r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 09a973de929ab7452edc342c780d3668
3f14f6e0a36f76863c0aea6fb561c266404a7ea3
e82ca5f310e37267fbf792427747e65c2bb35e684d3f629c0aa302f688bc4f80
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "E82CA5F310E37267FBF792427747E65C2BB35E684D3F629C0AA302F688BC4F80"
Last-Modified: Fri, 23 Sep 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11569
Expires: Sat, 24 Sep 2022 05:46:20 GMT
Date: Sat, 24 Sep 2022 02:33:31 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Sat, 24 Sep 2022 02:05:28 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 c3941d2249641ec51690205d7b1084ac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: oASyomzlGjouP1OyqlRuuAkP-jDMtMLAZz5fu3OaJgTVFGL-QXLpqQ==
Age: 1683
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Fri, 23 Sep 2022 04:13:03 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f40585e1285ddfba696e566c1dd902de.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR50-P1
x-amz-cf-id: kzxZ0w26GrZkzdFHkXpytvzUnZmF1TzH_GiYBmd0GYhvwJvt0XodkQ==
age: 80430
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 02:33:31 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Expires, Alert, Content-Length, ETag, Cache-Control, Content-Type, Backoff, Pragma, Last-Modified
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:29:21 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Sat, 24 Sep 2022 02:33:32 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 35f1076ba1ff613e428e9cf6a2f57580.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: LHR50-P4
X-Amz-Cf-Id: gHnb5kbM13TFfOCYvhehIftFj_zTMG0vLbXCIqHWKusen4LvFnhsew==
Age: 766
aniekelate.blogspot.com/2013/05/selain-yoona-muncul-lagi-kembaran.html
200 OK 30 kB URL HTTP/1.1 aniekelate.blogspot.com/2013/05/selain-yoona-muncul-lagi-kembaran.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15502)
Hash 3401ca597e13545ed287b6e7e6338c02
623f79df6e901057a2d418ea6f411cf067423a91
3044ccf97b4bca39875759cfde072c8dfee10073c61b6b70ecb4db9f5f357d25
Analyzer Verdict Alert fortinet Phishing
GET /2013/05/selain-yoona-muncul-lagi-kembaran.html HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sat, 24 Sep 2022 02:33:32 GMT
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
ETag: W/"e1ba656da3dacd230d4c39fb05c0b322721591c9c17ab34fcab3ae03a8b72d8e"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 30085
Server: GSE
ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
200 OK 27 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash 88ed7d5a26ffff39cbae41fa7b2c615d
5ea49f5aeeb49e8abd640da2f6d657fb57cc5acc
52943bd40a595c39f84e23ddd74755daa4d013b55c709de9b312661e59103ab3
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 27266
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Sep 2022 06:52:44 GMT
Expires: Wed, 20 Sep 2023 06:52:44 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 330048
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
ocsp.digicert.com/
200 OK 471 B IP
Hash f714931cf870bfa33815fd259b7246fd
38e411ef8ca1b31ead8415ee5f21d98bd9653a86
897675130112daff8bdf6fa25b56faa4b9fdb367daca2b2645ed65c83a2e423f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6197
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Last-Modified: Sat, 24 Sep 2022 00:50:15 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1961)
Hash 0cf2ead17540f49c40dff8f75f1ae090
4004aeaeed602948798bdd26c607bb1f95c850c7
10353304971018feffdf0cf7260bf1472c38004d169c190fb5fbfdaf33c207e5
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: fb066c40c96a720071fb310dce618b09
ETag: "98be225aa6f6aa6f2726390323e8ca5f"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Sat, 24 Sep 2022 02:50:30 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: DPLq0XVA9JxA3/j3XxrgkA==
X-FB-Debug: 35/rNB/5o4bO5i5VyUnw/VcpOx387LcE6wYp4RLt6KAKa4ONO92UVLwWPLJUoxMSGNacwmX9caEZ6lgesi1AXQ==
X-FB-TRIP-ID: 1679558926
Date: Sat, 24 Sep 2022 02:33:32 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1684
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
301 Moved Permanently 211 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 32ec5bc669735970d512f8f7df96d2f9
ca9b5eb78724887e5237720f70a385520a35a525
b79c2805b8775d9e298c8f96b52d53e80ae9b8a1d29ad923fff6cfdb43243431
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:31 GMT
Content-Length: 211
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
301 Moved Permanently 212 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash fcfe676ab627a22720dc3fef78eab91b
4d2413a9e993b244f910e225eb1302b314aeeb73
e000cc4af59d694536fb13b1092e9414f6e0e3888da02874c0876d2eca48418d
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:31 GMT
Content-Length: 212
ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
200 OK 20 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
IP
File type ASCII text, with very long lines (39660)
Hash 6ad9e9100f68042a634e403e56e3744a
3d148af6eb9f86b03d5a815f4fb3a49c7b2df356
72bbdea3217793991ab87a6c7cb165d267551810d3d88b5fd2fd489748d04b7a
GET /ajax/libs/jquery/1.3.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 19926
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 15:04:35 GMT
Expires: Thu, 21 Sep 2023 15:04:35 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 214137
aniekelate.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 aniekelate.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Phishing
GET /js/cookienotice.js HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/05/selain-yoona-muncul-lagi-kembaran.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 02:02:27 GMT
Expires: Wed, 28 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 20 Sep 2022 16:54:38 GMT
Content-Type: text/javascript
Age: 261065
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8ecc94a41c3ff47dfd21fc2d2bd9ef51
f622492988a2a3d787aa55d68ff3e55fe8674b10
89a8b73edcd434521dacb01b8009d44cabc5a2908a7a7a13a5c3bb0685c056b6
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:31 GMT
Content-Length: 249
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5799e0e68ef11f974b99fd89204172af
5e7eb09100a411282cacba7c44592cf7578bb9d3
ac30887bee0c593e79b8c8c978626374504e337be360d4fb661c4c872b4ef3cf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:31 GMT
Content-Length: 249
www.statcounter.com/counter/counter_xhtml.js
200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 23 Sep 2022 09:41:24 GMT
ETag: W/"aa70-5e954fb2f9d71"
Cache-Control: max-age=43200
Expires: Sat, 24 Sep 2022 12:33:43 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 7189
Server: cloudflare
CF-RAY: 74f81daa7b110b4d-OSL
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 04e873763c0e6e10784b42fa55f10039
02d40b9831cb977e35f3d003515f24d4570efac3
a3f90bd7f0e9d96a3405a9bc52650f338c4e8befbfbe09cc5da2b7778e409713
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 47522bfe7c507b9d129a4097c9b02dbc
1e8dba4f3f7eae99d80930eee3771641300ae583
7f74cf92e1a8f8e1b91c9a8310cecb336209520e3a1b784bfb2cd1c9035fd257
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 423331d8bae78ba045bea86f1e4c6e7f
8ed72a508ba25a95e6899569180a02728d5edb5c
fb27ab0f1591889639eff81fa012d5c185ecb1b04be5060af2e89e378fc264a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 04e873763c0e6e10784b42fa55f10039
02d40b9831cb977e35f3d003515f24d4570efac3
a3f90bd7f0e9d96a3405a9bc52650f338c4e8befbfbe09cc5da2b7778e409713
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 07:10:12 GMT
expires: Fri, 22 Sep 2023 07:10:12 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 22:56:47 GMT
content-type: text/css
age: 156200
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 04e873763c0e6e10784b42fa55f10039
02d40b9831cb977e35f3d003515f24d4570efac3
a3f90bd7f0e9d96a3405a9bc52650f338c4e8befbfbe09cc5da2b7778e409713
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 18:39:38 GMT
expires: Wed, 28 Sep 2022 18:39:38 GMT
cache-control: public, max-age=604800
last-modified: Wed, 21 Sep 2022 13:53:25 GMT
content-type: image/gif
age: 201234
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Sat, 24 Sep 2022 02:33:32 GMT
expires: Sat, 24 Sep 2022 02:33:32 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
200 OK 6.6 kB URL HTTP/1.1 www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (15730)
Hash d14fcc78254f727ded0622832bf21173
19691b423207b8782a00879a81d89268ada4129d
77ccb7f1b8cce27d769d4978d983aca53d88d7f120371d50d78c3bddfe0aa51a
Analyzer Verdict Alert fortinet Malware
GET /samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741 HTTP/1.1
Host: www.samsengfb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
www.blogger.com/static/v1/widgets/1416043673-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1416043673-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash c6aef9cbd2abf926a23970b70f8a24c2
78972b4f41a7d2580c383da41e3a472c4cfc647a
111111066b8f3fddcd24cedce8c4e8b93a1d9e9b8e3f5f2959172da5adda14b6
GET /static/v1/widgets/1416043673-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56913
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 02:21:33 GMT
expires: Thu, 21 Sep 2023 02:21:33 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 00:51:51 GMT
content-type: text/javascript
age: 259919
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/plusone.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1277)
Hash 202067c443611dc148225b75c0e3d556
9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Sat, 24 Sep 2022 02:33:32 GMT
expires: Sat, 24 Sep 2022 02:33:32 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5f35d22782378ad2"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
200 OK 6.5 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1264)
Hash 30af015884191ce4fe52ce1e707baed9
faa1418efa036704d31eb90f4fbd82de456b81b7
0456cf81299c957c8e54dabb00b4d6d96b76be729b1e112d478b34ba56d8059d
GET /static/v1/jsbin/3262169375-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 08:22:29 GMT
expires: Fri, 22 Sep 2023 08:22:29 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 21 Sep 2022 20:54:01 GMT
content-type: text/javascript
age: 151863
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type ASCII text, with very long lines (705), with CRLF line terminators
Hash 66229ba085fabe0975b650931b440ba3
d20b1ed33a0d14c965d3f2d6d6cd651f1b840902
01e171e095331678c2826ccefc6ce1279891fdd6fe2b96188af236eb003435ab
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:31 GMT
content-length: 1337
X-Firefox-Spdy: h2
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type ASCII text, with very long lines (704), with CRLF line terminators
Hash f80f2606dc583da50e3fe9a91fb50096
89d499f14cfaacb858867877a3b6ed09e5424dc1
38fd6bfdd9a18d288c773272df470c283ac1ea2df52b103a7afd549553af2fb2
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:31 GMT
content-length: 1335
X-Firefox-Spdy: h2
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type ASCII text, with very long lines (715), with CRLF line terminators
Hash ed01fd18f608b038ee0cd7fc586f47f5
24d3162967d61d62566c75d90a05b0bccc28e80e
f0edc414a24e8778898eb79200a933657f2f9a25b74b3e3f650018cab6194bcb
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:31 GMT
content-length: 1345
X-Firefox-Spdy: h2
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
t1.gstatic.com/images?q=tbn:ANd9GcRwIg70eCyHwx0l_R-bIQ2CO84RmjPmPMrRWbpVYGWgZbqvlhcB
200 OK 5.6 kB URL HTTP/1.1 t1.gstatic.com/images?q=tbn:ANd9GcRwIg70eCyHwx0l_R-bIQ2CO84RmjPmPMrRWbpVYGWgZbqvlhcB
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 259x194, components 3\012- data
Hash e28cd6f3bd6d82b177502683af92ad3f
78ac1de1d51db51a074ef0eb73eef7f1999c70f6
1c2e183cab8c175a83c77c8c6b39ec5fe2bdf3d4a1788c7bf2454944483878d1
GET /images?q=tbn:ANd9GcRwIg70eCyHwx0l_R-bIQ2CO84RmjPmPMrRWbpVYGWgZbqvlhcB HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="images-tbn"
Report-To: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
Content-Length: 5605
Date: Sat, 24 Sep 2022 02:33:32 GMT
Expires: Sun, 24 Sep 2023 02:33:32 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 03 Dec 2015 02:35:07 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: Ktyek2sX7yvz8LZ4KiUpQA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EV7xX+ynFuMPlqqMvpOFXM2zAJ4=
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type ASCII text, with very long lines (716), with CRLF line terminators
Hash 138b1c92bce9441c44f7397bc99706ad
149ae795e1811ce9e83fedd59be339b321328fb3
b5a604aa39478641ac45a1c4b0d158d731eaea950120fa003d82011e24af3bed
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:31 GMT
content-length: 1346
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
200 OK 87 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 6c60754af27389e2778b3584bf10f3a1
196be0cdc74708ee01c01f86a648c16573e18fc6
ff2485a3dc35082ae7e3799388665929ffd72227191bf24b7c01033bfe19ddd9
GET /BidVertiser.dbm?pid=361547%26bid=1317136 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Content-Length: 87
sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
302 Found 216 B URL HTTP/2 sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 39e83bbb13ffce196029a2df35b63b32
7b13d6e23356c2708d0a179a117d242c0e152584
eadf76ac5391f5337c16d17794e8e2a09441670121611336c723b1b699b61958
GET /site/unwanted86/javascript/animatedrecentpost.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 24 Sep 2022 02:33:32 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
location: https://sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 216
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
t1.gstatic.com/images?q=tbn:ANd9GcRB57P1RSXYIDysq1beP2TJLOEHXHOdUorIG2rLKfw6p54y4-y6
200 OK 6.9 kB URL HTTP/1.1 t1.gstatic.com/images?q=tbn:ANd9GcRB57P1RSXYIDysq1beP2TJLOEHXHOdUorIG2rLKfw6p54y4-y6
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 254x199, components 3\012- data
Hash 4e0a902811493f24862cc72c2203c632
9a24afe07a538d79dc7203f16e20005e95b5647d
fbcd8262893bbec0c76c13780db9a5c6ab26af24a9cb2bde3d415fbf08b1ed9c
GET /images?q=tbn:ANd9GcRB57P1RSXYIDysq1beP2TJLOEHXHOdUorIG2rLKfw6p54y4-y6 HTTP/1.1
Host: t1.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: image/jpeg
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="images-tbn"
Report-To: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
Content-Length: 6859
Date: Sat, 24 Sep 2022 02:33:32 GMT
Expires: Sun, 24 Sep 2023 02:33:32 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Sat, 30 Mar 2019 17:45:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
200 OK 3.1 kB URL HTTP/1.1 3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6e45b7967ba56d5acbb4bc6489d34ae0
df158f16e15c047f963588d11e0ee565a323503a
b46cb83ea3cd77840e3dc1020052e5415699c043add0eb4f1eb0f50863e1f9d2
GET /-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="pakai tudung tapi seksi.jpeg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3079
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:32 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1651c"
Content-Type: image/jpeg
Age: 0
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Sep 2022 07:25:35 GMT
expires: Mon, 18 Sep 2023 07:25:35 GMT
cache-control: public, max-age=31536000
age: 500877
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
200 OK 2.0 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
IP
File type ASCII text, with very long lines (2149)
Hash a8847b4c51707a70c275ad40f47c497f
9d522afaee3d4093626d474468d20ec51f7bb9e7
acfca2cab05002f318d7678734cb1a7f1437dc226e795b6cad01c45ebb1da3a8
GET /geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: application/javascript
Content-Length: 2036
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Fri, 30-Sep-2022 02:33:31 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Sat, 01 Oct 2022 02:33:31 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2rwizNDAqBzgMYM0kJCztchYsJRZUHeLScgj2vGAR1oHBhtyw7lNA6Dwlx79Pdumb%2BngOfk9tBBdhC5TsFXanYzVdASf9IQ2LxequoGpwiBQ7a1EiXWGGJmhGGQG9VuY"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74f81daa7d25b506-OSL
alt-svc: h2=":443"; ma=60
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Fri, 23 Sep 2022 16:31:15 GMT
Expires: Fri, 07 Oct 2022 16:31:15 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 36137
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 423331d8bae78ba045bea86f1e4c6e7f
8ed72a508ba25a95e6899569180a02728d5edb5c
fb27ab0f1591889639eff81fa012d5c185ecb1b04be5060af2e89e378fc264a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
200 OK 87 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 6c60754af27389e2778b3584bf10f3a1
196be0cdc74708ee01c01f86a648c16573e18fc6
ff2485a3dc35082ae7e3799388665929ffd72227191bf24b7c01033bfe19ddd9
GET /BidVertiser.dbm?pid=361547%26bid=1317133 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Content-Length: 87
3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:32 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
2.bp.blogspot.com/-NZpNzHMA9Rk/Uj0R0VA3dQI/AAAAAAAAfj8/oFPhkwVJmEk/w72-h72-p-k-no-nu/kerja+sambilan+superhero+1.jpg
404 Not Found 1.7 kB URL HTTP/1.1 2.bp.blogspot.com/-NZpNzHMA9Rk/Uj0R0VA3dQI/AAAAAAAAfj8/oFPhkwVJmEk/w72-h72-p-k-no-nu/kerja+sambilan+superhero+1.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-NZpNzHMA9Rk/Uj0R0VA3dQI/AAAAAAAAfj8/oFPhkwVJmEk/w72-h72-p-k-no-nu/kerja+sambilan+superhero+1.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:32 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 19 Oct 2022 22:18:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 360883
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f6ikOFbXxKSSduVTJYJewIV9rNp9rHl9buSKbkirs%2BbtkYDk86hDVd%2BngFHHirehAg5STsMSfx%2Froc09tJDG%2F8z6%2B%2FBKdIiM7yPQWvrEHU6MaiEajNJFPrwHDp%2BF0vMa"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74f81dac8e07b506-OSL
alt-svc: h2=":443"; ma=60
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Sat, 24 Sep 2022 02:33:32 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6e0da02f02a5cb102417e895dead977a.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: ShKiaaSIZfZhxPwPhpIPA0L5u2RMYZrX4A0rjg-iOp-xmNy8QLaX0w==
Vary: Origin
sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
302 Found 463 B URL HTTP/2 sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (425)
Hash 0605ca68cabb16697e375ba56b6fd2f1
8026bf9a248bb987c8527e418479260dfa664a3e
f00b73da30b3a048b51366ceaa744c6fd9cb00a2ac1bf4aa2ced57e15c1ef4de
GET /site/unwanted86/javascript/animatedrecentpost.js?attredirects=0 HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cpqkl5t4gwrfXB_bbuoJd0G9a7ONxG-0a8vcv5lvQnMUv4Yw1XXFcDoDwTm3EIx2jlIFWj5ah43JRyJsfsTZfplAt4lVZJqhMgoarMj8ZN4ugkCTCLhnURWb25nx-69Hyz_uwur6wvuz8qrtBm7MwHBADFrqpsSTWk8vKD-UiAhGABZYXnLMK9w8GE1vhNvDdiIsloxlvOizwGRVzIhPwhkP99QaOw2iycpVDetLhzsnc2Tt9A%3D&attredirects=0
content-encoding: gzip
date: Sat, 24 Sep 2022 02:33:32 GMT
expires: Sat, 24 Sep 2022 02:33:32 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 463
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 423331d8bae78ba045bea86f1e4c6e7f
8ed72a508ba25a95e6899569180a02728d5edb5c
fb27ab0f1591889639eff81fa012d5c185ecb1b04be5060af2e89e378fc264a6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
200 OK 3.0 kB URL HTTP/1.1 3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 618f03401052046c8420cffd4f6ccd9c
4c71f8cc34782da2ad4f5a44b01a68f3a0bc860f
77bde2e7864e9b8a3f6ce3e3d80914879384207989423370c81028f3a776a99e
GET /--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="168437_1802777510716_6075141_a.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2989
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:32 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vef20"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 04e873763c0e6e10784b42fa55f10039
02d40b9831cb977e35f3d003515f24d4570efac3
a3f90bd7f0e9d96a3405a9bc52650f338c4e8befbfbe09cc5da2b7778e409713
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:32 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogblog.com/1kt/transparent/white80.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/white80.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 94a1820903fb1f98de19df188a6ad531
599ad7d04fd5b1fa13f334e95240a5a9f4a66583
6e232a3693a281342acc16b293dddeafcf91579f1b52df2cf22303b17c2a0e57
GET /1kt/transparent/white80.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 16:23:08 GMT
Expires: Wed, 28 Sep 2022 16:23:08 GMT
Cache-Control: public, max-age=604800
Last-Modified: Tue, 20 Sep 2022 23:54:43 GMT
Content-Type: image/png
Age: 209424
www.blogblog.com/1kt/transparent/header_gradient_shade.png
200 OK 424 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/header_gradient_shade.png
IP
File type PNG image data, 88 x 300, 8-bit colormap, non-interlaced\012- data
Hash 68d74f6988b7bcb8d69e382c1769f6af
956161f38d64d4fbf81cafe0b009339dcdbcb73c
4bf4e9296165fffe3661a6a978e175f37f9ff65e6ac2beb9f40a92e2d96710c3
GET /1kt/transparent/header_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 06:58:24 GMT
Expires: Thu, 29 Sep 2022 06:58:24 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 21 Sep 2022 07:51:25 GMT
Content-Type: image/png
Age: 156909
2.bp.blogspot.com/-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg
200 OK 3.2 kB URL HTTP/1.1 2.bp.blogspot.com/-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d0dbd50407c501efa5769b24df56848a
7849d9fd846dc1f5e695e0b64d577ae4d79f11f0
174adcb8363845f08ba6ca6e0d1b3de6d32e706e88ae9f8446533894bb7ec3ef
GET /-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1b683"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Aksi Wawa Zainal Di Dalam Kereta.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3167
X-XSS-Protection: 0
www.linkwithin.com/pixel.png
200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Sep 2022 02:33:32 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
200 OK 185 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a2d40695f173ddb461829cb8bf9b3dd8
530a14dc6f0baa0de1f90c5a17c28126e0daa812
9f9fb5396ea8566bb59a43a174a5ec23bf4e04ec9cc18b85b69af22d9206ddd6
GET /1kt/transparent/tabs_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 185
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 20 Sep 2022 00:41:44 GMT
Expires: Tue, 27 Sep 2022 00:41:44 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 19 Sep 2022 10:50:55 GMT
Content-Type: image/png
Age: 352309
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 38c2beedfbcceb754f778786cc014381
4a4d2067668eabae43b97e21cdd06de5b3b50b34
957c2e4a8f24a78766401170a83a68df86f45270277976c65923c2d4e811a9f4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "957C2E4A8F24A78766401170A83A68DF86F45270277976C65923C2D4E811A9F4"
Last-Modified: Fri, 23 Sep 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7231
Expires: Sat, 24 Sep 2022 04:34:04 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Connection: keep-alive
lh4.ggpht.com/-P_Vwd70bWVY/UbOLMmSe-mI/AAAAAAABrs0/gfKj5-GBTqQ/w72-h72-p-k-no-nu/______1_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.8 kB URL HTTP/1.1 lh4.ggpht.com/-P_Vwd70bWVY/UbOLMmSe-mI/AAAAAAABrs0/gfKj5-GBTqQ/w72-h72-p-k-no-nu/______1_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4bb42ecd4d617bd2fbca0919aa4ff788
2c5ddf5531f338ddf9f0b1b5eaed0060c901a07e
824f5a6798ee33831a4cee3a399849877625a18ddc025f26f0ce928b6ae21e50
GET /-P_Vwd70bWVY/UbOLMmSe-mI/AAAAAAABrs0/gfKj5-GBTqQ/w72-h72-p-k-no-nu/______1_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1aece"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="______1_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3784
X-XSS-Protection: 0
lh4.ggpht.com/-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 4.0 kB URL HTTP/1.1 lh4.ggpht.com/-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7a295d004401d2c95d4468c3ba62284c
631f77b2b47b63853b4618643f2034649e31933d
d0db18488e5641decc1b457b3b65538c8cae1b3129f90958b396ca6a38483cca
GET /-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4ba"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IMG_20140216_131805_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 4016
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75edd89b437da666909770ce0a9daab3
5bc7fe58ced97a9fb53f3558cd018665c2fbbc39
22043a93f446981701f7a8e9213822f53f83f3f36a1a3600a6b31f29414b29f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
200 OK 746 B URL HTTP/2 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e4122d87cb9a5f68196feea53f8c15bb
00e6127fd0c2d6dbf19a6bd7b4af50fce0c44dbe
f1c68f26be0dc943e60667b1cfff7aa3706dcf91614c1ae9ade2d15250fa11bc
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 746
date: Thu, 22 Sep 2022 14:56:32 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_10_7.webp"
expires: Fri, 22 Sep 2023 14:56:32 GMT
server: photobucket
x-amzn-trace-id: Root=1-632c77a0-538341064bb695aa295aec99
x-request-id: qxWCDa6cD1KRcK_xxQuAu
x-cache: Hit from cloudfront
via: 1.1 e0a5445a9b6b20c3399e57d2c05d4520.cloudfront.net (CloudFront)
x-amz-cf-pop: ARN1-C1
x-amz-cf-id: qgWZu3qvmmY7tZlJ4ck9npz9YJxv3ClopDM1oZd48gCGoS7au1DzbQ==
age: 128221
vary: Accept, Origin
X-Firefox-Spdy: h2
lh4.ggpht.com/-OQx8MwXO6k0/UbvHz76dOgI/AAAAAAABtCQ/Dd8HqXRffX8/w72-h72-p-k-no-nu/2013-06-15_063539_thumb%25255B1%25255D.png?imgmax=800
200 OK 14 kB URL HTTP/1.1 lh4.ggpht.com/-OQx8MwXO6k0/UbvHz76dOgI/AAAAAAABtCQ/Dd8HqXRffX8/w72-h72-p-k-no-nu/2013-06-15_063539_thumb%25255B1%25255D.png?imgmax=800
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 5d3b502ee479ed0d64b5a783e4fba8af
0c47c2c3b80f75c6db0ca5dade950527d594e7a4
2fa7380bd05b7305e4d5e3c7ecfc7ac114cb049c887ea0c95570e334807caccd
GET /-OQx8MwXO6k0/UbvHz76dOgI/AAAAAAABtCQ/Dd8HqXRffX8/w72-h72-p-k-no-nu/2013-06-15_063539_thumb%25255B1%25255D.png?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="2013-06-15_063539_thumb[1].png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 13907
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1b425"
Content-Type: image/png
Age: 0
2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
200 OK 5.6 kB URL HTTP/1.1 2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 14636a2212513eaf52b7cf83887208bd
9da1b8ad1c4e4b820d2132062ba4d34253b015d7
d1a2dd943f651fa66cae21cf538d1608f4656a9ad0ec7b2e1a09d0ad3d16ec4e
GET /-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v67e0"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="chicken-biryani.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 5597
X-XSS-Protection: 0
1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
200 OK 3.3 kB URL HTTP/1.1 1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e214dcb520106f80f45216102370368a
ee450ee79d7a8ebce5f4d4819d6e4583d474b0ca
1663f0d5743e44b72949f17bd51454e370ef70d984a2f8019fa9edf3de733cfb
GET /-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ve4d"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3326
X-XSS-Protection: 0
cleverjump.org/hit?z0;s1280*1024*24;f4kB8sl7UUY2242sS7tJbahg1TIW7Nu;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html;hBebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD;0.7668163021142592
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;f4kB8sl7UUY2242sS7tJbahg1TIW7Nu;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html;hBebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD;0.7668163021142592
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;f4kB8sl7UUY2242sS7tJbahg1TIW7Nu;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html;hBebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD;0.7668163021142592 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=JL6uU0fDGFxVC9hlGJD5KTnCw3aUCk; expires=Sun, 24-Sep-2023 02:33:33 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
200 OK 3.7 kB URL HTTP/1.1 4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 60x80, components 3\012- data
Hash c93233f793ed806ff86fdae4d003228c
e9809624b85984532903836e7b80b6ee8588ef52
e056e562bab90ce13baba9feb03d199524cfff4ef5d656d960d565a0d56d80b6
GET /-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="DSC05641.JPG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3676
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v563"
Content-Type: image/jpeg
Age: 0
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
301 Moved Permanently 0 B URL HTTP/1.1 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Location: https://themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
lh3.ggpht.com/-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 4.2 kB URL HTTP/1.1 lh3.ggpht.com/-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 2a1e335091c23d65e85b11379d25e1d9
00c404494f349ea3bd9033644f6a990f1fab8abe
32dbcbcc7be41e6508c5ef3904a74b643dc82b0bbf20f65634cc78f266a13cb2
GET /-DSZzK_NIbj8/UEfgRawqWfI/AAAAAAAAbg4/mp_RyiK4Nzk/w72-h72-p-k-no-nu/image_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="image_thumb[2].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4196
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6e0e"
Content-Type: image/jpeg
Age: 0
lh5.ggpht.com/-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 4.0 kB URL HTTP/1.1 lh5.ggpht.com/-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 72736913e9c828ea1196037c3db09386
772eab334066533e7f27ffaf30c04fac39ad0326
69729a0587818420e4790292d6a5b690c7b74034f2b7aeaabcb9521dd9ba6777
GET /-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1aa96"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="fazuraturki03_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3998
X-XSS-Protection: 0
4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
200 OK 84 kB URL HTTP/1.1 4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1090x290, components 3\012- data
Hash 7a24f6e479883b65a999dc1923608118
a2cbff8e7b6cd2176dd629823d34f7ab0d118349
b0d35cd8c5fc6cbb3ee76e7cbfd5f4aabb6a374c7ce5cff14dad96d587bc70c2
GET /-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va06"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ert.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 83873
X-XSS-Protection: 0
3.bp.blogspot.com/-dFI695dTym4/Ue5lTVTRvDI/AAAAAAAByLY/BsavdbvbidM/w72-h72-p-k-no-nu/nc_royal_baby_prank_ll_130719_16x9_608-565x317.jpg
200 OK 3.8 kB URL HTTP/1.1 3.bp.blogspot.com/-dFI695dTym4/Ue5lTVTRvDI/AAAAAAAByLY/BsavdbvbidM/w72-h72-p-k-no-nu/nc_royal_baby_prank_ll_130719_16x9_608-565x317.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4c8dd0af1509a59a010632805f75627c
7c6f964455af6501d30037f84e70133d81e7a1a7
596e1e02b480a667459fee2249be5cc27b7267edcd5d3916b24ff65f44005e48
GET /-dFI695dTym4/Ue5lTVTRvDI/AAAAAAAByLY/BsavdbvbidM/w72-h72-p-k-no-nu/nc_royal_baby_prank_ll_130719_16x9_608-565x317.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1c8b7"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nc_royal_baby_prank_ll_130719_16x9_608-565x317.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3812
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da90409c72d710432ed4c105d169e42b
7bd965dbe69c0774bd7c6e7735588c9d4beea9ec
bc344255517fec731eb512fa75ff7a6286fd79938d20b9cfe277759c65455612
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.ggpht.com/-OI4gQs_5f7k/UafYFtAxFzI/AAAAAAABpJI/tRdXC-_DZAc/tvdailytiffanyanddoppel1_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 41 kB URL HTTP/1.1 lh3.ggpht.com/-OI4gQs_5f7k/UafYFtAxFzI/AAAAAAABpJI/tRdXC-_DZAc/tvdailytiffanyanddoppel1_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 353x272, components 3\012- data
Hash 7c51d685ff6f912ac7d5a52dcf0c8043
4e3bd02f2dc28b589d1afba13a0e6925439f06d5
2eb0ffa5e4b40560e5d4e926c4e43245831464e3a139ab424e2834ee5ac94a3f
GET /-OI4gQs_5f7k/UafYFtAxFzI/AAAAAAABpJI/tRdXC-_DZAc/tvdailytiffanyanddoppel1_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a492"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="tvdailytiffanyanddoppel1_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 41224
X-XSS-Protection: 0
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash 6e60c7292ccf27635c4885e725cbbd9c
95017a44a34fa132cf8b03163ef5320c82932541
da3847ad591a9e88e309c5518d84bea7990e788a3be7afe1e549e4e19bbf0e3e
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Cookie: _cjuh=JL6uU0fDGFxVC9hlGJD5KTnCw3aUCk
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Sep 2022 02:33:33 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
lh3.ggpht.com/-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.7 kB URL HTTP/1.1 lh3.ggpht.com/-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 25afd57dab09da9712c98af340067728
c321921f70ad71b22330c8fd2689301892feee0f
ec58051ce3cc85394878c54f342c4fdf9bef88649ca3c8ef1fd9c3c8b43dd9d0
GET /-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a29e"
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Puteri Sarah dan Ammar Alfian_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: fife
Content-Length: 3731
X-XSS-Protection: 0
26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cpqkl5t4gwrfXB_bbuoJd0G9a7ONxG-0a8vcv5lvQnMUv4Yw1XXFcDoDwTm3EIx2jlIFWj5ah43JRyJsfsTZfplAt4lVZJqhMgoarMj8ZN4ugkCTCLhnURWb25nx-69Hyz_uwur6wvuz8qrtBm7MwHBADFrqpsSTWk8vKD-UiAhGABZYXnLMK9w8GE1vhNvDdiIsloxlvOizwGRVzIhPwhkP99QaOw2iycpVDetLhzsnc2Tt9A%3D&attredirects=0
200 OK 1.4 kB URL HTTP/2 26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cpqkl5t4gwrfXB_bbuoJd0G9a7ONxG-0a8vcv5lvQnMUv4Yw1XXFcDoDwTm3EIx2jlIFWj5ah43JRyJsfsTZfplAt4lVZJqhMgoarMj8ZN4ugkCTCLhnURWb25nx-69Hyz_uwur6wvuz8qrtBm7MwHBADFrqpsSTWk8vKD-UiAhGABZYXnLMK9w8GE1vhNvDdiIsloxlvOizwGRVzIhPwhkP99QaOw2iycpVDetLhzsnc2Tt9A%3D&attredirects=0
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2566), with CRLF line terminators
Hash 31e1c67012a965c0946f9b1a57e37522
3e4f432c76e07fb51f7d172c646b1e51a9e6dbd5
a2c830719561d83caa19ddab4ad05324909ed460ae65366eee128260a5df41b9
GET /site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cpqkl5t4gwrfXB_bbuoJd0G9a7ONxG-0a8vcv5lvQnMUv4Yw1XXFcDoDwTm3EIx2jlIFWj5ah43JRyJsfsTZfplAt4lVZJqhMgoarMj8ZN4ugkCTCLhnURWb25nx-69Hyz_uwur6wvuz8qrtBm7MwHBADFrqpsSTWk8vKD-UiAhGABZYXnLMK9w8GE1vhNvDdiIsloxlvOizwGRVzIhPwhkP99QaOw2iycpVDetLhzsnc2Tt9A%3D&attredirects=0 HTTP/1.1
Host: 26ed6613-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 24 Sep 2022 02:33:33 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
content-disposition: attachment; filename="animatedrecentpost.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 1394
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash ac1c1353375f726aad371305efd7055b
ce45eddc5d095bf0f5ec5da1a60b875aee9ca0e2
82caebce181940ec417e5edeafa3dab058af4607451d8b226cfe7a2058134d5b
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: UwKsWYBlv-OY_n5pNzBKSOtPUVEg7_ZStPuDzyxMfbJozaxmpfIFPg==
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 75edd89b437da666909770ce0a9daab3
5bc7fe58ced97a9fb53f3558cd018665c2fbbc39
22043a93f446981701f7a8e9213822f53f83f3f36a1a3600a6b31f29414b29f0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
synad2.nuffnang.com.my/k.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/k.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2dc70b6c45bf3273ce02cc411906180e
3e706e22af3600df7ca611184af391f70755d256
32a8cb54b2eda028acc7b6cc832de6dcc6f82b4ec288620ec870def3f74b1b6c
GET /k.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/k.js
Cache-Control: max-age=86400
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/lmn.js
302 Found 316 B URL HTTP/1.1 synad2.nuffnang.com.my/lmn.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0b51d68ad3aa17a93ef618d7479f6dd6
a81c838d670ba94af83ddaf7d9f5bcdc4477373a
fea7caa1b9f39836624981f4498503e8f593e343824e2dd366390cf91c6283fd
GET /lmn.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/lmn.js
Cache-Control: max-age=86400
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Content-Length: 316
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/j.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/j.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 57577e65e048d98e8b1deceb81e22a3d
c261ab50058de936852f367d6b5555f3f99fc290
1d5c5d863b0436f2c77e48b9568f171f343afd9f293697e1bb0ebc7dbbb1cd99
GET /j.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Sat, 24 Sep 2022 02:33:33 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/j.js
Cache-Control: max-age=86400
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
200 OK 168 kB URL HTTP/2 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x2699, components 3\012- data
Size 168 kB (168013 bytes)
Hash 7ee3746ae0a6700164cb1fd3ca54483a
ffeb6d4e14ff136150531dbade87668b2db4563e
e74fa1a411c6eeeb0d1d415a04e2fc5dde7dcd42503b8c105e4754dbb117de61
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Sun, 25 Sep 2022 02:33:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:33 GMT
server: fife
content-length: 168013
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash da90409c72d710432ed4c105d169e42b
7bd965dbe69c0774bd7c6e7735588c9d4beea9ec
bc344255517fec731eb512fa75ff7a6286fd79938d20b9cfe277759c65455612
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14701
Expires: Sat, 24 Sep 2022 06:38:34 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14701
Expires: Sat, 24 Sep 2022 06:38:34 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14701
Expires: Sat, 24 Sep 2022 06:38:34 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7038cca95198779d8bb479045eb56652
e9dcf9451e849f4d55b0909b33a51bd0b1a35296
0fc47dba3f2789b7c509a4916b1fe3c7b6b30c6778e5354742256125730310f3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0FC47DBA3F2789B7C509A4916B1FE3C7B6B30C6778E5354742256125730310F3"
Last-Modified: Fri, 23 Sep 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14701
Expires: Sat, 24 Sep 2022 06:38:34 GMT
Date: Sat, 24 Sep 2022 02:33:33 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175a85c3-10d3-4e8f-bb64-d8da75a938c4.jpeg
200 OK 6.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175a85c3-10d3-4e8f-bb64-d8da75a938c4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 007aba90cc24589b974c6039372121d3
c308f846b81275e50122f99a229ae3fec0b5fe4c
dac4561f24f52c33e79e86b0794eab704866a879d6967ec120fdf7bc5a4e2d8c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F175a85c3-10d3-4e8f-bb64-d8da75a938c4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6294
x-amzn-requestid: 4007bdf7-f31a-414b-8711-f319aa09692b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7ruHG-loAMF-QA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e265a-18dc206b23fe3e383c1eb9cc;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:34:18 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: C-XyRAhMGXUgsUrSD0ecJs-6vZMpE5pLjNShVhWYuyNOlehUMFmwmw==
via: 1.1 4f87745990545c1ac0195c157e1668f8.cloudfront.net (CloudFront), 1.1 02d90bf99fd6253b329a53c82f19e224.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:47:49 GMT
age: 17144
etag: "c308f846b81275e50122f99a229ae3fec0b5fe4c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash aa150280eb113504d61a25935c0f0127
ed04f74fbb4c77b21e2babc51a82857f5e23d169
07df17fffb391aa82efb09e30d97e88fa4dbe6df00e37bb90304f69179f4848e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd719f7db-20e1-4834-9525-3117f1824f36.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10032
x-amzn-requestid: 521c4012-9834-4100-a7ed-30093502f1a9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7sPBHGYoAMFh-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e272c-77b03c321240d76a572d603a;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:37:48 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: lAQOV9_fZ2RFvhRKMtDOeRTWJc-Jo1u-DrtJshcQuCSOUXVbNMjhaw==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:56:56 GMT
age: 16597
etag: "ed04f74fbb4c77b21e2babc51a82857f5e23d169"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261e052d-5e10-4c3b-815c-1ed62855e73c.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261e052d-5e10-4c3b-815c-1ed62855e73c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 51954c51a08c2b93c064cb33d062295a
6786581817793da801f0034d9eaee454c11a103b
c753863b9d3a6ac9a52db03ffee8862eb26ae92250d3bffa52e57fc138456eea
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F261e052d-5e10-4c3b-815c-1ed62855e73c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11865
x-amzn-requestid: ae62bd6d-590b-4644-8dea-dcf38adc07e8
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y13FEHSxoAMFs_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632bd220-1a9fdbc01506bbf15be0fa67;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 03:10:24 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YBqyeclSHvMm99KwXa_iGF78ihpbdsr1hs9aWur3ONpCN3mwJF43KA==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 03:33:17 GMT
age: 82816
etag: "6786581817793da801f0034d9eaee454c11a103b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
200 OK 15 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f10a12719b387d176497669ba75f0acc
16e42ba7b20555bf5a8615e5f4bb561204aeeb5a
0cb2231817387d43a490565b61e24ea7a3cfcff3281f4ab4379a882cc5c3173f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd1500786-3bbf-46d0-b16e-4aff6d48a585.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14579
x-amzn-requestid: bce2c126-0883-4255-9246-d8055860f898
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YcCj6FYCoAMF9Yw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63217e18-66ba2e5d64b6a5b32b7ab36b;Sampled=0
x-amzn-remapped-date: Wed, 14 Sep 2022 07:09:12 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 92Pj9IQp3mBJQOW-XuHSK8laPqXOSBOmNbYcm4hSFzc1xqYscQKxMA==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 22:05:15 GMT
age: 16098
etag: "16e42ba7b20555bf5a8615e5f4bb561204aeeb5a"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0e74a-9715-4779-b8bd-d79486ea0663.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0e74a-9715-4779-b8bd-d79486ea0663.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5f71b1368e471f98a48563bd55548cf8
18db64cc911a98afa49bec290658844a54bca927
c1b20952496d33635f8994558227bda8ddd268419f84123a167aade99c0ba56d
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fefe0e74a-9715-4779-b8bd-d79486ea0663.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6888
x-amzn-requestid: 3b91e2f8-7085-4598-8e10-ca4a5ee87571
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7tAXFbmIAMFVQQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e2868-3eb36435766137c86cbd1781;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:43:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: BJGN5qtK0qcjOrFuNgBmX5i_IVqEGqyiAqT4D7UxA71P801V16Kzxw==
via: 1.1 5ab5dc09da67e3ea794ec8a82992cc88.cloudfront.net (CloudFront), 1.1 cd858042f70b416ca05e042acf3908a4.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:51:45 GMT
age: 16908
etag: "18db64cc911a98afa49bec290658844a54bca927"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
200 OK 6.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d8d9af95acfc8b9b431eb1e020157f6d
f6f926be6e265a597aaede424f05fcd7c76fcc20
0b61d6cb0e0908cb8d303b9e951e2854166bd232e0291b5d698a6b757c064e88
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F76fa20bb-9883-4867-b55e-fc56c8f8fc57.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6386
x-amzn-requestid: 4380489e-d0ba-4f67-ac4f-67619ba34422
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y7shGHryIAMF6zg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632e27a0-005f9c783c7722f16c178026;Sampled=0
x-amzn-remapped-date: Fri, 23 Sep 2022 21:39:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: RuUOjTDRTkcaGFf_hTWrHZ89edOajgGUdl5PjbaUV7CUppat6IYsRg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Sep 2022 21:52:36 GMT
age: 16857
etag: "f6f926be6e265a597aaede424f05fcd7c76fcc20"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
t3.gstatic.com/images?q=tbn:ANd9GcSyEO4etkeK_jaFvc8Lsln4DCqFoHJsn5z8prHMStvKq9cYygNTnA
404 Not Found 43 B URL HTTP/1.1 t3.gstatic.com/images?q=tbn:ANd9GcSyEO4etkeK_jaFvc8Lsln4DCqFoHJsn5z8prHMStvKq9cYygNTnA
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /images?q=tbn:ANd9GcSyEO4etkeK_jaFvc8Lsln4DCqFoHJsn5z8prHMStvKq9cYygNTnA HTTP/1.1
Host: t3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/gif
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:35 GMT
Server: sffe
Content-Length: 43
X-XSS-Protection: 0
t0.gstatic.com/images?q=tbn:ANd9GcTdKH2LxhQg6TzbNwptF90gXtuIGO0KotOXglYlO3T261UwOW5Xpg
404 Not Found 43 B URL HTTP/1.1 t0.gstatic.com/images?q=tbn:ANd9GcTdKH2LxhQg6TzbNwptF90gXtuIGO0KotOXglYlO3T261UwOW5Xpg
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash ad4b0f606e0f8465bc4c4c170b37e1a3
50b30fd5f87c85fe5cba2635cb83316ca71250d7
cf4724b2f736ed1a0ae6bc28f1ead963d9cd2c1fd87b6ef32e7799fc1c5c8bda
GET /images?q=tbn:ANd9GcTdKH2LxhQg6TzbNwptF90gXtuIGO0KotOXglYlO3T261UwOW5Xpg HTTP/1.1
Host: t0.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: image/gif
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:36 GMT
Server: sffe
Content-Length: 43
X-XSS-Protection: 0
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 693 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (650)
Hash 3c8bc872802c35cb8bf9d3ce683cd45d
a154be6aae12301718dd4e23f660c5499e98d705
a23025716c3ad3b65322cafaeeea9fe3c9b78f7a83eb0ea758f05f2d4f6624cb
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:36 GMT
Content-Length: 693
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.14885924049278476&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:36 GMT
content-length: 0
X-Firefox-Spdy: h2
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Sat, 24 Sep 2022 02:33:37 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 693 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (650)
Hash bc575e7271c19dd6c695a034bc6d35b0
1ff0c81bf3cf2dfc103416382ce0f88a5ca4f8a6
a147f1477b4e890319d42575c39cccde764c6894162ec2133fe1fdc5f416fd6d
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:37 GMT
Content-Length: 693
fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24236, version 1.0\012- data
Hash 0caf6947dd9d590934bb7a28548893b9
e7d4be7452b4c60635726fa7578e5b6aecdf185d
5c2d691a9e7ca08b1fccf8dae98e55b58eca6673080c7cb8a2a5972ef71a97d4
GET /s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 24236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 19 Sep 2022 20:39:56 GMT
Expires: Tue, 19 Sep 2023 20:39:56 GMT
Cache-Control: public, max-age=31536000
Age: 366821
Last-Modified: Tue, 19 Apr 2022 18:58:30 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
200 OK 30 kB URL HTTP/1.1 fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29868, version 1.0\012- data
Hash 8b26cc331e323dda95ea6d0dcf4d7542
1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9
2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 13:13:58 GMT
Expires: Thu, 21 Sep 2023 13:13:58 GMT
Cache-Control: public, max-age=31536000
Age: 220779
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.7574591861382519&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:37 GMT
content-length: 0
X-Firefox-Spdy: h2
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Sep 2022 02:33:38 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
www.blogger.com/img/logo-16.png
200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 01:15:15 GMT
Expires: Thu, 29 Sep 2022 01:15:15 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 21 Sep 2022 22:56:47 GMT
Content-Type: image/png
Age: 177503
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 261e140536f2e9a73e93b254cdf32e9c
f67dc4f4470b15cfd80bd76773de7b322cae1a14
3dabcbd9839f49d0459aa5f7e9087b851c1b149d04182faf28cafa7e308f28fc
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Sat, 24 Sep 2022 02:33:37 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 60f2c4b6c07455537be83f75f12576e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: ARN1-C1
X-Amz-Cf-Id: npN-xqwmVU0-K3n6tiFmzY1ftlvbxoEL2uhq5JerEf_fKsL_pC3DvQ==
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa5a7fd1c3d5eed2a8816ac62ad73e51
6536f3880457c6ced9534d5cf10615b6daf42aea
3c3a74be5d72d9e2b5ecdaeafbbf3d0029cd5848d2483cfa10da14859deff436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
200 OK 34 kB URL HTTP/2 www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
IP
File type ASCII text, with very long lines (2800)
Hash 449d375b22b6e2bdc6c2c7a93ee63bda
797e8cf93405a246f90d9d23492da9f8cbdb45a3
149587fafff105da10d1b8de60c8bb03e819cb09cd42cc16e3807b6945b99181
GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 33836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 02:03:16 GMT
expires: Sat, 24 Sep 2022 02:53:16 GMT
cache-control: public, max-age=3000
last-modified: Thu, 22 Sep 2022 19:58:11 GMT
content-type: text/javascript
age: 1822
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash fa5a7fd1c3d5eed2a8816ac62ad73e51
6536f3880457c6ced9534d5cf10615b6daf42aea
3c3a74be5d72d9e2b5ecdaeafbbf3d0029cd5848d2483cfa10da14859deff436
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 80851fd884c594e28cadb62d34618620
36f96b55071e7bcb7e1fbd14d9e5a2f17bd46c6e
5b4ae4285258b05163376aa7b87ba628f68639b397b30765c3967a0067c66ae0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true
302 Found 494 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (545)
Hash 61ecc26df35f9369b65b0abc28cf45e0
8e94ba965b5f824d2b36991c2642f36a039dd9d3
429134c789ad5b3181d9a30e7bf0f1b395f30d42e43d6a90c1cc234c855e8f3c
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7745160747438151217%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 24 Sep 2022 02:33:38 GMT
location: https://www.blogger.com/followers.g?blogID=1412073176525199628&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&postID=7745160747438151217&origin=http%3A%2F%2Faniekelate.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-QCjncqHXqs_eAhip22z_ZQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 494
server: GSE
set-cookie: __Host-GAPS=1:L5Fl9pM-_ZXZxZAsB42w1K578-SrVQ:DHnSYsrPCNR71aMv;Path=/;Expires=Mon, 23-Sep-2024 02:33:38 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4de431d1f0b2fb15b71b607b17be7d3d
60f7beb2f1cf28d72cb159ca92a20cfb9105b493
a19c5c057f664ba912b3b7d03f9491cc81336b9e836158b795fd18a1ff1a654f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 80585e7d4f1510898eeba1ae4175a6fc
a5a6a723aecc70bc2f23ff11d05b10838c3f557b
c0d82c824a37384777d1493508b45b05f5286b3a8366377b43db8f0f84fc0eb8
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 24 Sep 2022 02:33:38 GMT
date: Sat, 24 Sep 2022 02:33:38 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 13 kB URL HTTP/1.1 aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
IP
File type Unicode text, UTF-8 text, with very long lines (55864)
Hash 0d4ce4788aa8f7ba589c4e669fa4eeb8
62aa043f10219c15f4521cf8ad6fb52ad20cae47
1ff9d3ea8f649076a5289278c722753eb9d508740045d62bc5eb0f677db5ba87
GET /feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/05/selain-yoona-muncul-lagi-kembaran.html
Cookie: cj_uid=JL6uU0fDGFxVC9hlGJD5KTnCw3aUCk
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"69fe212a76f71555135c348af811071500a9b261f4da55bd028982eda0cbbe94"
Date: Sat, 24 Sep 2022 02:33:38 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
Content-Encoding: gzip
Content-Length: 12734
X-Frame-Options: SAMEORIGIN
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP
File type ASCII text, with very long lines (826)
Size 158 kB (158248 bytes)
Hash db1b5789e9915e9c82f5df92e5982980
2e193e502995501c85f45fd89d9f83707a7f9573
db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 22 Sep 2022 07:11:34 GMT
expires: Fri, 22 Sep 2023 07:11:34 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 156124
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 47 kB URL HTTP/1.1 lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 468x286, components 3\012- data
Hash 0de30e6df03918ab20d8a87d9033c035
5e0e8c20c8435112181105ef6393288673bf40b1
4e1b468bb7b419bff33c8fe683e3491eb387c17c9c9c4ea23e7cc41d5d98df79
GET /-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d588"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Christian Couple_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 46859
X-XSS-Protection: 0
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Sat, 24 Sep 2022 02:33:38 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+011; expires=Mon, 23-Sep-2024 02:33:38 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 24 Sep 2022 02:33:38 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2974
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sat, 24 Sep 2022 02:33:38 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+033; expires=Mon, 23-Sep-2024 02:33:38 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Sat, 24 Sep 2022 02:33:38 GMT
X-Firefox-Spdy: h2
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Sep 2022 12:31:58 GMT
expires: Sun, 17 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 568900
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 32 kB URL HTTP/1.1 lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 425x320, components 3\012- data
Hash 119f351890394c0f1041d4fc747a01e0
7e893cc7a2c4b83e7bf3d409f846d71f41fed767
3d3dcf2b1422a31d993acf2b88dec84c4135f9f914e9a5b6c7dae36073a26de3
GET /-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d56b"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="9bulan_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 31790
X-XSS-Protection: 0
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 00:48:31 GMT
expires: Sat, 23 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 92707
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 48 kB URL HTTP/1.1 lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 445x331, components 3\012- data
Hash b4c70c60ae51fe96193a3cbb78cc6c53
6b1bc7c02c0ec9391c7ed525ecf8f2a35dff057f
a2100c9a0d83609f8c137cd53807806b8667a60ca6b5b804180e2e0656b9ec7c
GET /-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d564"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="2_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 48326
X-XSS-Protection: 0
lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 22 kB URL HTTP/1.1 lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 324x363, components 3\012- data
Hash 18e3f663057884d446438fce1800040b
7bcf057ae9454035200992f755e1bae4c8d6d1f3
dc760a9a2722822e5128231bccdf98296c54c3617be270a5a8ae5d95e30e9b00
GET /-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d560"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sutinah_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 21666
X-XSS-Protection: 0
lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 41 kB URL HTTP/1.1 lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 433x363, components 3\012- data
Hash aeefa145a6e70802e3bbcd8046cb236a
276ba20b8b260a80dca3fc5f7d62abad4eb190cf
6d9e5016c72e316e6bd5cd94d6c8cfc78efd97af21658798472595e0558157a1
GET /-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="gambar hantu pocong dirakam di jambatan ke-2 pulau pinang_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 41011
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d504"
Content-Type: image/jpeg
Age: 0
lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 52 kB URL HTTP/1.1 lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 464x286, components 3\012- data
Hash 8d6617a765dee2343b2d3b58a92c694a
39c90e0129e4fd9b1c85c5058e7613c31e01a23d
1f1d7b736b41372bac73cf4f539128ee4f41623d9d01294da652da960a75a84f
GET /-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="rezeki_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 51712
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d55a"
Content-Type: image/jpeg
Age: 0
lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 26 kB URL HTTP/1.1 lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 431x289, components 3\012- data
Hash e487a1afd94998fc389fa0a407e98f95
6119b9031746deef1dac5ea7a3f67323cfc3cef7
35a537184880273742bab14d23d8c0c38f07646ce5b5ccd7d77646c11bbaa46a
GET /-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Gao-Huayun-565x376_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 26341
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d515"
Content-Type: image/jpeg
Age: 0
lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 43 kB URL HTTP/1.1 lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 433x317, components 3\012- data
Hash f44e9a34c5c9ed4d10f37fb390f52b90
384d082e77f5dba8e6d34a60f80184e01af0fef0
bfa7c76802e27b78d25b09229bf66b5c93714515f04f6d984516c9581ee46b23
GET /-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4f0"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MAS-A380_b680x498-565x413_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 42556
X-XSS-Protection: 0
lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 53 kB URL HTTP/1.1 lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 442x332, components 3\012- data
Hash 1757d0e5194d8a5a833cb2a02458bdf9
3b2dd318cf2ccad00b3113582e3019f2cea59e4d
44b87ed55f9aac71ceda8e8c9e00cf600c9f88e0db6609af8d19f8a4122daae3
GET /-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4f6"
Expires: Sun, 25 Sep 2022 02:33:38 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IMG_20130924_092759_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Sep 2022 02:33:38 GMT
Server: fife
Content-Length: 52622
X-XSS-Protection: 0
lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 76 kB URL HTTP/1.1 lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 489x510, components 3\012- data
Hash 9823d6a508bd549242951d031c4924d8
cbe40fd52df15c23cbb78cf221be3aaa01c6d640
da5e6625690a56ee3f39021e5971608dbded3e271048a3bcfe3999983fb8f9a6
GET /-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="tentera wanita korea utara 3_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 75636
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d51b"
Content-Type: image/jpeg
Age: 0
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
204 No Content 0 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=648088&boxtag=sblqaq&sec=form HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 24 Sep 2022 02:33:39 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Sun, 24 Sep 2023 02:12:36 GMT
Cache-Control: public, max-age=31536000
X-Cache: HIT
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
200 OK 653 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d0d05a23cb23fe35908361694e15b565
d14818ca4dc04d998081b92c3975ff6e9f6dcdea
1fe598dd28104053751c17c7371ef1e42ec25c08b513993cbc93a4f6b4b9c716
GET /box/?boxid=648088&boxtag=sblqaq&sec=main HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 24 Sep 2022 02:33:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 17 Nov 2004 05:00:00 GMT
Last-Modified: Fri, 24 Sep 2021 02:33:39 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Cache: MISS
Content-Encoding: gzip
www.blogblog.com/1kt/transparent/black50.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/black50.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 857cf81cfd3449fd408ac0604cd3a326
69209e67fdd7533fb3c76a7f3e2430a63909e4e9
380be71e72fb28899a6cf71bad4434677a6df3a2fcce56d23c28bc4794549047
GET /1kt/transparent/black50.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 17:18:33 GMT
Expires: Wed, 28 Sep 2022 17:18:33 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 21 Sep 2022 02:52:11 GMT
Content-Type: image/png
Age: 206106
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg
200 OK 1.8 kB URL HTTP/2 3.bp.blogspot.com/-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 3285f84ae875731071b9a9977f70924e
e2a397ea3539e0ad8541b71d3c524cab63185a33
856300518b909557b0462756bcb44643fac507af54e1b9690a871ef9c415afab
GET /-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4374"
expires: Sun, 25 Sep 2022 02:33:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="orangmuo1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 1807
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
200 OK 1.9 kB URL HTTP/2 2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 6028b848b44eabd8afb2f33709cb419d
96341495ffc9b35a1e4da8f24afef927d098fe9f
617c9f4afea96b2cb870ca5e5b853a23985f0ce7815040bee9848e0b5e2ddc79
GET /_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vb"
expires: Sun, 25 Sep 2022 02:33:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="151220101344.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 1870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
200 OK 1.7 kB URL HTTP/2 2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 82895e004d3dd1488c1854bd003596a4
53bdd437bd9706bdecbb7190a54bfcc99f285f1c
77994df50cc1dc7234716e49ce3662783bb16f984c9b16ade3282b607c458af8
GET /-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v712"
expires: Sun, 25 Sep 2022 02:33:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="hukhuk.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 1710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
200 OK 1.9 kB URL HTTP/2 3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 48bba68daff578049c43043c87f3b208
76da41ebbc523e223a7191d5cfb9631a7678e433
e264232ba3a862f8eb1465170521e15c55a9879896379c406e7edb405d0f0393
GET /-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="83406512_1293299467522094_3600008267150917632_o.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1915
x-xss-protection: 0
date: Sat, 24 Sep 2022 02:33:39 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2a99"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
200 OK 2.2 kB URL HTTP/2 2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 386f20727f213912f0a055d82ac929da
9cc1801633daae7ddfa14d39c788de9511c58858
1e4f97fabf82db00d04160d636db8337603fa9ee33f59292725cabdb36582e2a
GET /-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vceca"
expires: Sun, 25 Sep 2022 02:33:39 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="rezise.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 2160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
200 OK 1.6 kB URL HTTP/2 4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash b93f7dc0cd53989a2c79192d7168b731
692f76c3763bfe76d5b851092c648920e141f362
d639e67f744d24488abb8d54c479c2ff9aa43ce74bf5602d6874683f496fef5a
GET /-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1628
x-xss-protection: 0
date: Sat, 24 Sep 2022 02:33:39 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1027"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 707 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (664)
Hash 7fc77725e6f76ccf590c7e00fc2454ad
05fe68b52f1e1322055e6b42d762be5fcf41e61c
93155d4dddb2c4279b1f10c185aa12ad2705d8d01b8bd2beb22a950e8fdbb1b2
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Content-Length: 707
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 705 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (662)
Hash 09bd70217694013fb74d86a46e62d820
a0180bf9ebc341ab6e78f2473a8ebc70fb35274d
a4d5cdf67bdc4a73b0bc259b988a088eba30f4c37c3ef86e402ff0f6e680c5f1
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Sep 2022 02:33:38 GMT
Content-Length: 705
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.27155805469395855&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:38 GMT
content-length: 0
X-Firefox-Spdy: h2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&href=undefined&rnd=0.9083048185316821&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Sep 2022 02:33:38 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 87f943bbdb905bb7d98cd09ed471f1cb
8aa4bc6edf772758a59d9c4be16583a8fd8c96a3
a22b7ec1475d498aeb0e8eb80aef4f424c5d2651ee231650b116c739273dc4e5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
200 OK 1.5 kB URL HTTP/2 1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2c53c52d7f8e27257535cfddaf818761
2b0aaeae7b0e715d7c6194e514591fd0c2a350b4
8d10c19235052321c5bf4aa25f86083366ca7c2c25e4ed71991d1902148bbd52
GET /-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="boa.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1508
x-xss-protection: 0
date: Sat, 24 Sep 2022 02:33:39 GMT
expires: Thu, 15 Sep 2022 15:04:57 GMT
cache-control: public, max-age=86400, no-transform
etag: "v545e"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Sat, 24 Sep 2022 02:33:39 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
s10.histats.com/js15.js
200 OK 4.4 kB IP
File type HTML document, ASCII text, with very long lines (11088), with no line terminators
Hash 688a4c6f6b98b3bfb618172e90695341
432a0d43c31e466673d13308db9e1ba5e519619c
becf42e9318b096cf691c11947c601c75b0b5ba2a6421fd2e676f62c646c17c5
GET /js15.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
date: Sat, 24 Sep 2022 02:25:25 GMT
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 462520483
etag: W/"980881274"
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4405
x-iplb-request-id: 5B5A2A9A:2B7D_2E69C9F0:0050_632E6C83_6FF4D:BE99
x-iplb-instance: 17363
4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
200 OK 1.8 kB URL HTTP/2 4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 628ac0588bdb98eb2dc69447bc81c3da
c768029c705d42b6b0fa00255e51435f3eb6abb8
40526f8672d1c629147c5b34d6b026fc0a554dd0ac1a4ce04cd8c531e9f5d885
GET /-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1825
x-xss-protection: 0
date: Sat, 24 Sep 2022 02:33:39 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14f0"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 936c836fe49e0724b87ac82162f5047e
eb0156fd2ad894e68e02b341fc4aa57b21a42e85
3c7ddffb4f45fc048f9f0d1602cb60c3c5fadc4435c88f718fdc13902354abd6
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3C7DDFFB4F45FC048F9F0D1602CB60C3C5FADC4435C88F718FDC13902354ABD6"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7394
Expires: Sat, 24 Sep 2022 04:36:53 GMT
Date: Sat, 24 Sep 2022 02:33:39 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html
200 OK 2.2 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (372)
Hash 0729db825a5e6add29fea48e589dfdd4
19db2bccb0bc384c8d6d25115ed80e13b0ca755f
574aee080acb57f3d6f1d3ffb6df9ce39ecb58b4c2bab8656e06883f5df4c536
GET /geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:39 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Fri, 23-Dec-2022 02:33:38 GMT; Max-Age=7776000; path=/
pays=Norway; expires=Fri, 23-Dec-2022 02:33:38 GMT; Max-Age=7776000; path=/
ville=Oslo; expires=Fri, 23-Dec-2022 02:33:38 GMT; Max-Age=7776000; path=/
idcompteurcc_1955922=done; expires=Sun, 25-Sep-2022 02:33:38 GMT; Max-Age=86400; path=/
online_idcompteurcc_1955922=done; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
originecc_1955922=United%2BStates%2523United%2BStates%2BCity%252346675%257CCanada%2523Canada%2BCity%252313968%257CCanada%2523Burnaby%25239371%257CGermany%2523Frankfurt%2BAm%2BMain%25235658%257CUnited%2BKingdom%2523London%25235463%257CNetherlands%2523Amsterdam%25235075%257CUnited%2BStates%2523Santa%2BClara%25233893%257CUnited%2BStates%2523Clifton%25233563%257CCanada%2523Toronto%25233561%257CIndia%2523Bangalore%25233442%257CSingapore%2523Singapore%25233109%257CUnited%2BStates%2523Boardman%25232752%257CUnited%2BKingdom%2523Bath%25232194%257CUnited%2BStates%2523Fort%2BLauderdale%25232052%257CNew%2BZealand%2523Auckland%25231189%257CRomania%2523Romania%2BCity%2523755%257CRussian%2BFederation%2523Moscow%2523719%257CRussian%2BFederation%2523Russian%2BFederation%2BCity%2523685%257CFrance%2523Paris%2523528%257CIndia%2523New%2BDelhi%2523523%257CUnited%2BStates%2523Ashburn%2523485%257CIreland%2523Dublin%2523470%257CUnited%2BStates%2523Seattle%2523434%257CFrance%2523Le%2BLandreau%2523394%257CNetherlands%2523Netherlands%2BCity%2523333%257CUnited%2BStates%2523Chicago%2523329%257CGuatemala%2523Guatemala%2BCity%2523311%257CGermany%2523Aalen%2523298%257CUnited%2BStates%2523Lenexa%2523278%257C; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
online_1955922=26; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
jour_1955922=63; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
total_1955922=136172; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
bonus_1955922=20777; expires=Sun, 25-Sep-2022 02:33:38 GMT; Max-Age=86400; path=/
bonus_j_1955922=1; expires=Sat, 24-Sep-2022 02:36:38 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Sat, 24 Sep 2022 02:36:38 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YL%2B3eJAmIyBMNTBcldnMnsvElj7PvLYuvzO5%2Fy3l0EnsH7927qN8QcuXlfMZT88IkTIQGI8u%2B8tfuFgKE1HRIwkWZxGWsaT9X6kTpa74q%2FkXHSZeBEwUA9epEXaRIERt"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 74f81dd5c882b506-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
200 OK 20 kB URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
IP
File type JSON data\012- , ASCII text, with very long lines (32099), with no line terminators
Hash d3ad06db655d414ee9eee796c9dd4616
4e4c96461bba51ed4a3a39a06870c1b08af8e64c
d0001ab0e22a1ab4dd73df3c341efd33e73a0b85a01a6df1307d347c46565a26
GET /5/3294720/?oo=1&js_build=iclick-v1.430.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: application/json
x-trace-id: 8839b02f3e04c85575f1dddda3c6df92
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=73ce2f2c974d43e0ad479b2a034c879d; expires=Sun, 24 Sep 2023 02:33:39 GMT; path=/; secure; SameSite=None
oaidts=1663986819; expires=Sun, 24 Sep 2023 02:33:39 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.feedburner.com/fb/images/pub/feed-icon32x32.png
200 OK 1.4 kB URL HTTP/1.1 www.feedburner.com/fb/images/pub/feed-icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f3b2f178bb0fa4f2701ff218f6a6930d
2a1bc7c9589c8d1cde0b96e00c660b6480caf909
55070d3be787cd8ccee8ea0fd75f0e11e944e6f70231f0dcb4c5ae348fcba6be
GET /fb/images/pub/feed-icon32x32.png HTTP/1.1
Host: www.feedburner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/pichu-static
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="pichu-static"
Report-To: {"group":"pichu-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/pichu-static"}]}
Content-Length: 1441
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 24 Sep 2022 02:33:39 GMT
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, max-age=0
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/png
Age: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 593149bcd358a589b546299ed1238523
49b041b55bc05ed34e1128fcd53a7a1f4b347f4d
8c14a724632e43a28d5943033566cf51c633ecda36a60a18d61c3afba828230c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3554
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Last-Modified: Sat, 24 Sep 2022 01:34:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js?hash=9cdad31b5bdd8e230fed3895eaee79d0
200 OK 89 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=9cdad31b5bdd8e230fed3895eaee79d0
IP
File type ASCII text, with very long lines (18673)
Hash d3d860f75e2f2530149ad9f3704c6def
fcabb4966c57e467ce510f5c888c60b6df30ac1a
f51365a249db5ea1ad5829e6361145126259a5c7afee139954ba18d7e742de0a
GET /en_US/all.js?hash=9cdad31b5bdd8e230fed3895eaee79d0 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: c5eac6a1e7f839cb9b81833aa49c01d7
etag: "23bd86782e94cadea5fa4347c2fa4673"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 24 Sep 2023 00:23:09 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: 09hg914vJTAUmtnzcExt7w==
x-fb-debug: YoqLhzt4DuiWIbU6PdV3M8y163rmjNDTT1OS7B5+OeS/hKGNh1hTNdw1WP43CntVGx43tzZQRsvWsjG7d9qEjw==
content-length: 88719
x-fb-trip-id: 1679558926
date: Sat, 24 Sep 2022 02:33:39 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
developers.google.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: 7adce3f550fc9df22d3db2e8effa03b6
Date: Sat, 24 Sep 2022 02:33:39 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
aniekelate.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 aniekelate.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/05/selain-yoona-muncul-lagi-kembaran.html
Cookie: cj_uid=JL6uU0fDGFxVC9hlGJD5KTnCw3aUCk; ck_TCM_pop=1; HstCfa1761712=1663986818683; HstCla1761712=1663986818683; HstCmu1761712=1663986818683; HstPn1761712=1; HstPt1761712=1; HstCnv1761712=1; HstCns1761712=1; sc_is_visitor_unique=rx7516841.1663986819.C675C02B94B24F30C5A8C8E224C28527.1.1.1.1.1.1.1.1.1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Date: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
ETag: W/"e1ba656da3dacd230d4c39fb05c0b322721591c9c17ab34fcab3ae03a8b72d8e"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
ocsp.digicert.com/
200 OK 471 B IP
Hash 593149bcd358a589b546299ed1238523
49b041b55bc05ed34e1128fcd53a7a1f4b347f4d
8c14a724632e43a28d5943033566cf51c633ecda36a60a18d61c3afba828230c
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3554
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:39 GMT
Last-Modified: Sat, 24 Sep 2022 01:34:25 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 14 Oct 2022 22:20:50 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 792768
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zxOv65KGyl5aglCMOj9en229s8mYAX0tAAL%2BcM%2Fay%2FTwMZL9LWG3qjFjTN2RWnaV%2F7nqzmCccvVW0a6yJi6xU2w8908%2FQ6jKMvFEPfcfa2L1ewysxtNirBh5mcbFKTeO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8da200b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 01:57:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 88586
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4xjrhuagoCOWVbp91NoyrIgy%2BScn9JJW95LVPNW64cGBR%2FGMv2u1gFQrmrwyuqFEw50KudaEOpe8OOVjUWCJEQseJiMbIFAa1N9MtsLJ7iBQGqEM14TconW06JgnPAwj"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8da220b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 20:53:33 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 20405
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qg1RhfaAa4d%2B6yoELSaiVctTMUVQvzEKbU1CDn0nhH8HclwzuJWB7Irpoim6H0r%2Fkh%2FPDHH9Ew%2F1oKTmOJ7PYaB%2BeP2G1DPhz%2Bnq7NwPoEs%2F56d1Q53C11U8g1WOcbeG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8da230b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_netherlands.png
200 OK 710 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_netherlands.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4d48534384964664d122ef558ebf1acd
8cbccb6b66f6161c329f9945b58e79e09640cc90
286ee399704cd53efeabbca51dfc8459fb9633265ae4e9e046610f7d61d087bb
GET /geocompteur/shadow/flag_netherlands.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 710
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=892
content-disposition: inline; filename="flag_netherlands.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 20 Oct 2022 00:00:16 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 354802
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FKF%2FO3GnAywFSUqSpsnxVkzROHp%2FK2KGGxO%2BKooNCwW6VRfBsD3%2Bs6qZ63ff0gMuIc7LjsDPqwUsJng7URR82ARyPDoxHa7ycjzBbryL%2B%2B2RmMAeyX9c2UyYJPPg3zCd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea260b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:39 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 17:11:54 GMT
ETag: W/"632b45da-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ROKpp0iKAM5mNsk8ipsO6R%2BdLAqIzBNR3Peanh4oV2QFy5hgl28t7QVo7r5FwyOXdSdnFX6JWogG%2Fc2cbhtOvjilnT9s6IIqIiUOprBXEemF%2FDmDSGOTK8dJSXZW8ddb"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 74f81dd8e9a7b506-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 26 Sep 2022 02:33:39 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/shadow/flag_india.png
200 OK 806 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_india.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 360d08c7d723c9cc21e98b83a9fbe646
b580c8380db1687a6365a95789c7227d325ce00f
b73e30b7030de7ec01db85eb01edfb3d228169583d6ccc6583bec0552d7ce172
GET /geocompteur/shadow/flag_india.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 806
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1027
content-disposition: inline; filename="flag_india.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 05 Oct 2022 10:04:45 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1614534
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rS2AhAzUL0d62S8NpmTG1QzM0M6yVXVYKa7%2B77bRem%2B5xyVeXXuVYW4jG6VcHKEpUL7MW4wnNjXP1fwuT5XWTFTJCIIfXoup5Z4oLpK9R4YPuu3srRybRCODPKIoKZBb"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea270b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
200 OK 1.2 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0fca0f8c1f72968c8849d783accae326
6d6f3b4500a3f1fccc3474d59c716b2f60a59ea4
c1319ad29f9822f08a6740f0b89e91127cfb11a449f99528f0a7928156032c9e
GET /geocompteur/shadow/flag_united%20kingdom.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 1220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1459
content-disposition: inline; filename="flag_united%20kingdom.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 18:14:05 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 29973
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v%2BXzj9pa6QUIToPJzHOuu6NHSXJsS1OYDUwKhpTnXNnZ5e2n3K91xZogvykSY7OsxJ7Drl3ErL0kIVW%2FQBBkiM1KCOjCn1YsA0hCvWi1F%2BTl5%2FSff4K3SikcKoSDLIWE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea250b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_new%20zealand.png
200 OK 940 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_new%20zealand.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8719b63ac81155fd64422298ef8a8b25
c034b5869772ddf1675ebdbeb3c0d3c540738c24
b313f56a36c855a1a34a02b96910ee4307e553a28a6e52bc64e2ab1bc2cfdae5
GET /geocompteur/shadow/flag_new%20zealand.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 940
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1173
content-disposition: inline; filename="flag_new%20zealand.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 20 Oct 2022 08:29:29 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 324249
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sq1lvpu9hW45xEGetPhw4GtwV7jNv3SNPk2RxD3BeoPF575eP9LRhm%2FhLMS3B2i0ZPnjbTGv%2BQwwuua7go%2BrreLOU4yPogHlB8RWGLoWT3kqB3AHP4LO28V%2BgAA%2FzrT9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea290b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_singapore.png
200 OK 768 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_singapore.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 931d98f74f8bbb82364a40f7c3c5ea3b
f844a679d51126b38659a25e9c71c748da392714
04f122230781518f0b5807695a1c731e33bea9ba0264d612c799485074204627
GET /geocompteur/shadow/flag_singapore.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 768
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=939
content-disposition: inline; filename="flag_singapore.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 28 Sep 2022 02:04:01 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2248177
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6PK4KtmWqiOZyeEtZgwgt40wz29bE%2FGijEybYCcCQ6wPPZ2ew2r5OsrdrQxIyGQNxI1iK6szp6yFF8cj%2BKvlDG%2FuYEXN2X%2FY1yjh2Yxmgu7Z7faSvQjLnKHTEuI147g9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea280b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_romania.png
200 OK 644 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_romania.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a2ef37e3cfe2119759469a219565c145
7d174bb96c9eb762a56b531e8c15a160773fe008
8f45100a446929b8ad38c886a1cc6d033a066a008f8268b6fa1ec8d3f4d74166
GET /geocompteur/shadow/flag_romania.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 644
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=842
content-disposition: inline; filename="flag_romania.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 01:57:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 88586
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3KkOPN9YMm7v1OidHJNgUffX5C2v8uK3UqsrfWVohXAtUfENopsLj3D%2FdMHOjEBNtz2HRnku7UN2%2FfAiBUfNa7pMdV3Yo04C9JKPf3bZs9lW88ShrcisrY9qR1T9rNRm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea2a0b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
200 OK 680 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 852881aef6d6a8bca3123c3201f64c74
0e5ef2c61383bb79c8a6ea068d9a688631d844fa
41c20a2d0dc8fe26ec1e5c7e71b5d82fc09e7ce0bd30db7abb516474f5c186a1
GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 680
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=857
content-disposition: inline; filename="flag_russian%20federation.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 25 Sep 2022 21:27:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2437545
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IjL3TQ8ie4fwh8yoCuTDpJ%2FYnvjoYWCb34RB0RckGKVfH0tgW4dQAvrcx%2FFAYH0j8pI6FQ2IQggFYc6eUsGOsn4boe2v0er8TFfjZ5PXT2jtVyr%2BKErIAoQm5TTbRJf8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea2b0b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_france.png
200 OK 696 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_france.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 40db5c3f7bd9cee685d7e682084fb924
711a4bc728a541423d4444facaee2651747620db
bf91a9e6437f46b4e59f5786b40ac2da0d23f70060729e3e9adbd1bbbd2ab716
GET /geocompteur/shadow/flag_france.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 696
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=901
content-disposition: inline; filename="flag_france.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 13 Oct 2022 18:28:29 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 893110
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NPNcBHNKHD2e%2FBXcBdYyoH5NXg5%2ByvpfaBWUluN0H93agHWvAxpCbooXxFkJJROu23RIgiTXvRWlx8tXssfoW%2BLC3CG4Q175hVJqjIHH6ZftpXVLol%2FWlfzDPV9HnpyK"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea2c0b45-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_ireland.png
200 OK 712 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_ireland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e55f246106bcd5ae49ef1a026ec80d3
a5afe18fe64456cbb16e31287f4106228267f584
eaf4b1563a65fb7bd06ace795835a00a4f491a48506996bd65c161d35002351e
GET /geocompteur/shadow/flag_ireland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: image/webp
content-length: 712
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=937
content-disposition: inline; filename="flag_ireland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 18 Oct 2022 19:54:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 455925
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dmk0qxiv7ucfbZh1oOMpkg8%2B3c1sVEIh38J2r6vu0R4rtk776EW%2BYVuZKAfkEHPpfFzfMhKaAfNAj4NM2MSjfk1%2FCozpGIrKQWE35GJCpKWSQ%2Bjv0RiWhMgGo4jRVbBt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd8ea2e0b45-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 337bc17ad3f42a6fc2fb0b6ea8d66bb8
f1f1ca2528ade1334727ed3f212ad8e16ff5dd79
51712ea54a8a2ee6abc9f0abb941624add01797762f95a83ee8701804628f8da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "51712EA54A8A2EE6ABC9F0ABB941624ADD01797762F95A83EE8701804628F8DA"
Last-Modified: Wed, 21 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4951
Expires: Sat, 24 Sep 2022 03:56:11 GMT
Date: Sat, 24 Sep 2022 02:33:40 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash e80dd63e4a883d6f534f0b804a04e8cb
156ebdcce6a0c6f64f20948b0ce05b8b888d4341
95b632bfde99379c103f3e4a970d83d1d0c751618053a1929d26a6ba2b83846e
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Wed, 21 Sep 2022 17:56:48 GMT
Expires: Wed, 28 Sep 2022 17:56:47 GMT
Etag: "156ebdcce6a0c6f64f20948b0ce05b8b888d4341"
Cache-Control: max-age=400386,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74f81dd93dd0b527-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f81d321c15c87e7147d792d08ebb7513
47f30d4ca38e6753a393965219321b0394ebb597
390ae5f5435d3f8c8b7f1fa8d7e2a3ebf55ea5dbe98aa3528dd562df4c295753
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&j=
200 OK 2.1 kB URL HTTP/1.1 t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&j=
IP
File type ASCII text, with very long lines (2077)
Hash 51bd741af3fcc4984d1a753eebfa1141
534664acf69cbbb5c9b97c96b63dd37bdc580da2
3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c
GET /i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
X-S: ger1
Set-Cookie: m=1; Domain=dtscout.com; Expires=Sat, 24-Sep-2022 03:57:00 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sat, 24-Sep-2022 06:33:40 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1663986820; Domain=dtscout.com; Expires=Mon, 02-Jan-2023 02:33:40 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
X-T: 0.455
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: no-cache
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 08:39:19 GMT
expires: Thu, 21 Sep 2023 08:39:19 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 22:13:13 GMT
content-type: text/javascript
age: 237261
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK 25 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash cc24419c482370498f3c227ac73d666b
37fc103ace873f47102e0ca88eb4735bc6806750
152fa070788f0cf29dc062f03860897c39c7ffa13e6eee2dc3e5dc131ecbc7aa
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 21 Sep 2022 15:17:30 GMT
expires: Thu, 21 Sep 2023 15:17:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
age: 213370
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4fb51016b82f43bc6ee9f5ace001690c
5390a86aa0a7b82f5d09605b10812567b309d27a
73283fa4b416ee80d2ac87c30d2183afa1ae487a8650563b79adc1f001030f73
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 74 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
File type ASCII text, with very long lines (17807)
Hash 3df175cbee853398f386597886224242
aef28c6dac873365274c5410f1a72f8ebfa0a479
b1fde45b0732ec348b2d6a23b51f317834ff73224435987016bc5ef4e902b5da
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 24 Sep 2022 02:33:40 GMT
expires: Sat, 24 Sep 2022 02:33:40 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74521
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
200 OK 2.1 kB URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (2082), with CRLF line terminators
Hash 3b0fb386fe3bb881935f1d8fe7ca2ef4
69faa45e14d52ec842c5ee84ec294ec219490166
07818a00aa0d019bec836ebc6d7aeb38136f1ffcbc4cf2b9c55dcd1b2662c795
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 01 Oct 2022 02:33:28 GMT
last-modified: Mon, 25 Jul 2022 16:50:39 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z3FSWSxoA4qcbk8B57Glu1iSWvtRyyu0u%2FrNP%2FrLUmm72w4m24uPYrSwlzi9MCDc6iDuiw%2BQukGYqWWIZCkKBGTtunVNqjejMer3BxCWL04B8F7uXew8hhuxV5xuDpIx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd649ae0b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_guatemala.png
200 OK 1.2 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_guatemala.png
IP
File type PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced\012- data
Hash 5db12601ec81b8db3c19d90d21430049
da63579284808bbe425eb8baf22260e6d8272a95
f9d4189670839691473cba6de532aeb7a94aa3d0a0398371237fa0223baf6a0c
GET /geocompteur/shadow/flag_guatemala.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:40 GMT
content-type: image/png
content-length: 1153
cache-control: public, max-age=2592000
expires: Mon, 24 Oct 2022 02:33:39 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VxNfNEMTPpV%2BGa%2FUM41nns3ze5immzfsyXT8qJSpeVfcSs%2BJfA89TQ8U%2BZf1d9hu%2BpxUcnV7CFrKjGlwD87%2BFT4zViipxG3Xmf0tuj9nKxhLoWv8ajFkwFycO9j8AVke"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f81dd8ea2f0b45-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f81d321c15c87e7147d792d08ebb7513
47f30d4ca38e6753a393965219321b0394ebb597
390ae5f5435d3f8c8b7f1fa8d7e2a3ebf55ea5dbe98aa3528dd562df4c295753
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Sep 2022 02:33:40 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
t.dtscout.com/pv/?_a=v&_h=aniekelate.blogspot.com&_ss=4x641fx4eo&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=186c&_cb=_dtspv.c
200 OK 51 B URL HTTP/1.1 t.dtscout.com/pv/?_a=v&_h=aniekelate.blogspot.com&_ss=4x641fx4eo&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=186c&_cb=_dtspv.c
IP
File type ASCII text, with no line terminators
Hash 1200458c112eea31dee94c28950b8311
aaf04688fd0951cab5318a5378d0bd116376a5b8
9d0f0770e91a9b33b24ed9d0565b632d5e01fc15c9f54447159c65cd1b5166b8
GET /pv/?_a=v&_h=aniekelate.blogspot.com&_ss=4x641fx4eo&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=186c&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Cookie: m=1; oa=1; df=1663986820
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.14.0 (Ubuntu)
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
X-T: 0.151
X-C: 0
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: no-cache
logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/
302 Found 150 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/
IP
File type HTML document, ASCII text
Hash 7e5d16b4cbdb47ce031f2daefd0ca61a
793af3a0462e745a6e52c136016f1dbe564b3d59
250316e25913f75e12c0c8dcc029b242f7f66ffac0ab7bfb717c9c31846f5580
GET /hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 150
date: Sat, 24 Sep 2022 02:33:40 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=A4B5A1F8-4431-434E-A852-B85C830436D2; Path=/; Domain=xiti.com; Expires=Tue, 24 Oct 2023 02:33:40 GMT; HttpOnly
atidx=A4B5A1F8-4431-434E-A852-B85C830436D2; Path=/; Domain=xiti.com; Expires=Tue, 24 Oct 2023 02:33:40 GMT; HttpOnly; Secure
atid=A4B5A1F8-4431-434E-A852-B85C830436D2; Path=/; Domain=xiti.com; Expires=Tue, 24 Oct 2023 02:33:40 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 22e421a47e59010b5e8eb6ae4d4bd7e4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P2
x-amz-cf-id: lsUNAB6y2ZEJJNirAM2WLJrR1L7wVCZhluWQ9QUq4fYjVMqvf3b5yQ==
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=geocity_orange
200 OK 5.8 kB URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geocity_orange
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash a1be97ffccff44cc739b40699557bdca
2f3a3286631a540c3a0b5645da21ef7e1275d948
2180ac989d5462cb3b008c145079917ab63ac65a56a1c8e89ba0a9039083d097
GET /hitparade.php?pagexiti=geocity_orange HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Sat, 24 Sep 2022 02:36:39 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VCPc%2BeBbwU6anSuyvo9ZBBW5P2AiT6itpzcmNvGAhHFjHNxIpBQd%2BUorms%2F5R9hUAaa2vShgpOPgCOV9NvlVQzgCQmjLx0sGkPw8Z1WAwT%2B7JEpB76EI3jGieJL0cbPD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd649b20b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/img/tmp/geocity_orange.png
200 OK 8.3 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/geocity_orange.png
IP
File type PNG image data, 164 x 314, 8-bit/color RGBA, non-interlaced\012- data
Hash 7c35ee0bdcfdc3d3878ef1610e0ed5bc
49db104e5492c428eed370fd009f1afe2f622dd9
df28904e3834f7f204be97c8a40578f71b1ad3629f8ba50c8cc38696381c8054
GET /geocompteur/img/tmp/geocity_orange.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:40 GMT
content-type: image/png
content-length: 8312
cache-control: public, max-age=2592000
expires: Mon, 24 Oct 2022 02:33:39 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: MISS
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NaLiFWKfemBsS1wsLiwnUYxGRR5u8RLzOeXDX75VYoQX2WN%2BsDlkxx8iCmPqxQW0xjD1Shbcdbj%2B988CkwQ5ccWSmuB%2FIZXUH2ALnC2b5U8QlQbtyhCyRgbj%2BeIxaifN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f81dd9ba770b45-OSL
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash af56ebb29d27fb6a049680fe85c8828b
235a3579a72192a6a1fc0366d6d8671e2630b9f5
68454f522f57ca84315459fbf178251544804533512e9bebb8a6e3f3bce12895
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 22 Sep 2022 18:25:22 GMT
Expires: Thu, 29 Sep 2022 18:25:21 GMT
Etag: "235a3579a72192a6a1fc0366d6d8671e2630b9f5"
Cache-Control: max-age=488500,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74f81dd9de28b527-OSL
logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geocity_orange&hl=2x33x39&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Sat, 24 Sep 2022 02:33:40 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 22e421a47e59010b5e8eb6ae4d4bd7e4.cloudfront.net (CloudFront)
x-amz-cf-pop: LHR61-P2
x-amz-cf-id: sGqNshmFMwy71wmc_9KMyBlyk_aJBgQzAufp8b0g-69YckjeQO7CuQ==
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=73ce2f2c974d43e0ad479b2a034c879d
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=73ce2f2c974d43e0ad479b2a034c879d
IP
File type JSON data\012- , ASCII text
Hash 2ca0f710ffe796b8948045a03bd1abc3
e24b976e31bade977ce2fb1ab32fa7a155ccb9e1
41b0cea6002431dac86b5486db5699bd60d4ff049346de41b48d11dec01136fb
GET /gid.js?userId=73ce2f2c974d43e0ad479b2a034c879d HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Sep 2022 02:33:40 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=73ce2f2c974d43e0ad479b2a034c879d; expires=Sun, 24 Sep 2023 02:33:40 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
s10.histats.com/counters/cc_471.js
200 OK 9.8 kB URL HTTP/2 s10.histats.com/counters/cc_471.js
IP
File type HTML document, ASCII text, with very long lines (20593), with no line terminators
Hash 05def13e9ee3ca0aa2eed44fff075497
008d906ad116617434730a15cf1af12f11881af8
b556dd238f410880415c6831e9fe1ff97c83681e01a2657ecb74f52aa174980f
GET /counters/cc_471.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:22:34 GMT
etag: "159130465"
last-modified: Thu, 16 Apr 2020 10:45:32 GMT
x-request-id: 808354184
content-type: text/javascript
content-encoding: br
x-grace: full
x-cdn-pop: rbx1
x-cdn-pop-ip: 51.254.41.128/25
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 9779
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=mJovPzA-9I6b_EnSsm_GjIQInAUBVxu14zUsA7rabPFiJmQKgOnHKcGuTiVoHLsPn0sp7kDusXp7g2N97d16Vb_S7wXwrBrZ_s-s_AVJPTIyuvlpVlGm55dwwWvf0HZ-ioTCTw1duiNoG2N1PkqSvqpl5mFfIlbWrRBbrH6bSVCQOA7sADZ9SGSYpKJBG8KxwsoPiTbV4BFwW9lMlCn_A66JGhDzq_8iTMSYGw%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=3207e29e-ed53-4b0b-96a1-bb9e8793e3b0&userId=73ce2f2c974d43e0ad479b2a034c879d&m=link
200 OK 1.7 kB URL HTTP/1.1 onmarshtompor.com/?rb=mJovPzA-9I6b_EnSsm_GjIQInAUBVxu14zUsA7rabPFiJmQKgOnHKcGuTiVoHLsPn0sp7kDusXp7g2N97d16Vb_S7wXwrBrZ_s-s_AVJPTIyuvlpVlGm55dwwWvf0HZ-ioTCTw1duiNoG2N1PkqSvqpl5mFfIlbWrRBbrH6bSVCQOA7sADZ9SGSYpKJBG8KxwsoPiTbV4BFwW9lMlCn_A66JGhDzq_8iTMSYGw%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=3207e29e-ed53-4b0b-96a1-bb9e8793e3b0&userId=73ce2f2c974d43e0ad479b2a034c879d&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2245), with no line terminators
Hash fd7325c896d496509e42e931b02507e8
c1a0481305d6cd18b9b6b5f80f3a7243624f6bb3
55146b9e07d6eddcd89bbe50d4dfdc521f97e4898e07255f2a258c235f243254
GET /?rb=mJovPzA-9I6b_EnSsm_GjIQInAUBVxu14zUsA7rabPFiJmQKgOnHKcGuTiVoHLsPn0sp7kDusXp7g2N97d16Vb_S7wXwrBrZ_s-s_AVJPTIyuvlpVlGm55dwwWvf0HZ-ioTCTw1duiNoG2N1PkqSvqpl5mFfIlbWrRBbrH6bSVCQOA7sADZ9SGSYpKJBG8KxwsoPiTbV4BFwW9lMlCn_A66JGhDzq_8iTMSYGw%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=3207e29e-ed53-4b0b-96a1-bb9e8793e3b0&userId=73ce2f2c974d43e0ad479b2a034c879d&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://aniekelate.blogspot.com/
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: fc4c6d27410f1d977eb2681e218f4616
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=73ce2f2c974d43e0ad479b2a034c879d; expires=Sun, 24 Sep 2023 02:33:40 GMT; path=/
oaidts=1663986820; expires=Sun, 24 Sep 2023 02:33:40 GMT; path=/
syncedCookie=true; expires=Sat, 01 Oct 2022 02:33:40 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
developers.google.com/
200 OK 22 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (309)
Hash bf4f43ede3649ad82b9a663a495a21ed
30700c2cb6ee9e35abeaa3666a3a0daff5e880e0
65c25be94a8687e58a3b49b951e416f226e632f188d5fdde67e3e09a334b5533
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Cookie: NID=511=L4EqIzJTra2iyNPGjo1KKcVVhk4WJG8BIEvwnrsJY2xtTF49gf51fLA70tfrAm5Exs4aBn76RVzB4oT7B8mYOYaPxVdRxONJQi00yC6RMb00LjK-o6KiaWT_77pNqZZeKh4XHMQuHACggD3y-Acc4nHWD8BhdjKiyVW0CnClBsE
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Thu, 22 Sep 2022 21:43:21 GMT
content-type: text/html; charset=utf-8
set-cookie: _ga_devsite=GA1.3.3057364852.1663986820; Expires=Mon, 23 Sep 2024 02:33:40 GMT; Max-Age=63072000; Path=/
content-security-policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-8gaQ1NxVWNKBq7JVzbY4tGg7siEHDj' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: SAMEORIGIN
x-xss-protection: 0
x-content-type-options: nosniff
cache-control: no-cache, must-revalidate
expires: 0
pragma: no-cache
content-encoding: gzip
x-cloud-trace-context: 8e666d21dbcb31001e00335bec789076
vary: Accept-Encoding
date: Sat, 24 Sep 2022 02:33:40 GMT
server: Google Frontend
content-length: 21465
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&y=&a=0&d=8.402&v=27&r=7206
200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&y=&a=0&d=8.402&v=27&r=7206
IP
File type ASCII text, with no line terminators
Hash 0896fb23f02a634c6f362b90ce98e9b4
696efeb9f444f1ada0516deb7b6050b3489f8e2f
7298ad12052157fd2e95829b56f97a80bd2d77dbb06b7b4d51c813675c695869
GET /pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Selain%20Yoona%20Muncul%20Lagi%20Kembaran%20Tiffany%20SNSD&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F05%2Fselain-yoona-muncul-lagi-kembaran.html&y=&a=0&d=8.402&v=27&r=7206 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Sep 2022 02:33:40 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74f81ddb5b581685-ARN
inklinkor.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: c1b3e3e8008c5703dc09767286a88607
cache-control: max-age=86400
last-modified: Fri, 23 Sep 2022 16:04:12 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 25 Sep 2022 01:44:44 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 2935
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gAbw5Tgh%2BX4FNe17ylfcMy702OPEZJsIPDk9gQvzsr9SjXT7qCRyW5UjCkJUW0uSApiADCPV5Ypo2F5pjH%2F2s8dwbMTiO9Xi6Da5NQOz2GuvszaD9TUg28xdlZbebrqD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f81dd649e41c0e-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=geocity_orange
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 17:11:54 GMT
etag: W/"632b45da-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=HsTbMOJzZk0YvN9FlEGQRbrYNSHirVHOFKvwqKrj8Sp1mKaCrAwNFKvNw%2BI4owiOt1s6i9Izk62d%2BAighwE1wpt7MgPKfUVNCNdeUzMxCBfizluBLCPHqSxUHUb96xUp"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 74f81dd8fa320b45-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 26 Sep 2022 02:33:39 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
200 OK 0 B IP
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:39 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Sat, 01 Oct 2022 02:33:29 GMT
last-modified: Fri, 01 Jul 2022 12:09:33 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1dPUIgFXX3YyniIC0bnEf%2FA4E1hA0pq7coZ2BBLqnOcbAM%2Fz7IrDtzBv9x%2B9Z%2FzWBlpZhlSrB80KeDPB%2BhPl8DADgrQRbKbjwnwMlBXiTpKdf0tK4jL6s9xQCIHKvIAA"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd649b10b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 0 B URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Sep 2022 02:33:40 GMT
date: Sat, 24 Sep 2022 02:33:40 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/geowidget_js.js
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/geowidget_js.js
IP
GET /geocompteur/geowidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Sep 2022 02:33:40 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2217
cache-control: public, max-age=604800
expires: Tue, 27 Sep 2022 08:29:29 GMT
last-modified: Thu, 13 Feb 2020 12:35:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 324250
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=f%2B3XHu1R5ry4aoqy8FH5CLEos%2FWH2fV%2BFd9nPknfTN48eOlvA3xr7WDxYav1Bdo2VlrBDnlkPOiBXkFokwiLrvQOJWQDFIT5RWepAcztQCG%2FhWrF8JHyQKWcLPMvIGAO"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 74f81dd9ba7c0b45-OSL
content-encoding: br
X-Firefox-Spdy: h2
142.250.74.161
190.2.139.23
18.138.110.223
104.18.32.68
139.45.197.234
46.105.201.240
157.240.200.14
103.224.182.246
23.36.76.226