2022 14:12:08 GMT
Date: Fri, 02 Sep 2022 12:26:43 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
200 OK 17 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 12756903aaa74164feb5f8525398ca36
9fef9b071daea6793cbbdfe391254ac4326b1aa2
6d474a6d96aebfed43a4f6812f18a1be8d100c590f75eb0fbf4ec7277dd0c442
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9564bd06-b264-460b-96bb-6b37cf25a72b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 16818
x-amzn-requestid: 6950a3c5-2cdc-4a21-854c-10d925e32ecd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XiYLvHRSIAMFotQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-630a6d7e-6e98b9a77e592bd01afb1d97;Sampled=0
x-amzn-remapped-date: Sat, 27 Aug 2022 19:16:14 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 3eBLhLH4APXLyj9kLHXNCFT9ccS_bnBp5INvMI93IFvOuBMERe_GgQ==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 35575576af8067e30cfb17c6b9fde8e2.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 13:35:58 GMT
age: 82245
etag: "9fef9b071daea6793cbbdfe391254ac4326b1aa2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 955f2a35bd6b3802670e7fa8a7cda833
4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c
2fb517039f0704d2f6fe2fa78eae47c71c645add1c2276f8726248184ae45760
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7c0ef483-e545-4a1f-b9b9-88778330d881.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10435
x-amzn-requestid: 813ec4ca-243d-46cb-a6a6-8ec58e5dd9f8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjdHwnIAMFhzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-4733cfb83cf0e8734abc5716;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: n6DJbsUGTdXT42cNLTDq6Uz28H2SDhwq6drdKP4axAHsBz471X7r_g==
via: 1.1 56c69262ecfa7873b40572ba8a323242.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
etag: "4c70d27f7c51b7fcae1d8a883bfc2e67a551ae6c"
content-type: image/jpeg
age: 53357
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
200 OK 9.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5ba50b2fd1814c5ffc95aef40c69ce8c
cbb4546228115cccc122b16209e70171bef5c1f2
de822c8549508b28a07d29b203ae3ef356470df906cba727fc765f1bd14bb866
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F06f2c9c2-de63-41e1-8359-5a5923a2b1e8.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9252
x-amzn-requestid: 7feebba8-f6b9-4b79-9726-5a7534da277e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyVG5DoAMF_Ug=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112675-3123158f3dcfbd476537ca3c;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:01 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BOa5zGQyJS9q9bHmtKzlNtyS9ToGPZJkDFo2uY2lzz8Lnd3cZLQEaA==
via: 1.1 1cc6ed0d2d3dd9529ce544f9dfe61a52.cloudfront.net (CloudFront), 1.1 ebe4011a81a36e2bf678f69ce1711330.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 22:48:18 GMT
age: 49105
etag: "cbb4546228115cccc122b16209e70171bef5c1f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cfd0462-8823-4971-b883-caf554e900df.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cfd0462-8823-4971-b883-caf554e900df.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62010c86472d14f87499b41dc46c12e4
d15de8ceb6fef98b46a87aec2e071c909efd2973
0fd93286e0381c85fa0db6cca62c4736b7a3837efcd035d25f7a4d948d9a0af0
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F7cfd0462-8823-4971-b883-caf554e900df.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8381
x-amzn-requestid: fcfbb9fb-66bd-40db-9088-d7c6110675bd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLjbGLToAMF6Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112615-75d4a2991a1bbf266e81c2e2;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:25 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: _HYMbSu2Xdv2-CWi2SPHdhsGCkJbarEhaO0l3jmBjNaKYuaoZAUgyA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 9c675215120a4ade8754c4357ef2f3ea.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:26 GMT
etag: "d15de8ceb6fef98b46a87aec2e071c909efd2973"
content-type: image/jpeg
age: 53357
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd29a2d-3498-41a7-af26-6104f50c81c8.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd29a2d-3498-41a7-af26-6104f50c81c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 25983224daee47c629690b65e7db685b
6f144e4e28ba6dfb56860b187a224cfbc23b50bb
2ada67937844f22cf524d39cf034ae5e49dd892c4b2e70af31cec62c747e3762
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcfd29a2d-3498-41a7-af26-6104f50c81c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10015
x-amzn-requestid: 28b44607-90c3-42b0-9a47-5ffd4f670347
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLlfGBqIAMFWqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112622-38788fd737d1b6a35acc1fee;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:37:39 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: ewn6Zur0bM9apclbO-0bIZV6NbnBIGAxuUtPQZBq-2f-SERyxA_w3Q==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 001e7070d795018d01b93988b9723742.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:37:51 GMT
etag: "6f144e4e28ba6dfb56860b187a224cfbc23b50bb"
content-type: image/jpeg
age: 53332
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
200 OK 6.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5e05660322f0368dd2bf8067d7e4554d
ec65cb47d86488f734c945a210d5f636a40fea2c
98875230ec45766102191bdc4180742fa3b8f3ad5ad1a128d12437105f86247e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff6b23082-fe08-4f5d-b709-47175510cf45.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6196
x-amzn-requestid: a7d6ce70-06d7-498c-8024-80185a3fc3e4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: XzLyLFmVIAMFkcQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63112674-3fad622927177e9236d7c50a;Sampled=0
x-amzn-remapped-date: Thu, 01 Sep 2022 21:39:00 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: qAMCgNpYR80vXSDyHFOFcbT8VukBemR2AGoGNaCfYaszKshu-gv6zg==
via: 1.1 4dde8ec6d6c12741888c2d3a059d4a2e.cloudfront.net (CloudFront), 1.1 d01e7742f82df0bbc1fb681d709ed69c.cloudfront.net (CloudFront), 1.1 google
date: Thu, 01 Sep 2022 21:54:15 GMT
age: 52348
etag: "ec65cb47d86488f734c945a210d5f636a40fea2c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
speechfountaindigestion.com/21/33/10/2133103783e240e0c49a3aab167a223c.js
200 OK 29 kB URL HTTP/1.1 speechfountaindigestion.com/21/33/10/2133103783e240e0c49a3aab167a223c.js
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (65536), with no line terminators
Hash 3dbe97f5f9d42f5669338a475651a90e
f7eb6278ce9dc5f1cabb0b440ca67c14ae626a7a
7fa7474c6acd8619926b3824e17d80476e38c9e783ca59c5b2275f22fa1373a4
Analyzer Verdict Alert quad9 Sinkholed
GET /21/33/10/2133103783e240e0c49a3aab167a223c.js HTTP/1.1
Host: speechfountaindigestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 6c8ccc676b3c4baec84e6de19cc917b2
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
decencyjessiebloom.com/watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 decencyjessiebloom.com/watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1 HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://decencyjessiebloom.com/watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=f9e72025366e33e728864bdf9f66898a1646d77d6e3de3cdea9c13a417d9e822036c2b7b75f2a5cd58b3dfdc1c821340a9e6b39f4bfd1a0927be5951a7517924c38cf30a210b09faab909c8b695038404e55dd57&pst=1662121663&rmtc=t
Set-Cookie: u_pl=16989719; expires=Sat, 03 Sep 2022 12:26:43 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.cF3TjcQT-OSPkARcqEX_Xhui7as3hT-TZ5DAM4v01pQ; expires=Fri, 02 Sep 2022 12:27:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: d47dbcf121db589c04beaabf44be21a9
Strict-Transport-Security: max-age=0; includeSubdomains
speechfountaindigestion.com/watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 speechfountaindigestion.com/watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1 HTTP/1.1
Host: speechfountaindigestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://speechfountaindigestion.com/watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=feb6d012d0a95c8c0142f01599f44ecb2e7e54bc09791fa393935c08ff765101cd6435eb392da2d84a78ee5c83d496d6099fc79e4f6f191c8d56f13e51184a41dd61435f44f1f6e1ba5e3024c58bdf6e31b08993485c3791cf1f5af9ea&pst=1662121663&rmtc=t
Set-Cookie: u_pl=16989701; expires=Sat, 03 Sep 2022 12:26:43 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.GqrdJPKcLaLGQvidZvAolDK2UfN-YG2fbNp4MZiUAyQ; expires=Fri, 02 Sep 2022 12:27:43 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 017025f4ebf2b3ef8a9e7d0b956a11aa
Strict-Transport-Security: max-age=0; includeSubdomains
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 797848c645dcc323aa01a1cc28a1376c
df8dfbb74c047699a37ac0d12d307ede104bbf72
6943eb9fbf099441d20214c206365026c24380abb84c633eca2a78fd8a9f3d25
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6943EB9FBF099441D20214C206365026C24380ABB84C633ECA2A78FD8A9F3D25"
Last-Modified: Wed, 31 Aug 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2258
Expires: Fri, 02 Sep 2022 13:04:22 GMT
Date: Fri, 02 Sep 2022 12:26:44 GMT
Connection: keep-alive
falconisleclip.com/watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1
307 Temporary Redirect 0 B URL HTTP/1.1 falconisleclip.com/watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1 HTTP/1.1
Host: falconisleclip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 307 Temporary Redirect
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:44 GMT
Content-Type: text/html
Content-Length: 0
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Location: https://falconisleclip.com/watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1&shu=0001fba4ceb56629dda361fc11737c4b5c5287c02f664e129ef22aac8c85bdb2d346c1a0b164cb19f2a350a9e293e4bb4267cadd83ffa3ba86cde51dc96fbe563c327b5a469263926c53331c3c9708e3267b31&pst=1662121664&rmtc=t
Set-Cookie: u_pl=16989730; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
ain=eyJhbGciOiJIUzI1NiJ9.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.j2zDLFE-wWhx4vg_rAcRTe9K8hSAd2ypjgG8dWi0kuk; expires=Fri, 02 Sep 2022 12:27:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 858c8fc18a914639743cedf897fba939
Strict-Transport-Security: max-age=0; includeSubdomains
decencyjessiebloom.com/2f/86/60/2f8660517d6ceaf37e3a8970cec0ea59.js
200 OK 13 kB URL HTTP/1.1 decencyjessiebloom.com/2f/86/60/2f8660517d6ceaf37e3a8970cec0ea59.js
IP
ASN #39572 DataWeb Global Group B.V.
File type ASCII text, with very long lines (37122), with no line terminators
Hash 7c031290ec6b10c9c724190748382205
ebee4a493b421d38c58d4e9c7d4906392af07d32
7a8650fd174285ff8013f0a6aed4f70e9b5c37f7d30553bff6e92a1b79d1fce3
Analyzer Verdict Alert quad9 Sinkholed
GET /2f/86/60/2f8660517d6ceaf37e3a8970cec0ea59.js HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 12:26:43 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 65994adb4ffbea120e965318f78e0da5
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
decencyjessiebloom.com/watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=f9e72025366e33e728864bdf9f66898a1646d77d6e3de3cdea9c13a417d9e822036c2b7b75f2a5cd58b3dfdc1c821340a9e6b39f4bfd1a0927be5951a7517924c38cf30a210b09faab909c8b695038404e55dd57&pst=1662121663&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 decencyjessiebloom.com/watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=f9e72025366e33e728864bdf9f66898a1646d77d6e3de3cdea9c13a417d9e822036c2b7b75f2a5cd58b3dfdc1c821340a9e6b39f4bfd1a0927be5951a7517924c38cf30a210b09faab909c8b695038404e55dd57&pst=1662121663&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2597)
Hash 68fde8a0a472713e24f81d67cd0f0d7c
9115e799de07f97c42d26e7e898b109b905805cf
afde263ad6cb4c442cabe5bcd6975f07f4f60ab50f7b8807de204928f152f984
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.345255619862.js?key=97264edc4c73fd2d5b41ac5081114f10&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=f9e72025366e33e728864bdf9f66898a1646d77d6e3de3cdea9c13a417d9e822036c2b7b75f2a5cd58b3dfdc1c821340a9e6b39f4bfd1a0927be5951a7517924c38cf30a210b09faab909c8b695038404e55dd57&pst=1662121663&rmtc=t HTTP/1.1
Host: decencyjessiebloom.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Referer: https://yoostewartshort.blogspot.com/
Connection: keep-alive
Cookie: u_pl=16989719; ain=eyJhbGciOiJIUzI1NiJ9.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.cF3TjcQT-OSPkARcqEX_Xhui7as3hT-TZ5DAM4v01pQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 12:26:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=94a3899e-503a-42e3-b449-ba32ef58dcaf:2:1; expires=Fri, 09 Sep 2022 12:26:44 GMT; secure; SameSite=None
iprcae38d89d78bd6dc4c278893b18b95aba=3570421; expires=Fri, 02 Sep 2022 16:26:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
pdhtkv32=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs32=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 70e953b38fc42ba9af9e15d09f2a6952
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
speechfountaindigestion.com/watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=feb6d012d0a95c8c0142f01599f44ecb2e7e54bc09791fa393935c08ff765101cd6435eb392da2d84a78ee5c83d496d6099fc79e4f6f191c8d56f13e51184a41dd61435f44f1f6e1ba5e3024c58bdf6e31b08993485c3791cf1f5af9ea&pst=1662121663&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 speechfountaindigestion.com/watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=feb6d012d0a95c8c0142f01599f44ecb2e7e54bc09791fa393935c08ff765101cd6435eb392da2d84a78ee5c83d496d6099fc79e4f6f191c8d56f13e51184a41dd61435f44f1f6e1ba5e3024c58bdf6e31b08993485c3791cf1f5af9ea&pst=1662121663&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2623)
Hash 73b28bd6f0bfa4345a09bcb465e0f119
851af30d1accd7826200e482be175dbecad44c61
56e014c549aa5f8be73d713912e3d266e490575a2279d248793c2fc798266b5b
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.88195745446.js?key=768320f2a9b589040780a7f24f18f88e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf%3A2%3A1&shu=feb6d012d0a95c8c0142f01599f44ecb2e7e54bc09791fa393935c08ff765101cd6435eb392da2d84a78ee5c83d496d6099fc79e4f6f191c8d56f13e51184a41dd61435f44f1f6e1ba5e3024c58bdf6e31b08993485c3791cf1f5af9ea&pst=1662121663&rmtc=t HTTP/1.1
Host: speechfountaindigestion.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Referer: https://yoostewartshort.blogspot.com/
Connection: keep-alive
Cookie: u_pl=16989701; ain=eyJhbGciOiJIUzI1NiJ9.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.GqrdJPKcLaLGQvidZvAolDK2UfN-YG2fbNp4MZiUAyQ
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=94a3899e-503a-42e3-b449-ba32ef58dcaf:2:1; expires=Fri, 09 Sep 2022 12:26:44 GMT; secure; SameSite=None
iprcbf91be3f75c76b3502e35c9cd3865050=3569806; expires=Fri, 02 Sep 2022 16:26:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
pdhtkv5=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs5=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 1addcd1a9e684d9be4ac192fdc15489a
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
falconisleclip.com/pixel/purst?dl=0&th=0&sc=0&rs=2717&rd=2717&fd=778&bv=22.8.v.2&tmpl=136
200 OK 0 B URL HTTP/1.1 falconisleclip.com/pixel/purst?dl=0&th=0&sc=0&rs=2717&rd=2717&fd=778&bv=22.8.v.2&tmpl=136
IP
ASN #39572 DataWeb Global Group B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
Analyzer Verdict Alert quad9 Sinkholed
GET /pixel/purst?dl=0&th=0&sc=0&rs=2717&rd=2717&fd=778&bv=22.8.v.2&tmpl=136 HTTP/1.1
Host: falconisleclip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:44 GMT
Content-Length: 0
Connection: keep-alive
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests
Access-Control-Expose-Headers: Content-Length,Content-Range
addresseepaper.com/sfp.js
200 OK 24 kB URL HTTP/2 addresseepaper.com/sfp.js
IP
File type Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Hash f8f15c6d55912af0395075bd00dff4b2
3d7260186dbf4ee57e0c4e978d30813a209a7c15
6289bb0e686c1fa23973d4ee97661dd0d75438cfe7da4f9d8e7a3232b3e00c52
GET /sfp.js HTTP/1.1
Host: addresseepaper.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 6df51b5c944ad5398e9b42f38a5a97c6
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 02 Sep 2022 12:26:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sf06CV6ZYKoc9JalKKS5XVEDpa%2BBgOnRZayfSYsap1ZRAquxpQfYWH8%2Fzz4DlZl3bXQVhy%2Bf2yfmWSsRrbi2ieuvhc6p8LqSqB7Rfno95ZcYBCKUKE20l0gPzr7d8XfgCMhDuTc%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c59bee6769d-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
e1.o.lencr.org/
200 OK 344 B IP
ASN #20940 Akamai International B.V.
Hash 797848c645dcc323aa01a1cc28a1376c
df8dfbb74c047699a37ac0d12d307ede104bbf72
6943eb9fbf099441d20214c206365026c24380abb84c633eca2a78fd8a9f3d25
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "6943EB9FBF099441D20214C206365026C24380ABB84C633ECA2A78FD8A9F3D25"
Last-Modified: Wed, 31 Aug 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2258
Expires: Fri, 02 Sep 2022 13:04:22 GMT
Date: Fri, 02 Sep 2022 12:26:44 GMT
Connection: keep-alive
falconisleclip.com/watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1&shu=0001fba4ceb56629dda361fc11737c4b5c5287c02f664e129ef22aac8c85bdb2d346c1a0b164cb19f2a350a9e293e4bb4267cadd83ffa3ba86cde51dc96fbe563c327b5a469263926c53331c3c9708e3267b31&pst=1662121664&rmtc=t
200 OK 2.1 kB URL HTTP/1.1 falconisleclip.com/watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1&shu=0001fba4ceb56629dda361fc11737c4b5c5287c02f664e129ef22aac8c85bdb2d346c1a0b164cb19f2a350a9e293e4bb4267cadd83ffa3ba86cde51dc96fbe563c327b5a469263926c53331c3c9708e3267b31&pst=1662121664&rmtc=t
IP
ASN #39572 DataWeb Global Group B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (2594)
Hash be99f43f6ef8e4e6ee4b1a1fcd77c0ab
77bbc79ca017e11ab3f927e1c041e53c2c8a2cea
e53b6d603a7b92fdf933558b1bf984ec3b47b9bb6c8b235cf615e43c7dad0046
Analyzer Verdict Alert quad9 Sinkholed
GET /watch.1453878880575.js?key=431475e49e1926d143ad1caad2092d6e&kw=%5B%22seksyen%22%2C%2210%22%2C%22wangsa%22%2C%22maju%22%2C%22-%22%2C%22stewart%22%2C%22short%22%5D&refer=https%3A%2F%2Fyoostewartshort.blogspot.com%2F2022%2F08%2Fseksyen-10-wangsa-maju.html&tz=0&dev=r&res=12.31&uuid=fff4c15d-a5f9-461e-9e73-0dbc02d094a3%3A3%3A1&shu=0001fba4ceb56629dda361fc11737c4b5c5287c02f664e129ef22aac8c85bdb2d346c1a0b164cb19f2a350a9e293e4bb4267cadd83ffa3ba86cde51dc96fbe563c327b5a469263926c53331c3c9708e3267b31&pst=1662121664&rmtc=t HTTP/1.1
Host: falconisleclip.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Referer: https://yoostewartshort.blogspot.com/
Connection: keep-alive
Cookie: u_pl=16989730; ain=eyJhbGciOiJIUzI1NiJ9.eyJwIjp7ImlkIjoxNjk4OTczMCwiayI6IjQzMTQ3NWU0OWUxOTI2ZDE0M2FkMWNhYWQyMDkyZDZlIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjoxNzgyOTI5LCJwaWQiOjIzODgxNSwiYW4iOnRydWUsImxhbiI6dHJ1ZSwiY2lkIjoyOCwiYWlkIjoyMywicHQiOjQsInBrIjoicW0xcGh2eXYiLCJ0IjoxfSwidSI6eyJ1IjoxLCJhdSI6MSwiZCI6eyJpZCI6Nzk5NTQxOTYsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjoxODExMCwib24iOiJMaW51eCIsIm92IjoiVW5rbm93biIsImJpZCI6MTE2NjcwLCJibiI6IkZpcmVmb3giLCJidiI6Ijk2LjAiLCJ3diI6ZmFsc2UsImUiOmZhbHNlLCJhYiI6ZmFsc2V9LCJjIjp7ImlkIjoxNjIsImMiOiJOTyIsIm4iOiJOb3J3YXkifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJ1cCI6dHJ1ZSwiciI6Imh0dHBzOi8veW9vc3Rld2FydHNob3J0LmJsb2dzcG90LmNvbS8yMDIyLzA4L3Nla3N5ZW4tMTAtd2FuZ3NhLW1hanUuaHRtbCJ9fQ.j2zDLFE-wWhx4vg_rAcRTe9K8hSAd2ypjgG8dWi0kuk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.17.6
Date: Fri, 02 Sep 2022 12:26:44 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Accept-CH: Device-Stock-UA,Sec-CH-UA-Full-Version-ListSec-CH-UA-MobileSec-CH-UA-Platform,Sec-CH-UA-Mobile,Sec-CH-UA-Platform,Sec-CH-UA-PlatformSec-CH-UA-ModelSec-CH-UA-Mobile,Sec-CH-UA-PlatformSec-CH-UA-Platform-Version,Sec-CH-UASec-CH-UA-MobileSec-CH-UA-Platform,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Custom-Referer: https://yoostewartshort.blogspot.com
Access-Control-Allow-Origin: https://yoostewartshort.blogspot.com
Access-Control-Allow-Credentials: true
Set-Cookie: uid_id2=fff4c15d-a5f9-461e-9e73-0dbc02d094a3:3:1; expires=Fri, 09 Sep 2022 12:26:44 GMT; secure; SameSite=None
iprc6e0d5a9b5e6fce01b738908177af1a12=3569808; expires=Fri, 02 Sep 2022 16:26:44 GMT; secure; SameSite=None
pdhtkv=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
pdhtkv23=true; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
uncs23=1; expires=Sat, 03 Sep 2022 12:26:44 GMT; secure; SameSite=None
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: cee3eff883faac3b5e6b6018bb38ec68
Strict-Transport-Security: max-age=0; includeSubdomains
Content-Encoding: gzip
cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
200 OK 144 kB URL HTTP/2 cdn.cloudimagesb.com/cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 300 x 250, 8-bit/color RGBA, non-interlaced\012- data
Size 144 kB (144379 bytes)
Hash 33c304429dc1a4408a96e6a74ffa2feb
c45fa8e65528d1bb2b46bf8a28af9eeaa1903d04
dbed482e5948ead5587d30a22306a5b611305f704de940bd22c76daf90e0a314
GET /cti/7d/00/a0/7d00a008556ebc4e68d1de531274e928/1658920033.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: image/png
content-length: 144379
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:07:21 GMT
etag: "62e11c69-233fb"
expires: Sun, 04 Sep 2022 12:26:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg
200 OK 25 kB URL HTTP/2 cdn.cloudimagesb.com/cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg
IP
ASN #39572 DataWeb Global Group B.V.
File type JPEG image data, baseline, precision 8, 320x50, components 3\012- data
Hash d465d02b90e928dfd9d9846e102a9dac
22f7333777bec813bd9a7b870913a2b79b6d2fe4
e393d4f1c6b5d4973e157f0f10764b92037dc18239500f42b72bed8ecef462fd
GET /cti/43/ff/51/43ff51c07da75eaedd548042d5154cfe/1658930770.jpg HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: image/jpeg
content-length: 24714
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 14:06:18 GMT
etag: "62e1465a-608a"
expires: Sun, 04 Sep 2022 12:26:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f4f9dc502e2ff07dd351da7bbc20e323
739b6c8334472846232b84b99989be93dc1582d4
0852238945d340493f33e498b75a893d24681f2687fdc05349476faccf426efd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6574
Cache-Control: max-age=117704
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:44 GMT
Etag: "6311059e-1d7"
Expires: Sat, 03 Sep 2022 21:08:28 GMT
Last-Modified: Thu, 01 Sep 2022 19:18:54 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/sdk.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js
IP
File type ASCII text, with very long lines (1961)
Hash 1a0f22fb8b1f7af03cb6737422229f8f
04e6278c5d80a5b69e9e087d25290197e5eb37e3
0f07700749dfa4162a84f105f431aa0eb21efcf51d00e494556dc9eb7bafed13
GET /en_US/sdk.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 0f54d3b0a6d2842e3d3ac3bf832e4f85
etag: "8dbf48de56a79c032aa53f4707a24acb"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 02 Sep 2022 12:35:57 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Gg8i+4sfevA8tnN0IiKfjw==
x-fb-debug: XAxiK5pEd0zk6zyeirg/S7ph/X8ncY9E4dr9fYSXG3B3y9v2ykZAK7qnNv/tSvVNfZX04zVGuHwhqH/5TwixcQ==
content-length: 1688
x-fb-trip-id: 1904183273
date: Fri, 02 Sep 2022 12:26:44 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash f4f9dc502e2ff07dd351da7bbc20e323
739b6c8334472846232b84b99989be93dc1582d4
0852238945d340493f33e498b75a893d24681f2687fdc05349476faccf426efd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6574
Cache-Control: max-age=117704
Content-Type: application/ocsp-response
Date: Fri, 02 Sep 2022 12:26:44 GMT
Etag: "6311059e-1d7"
Expires: Sat, 03 Sep 2022 21:08:28 GMT
Last-Modified: Thu, 01 Sep 2022 19:18:54 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
200 OK 106 kB URL HTTP/2 cdn.cloudimagesb.com/cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png
IP
ASN #39572 DataWeb Global Group B.V.
File type PNG image data, 728 x 90, 8-bit/color RGBA, non-interlaced\012- data
Size 106 kB (105910 bytes)
Hash a36b92bb68d9b579458560ba9b94862a
782d2932ccd3a56e5aad1cca7e6e7fb4a3cf23d6
9de12cf85ad80cae34d8bdaeb59169d75e3bd4f8b931ec90ea2c3be166647c0e
GET /cti/5c/10/b0/5c10b0b28e7a0e9d7e61bd8d09bee3db/1658920078.png HTTP/1.1
Host: cdn.cloudimagesb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: image/png
content-length: 105910
server: nginx/1.17.6
last-modified: Wed, 27 Jul 2022 11:08:06 GMT
etag: "62e11c96-19db6"
expires: Sun, 04 Sep 2022 12:26:44 GMT
cache-control: max-age=172800
x-proxy-cache: HIT
accept-ranges: bytes
X-Firefox-Spdy: h2
i.pinimg.com/originals/80/47/1a/80471a5a496fb9e007464eb986ae442b.jpg
200 OK 14 kB URL HTTP/2 i.pinimg.com/originals/80/47/1a/80471a5a496fb9e007464eb986ae442b.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 320x275, components 3\012- data
Hash ca3b8f2297e11eecde7be2a9b2374463
68fd5af19cfa3a285fb34be610c7a76f9c6dd17c
3f4bef9c61b3ca7ae4f4f8d68e2ea536ef487d014a81812a4a88aeabcdeb95c9
GET /originals/80/47/1a/80471a5a496fb9e007464eb986ae442b.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "ca3b8f2297e11eecde7be2a9b2374463"
accept-ranges: bytes
content-type: image/jpeg
content-length: 13534
akamai-grn: 0.940f1fb8.1662121604.920829
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/474x/c6/63/0d/c6630d0b384a253e9950de2702b7641e.jpg
200 OK 40 kB URL HTTP/2 i.pinimg.com/474x/c6/63/0d/c6630d0b384a253e9950de2702b7641e.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 450x600, components 3\012- data
Hash 87669f08ff83e87dacc8a5296c3e1fea
9562c26f46b6189a3712d72ac4a7816779b42a5a
91623234e24e8cbf5e4a3b7670a2a5dcfd185e948336e8be453363f98521aece
GET /474x/c6/63/0d/c6630d0b384a253e9950de2702b7641e.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "87669f08ff83e87dacc8a5296c3e1fea"
accept-ranges: bytes
content-type: image/jpeg
content-length: 40457
akamai-grn: 0.940f1fb8.1662121604.92082a
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/736x/a1/14/99/a1149949d709ec184d8099989bfe491b.jpg
200 OK 28 kB URL HTTP/2 i.pinimg.com/736x/a1/14/99/a1149949d709ec184d8099989bfe491b.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 400x266, components 3\012- data
Hash d2e13f239fb3e177dedc37496e507b48
ec4e1557d1a034ee8cc5d8e162a6522b7b68a1c5
225f293ccf21abd4b23a5949ef6fa0eb58bc7ba6749796a716d7a12373a2e992
GET /736x/a1/14/99/a1149949d709ec184d8099989bfe491b.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "d2e13f239fb3e177dedc37496e507b48"
accept-ranges: bytes
content-type: image/jpeg
content-length: 27736
akamai-grn: 0.940f1fb8.1662121604.92084a
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/53/e9/df/53e9dfad2770c524a8140b502608821d.jpg
200 OK 85 kB URL HTTP/2 i.pinimg.com/originals/53/e9/df/53e9dfad2770c524a8140b502608821d.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 720x960, components 3\012- data
Hash a8f63a435bef32576b0f5942b3c556a1
2304837ef957d11e2f4fd81f6b74255f514113a5
a6baac720d721263b99834116a3912a34a1079c66fa716543ffd0153e0322df4
GET /originals/53/e9/df/53e9dfad2770c524a8140b502608821d.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "a8f63a435bef32576b0f5942b3c556a1"
accept-ranges: bytes
content-type: image/jpeg
content-length: 84725
akamai-grn: 0.940f1fb8.1662121604.92082d
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/736x/4c/1c/02/4c1c023b8cd3f5b7b5a24de8e8f4a71e.jpg
200 OK 24 kB URL HTTP/2 i.pinimg.com/736x/4c/1c/02/4c1c023b8cd3f5b7b5a24de8e8f4a71e.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 563x318, components 3\012- data
Hash 5cc4c827923a612a4177919431064019
aab5a15115b623bb3f606b051e2652199c19ba82
486ecab48202a8baa81e0cc690b97829b5a7e54947bf3e4c16f8d1f408f6bc39
GET /736x/4c/1c/02/4c1c023b8cd3f5b7b5a24de8e8f4a71e.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5cc4c827923a612a4177919431064019"
accept-ranges: bytes
content-type: image/jpeg
content-length: 23513
akamai-grn: 0.940f1fb8.1662121604.920834
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/736x/cc/aa/2b/ccaa2b35bf689b17519f1407e27f2d2f.jpg
200 OK 53 kB URL HTTP/2 i.pinimg.com/736x/cc/aa/2b/ccaa2b35bf689b17519f1407e27f2d2f.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 736x457, components 3\012- data
Hash 702f8cc2b43d4fd0b30a62b680bd5f25
72d997c9fd60bee4e51ffe27a9b9d65f69e427bd
66596b2326ee19764eb6045c80ed170be96d3ced279bb9e82062e1b47c54dc8d
GET /736x/cc/aa/2b/ccaa2b35bf689b17519f1407e27f2d2f.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "702f8cc2b43d4fd0b30a62b680bd5f25"
accept-ranges: bytes
content-type: image/jpeg
content-length: 53179
akamai-grn: 0.940f1fb8.1662121604.92086c
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/736x/d9/b8/a7/d9b8a7300280537b3922a054163ffe4e.jpg
200 OK 51 kB URL HTTP/2 i.pinimg.com/736x/d9/b8/a7/d9b8a7300280537b3922a054163ffe4e.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 555x555, components 3\012- data
Hash da8b73b73882e860f3190985b514dd2d
82f70f3becf0eef23ea5bdcb6fb9615595e1a754
da6a964e75987e0da32cc8d76d08aa43fb6e63f5c43319d8b061e4231a09aa81
GET /736x/d9/b8/a7/d9b8a7300280537b3922a054163ffe4e.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "da8b73b73882e860f3190985b514dd2d"
accept-ranges: bytes
content-type: image/jpeg
content-length: 51376
akamai-grn: 0.940f1fb8.1662121604.920877
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/474x/b7/16/d8/b716d830d70976f34df07375a9ee53bc--homes.jpg
200 OK 42 kB URL HTTP/2 i.pinimg.com/474x/b7/16/d8/b716d830d70976f34df07375a9ee53bc--homes.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 360x640, components 3\012- data
Hash 8f0492bd0c0d6eec4e6cd3e29fc94c5f
4ac6c11ef26200eced36e8966fdf9cde5391c3f2
b0ea9280953b9887f850f1e2d1f34170b22e65be3e7de0e328a172d56584e842
GET /474x/b7/16/d8/b716d830d70976f34df07375a9ee53bc--homes.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "8f0492bd0c0d6eec4e6cd3e29fc94c5f"
accept-ranges: bytes
content-type: image/jpeg
content-length: 42108
akamai-grn: 0.940f1fb8.1662121604.92087f
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/f0/79/b4/f079b40ac636e3dbca7e3fa258c908a9.jpg
200 OK 1.5 MB URL HTTP/2 i.pinimg.com/originals/f0/79/b4/f079b40ac636e3dbca7e3fa258c908a9.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 300x300, segment length 16, progressive, precision 8, 4000x3000, components 3\012- data
Size 1.5 MB (1491866 bytes)
Hash 5aab58216237702a959cb7b2dd36989e
1bf41fc195f144da5eafe5013f44dd4d231b1c57
8218081a6615a875c0d2f5968b0461bd43ecd774854de1e7f7eb4809d0b971db
GET /originals/f0/79/b4/f079b40ac636e3dbca7e3fa258c908a9.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "5aab58216237702a959cb7b2dd36989e"
accept-ranges: bytes
content-type: image/jpeg
content-length: 1491866
akamai-grn: 0.940f1fb8.1662121604.920844
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/f9/70/5a/f9705a751f3d9103424d61e39da7a277.jpg
200 OK 58 kB URL HTTP/2 i.pinimg.com/originals/f9/70/5a/f9705a751f3d9103424d61e39da7a277.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1080x606, components 3\012- data
Hash f02820a93dc5126041eee32912a24c07
686fbc37cc78635ceebafb5f45819b46be09b34e
90b2244949ec17216ec8df5d23c8c862c397e0f93e33c546f486befbcde77e15
GET /originals/f9/70/5a/f9705a751f3d9103424d61e39da7a277.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "f02820a93dc5126041eee32912a24c07"
accept-ranges: bytes
content-type: image/jpeg
content-length: 58281
akamai-grn: 0.940f1fb8.1662121604.920874
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/00/13/8c/00138ccf215cef9e58d06133cf155c59.png
200 OK 1.2 MB URL HTTP/2 i.pinimg.com/originals/00/13/8c/00138ccf215cef9e58d06133cf155c59.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 1620 x 1620, 8-bit/color RGBA, non-interlaced\012- data
Size 1.2 MB (1228314 bytes)
Hash 0098ef8fb4c7bf3461641fb682e63f7d
b05f9e58b47f4521717b26fec7113c338dc82f11
edc8cc4722292429ec491fd2ae2bec5dad9eefd0610d66ff0df29bb082867c31
GET /originals/00/13/8c/00138ccf215cef9e58d06133cf155c59.png HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "0098ef8fb4c7bf3461641fb682e63f7d"
accept-ranges: bytes
content-type: image/png
content-length: 1228314
x-edgeconnect-midmile-rtt: 1
x-edgeconnect-origin-mex-latency: 64
akamai-grn: 0.940f1fb8.1662121604.920851
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/9c/c8/89/9cc889f361a64da3834766e3b7395b4c.png
200 OK 604 kB URL HTTP/2 i.pinimg.com/originals/9c/c8/89/9cc889f361a64da3834766e3b7395b4c.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 562 x 600, 8-bit/color RGBA, non-interlaced\012- data
Size 604 kB (603819 bytes)
Hash a0cfd19a0360572aac9448a3458fc003
62f5b514104743461a639aeefce0907eab5cd2bf
97b0ca8e8a98e60bce69298c99d97f381fdf3d692df5f82dd73ba80d0d79e84e
GET /originals/9c/c8/89/9cc889f361a64da3834766e3b7395b4c.png HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
etag: "a0cfd19a0360572aac9448a3458fc003"
accept-ranges: bytes
content-type: image/png
content-length: 603819
akamai-grn: 0.940f1fb8.1662121604.920888
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
s2.studylib.net/store/data/025617761_1-b5c51c7d1dfcf598859ca4743b4b6482.png
200 OK 266 kB URL HTTP/2 s2.studylib.net/store/data/025617761_1-b5c51c7d1dfcf598859ca4743b4b6482.png
IP
File type PNG image data, 1275 x 1651, 8-bit/color RGB, non-interlaced\012- data
Size 266 kB (265979 bytes)
Hash 741f35a7d42adb197aef70ea2002d58f
8ee033ebdaff96b41dc75464cd2013589ad9be2e
c7b551db2a78ce58dcd8e500b5fb8502d0c7ab82f1514a3221a16f52a1a89863
GET /store/data/025617761_1-b5c51c7d1dfcf598859ca4743b4b6482.png HTTP/1.1
Host: s2.studylib.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: image/png
content-length: 265979
access-control-allow-origin: *
access-control-expose-headers: Accept-Ranges,Access-Control-Allow-Origin,Content-Range,Access-Control-Allow-Credentials,Content-Encoding,Content-Length
cache-control: max-age=5184000
expires: Tue, 01 Nov 2022 12:26:44 GMT
cf-cache-status: MISS
last-modified: Fri, 02 Sep 2022 12:26:44 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0lp0S5%2FhbTaK146k%2FAbhr8OarqAOVVnptJlwC8nYPNgBeg6GZ6Plb4RbCi8bxMeHKtLghJAVYfIepG4sd4vQOwvLcvO3Bp2FKGfiBRDuy61A3PtMeTcNpdRjVz8oTBAVqxo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d0edf1c0e-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.pinimg.com/originals/b6/32/56/b632566b32a7b97fd296af3356dc11cd.png
200 OK 2.9 MB URL HTTP/2 i.pinimg.com/originals/b6/32/56/b632566b32a7b97fd296af3356dc11cd.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 2560 x 1440, 8-bit/color RGBA, non-interlaced\012- data
Size 2.9 MB (2876614 bytes)
Hash 81060b03da9075293560cfe27bc8d31b
5efe2354103e63a9c661c4c30e1a2b3532b951cd
38b9f12e06f1633fd8fa1c03bfee9a1c42c47e963d8170ac49c9b8bb3e0b3baa
GET /originals/b6/32/56/b632566b32a7b97fd296af3356dc11cd.png HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "81060b03da9075293560cfe27bc8d31b"
accept-ranges: bytes
content-type: image/png
content-length: 2876614
akamai-grn: 0.940f1fb8.1662121604.92085d
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3a8e42df58d207fb5fa5169407cdae8b
fe55612073c4f180fef7c5a27a408a83bb55ef10
c7c2cafc8b3b71c06d326aebd4a07bf6775a8a47ddd9f22b7f9f3f7eda397c49
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C7C2CAFC8B3B71C06D326AEBD4A07BF6775A8A47DDD9F22B7F9F3F7EDA397C49"
Last-Modified: Wed, 31 Aug 2022 14:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3942
Expires: Fri, 02 Sep 2022 13:32:27 GMT
Date: Fri, 02 Sep 2022 12:26:45 GMT
Connection: keep-alive
encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT
200 OK 2.3 kB URL HTTP/2 encrypted-tbn0.gstatic.com/images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 276x183, components 3\012- data
Hash 9bef96c7479adb40f793c7b0f4f2c33d
aff2b02e9af3e14faa9d22677eda1e2e6bd481cc
fcf9fdd5ab81da78cbca3ca589d8ff4c608a00f3d90665f2dc1aa8b9636998d9
GET /images?q=tbn:ANd9GcQh_l3eQ5xwiPy07kGEXjmjgmBKBRB7H2mRxCGhv1tFWg5c_mWT HTTP/1.1
Host: encrypted-tbn0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 2347
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 01 Sep 2022 18:24:52 GMT
expires: Fri, 01 Sep 2023 18:24:52 GMT
cache-control: public, max-age=31536000
age: 64913
last-modified: Tue, 22 Dec 2015 19:19:47 GMT
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 51cce2d3da9d1a8c62a2b4c2e9d273ac
707e8fc2e68754c2cf04a94f0f4c02d8a187e73f
162865456971f500e605483e8875db61072ca37be02312a15008b8a4d2889679
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "162865456971F500E605483E8875DB61072CA37BE02312A15008B8A4D2889679"
Last-Modified: Thu, 01 Sep 2022 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21564
Expires: Fri, 02 Sep 2022 18:26:09 GMT
Date: Fri, 02 Sep 2022 12:26:45 GMT
Connection: keep-alive
i0.wp.com/namaanak.net/wp-content/uploads/2020/09/arti-nama-beryl.jpg
200 OK 7.0 kB URL HTTP/2 i0.wp.com/namaanak.net/wp-content/uploads/2020/09/arti-nama-beryl.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 448x252, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 1acde6d2e4430d056874ef34b125535c
cccca45697810f6a7e046f06e232e10f14e709d7
e2f9edfd5180c905661442e2f3140d1521bf8aadd94c7d1b57a03e8b255ea4d7
GET /namaanak.net/wp-content/uploads/2020/09/arti-nama-beryl.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 12:26:45 GMT
content-type: image/webp
content-length: 6992
last-modified: Fri, 02 Sep 2022 12:26:45 GMT
expires: Mon, 02 Sep 2024 00:26:45 GMT
cache-control: public, max-age=63115200
link: <http://namaanak.net/wp-content/uploads/2020/09/arti-nama-beryl.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "9ba7e22b4e1e66d6"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
superapp.id/blog/wp-content/uploads/2021/03/1-7.jpg
200 OK 40 kB URL HTTP/2 superapp.id/blog/wp-content/uploads/2021/03/1-7.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 2f6eb2aedb242c69cb452ea879f628cb
fab24f7f0650b7d8ff85c6db064c22856b307e78
06de368e68839f0c602abdff22ce55179f4138b907e6e409b7bd2c7f3688ff2c
GET /blog/wp-content/uploads/2021/03/1-7.jpg HTTP/1.1
Host: superapp.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:45 GMT
server: Apache/2.4.41 (Ubuntu)
vary: Accept,Accept-Encoding
last-modified: Fri, 05 Aug 2022 13:33:51 GMT
etag: "9d8c-5e57e844edc2e"
accept-ranges: bytes
content-length: 40332
cache-control: max-age=31536000, public
expires: Sat, 02 Sep 2023 12:26:45 GMT
access-control-allow-origin: *
access-control-allow-headers: origin, x-requested-with, content-type
access-control-allow-methods: PUT, GET, POST, DELETE, OPTIONS
referrer-policy: no-referrer-when-downgrade
pragma: public
content-type: image/webp
X-Firefox-Spdy: h2
detiklife.com/wp-content/uploads/2019/08/Kumpulan-Nama-Bayi-Perempuan-Kristen.jpg
200 OK 32 kB URL HTTP/1.1 detiklife.com/wp-content/uploads/2019/08/Kumpulan-Nama-Bayi-Perempuan-Kristen.jpg
IP
ASN #14061 DIGITALOCEAN-ASN
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=4, software=GIMP 2.10.12, datetime=2019:07:27 15:11:05], baseline, precision 8, 448x298, components 3\012- data
Hash 82a584e40169766f11724d8d3df22da1
3051b28072a5d95a72b94f6dc7e755c46b460eed
4bcca38ce5ef4d18933566e0ff2d31f6642c966affb4c458dee30069a5a492d9
GET /wp-content/uploads/2019/08/Kumpulan-Nama-Bayi-Perempuan-Kristen.jpg HTTP/1.1
Host: detiklife.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Fri, 02 Sep 2022 12:26:45 GMT
Server: Apache/2.4.18 (Ubuntu)
X-Frame-Options: SAMEORIGIN
Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
Last-Modified: Thu, 28 Nov 2019 01:41:22 GMT
ETag: "7d01-5985e35ea506d"
Accept-Ranges: bytes
Content-Length: 32001
Cache-Control: max-age=604800, must-revalidate, s-maxage=10
Expires: Sat, 02 Sep 2023 12:26:45 GMT
X-XSS-Protection: 1; mode=block
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
www.ruangbunda.com/wp-content/uploads/2022/02/arti-nama-briella-800x450.png
200 OK 46 kB URL HTTP/2 www.ruangbunda.com/wp-content/uploads/2022/02/arti-nama-briella-800x450.png
IP
File type PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced\012- data
Hash ab5a3ff15be340fe67e46ed15395ab8d
f5b092b1ee48b884dd4dffb18fd3729c4f4aecac
7cc8bf284defb4937d00e4cac1c61deca4e624840223c9d65035e29e5ca3b868
GET /wp-content/uploads/2022/02/arti-nama-briella-800x450.png HTTP/1.1
Host: www.ruangbunda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:45 GMT
content-type: image/png
content-length: 45969
last-modified: Wed, 02 Feb 2022 07:11:17 GMT
etag: "61fa2e95-b391"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zipWcO5m1zoRAMTsKi6vMoAaTs7h419mCwHVMP5gSmX4roELJD19o%2Fc0gwQt9mCrlaIrm2PP0QlVclEL1uZ8V5yM1M6hjxYDkL%2B%2FN0%2B2qvLJhH%2FIclYDb4UAbJh5H3Mt1xcwOU4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d9c30b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdn0-production-images-kly.akamaized.net/vfpjlwTnpY2ARhXT-pckDhrtcT0=/1200x675/smart/filters:quality(75):strip_icc():format(jpeg)/kly-media-production/medias/3207794/original/013670700_1597303008-people-3120717_1920.jpg
200 OK 64 kB URL HTTP/2 cdn0-production-images-kly.akamaized.net/vfpjlwTnpY2ARhXT-pckDhrtcT0=/1200x675/smart/filters:quality(75):strip_icc():format(jpeg)/kly-media-production/medias/3207794/original/013670700_1597303008-people-3120717_1920.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1200x675, components 3\012- data
Hash 3a8403765b1ceef3ca104ab41fd9d212
229c96b8318b9ef5dd93b89a4262d79af4553b14
b3c4deb5a21039f32a1d333d30cd41a22e5e723e8564b62fa97e28d751f50516
GET /vfpjlwTnpY2ARhXT-pckDhrtcT0=/1200x675/smart/filters:quality(75):strip_icc():format(jpeg)/kly-media-production/medias/3207794/original/013670700_1597303008-people-3120717_1920.jpg HTTP/1.1
Host: cdn0-production-images-kly.akamaized.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-type: image/jpeg
content-length: 64298
etag: "229c96b8318b9ef5dd93b89a4262d79af4553b14"
server-node: production-thumbor-web-ig-5sv3
x-ttl: 300.000
x-varnish: 656167
x-varnish-cache: MISS
accept-ranges: bytes
cache-control: public, max-age=31536000
expires: Sat, 02 Sep 2023 12:26:45 GMT
date: Fri, 02 Sep 2022 12:26:45 GMT
alt-svc: h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
X-Firefox-Spdy: h2
www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-fahmi-800x450.png
200 OK 46 kB URL HTTP/2 www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-fahmi-800x450.png
IP
File type PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced\012- data
Hash 758113542879d727acf60808067fc852
b42d113c70cb73c6471fdbe26a40d6d8860e1984
7e3c17fa04959cbc030ec7d1a68038f2825d6f8f889e08c34fb7d8c1fde127e7
GET /wp-content/uploads/2022/01/arti-nama-fahmi-800x450.png HTTP/1.1
Host: www.ruangbunda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:45 GMT
content-type: image/png
content-length: 45658
last-modified: Fri, 28 Jan 2022 06:51:10 GMT
etag: "61f3925e-b25a"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Fm2TZZXXfsBe00NbN%2FYHigJbNVRunw3OR6HFI9D6XFmJ4FiJkqgcpkGRgIxkZfeIGoxqdB3nLdHITWPBOr7WeeP%2B%2Ff6KG6pVgtSFJKfXurHLAi62xMQhjaSkjH7hpb%2FhvmxfuF0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d9c37b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ruangbunda.com/wp-content/uploads/2020/04/nama-bayi-perempuan-modern-huruf-b-min.jpg
200 OK 53 kB URL HTTP/2 www.ruangbunda.com/wp-content/uploads/2020/04/nama-bayi-perempuan-modern-huruf-b-min.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 800x450, components 3\012- data
Hash fb482fc212485d0fbed6ade5537ad04a
e40255a4b968e486142516a524fb6d189eeb9882
a7353118555fc0594d6ca755a3d2149903c370a666e46e091a70866c4061b2e0
GET /wp-content/uploads/2020/04/nama-bayi-perempuan-modern-huruf-b-min.jpg HTTP/1.1
Host: www.ruangbunda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/jpeg
content-length: 53423
last-modified: Mon, 01 Mar 2021 17:56:43 GMT
etag: "603d2adb-d0af"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tQ4XhYwOCKIBagu5qUH4Nvdmz7X0oVxwPS2Ixwki%2FKBGnfDXKG5uohxf3S61A%2B51uA084SDtCeGrbIh%2Bp6Wpjw6PikwxdSdKwL%2FjsQz0yU9cP8ZMzLFAacpxO%2BXQYpDsxI32si8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d9c34b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-axel.png
200 OK 61 kB URL HTTP/2 www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-axel.png
IP
File type PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced\012- data
Hash 98a15d6c242bf0d5a8d5113d89eed5fd
8de551d2fe303ab1529a484d7ae5f311555d856c
81fc1e2809327a6d0adc6d3e9d894f60d0ca326869f553b7c5ee649e2a78a239
GET /wp-content/uploads/2022/01/arti-nama-axel.png HTTP/1.1
Host: www.ruangbunda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/png
content-length: 60707
last-modified: Mon, 24 Jan 2022 02:07:33 GMT
etag: "61ee09e5-ed23"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Bv8ul6BhzolB4QXrSchNu19jGk7oGSP9fsDs%2BCOvvcHYcPoM%2BVfFTgVAJuuDUxkYQ8MkGyahoRp%2F01E6%2B2uINn7b5k8eEHbpyrOKcsD2TR6tTShEazv7KLoPX25%2BvIffqVvf%2Fj4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d9c32b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-belvania.png
200 OK 67 kB URL HTTP/2 www.ruangbunda.com/wp-content/uploads/2022/01/arti-nama-belvania.png
IP
File type PNG image data, 800 x 450, 8-bit/color RGB, non-interlaced\012- data
Hash ab9da16049eaaa8e2efbad43bf839d2c
84ad4cf066762daa8b7d786bcb28f986cc3b861c
5e9ad7637a5113f5b612a59a60056047ae9ee7e46588b61887769fc7d339202f
GET /wp-content/uploads/2022/01/arti-nama-belvania.png HTTP/1.1
Host: www.ruangbunda.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/png
content-length: 67263
last-modified: Fri, 28 Jan 2022 02:02:03 GMT
etag: "61f34e9b-106bf"
cache-control: public, max-age=2592000
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hH3nXQ35vJobpfexQBoTu7bQ4RdvbolqqcUNe65ZauofbUqRHhhVpignMJQrbIFzaOWceoJzbBTyNkzJ53Gr4%2BjdU6hd%2BNOuFB1w47XCzAHCXBZk0z6s23S1B03IaRIUKq5LPhY%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d9c33b512-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i0.wp.com/namaanak.net/wp-content/uploads/2020/09/arti-nama-niyati.jpg
200 OK 8.4 kB URL HTTP/2 i0.wp.com/namaanak.net/wp-content/uploads/2020/09/arti-nama-niyati.jpg
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 448x252, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash f56188a01d842c19ea8b316ad18928bc
98874c9071bae13b068aa678125de93164543915
75a31a5a363f4dafdba8043a6586b61ab2797f83d6cad34a75350115eaf42695
GET /namaanak.net/wp-content/uploads/2020/09/arti-nama-niyati.jpg HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/webp
content-length: 8410
last-modified: Fri, 02 Sep 2022 12:26:46 GMT
expires: Mon, 02 Sep 2024 00:26:46 GMT
cache-control: public, max-age=63115200
link: <http://namaanak.net/wp-content/uploads/2020/09/arti-nama-niyati.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "390689d195789f40"
vary: Accept
x-nc: MISS arn 7
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/bayilelakiku.com/wp-content/uploads/2020/02/Nama-Bayi-Laki-Laki-Modern-Dan-Artinya-A-Z.jpg?ssl=1
200 OK 35 kB URL HTTP/2 i0.wp.com/bayilelakiku.com/wp-content/uploads/2020/02/Nama-Bayi-Laki-Laki-Modern-Dan-Artinya-A-Z.jpg?ssl=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 768x511, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash 397867193c0b4707bd680e0dde957836
09dd9e9f56672342124d4ee6d8fad4728d664703
5b0a9c86399a075df595da0ba2027c22d137b9ae26c4102b77fed38e2cccaf97
GET /bayilelakiku.com/wp-content/uploads/2020/02/Nama-Bayi-Laki-Laki-Modern-Dan-Artinya-A-Z.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/webp
content-length: 35162
last-modified: Fri, 02 Sep 2022 12:26:46 GMT
expires: Mon, 02 Sep 2024 00:26:46 GMT
cache-control: public, max-age=63115200
link: <https://bayilelakiku.com/wp-content/uploads/2020/02/Nama-Bayi-Laki-Laki-Modern-Dan-Artinya-A-Z.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "4ef669af65f65d5c"
vary: Accept
x-nc: MISS arn 8
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
i0.wp.com/kitabnamabayi.com/wp-content/uploads/2019/09/Rangkaian-Nama-Bayi-Laki-Laki-Modern.jpg?ssl=1
200 OK 38 kB URL HTTP/2 i0.wp.com/kitabnamabayi.com/wp-content/uploads/2019/09/Rangkaian-Nama-Bayi-Laki-Laki-Modern.jpg?ssl=1
IP
File type RIFF (little-endian) data, Web/P image, VP8 encoding, 768x575, Scaling: [none]x[none], YUV color, decoders should clamp\012- data
Hash ec56f0d8ffe01bc72e438cb77da2e7b9
9cf234596ab994e922be561f1b4ee183747e0d09
d77f7b0685b5ed45f845cf30eccd83bec9d1442cfc80587103bfadf4c7b1e8f1
GET /kitabnamabayi.com/wp-content/uploads/2019/09/Rangkaian-Nama-Bayi-Laki-Laki-Modern.jpg?ssl=1 HTTP/1.1
Host: i0.wp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Fri, 02 Sep 2022 12:26:46 GMT
content-type: image/webp
content-length: 38122
last-modified: Fri, 02 Sep 2022 12:26:46 GMT
expires: Mon, 02 Sep 2024 00:26:46 GMT
cache-control: public, max-age=63115200
link: <https://kitabnamabayi.com/wp-content/uploads/2019/09/Rangkaian-Nama-Bayi-Laki-Laki-Modern.jpg>; rel="canonical"
x-content-type-options: nosniff
etag: "92a02d69b696c62b"
vary: Accept
x-nc: MISS arn 2
access-control-allow-origin: *
access-control-allow-methods: GET, HEAD
timing-allow-origin: *
X-Firefox-Spdy: h2
image.kamuslengkap.com/kamus/nama/arti-kata/beryl.jpg
200 OK 96 kB URL HTTP/2 image.kamuslengkap.com/kamus/nama/arti-kata/beryl.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3\012- data
Hash 3ac3962719fdbd3680e7cd96506ad548
73147484a514a8789700356c39d6b0e098b3f65f
c2039186be01993491188899316127855367f2769d269a23903d923327af7ecc
GET /kamus/nama/arti-kata/beryl.jpg HTTP/1.1
Host: image.kamuslengkap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:46 GMT
accept-ranges: bytes
cache-control: max-age=3600
content-length: 95942
content-type: image/jpeg
x-hw: 1662121604.dop072.sk1.t,1662121604.cds072.sk1.hn,1662121605.cds215.sk1.p
x-rgw-object-type: Normal
etag: "3ac3962719fdbd3680e7cd96506ad548"
x-amz-meta-gid: 33
x-amz-meta-mode: 33188
x-amz-meta-mtime: 1588050456
x-amz-meta-uid: 1000
x-amz-request-id: tx0000000000000143712be-006311f685-2a7c33df-sgp1a
strict-transport-security: max-age=15552000; includeSubDomains; preload
last-modified: Tue, 28 Apr 2020 05:07:36 GMT
X-Firefox-Spdy: h2
image.kamuslengkap.com/kamus/nama/arti-kata/beryl_wide.jpg
200 OK 205 kB URL HTTP/2 image.kamuslengkap.com/kamus/nama/arti-kata/beryl_wide.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1200x675, components 3\012- data
Size 205 kB (204671 bytes)
Hash 8f58f4940db1b5538ff9795977fe6de0
61984f59dfd5b7b9d32f6a2c20eee188a2572620
65d6d8b4ded3212c3a1110d58739a9c08be14fc835946d6f87e1c76d02c58861
GET /kamus/nama/arti-kata/beryl_wide.jpg HTTP/1.1
Host: image.kamuslengkap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:46 GMT
accept-ranges: bytes
cache-control: max-age=3600
content-length: 204671
content-type: image/jpeg
x-hw: 1662121604.dop072.sk1.t,1662121604.cds072.sk1.hn,1662121605.cds257.sk1.p
x-rgw-object-type: Normal
etag: "8f58f4940db1b5538ff9795977fe6de0"
x-amz-meta-gid: 33
x-amz-meta-mode: 33188
x-amz-meta-mtime: 1588715582
x-amz-meta-uid: 1000
x-amz-request-id: tx000000000000014365582-006311f685-2a7b27de-sgp1a
strict-transport-security: max-age=15552000; includeSubDomains; preload
last-modified: Tue, 05 May 2020 21:53:02 GMT
X-Firefox-Spdy: h2
connect.facebook.net/en_US/sdk.js?hash=9372d18403cc7f8f03940275af2d65b1
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/sdk.js?hash=9372d18403cc7f8f03940275af2d65b1
IP
File type ASCII text, with very long lines (13115)
Hash 20a8e4df7659f986f74af7d35174c39e
5567837307908b373e9f568052612564d8d16da4
1e30dd9c41e2fd0ede46f9eb9a144363246db32210a313ad111879b672779cbb
GET /en_US/sdk.js?hash=9372d18403cc7f8f03940275af2d65b1 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 5568bf4b74110e60e2d541fd332708d8
etag: "7a2328b41848719432b15bc6792c4d53"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 02 Sep 2023 11:50:12 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: IKjk33ZZ+Yb3SvfTUXTDng==
x-fb-debug: 9RLe1WCr5etbbOL/bwdidCb9FYsxX3EiLC5nMC6iWGnd3vF3s+GyVLU70G8MZO+SbKJa3s/c6AUQEDkV9qG1AA==
content-length: 86675
x-fb-trip-id: 1904183273
date: Fri, 02 Sep 2022 12:26:46 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
i.pinimg.com/736x/02/86/a3/0286a36d483a3d89896117f9a4ff6e3c.jpg
200 OK 40 kB URL HTTP/2 i.pinimg.com/736x/02/86/a3/0286a36d483a3d89896117f9a4ff6e3c.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x351, components 3\012- data
Hash c01f296f1df9c1ee222531842ea3b723
073a677b9299a78a6836fae8061923c900d2567d
ebd32fd7089b9b17eb7145a1db650dbfae7c8de5279a47bedef472b3c1b05dc0
GET /736x/02/86/a3/0286a36d483a3d89896117f9a4ff6e3c.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "c01f296f1df9c1ee222531842ea3b723"
accept-ranges: bytes
content-length: 40017
akamai-grn: 0.940f1fb8.1662121606.9221e2
content-type: image/jpeg
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/b5/23/58/b52358d7298cf28a69cc244376f6e6ed.jpg
200 OK 197 kB URL HTTP/2 i.pinimg.com/originals/b5/23/58/b52358d7298cf28a69cc244376f6e6ed.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1136x1271, components 3\012- data
Size 197 kB (196742 bytes)
Hash 207e021211cf8db1ccdb549c2c1d9730
fd94d6613b68319f6b484eee3c91e7ea34d4cc4e
d31f65c6327380eab2dffb77d70ab72616752f8df87ab7e0e7ee791c572002cd
GET /originals/b5/23/58/b52358d7298cf28a69cc244376f6e6ed.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "207e021211cf8db1ccdb549c2c1d9730"
accept-ranges: bytes
content-type: image/jpeg
content-length: 196742
akamai-grn: 0.940f1fb8.1662121606.9221cf
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/c0/c7/e0/c0c7e08d3499ca06e97741e1abccb08f.jpg
200 OK 54 kB URL HTTP/2 i.pinimg.com/originals/c0/c7/e0/c0c7e08d3499ca06e97741e1abccb08f.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1024x512, components 3\012- data
Hash 8758da94072d97bcd373f31c62c34d3a
e87c7013a8c236083deaf808abddb7b811703611
48256a1bfebabc0305a60124712fa923692835caecc4eb3dda525d3764f1419c
GET /originals/c0/c7/e0/c0c7e08d3499ca06e97741e1abccb08f.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "8758da94072d97bcd373f31c62c34d3a"
accept-ranges: bytes
content-type: image/jpeg
content-length: 54189
akamai-grn: 0.940f1fb8.1662121606.9221db
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
s.yimg.com/ny/api/res/1.2/YkplNsNdVtkDW43WydVbgA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTY0MA--/https://media.zenfs.com/ID/liputan6_hosted_772/b07619458a17fddf579bf14ac3981f3a
200 OK 21 kB URL HTTP/2 s.yimg.com/ny/api/res/1.2/YkplNsNdVtkDW43WydVbgA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTY0MA--/https://media.zenfs.com/ID/liputan6_hosted_772/b07619458a17fddf579bf14ac3981f3a
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 150x150, segment length 16, baseline, precision 8, 640x360, components 3\012- data
Hash c299c4548d94bbecd6beb2e31ee89f44
d862b6b7d0173699bba7f615b58f4e4d3e86f474
62a40ba034f3e9747652149dcdee60c979303c7feab501582929e200de3ccecd
GET /ny/api/res/1.2/YkplNsNdVtkDW43WydVbgA--/YXBwaWQ9aGlnaGxhbmRlcjt3PTY0MA--/https://media.zenfs.com/ID/liputan6_hosted_772/b07619458a17fddf579bf14ac3981f3a HTTP/1.1
Host: s.yimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-length: 20678
access-control-allow-headers: X-Requested-With
access-control-allow-origin: *
cache-control: public, max-age=2592000
cache-tag: 239205324929211279445480696737684058609,507542893153431098124364275395350094730,ae7a14591aaf8d474cdb3f92111c923e
content-type: image/jpeg
edge-cache-tag: 239205324929211279445480696737684058609,507542893153431098124364275395350094730,ae7a14591aaf8d474cdb3f92111c923e
etag: "c299c4548d94bbecd6beb2e31ee89f44"
last-modified: Wed, 09 Jun 2021 22:28:37 GMT
server: ATS
timing-allow-origin: *
accept-ranges: bytes
date: Fri, 02 Sep 2022 12:26:47 GMT
x-served-by: cache-lga21952-LGA
x-cache: HIT
x-cache-hits: 1
x-timer: S1662121607.034872,VS0,VE1
age: 4
strict-transport-security: max-age=15552000
referrer-policy: no-referrer-when-downgrade
x-frame-options: SAMEORIGIN
cld_cache: HIT
cld_hits: 1
cld_by: cache-lga21952-LGA
cld_latency: 1
expect-ct: max-age=31536000, report-uri="http://csp.yahoo.com/beacon/csp?src=yahoocom-expect-ct-report-only"
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
X-Firefox-Spdy: h2
i.pinimg.com/originals/92/29/03/922903494ae8eaf111b78ea9e1c8f931.png
200 OK 514 kB URL HTTP/2 i.pinimg.com/originals/92/29/03/922903494ae8eaf111b78ea9e1c8f931.png
IP
ASN #20940 Akamai International B.V.
File type PNG image data, 1200 x 628, 8-bit/color RGB, non-interlaced\012- data
Size 514 kB (514434 bytes)
Hash db039759716b12dc5cca0f7e3bca6cf3
5c70e8efaec83014b81a6a44d186dbf4d11828ba
4b2136a6396726f2c144ae32ae1d99bbc44600fefa5cb80439dbe240e30fcfab
GET /originals/92/29/03/922903494ae8eaf111b78ea9e1c8f931.png HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "db039759716b12dc5cca0f7e3bca6cf3"
accept-ranges: bytes
content-type: image/png
content-length: 514434
akamai-grn: 0.940f1fb8.1662121606.9221e7
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/736x/68/5a/7f/685a7fcf2deb7801c530a2b953bda62b.jpg
200 OK 33 kB URL HTTP/2 i.pinimg.com/736x/68/5a/7f/685a7fcf2deb7801c530a2b953bda62b.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 600x315, components 3\012- data
Hash 075cdfe94a92923fde10510770000df9
ed22008d269b6be2bd89972272b132cc6a75e0c2
17b1ad4430f734020c9a9cfb40aa0ee2a3479ee07e013835ab85973b998ebc4b
GET /736x/68/5a/7f/685a7fcf2deb7801c530a2b953bda62b.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "075cdfe94a92923fde10510770000df9"
accept-ranges: bytes
content-type: image/jpeg
content-length: 33076
akamai-grn: 0.940f1fb8.1662121606.9221f0
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/e6/5d/ee/e65dee80fe7cfc29040e7c6fe64d6ee7.jpg
200 OK 68 kB URL HTTP/2 i.pinimg.com/originals/e6/5d/ee/e65dee80fe7cfc29040e7c6fe64d6ee7.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 1024x512, components 3\012- data
Hash 28168a8999b1484477048acf460ff260
eba4cdb9952064418a47781370289f3f69cddd1f
ccc197caaa87dc29017d709dd8f009541fccf057302e7c400bcfdd35fee48d12
GET /originals/e6/5d/ee/e65dee80fe7cfc29040e7c6fe64d6ee7.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "28168a8999b1484477048acf460ff260"
accept-ranges: bytes
content-type: image/jpeg
content-length: 68519
akamai-grn: 0.940f1fb8.1662121606.9221eb
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
i.pinimg.com/originals/48/31/f2/4831f2f6b2f222c9d4d676096ddb1cbc.jpg
200 OK 162 kB URL HTTP/2 i.pinimg.com/originals/48/31/f2/4831f2f6b2f222c9d4d676096ddb1cbc.jpg
IP
ASN #20940 Akamai International B.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, progressive, precision 8, 1200x1141, components 3\012- data
Size 162 kB (161666 bytes)
Hash fb8fe7cbf717a2cdbda98e02511bc48d
446cb802ab0783700a0f4f3bf66936bbd625cfb7
f340013e64c9bb67b6d6e293ef5bd2f1163604dd7408e07ae7260c237e0f2fed
GET /originals/48/31/f2/4831f2f6b2f222c9d4d676096ddb1cbc.jpg HTTP/1.1
Host: i.pinimg.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
etag: "fb8fe7cbf717a2cdbda98e02511bc48d"
accept-ranges: bytes
content-type: image/jpeg
content-length: 161666
akamai-grn: 0.940f1fb8.1662121606.9221d5
vary: Origin
cache-control: immutable, max-age=31536000
x-cdn: akamai
X-Firefox-Spdy: h2
image.kamuslengkap.com/kamus/nama/arti-kata/beryl_square.jpg
200 OK 16 kB URL HTTP/2 image.kamuslengkap.com/kamus/nama/arti-kata/beryl_square.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 360x360, components 3\012- data
Hash 92dab98c1e65c778395705f307537337
adfbe6fc190e979a3aee50991d744cf76e7ec76f
1cb36e3f1fd1f395bc4210ecd1a23aa90d6e8af61bbcf60765b41571a6446ebe
GET /kamus/nama/arti-kata/beryl_square.jpg HTTP/1.1
Host: image.kamuslengkap.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:48 GMT
accept-ranges: bytes
cache-control: max-age=3600
content-length: 16412
content-type: image/jpeg
x-hw: 1662121605.dop072.sk1.t,1662121605.cds072.sk1.hn,1662121607.cds254.sk1.p
x-rgw-object-type: Normal
etag: "92dab98c1e65c778395705f307537337"
x-amz-meta-gid: 33
x-amz-meta-mode: 33188
x-amz-meta-mtime: 1588715586
x-amz-meta-uid: 1000
x-amz-request-id: tx00000000000001437d0b2-006311f687-2a7a2727-sgp1a
strict-transport-security: max-age=15552000; includeSubDomains; preload
last-modified: Tue, 05 May 2020 21:53:06 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8301b9221d40e96963ee39828cebcf0
e5822caa4549b551baf97b504a53bfa4a8baf3d3
ad1dfa54fd1f7633f8ade0ca283f072f5705d51111971b6a23132c6fea75d33e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD1DFA54FD1F7633F8ADE0CA283F072F5705D51111971B6A23132C6FEA75D33E"
Last-Modified: Wed, 31 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2233
Expires: Fri, 02 Sep 2022 13:04:01 GMT
Date: Fri, 02 Sep 2022 12:26:48 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a8301b9221d40e96963ee39828cebcf0
e5822caa4549b551baf97b504a53bfa4a8baf3d3
ad1dfa54fd1f7633f8ade0ca283f072f5705d51111971b6a23132c6fea75d33e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AD1DFA54FD1F7633F8ADE0CA283F072F5705D51111971B6A23132C6FEA75D33E"
Last-Modified: Wed, 31 Aug 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2233
Expires: Fri, 02 Sep 2022 13:04:01 GMT
Date: Fri, 02 Sep 2022 12:26:48 GMT
Connection: keep-alive
unseenreport.com/pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2133103783e240e0c49a3aab167a223c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2133103783e240e0c49a3aab167a223c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2133103783e240e0c49a3aab167a223c&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 12:26:48 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: bda63769072e38c8fcdd4b204c2a32c6
Strict-Transport-Security: max-age=0; includeSubdomains
unseenreport.com/pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2f8660517d6ceaf37e3a8970cec0ea59&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
200 OK 1 B URL HTTP/1.1 unseenreport.com/pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2f8660517d6ceaf37e3a8970cec0ea59&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12
IP
ASN #39572 DataWeb Global Group B.V.
File type very short file (no magic)
Hash 93b885adfe0da089cdf634904fd59f71
5ba93c9db0cff93f52b521d7420e43f6eda2784f
6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
Analyzer Verdict Alert quad9 Sinkholed
GET /pxf.gif?uuid=94a3899e-503a-42e3-b449-ba32ef58dcaf&eb=da08d6844107154a138edda4653a0f4b&te=f6ce28b9ffd697cd2ee52a12f20448bb&ua=Mozilla%2F5.0%20(X11%3B%20Linux%20x86_64%3B%20rv%3A96.0)%20Gecko%2F20100101%20Firefox%2F96.0&dev=r&res=13.31&b_frame=0&pk=2f8660517d6ceaf37e3a8970cec0ea59&bl=en-US&sr=1002x1280&sz=1024x1280&hjs=12 HTTP/1.1
Host: unseenreport.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.22.0
Date: Fri, 02 Sep 2022 12:26:49 GMT
Content-Type: image/gif
Content-Length: 1
Connection: keep-alive
P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
Access-Control-Allow-Origin: *
Expires: Thu, 01 Jan 1970 00:00:01 GMT
Cache-Control: no-cache
X-Request-ID: 42c98a5b62b098cdd7cf70e4cda75be9
Strict-Transport-Security: max-age=0; includeSubdomains
zaline.diraya.my.id/728.js
200 OK 0 B URL HTTP/2 zaline.diraya.my.id/728.js
IP
GET /728.js HTTP/1.1
Host: zaline.diraya.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"05a61fc0830f81ec7aff0677288562b8"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=SNUCFpos%2F9hdjqi%2Bt5nIFx4wr5IYGKNJo5HUG%2FyvS1zvzT8TkeCVnkR%2Bt7QVT6HaNCCFcEuB8YIWxUeX2Hr8RsTKkgb%2FC8qH3qIDf3PAoPYg334tB3ru%2B557ILYgKDkNgx8HZwi3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5660
server: cloudflare
cf-ray: 74463c4e0a1fb524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
creepingbrings.com/sfp.js
200 OK 0 B URL HTTP/2 creepingbrings.com/sfp.js
IP
GET /sfp.js HTTP/1.1
Host: creepingbrings.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: application/javascript; charset=utf-8
p3p: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"
access-control-allow-origin: *
expires: Thu, 01 Jan 1970 00:00:01 GMT
cache-control: max-age=14400
x-request-id: 5dc2d256e4da9e150d233d6970520c5c
strict-transport-security: max-age=0; includeSubdomains
cf-cache-status: EXPIRED
last-modified: Fri, 02 Sep 2022 12:26:44 GMT
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YGSJmKcF41YuJ0NpsJsFtFPQHahNkAXjSPtbgoTQnTYoCEjBxuC4Apm9zxbrrIzwUAQzrpvBS0eejzEjgfAiIC9xVX3K3hlmtV%2Ftpwio7TmXSQvRd6Cc9zm3PdFySQJSDjfOa7A%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5a68008e27-LHR
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
cdns.diadona.co.id/diadona.id/resized/640x320/news/2021/01/22/32801/184-arti-nama-bayi-perempuan-modern-dari-a-z-dan-artinya-yang-indah-bisa-jadi-inspirasimu-210122y.jpg
403 Forbidden 0 B URL HTTP/2 cdns.diadona.co.id/diadona.id/resized/640x320/news/2021/01/22/32801/184-arti-nama-bayi-perempuan-modern-dari-a-z-dan-artinya-yang-indah-bisa-jadi-inspirasimu-210122y.jpg
IP
GET /diadona.id/resized/640x320/news/2021/01/22/32801/184-arti-nama-bayi-perempuan-modern-dari-a-z-dan-artinya-yang-indah-bisa-jadi-inspirasimu-210122y.jpg HTTP/1.1
Host: cdns.diadona.co.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
date: Fri, 02 Sep 2022 12:26:45 GMT
content-type: text/html
server-node: diadona-cdn
cf-cache-status: BYPASS
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1immcvRjz7CDcvzII%2BkW42P61i3h2q6Ik7VHWw8TgZvDUB5c4w9LLvV7pI051cf%2BkBPbUJJhzeB59xQpPE8UlLHHz3uYSacsqi71Ke%2F53ReTPTOysF8ca1nEVz3ulXDwR9PMXRo%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74463c5d998efab8-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
c.statcounter.com/t.php?sc_project=12506186&u1=B55A8849FD2D4FB9B8EBAFCD332004C0&java=1&security=04fde361&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html&t=seksyen%2010%20wangsa%20maju%20-%20Stewart%20Short&invisible=1&sc_rum_e_s=3237&sc_rum_e_e=3244&get_config=true
200 OK 0 B URL HTTP/2 c.statcounter.com/t.php?sc_project=12506186&u1=B55A8849FD2D4FB9B8EBAFCD332004C0&java=1&security=04fde361&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html&t=seksyen%2010%20wangsa%20maju%20-%20Stewart%20Short&invisible=1&sc_rum_e_s=3237&sc_rum_e_e=3244&get_config=true
IP
GET /t.php?sc_project=12506186&u1=B55A8849FD2D4FB9B8EBAFCD332004C0&java=1&security=04fde361&sc_snum=1&sess=a8f3c4&p=0&rcat=d&rdom=d&rdomg=new&bb=1&jg=new&rr=1.1.1.1.1.1.1.1.1&resolution=1280&h=1024&camefrom=&u=https%3A//yoostewartshort.blogspot.com/2022/08/seksyen-10-wangsa-maju.html&t=seksyen%2010%20wangsa%20maju%20-%20Stewart%20Short&invisible=1&sc_rum_e_s=3237&sc_rum_e_e=3244&get_config=true HTTP/1.1
Host: c.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://yoostewartshort.blogspot.com
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:47 GMT
content-type: application/json
p3p: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
expires: Mon, 26 Jul 1997 05:00:00 GMT
set-cookie: is_unique=sc12506186.1662121607.0; SameSite=None; Secure; Expires=Wednesday, 01-Sep-2027 19:26:47 WIB; Path=/; Domain=.statcounter.com
is_visitor_unique=1662121607329191565; SameSite=None; Secure; Expires=Sunday, 01-Sep-2024 19:26:47 WIB; Path=/; Domain=.statcounter.com
access-control-allow-origin: https://yoostewartshort.blogspot.com
access-control-allow-credentials: true
cf-cache-status: DYNAMIC
server: cloudflare
cf-ray: 74463c6b4913b52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
zaline.diraya.my.id/320-1.js
200 OK 0 B URL HTTP/2 zaline.diraya.my.id/320-1.js
IP
GET /320-1.js HTTP/1.1
Host: zaline.diraya.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:42 GMT
content-type: application/javascript
access-control-allow-origin: *
cache-control: public, max-age=14400, must-revalidate
etag: W/"40ac7da57bffb7e3b7950d609b4bdd57"
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s%2B6%2FBHZUILoFPxomu1BHA%2Fnp2i%2Ba2LvCec7OEB3MXATmr4tvnTq6Ngtn9GKBbXPVI97TpsdHDzQPrruH%2Bt9tZSF94BK031bqAFDl6AiHiXb%2BsWHb3i71wtZCU8FiQ91uyRN%2BlPxC"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
cf-cache-status: HIT
age: 5662
server: cloudflare
cf-ray: 74463c4e0a22b524-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,400i,600,600i,700,700i
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,400i,600,600i,700,700i
IP
GET /css?family=Open+Sans:400,400i,600,600i,700,700i HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Fri, 02 Sep 2022 12:26:42 GMT
date: Fri, 02 Sep 2022 12:26:42 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
200 OK 0 B URL HTTP/2 stackpath.bootstrapcdn.com/font-awesome/4.7.0/css/font-awesome.min.css
IP
GET /font-awesome/4.7.0/css/font-awesome.min.css HTTP/1.1
Host: stackpath.bootstrapcdn.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:42 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
last-modified: Mon, 25 Jan 2021 22:04:55 GMT
cdn-cachedat: 11/15/2021 21:49:00
cdn-proxyver: 1.0
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 723
cdn-status: 200
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-requestid: 2729ae8f2fc6c761bdc17d91cc795f58
cdn-cache: HIT
cf-cache-status: HIT
age: 7568356
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 74463c4dcf0e0b41-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.statcounter.com/counter/counter_xhtml.js
200 OK 0 B URL HTTP/2 www.statcounter.com/counter/counter_xhtml.js
IP
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://yoostewartshort.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Fri, 02 Sep 2022 12:26:44 GMT
content-type: application/javascript
vary: Accept-Encoding
last-modified: Thu, 01 Sep 2022 16:11:50 GMT
etag: W/"6310d9c6-aa70"
expires: Fri, 02 Sep 2022 12:26:47 GMT
cache-control: max-age=43200
cf-cache-status: HIT
age: 43196
server: cloudflare
cf-ray: 74463c5c1dadb52d-OSL
content-encoding: br
X-Firefox-Spdy: h2
142.250.74.161
93.184.220.29
184.31.15.152
23.36.76.225
128.199.144.56
104.18.11.207
3.127.140.33