r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7c60904d097cde276e4e5632cef1b9f1
4f805026462589345d85e8df2d18eafba6237504
12af026999398f4976749e320667d43da3f99b7a2e8254aca7a410a964a106aa
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "12AF026999398F4976749E320667D43DA3F99B7A2E8254ACA7A410A964A106AA"
Last-Modified: Thu, 24 Nov 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3025
Expires: Fri, 25 Nov 2022 00:08:20 GMT
Date: Thu, 24 Nov 2022 23:17:55 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash af40a2fcf8debb90c3608002da6c907a
3c75d6c0b557a3bd8d5db50155b8d896e852c145
555617a51ee3077552545a29a3baf0b43e8a82367e4c08110ee480ebedc8b523
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5085
Cache-Control: max-age=131881
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Etag: "637f47ef-1d7"
Expires: Sat, 26 Nov 2022 11:55:56 GMT
Last-Modified: Thu, 24 Nov 2022 10:31:11 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash d130218d0e2841f39c99610fe1a2ab90
29fbe1e177ee55c7a61ae0a206afff271cf5f945
6b6d74dccf10c2bc98a91c3388280d7ba1d9596bf8cadd7db0e2f63720b3d152
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Alert, Content-Type, Retry-After, Content-Length
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 24 Nov 2022 23:17:21 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 34
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 260e9998c20d831b66f1029c8f47aac9
716d630f647c54dc69a7f9c63a6cac294b3df7f7
c9951a909f354174f0075a01c01c3c3aa6960983040e328bfbbbea81aeb405c2
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C9951A909F354174F0075A01C01C3C3AA6960983040E328BFBBBEA81AEB405C2"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13298
Expires: Fri, 25 Nov 2022 02:59:33 GMT
Date: Thu, 24 Nov 2022 23:17:55 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain
IP
File type PEM certificate\012- , ASCII text
Hash 9ebddc2b260d081ebbefee47c037cb28
492bad62a7ca6a74738921ef5ae6f0be5edebf39
74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: K9fPuJv4EVqhNlEY0O0Kcm1gnKKazOHDnzpSf8bBGbW2QNDwE1jU8ErHfMRJhBUrORKfhjHD78Q=
x-amz-request-id: Y4RB32TGXC6RZQ36
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 24 Nov 2022 22:43:35 GMT
age: 2060
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 23:17:55 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 01f789642d92b84211d7a9391f4e55af
bfcdc40fa2e82882051aa26c61d81ffd98371506
66e2ca388a8696e08f992e3d34fe75dcccd99a0743605f3bf5e6c1c893750f24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 2a03384abe9f9728677b1f7b876b4694
41c1c401e79ac5b6edc6fc3cce8b4d085c565ac1
744b3562ef1851ca3c0413020ef5c40e71af514e6ff8da065f6ea9f846e70717
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 85c366a970be2cf52f279f054d4c13ea
203d25dc5965e9c45b25948ae4473d09a3e2fdaf
1373f167d86539ac40cfed4722408ded3edd87701107caa70da536dec8278249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 85c366a970be2cf52f279f054d4c13ea
203d25dc5965e9c45b25948ae4473d09a3e2fdaf
1373f167d86539ac40cfed4722408ded3edd87701107caa70da536dec8278249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 85c366a970be2cf52f279f054d4c13ea
203d25dc5965e9c45b25948ae4473d09a3e2fdaf
1373f167d86539ac40cfed4722408ded3edd87701107caa70da536dec8278249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 20:32:38 GMT
expires: Wed, 22 Nov 2023 20:32:38 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 22 Nov 2022 12:53:21 GMT
content-type: text/css
age: 182717
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_email.gif
200 OK 164 B URL HTTP/2 resources.blogblog.com/img/icon18_email.gif
IP
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 164
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 15:02:17 GMT
expires: Tue, 29 Nov 2022 15:02:17 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 18:53:15 GMT
content-type: image/gif
age: 202538
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 14:43:55 GMT
expires: Tue, 29 Nov 2022 14:43:55 GMT
cache-control: public, max-age=604800
last-modified: Mon, 21 Nov 2022 15:52:34 GMT
content-type: image/gif
age: 203640
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bp1.blogger.com/__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg
301 Moved Permanently 292 B URL HTTP/1.1 bp1.blogger.com/__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF, LF line terminators
Hash 2bd3f7a322283f337188d403bb3a2be9
3e45fc80a3c4e5b71d936e0ae0203d5681ba40ff
f877d0da2f8d0a82f4e0e69ef0f9a93f840be61e2ed22455b6b9bb7e85350168
GET /__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg HTTP/1.1
Host: bp1.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://1.bp.blogspot.com/__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 292
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 14:35:01 GMT
Expires: Sat, 24 Dec 2022 14:35:01 GMT
Cache-Control: public, max-age=2592000
Content-Type: text/html; charset=UTF-8
Age: 31374
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Thu, 24 Nov 2022 23:17:55 GMT
expires: Thu, 24 Nov 2022 23:17:55 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ambuyatel-binangkit.blogspot.com/2009/08/pegawai-penyiasat-sprm-tidak-buat.html
200 OK 75 kB URL HTTP/1.1 ambuyatel-binangkit.blogspot.com/2009/08/pegawai-penyiasat-sprm-tidak-buat.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (20275)
Hash 0ebd487aef4636591855fd587bc47668
42427bb17cfcfb40bbf4dd30ce7027ae75f531bd
8dadb93df308c2485c6850c5555c33688ba5ebfb84b26d187d6cf63dfad07a4b
GET /2009/08/pegawai-penyiasat-sprm-tidak-buat.html HTTP/1.1
Host: ambuyatel-binangkit.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 24 Nov 2022 23:17:55 GMT
Date: Thu, 24 Nov 2022 23:17:55 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 08 Nov 2022 17:03:13 GMT
ETag: W/"a7c5221d88a3b5e3f22e150efa58d9391d1f3bbced1b355e4b2fa769163fac09"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 74758
Server: GSE
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 22 Nov 2022 18:59:43 GMT
expires: Wed, 22 Nov 2023 18:59:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 19:52:12 GMT
content-type: text/javascript
age: 188292
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/__fXdPvxOQ8U/Sl8hzis2-3I/AAAAAAAAAeo/F5FfqPLfNjE/S1600-R/mailslot.gif
200 OK 3.6 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Sl8hzis2-3I/AAAAAAAAAeo/F5FfqPLfNjE/S1600-R/mailslot.gif
IP
File type GIF image data, version 89a, 72 x 81\012- data
Hash ea7c294c183f237f515ae4f46bbebe2a
b0b73e92b457a31fddd0745e4ee3899c4abd12c9
297ca7fb21d83958c191c1b267e7067a839cad5135080c207263dc11643a0e21
GET /__fXdPvxOQ8U/Sl8hzis2-3I/AAAAAAAAAeo/F5FfqPLfNjE/S1600-R/mailslot.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="mailslot.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3571
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:55 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v305"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/_EDii1UvLsfY/S0CdPuSOFTI/AAAAAAAAAAU/oiT6x82f8PA/S230/UTM.jpg
200 OK 15 kB URL HTTP/1.1 3.bp.blogspot.com/_EDii1UvLsfY/S0CdPuSOFTI/AAAAAAAAAAU/oiT6x82f8PA/S230/UTM.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 190x230, components 3\012- data
Hash 2a17293b55fd067231d6dc0c79f50b2d
ab3ccdb188316c22eab05176057167fe5647861f
bc0c7e2f5f26b2d062232afb338d1027af0a5485d3f7471c1c47d5bc1c89ce43
GET /_EDii1UvLsfY/S0CdPuSOFTI/AAAAAAAAAAU/oiT6x82f8PA/S230/UTM.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="UTM.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15160
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:55 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v5"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/__fXdPvxOQ8U/Sy9mCCiwXyI/AAAAAAAAAs4/4xvggz0LUy0/S1600-R/kartun+kini.gif
200 OK 5.2 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Sy9mCCiwXyI/AAAAAAAAAs4/4xvggz0LUy0/S1600-R/kartun+kini.gif
IP
File type GIF image data, version 89a, 145 x 145\012- data
Hash f70b1c80fceaaf66c1023d5c8945e5fe
d8941f514cef93b47eb23e4c3ef5e021338f2f89
3ffe1e87f6532c4d6063e844307b01953e51895098239c257353846213e11124
GET /__fXdPvxOQ8U/Sy9mCCiwXyI/AAAAAAAAAs4/4xvggz0LUy0/S1600-R/kartun+kini.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="kartun kini.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5151
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2ef"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/__fXdPvxOQ8U/SoJyNKgyBQI/AAAAAAAAAjk/7c5cBB-DVFE/S1600-R/DoaSelamatDariPenyakit.jpg
200 OK 29 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/SoJyNKgyBQI/AAAAAAAAAjk/7c5cBB-DVFE/S1600-R/DoaSelamatDariPenyakit.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 283x400, components 3\012- data
Hash 1e0c25dcda28c9db0aa1705093463dd1
51ebd131c785238f383f4ce93a7fdf6fc443139c
ede37b30f62e5b88d019cc80a1bf093594fd2ab0cadfafea2a11f62d919b3146
GET /__fXdPvxOQ8U/SoJyNKgyBQI/AAAAAAAAAjk/7c5cBB-DVFE/S1600-R/DoaSelamatDariPenyakit.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="DoaSelamatDariPenyakit.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 28702
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v239"
Content-Type: image/jpeg
Age: 0
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 15 Dec 2022 19:43:44 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 790452
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rVJxNoEqYSQ3baI59c2P9uvTjyI7pXwk5h%2BjksjKOyXgqsiWDHyG84bhg9h%2F3%2FJl%2BeSUS6%2BbpPgSK44bJGa5gs0fAXzgKzPkXxH1t2hht%2FS4s7tlHY%2BZIFMVYrZzK9YX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc610addb4f3-OSL
alt-svc: h2=":443"; ma=60
2.bp.blogspot.com/__fXdPvxOQ8U/Sy8l3n9iD2I/AAAAAAAAAsw/DB8iKpFUHc4/S230/Qardhawi.jpg
200 OK 15 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Sy8l3n9iD2I/AAAAAAAAAsw/DB8iKpFUHc4/S230/Qardhawi.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x157, components 3\012- data
Hash 697d2598fae64e6ff7335fb94b3f8441
f4e2034a6f5da035c0a69b9c896630ee8fa32130
1f180f75d356beeeb3f03d3ff1db5ed77d753ec5cc34c5ad184413ff0b99c903
GET /__fXdPvxOQ8U/Sy8l3n9iD2I/AAAAAAAAAsw/DB8iKpFUHc4/S230/Qardhawi.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Qardhawi.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15220
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2cc"
Content-Type: image/jpeg
Age: 0
3.bp.blogspot.com/__fXdPvxOQ8U/Sl8gVJI9v3I/AAAAAAAAAeg/JWGieFlaOA0/S230/UMNO+HABIS+100K+DI+MU.jpg
200 OK 21 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/Sl8gVJI9v3I/AAAAAAAAAeg/JWGieFlaOA0/S230/UMNO+HABIS+100K+DI+MU.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x157, components 3\012- data
Hash c41a97f76f0aa58b9f6946a61333ad3e
b0b82a10d08823bcc8f110f5694f46d97641e06f
10bbc2945159c92c4029a9b853e23407ede0258676333d077720e706986ded65
GET /__fXdPvxOQ8U/Sl8gVJI9v3I/AAAAAAAAAeg/JWGieFlaOA0/S230/UMNO+HABIS+100K+DI+MU.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="UMNO HABIS 100K DI MU.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 21376
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1e8"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/SzhOi9Aa6SI/AAAAAAAAAtY/_227-1wYIFY/S1600-R/mansuhkan-isa.jpg
200 OK 13 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/SzhOi9Aa6SI/AAAAAAAAAtY/_227-1wYIFY/S1600-R/mansuhkan-isa.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 262x269, components 3\012- data
Hash b8815147ea051454a99af153ecd9d689
a45770171ef7b110a3372cd3906062d66637eff0
f2d52d47e599663e2fb5aa05801efc649901607460f8210922453d599528afe0
GET /__fXdPvxOQ8U/SzhOi9Aa6SI/AAAAAAAAAtY/_227-1wYIFY/S1600-R/mansuhkan-isa.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="mansuhkan-isa.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13380
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2d6"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/__fXdPvxOQ8U/Szi18HoLutI/AAAAAAAAAtg/wTetgYst9KE/S230/MENAKJUBKAN.jpg
200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Szi18HoLutI/AAAAAAAAAtg/wTetgYst9KE/S230/MENAKJUBKAN.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x221, components 3\012- data
Hash 2135fc63120e20b4915d858c7c7603fe
33641c9690054f820af9402e42da7c138b3d0321
2bd18a255f0414f443e3bbe0214e60232df885b932b2dc037fe92228a493d64d
GET /__fXdPvxOQ8U/Szi18HoLutI/AAAAAAAAAtg/wTetgYst9KE/S230/MENAKJUBKAN.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="MENAKJUBKAN.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13823
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2d8"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/__fXdPvxOQ8U/SpsGgIffR3I/AAAAAAAAAj8/8_kkmFBNs54/S150/RAMADHAN+KAREEM.jpg
200 OK 16 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/SpsGgIffR3I/AAAAAAAAAj8/8_kkmFBNs54/S150/RAMADHAN+KAREEM.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x113, components 3\012- data
Hash 0b0a1a39970194ae0c4844ef7415c05c
6a15df26093a6ed9ac28f81462d42eb476e55c34
a7dc63be4899ee9e7f29e4c2d9ed818f6f1ca221b72a75ee1ba6e9f3d49d1fef
GET /__fXdPvxOQ8U/SpsGgIffR3I/AAAAAAAAAj8/8_kkmFBNs54/S150/RAMADHAN+KAREEM.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="RAMADHAN KAREEM.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15680
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/SmhX0N5JFeI/AAAAAAAAAiI/1AoVEr8owhw/S230/P8040076.jpg
200 OK 14 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/SmhX0N5JFeI/AAAAAAAAAiI/1AoVEr8owhw/S230/P8040076.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 172x230, components 3\012- data
Hash 37248f8305ed2fc51d361a6bb40c1e11
4c34188f2e03f1d0a4835bf2e1ff1b5b8a1dd32b
71cadf4e7f5cb34c1e78e16393dd28619287c89f071e123e3d8f0592a56bbbd8
GET /__fXdPvxOQ8U/SmhX0N5JFeI/AAAAAAAAAiI/1AoVEr8owhw/S230/P8040076.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="P8040076.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13911
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v222"
Content-Type: image/jpeg
Age: 0
3.bp.blogspot.com/__fXdPvxOQ8U/Sl3bA93Ac6I/AAAAAAAAAdw/C4BNjDgXRZ0/S230/MANOHARA+DAN+TT.gif
200 OK 60 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/Sl3bA93Ac6I/AAAAAAAAAdw/C4BNjDgXRZ0/S230/MANOHARA+DAN+TT.gif
IP
File type PNG image data, 219 x 146, 8-bit/color RGB, non-interlaced\012- data
Hash d05d9f765d4c372e675379d695e9a030
0f6b0a8d6cdf5a864d81aba0cabe151faadf83fc
45b9284c6262d67617ad949dc3126c3458a3c882d7ac6ad9e10859fbdb0f6b76
GET /__fXdPvxOQ8U/Sl3bA93Ac6I/AAAAAAAAAdw/C4BNjDgXRZ0/S230/MANOHARA+DAN+TT.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="MANOHARA DAN TT.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 59715
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1dc"
Content-Type: image/png
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/SmXCTV8DIUI/AAAAAAAAAhA/-7GHOsW8V-Q/S230/polis+wanita+iran.jpg
200 OK 15 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/SmXCTV8DIUI/AAAAAAAAAhA/-7GHOsW8V-Q/S230/polis+wanita+iran.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x153, components 3\012- data
Hash 9e803def35e32002b3a9b225e266a476
a6bb0344d8215258d3ff344a5e5212e079694310
0111bc8d629370aea8c983484ddaba4dec56bf243c620c06ee10e0e0e7351f2c
GET /__fXdPvxOQ8U/SmXCTV8DIUI/AAAAAAAAAhA/-7GHOsW8V-Q/S230/polis+wanita+iran.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="polis wanita iran.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14663
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v210"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/SmW4eGEUD1I/AAAAAAAAAg4/-ICnoihTtvA/S230/PETUA.JPG
200 OK 20 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/SmW4eGEUD1I/AAAAAAAAAg4/-ICnoihTtvA/S230/PETUA.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x193, components 3\012- data
Hash 8c75340955248de3b48b8aa5164e658e
43985fc5166fe14ae92eb62592a1ecba79c1bf60
60c91ec6778935c36a76834784883a29af77f06fceef83fbf16378df33c2efce
GET /__fXdPvxOQ8U/SmW4eGEUD1I/AAAAAAAAAg4/-ICnoihTtvA/S230/PETUA.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="PETUA.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 20537
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v20e"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/__fXdPvxOQ8U/SpJX99DBBxI/AAAAAAAAAjs/4-_24YXfEVU/S230/URUT+TAPAKAKI.jpg
200 OK 18 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/SpJX99DBBxI/AAAAAAAAAjs/4-_24YXfEVU/S230/URUT+TAPAKAKI.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x224, components 3\012- data
Hash 524002b257c37ff6502755490e33d1c3
5f90ab12c89752d8f38accfb540a80ca18bc88c9
062955d3c10225e5d243ac90e5d35d824a3237cf6439d497b2d9f06131d5922d
GET /__fXdPvxOQ8U/SpJX99DBBxI/AAAAAAAAAjs/4-_24YXfEVU/S230/URUT+TAPAKAKI.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="URUT TAPAKAKI.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 17597
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23b"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/Smbs2PDLFDI/AAAAAAAAAhg/EVwFxLM6XOY/S1600-R/jerat13.jpg
200 OK 42 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/Smbs2PDLFDI/AAAAAAAAAhg/EVwFxLM6XOY/S1600-R/jerat13.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, orientation=[*0*], software=Google], baseline, precision 8, 400x273, components 3\012- data
Hash 0aef9b3bd82ed4f2c4bc2dd7e6b0f25d
7766639759909be06b1cce671c953d521e8ba20b
6eb711079dc1975c49fd67b955174e8a1422e5f08788417b71c6d8a18e367028
GET /__fXdPvxOQ8U/Smbs2PDLFDI/AAAAAAAAAhg/EVwFxLM6XOY/S1600-R/jerat13.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="jerat13.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 42285
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v218"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/Sl3SrLQcPbI/AAAAAAAAAdQ/7z5UHRQUGa4/S230/BATU%2BTERGANTUNG.JPG
200 OK 14 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/Sl3SrLQcPbI/AAAAAAAAAdQ/7z5UHRQUGa4/S230/BATU%2BTERGANTUNG.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x172, components 3\012- data
Hash 274dfc8a151f0c46946e56319c4bbfd5
59a40164a5aec048c2f71871d2c4fd6443d1a723
68828930059aafc7513f722281dd4a08d13d310596e5bf88b135c03e2d9c6786
GET /__fXdPvxOQ8U/Sl3SrLQcPbI/AAAAAAAAAdQ/7z5UHRQUGa4/S230/BATU%2BTERGANTUNG.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="BATU+TERGANTUNG.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13937
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d4"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/__fXdPvxOQ8U/Snv-3wEB-II/AAAAAAAAAjc/Gx-HdvWndNw/S1600-R/sami+solat.jpg
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Snv-3wEB-II/AAAAAAAAAjc/Gx-HdvWndNw/S1600-R/sami+solat.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 221x166, components 3\012- data
Hash 0646a2c3452a513f7ef7584955f07e1d
13f7493a8d1fcd339df81e436270c706ab258ea2
9e0b6d77f8b82b2449c0349f447f406e50e9b31e0f1f274b0cc5535aa131382a
GET /__fXdPvxOQ8U/Snv-3wEB-II/AAAAAAAAAjc/Gx-HdvWndNw/S1600-R/sami+solat.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="sami solat.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10720
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v237"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/__fXdPvxOQ8U/SysdRBlGTdI/AAAAAAAAAso/rbtXWljXXo4/S1600-R/maal+hijrah.gif
200 OK 30 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/SysdRBlGTdI/AAAAAAAAAso/rbtXWljXXo4/S1600-R/maal+hijrah.gif
IP
File type PNG image data, 118 x 114, 8-bit/color RGBA, non-interlaced\012- data
Hash 160603a1dd06c9df90bda5c0dcc12964
2a1864c55b943b025c41dc2064e26baa82f6c6bc
e65406be89f66420d37a12e768eb8ccf258936995f34de9cb343a1df5d02bdea
GET /__fXdPvxOQ8U/SysdRBlGTdI/AAAAAAAAAso/rbtXWljXXo4/S1600-R/maal+hijrah.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="maal hijrah.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30058
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2ca"
Content-Type: image/png
Age: 0
1.bp.blogspot.com/__fXdPvxOQ8U/SzLWB-tlHMI/AAAAAAAAAtQ/jsJu_WcFqKE/S1600-R/bomoh_pijak.jpg
200 OK 19 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/SzLWB-tlHMI/AAAAAAAAAtQ/jsJu_WcFqKE/S1600-R/bomoh_pijak.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 300x179, components 3\012- data
Hash 79a951dc15bbfacddb12b8b7992d5ffd
f5d74c46377a1ad4c32e9b104bc372cdae563c6d
3e41456aa09adfbf0df9d9af30e04ec0f06c86a38ae12307b864f813489af070
GET /__fXdPvxOQ8U/SzLWB-tlHMI/AAAAAAAAAtQ/jsJu_WcFqKE/S1600-R/bomoh_pijak.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bomoh_pijak.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 19218
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2d4"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/__fXdPvxOQ8U/ScOQTB3j4ZI/AAAAAAAAAao/w3fSx10mHLQ/S1600-R/BOIKOT+US.jpg
200 OK 30 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/ScOQTB3j4ZI/AAAAAAAAAao/w3fSx10mHLQ/S1600-R/BOIKOT+US.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x240, components 3\012- data
Hash e9a8213db8380e7f3d54099d32f8a4b4
80842f6b94ec03eafd4749aeb39a2f5dfed3dafc
e9665897b4cd5ec28f135a4f42c76685e3c56ba4f504c07a1014eeb1d19604f0
GET /__fXdPvxOQ8U/ScOQTB3j4ZI/AAAAAAAAAao/w3fSx10mHLQ/S1600-R/BOIKOT+US.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="BOIKOT US.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30506
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1aa"
Content-Type: image/jpeg
Age: 0
3.bp.blogspot.com/__fXdPvxOQ8U/Sl3aYAC3-FI/AAAAAAAAAdo/XpABc3NGUvc/S230/MICHAEL+JACKSON.jpg
200 OK 13 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/Sl3aYAC3-FI/AAAAAAAAAdo/XpABc3NGUvc/S230/MICHAEL+JACKSON.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 174x230, components 3\012- data
Hash 9cbf44357c70711f118f135cd5742b92
ae3236e1ba3c8e86d612f7f440f3417e91fbc8d3
5f12c1aab198ff87b4a84af9f24ee2d2e3970f7bdf412d55eeb1525dafa2df88
GET /__fXdPvxOQ8U/Sl3aYAC3-FI/AAAAAAAAAdo/XpABc3NGUvc/S230/MICHAEL+JACKSON.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="MICHAEL JACKSON.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13227
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1da"
Content-Type: image/jpeg
Age: 0
www.gocurrency.com/v2/gocurrcalc_t.php?id=53
301 Moved Permanently 0 B URL HTTP/1.1 www.gocurrency.com/v2/gocurrcalc_t.php?id=53
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/gocurrcalc_t.php?id=53 HTTP/1.1
Host: www.gocurrency.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 25 Nov 2022 00:17:56 GMT
Location: https://www.gocurrency.com/v2/gocurrcalc_t.php?id=53
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc61f9430b59-OSL
ambuyatel-binangkit.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 ambuyatel-binangkit.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: ambuyatel-binangkit.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/2009/08/pegawai-penyiasat-sprm-tidak-buat.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 14:35:01 GMT
Expires: Thu, 01 Dec 2022 14:35:01 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 24 Nov 2022 13:51:25 GMT
Content-Type: text/javascript
Age: 31375
www.blogger.com/static/v1/widgets/2342155703-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2342155703-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 1217c8e34acb09c7cea97bae4d386ea1
55ee17703d0a7710943e93913bacb49220d98b4b
c2f23437ab938096bf8b40de8b08c4f27bb880b7ef8588481ec5ccc08b58870b
GET /static/v1/widgets/2342155703-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56726
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 21 Nov 2022 16:02:03 GMT
expires: Tue, 21 Nov 2023 16:02:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 21 Nov 2022 00:52:59 GMT
content-type: text/javascript
age: 285353
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/__fXdPvxOQ8U/Sl87SANAkaI/AAAAAAAAAfI/CrnNlCsR_Gs/S150/KENDURI-LUKMAN.jpg
200 OK 9.6 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/Sl87SANAkaI/AAAAAAAAAfI/CrnNlCsR_Gs/S150/KENDURI-LUKMAN.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x100, components 3\012- data
Hash 0fe22e7744fe8dbf1e73494f67e726df
c423aba25071ab23c22a01510c8ebcb4f11e0faa
ed89ce16ac3d640ef3ccac81639e69b0d9b810a3e49de99ec3249a7c39b4cd1c
GET /__fXdPvxOQ8U/Sl87SANAkaI/AAAAAAAAAfI/CrnNlCsR_Gs/S150/KENDURI-LUKMAN.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="KENDURI-LUKMAN.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9589
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1f2"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/__fXdPvxOQ8U/Sl8d0DLrWMI/AAAAAAAAAeI/AoqPRJTQ2bA/S230/SAMSENG.jpg
200 OK 19 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/Sl8d0DLrWMI/AAAAAAAAAeI/AoqPRJTQ2bA/S230/SAMSENG.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 230x153, components 3\012- data
Hash abbdfa7e947dc60f043047ae7ad951c8
565588115dbc3b6010e0dfc279dbf1f537bf3798
4bf5df87f6ec5dbdb777e47be115ec719182f4dc429fa50acccac676eeead018
GET /__fXdPvxOQ8U/Sl8d0DLrWMI/AAAAAAAAAeI/AoqPRJTQ2bA/S230/SAMSENG.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SAMSENG.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 19115
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1e2"
Content-Type: image/jpeg
Age: 0
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 813b15c3004464f6bd39fd0773b04757
bd2218fe1e647f61132aad70d29cd91fd0416f26
446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 23 Nov 2022 09:56:18 GMT
expires: Thu, 23 Nov 2023 09:56:18 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
age: 134498
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/__fXdPvxOQ8U/Sl8VyeNq5xI/AAAAAAAAAeA/v0P8-a3w9tA/S230/BALING.JPG
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/Sl8VyeNq5xI/AAAAAAAAAeA/v0P8-a3w9tA/S230/BALING.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 153x230, components 3\012- data
Hash 72885f5fb5dc7708ece1379a737f2ceb
7128f9e8b08f392fe0283428cefb06f8aea82cc5
7b08ca1a96c71ba6b34474177fb7139d2b1fbed651a082bbb39c0563362b3c8f
GET /__fXdPvxOQ8U/Sl8VyeNq5xI/AAAAAAAAAeA/v0P8-a3w9tA/S230/BALING.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="BALING.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12297
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1e0"
Content-Type: image/jpeg
Age: 0
www.blogger.com/dyn-css/authorization.css?targetBlogID=8477566149422522776&zx=1dffbfc4-ecc0-4197-a4ee-1024bd7d0906
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=8477566149422522776&zx=1dffbfc4-ecc0-4197-a4ee-1024bd7d0906
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=8477566149422522776&zx=1dffbfc4-ecc0-4197-a4ee-1024bd7d0906 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 24 Nov 2022 23:17:56 GMT
last-modified: Thu, 24 Nov 2022 23:17:56 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/__fXdPvxOQ8U/Sl87vDiu4xI/AAAAAAAAAfQ/8HxDTeny15k/S230/SURAT+DAJJAL+1.jpg
200 OK 13 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/Sl87vDiu4xI/AAAAAAAAAfQ/8HxDTeny15k/S230/SURAT+DAJJAL+1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 168x230, components 3\012- data
Hash fb195ffef152459c1c2ac3b354ade630
6a489f0f0401acd4e05e8a0a7d9fdda0b917cb44
591d97e695ecef23b25e924c4a0609059af3a9130c81d5351939a3820c7f6ceb
GET /__fXdPvxOQ8U/Sl87vDiu4xI/AAAAAAAAAfQ/8HxDTeny15k/S230/SURAT+DAJJAL+1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="SURAT DAJJAL 1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12866
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1f4"
Content-Type: image/jpeg
Age: 0
www.widgeo.net/geocompteur/geolive.php?c=geolive_caroussel&adult=0&id=1045701
200 OK 2.0 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geolive.php?c=geolive_caroussel&adult=0&id=1045701
IP
File type ASCII text, with very long lines (2149)
Hash 77514aa2a0128de164900a027e680e8e
6222b185af0a1ef4765de16cb27ada663b14939e
8c38289eec2fe1cc46585df93b3adf645a123075f980d8e2bcdfb744b6df794c
GET /geocompteur/geolive.php?c=geolive_caroussel&adult=0&id=1045701 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: application/javascript
Content-Length: 2032
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Wed, 30-Nov-2022 23:17:54 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 23:17:54 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=O%2BFfmhn6OYIrnic0JLvX1WmVcuujpiAz6ToEHD3iAUsrW%2BkImjK7CIvEe6GAPkZd5%2BEPvbEk81ax3GmH0Scd3TItYqgr8vihXhSaKd%2FfgOhDAEMddVwl1uuxX2qjvfsv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc610b690b4d-OSL
alt-svc: h2=":443"; ma=60
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 22:47:10 GMT
Expires: Thu, 08 Dec 2022 22:47:10 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 1846
3.bp.blogspot.com/__fXdPvxOQ8U/SmSQGlvqytI/AAAAAAAAAgw/uqY7ayJNytA/S1600-R/cashflow.gif
200 OK 8.7 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/SmSQGlvqytI/AAAAAAAAAgw/uqY7ayJNytA/S1600-R/cashflow.gif
IP
File type PNG image data, 162 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash f475469b711079d57729dd02ded19d5a
fabf8a0596dabf728ac43aec717731b475870774
5c6f72d73964a766c9c20bb93f53d6b9a88856bee76059ba8fdf7e82b13d5054
GET /__fXdPvxOQ8U/SmSQGlvqytI/AAAAAAAAAgw/uqY7ayJNytA/S1600-R/cashflow.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="cashflow.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8737
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v20c"
Content-Type: image/png
Age: 0
www.widgeo.net/geocompteur/geocompteur.php?c=geocity1&id=922168&i=60.50.170.101&fonce=&claire=
200 OK 2.2 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocompteur.php?c=geocity1&id=922168&i=60.50.170.101&fonce=&claire=
IP
File type ASCII text, with very long lines (2149)
Hash 2e6696d9f181446c5f0cca21a780a2b8
df9ad163b8f1cbab4ed2d225a63b004c1260802c
e0f39f0bdce91122ed177ad58c65b1593acb6a767509b4e7b9c3abde973e8a7e
GET /geocompteur/geocompteur.php?c=geocity1&id=922168&i=60.50.170.101&fonce=&claire= HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Wed, 30-Nov-2022 23:17:54 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 23:17:54 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Z%2BuEIw1XSYfMJjm0%2BhD5gW9gtxGcD5OIpZ5R%2Bkjvr0XpwhzQ99l7jkq9cW3oK4XLgVIiN1uMO%2BLHUCm59PL%2BGO1X5R1EcUq6G9wdr%2FiwOvE5Av%2BHDaqYkk3Pza670qja"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc610ee90b45-OSL
alt-svc: h2=":443"; ma=60
www.widgeo.net/tracking.php?id=894375
200 OK 20 B URL HTTP/1.1 www.widgeo.net/tracking.php?id=894375
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /tracking.php?id=894375 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
cache-control: public, max-age=180
expires: Thu, 24 Nov 2022 23:20:54 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FlqyZ1Stp7DoWiPByU7FjO0jEV1L6mmMZiePCfcTXmWWFgGKYxomaZBzDfwk9E651fE1B57CVrlgXrr%2B6zU6EWPuBTaKew2lfuCkUfvRvKWHxPVMMecpbojs8zWmudYx"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc610db3b515-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
2.bp.blogspot.com/__fXdPvxOQ8U/SnF7804vuII/AAAAAAAAAi4/QQpcpZxmIHM/S150/H1N12.jpg
200 OK 15 kB URL HTTP/1.1 2.bp.blogspot.com/__fXdPvxOQ8U/SnF7804vuII/AAAAAAAAAi4/QQpcpZxmIHM/S150/H1N12.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x125, components 3\012- data
Hash 63259f0830eef6db1f3ef75ca6517fb5
37e03cfb8ce66e0338239dc5d2af26d6dc773a9f
eaea5833b9737368ac56ef20394f10715d14a22ce11ae47b448c83dc307f5074
GET /__fXdPvxOQ8U/SnF7804vuII/AAAAAAAAAi4/QQpcpZxmIHM/S150/H1N12.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="H1N12.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 15055
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v22e"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 85c366a970be2cf52f279f054d4c13ea
203d25dc5965e9c45b25948ae4473d09a3e2fdaf
1373f167d86539ac40cfed4722408ded3edd87701107caa70da536dec8278249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 85c366a970be2cf52f279f054d4c13ea
203d25dc5965e9c45b25948ae4473d09a3e2fdaf
1373f167d86539ac40cfed4722408ded3edd87701107caa70da536dec8278249
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s10.histats.com/js9.js
200 OK 4.5 kB IP
File type HTML document, ASCII text, with very long lines (11188), with no line terminators
Hash 445b07c690cf56758808b3bb5008645f
3b3d2443db9248eb84964e4cfb89e8ac5e9527a3
bf1d688a6de25030fa52fcf5307114e7f66a56ea50a7b8cf82560473871dd6a9
GET /js9.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
date: Thu, 24 Nov 2022 23:13:18 GMT
last-modified: Thu, 16 Apr 2020 10:44:17 GMT
x-request-id: 422941016
etag: W/"421254336"
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4451
x-iplb-request-id: 5B5A2A9A:37BD_2E69C9F0:0050_637FFBA4_C3F9:11B86
x-iplb-instance: 42472
1.bp.blogspot.com/__fXdPvxOQ8U/SVZTMdkzK1I/AAAAAAAAAZQ/xBMkzYiAwNQ/S1600-R/LOGO+Jom+Sertai+PAS.jpg
200 OK 18 kB URL HTTP/1.1 1.bp.blogspot.com/__fXdPvxOQ8U/SVZTMdkzK1I/AAAAAAAAAZQ/xBMkzYiAwNQ/S1600-R/LOGO+Jom+Sertai+PAS.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 320x224, components 3\012- data
Hash b35b03a11d888145f0bcc97d8a597476
d409c41078490ae67efa5672fdc45c4e57cc582d
a3b862aa53f674617806ef445c1f48c992dd1a28613fe83553daff70c7360563
GET /__fXdPvxOQ8U/SVZTMdkzK1I/AAAAAAAAAZQ/xBMkzYiAwNQ/S1600-R/LOGO+Jom+Sertai+PAS.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="LOGO Jom Sertai PAS.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 18373
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v194"
Content-Type: image/jpeg
Age: 0
www.utusan.com.my/utusan/special/sharlinie/cari_sharlinie.jpg
301 Moved Permanently 0 B URL HTTP/1.1 www.utusan.com.my/utusan/special/sharlinie/cari_sharlinie.jpg
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /utusan/special/sharlinie/cari_sharlinie.jpg HTTP/1.1
Host: www.utusan.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:56 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Fri, 25 Nov 2022 00:17:56 GMT
Location: https://www.utusan.com.my/utusan/special/sharlinie/cari_sharlinie.jpg
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IHiw8VQhrVLYb8M3y7UX0Ro2nsUQIQXBilz8948rJDlaJDpD5zcOhsvtpNQ22JugKrvG%2B1m7Es0MUXuzWnjnXZyKSn5FElPKHH9wdiqNpy%2BwnHzmJ48WMvgM0s2PKSOUJmEu"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc62b8100b45-OSL
alt-svc: h2=":443"; ma=60
4.bp.blogspot.com/__fXdPvxOQ8U/Sl3VwL8AMHI/AAAAAAAAAdg/IsIWxZdwZ6g/S1600-R/gambar+terbakar+dinight+club+thailand.jpg
200 OK 31 kB URL HTTP/1.1 4.bp.blogspot.com/__fXdPvxOQ8U/Sl3VwL8AMHI/AAAAAAAAAdg/IsIWxZdwZ6g/S1600-R/gambar+terbakar+dinight+club+thailand.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 400x267, components 3\012- data
Hash b7707db62e238c35a3b768c9b0e09f06
f14b4cb74d33a8cc9cd2c2d28f4d0e5e47fb2572
c609d2cc0b40a65c1c1bc4fcede15beefca465e65edc8080255f61e122bb2b78
GET /__fXdPvxOQ8U/Sl3VwL8AMHI/AAAAAAAAAdg/IsIWxZdwZ6g/S1600-R/gambar+terbakar+dinight+club+thailand.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="gambar terbakar dinight club thailand.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 31242
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d8"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 65992aeb8efb9a0b8fd59687090733fe
526a2afccc93d32849185d153fafe44b72797df9
b6677984b6c3602d7b62df776158c09a3e57eec4c0edbddafb0624200715f10e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/__fXdPvxOQ8U/StIR4JJ6OnI/AAAAAAAAAos/wPiPuzwhOYU/S1600-R/Mount_kinabalu_panorama.jpg
200 OK 39 kB URL HTTP/1.1 3.bp.blogspot.com/__fXdPvxOQ8U/StIR4JJ6OnI/AAAAAAAAAos/wPiPuzwhOYU/S1600-R/Mount_kinabalu_panorama.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=5, description= , orientation=[*0*], software=Google], baseline, precision 8, 1600x284, components 3\012- data
Hash 3bf73bdc986ea900fd9598baf683e597
e6955a2fb9450356b2016770f28dd952393050b9
b88d4481d799277ff0aa654b08a0bce65fbc0b24be51f0c1524b975ed5d367b9
GET /__fXdPvxOQ8U/StIR4JJ6OnI/AAAAAAAAAos/wPiPuzwhOYU/S1600-R/Mount_kinabalu_panorama.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Mount_kinabalu_panorama.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 38700
X-XSS-Protection: 0
Date: Thu, 24 Nov 2022 23:17:56 GMT
Expires: Fri, 25 Nov 2022 14:35:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v28b"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 6670d72d487e9659c04c74563b60a962
47d621aed97253a6023c4f22a34260a831c406c1
f1bafc7a8db870f25ddb3b368e7b86196d1fffabfcae65a4c04c224a667890cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/comment/frame/8477566149422522776?po=4067594064428885526&hl=ms&blogspotRpcToken=6881888
200 OK 18 kB URL HTTP/2 www.blogger.com/comment/frame/8477566149422522776?po=4067594064428885526&hl=ms&blogspotRpcToken=6881888
IP
Hash fc3798c948c622f301150b6ae6d185c6
cafca2843b7b9f6e0b2803358bb92124e50b5304
3d130045d94a2f581be44f12855d0a1ee4fd1a2fea91ba13e65f67f934d71bfd
GET /comment/frame/8477566149422522776?po=4067594064428885526&hl=ms&blogspotRpcToken=6881888 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 24 Nov 2022 23:17:56 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-resource-policy: same-site
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-X5RavWwR69JjJPT8pS-alw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
report-to: {"group":"BloggerCommentUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/BloggerCommentUi/external"}]}
cross-origin-opener-policy: same-origin; report-to="BloggerCommentUi"
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=l0BM-dLZF4KvkW-krY3mRn96B4Tsa0kQ4TxQUQ9I_M-SQ3Gk3egtttZnQpbE7qj_0sdyCvK4HpiF5T6rD558euRkMbE2p4fOpmzhL7Yn8tvXtUClMHo-2Xe6_dVibkTICIbI-SzpEOF2GRYdiWPLqXLTe2Ybvk_TKpmXJBieCIM; expires=Fri, 26-May-2023 23:17:56 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
netweather.accuweather.com/adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=AFR|EG|EG011|CAIRO|&lang=eng&size=12&theme=&metric=1&target=_self
301 Moved Permanently 176 B URL HTTP/1.1 netweather.accuweather.com/adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=AFR|EG|EG011|CAIRO|&lang=eng&size=12&theme=&metric=1&target=_self
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0d708c8943d419991a6e093a8d8240fa
ca65bdf67b481a5431864aeadfbf4fc51110bd27
4f64cf1c55910af23c6b829974003a3d5b917f9f03b6f611c5c82253f897cf7f
GET /adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=AFR|EG|EG011|CAIRO|&lang=eng&size=12&theme=&metric=1&target=_self HTTP/1.1
Host: netweather.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://corporate.accuweather.com/resources/downloads
x-local-group: hweb
Content-Length: 176
Date: Thu, 24 Nov 2022 23:17:56 GMT
Connection: keep-alive
Set-Cookie: TS01c5781b=0174d4b34835c8defc76b5dc5363a4d788e6f362ee979499c2b8f9e215a9001a446edf6a132a1b41733a70358339e66228737d6f91; Path=/; Domain=.accuweather.com
netweather.accuweather.com/adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=ASI|MY|MY011|KOTA%20KINABALU|&lang=eng&size=12&theme=&metric=1&target=_self
301 Moved Permanently 176 B URL HTTP/1.1 netweather.accuweather.com/adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=ASI|MY|MY011|KOTA%20KINABALU|&lang=eng&size=12&theme=&metric=1&target=_self
IP
ASN #20940 Akamai International B.V.
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0d708c8943d419991a6e093a8d8240fa
ca65bdf67b481a5431864aeadfbf4fc51110bd27
4f64cf1c55910af23c6b829974003a3d5b917f9f03b6f611c5c82253f897cf7f
GET /adcbin/netweather_v2/netweatherV2.asp?partner=netweather&tStyle=normal&logo=1&zipcode=ASI|MY|MY011|KOTA%20KINABALU|&lang=eng&size=12&theme=&metric=1&target=_self HTTP/1.1
Host: netweather.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://corporate.accuweather.com/resources/downloads
x-local-group: hweb
Content-Length: 176
Date: Thu, 24 Nov 2022 23:17:56 GMT
Connection: keep-alive
Set-Cookie: TS01c5781b=0174d4b34814b5c31b6c92425e823232731306367d40cf995ee5b3051af557508505ffe29073830d5d699653fc837819d1b0207fab; Path=/; Domain=.accuweather.com
1.bp.blogspot.com/__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg
200 OK 27 kB URL HTTP/2 1.bp.blogspot.com/__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, software=Google], baseline, precision 8, 230x279, components 3\012- data
Hash beb507f27894d82c87caea6a79ef6ed9
7fa48367cf153e48215f416f5fa2ac3c6ab8f798
a3a7b8b94dd6afa21b608113e5342c7047c35bbcfb8e14399a4b3ae7c51d545c
GET /__fXdPvxOQ8U/R-J-h3VqoDI/AAAAAAAAAPY/ylGWysa44aw/S1600-R/Al-Quran.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="Al-Quran.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 26608
x-xss-protection: 0
date: Thu, 24 Nov 2022 23:17:56 GMT
expires: Fri, 25 Nov 2022 14:35:02 GMT
cache-control: public, max-age=86400, no-transform
etag: "vf6"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
extras3.smartgb.com/b/logo3_88_31.gif
200 OK 1.5 kB URL HTTP/1.1 extras3.smartgb.com/b/logo3_88_31.gif
IP
File type GIF image data, version 89a, 88 x 31\012- data
Hash b3ddca2a79f07bf0e0284b8c274534bd
8cce49fbaaa260461bc672be10b18af37c50a339
34a839a03a3b6d66a3c08d40cb1cb2d7d563275daf5653c1b28446719d60ae8d
GET /b/logo3_88_31.gif HTTP/1.1
Host: extras3.smartgb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Server: Apache
Last-Modified: Wed, 24 May 2006 13:53:39 GMT
Accept-Ranges: bytes
Content-Length: 1494
Cache-Control: no-transform, max-age=1814400, public
Keep-Alive: timeout=2, max=25
Connection: Keep-Alive
Content-Type: image/gif
www.neoworx.net/neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505
301 Moved Permanently 226 B URL HTTP/1.1 www.neoworx.net/neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505
IP
ASN #32133 AS-TING-BACKBONE
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1f3700d25a2aeef2e8d2bdfda7db6736
72070d6eb250bb7ebf3e8cb9d19c885d193116a4
d7f09cdc947b959f5b4fb763c16cddb6a74a0a960230b217e77d4ff56ec10cc7
GET /neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505 HTTP/1.1
Host: www.neoworx.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Location: https://www.tonyadams.com/neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505
Server: Redirector/1.0
Cache-Control: private
www.youtube-nocookie.com/embed/88dtWkrI0xE?hl=en&fs=1&border=1
301 Moved Permanently 0 B URL HTTP/1.1 www.youtube-nocookie.com/embed/88dtWkrI0xE?hl=en&fs=1&border=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/88dtWkrI0xE?hl=en&fs=1&border=1 HTTP/1.1
Host: www.youtube-nocookie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Thu, 24 Nov 2022 23:17:56 GMT
Location: https://www.youtube-nocookie.com/embed/88dtWkrI0xE?hl=en&fs=1&border=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 280 B IP
Hash 5d335a4b2065211a0062025c5ea527b1
08edde7d7d8250b2912342c577600465e3d7e8d4
3b75a760d048030c2b9f966d187192ed0cb16f3488fd4af9d24445710aa23152
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1908
Cache-Control: max-age=124005
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637f3595-118"
Expires: Sat, 26 Nov 2022 09:44:41 GMT
Last-Modified: Thu, 24 Nov 2022 09:12:53 GMT
Server: ECS (amb/6BA9)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 5d335a4b2065211a0062025c5ea527b1
08edde7d7d8250b2912342c577600465e3d7e8d4
3b75a760d048030c2b9f966d187192ed0cb16f3488fd4af9d24445710aa23152
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1908
Cache-Control: max-age=124005
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637f3595-118"
Expires: Sat, 26 Nov 2022 09:44:41 GMT
Last-Modified: Thu, 24 Nov 2022 09:12:53 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash 5d335a4b2065211a0062025c5ea527b1
08edde7d7d8250b2912342c577600465e3d7e8d4
3b75a760d048030c2b9f966d187192ed0cb16f3488fd4af9d24445710aa23152
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1908
Cache-Control: max-age=124005
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637f3595-118"
Expires: Sat, 26 Nov 2022 09:44:41 GMT
Last-Modified: Thu, 24 Nov 2022 09:12:53 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 279 B IP
Hash fa3ba88f6bee30e5a57694e5f49faa65
821c8f9f416c2a69457195026a3e029644ec2c82
b470eddfdeb6599c26456b93b717aa08f71dd73a6882f497a39bcddcdb6f770c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5956
Cache-Control: max-age=159732
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637fb154-117"
Expires: Sat, 26 Nov 2022 19:40:08 GMT
Last-Modified: Thu, 24 Nov 2022 18:00:52 GMT
Server: ECS (ska/F71C)
X-Cache: HIT
Content-Length: 279
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
cf-polished: origSize=4360
cache-control: public, max-age=604800
expires: Thu, 24 Nov 2022 23:55:53 GMT
last-modified: Sat, 01 Oct 2022 00:32:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 602521
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2RBSAGhzOD97Dw1k7ES8CzZqpNHQIoGOxTlksIVpqogic%2FUmsK%2B9lo3b6su%2BWfH3BAvJnJwB%2BYjZWf9qnYamYnvUbu%2BnlkHV7RkP3RtAhTWU%2BKn4fylOdnCuR%2B1Pds17"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc649b5cb524-OSL
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 483bfc5d1869320628555b76cddf8421
fcbfa4fdfb575134f6901f7851e84f430f804491
def873cef83efdb4c0e28e1621fbc5c7e63a59ab7c0535dcf5d168c8068005c2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=145148
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637f8fa0-116"
Expires: Sat, 26 Nov 2022 15:37:04 GMT
Last-Modified: Thu, 24 Nov 2022 15:37:04 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 0754a39846284dd8d4fbfe285a83a6b0
d4deed21378a63659bb0bbf0ab636f838e2fe745
e0f3d9d5e8eef220c221b3002bbf14e86d56c841e9e5bfea2ed83a3b5fbb26cc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
corporate.accuweather.com/resources/downloads
301 Moved Permanently 20 B URL HTTP/2 corporate.accuweather.com/resources/downloads
IP
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
GET /resources/downloads HTTP/1.1
Host: corporate.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: text/html; charset=utf-8
content-length: 20
location: https://app.accuweather.com/app-download
expires: Thu, 24 Nov 2022 23:18:10 GMT
cache-control: max-age=3600
x-redirect-by: redirection
x-rq: arn2 0 2 9980
content-encoding: gzip
age: 3586
x-cache: hit
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Type, Retry-After, Content-Length, Alert, Cache-Control, ETag, Pragma, Expires, Backoff, Last-Modified
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 24 Nov 2022 23:11:11 GMT
cache-control: public,max-age=3600
age: 405
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
alt-svc: clear
X-Firefox-Spdy: h2
neocounter.neoworx-blog-tools.net/neocounter2/neocounter_launcher_8.js
404 Not Found 196 B URL HTTP/1.1 neocounter.neoworx-blog-tools.net/neocounter2/neocounter_launcher_8.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
Analyzer Verdict Alert fortinet Malware
GET /neocounter2/neocounter_launcher_8.js HTTP/1.1
Host: neocounter.neoworx-blog-tools.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 404 Not Found
Date: Thu, 24 Nov 2022 23:17:56 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.widgeo.net/geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com
200 OK 857 B URL HTTP/1.1 www.widgeo.net/geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with CRLF line terminators
Hash 3e7c7c016ca9a8f5b8c7c6ef7238a7c6
8b8d49462d9af5f11aef4dce8afe8661f364c2b4
b77e1daef4a6af1a96bff94a8867c3fe6e043f8d3e2bb43ce32b2f2b1538d52b
GET /geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
set-cookie: idcompteurcc_1045701=done; expires=Fri, 25-Nov-2022 23:17:55 GMT; Max-Age=86400; path=/
online_idcompteurcc_1045701=done; expires=Thu, 24-Nov-2022 23:27:55 GMT; Max-Age=600; path=/
online_1045701=1; expires=Thu, 24-Nov-2022 23:27:55 GMT; Max-Age=600; path=/
pays_1045701=Canada%3D5%23Norway%3D1%23United+states%3D1%23; expires=Thu, 24-Nov-2022 23:27:55 GMT; Max-Age=600; path=/
cache-control: public, max-age=180
expires: Thu, 24 Nov 2022 23:20:55 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PJpYkN%2FI1WZ01JkrscxfPm3ZA2KHsoGNwJUsWec6tuM8lutS5i6JxK1lRfrAZ7Gcaj83BsAc3Qqooty34fShPXLmHyJKwSxS%2BZYUmzCIQbFkX%2BcEfZag1X6oXJ5nj8SR"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc63a8c10b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.widgeo.net/geocompteur/geocity_html.php?id=922168&c=geocity1&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com&fullurl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html
200 OK 2.1 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity_html.php?id=922168&c=geocity1&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com&fullurl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (415)
Hash 487cd51990f2c914163e6e79a7d1e6f6
901d00a98f9be6007ceeb7da872189d39c1e2406
332051f795dee7873265d1f1e2265102ff3d76fe3f88a5a1c91621d2c8a4eabb
GET /geocompteur/geocity_html.php?id=922168&c=geocity1&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com&fullurl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Wed, 22-Feb-2023 23:17:55 GMT; Max-Age=7776000; path=/
pays=Norway; expires=Wed, 22-Feb-2023 23:17:55 GMT; Max-Age=7776000; path=/
ville=Oslo; expires=Wed, 22-Feb-2023 23:17:55 GMT; Max-Age=7776000; path=/
idcompteurcc_922168=done; expires=Fri, 25-Nov-2022 23:17:55 GMT; Max-Age=86400; path=/
online_idcompteurcc_922168=done; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
originecc_922168=United%2BStates%2523Chicago%25235677%257CUnited%2BStates%2523United%2BStates%2BCity%25231860%257CUnited%2BStates%2523Ashburn%2523171%257CMalaysia%2523Kuala%2BLumpur%2523127%257CGermany%2523Germany%2BCity%252344%257CMalaysia%2523Malaysia%2BCity%252336%257CCanada%2523Canada%2BCity%252333%257CBrunei%2BDarussalam%2523Bandar%2BSeri%2BBegawan%252322%257CMalaysia%2523Petaling%2BJaya%252321%257CRussian%2BFederation%2523Moscow%252320%257CMalaysia%2523Puchong%252318%257CMalaysia%2523Kajang%252318%257CRussian%2BFederation%2523Saint%2BPetersburg%252318%257CIreland%2523Dublin%252317%257CMalaysia%2523Shah%2BAlam%252317%257CIndonesia%2523Jakarta%252315%257CUnited%2BStates%2523Seattle%252315%257CGermany%2523Nurnberg%252315%257CUnited%2BStates%2523Columbus%252314%257CMalaysia%2523Kota%2BKinabalu%252313%257CIndonesia%2523Surabaya%252312%257CMalaysia%2523Ipoh%252312%257CRussian%2BFederation%2523Gatchina%252311%257CSingapore%2523Singapore%252311%257CCambodia%2523Cambodia%2BCity%252310%257CFinland%2523Finland%2BCity%252310%257CBangladesh%2523Dhaka%252310%257CMalaysia%2523Johor%2BBahru%252310%257CMalaysia%2523Penang%25238%257C; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
online_922168=1; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
jour_922168=7; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
total_922168=8859; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
bonus_922168=0; expires=Fri, 25-Nov-2022 23:17:55 GMT; Max-Age=86400; path=/
bonus_j_922168=1; expires=Thu, 24-Nov-2022 23:20:55 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Thu, 24 Nov 2022 23:20:55 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5azGlp6LSASvsZNLe5sBG75ijEuc2he%2FlC%2B94stbpyJYcFdR0prUGOQwEZnGsps%2BkUiMJfsJdy8CXkbfHzLB%2FnHwQUh5zO5OV8LcVkyjmgocm%2BHlbw1lbOqEXMJedd5D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc63ed530b4d-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6fe23ae41ec0cbb3d702b1c64028cd13
e0e4d852454a5eae80a797aaa6f0991834dcc19a
47a12f27ec1ec271d17295d822c69d1b49c6a24107f3f7ce06a320688fae7f3c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3be9e5efad300feec3e985661bebb25b
9d955a87f8bc71e117a5603dbbd2528b914c9638
da7a3d47d8f8b3e32fbc411c77a7f6608505d27586204b52e2e2466ca1a55cff
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "DA7A3D47D8F8B3E32FBC411C77A7F6608505D27586204B52E2E2466CA1A55CFF"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20170
Expires: Fri, 25 Nov 2022 04:54:06 GMT
Date: Thu, 24 Nov 2022 23:17:56 GMT
Connection: keep-alive
www.blogger.com/img/logo-16.png
200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 23 Nov 2022 04:27:52 GMT
Expires: Wed, 30 Nov 2022 04:27:52 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 22 Nov 2022 07:51:00 GMT
Content-Type: image/png
Age: 154204
ocsp.digicert.com/
200 OK 471 B IP
Hash fb6949e7abaa473393f7c604691de14f
599681bba3947709baa603bbae2dd7afd04059a4
36c5165526ea9d34de14d36655ed494d0cffaa11ca3271ee47824ac11246ba13
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1354
Cache-Control: max-age=123087
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637f3429-1d7"
Expires: Sat, 26 Nov 2022 09:29:23 GMT
Last-Modified: Thu, 24 Nov 2022 09:06:49 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 279 B IP
Hash fa3ba88f6bee30e5a57694e5f49faa65
821c8f9f416c2a69457195026a3e029644ec2c82
b470eddfdeb6599c26456b93b717aa08f71dd73a6882f497a39bcddcdb6f770c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3913
Cache-Control: max-age=157689
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Etag: "637fb154-117"
Expires: Sat, 26 Nov 2022 19:06:05 GMT
Last-Modified: Thu, 24 Nov 2022 18:00:52 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 43590d3cdc6d87840c90fdfc4320028d
40d15b8a046a321b9edaf9665cc6edbf7e9ae719
b4a9dd9a946e3a00d3f960f24e359f6f112e85f01da9d930f95a29c743ce82e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.searchtruth.com/hijri/hijri.html
301 Moved Permanently 252 B URL HTTP/1.1 www.searchtruth.com/hijri/hijri.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash fa6bc17e352eb841c81a99981a02869c
30a28e696f19b3bcdb8a9b8e3d13edfa07a92486
e3b3559355a4ce5e0a5d1cbea2b56d8d8be8790d4a7adcca18f9de8bc531e14a
GET /hijri/hijri.html HTTP/1.1
Host: www.searchtruth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:56 GMT
Server: Apache
Content-Security-Policy: img-src *;
X-Content-Type-Options: nosniff
Location: https://www.searchtruth.com/hijri/hijri.html
Cache-Control: max-age=600
Expires: Thu, 24 Nov 2022 23:27:56 GMT
Content-Length: 252
Keep-Alive: timeout=5, max=200
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
302 Found 490 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (542)
Hash 6e752985d87012d0dff344dd735fbe04
24de707ad42f02a9422c9f186add80af17361614
25b7f890393efb9597f402a3318468c1fd3c6bc3e66ec8846c8db840f9f52c1e
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D8477566149422522776%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4067594064428885526%26origin%3Dhttp://ambuyatel-binangkit.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.geaHZXF2-fw.O/d%253D1/rs%253DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 24 Nov 2022 23:17:56 GMT
location: https://www.blogger.com/followers.g?blogID=8477566149422522776&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByMwMDAwMDAqByNmZmZkY2MyByMzRDgxRUU6ByMwMDAwMDBCByMwMDAwMDBKByMwMDAwMDBSByMwMDAwMDBaC3RyYW5zcGFyZW50&pageSize=21&postID=4067594064428885526&origin=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.geaHZXF2-fw.O%2Fd%3D1%2Frs%3DAHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-t3Jd52ygOYlwXGk0bQjcng' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 490
server: GSE
set-cookie: __Host-GAPS=1:BHs0dK5bbu-oUDKHvaUJ5jNsq2-SQg:E7FmZgr4DL7Ir9Hm;Path=/;Expires=Sat, 23-Nov-2024 23:17:56 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f7801fe8b983652ae788bc952856c2ed
f3898da21792b146a9f856e87ed3520d76277fb8
faa1bc8a9887e2dc694ff645546ea16cb96ac4bd1b0c460aef95f2cced100d6b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:56 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.islam.gov.my/portal/img/solat.gif
302 Found 229 B URL HTTP/1.1 www.islam.gov.my/portal/img/solat.gif
IP
ASN #141201 Malaysian Administration Modernisation and Management Planning Unit MAMPU
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b48233092b629b9bc6fe9f49e9e0a78b
dc54b1bc0aaf8ab7d0a55cad30a9437919fff011
6dd6980eedec600e943b6709def2f462ff6ed9e083069978210a6d20a99ccfdf
GET /portal/img/solat.gif HTTP/1.1
Host: www.islam.gov.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 302 Found
Date: Thu, 24 Nov 2022 23:17:56 GMT
Server: Apache
Location: https://www.islam.gov.my/portal/img/solat.gif
Content-Length: 229
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 24 Nov 2022 23:17:56 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+693; expires=Sat, 23-Nov-2024 23:17:56 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 24 Nov 2022 23:17:56 GMT
cache-control: private
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 665 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 34e37af4d526255a20a2056cd5f4addf
bcac186d6a49539e69a3f67aa08d0188966f5623
51a2c479b272414cb9d7e1ec62edffbad01217068b73d516d33cb8f26a4fc634
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 24 Nov 2022 23:17:56 GMT
date: Thu, 24 Nov 2022 23:17:56 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 665
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c7e384eaa090f122cf927d92a5d1921a
411069e75b2df97065c4c0f49bda456ca123ec2d
b9c0ec9f6959080bfc3340d0c591283004d8c53f512a84d3a4954430d9aec775
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B9C0EC9F6959080BFC3340D0C591283004D8C53F512A84D3A4954430D9AEC775"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9135
Expires: Fri, 25 Nov 2022 01:50:12 GMT
Date: Thu, 24 Nov 2022 23:17:57 GMT
Connection: keep-alive
www.guidedways.com/freeplugins/dictsearch.php
301 Moved Permanently 162 B URL HTTP/1.1 www.guidedways.com/freeplugins/dictsearch.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /freeplugins/dictsearch.php HTTP/1.1
Host: www.guidedways.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 24 Nov 2022 23:17:56 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.guidedways.com/freeplugins/dictsearch.php
www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_norway.png
200 OK 1.9 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_norway.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash d16fec1fd29d7aa3aeefb6f3a4cf0dd6
29dde63cda69f0cad0f221eb8deeb6d3d44fc0a9
5842826858330305dbe81c87715dd7b6e8479e78be521fb1c8fd385c818bb28b
GET /geocompteur/shadow/48x48/shadow/flag_norway.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 1928
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2216
content-disposition: inline; filename="flag_norway.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 24 Dec 2022 14:35:01 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 31375
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Lfu3fnBpb68XLApMaNjMNtZcZNvwZpUEwc%2B9gGHopqTIkJNBIxSPMPE%2B6xHStvrk3t6ZyxTCHWNbTdHK8i3dSAS1j4HzAzmKiGosnuFuvn61Ho0wQf19JpfA8NhtxpN1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc677e7cb524-OSL
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: p33xJlYoWhh52bghSMVvkw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: rDrkjS1P/4dierZBQTXirRcMSYs=
www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_united%20states.png
200 OK 2.8 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b3e36d6fb2561cf72f9442e8a90587e4
b7cc5df39f5068f451ab9b34128b75c963f4541a
730b39c556b59b20cfa21370deabdaa03a19425b1518784cb9d19e3ecb98b0ad
GET /geocompteur/shadow/48x48/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 2780
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3344
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 24 Dec 2022 21:29:13 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 6523
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FRN4d%2FNGAIcvAebBO3VH7gmT4xhW7NMTNf%2Fzu7O3tfLizEd1ZTf8l8f%2F68mi4lDHtJ1CKRnSMdtSe4CPsGdPpLjTyspWSMXav9ylFEePO%2BkcNQQJM10yi7fSf4fl4jml"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc677e81b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:57 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 13:35:09 GMT
ETag: W/"637cd00d-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BE5apn7HW5%2Fmlo6TBP1vpW%2BWNN3naUzHPMVDQqdWhXODD1V4%2FgGKNeQz6a2ZoIh927nflJmsbrJmNwoMpSHZZGADtEAE5CHUTbkLF42rfPJgFA%2Bxl58DUjhT5Q8oL4EX"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc678f8d0b4d-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sat, 26 Nov 2022 23:17:57 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/shadow/flag_malaysia.png
200 OK 990 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_malaysia.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b69697ab6effe9c72ebc0d4768d9f8bc
806c9c63795f99ce88b81475741fe06b1346a94d
1a473a4d01199896dd76d0882be0aa5e3a9ada7201e4d21f61c74ec3ee5463da
GET /geocompteur/shadow/flag_malaysia.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 990
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1216
content-disposition: inline; filename="flag_malaysia.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 22 Dec 2022 22:04:40 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 177196
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zWShwsRmLoJLOy3KM45ZVYELIx5bWMTCfnQEn1LRSGDSUFBo7mHKtLAJoXFem7ksaMzAktqJrrq2%2BjRX9Txji2mPL9MUpLDA1H1IIBB953To9RcByD9TwGErY%2FUU1gI5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc678e90b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 15 Dec 2022 19:39:07 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 790729
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8nqOV8W9aFnO%2FnzKtWLxRzhsWlQVG0jV8KV2mqxDbgNkxkEBKi6Br3Hr6%2BtKgXWUsB%2FLxJDOBJ52Wqg3qRppI7OXggLfcRTOs7%2Bt2n8wDQBMk%2F9sgcBwyXyH49psqaCd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc678e8fb524-OSL
X-Firefox-Spdy: h2
app.accuweather.com/app-download
200 OK 9.9 kB URL HTTP/2 app.accuweather.com/app-download
IP
ASN #209242 Cloudflare London, LLC
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (974)
Hash 5fd7e1824a93b9762dc66d4aab609950
74e877c0ba1fb03bb88a9295dc5a92f767b2ca3b
a0860b48c4ef9d46437deb3e8a111e8a1ddfddf5886a8bf696197eb557a867b1
GET /app-download HTTP/1.1
Host: app.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/html; charset=UTF-8
cache-control: s-maxage=10800, max-age=0
etag: W/"2a3cac94a71fab56568d8caf22ad340e"
last-modified: Thu, 24 Nov 2022 00:14:16 GMT
link: </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>; rel=preload; as=script,</hs/hsstatic/HubspotToolsMenu/static-1.138/js/index.js>; rel=preload; as=script
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests
edge-cache-tag: CT-78111170588,P-7482826,CW-30063268623,CW-78111884636,E-72101896560,E-78104573007,E-78105494437,E-78112470303,E-78112496684,E-78112671562,E-78112732502,E-78112890690,E-78112994639,E-78113133579,E-78113158831,E-78113335563,E-78113336112,E-78113581974,PGS-ALL,SW-2,TS-78112665345
referrer-policy: no-referrer-when-downgrade
x-hs-cache-config: BrowserCache-5s-EdgeCache-180s
x-hs-cache-control: s-maxage=10800, max-age=0
x-hs-cf-cache-status: HIT
x-hs-combine-css: Disabled
x-hs-content-id: 78111170588
x-hs-hub-id: 7482826
x-hs-prerendered: Thu, 24 Nov 2022 00:14:16 GMT
x-powered-by: HubSpot
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Kg3%2BethAVetNsmHPHCkteKXCeclczmqmHbzje3M0X9qG55lZHPdudejaUOgwhisnD4CLHVul0B1tszBeoqbBhVVjdNvKWzIZsGlt1xh%2FAFsGw3wR9%2BQYDA%2BhG0hBvZHdf%2BCDw5Y%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
set-cookie: __cf_bm=rK_k6BTeDVdSRY1qP5WgPrz1oqZO5.JmaINLyc3xPNA-1669331877-0-AQr4v+vbB53Kky0ipl94hoe2a00gaaQ3uPJnXNTeIVhZG7rQot57IIbEjEivvFHbv9uAS+fR5vIr+zp4CZgqgC0=; path=/; expires=Thu, 24-Nov-22 23:47:57 GMT; domain=.app.accuweather.com; HttpOnly; Secure; SameSite=None
__cfruid=e2dea2f248cfd783537c961d9f8b449a7d15a8ca-1669331877; path=/; domain=.app.accuweather.com; HttpOnly; Secure; SameSite=None
server: cloudflare
cf-ray: 76f5dc673a29b4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-h2-pushed: </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>,</hs/hsstatic/HubspotToolsMenu/static-1.138/js/index.js>
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
200 OK 680 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 852881aef6d6a8bca3123c3201f64c74
0e5ef2c61383bb79c8a6ea068d9a688631d844fa
41c20a2d0dc8fe26ec1e5c7e71b5d82fc09e7ce0bd30db7abb516474f5c186a1
GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 680
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=857
content-disposition: inline; filename="flag_russian%20federation.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 28 Nov 2022 00:43:35 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2327661
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BnLfroQrkKiW%2FO2vJlgmHW0Oqp1YLdGGydpq4GPDbonD%2BuSGXUZ5bbOhiJxoLNh3%2BWNp6U6jBGjpxW5vaUw5CybL5OTViWiJA4UofJSzls8p5O9nYD0NKL6NDwmi4%2FAG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67aea4b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 26 Nov 2022 19:27:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2433004
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bxBPXq%2B%2FrVXoXOfAaE3QgjOVB0mMkow%2FpJgb80BTKfD8ytg4G35Z0qucoK%2BlJD8yJiRDQYSGeGHE9l2obBNOjyjGfYMHEfdOAh4z25XcNmYxa0sjXwWEnv6l6POUsRw2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67ae9eb524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_ireland.png
200 OK 712 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_ireland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e55f246106bcd5ae49ef1a026ec80d3
a5afe18fe64456cbb16e31287f4106228267f584
eaf4b1563a65fb7bd06ace795835a00a4f491a48506996bd65c161d35002351e
GET /geocompteur/shadow/flag_ireland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 712
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=937
content-disposition: inline; filename="flag_ireland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 23 Dec 2022 12:40:14 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 124662
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CZAlvpI9AsG9dF6nQu2bVl8eWLbAykvRx2CveQSD4kfBHmWxfDpNPrlBbjQ5SSbfWtRziA4ncdb6LrlBEc8lHKI9bWM6JOL2%2BkrjqlG%2FQzYSw8famy0uVJRUD9FyWo7u"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67aea9b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_brunei%20darussalam.png
200 OK 990 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_brunei%20darussalam.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4650c67c1a783f767876462b80933b3b
07c179ad72aad48438bc138b8ab6fe384db00f66
5eecac367465648d7246daf36b665135467ca2d3ddcdb8e3aa8fcda67c6ec88f
GET /geocompteur/shadow/flag_brunei%20darussalam.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 990
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1226
content-disposition: inline; filename="flag_brunei%20darussalam.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 17 Dec 2022 02:44:36 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 678800
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=jt2hX8cwIeQLrN7Wr6IpqZ0oBDVVNpsaCZLzfXpgW1npDuZ72w2s6xqD8DzCctGaqKar6TOsbRcYhhmoHGNXRykPDMtBTBmN4FF0qf%2Fv68kv4LyS6ji6YZ5YL27Yjntp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67aea2b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_indonesia.png
200 OK 26 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_indonesia.png
IP
Hash c3516134d88d607229ec712bc38b6fee
cb402d637e2d59fd140458830c5fcd4d5b3f9b71
d8102f3e066b739d1869856b23bca675ee4416fd560d9831bd9d8ab31e51bb18
GET /geocompteur/shadow/flag_indonesia.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 636
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=820
content-disposition: inline; filename="flag_indonesia.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 22 Dec 2022 21:36:37 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 178879
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OTPtGkd%2BgbMCvQ1R3W%2BZPbGVW8HclO8gaKx8qSn8Nrb17mBN6uWPQ8Mh0KCu6P01DNgQdr5DJzogSnkyepk1i9dyKBFYYGpVTtwX%2BOOft470EmIjllFlvR%2BbR%2BJ%2BNImj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67aeafb524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_finland.png
200 OK 724 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_finland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bb42c0a72d24163a22f5b03c19014ca
333c2b0e19045c6162ea18f96cde896e9568c965
57f34fcc77132fcdfc669956854f38ebc6089241f1d5f52d7218d06365c9e750
GET /geocompteur/shadow/flag_finland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 724
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=899
content-disposition: inline; filename="flag_finland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 28 Nov 2022 00:42:59 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2327698
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rmmRX%2BaHnVwLZMS8tVW06Lp1RYgRYMuI%2B4yzwi5MoEW6RUx1S%2FlnyC6yXZR%2BsSyL66fZqCkD1MykLd%2BFynOLkZc9NZkJcuC%2BJTQMVnvJrs2cEqYa5%2BLgIPpQgk1mqjZa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67bec8b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_cambodia.png
200 OK 804 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_cambodia.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 22139beff42b271c6cff19ff56adb3ab
bc9bc3557e5ce891a067ba1391ead96b10b1b7e4
7e44d404a9404add096d97d266777b1689351d8d349a42721c1bad5d2936cd04
GET /geocompteur/shadow/flag_cambodia.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 804
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1031
content-disposition: inline; filename="flag_cambodia.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 21 Dec 2022 07:50:19 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 314857
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8X8%2BpxYh1WdEF6em2q6nw3Ri7R4iwc%2BaYnLJhbDegy88KEhfD8jId3mlwltr%2BIxjA9Hr1zKrhRokARzjrvoolV%2B2yg7H5zS%2BN8kK5HqFawAiOrRdPvFZ%2F585S6QSOemX"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67bec5b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_singapore.png
200 OK 768 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_singapore.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 931d98f74f8bbb82364a40f7c3c5ea3b
f844a679d51126b38659a25e9c71c748da392714
04f122230781518f0b5807695a1c731e33bea9ba0264d612c799485074204627
GET /geocompteur/shadow/flag_singapore.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 768
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=939
content-disposition: inline; filename="flag_singapore.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 04 Dec 2022 21:13:02 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1735494
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A7Muny8rLgwYhcDSHPIBZwqRHhhE6AhjXYV2flYMhOnnyrrzfunzl6J5DvyrbvxBD9cOSwbeNCfy7K4rSZXgGrRnI5mkSwPqhnFGX%2Bjdk8%2BceiMEWF0nZsBJ4WpUM0d2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67bec3b524-OSL
X-Firefox-Spdy: h2
www.e-solat.gov.my/solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor=
302 Moved Temporarily 0 B URL HTTP/1.0 www.e-solat.gov.my/solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor=
IP
ASN #17564 GITN M Sdn. Bhd.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor= HTTP/1.1
Host: www.e-solat.gov.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.0 302 Moved Temporarily
Location: https://www.e-solat.gov.my/solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor=
Server: BigIP
Connection: Keep-Alive
Content-Length: 0
www.widgeo.net/geocompteur/shadow/flag_bangladesh.png
200 OK 824 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_bangladesh.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fda033492cc9954e333f12982d8b3a73
643379f831ee7bb9447262e326f759024bc3c196
93b2111e0009e79e40b18ac53ec7e49d3703956ddf9696f62140f098c219ace6
GET /geocompteur/shadow/flag_bangladesh.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 824
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1024
content-disposition: inline; filename="flag_bangladesh.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 17 Dec 2022 10:26:20 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 651097
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KtiyjkF%2FU6tVn1uu%2FZHOmIBNajKBCqWlZvHxPKxWwwpH%2F529lnJMhKPQoeFpt%2Fnp61lAsUtkhScO%2Fawo8%2FGpGdr6tzbjB0oIv51o4%2F8dmtac3MIcqIGxHrg%2BeLwJ5sZY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc67bee1b524-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 87de3dd2c7dce12b01a337d1554a222a
30e0bd68bbb78995aa8a0686ac02848fd5a7a699
533c21806ef66401ea5faeeb37366a33f19f0e9052b4fb06f22981ec73b21a59
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 21:46:16 GMT
expires: Fri, 24 Nov 2023 21:46:16 GMT
cache-control: public, max-age=31536000
age: 5501
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 19 Nov 2022 12:31:58 GMT
expires: Sun, 19 Nov 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 470759
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.454.0
200 OK 1.9 kB URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.454.0
IP
Hash 9bcf8398f05aaa20d6b1b642504ec58f
7576035daf548e25c28caa519b07c1742ff273bd
35b876a05d688391f840a01ae12cc1c2d6b955d6cafaef0e7f9134e064bbc459
GET /5/3294720/?oo=1&js_build=iclick-v1.454.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ambuyatel-binangkit.blogspot.com
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: application/json
x-trace-id: dec51a2a89b5a0c2a630344c74769b6e
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://ambuyatel-binangkit.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=ff60fad6324e4310b7efcc72fe994da5; expires=Fri, 24 Nov 2023 23:17:57 GMT; path=/; secure; SameSite=None
oaidts=1669331877; expires=Fri, 24 Nov 2023 23:17:57 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4af780570d49b327d38dc189095448e9
1dd4193a2afeb237c5e475b603b1cbd137f7f97e
f25ef2e65d3c2acbba49b5d36c2fe37f8d404fa3b0ea5cdd6c93ac1685a6129a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.comodoca.com/
200 OK 472 B IP
Hash 426848aeb29859eacb5c5f1b1b980fdb
80bc456ac95153dbcad6e04c7bc57f36ffcc41f4
3da0769caaf374a0d445a1bf447f718b08775fb837725692fcc966c8945b2112
POST / HTTP/1.1
Host: ocsp.comodoca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:57 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 00:47:13 GMT
Expires: Tue, 29 Nov 2022 00:47:12 GMT
Etag: "80bc456ac95153dbcad6e04c7bc57f36ffcc41f4"
Cache-Control: max-age=382048,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: REVALIDATED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc687a790af6-OSL
www.widgeo.net/geocompteur/css/jquery.flipster.css
200 OK 1.3 kB URL HTTP/1.1 www.widgeo.net/geocompteur/css/jquery.flipster.css
IP
File type ASCII text, with very long lines (6509), with no line terminators
Hash 45722c8e6cd7fe64f52e4f6991e87e09
db335fdfc38c3c4bf3796f1172f1a81a68a7c853
f4d7170d0a626ffc52cdc54873a7a9a738129a2bec084cec72f23dd03235f0b9
GET /geocompteur/css/jquery.flipster.css HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:57 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=7688
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 23:17:55 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: REVALIDATED
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sd39Hx%2FMNG%2BRdbT6zWtSPwhArPapUHG0Lmaeb7e6ZYGwoEWaYPzRjXvtGrcC6wGTPRx8TdSui%2F2ixOIAa3muMaT5ySZT14WqdTO0Qmkkmh4HuC9Sjz8l3KnrNpI4z7VB"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc676b940b45-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js
IP
File type ASCII text, with very long lines (730)
Size 163 kB (162976 bytes)
Hash 79d18cf4265108d7cecca1bf4ada6109
e51d0285a545381d4c39e9e0292a650ffeeecbb9
59ce7253f371df0833c3f72d4748ef812002b90a49413c56d0ca7c40bb5a0ab6
GET /recaptcha/releases/Km9gKuG06He-isPsP6saG8cn/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 162976
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 24 Nov 2022 09:43:42 GMT
expires: Fri, 24 Nov 2023 09:43:42 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 14 Nov 2022 03:01:59 GMT
content-type: text/javascript
age: 48855
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash aee1eaa2ef2d0edbb0bc5703979e6439
8baa6d1cdd85ce2c5b6e30bd7a60096eeafce4db
095cc1e6ce8241ba22f88cb66d752587909fea3dc66936a72c369ef74b3134f1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash a659d8ea4d41c09e4ee0b78aecbe9853
058798a2d28d8e908396c85b22284dc3d4b15993
8f99e053098b2581e0b6d64c7c59b7cada4062c5cb9107dd45277000d6095a7a
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 24 Nov 2022 23:17:57 GMT
date: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_canada.png
200 OK 2.5 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/48x48/shadow/flag_canada.png
IP
File type PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced\012- data
Hash 1bd83d7e72b4248a5fcc1571c7dd851e
3fee2443dac6d07a9148c3623f54ba7c669b4664
96acd3a63fd0730a3b622be16434ce076eb558bfe0eb4e56348bc64e8877b7d1
GET /geocompteur/shadow/48x48/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/png
content-length: 2501
cache-control: public, max-age=2592000
expires: Sat, 24 Dec 2022 23:17:55 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7PoileGenctF1hszzWyv7iEV4fIJf8gX%2BU%2FA7IAg3fp3KwnNSAKaExp11HDmYacHvev%2FlzbIZ2a1XVJOxyTilwuPs5kRFhOVjIXSbvo4QFF84P4iFh%2FxvjhQlq92jWjj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5dc677e7ab524-OSL
X-Firefox-Spdy: h2
www.gocurrency.com/v2/gocurrcalc_t.php?id=53
404 Not Found 25 B URL HTTP/2 www.gocurrency.com/v2/gocurrcalc_t.php?id=53
IP
Hash 64571a509b4ec40f93cc6e70648f1b06
cbdffc0ef8b3aaa76e28581a83d1ebdc49748f24
a9aa9ec7ef3ec92e7eb52220a9f0cb578ff2ba0a71cb3e9c1a0b828857529fcc
GET /v2/gocurrcalc_t.php?id=53 HTTP/1.1
Host: www.gocurrency.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/html; charset=UTF-8
content-length: 25
cf-ray: 76f5dc658ac5b50b-OSL
set-cookie: WEBSERVER=1; path=/
cf-cache-status: DYNAMIC
x-powered-by: PHP/7.4.30
vary: Accept-Encoding
server: cloudflare
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
File type ASCII text, with very long lines (19102)
Hash bda3f7eeea4a9dfcce61ac9108fa97c0
e8a72786813eca8979622c996ce53932a42fa4be
f012c97d14d02e7ccb59053aeeff3bd5ebc64aa28dc8eb579751315d5fbdb47a
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 24 Nov 2022 23:17:57 GMT
expires: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 75985
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 391d759482ad49fd809aa53ee295bb67
58dc929ee3d4da394331aee451771829b27f655b
1949854da8f0f7be939b8bb062484568d52047754695a0d992b258c40d9e6a19
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1949854DA8F0F7BE939B8BB062484568D52047754695A0D992B258C40D9E6A19"
Last-Modified: Thu, 24 Nov 2022 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21552
Expires: Fri, 25 Nov 2022 05:17:09 GMT
Date: Thu, 24 Nov 2022 23:17:57 GMT
Connection: keep-alive
www.searchtruth.com/hijri/hijri.html
200 OK 4.0 kB URL HTTP/2 www.searchtruth.com/hijri/hijri.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, Unicode text, UTF-8 text
Hash 71bf426563d452a66f9c35863cc1fa19
cb0390fd3991676a1a8d01b473e112ababc24db7
0557b24a5d98990cb6168df960b7deca7de1629671ff5c3c7baac148b8e4f214
GET /hijri/hijri.html HTTP/1.1
Host: www.searchtruth.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-security-policy: img-src *;
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
last-modified: Wed, 15 Aug 2018 00:55:42 GMT
accept-ranges: bytes
cache-control: max-age=600, public, private, must-revalidate
expires: Thu, 24 Nov 2022 23:27:57 GMT
vary: Accept-Encoding,User-Agent
content-encoding: gzip
content-length: 4026
content-type: text/html
date: Thu, 24 Nov 2022 23:17:57 GMT
server: Apache
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dd0dd96ca622aa07354fabdd0da767bf
a29eaa02a81dabed2c12be20a89d65a5a0417524
6a670e9031ec8c94bdc91c47a2d6a4ca2bd95fe032fec28888a8e6d7dc163cb4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:57 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logv33.xiti.com/hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/
302 Found 153 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/
IP
File type HTML document, ASCII text
Hash 2e3ba06c1b60121bd47e6ace140eb38b
549513338244ca4fd316ef269de16f21b0d2c640
a38206c4ff15870f1083a79d4e2da46a11979f7f969020e7f3cb5c1864fc966c
GET /hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 153
date: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=49D75CF5-50B3-4119-BA8D-BCB3C78A2DF9; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly
atidx=49D75CF5-50B3-4119-BA8D-BCB3C78A2DF9; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly; Secure
atid=49D75CF5-50B3-4119-BA8D-BCB3C78A2DF9; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: qweKC4GPMG4N88Jn509eAAMacALRKnB2DMv6tocynoJwFBDu0-1kag==
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/
302 Found 154 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/
IP
File type HTML document, ASCII text
Hash 3c11b39b21f9bd446facdeff3ef77811
af03a7f320330140a498b7aec1bcbc85bba4bac5
c01665c498a808800dd9db750cfd2185c37496d86466f35e831678bf7b97a4dd
GET /hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 154
date: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=8D703F0A-DE99-49DE-BC4C-BD07A77B9B9F; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly
atidx=8D703F0A-DE99-49DE-BC4C-BD07A77B9B9F; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly; Secure
atid=8D703F0A-DE99-49DE-BC4C-BD07A77B9B9F; Path=/; Domain=xiti.com; Expires=Sun, 24 Dec 2023 23:17:57 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: m8lsOWxXBKdYHw0ypR-0Pu5vc0cjV1slylVNedpphBzFDxCKCqDlQQ==
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/img/tmp/earth_blue.png
200 OK 2.6 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/earth_blue.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 007ede82537f2eb7e991ea20c6bc7b78
e6468eec65f4630144c093e01f801fdfa9b192d1
fdba9a1248b8c6cf7a3d1261e0acbb873a4a4caf93bd4647bf6f15ea4e11f9ab
GET /geocompteur/img/tmp/earth_blue.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 2620
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3276
content-disposition: inline; filename="earth_blue.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 08 Dec 2022 19:52:34 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1394722
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=crYwPYL%2B3s%2Byxw1kN9VskvRmCCn8BcOBuwQ5OByFm6nOLCQrEsXY3bC5lTDO%2BVGxtsjrDAbXD6ujbQ42b4Qp%2FfoE5vR0QMXvNc2F2gsMRyz%2BjFhJRdp9cv8Q8ZLZHdKJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc6a4952b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/img/tmp/geocity1.png
200 OK 1.9 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/geocity1.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a1225e99873f9f9abb5d30a6db309bf2
74653f6c83c0043edd4e3b1f86b9fb035a6535d8
f22fcb656951ebd6f5c90ed2f14ee090d832a802a7593fab40421871f5e749d0
GET /geocompteur/img/tmp/geocity1.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity1
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: image/webp
content-length: 1874
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=4455
content-disposition: inline; filename="geocity1.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 19 Dec 2022 13:28:04 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 467393
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lo%2Ftdn1%2BDIM31aEFjaP3rTZGlUT9yDVuG%2FWr536A68T21NfOnt%2FP93xa%2BWqGCCGcKKQk3Z%2BqhqzzLpi%2BjCAr81fLyia3oy3Uxqw1oHN3xrk%2FgkL%2BI33iCev6yGv4RAa1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc6a4953b524-OSL
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
200 OK 26 kB IP
File type HTML document, ASCII text, with very long lines (673)
Hash 0057e823a8d273ca7b631cbddd554eea
c1da2b4786d8eac90ebf0f5789de4c1ace65ce42
17871177d5f9776c96be9c1a77e62e8283c6f61af83837c44f4f16fcc44487a4
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3693
cache-control: public, max-age=604800
expires: Sat, 26 Nov 2022 04:47:23 GMT
last-modified: Wed, 12 Oct 2022 00:08:47 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 498632
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=tGuUwWLcwAREEXjdkB7P%2BfZ%2BViqQR7%2BqTgb%2FOKnwT58dN2Ne8Ji3tXX4LBNJWxvwS96t6nNba7XwpUEqehno3O5jX1zG%2FEX0%2Bn2B0u44J4%2FEM6xMmk7NICrasHlcgnah"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc64ab6eb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/jquery.flipster.min.js
200 OK 3.2 kB URL HTTP/1.1 www.widgeo.net/geocompteur/jquery.flipster.min.js
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (7651)
Hash 84fb99273e451e7e5698d598130720b8
64388d720ed53aa1af84df46cde5046f136e1408
674f791c0a5e491346ece0fbeb197980a7a6b50a23fc33636d0b9a4974106d2a
GET /geocompteur/jquery.flipster.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geolive_html.php?id=1045701&c=geolive_caroussel&size=&nostats=&title=KELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&ref=ambuyatel-binangkit.blogspot.com
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:57 GMT
Content-Type: application/javascript
Content-Length: 3157
Connection: keep-alive
cache-control: public, max-age=604800
expires: Wed, 30 Nov 2022 21:42:07 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 92149
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=t5VQngwMNRkEENt%2B9iS0oARuTWp4NAsAXX5EOX32tp3Tg7qjhaf7JlIZ7u7qBfUDbrSdstq6%2FdhnGXRFx4CJC1E8CEV4SAbGC80rNMMwft5FQjI%2FPmeS6B6anpJxREQC"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc6ada050b4d-OSL
alt-svc: h2=":443"; ma=60
logv33.xiti.com/hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geolive&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9qrBZTcw5w4BQyBtPn55cT6JG9oCFYHhwtYA4SiFYb6RDBkVcY1dvQ==
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geocity1&hl=23x17x56&r=1280x1024x24x24&ref=http://ambuyatel-binangkit.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Thu, 24 Nov 2022 23:17:57 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 410f51195842d9b592b15d6588c36654.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 5DSMM89FlHVKhMCWxU07L8OepM0YMODRsOsj-TdgiDSWRAdf7-c4Sw==
X-Firefox-Spdy: h2
www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
301 Moved Permanently 506 B URL HTTP/1.1 www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (348)
Hash df036085d3cc68c68ab996a5d1c3a7ed
9b6f237ab60f5cac75c2816e388b72376ede1634
476e1b8b539cd1049b86a9c6232fc4fcb783362062816a3822d416815b288ef2
GET /calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg HTTP/1.1
Host: www.calendarlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:57 GMT
Server: Apache
Location: https://www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
Cache-Control: max-age=7200
Expires: Fri, 25 Nov 2022 01:17:57 GMT
Content-Length: 506
Keep-Alive: timeout=2, max=500
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 76f7bda373efd5348f16ffeb2a95fc33
dbdad85fefab4e271a738da3b7bbec8ad3164b46
147e71046df0d1ab382e59c803aa01414982c08fd71ca1322c8c307476598690
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:57 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 28 Nov 2022 21:32:07 GMT
ETag: "dbdad85fefab4e271a738da3b7bbec8ad3164b46"
Last-Modified: Thu, 24 Nov 2022 21:32:08 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc6accbb1c0e-OSL
www.guidedways.com/freeplugins/dictsearch.php
404 Not Found 1.8 kB URL HTTP/2 www.guidedways.com/freeplugins/dictsearch.php
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 5683ae7e6ba41503df5950a4295c6b2f
aacfbcbb1d5fb6a3b39fe03348a90e6faa1c6c40
2fa7b55feadd0c8c506e43fa7ca7a26832edf6eb7deefb29b45f0aacdb482a0e
GET /freeplugins/dictsearch.php HTTP/1.1
Host: www.guidedways.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/html
etag: W/"59e0953e-328"
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee7dfd7708b6cba74ec79aa7266a4e9e
d36a19314341fcb8effad1ba4a3e5d5e444b5294
62f49a3cbefcd2d52fddf4c35d7d978f2cc3482683fe201667d5f34df67ba13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee7dfd7708b6cba74ec79aa7266a4e9e
d36a19314341fcb8effad1ba4a3e5d5e444b5294
62f49a3cbefcd2d52fddf4c35d7d978f2cc3482683fe201667d5f34df67ba13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b7757171f2e55c37975a5bcdeba7a4ae
1ce146a166c3c1d510d26c855321ca4b2426353d
7675dc8e0d7a554bf286e61db1c9546aa6fc7188cb83c3d9bd5beb80c2351fe5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee7dfd7708b6cba74ec79aa7266a4e9e
d36a19314341fcb8effad1ba4a3e5d5e444b5294
62f49a3cbefcd2d52fddf4c35d7d978f2cc3482683fe201667d5f34df67ba13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.guidedways.com/error_docs/server.svg
200 OK 7.4 kB URL HTTP/2 www.guidedways.com/error_docs/server.svg
IP
ASN #24940 Hetzner Online GmbH
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (7416), with no line terminators
Hash 1cc0945f8514ed0f47a5d9d513782bdd
d6989f342cdb9886f48a6d3da3cb71353bbab1ef
f74b80306280ccf2ddc635eb09f5f36070ee5769365b0a7a53ca3747602eebcb
GET /error_docs/server.svg HTTP/1.1
Host: www.guidedways.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.guidedways.com/error_docs/styles.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 23:17:58 GMT
content-type: image/svg+xml
content-length: 7416
last-modified: Fri, 13 Oct 2017 10:28:14 GMT
etag: "59e0953e-1cf8"
x-powered-by: PleskLin
accept-ranges: bytes
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 24 Nov 2022 23:17:58 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 8fb145a9771ac64455ca0425a244d3ba
317756a732e4c0b1690945a75d2c00eda691accb
a879ca1d9d525419111dbcb3cd444daa1b5f868c21c6151e6f23714f50e21f59
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 24 Nov 2022 23:17:58 GMT
server: ESF
cache-control: private
content-length: 31053
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACNPEu9LEG_HD7NjhwFfbe09CvFvhtB_vh-Roo3fPdPQ=s96-p
200 OK 3.6 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACNPEu9LEG_HD7NjhwFfbe09CvFvhtB_vh-Roo3fPdPQ=s96-p
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 96x96, components 3\012- data
Hash bebaede1a6b442848b39b20a54c0ff37
e04eb9e84e2f5e5738603a79fa363177f36a9a31
112c270dbaeceea2fa4858774256600196e3eced16a922cc4003a769816914ed
GET /a-/ACNPEu9LEG_HD7NjhwFfbe09CvFvhtB_vh-Roo3fPdPQ=s96-p HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3619
x-xss-protection: 0
date: Thu, 24 Nov 2022 23:17:58 GMT
expires: Fri, 25 Nov 2022 14:35:13 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2a"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACNPEu-NmZ7jpJuDOj3YWsbr1D5th3lLAHt0maiTOkVez2Q=s96-p
200 OK 23 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACNPEu-NmZ7jpJuDOj3YWsbr1D5th3lLAHt0maiTOkVez2Q=s96-p
IP
File type PNG image data, 96 x 96, 8-bit/color RGB, non-interlaced\012- data
Hash 686f47d4155129a024c7f5d95bb9b067
6715667f78c8c8c3505f86837ae8a62e382c1fc2
0996fcde848a81fed15d60c33b6a1190212f4f5659e8fa49075a29047910056c
GET /a-/ACNPEu-NmZ7jpJuDOj3YWsbr1D5th3lLAHt0maiTOkVez2Q=s96-p HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 22562
x-xss-protection: 0
date: Thu, 24 Nov 2022 23:17:58 GMT
expires: Fri, 25 Nov 2022 14:35:13 GMT
cache-control: public, max-age=86400, no-transform
etag: "v5fa7"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/ACNPEu83eae7ier9ttuDS9jSfQoSauYRsWr95MRiqVUZWw=s96-p
200 OK 5.1 kB URL HTTP/2 lh3.googleusercontent.com/a-/ACNPEu83eae7ier9ttuDS9jSfQoSauYRsWr95MRiqVUZWw=s96-p
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 96x96, components 3\012- data
Hash 60682b97409c1fc16f9b65fb1b1b7290
fbabde0646f936b683ee895a5bfeab4bce23f0d7
c874065a0c84dc3efdd19a9677f6602933dda23846fcb543d7520cd954319547
GET /a-/ACNPEu83eae7ier9ttuDS9jSfQoSauYRsWr95MRiqVUZWw=s96-p HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 5130
x-xss-protection: 0
date: Thu, 24 Nov 2022 23:17:58 GMT
expires: Fri, 25 Nov 2022 14:35:13 GMT
cache-control: public, max-age=86400, no-transform
etag: "v147"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.e-solat.gov.my/solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor=
404 Not Found 196 B URL HTTP/1.1 www.e-solat.gov.my/solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor=
IP
ASN #17564 GITN M Sdn. Bhd.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /solat-iframe.php?kod=sbh07&lang=BM&url=URL&font=FONT&fontcolor= HTTP/1.1
Host: www.e-solat.gov.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 404 Not Found
Date: Thu, 24 Nov 2022 23:17:58 GMT
Content-Length: 196
Content-Type: text/html; charset=iso-8859-1
Cache-Control: max-age=84600, public
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
lh3.googleusercontent.com/p/AF1QipNvINhywWEhOaw2UhWgCYG9HWwLQQa1AbnH5zPL=s45-c?key=CMyAws6a_MTdrAE
404 Not Found 904 B URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNvINhywWEhOaw2UhWgCYG9HWwLQQa1AbnH5zPL=s45-c?key=CMyAws6a_MTdrAE
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /p/AF1QipNvINhywWEhOaw2UhWgCYG9HWwLQQa1AbnH5zPL=s45-c?key=CMyAws6a_MTdrAE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ee7dfd7708b6cba74ec79aa7266a4e9e
d36a19314341fcb8effad1ba4a3e5d5e444b5294
62f49a3cbefcd2d52fddf4c35d7d978f2cc3482683fe201667d5f34df67ba13b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/p/AF1QipMWDh3EF6S2DckfxI8__O3lbHSGykQhMjZ7uR0C=s45-c?key=CIbuhcnmlpf2QA
200 OK 4.1 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipMWDh3EF6S2DckfxI8__O3lbHSGykQhMjZ7uR0C=s45-c?key=CIbuhcnmlpf2QA
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 0de62a99d881fd3155252650f05c1219
db6bfba3e75c214a6d59ebb4eb8f89bba4196fef
74507f6bafd04361d09d29ad22a525469e8edf80ac001acdbe6baa99e03dfb00
GET /p/AF1QipMWDh3EF6S2DckfxI8__O3lbHSGykQhMjZ7uR0C=s45-c?key=CIbuhcnmlpf2QA HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v49"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 4132
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipPW_saGYKjeM8ZUChkk6wr8WkzBHQx7roQJPlpH=s45-c?key=CKWon4Ot8qHp_gE
200 OK 5.4 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipPW_saGYKjeM8ZUChkk6wr8WkzBHQx7roQJPlpH=s45-c?key=CKWon4Ot8qHp_gE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash a077b2ac183fb92f2df124935f386e29
4d5d581ee6325a2733370884e43e710445cd17c3
7f4a7b1bf7fc02f6602dc1aad2548aac25145272af31770d6eceb605079d13a6
GET /p/AF1QipPW_saGYKjeM8ZUChkk6wr8WkzBHQx7roQJPlpH=s45-c?key=CKWon4Ot8qHp_gE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vf3"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 5362
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
forum.ozkorallah.com/sing/69.gif
404 Not Found 8.8 kB URL HTTP/1.0 forum.ozkorallah.com/sing/69.gif
IP
Hash 864a4a8f37cff90dc2e64ee2f237a2d1
30ea9c36240dbe714bfd876db797f0badc8ee3bb
571c04f35d7843bf039eeddaac55724652d79efe9db27523996a410a32600314
GET /sing/69.gif HTTP/1.1
Host: forum.ozkorallah.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
www.widgeo.net/geocompteur/geowidget_js.js
200 OK 6.1 kB URL HTTP/2 www.widgeo.net/geocompteur/geowidget_js.js
IP
File type ASCII text, with very long lines (866)
Hash be3199fb927b908744d2e265f142448f
18e8ee6771a60ed8274c82e8f075121f7d9b9181
d6a5745b5895cf5776ae356525eff22670c2d9a1e124461cd2984006fba4ab74
GET /geocompteur/geowidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2217
cache-control: public, max-age=604800
expires: Tue, 29 Nov 2022 12:50:42 GMT
last-modified: Thu, 13 Feb 2020 12:35:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 210434
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=s6NwoWPwk8NjidN58uhHfKH03LfGT%2FiGp08iWK1ubcKUH6bSgf%2FS7Y5FAO9w0uwtzQa8RxS5%2B0txzO4hfMNlYl4KEcEGyaVlruVvAr2SVxDKFs65XH2doRyINbna25e3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc6a495bb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNbNa4CvWE315YzqSr6UrI87xQ4GIJLAkSBINhf=s45-c?key=CNi7wMXThtvTWQ
200 OK 4.0 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNbNa4CvWE315YzqSr6UrI87xQ4GIJLAkSBINhf=s45-c?key=CNi7wMXThtvTWQ
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash d6bf92641944e9b2fdad263761ccd77c
94920392b7fa1d01afaa428c891631c7ab481c84
edbdfa5e5e2f202c16f70fe7f60042d291b826e333b114bac105e0addf702213
GET /p/AF1QipNbNa4CvWE315YzqSr6UrI87xQ4GIJLAkSBINhf=s45-c?key=CNi7wMXThtvTWQ HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v90c"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 3995
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
vortex.accuweather.com/adcbin/netweather_v2/backgrounds/spring1_240x420_bg.jpg
301 Moved Permanently 176 B URL HTTP/1.1 vortex.accuweather.com/adcbin/netweather_v2/backgrounds/spring1_240x420_bg.jpg
IP
ASN #1299 Telia Company AB
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 0d708c8943d419991a6e093a8d8240fa
ca65bdf67b481a5431864aeadfbf4fc51110bd27
4f64cf1c55910af23c6b829974003a3d5b917f9f03b6f611c5c82253f897cf7f
GET /adcbin/netweather_v2/backgrounds/spring1_240x420_bg.jpg HTTP/1.1
Host: vortex.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://corporate.accuweather.com/resources/downloads
Server: Microsoft-IIS/10.0
X-Powered-By: ASP.NET
x-local-group: hweb
Content-Length: 176
Date: Thu, 24 Nov 2022 23:17:58 GMT
Connection: keep-alive
Set-Cookie: ak_bmsc=F1E1C6A9F174091ACEE865815B78428D~000000000000000000000000000000~YAAQjIVlX/NYEIGEAQAAEALvqxF+7kXCrKIpwHONZG7pxdcfk/y8powvIIBG0KHzIgmPSIYYi58AWUyyTfK9cBYGtbB+XsBveuu8AHGRk7v9yrQAOlvqXdd6vSPoSlz2CGkVCK6qkiJ8EUo4FhdG3fRfB57E00BRMa+KRNF3wD8E0opb7nnKlzd3LFbX1giLx+2IekMk7FoiEPSDRWM6ctBrBQDUJUIr65wGjO1JOY6/tN6ONutzV3uM89c8PZdTT0ySNzBbnxTjt+G6WUUc5O75ZDu7JoXtjPtpbptCoRByg/gsKlLTSHrlzL2H2xYLT778WSKgVuLh7w==; Domain=.accuweather.com; Path=/; Expires=Fri, 25 Nov 2022 01:17:58 GMT; Max-Age=7200; HttpOnly
lh3.googleusercontent.com/p/AF1QipNC7Ke-AL0jsp40JvjnAQGPykLd9usWAi5XfkHa=s45-c?key=CP743pHN8aa11wE
200 OK 4.0 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNC7Ke-AL0jsp40JvjnAQGPykLd9usWAi5XfkHa=s45-c?key=CP743pHN8aa11wE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 28f67a4ffc5ea72e633c2076737e7dac
1509427a503dd3e6b805afe98d09c4dd551280a6
bdcdd636f3f4ff563bbe636c46a770fb2951f76e5762176106e5dc549f058da0
GET /p/AF1QipNC7Ke-AL0jsp40JvjnAQGPykLd9usWAi5XfkHa=s45-c?key=CP743pHN8aa11wE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 3952
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipP340fMo1mWqauhheEtBrzdiLXiuewPEw4bJl_w=s45-c?key=CPfb0pXR8vXEzgE
200 OK 4.2 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipP340fMo1mWqauhheEtBrzdiLXiuewPEw4bJl_w=s45-c?key=CPfb0pXR8vXEzgE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 7e30ace7462540d3a3efc25023759ba6
33e2671fffcd22ad674e73770249718d223c95c7
19c125b9ad255fb5411254cdbffbef4a61104b8cae84742ee766c9160bf1d375
GET /p/AF1QipP340fMo1mWqauhheEtBrzdiLXiuewPEw4bJl_w=s45-c?key=CPfb0pXR8vXEzgE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2c2"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 4221
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOuz85vR7sftqQZbPL8u_cFVJ86VttjnSAbde6h=s45-c?key=CIWghNSB5p7ZjgE
200 OK 5.1 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOuz85vR7sftqQZbPL8u_cFVJ86VttjnSAbde6h=s45-c?key=CIWghNSB5p7ZjgE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 9c20ec288841aba59ffa54a72bfa1c77
b6e094f921990c56a8d3bcbf636ab7162b4247a4
900da94b49984bd1e2207579a43060fc71ad9d7f6efb597c5a5face193c9743c
GET /p/AF1QipOuz85vR7sftqQZbPL8u_cFVJ86VttjnSAbde6h=s45-c?key=CIWghNSB5p7ZjgE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4d1"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Thu, 24 Nov 2022 23:17:58 GMT
server: fife
content-length: 5067
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2633
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 23:17:58 GMT
Connection: keep-alive
ocsp.globalsign.com/gsrsaovsslca2018
200 OK 1.4 kB URL HTTP/1.1 ocsp.globalsign.com/gsrsaovsslca2018
IP
Hash 1537abebee04467ccebaf81b63b0acee
61337a642ecff6957139c7e34df09e511975f8c8
1ffc544ebf3c2a6ef3d6ca877121a16e2fa3db40e0b684184dbef0ee1f793467
POST /gsrsaovsslca2018 HTTP/1.1
Host: ocsp.globalsign.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 79
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:58 GMT
Content-Type: application/ocsp-response
Content-Length: 1432
Connection: keep-alive
Expires: Mon, 28 Nov 2022 22:09:20 GMT
ETag: "61337a642ecff6957139c7e34df09e511975f8c8"
Last-Modified: Thu, 24 Nov 2022 22:09:21 GMT
Cache-Control: public, no-transform, must-revalidate, s-maxage=3600
CF-Cache-Status: EXPIRED
Accept-Ranges: bytes
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 76f5dc6aca560b55-OSL
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2633
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 23:17:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2633
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 23:17:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6827d82f488045e02e40d6a2fdbae4b3
4944139a4b08769511ffc6aa913857d88a0db7bc
0e4ef6ddef97ec03d43df4c0bada61d792b9f030e4d9fab5bd3cf904aeaa3bc9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0E4EF6DDEF97EC03D43DF4C0BADA61D792B9F030E4D9FAB5BD3CF904AEAA3BC9"
Last-Modified: Thu, 24 Nov 2022 09:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2633
Expires: Fri, 25 Nov 2022 00:01:51 GMT
Date: Thu, 24 Nov 2022 23:17:58 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d43ec6824d4fdc4d31b8c245bf8c5849
81f85633fca39972d8e0bf9a4ec7cd999e54564f
b0e521b23879af86102f46a9ec412faf6345df31a97a7b58880f63f81fdcd0c6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3ad933c0-8cbe-40eb-920c-38b8ae531c9f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7900
x-amzn-requestid: a9d184b1-3b4a-4ca6-9ad2-ce3aac10f422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB91H2IIAMFjGw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe38b-5732361f36c023c22c922ee9;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:07 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: cRreyOCHys8rW4UWA3JSMhtOiiltT6ULxxgi9aLM7sw07UruCXgPkQ==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 6a9b42e38e76b7d4a4044ebe0e0eca08.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 22:13:14 GMT
age: 3884
etag: "81f85633fca39972d8e0bf9a4ec7cd999e54564f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg
200 OK 20 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg
IP
Hash ba7dce577e6a7b580aafee1d6f49ed0f
3c334efb5080b10919001270fdbd365c3aa7d303
150b4a888d4bde947ec6804b7503120f667e0a28b425fa5e2d62724ed5d1222a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd3e55f70-58c6-4585-a420-ac74e1b8c6dd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10679
x-amzn-requestid: aec8d040-d4e6-4185-b71e-7c049617ebc5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b4J3VEM5IAMFtcg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637989c8-42b520ea3af2a2086ad416ad;Sampled=0
x-amzn-remapped-date: Sun, 20 Nov 2022 01:58:32 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: AqpyU32i39pVq4O_-tSo8Bup9eNgoPGBq_lKyeXYUsN1BapLq-xGGg==
via: 1.1 f13aef0c4b52f6f681401f232d03eb68.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 06:12:03 GMT
age: 61555
etag: "2ec124224738807229328a3ade6ca493ccf4b287"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 7d0105e45becaf777227cac49e320321
d279a0b70061fe3d8268f1e69c515c0c4439dc80
ea9571213d9a57318cde036c108d4c973c627ce4cd225534ee246349ed4ba3a9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4ba10698-9bc6-45a1-b97d-7209a0a31f7c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5211
x-amzn-requestid: 706d0037-bbff-417a-9fa3-8ebbbf7b4df1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIB8wFOToAMF12Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637fe384-01b6908212b2ab9c5caa34a0;Sampled=0
x-amzn-remapped-date: Thu, 24 Nov 2022 21:35:00 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JbjUiHcVu2ytN848RqI8Ygkd0R9YCnq_OeFdc5Y5JTymA2k9HN4lZA==
via: 1.1 26ca01ec7377e425b59b6a08cb1ec342.cloudfront.net (CloudFront), 1.1 82ea95080f526df99896343fb7269b06.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 21:35:01 GMT
etag: "d279a0b70061fe3d8268f1e69c515c0c4439dc80"
content-type: image/jpeg
age: 6177
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 841a4b110022a99ddea6f7bf66df0fa1
126771b86638108050cf57c0d12faa27f80f0edb
240fbffc1f9104433297d3ff7afba2d0b58d7f1b13d9a9260a1bad25216665db
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1dd98515-d0af-440a-8f3d-4c9986928081.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4309
x-amzn-requestid: 47c2739d-73c5-4d91-914c-fe635cb09772
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b1U8xGxgIAMF-qQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63786851-6fbe19dc5c4c20dd657604e3;Sampled=0
x-amzn-remapped-date: Sat, 19 Nov 2022 05:23:29 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: j_8oVo464QMWMnmkxQJIDRhaIVmwhzCTHe4A57OdmaUr9HcyTtBUjg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 2750b94b402c92287d764b5fa115a042.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 05:04:28 GMT
age: 65610
etag: "126771b86638108050cf57c0d12faa27f80f0edb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
200 OK 4.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4006a9037ab5f28dca62b0aa7a704c41
74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b
556ae6516a1f272a96569a3637858292731a34e82672b682f6e7442ca68f4b1d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F44e0daff-bc52-4621-aa2f-d9c59da29c1c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3955
x-amzn-requestid: 42c8d309-a8d2-47cc-8d97-c7fa3a63f8cd
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCM9NGJHoAMF4sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637d8eba-2a06cda9346bd02c46955444;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 03:08:42 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ESacQ13nZwlbUKiNnwl6AxqC9ar8cxPctKLMFWS86aB3ZGsbxG0ZOA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 112d82578d402a38d8d02e8b857617e0.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 04:22:08 GMT
age: 68150
etag: "74cb2ccd6ae38b171bfbe5a74f0eccb09aa3836b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6e0ab1-c4cf-40e6-973b-bb3db1a860e8.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6e0ab1-c4cf-40e6-973b-bb3db1a860e8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c6b9b5ebc32235ed8f3e15df013963f0
46ee95ebee3d60f64d2b7f568673b13ea27a42a3
4fdf6f239f6931442d93a00acd8af1f5192f77143885945c27e137ef3683338e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3e6e0ab1-c4cf-40e6-973b-bb3db1a860e8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11586
x-amzn-requestid: 30d340e5-328d-4f00-8cd4-3cb6e2b50265
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: b8JtyEIHoAMFdnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637b2324-09bb4d434ff852b456537e15;Sampled=0
x-amzn-remapped-date: Mon, 21 Nov 2022 07:05:08 GMT
x-amz-cf-pop: SEA19-C3
x-cache: Hit from cloudfront
x-amz-cf-id: TYDelnop2OJO_fQdmSzyZJLYx94FU1GxYpDjWCTp3moRS7qzibvTSA==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 548adcda884eed02304ba5d6a1d7f514.cloudfront.net (CloudFront), 1.1 google
date: Thu, 24 Nov 2022 07:56:21 GMT
age: 55297
etag: "46ee95ebee3d60f64d2b7f568673b13ea27a42a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.calendarlabs.com/calendars/web-content/images/orchid.jpg
200 OK 21 kB URL HTTP/2 www.calendarlabs.com/calendars/web-content/images/orchid.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, xresolution=62, yresolution=70, resolutionunit=2, software=Paint.NET v3.36], baseline, precision 8, 180x370, components 3\012- data
Hash 7118a1b52ddf8a3756e3d23d7afcaf05
b694966ad76e47a27f3a05fc58ded98b5a464cc6
619436833a11135412026ccf42ff6a2e24889a64ac961410480e1a8b721dd60a
GET /calendars/web-content/images/orchid.jpg HTTP/1.1
Host: www.calendarlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
last-modified: Sat, 15 Nov 2014 19:13:38 GMT
accept-ranges: bytes
content-length: 20857
cache-control: max-age=2592000
expires: Sat, 24 Dec 2022 23:17:58 GMT
link: <https://www.calendarlabs.com/calendars/web-content/images/orchid.jpg>; rel="canonical"
content-type: image/jpeg
date: Thu, 24 Nov 2022 23:17:58 GMT
server: Apache
X-Firefox-Spdy: h2
www.ukhwah.com/topblog/button.php?u=abdinabu
301 Moved Permanently 0 B URL HTTP/1.1 www.ukhwah.com/topblog/button.php?u=abdinabu
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /topblog/button.php?u=abdinabu HTTP/1.1
Host: www.ukhwah.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.4.33
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
X-Redirect-By: WordPress
Vary: Accept-Encoding
Location: https://www.ukhwah.com/topblog/button.php?u=abdinabu
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vS%2FFYAMTsRRjiLIxiu%2BMJaWqN1oE0VNNaCada2Jr0ncpSkEHvdOV72eQMLc9QRhUvhhrU%2BW%2B7jL8T%2FqT8bsd4PIh8peMFH5KfUGf636U25i%2BH2O1dKa29lJVHz%2Bi4suf3w%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc62ddc90af6-OSL
alt-svc: h2=":443"; ma=60
www.islam.gov.my/portal/img/solat.gif
301 Moved Permanently 0 B URL HTTP/2 www.islam.gov.my/portal/img/solat.gif
IP
ASN #141201 Malaysian Administration Modernisation and Management Planning Unit MAMPU
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /portal/img/solat.gif HTTP/1.1
Host: www.islam.gov.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 23:17:58 GMT
server: Apache
x-powered-by: PHP/7.4.27
pragma: no-cache
expires: Wed, 17 Aug 2005 00:00:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0
x-content-type-options: nosniff
location: https://www.islam.gov.my/ms/portal/img/solat.gif
last-modified: Thu, 24 Nov 2022 23:17:58 GMT
content-length: 0
content-type: text/html; charset=utf-8
set-cookie: b7f6bc5c05493a9b0097659750e45769=3m3n6qk8nv0ma2hcjsb66p3kqm; path=/; HttpOnly
X-Firefox-Spdy: h2
www.tonyadams.com/neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505
301 Moved Permanently 0 B URL HTTP/1.1 www.tonyadams.com/neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505
IP
ASN #140576 VPSBlocks Pty Ltd
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /neocounter/neocounter2/neoworx_tracker.php?registered_id=50505&counter_id=50505 HTTP/1.1
Host: www.tonyadams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 301 Moved Permanently
Date: Thu, 24 Nov 2022 23:17:58 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Expires: Wed, 11 Jan 1984 05:00:00 GMT
Cache-Control: no-cache, must-revalidate, max-age=0
Location: https://www.tonyadams.com
Content-Length: 0
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=UTF-8
ocsp.digicert.com/
200 OK 279 B IP
Hash 548242f97037e00e0f9cf18b15ad6717
0a1c8d3a7fc36ef9b19dae588c7cde8391967e98
e1f07cf9175d941143f2ef84944b84a808c012c7eb1093891efc4bd813a01eb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:17:58 GMT
Server: ECS (amb/6B91)
Content-Length: 279
e1.o.lencr.org/
200 OK 345 B IP
ASN #20940 Akamai International B.V.
Hash 3be9e5efad300feec3e985661bebb25b
9d955a87f8bc71e117a5603dbbd2528b914c9638
da7a3d47d8f8b3e32fbc411c77a7f6608505d27586204b52e2e2466ca1a55cff
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 345
ETag: "DA7A3D47D8F8B3E32FBC411C77A7F6608505D27586204B52E2E2466CA1A55CFF"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20167
Expires: Fri, 25 Nov 2022 04:54:06 GMT
Date: Thu, 24 Nov 2022 23:17:59 GMT
Connection: keep-alive
ocsp.digicert.com/
200 OK 280 B IP
Hash e38e74658bc09f31293e68f2fd628762
aadc5b43ce978177f8fb2d5ba7ab8417421c8f91
93c3977f649fea81454e1d7206240bed42a5091240a7c8e35917e12f91884243
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5693
Cache-Control: max-age=124556
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:18:00 GMT
Etag: "637f28f7-118"
Expires: Sat, 26 Nov 2022 09:53:56 GMT
Last-Modified: Thu, 24 Nov 2022 08:19:03 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash e38e74658bc09f31293e68f2fd628762
aadc5b43ce978177f8fb2d5ba7ab8417421c8f91
93c3977f649fea81454e1d7206240bed42a5091240a7c8e35917e12f91884243
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5693
Cache-Control: max-age=124556
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:18:00 GMT
Etag: "637f28f7-118"
Expires: Sat, 26 Nov 2022 09:53:56 GMT
Last-Modified: Thu, 24 Nov 2022 08:19:03 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 280
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 0a5c1b54daca67c400e76b7224ae5521
2583cebe55e8d1bfe6c921d595d8d36cf480ff2f
941e5441730c4558040e0decdec018ff15dad6abc6be4858c6417f2e941dbcbd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "941E5441730C4558040E0DECDEC018FF15DAD6ABC6BE4858C6417F2E941DBCBD"
Last-Modified: Thu, 24 Nov 2022 05:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=16262
Expires: Fri, 25 Nov 2022 03:49:02 GMT
Date: Thu, 24 Nov 2022 23:18:00 GMT
Connection: keep-alive
my.rtmark.net/gid.js?userId=ff60fad6324e4310b7efcc72fe994da5
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=ff60fad6324e4310b7efcc72fe994da5
IP
File type JSON data\012- , ASCII text
Hash 712e5c2d8c0e60223a20e1889f330605
80e99f8e939f3b664c22ace1072b63c450922276
c50f14be8d216775b8f6362bac7a6391caaca2a32176aee7bb3409894d9af9b7
GET /gid.js?userId=ff60fad6324e4310b7efcc72fe994da5 HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://ambuyatel-binangkit.blogspot.com
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 23:18:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://ambuyatel-binangkit.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=ff60fad6324e4310b7efcc72fe994da5; expires=Fri, 24 Nov 2023 23:18:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube-nocookie.com/
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube-nocookie.com
vary: origin, referer, x-origin
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Thu, 24 Nov 2022 23:18:00 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
200 OK 110 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/GenerateIT
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 8ae3573202e0190b8694c73e0027c14b
6a2ad5910431cc6435f22cd8be0a84387136f2da
e59219d42d27aabf11355bc78b56d55376b8d419a5c459fd83071d6b741f9a59
POST /$rpc/google.internal.waa.v1.Waa/GenerateIT HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 1003
Origin: https://www.youtube-nocookie.com
Connection: keep-alive
Referer: https://www.youtube-nocookie.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Thu, 24 Nov 2022 23:18:00 GMT
server: ESF
cache-control: private
content-length: 110
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube-nocookie.com
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 548242f97037e00e0f9cf18b15ad6717
0a1c8d3a7fc36ef9b19dae588c7cde8391967e98
e1f07cf9175d941143f2ef84944b84a808c012c7eb1093891efc4bd813a01eb9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 24 Nov 2022 23:18:00 GMT
Last-Modified: Thu, 24 Nov 2022 23:17:58 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 279
onmarshtompor.com/?rb=3vTU6jm8V0qZEuEXfSuuiu795rfZjttpyQm7hZkp4oyg5vCps2Sy8ImQL8ArLcSTzipATgwOYuw8z8gBEsq4AU8TM_sc-pU08EZybULMgoLcf8XFTK0YPInYWnzp2DJWz0fKBqAjKF_w_NPSH__t_AjFPcoZ5LkVjEoupln4RnrLmTUDRy9bX_7YxN2kjQ6rB0wYynLNL7QnRzRDdgiKm_g2JEiqNQGv5lGKSUejxboOlj0lyqTN85WW5yFnVn8bNZDIgw%3D%3D&request_ab2=96003&zoneid=3294720&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=13&pl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=6e9828e5-590c-44bb-96fe-8e8da9b3bc68&userId=ff60fad6324e4310b7efcc72fe994da5&m=link
200 OK 2.0 kB URL HTTP/1.1 onmarshtompor.com/?rb=3vTU6jm8V0qZEuEXfSuuiu795rfZjttpyQm7hZkp4oyg5vCps2Sy8ImQL8ArLcSTzipATgwOYuw8z8gBEsq4AU8TM_sc-pU08EZybULMgoLcf8XFTK0YPInYWnzp2DJWz0fKBqAjKF_w_NPSH__t_AjFPcoZ5LkVjEoupln4RnrLmTUDRy9bX_7YxN2kjQ6rB0wYynLNL7QnRzRDdgiKm_g2JEiqNQGv5lGKSUejxboOlj0lyqTN85WW5yFnVn8bNZDIgw%3D%3D&request_ab2=96003&zoneid=3294720&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=13&pl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=6e9828e5-590c-44bb-96fe-8e8da9b3bc68&userId=ff60fad6324e4310b7efcc72fe994da5&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2637), with no line terminators
Hash a8bdba0bbad4d313cfce623c7e3c93f2
a0b1631dfd921e648a863b047e9d25af39c28411
4dc0730d9ca575928a49f7d07e68e7c3ae6fc64c6861b2ca53e0ff4ec749c58d
GET /?rb=3vTU6jm8V0qZEuEXfSuuiu795rfZjttpyQm7hZkp4oyg5vCps2Sy8ImQL8ArLcSTzipATgwOYuw8z8gBEsq4AU8TM_sc-pU08EZybULMgoLcf8XFTK0YPInYWnzp2DJWz0fKBqAjKF_w_NPSH__t_AjFPcoZ5LkVjEoupln4RnrLmTUDRy9bX_7YxN2kjQ6rB0wYynLNL7QnRzRDdgiKm_g2JEiqNQGv5lGKSUejxboOlj0lyqTN85WW5yFnVn8bNZDIgw%3D%3D&request_ab2=96003&zoneid=3294720&js_build=iclick-v1.454.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=13&pl=http%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.454.0&bs=6e9828e5-590c-44bb-96fe-8e8da9b3bc68&userId=ff60fad6324e4310b7efcc72fe994da5&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://ambuyatel-binangkit.blogspot.com/
Origin: http://ambuyatel-binangkit.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 24 Nov 2022 23:18:00 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: e50c20820d6b3d1bd97ba76482a6375f
Access-Control-Allow-Origin: http://ambuyatel-binangkit.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=ff60fad6324e4310b7efcc72fe994da5; expires=Fri, 24 Nov 2023 23:18:00 GMT; path=/
oaidts=1669331880; expires=Fri, 24 Nov 2023 23:18:00 GMT; path=/
syncedCookie=true; expires=Thu, 01 Dec 2022 23:18:00 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
ocsp.sectigo.com/
200 OK 471 B IP
Hash ba98650cceb17a47ac0f34de3c3c2574
78e21c7a408c8ef34065defa22dbcb926f562d9b
8a311b1ba0b977b6b27fd02043471f29e6608bbe3c2cabe904b09f5f04510d98
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:18:00 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Tue, 22 Nov 2022 01:33:16 GMT
Expires: Tue, 29 Nov 2022 01:33:15 GMT
Etag: "78e21c7a408c8ef34065defa22dbcb926f562d9b"
Cache-Control: max-age=353114,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 76f5dc7c6eddb50c-OSL
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain;charset=UTF-8
Content-Length: 951
Origin: http://ambuyatel-binangkit.blogspot.com
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 24 Nov 2022 23:18:00 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://ambuyatel-binangkit.blogspot.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
www.tonyadams.com/
200 OK 143 kB IP
ASN #140576 VPSBlocks Pty Ltd
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- assembler source text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (8047), with CRLF, LF line terminators
Size 143 kB (143300 bytes)
Hash 42f7512c85177ba900170c20f98e2ced
bf6ab11893a584e74d94416e41d92df0345a3a24
6711efd12cc1a3835d51aee3f4993fc0239ebf0bffc3037397813a28d6c43c1a
GET / HTTP/1.1
Host: www.tonyadams.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:17:58 GMT
Server: Apache
X-Powered-By: PHP/5.6.40
Link: <https://www.tonyadams.com/wp-json/>; rel="https://api.w.org/", <https://www.tonyadams.com/wp-json/wp/v2/pages/17055>; rel="alternate"; type="application/json", <https://www.tonyadams.com/>; rel=shortlink
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Transfer-Encoding: chunked
Content-Type: text/html; charset=UTF-8
www.ukhwah.com/topblog/button.php?u=abdinabu
301 Moved Permanently 196 B URL HTTP/2 www.ukhwah.com/topblog/button.php?u=abdinabu
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /topblog/button.php?u=abdinabu HTTP/1.1
Host: www.ukhwah.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 24 Nov 2022 23:18:00 GMT
content-type: text/html; charset=UTF-8
location: https://ukhwah.com/topblog/button.php?u=abdinabu
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
x-redirect-by: WordPress
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VKBvwenXVY5iO8p0%2FTS6TU5m8mKatImqjaaSSRZ%2B06B1VNQzqt9Qx8%2F%2BM9w3%2BKuve3j659X0eJlcxqij7FeQzUN%2FQVp6mZ%2BxSjKvLi4jwqs%2Buax27Ry67dVggGOpWqu1Mg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc7399e10b02-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.utusan.com.my/utusan/special/sharlinie/cari_sharlinie.jpg
404 Not Found 7.9 kB URL HTTP/2 www.utusan.com.my/utusan/special/sharlinie/cari_sharlinie.jpg
IP
Hash 7d4a4f488c822383ad27c5a5cbb485dd
4945565052622cc84529e40f907cde64fc0f0b4b
9900948639b3d30ecf1a1a7c99b24640e78c6d328c23c9b54d33b00c9c885a03
GET /utusan/special/sharlinie/cari_sharlinie.jpg HTTP/1.1
Host: www.utusan.com.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 23:17:59 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding,Cookie
cf-edge-cache: cache,platform=wordpress
x-ua-compatible: IE=edge
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://www.utusan.com.my/wp-json/>; rel="https://api.w.org/"
x-cache: MISS
cf-cache-status: BYPASS
set-cookie: X_CACHE_KEY=6011080c37fdae71af058c6dd81913ed; Expires=Fri, 25 Nov 2022 23:17:57 GMT; Path=/;
ppwp_wp_session=1bf66a3a901c0d19a2c61603b7425324%7C%7C1669333677%7C%7C1669333317; expires=Thu, 24-Nov-2022 23:47:57 GMT; Max-Age=1800; path=/
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=9l2eSXYM8ohUDukgFl3IKBdvNQEyQjXoBQIpCqHr%2BgOQE9JKde7WIFo2L2efjbl0sXSEUHVmIO8TvgnPInZxHZZVovFIbZGGoOgOjtHUNGBUJuHE7s0C1VaFJDZefzG%2FSbyx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc65f97cb523-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash b39d09bbca8e6027fb3862c8fd58d8cc
e71733bd444dc689b70f0eaf9f0af8d97bca28ea
8ffeb1845732ab60f2d14627d633c85950edcdcfd071ef6d50511b9c5c89b859
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8FFEB1845732AB60F2D14627D633C85950EDCDCFD071EF6D50511B9C5C89B859"
Last-Modified: Wed, 23 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9705
Expires: Fri, 25 Nov 2022 01:59:46 GMT
Date: Thu, 24 Nov 2022 23:18:01 GMT
Connection: keep-alive
cb.amazingcounters.com/counter.php?i=2070470&c=6211723
500 Internal Server Error 919 B URL HTTP/1.1 cb.amazingcounters.com/counter.php?i=2070470&c=6211723
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 32ceea11fc35e4f088dc03667dc7f8d3
62dad34c356d2a2646ec8aeda979da5cf53aa0de
4e702384d73cc10415f35acf12bc8c42d44a2f93c53c8f335ad6f4b21093e386
GET /counter.php?i=2070470&c=6211723 HTTP/1.1
Host: cb.amazingcounters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
HTTP/1.1 500 Internal Server Error
Date: Thu, 24 Nov 2022 23:18:02 GMT
Content-Type: text/html; charset=iso-8859-1
Transfer-Encoding: chunked
Connection: keep-alive
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MV8qfo1SoOT5Z7NUOIjWjgjMdxJIHY6eKugI6zPKglvebZcUuFRheZHuDDK5o6E0Vmnm4QeSR8KQvR8wz%2BvGiZ%2Fx%2BhyUJtw1HHl1opAqDIf4VACgqnFdDceaXSLaZQN7iELxezmFBwne"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 76f5dc84bc98b512-OSL
alt-svc: h2=":443"; ma=60
s4.histats.com/stats/198174.php?198174&@f16&@g1&@h1&@i1&@j1669331881071&@k0&@l1&@mKELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&@n0&@o1000&@q0&@r0&@s441&@ten-US&@u1280&@b1:-68522250&@b3:1669331881&@b4:js9.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&@w
200 OK 47 B URL HTTP/1.1 s4.histats.com/stats/198174.php?198174&@f16&@g1&@h1&@i1&@j1669331881071&@k0&@l1&@mKELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&@n0&@o1000&@q0&@r0&@s441&@ten-US&@u1280&@b1:-68522250&@b3:1669331881&@b4:js9.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&@w
IP
File type ASCII text, with no line terminators
Hash 06b05ae9614bafae9b0b09cfbeed559e
9b087683529b7b89a117b2d5cbb35a93e7dcbaca
a60692031ce09be66be89784e8b0214c0f8b6f52cd8fd6a36129a635ffe41ad2
GET /stats/198174.php?198174&@f16&@g1&@h1&@i1&@j1669331881071&@k0&@l1&@mKELUARGA%20AMBUYAT%20EL-BINANGKIT%20V2%3A%20Pegawai%20penyiasat%20SPRM%20tidak%20buat%20catatan%20semasa%20soal%20siasat%20Teoh&@n0&@o1000&@q0&@r0&@s441&@ten-US&@u1280&@b1:-68522250&@b3:1669331881&@b4:js9.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fambuyatel-binangkit.blogspot.com%2F2009%2F08%2Fpegawai-penyiasat-sprm-tidak-buat.html%23&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Thu, 24 Nov 2022 23:18:02 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 47
Connection: close
s10.histats.com/counters/cc_441.js
200 OK 10 kB URL HTTP/2 s10.histats.com/counters/cc_441.js
IP
File type HTML document, ASCII text, with very long lines (21649), with no line terminators
Hash 299e3ff0539f0f426ab62c11cf7601dc
48ac2e974179e4a87b59804a0aea81044ccd831d
4d9f7b6e0780433547c3556f584c5a617f2592fdbcbfff3ea5f90e75db14a474
GET /counters/cc_441.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 22:44:58 GMT
content-type: text/javascript
etag: W/"-1709007155"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 837716202
content-encoding: br
x-grace: full
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 10515
X-Firefox-Spdy: h2
www.islam.gov.my/ms/portal/img/solat.gif
404 Not Found 0 B URL HTTP/2 www.islam.gov.my/ms/portal/img/solat.gif
IP
ASN #141201 Malaysian Administration Modernisation and Management Planning Unit MAMPU
GET /ms/portal/img/solat.gif HTTP/1.1
Host: www.islam.gov.my
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 23:17:58 GMT
server: Apache
x-powered-by: PHP/7.4.29
cache-control: no-cache
pragma: no-cache
x-content-type-options: nosniff
content-type: text/html; charset=UTF-8
set-cookie: b7f6bc5c05493a9b0097659750e45769=jpjqdojbg9d9tgn77l95iq6vng; path=/; HttpOnly
X-Firefox-Spdy: h2
inklinkor.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 5df613ad8aef091f343d8f1dfa071959
cache-control: max-age=86400
last-modified: Wed, 23 Nov 2022 10:06:19 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Fri, 25 Nov 2022 21:37:01 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 6055
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2FGziTlPG24O7W315nhhEtur9vie630OEXGAS12r7YhGj6pMFedbnuoCX%2F3qf4Y8bAH7Emt18cdsUW%2FN8Y3yAHPwVElPWj5nzh2JnGiZ1D9uOXT5ZJgKN6OFt4am5b2U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5dc64c9531c12-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.guidedways.com/error_docs/styles.css
200 OK 0 B URL HTTP/2 www.guidedways.com/error_docs/styles.css
IP
ASN #24940 Hetzner Online GmbH
GET /error_docs/styles.css HTTP/1.1
Host: www.guidedways.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.guidedways.com/freeplugins/dictsearch.php
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/css
last-modified: Fri, 13 Oct 2017 10:28:14 GMT
etag: W/"59e0953e-aa0"
x-powered-by: PleskLin
content-encoding: br
X-Firefox-Spdy: h2
www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
200 OK 0 B URL HTTP/2 www.calendarlabs.com/calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg
IP
GET /calendars/web-content/calendar.php?cid=1002&uid=779965960&c=10&l=en&cbg=D46D2B&cfg=FFFFFF&hfg=FFFFFF&hfg1=FFFFFF&ct=70&cb=1&cbc=000000&cf=verdana&cp=bottom&sw=1&hp=t&ib=1&ibc=FFDC82&i=images/orchid.jpg HTTP/1.1
Host: www.calendarlabs.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 01-Jan-70 00:00:01 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
content-encoding: gzip
vary: Accept-Encoding,User-Agent
last-modified: Thu, 24 Nov 2022 23:17:58 GMT
content-type: text/html; charset=UTF-8
date: Thu, 24 Nov 2022 23:17:58 GMT
server: Apache
X-Firefox-Spdy: h2
ukhwah.com/topblog/button.php?u=abdinabu
404 Not Found 0 B URL HTTP/2 ukhwah.com/topblog/button.php?u=abdinabu
IP
GET /topblog/button.php?u=abdinabu HTTP/1.1
Host: ukhwah.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
date: Thu, 24 Nov 2022 23:18:02 GMT
content-type: text/html; charset=UTF-8
x-powered-by: PHP/7.4.33
expires: Wed, 11 Jan 1984 05:00:00 GMT
cache-control: no-cache, must-revalidate, max-age=0
link: <https://ukhwah.com/wp-json/>; rel="https://api.w.org/"
vary: Accept-Encoding
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1%2BSh2k91j4D%2FaxBpm%2FOdvq7b96qhhBMcfm3fW4fSxxJDyY%2F8OhGf8u36CRLWPanUHBhyJ%2BncsXSQXpjsXmZZLf%2BD2CkmX8fa2BskmZg%2BzObfInaDf34LJYZd7B6t"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc7ce8860b02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
200 OK 0 B IP
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:18:00 GMT
content-type: application/javascript
last-modified: Wed, 23 Nov 2022 15:07:42 GMT
etag: W/"637e373e-32a6"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 3773
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zH8T82kiWR0Kme2noIIgeSMlJ%2Fo6Oj6u6lShN%2Bkwb86%2BW%2Bd7K4tgspaRTLpiUq63UGrx3ApEHDzyjqUtiBnX4CbzNyROd0YIXWKHt0m%2FK2Huo2NiCvz4OUBHIhf26Q%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5dc7b4fbbb4ed-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=geolive
200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geolive
IP
GET /hitparade.php?pagexiti=geolive HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Thu, 24 Nov 2022 23:20:55 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BGq9yAbONl3VAptRUYmkv6izM9lyCrU2JS%2F6w%2B9mTLLKGWqzzLjGcHU9vnx4LFSnkWIeX6k7IB0an%2BlgKIlIKVhV0kYdU6XDkUsPoI91RqWIla6aNwB2xlsP94s%2BhNHe"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc64bb77b524-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=geocity1
200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geocity1
IP
GET /hitparade.php?pagexiti=geocity1 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ambuyatel-binangkit.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:56 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Thu, 24 Nov 2022 23:20:55 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=5tbMvegBw0gaqVTTYTmwck6ZzKgOBrayd%2Fmds0JhLQ71XR0Z7ld3ExkOyEIesoWj7k5HWv3UwwA6OgSRUOZEyhee6i1m7BiPMwrSvqiBe%2FoyZOiHriZ12bYfRy9tN9%2Bo"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc64dbaeb524-OSL
content-encoding: br
X-Firefox-Spdy: h2
app.accuweather.com/app-download
200 OK 0 B URL HTTP/2 app.accuweather.com/app-download
IP
ASN #209242 Cloudflare London, LLC
GET /app-download HTTP/1.1
Host: app.accuweather.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://ambuyatel-binangkit.blogspot.com/
Connection: keep-alive
Cookie: __cf_bm=rK_k6BTeDVdSRY1qP5WgPrz1oqZO5.JmaINLyc3xPNA-1669331877-0-AQr4v+vbB53Kky0ipl94hoe2a00gaaQ3uPJnXNTeIVhZG7rQot57IIbEjEivvFHbv9uAS+fR5vIr+zp4CZgqgC0=; __cfruid=e2dea2f248cfd783537c961d9f8b449a7d15a8ca-1669331877
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
If-Modified-Since: Thu, 24 Nov 2022 00:14:16 GMT
If-None-Match: W/"2a3cac94a71fab56568d8caf22ad340e"
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/html; charset=UTF-8
cache-control: s-maxage=10800, max-age=0
etag: W/"2a3cac94a71fab56568d8caf22ad340e"
last-modified: Thu, 24 Nov 2022 00:14:16 GMT
link: </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>; rel=preload; as=script,</hs/hsstatic/HubspotToolsMenu/static-1.138/js/index.js>; rel=preload; as=script
strict-transport-security: max-age=31536000
content-security-policy: upgrade-insecure-requests
edge-cache-tag: CT-78111170588,P-7482826,CW-30063268623,CW-78111884636,E-72101896560,E-78104573007,E-78105494437,E-78112470303,E-78112496684,E-78112671562,E-78112732502,E-78112890690,E-78112994639,E-78113133579,E-78113158831,E-78113335563,E-78113336112,E-78113581974,PGS-ALL,SW-2,TS-78112665345
referrer-policy: no-referrer-when-downgrade
x-hs-cache-config: BrowserCache-5s-EdgeCache-180s
x-hs-cache-control: s-maxage=10800, max-age=0
x-hs-cf-cache-status: HIT
x-hs-combine-css: Disabled
x-hs-content-id: 78111170588
x-hs-hub-id: 7482826
x-hs-prerendered: Thu, 24 Nov 2022 00:14:16 GMT
x-powered-by: HubSpot
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1DsOW6m%2B6PQCjrxlzd9z9UWQ3D%2FnnGAadw0FYf6IYTZqcst4hfwbZk5NKTAJwJnpCf8MUdT0DQzkjGuEDU9TzzhND3jDMab45oUc3dU5FYLXzLYvKS6Xd7Er1oR3p%2BqlNXQ%2B5wE%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 76f5dc67daacb4f1-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
cf-h2-pushed: </hs/hsstatic/cos-i18n/static-1.53/bundles/project.js>,</hs/hsstatic/HubspotToolsMenu/static-1.138/js/index.js>
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/css/city_css.php?c=geocity1
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/css/city_css.php?c=geocity1
IP
GET /geocompteur/css/city_css.php?c=geocity1 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 24 Nov 2022 23:17:57 GMT
content-type: text/css;charset=UTF-8
cache-control: public, max-age=604800
expires: Thu, 01 Dec 2022 23:17:55 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xSYoxQi%2BbKqIrlgljPFoCyvJFhAX5w6sLmzt50u2BNufvKpfnR93NACSh0fjHH%2FnHeAgU8NscNujDTf3I3QXg5RwOc17sERhIMk30Or%2BzGod7kG%2FR5R8bOC0BWILBXpd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 76f5dc678e8db524-OSL
content-encoding: br
X-Firefox-Spdy: h2
142.250.74.161
103.233.160.31
104.18.20.226
139.45.195.8
23.36.76.226
192.99.8.28
46.105.201.240
203.143.89.81
144.76.219.5
2.23.131.205