Report - ak.phaunaitsi.net/4/6118780?var=7712136&btz=Asia/Makassar&bto=-480&bar=x

Report Overview

Visited public
2024-08-15 03:55:58
Tags
Submit Tags
URL
ak.phaunaitsi.net/4/6118780?var=7712136&btz=Asia/Makassar&bto=-480&bar=x
Finishing URL
johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
IP / ASN
95.101.10.66
#20940 Akamai International B.V.
Title
Mahjong Ways dari PG Soft: Mengungkap Keajaiban Game Online Terbaik

Detections

urlquery

Network Intrusion Detection

Threat Detection Systems

Domain Summary

Domain / FQDN	Rank	Sent	Received	IP
o.pki.goog	unknown	3.6 kB	7.7 kB	142.250.74.131
cdn.ampproject.org	329	2.7 kB	184 kB	216.58.207.193
fonts.googleapis.com	8877	1.4 kB	5.4 kB	142.250.74.106
lost-saga.my.id	unknown	1.3 kB	900 kB	104.21.76.171
fonts.gstatic.com	unknown	2.1 kB	133 kB	216.58.207.227
r11.o.lencr.org	unknown	981 B	2.7 kB	23.33.119.57
r10.o.lencr.org	unknown	1.3 kB	3.6 kB	23.36.77.32
johndechancie.com	unknown	543 B	29 kB	51.89.253.184
pakkumis-image.cloud	unknown	442 B	0 B	0.0.0.0
ak.phaunaitsi.net	unknown	996 B	2.4 kB	95.101.10.26
my.rtmark.net	9054	398 B	681 B	139.45.195.8
djdies-image.cloud	unknown	902 B	0 B	0.0.0.0

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

No alerts detected

Threat Detection Systems

Public InfoSec YARA rules

No alerts detected

OpenPhish

No alerts detected

PhishTank

No alerts detected

mnemonic secure dns

No alerts detected

Quad9 DNS

Scan Date	Severity	Indicator	Alert
2024-08-15	medium	phaunaitsi.net	Sinkholed
2024-08-15	medium	phaunaitsi.net	Sinkholed

ThreatFox

No alerts detected

JavaScript (5)

	URL	From	Size	First Seen	Last Seen
	cdn.ampproject.org/v0.js	ScriptElement	285 kB	2024-06-28	2024-09-20
Pretty URL cdn.ampproject.org/v0.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 09:24 Last Seen2024-09-20 20:12 Times Seen292 Hash d9be280c1fc19995983835424d7b0700 83c2c634762b4fb19cac9005919ab9c36daa5e21 416484b2217e26d94420e4f75f62d3fbdb07a81058e6468042ce2542d016340d Loading...

	cdn.ampproject.org/v0/amp-anim-0.1.js	ScriptElement	6.2 kB	2024-06-30	2024-09-20
Pretty URL cdn.ampproject.org/v0/amp-anim-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-30 07:49 Last Seen2024-09-20 20:12 Times Seen72 Hash e58dd372ac23053ff167596c1a5f131a e43f776dc09b7b32760070e70c718fb081553ae7 ecc9a646c8fecfa4e12f32a06800977bd039ce2e91d1cc7c94b3c7b7b0999979 Loading...

	cdn.ampproject.org/rtv/012406131415000/v0/amp-auto-lightbox-0.1.js	ScriptElement	7.8 kB	2024-06-28	2024-09-20
Pretty URL cdn.ampproject.org/rtv/012406131415000/v0/amp-auto-lightbox-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 11:51 Last Seen2024-09-20 20:12 Times Seen235 Hash 0569f5d97040f52dd37c136665c3bbc8 e81b585d7e5c22b5abfc3fb26a35dee2f7a900d0 08c034b981c8dbe7aace6c041f2b7dec193b2aff8d219ae8c3fc80f1aceda1de Loading...

	cdn.ampproject.org/rtv/012406131415000/v0/amp-loader-0.1.js	ScriptElement	13 kB	2024-06-28	2024-09-20
Pretty URL cdn.ampproject.org/rtv/012406131415000/v0/amp-loader-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-06-28 09:24 Last Seen2024-09-20 20:12 Times Seen259 Hash 947c8ebf4577f8279b5fa8804e306b3e 65c56d71c8977bf8d572c7f8bbc6424cb05a6a6e e4a0b30928c7d7d1d18cd4c7f43d23f2615cbcc92a0457a4e5bf04b9e3e73353 Loading...

	cdn.ampproject.org/rtv/012406131415000/v0/amp-lightbox-gallery-0.1.js	ScriptElement	67 kB	2024-07-01	2024-09-20
Pretty URL cdn.ampproject.org/rtv/012406131415000/v0/amp-lightbox-gallery-0.1.js IP 216.58.207.193 ASN #15169 GOOGLE Introduced by scriptElement Embedded in HTML false Observations First Seen2024-07-01 04:21 Last Seen2024-09-20 19:46 Times Seen35 Hash 408b3a469ff2810753c137ce43b70eb2 3173ac7903a49f0be0145c87a2a6319d73758f6e 7cfa68c00b8e7e71feb75a06b2677316115bfc82646a631bf30d68055beac176 Loading...

HTTP Transactions (41)

URL IP Response Size

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
686480d25645ac2aca7a99974693a82f
55ca9d53bd758d2afc75e8a9b59c656ff26a3f70
8902058e383c2f43751417e1af1d582f7a16ce0b6fc180ab20cbc76c4b00f914

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "8902058E383C2F43751417E1AF1D582F7A16CE0B6FC180AB20CBC76C4B00F914"
Last-Modified: Wed, 14 Aug 2024 12:55:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6482
Expires: Thu, 15 Aug 2024 05:43:33 GMT
Date: Thu, 15 Aug 2024 03:55:31 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
38ec58de07b1016bd9b813c7eda301e9
c37f1517a0074a1de19e1dd4fb2f12a0b59c6ce3
a5dc8c5b994299da9e84f8285ec6d80beca382c792fbdcf8e67201148aad2269

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "A5DC8C5B994299DA9E84F8285EC6D80BECA382C792FBDCF8E67201148AAD2269"
Last-Modified: Tue, 13 Aug 2024 18:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12268
Expires: Thu, 15 Aug 2024 07:19:59 GMT
Date: Thu, 15 Aug 2024 03:55:31 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
4d209e16679910b467c26590a0073236
ddd59fa6902b498e9c0cfb22e342757f954789d0
9ef3dab56215a67804db0e12d33772a1902f5914b788530717712902a294bcb5

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "9EF3DAB56215A67804DB0E12D33772A1902F5914B788530717712902A294BCB5"
Last-Modified: Wed, 14 Aug 2024 21:59:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19688
Expires: Thu, 15 Aug 2024 09:23:39 GMT
Date: Thu, 15 Aug 2024 03:55:31 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.77.32

504 B

URL
r10.o.lencr.org/
IP
23.36.77.32:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
1401eaecc1dc9b318d389cf687018dd9
49eef7150c440fee15deabf064e11a9fefad1845
5b79b468e1cac072d2582b2937241a1f1bee8fdbbc4741818061b6763652523e

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "5B79B468E1CAC072D2582B2937241A1F1BEE8FDBBC4741818061B6763652523E"
Last-Modified: Tue, 13 Aug 2024 18:57:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16503
Expires: Thu, 15 Aug 2024 08:30:34 GMT
Date: Thu, 15 Aug 2024 03:55:31 GMT
Connection: keep-alive

ak.phaunaitsi.net/4/6118780?var=7712136&btz=Asia/Makassar&bto=-480&bar=x

95.101.10.26

609 B

URL
ak.phaunaitsi.net/4/6118780?var=7712136&btz=Asia/Makassar&bto=-480&bar=x
IP
95.101.10.26:0
ASN
#20940 Akamai International B.V.

File type
HTML document, ASCII text
Size
609 B (609 bytes)
Hash
c23d5faaeee7a2e763bd61882f525a14
0eecfdc85e0b4e6c5108d3799bc901d414df4118
28a8dc616b48be031083ce6a8ee0422df781c920a1641aff325c2f34d20147ae

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /4/6118780?var=7712136&btz=Asia/Makassar&bto=-480&bar=x HTTP/1.1
Host: ak.phaunaitsi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/html; charset=utf8
x-trace-id: 1e74ce2c14303287bc87ac458679743d
link: <https://yonmewon.com>; rel="preconnect dns-prefetch",<https://my.rtmark.net>; rel="preconnect dns-prefetch", <https://johndechancie.com>; rel="preconnect dns-prefetch",<https://yonmewon.com>; rel="preconnect dns-prefetch",<https://sr7pv7n5x.com>; rel="preconnect dns-prefetch"
accept-ch: Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Mobile, Sec-CH-UA-Model
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, baggage, sentry-trace, favicon
access-control-max-age: 86400
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
content-encoding: gzip
content-length: 609
vary: Accept-Encoding
expires: Thu, 15 Aug 2024 03:55:31 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Aug 2024 03:55:31 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
set-cookie: OAID=0080b9c0d7c646c5ea51bf4dcaad2019; expires=Fri, 15 Aug 2025 03:55:31 GMT; path=/; secure; SameSite=None
oaidts=1723694131; expires=Fri, 15 Aug 2025 03:55:31 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
X-Firefox-Spdy: h2

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
44f5b59f11519ee07e544b86c4f33b67
4546e86057e9bac69dd5706d751e44984af09a0d
fbee831dd046f3b224f39890db6846701d604d8dfe42501738836497dd41fe8d

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "FBEE831DD046F3B224F39890DB6846701D604D8DFE42501738836497DD41FE8D"
Last-Modified: Tue, 13 Aug 2024 19:09:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17899
Expires: Thu, 15 Aug 2024 08:53:51 GMT
Date: Thu, 15 Aug 2024 03:55:32 GMT
Connection: keep-alive

my.rtmark.net/img.gif?f=merge&userId=0080b9c0d7c646c5ea51bf4dcaad2019

139.45.195.8

43 B

URL
my.rtmark.net/img.gif?f=merge&userId=0080b9c0d7c646c5ea51bf4dcaad2019
IP
139.45.195.8:0
ASN
#9002 RETN Limited

File type
GIF image data, version 89a, 1 x 1
Size
43 B (43 bytes)
Hash
b4491705564909da7f9eaf749dbbfbb1
279315d507855c6a4351e1e2c2f39dd9cd2fccd8
4e0705327480ad2323cb03d9c450ffcae4a98bf3a5382fa0c7882145ed620e49

HTTP Headers

POST /img.gif?f=merge&userId=0080b9c0d7c646c5ea51bf4dcaad2019 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Content-Length: 0

HTTP/2 200 OK
server: nginx
date: Thu, 15 Aug 2024 03:55:32 GMT
content-type: image/gif
content-length: 43
access-control-allow-origin: null
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=0080b9c0d7c646c5ea51bf4dcaad2019; expires=Fri, 15 Aug 2025 03:55:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2

ak.phaunaitsi.net/favicon.ico

95.101.10.26

0 B

URL
ak.phaunaitsi.net/favicon.ico
IP
95.101.10.26:0
ASN
#20940 Akamai International B.V.

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

Detections

Analyzer	Verdict	Alert
Quad9 DNS	malicious	Sinkholed

HTTP Headers

GET /favicon.ico HTTP/1.1
Host: ak.phaunaitsi.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Cookie: OAID=0080b9c0d7c646c5ea51bf4dcaad2019; oaidts=1723694131
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 204 No Content
expires: Thu, 15 Aug 2024 03:55:32 GMT
cache-control: max-age=0, no-cache, no-store
pragma: no-cache
date: Thu, 15 Aug 2024 03:55:32 GMT
alt-svc: h3=":443"; ma=93600,h3-29=":443"; ma=93600,h3-Q050=":443"; ma=93600,quic=":443"; ma=93600; v="46,43"
quic-version: 0x00000001

r11.o.lencr.org/

23.33.119.57

504 B

URL
r11.o.lencr.org/
IP
23.33.119.57:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
77619f0113a62e8c4c44f195901b385c
1e1a5e3768ca683e66667aa14efa7042df57ee2f
520dbca26889dcd055ad1e36265c6d088b8b7c9d6907cc59eecc7ff47e4c9942

HTTP Headers

POST / HTTP/1.1
Host: r11.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "520DBCA26889DCD055AD1E36265C6D088B8B7C9D6907CC59EECC7FF47E4C9942"
Last-Modified: Mon, 12 Aug 2024 21:16:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6929
Expires: Thu, 15 Aug 2024 05:51:02 GMT
Date: Thu, 15 Aug 2024 03:55:33 GMT
Connection: keep-alive

r10.o.lencr.org/

23.36.76.226

504 B

URL
r10.o.lencr.org/
IP
23.36.76.226:0
ASN
#20940 Akamai International B.V.

File type
data
Size
504 B (504 bytes)
Hash
5f68235d651f37c296b7a189f7dcf64a
42f4fb1260d55b2e284d3c216b596976716f1c31
6a88dd34d79848f1f4561f8210420c9508d6ad337014f0ca43c3fb997810b7b4

HTTP Headers

POST / HTTP/1.1
Host: r10.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 504
ETag: "6A88DD34D79848F1F4561F8210420C9508D6AD337014F0CA43C3FB997810B7B4"
Last-Modified: Tue, 13 Aug 2024 20:58:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Thu, 15 Aug 2024 09:55:35 GMT
Date: Thu, 15 Aug 2024 03:55:35 GMT
Connection: keep-alive

GET johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html

51.89.253.184

200 OK

28 kB

URL User Request GET HTTP/1.1
johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
IP
51.89.253.184:443
ASN
#16276 OVH SAS

Certificate
IssuerLet's Encrypt
Subjectjohndechancie.com
FingerprintD2:C3:97:05:A0:22:A3:69:75:84:FD:3E:11:B7:27:50:FF:9B:C3:23
ValidityMon, 01 Jul 2024 08:03:50 GMT - Sun, 29 Sep 2024 08:03:49 GMT

File type
HTML document, Unicode text, UTF-8 text, with very long lines (7620), with CRLF line terminators
Size
28 kB (28378 bytes)
Hash
076661fd5adfa886e9e41e738d8f7066
4b61cc7efcbbf5cd3899e34466435b537da99928
d55bf195687592cdd50e5619a422c4c81eca86d06f1ba2a87420e9a33f65e922

HTTP Headers

GET /game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html HTTP/1.1
Host: johndechancie.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Date: Thu, 15 Aug 2024 03:55:36 GMT
Server: Apache
Last-Modified: Wed, 14 Aug 2024 14:31:33 GMT
ETag: "6eda-61fa5952bbb40"
Accept-Ranges: bytes
Content-Length: 28378
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
2e927d0de15cedea73bb80492ce0eab0
dcd5bca2234ee6c32cd9b406a948ec05a7d454f5
a2fae10147c55f7b6b04df24b4d37cc339cb2305705a9d741980b9fe93a3be82

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
2e927d0de15cedea73bb80492ce0eab0
dcd5bca2234ee6c32cd9b406a948ec05a7d454f5
a2fae10147c55f7b6b04df24b4d37cc339cb2305705a9d741980b9fe93a3be82

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET cdn.ampproject.org/v0.js

216.58.207.193

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73122 bytes)
Hash
d9be280c1fc19995983835424d7b0700
83c2c634762b4fb19cac9005919ab9c36daa5e21
416484b2217e26d94420e4f75f62d3fbdb07a81058e6468042ce2542d016340d

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73122
date: Thu, 15 Aug 2024 03:55:36 GMT
expires: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "2af4af216080b72b"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.ampproject.org/v0.js

216.58.207.193

200 OK

73 kB

URL GET HTTP/2
cdn.ampproject.org/v0.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (64654)
Size
73 kB (73122 bytes)
Hash
d9be280c1fc19995983835424d7b0700
83c2c634762b4fb19cac9005919ab9c36daa5e21
416484b2217e26d94420e4f75f62d3fbdb07a81058e6468042ce2542d016340d

HTTP Headers

GET /v0.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 73122
date: Thu, 15 Aug 2024 03:55:36 GMT
expires: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=3000, stale-while-revalidate=1206600
etag: "2af4af216080b72b"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET cdn.ampproject.org/v0/amp-anim-0.1.js

216.58.207.193

200 OK

2.5 kB

URL GET HTTP/2
cdn.ampproject.org/v0/amp-anim-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, ASCII text, with very long lines (6054)
Size
2.5 kB (2467 bytes)
Hash
e58dd372ac23053ff167596c1a5f131a
e43f776dc09b7b32760070e70c718fb081553ae7
ecc9a646c8fecfa4e12f32a06800977bd039ce2e91d1cc7c94b3c7b7b0999979

HTTP Headers

GET /v0/amp-anim-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-type: text/javascript; charset=UTF-8
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2467
date: Thu, 15 Aug 2024 03:55:36 GMT
expires: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=604800, stale-while-revalidate=604800
etag: "5afdd0604fa01f3c"
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
3ab07625f6a24402156fc3854d417fde
1633cfa8506f3f73fe4a019a2cf4254eea0ff474
6692997e0fbfc87979b265a778ceb69c3911b1189d9bbf78c25fda53efacc54b

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET fonts.googleapis.com/css2?family=Rubik:wght@400;700&display=swap

142.250.74.106

200 OK

1.2 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Rubik:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT

File type
gzip compressed data, max compression
Size
1.2 kB (1230 bytes)
Hash
461588b9875158be16d06fbda142b3f3
cc4fb7c1ab5281aa236d21c8a5c97f914521267c
5b22cf519d13a27d5fe4a867b635a69302dc620585267aa20ee736eaa46787c0

HTTP Headers

GET /css2?family=Rubik:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 03:55:36 GMT
date: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET cdn.ampproject.org/rtv/012406131415000/v0/amp-auto-lightbox-0.1.js

216.58.207.193

200 OK

3.0 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012406131415000/v0/amp-auto-lightbox-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, ASCII text, with very long lines (7690)
Size
3.0 kB (2974 bytes)
Hash
0569f5d97040f52dd37c136665c3bbc8
e81b585d7e5c22b5abfc3fb26a35dee2f7a900d0
08c034b981c8dbe7aace6c041f2b7dec193b2aff8d219ae8c3fc80f1aceda1de

HTTP Headers

GET /rtv/012406131415000/v0/amp-auto-lightbox-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 2974
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 10 Aug 2024 03:02:03 GMT
expires: Sun, 10 Aug 2025 03:02:03 GMT
cache-control: public, max-age=31536000
age: 435214
etag: "3bb766b5672b9f2f"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET cdn.ampproject.org/rtv/012406131415000/v0/amp-loader-0.1.js

216.58.207.193

200 OK

3.9 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012406131415000/v0/amp-loader-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, ASCII text, with very long lines (12614)
Size
3.9 kB (3935 bytes)
Hash
947c8ebf4577f8279b5fa8804e306b3e
65c56d71c8977bf8d572c7f8bbc6424cb05a6a6e
e4a0b30928c7d7d1d18cd4c7f43d23f2615cbcc92a0457a4e5bf04b9e3e73353

HTTP Headers

GET /rtv/012406131415000/v0/amp-loader-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 3935
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Aug 2024 07:25:17 GMT
expires: Thu, 14 Aug 2025 07:25:17 GMT
cache-control: public, max-age=31536000
etag: "db107aa2d6068f23"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 73820
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET lost-saga.my.id/uploads/konakneon.png

104.21.76.171

200 OK

199 kB

URL GET HTTP/2
lost-saga.my.id/uploads/konakneon.png
IP
104.21.76.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectlost-saga.my.id
Fingerprint94:98:C5:20:0E:2E:D2:20:A0:B8:8A:52:DA:96:17:9F:97:08:9D:1E
ValidityMon, 29 Jul 2024 04:34:49 GMT - Sun, 27 Oct 2024 04:34:48 GMT

File type
PNG image data, 1200 x 1200, 8-bit colormap, non-interlaced
Size
199 kB (198644 bytes)
Hash
29a89579572f595c99c7beac9806f32f
ed8c83406eea910f9a62eb832102305570b90150
7d9e3fde49b88cf9e9bc0c9b9720d06fda48994f572fdba2f4045ad80d1cbb37

HTTP Headers

GET /uploads/konakneon.png HTTP/1.1
Host: lost-saga.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 15 Aug 2024 03:55:37 GMT
content-type: image/png
content-length: 198644
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 07:09:49 GMT
last-modified: Mon, 13 May 2024 07:19:14 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 333947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6jx%2BvIu9zTnkqUqG%2BNEJ0Vr0j%2BpotfqX2H6EIdjRiZFERR4yQ4O0WX5EHmu%2FmfIXg77O98nULs8nR1qn2U0QU3ritRbn3yWSI3UsgFBrIv3zzMxBmyRMgc%2Bm1tEER3RNmJ4%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b3640055b86712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/poetsenone/v3/ke8hOgIaMUB37xCgvCntWuIoofM.woff2

216.58.207.227

200 OK

30 kB

URL GET HTTP/2
fonts.gstatic.com/s/poetsenone/v3/ke8hOgIaMUB37xCgvCntWuIoofM.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 29588, version 1.0
Size
30 kB (29588 bytes)
Hash
344f7401643e23cfbbe898f30a8d89d0
04ca8c651169250c117506edcd461025a8848732
67615be3277b2bf831cae1967690c19b233a2e8050b9c3973568d51962839c1b

HTTP Headers

GET /s/poetsenone/v3/ke8hOgIaMUB37xCgvCntWuIoofM.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 29588
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Aug 2024 07:50:27 GMT
expires: Sat, 09 Aug 2025 07:50:27 GMT
cache-control: public, max-age=31536000
age: 504310
last-modified: Wed, 01 May 2024 20:34:22 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET lost-saga.my.id/uploads/2840204.png

104.21.76.171

200 OK

22 kB

URL GET HTTP/2
lost-saga.my.id/uploads/2840204.png
IP
104.21.76.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectlost-saga.my.id
Fingerprint94:98:C5:20:0E:2E:D2:20:A0:B8:8A:52:DA:96:17:9F:97:08:9D:1E
ValidityMon, 29 Jul 2024 04:34:49 GMT - Sun, 27 Oct 2024 04:34:48 GMT

File type
PNG image data, 512 x 512, 8-bit/color RGBA, non-interlaced
Size
22 kB (22179 bytes)
Hash
b7924be0491dab0ccb9c00772a923ee8
61f7e0a78c8682192a637fd05787c509d570c923
f95e762684051ddb879355447e54e543393a7aca361ba205437d1ff23949699b

HTTP Headers

GET /uploads/2840204.png HTTP/1.1
Host: lost-saga.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 15 Aug 2024 03:55:37 GMT
content-type: image/png
content-length: 22179
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 07:09:49 GMT
last-modified: Sun, 07 Apr 2024 09:46:01 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 333947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fUZvrdVoeZmKDGXClz%2B6EYwegSEkKU8Zl5V02C1jNT%2F1MHoOiuIke8Ae%2Fc2NZgGRIyVC3%2FTHS7eTlKIJKbDUf%2BtU5kKGG3wDohjzI%2FIugNj5hZHXPqFPdNXaFqfACOJdkRk%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b3640058b99712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35448, version 1.0
Size
35 kB (35448 bytes)
Hash
5c138044f30b8c78119264cd744e686a
7605e014180d49087785350bd1906c16c389690d
47374cb7d373f9a8450e1237c80bc5fe68c61fbf0cdf958df7a298143b7dd445

HTTP Headers

GET /s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Aug 2024 14:42:24 GMT
expires: Thu, 14 Aug 2025 14:42:24 GMT
cache-control: public, max-age=31536000
age: 47593
last-modified: Thu, 29 Jun 2023 16:14:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET lost-saga.my.id/uploads/%E2%80%94Pngtree%E2%80%94lightning-neon-blue-glow_6706173.png

104.21.76.171

200 OK

677 kB

URL GET HTTP/2
lost-saga.my.id/uploads/%E2%80%94Pngtree%E2%80%94lightning-neon-blue-glow_6706173.png
IP
104.21.76.171:443
ASN
#13335 CLOUDFLARENET

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectlost-saga.my.id
Fingerprint94:98:C5:20:0E:2E:D2:20:A0:B8:8A:52:DA:96:17:9F:97:08:9D:1E
ValidityMon, 29 Jul 2024 04:34:49 GMT - Sun, 27 Oct 2024 04:34:48 GMT

File type
PNG image data, 1200 x 1200, 8-bit/color RGBA, non-interlaced
Size
677 kB (676666 bytes)
Hash
ed0a722de6dce362d252836bf247f71f
47a821bc6b2c26292aadc7c831b54e18d52df022
974a92db3087c391f53f2c51daad9de4511ddab9faa5a9c5eb0c90fabd1640a7

HTTP Headers

GET /uploads/%E2%80%94Pngtree%E2%80%94lightning-neon-blue-glow_6706173.png HTTP/1.1
Host: lost-saga.my.id
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
date: Thu, 15 Aug 2024 03:55:37 GMT
content-type: image/png
content-length: 676666
cache-control: public, max-age=604800
expires: Sun, 18 Aug 2024 07:09:49 GMT
last-modified: Mon, 13 May 2024 07:16:33 GMT
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 333947
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=s%2Fv6uPyKupg0VHEEyZXvktmcHPabxxKp%2BbhwE0nk1kxYjyihvXqqNQNEMM7M2JfCTrPCiazFTWt9UHh5PxHwZDHDHIZUUnfslBlaxo6MaXprQFGf5EyGr1UCgsI8T53Vrps%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 8b3640058b9f712a-OSL
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2

216.58.207.227

200 OK

35 kB

URL GET HTTP/2
fonts.gstatic.com/s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 35448, version 1.0
Size
35 kB (35448 bytes)
Hash
5c138044f30b8c78119264cd744e686a
7605e014180d49087785350bd1906c16c389690d
47374cb7d373f9a8450e1237c80bc5fe68c61fbf0cdf958df7a298143b7dd445

HTTP Headers

GET /s/rubik/v28/iJWKBXyIfDnIV7nBrXw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 35448
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Aug 2024 14:42:24 GMT
expires: Thu, 14 Aug 2025 14:42:24 GMT
cache-control: public, max-age=31536000
age: 47593
last-modified: Thu, 29 Jun 2023 16:14:39 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET fonts.gstatic.com/s/balsamiqsans/v14/P5sZzZiAbNrN8SB3lQQX7PncyWUyNYhsAg.woff2

216.58.207.227

200 OK

29 kB

URL GET HTTP/2
fonts.gstatic.com/s/balsamiqsans/v14/P5sZzZiAbNrN8SB3lQQX7PncyWUyNYhsAg.woff2
IP
216.58.207.227:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subject*.gstatic.com
FingerprintF2:15:54:4E:F3:58:7F:5A:14:9D:F2:45:37:0E:B1:A6:48:C6:2B:14
ValidityTue, 30 Jul 2024 12:49:30 GMT - Tue, 22 Oct 2024 12:49:29 GMT

File type
Web Open Font Format (Version 2), TrueType, length 28924, version 1.0
Size
29 kB (28924 bytes)
Hash
140ac8043a9da0638e4f126deb79ceac
3e486cb6e2fd7869bedf36d73d353713d9f54168
adf831a4491b84bc989fa0e59e0df0d9ece8f6717d43c153b102925e9a78584f

HTTP Headers

GET /s/balsamiqsans/v14/P5sZzZiAbNrN8SB3lQQX7PncyWUyNYhsAg.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 28924
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Aug 2024 12:40:18 GMT
expires: Thu, 14 Aug 2025 12:40:18 GMT
cache-control: public, max-age=31536000
age: 54919
last-modified: Thu, 24 Aug 2023 20:59:01 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

o.pki.goog/wr2

142.250.74.131

472 B

URL
o.pki.goog/wr2
IP
142.250.74.131:0
ASN
#15169 GOOGLE

File type
data
Size
472 B (472 bytes)
Hash
20f29d79156ce6e076ffc03423170212
42848421099a36aa9d89589eedaa66d475bbc3f3
f0aac7512893e26edfb16b570f2ea6223a1bf2e0d61acb473acb9bfe1dc1da6e

HTTP Headers

POST /wr2 HTTP/1.1
Host: o.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache

HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Aug 2024 03:55:37 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN

GET cdn.ampproject.org/rtv/012406131415000/v0/amp-lightbox-gallery-0.1.js

216.58.207.193

200 OK

19 kB

URL GET HTTP/3
cdn.ampproject.org/rtv/012406131415000/v0/amp-lightbox-gallery-0.1.js
IP
216.58.207.193:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectmisc-sni.google.com
Fingerprint4B:7C:58:54:1E:37:00:49:2F:34:3E:8D:4F:E4:7F:BF:0E:37:83:3C
ValidityTue, 30 Jul 2024 12:35:39 GMT - Tue, 22 Oct 2024 12:35:38 GMT

File type
JavaScript source, Unicode text, UTF-8 text, with very long lines (65526)
Size
19 kB (19066 bytes)
Hash
408b3a469ff2810753c137ce43b70eb2
3173ac7903a49f0be0145c87a2a6319d73758f6e
7cfa68c00b8e7e71feb75a06b2677316115bfc82646a631bf30d68055beac176

HTTP Headers

GET /rtv/012406131415000/v0/amp-lightbox-gallery-0.1.js HTTP/1.1
Host: cdn.ampproject.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://johndechancie.com
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers

HTTP/3 200 OK
accept-ranges: bytes
content-encoding: br
access-control-allow-origin: *
content-security-policy: default-src * blob: data:; script-src blob: https://cdn.ampproject.org/lts/ https://cdn.ampproject.org/rtv/ https://cdn.ampproject.org/sw/ https://cdn.ampproject.org/v0.js https://cdn.ampproject.org/v0.mjs https://cdn.ampproject.org/v0/ https://cdn.ampproject.org/viewer/; object-src 'none'; style-src 'unsafe-inline' https://cdn.ampproject.org/rtv/ https://cdn.materialdesignicons.com https://cdnjs.cloudflare.com/ajax/libs/font-awesome/ https://cloud.typography.com https://fast.fonts.net https://fonts.googleapis.com https://maxcdn.bootstrapcdn.com https://p.typekit.net https://pro.fontawesome.com https://use.fontawesome.com https://use.typekit.net; report-uri https://csp.withgoogle.com/csp/amp
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="amphtml-china-available"
report-to: {"group":"amphtml-china-available","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/amphtml-china-available"}]}
timing-allow-origin: *
content-length: 19066
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Aug 2024 09:41:04 GMT
expires: Tue, 12 Aug 2025 09:41:04 GMT
cache-control: public, max-age=31536000
age: 238473
etag: "2f5a3dac033d3252"
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000

GET djdies-image.cloud/uploads/logo-dc/gacorgileeeeeeeeee-(1).png

0.0.0.0

0 B

URL GET
djdies-image.cloud/uploads/logo-dc/gacorgileeeeeeeeee-(1).png
IP
0.0.0.0:0
ASN
#0

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/logo-dc/gacorgileeeeeeeeee-(1).png HTTP/1.1
Host: djdies-image.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET pakkumis-image.cloud/uploads/6541514545.jpg

0.0.0.0

0 B

URL GET
pakkumis-image.cloud/uploads/6541514545.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/6541514545.jpg HTTP/1.1
Host: pakkumis-image.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET fonts.googleapis.com/css2?family=Poetsen+One:wght@400;700&display=swap

142.250.74.106

200 OK

804 B

URL GET HTTP/2
fonts.googleapis.com/css2?family=Poetsen+One:wght@400;700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT

File type
ASCII text, with very long lines (822), with no line terminators
Size
804 B (804 bytes)
Hash
48a0c5980a2c4c15c5f5154884446dd5
ab92efae477e1e22612f447c5c45e4d3ab714aff
dee23affbea48e397678d1b7210eb56b6deaeb2586ffa21056b35f0a13d81cfa

HTTP Headers

GET /css2?family=Poetsen+One:wght@400;700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 03:55:36 GMT
date: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

GET djdies-image.cloud/uploads/logo-dc/logo.jpg

0.0.0.0

0 B

URL GET
djdies-image.cloud/uploads/logo-dc/logo.jpg
IP
0.0.0.0:0
ASN
#0

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html

File type

Size
0 B (0 bytes)
Hash
d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

HTTP Headers

GET /uploads/logo-dc/logo.jpg HTTP/1.1
Host: djdies-image.cloud
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

GET fonts.googleapis.com/css2?family=Balsamiq+Sans:wght@700&display=swap

142.250.74.106

200 OK

1.5 kB

URL GET HTTP/2
fonts.googleapis.com/css2?family=Balsamiq+Sans:wght@700&display=swap
IP
142.250.74.106:443
ASN
#15169 GOOGLE

Requested by
https://johndechancie.com/game-online-yang-sudah-dikenal-paling-terbaik-pg-soft-mahjong-ways.html
Certificate
IssuerGoogle Trust Services
Subjectupload.video.google.com
FingerprintC4:3F:12:39:D2:EC:4C:2C:1C:0A:A6:18:8E:2A:97:2C:D8:C2:7E:AF
ValidityTue, 30 Jul 2024 12:49:45 GMT - Tue, 22 Oct 2024 12:49:44 GMT

File type
ASCII text, with very long lines (1515), with no line terminators
Size
1.5 kB (1479 bytes)
Hash
f31c579acf180ecabc755445d37100d4
0b872598bbf739ae5466265b4d9eb34727edd9a2
105003b8a7142f7e5b1755619241178018049f5f3b6da0cbcf3a095fb0618955

HTTP Headers

GET /css2?family=Balsamiq+Sans:wght@700&display=swap HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://johndechancie.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache

HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 15 Aug 2024 03:55:36 GMT
date: Thu, 15 Aug 2024 03:55:36 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2

Report Overview

Domain Summary

Related reports

Network Intrusion Detection Systems

Suricata /w Emerging Threats Pro

Threat Detection Systems

Public InfoSec YARA rules

OpenPhish

PhishTank

mnemonic secure dns

Quad9 DNS

ThreatFox

JavaScript (5)

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

URL

IP

ASN

Introduced by

Embedded in HTML

Observations

Hash

HTTP Transactions (41)

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN

File type

Size

Hash

HTTP Headers

URL

IP

ASN