r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7af19a5145a4ee99bdf18831bad04bfd
7bdd2a4785b999ef54a2644211d2b2b7190fb8e1
3237bf0111ecdec3615c4d2d49a602f48f800335d0194f52b600bdaefbd63ed0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "3237BF0111ECDEC3615C4D2D49A602F48F800335D0194F52B600BDAEFBD63ED0"
Last-Modified: Thu, 30 Mar 2023 02:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18358
Expires: Sat, 01 Apr 2023 09:53:26 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 034b06325b334948200ef1d79d4ddeb7
b9a3c93cff37cbaaf20cca79b965b1a21c525ce8
417ce2093027b05cc34199c75e6b29f155c4dd3150651b6b3dbe8564098c4143
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "417CE2093027B05CC34199C75E6B29F155C4DD3150651B6B3DBE8564098C4143"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=20350
Expires: Sat, 01 Apr 2023 10:26:38 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 7f03faaba3392caae6dae54467bfdf6d
57ea1f14e8bfbcca8190c706d708c9fda12442c1
02ac551ba61fcbc6b04f244df065948b181a8a258db5c2e197aae66fdfcea8ee
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 01 Apr 2023 04:28:26 GMT
content-type: application/json
age: 1142
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a57eb49c1ac36edd2db6573eb357bd87
592724177530a39ce4af02874beb776b91fefbbe
0dd258adc062ad2b6f5ce8fec0457e55e594c942817f37509ca2d1f2e8152edf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "0DD258ADC062AD2B6F5CE8FEC0457E55E594C942817F37509CA2D1F2E8152EDF"
Last-Modified: Fri, 31 Mar 2023 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7947
Expires: Sat, 01 Apr 2023 06:59:55 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain
IP
File type PEM certificate\012- , ASCII text
Hash e7bace7c1e04d44012e37ddffe36e5d5
3ac8d7c0a9d3e3f0b28b2530c7b8d8407b4042c2
6b4f80f2e95b26f6122ea8dcd0ef8d762299be822c69e839fc37581ca2bcb5f2
GET /chains/remote-settings.content-signature.mozilla.org-2023-04-30-16-53-14.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: cHaBKhAxPl886T+0lPMtUlywaQJE5Myl+klovYCwFS+1WMrrNyC2LGn4BEYQwj1wvdEzRmG0IkQ=
x-amz-request-id: 5V7F8G65P6RR2W0Z
x-amz-server-side-encryption: AES256
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 01 Apr 2023 04:12:27 GMT
age: 2101
last-modified: Sat, 11 Mar 2023 16:53:15 GMT
etag: "e7bace7c1e04d44012e37ddffe36e5d5"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:47:28 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
access-control-allow-credentials: true
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Oswald
200 OK 491 B URL HTTP/1.1 fonts.googleapis.com/css?family=Oswald
IP
Hash e44bd17a9b007d5945e087b64c1caab7
94232fb967742909848c72746e5a779f68883a69
11b9259ebe843c857ff5ff79259a89b0a219b91cb4221a347b4fda0d3656668c
GET /css?family=Oswald HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Sat, 01 Apr 2023 04:47:28 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
apis.google.com/js/plusone.js
200 OK 21 kB URL HTTP/1.1 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1429)
Hash 28f227507e373fe9bbd21f337bf302f6
64a15ac675eedb4e3b447623d8712af53a52f52a
14e44addce47ef1d5581e99f897adba81bf6cefeedc6d90669449eca5801e32c
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Content-Length: 21023
Date: Sat, 01 Apr 2023 04:47:28 GMT
Expires: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "4e24de520bcc7431"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
wifi-phitsanulok.blogspot.com/2014/07/mthai-buster-16.html
200 OK 44 kB URL HTTP/1.1 wifi-phitsanulok.blogspot.com/2014/07/mthai-buster-16.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19701), with CR, LF line terminators
Hash 03f78185d6be1c034e728fa48af4203e
098dcc071c5984205a5e3aca887dbe0e0643c284
568140937552d3007cbfc5ca147ac7c90eb445c44511165522797481106417d9
Analyzer Verdict Alert fortinet Malware
GET /2014/07/mthai-buster-16.html HTTP/1.1
Host: wifi-phitsanulok.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sat, 01 Apr 2023 04:47:28 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 22 Mar 2023 18:21:03 GMT
ETag: W/"8577893e18207be6474bd2b764b4309872f333239993e61f32e3bde8c8c3c63b"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 44116
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed41ad326a18c3752ebdde1405b5ae85
847bdefec5a498130e8fe9924a764dac50f71f11
76dc84aafd6a2379294ee22e82212caf7a68740e1c8164ffe7b3b3b1530c2eed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed41ad326a18c3752ebdde1405b5ae85
847bdefec5a498130e8fe9924a764dac50f71f11
76dc84aafd6a2379294ee22e82212caf7a68740e1c8164ffe7b3b3b1530c2eed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ac29d7d71ef6c0cc7547974c8c4f7b
29108a8370757ef63f347d1fd2ae696f5842342c
3371093d6dab54c7c3b612e3774435f0a592bee4e40fbcc2edd55d29d7715c26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Expires, Cache-Control, Content-Length, Retry-After, Last-Modified, Pragma, ETag, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 01 Apr 2023 04:17:27 GMT
age: 1801
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/976584016-comment_from_post_iframe.js
200 OK 6.8 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/976584016-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1720)
Hash 6257474fb561cbfe96fe59a4bf03c9db
5341cee7f12a49010b004ad7e2a5d6d775db57c6
32b2fb9167f78dfc0c2309c8928b7971468a60bc2b8cce9b2690aba73e464c19
GET /static/v1/jsbin/976584016-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6756
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Mar 2023 12:51:17 GMT
expires: Thu, 28 Mar 2024 12:51:17 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 28 Mar 2023 13:49:44 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 230171
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 782ca4845ea5e0ec981e33231b1e61cb
032116b75e124c57877524e9e4f523b6d7c65820
94d007862fc7a4cd67f582ff22f2339619177435559c1dd5075a08c7240f3520
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94D007862FC7A4CD67F582FF22F2339619177435559C1DD5075A08C7240F3520"
Last-Modified: Wed, 29 Mar 2023 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7410
Expires: Sat, 01 Apr 2023 06:50:58 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Connection: keep-alive
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 26 Mar 2023 10:34:40 GMT
expires: Mon, 25 Mar 2024 10:34:40 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 25 Mar 2023 21:51:51 GMT
content-type: text/css
vary: Accept-Encoding
age: 497568
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
200 OK 33 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.0/jquery.min.js
IP
File type Unicode text, UTF-8 text, with very long lines (65481)
Hash 912555c06f2a23f889e88b7aa1ccb92f
5a8c04c1b7d8d65f436d1f58b8b72f259b4ae321
fb4993353e02cfa40d83abd923d3c48bb48e193609c0a9bd4de5c8fd97059abf
GET /ajax/libs/jquery/1.8.0/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33285
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Apr 2023 02:34:01 GMT
expires: Sun, 31 Mar 2024 02:34:01 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 8007
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png
200 OK 962 B URL HTTP/1.1 4.bp.blogspot.com/-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 309c914e1eb6c78cb9f0f1a657ac6f6c
1420eda2b39793997f150dc59da379a318dae97c
9b769c4e88643bdb97e4944d6e19e16664040308f121dc76e369e9b0cf037cea
GET /-O6nMA1_akTo/To9NmwKzo4I/AAAAAAAAEJU/UFiFTyAJbnw/s1600/facebook.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="facebook.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 962
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 01:06:23 GMT
Expires: Wed, 29 Mar 2023 11:29:06 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13265
ETag: "v1095"
Content-Type: image/png
Vary: Origin
3.bp.blogspot.com/-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png
200 OK 1.0 kB URL HTTP/1.1 3.bp.blogspot.com/-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 219e3230a45dabb323407c61365c3235
01699740c86acd5fe7c7d8eb7abf6330c2418e41
ca8e28f5a5456a373c3732c2e7851e7e160f864edf14cd2606cbaa83b7146f76
GET /-bzutYp7uln0/To9Nn2z36jI/AAAAAAAAEJc/-_kgc1MkEB4/s1600/linkedin.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="linkedin.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1040
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 03:06:42 GMT
Expires: Sat, 01 Apr 2023 19:05:51 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 6046
ETag: "v1097"
Content-Type: image/png
Vary: Origin
1.bp.blogspot.com/-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png
200 OK 1.1 kB URL HTTP/1.1 1.bp.blogspot.com/-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f4093f3e5c8b6a854a1f8a6408f42664
f9f5d50543bc37d5438aeec15441c0e6b85f22f0
de9273c6f19d6109edeb685c9f1df3668ed87fb9d9139e40b812248813ceac92
GET /-zyZkki5OJqE/To9Nmf1xb8I/AAAAAAAAEJQ/dlUOxjZ0H5U/s1600/email.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="email.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1125
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 02:31:00 GMT
Expires: Sat, 01 Apr 2023 18:29:39 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 8188
ETag: "v1094"
Content-Type: image/png
Vary: Origin
1.bp.blogspot.com/-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png
200 OK 1.5 kB URL HTTP/1.1 1.bp.blogspot.com/-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash 141c729fc2ff9a51bee6e2b502c06162
98faa9e3aecf16374292f72d0277e6570740db67
dfc7094d110b8297cbb6d7738882dbf3b0595f0d8b8afef143b3b48e0c0d2110
GET /-SLbNOLbWhs0/To9NoZ-cOHI/AAAAAAAAEJg/uRl444L2fyg/s1600/rss.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="rss.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1521
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 01:09:19 GMT
Expires: Wed, 29 Mar 2023 11:29:06 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13089
ETag: "v1098"
Content-Type: image/png
Vary: Origin
2.bp.blogspot.com/-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png
200 OK 963 B URL HTTP/1.1 2.bp.blogspot.com/-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash a5672a72538626bac5c6c3cd7c0e9294
9e6917aee95beb6405716cd61197e6d36f832e81
d57575f80fbb3d5a929ba7d43e78a7a1b7b66e7a907c99bcab754a96afbc4f14
GET /-oFF4HrEbwaI/To9NpETr6dI/AAAAAAAAEJk/jowvXNvTKcY/s1600/twitter.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="twitter.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 963
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 02:47:40 GMT
Expires: Wed, 29 Mar 2023 11:29:06 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 7188
ETag: "v1099"
Content-Type: image/png
Vary: Origin
3.bp.blogspot.com/-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png
200 OK 1.8 kB URL HTTP/1.1 3.bp.blogspot.com/-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash fa838f175bae2ce0845ebfa1bd39988c
2e3f62a21bb2a0c0fc467482d6b5a838a1230562
ecf23a1b00dcecadb87469b1214a99f381f1f23f3688f28626206ea3680faada
GET /-NbS3DZVbHU0/To9NnX6odTI/AAAAAAAAEJY/SvIFghHPw-k/s1600/gplus.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="gplus.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1788
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 03:06:42 GMT
Expires: Sat, 01 Apr 2023 19:05:51 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 6046
ETag: "v1096"
Content-Type: image/png
Vary: Origin
wifi-phitsanulok.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 wifi-phitsanulok.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: wifi-phitsanulok.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/2014/07/mthai-buster-16.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sat, 01 Apr 2023 04:47:28 GMT
Expires: Sat, 08 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 31 Mar 2023 19:52:37 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/194262808-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/194262808-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 008c618ae0742d3857a253f6e1f8d3de
621f126701f72c73180ff2264b6bb8c490430994
400de07efa42d536e029b4b3cb55d77722c5b0f9639395c6e66834da0f65ae19
GET /static/v1/widgets/194262808-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56925
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Mar 2023 02:00:16 GMT
expires: Thu, 28 Mar 2024 02:00:16 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 29 Mar 2023 00:53:01 GMT
content-type: text/javascript
vary: Accept-Encoding
age: 269232
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
200 OK 33 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.7.1/jquery.min.js
IP
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (32769)
Hash 18351732b1849ba758e98884e186b3c8
d735af8661eda41ff4ffbf76e6a284a0e2deb81c
bfac625d304d52e04f2caeb19266354749929c888ca09d3d1e3edcbb8770d0f0
GET /ajax/libs/jquery/1.7.1/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 33333
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 30 Mar 2023 10:37:22 GMT
Expires: Fri, 29 Mar 2024 10:37:22 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 151806
s.sharethis.com/loader.js
301 Moved Permanently 167 B URL HTTP/1.1 s.sharethis.com/loader.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /loader.js HTTP/1.1
Host: s.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Apr 2023 04:47:28 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://s.sharethis.com/loader.js
X-Cache: Redirect from cloudfront
Via: 1.1 ee04daa979e7a02cc5ca472521bc18a6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: sLEHQoV2cUJgvaYvZNsG8LKcjWdcnKLcReQ4BruuYxgm9l9mbgUOTQ==
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
301 Moved Permanently 0 B URL HTTP/1.1 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Location: https://translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
Cross-Origin-Opener-Policy: same-origin-allow-popups
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
3.bp.blogspot.com/-rI0bEs9cVWQ/UnvD4KVTX0I/AAAAAAAAZQE/JYuzITBDna8/s1600/autumn_street.jpg
200 OK 107 kB URL HTTP/1.1 3.bp.blogspot.com/-rI0bEs9cVWQ/UnvD4KVTX0I/AAAAAAAAZQE/JYuzITBDna8/s1600/autumn_street.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 940x365, components 3\012- data
Size 107 kB (107021 bytes)
Hash 9b38790c07712bb3453c51db47ad54dd
f50581d0a3e37d131463cb6a8a932e0d49c1aa51
706ffdc1373e97f497a8cccc3f90fe24714b0ee6dfbc28af9b195df384938e8e
GET /-rI0bEs9cVWQ/UnvD4KVTX0I/AAAAAAAAZQE/JYuzITBDna8/s1600/autumn_street.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="autumn_street.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 107021
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:28 GMT
Expires: Fri, 31 Mar 2023 18:43:37 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v7644"
Content-Type: image/jpeg
Vary: Origin
Age: 0
w.sharethis.com/button/buttons.js
301 Moved Permanently 167 B URL HTTP/1.1 w.sharethis.com/button/buttons.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /button/buttons.js HTTP/1.1
Host: w.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 01 Apr 2023 04:47:28 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://w.sharethis.com/button/buttons.js
X-Cache: Redirect from cloudfront
Via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: cXQgA0XHArvBBVUfJWtiJjopL9dx6ubhIwL7wX1V-2oDG70MfI0D5w==
4.bp.blogspot.com/-yKl984YHtNc/Tz5eFcKawQI/AAAAAAAAClc/tRhcONEeG9k/s1600/LikeUsOnFacebook.png
200 OK 49 kB URL HTTP/1.1 4.bp.blogspot.com/-yKl984YHtNc/Tz5eFcKawQI/AAAAAAAAClc/tRhcONEeG9k/s1600/LikeUsOnFacebook.png
IP
File type PNG image data, 300 x 150, 8-bit/color RGB, non-interlaced\012- data
Hash 0002d913a06f1893a03146e12f03e9ff
be376a33a701036b03677e814e52a0d536a3bde6
424b7ca480e9ee0c9446bdf945901e1e66e944f6ebddd6aea0f8c5dc7f1f914f
GET /-yKl984YHtNc/Tz5eFcKawQI/AAAAAAAAClc/tRhcONEeG9k/s1600/LikeUsOnFacebook.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="LikeUsOnFacebook.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 49319
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 03:11:53 GMT
Expires: Fri, 31 Mar 2023 20:12:49 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 5735
ETag: "va57"
Content-Type: image/png
Vary: Origin
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash ed41ad326a18c3752ebdde1405b5ae85
847bdefec5a498130e8fe9924a764dac50f71f11
76dc84aafd6a2379294ee22e82212caf7a68740e1c8164ffe7b3b3b1530c2eed
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a5ac29d7d71ef6c0cc7547974c8c4f7b
29108a8370757ef63f347d1fd2ae696f5842342c
3371093d6dab54c7c3b612e3774435f0a592bee4e40fbcc2edd55d29d7715c26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
w.sharethis.com/button/buttons.js
200 OK 27 kB URL HTTP/2 w.sharethis.com/button/buttons.js
IP
File type ASCII text, with very long lines (998)
Hash 1bbe68b2e7eaab29e61fdbba7fc91d8f
d3e4cb094cc53deb0bd1c4d7281d8c82bfe9576a
ab978db992488b6d0c79f3375d9da0044e35f39aadde86d31c29ecc376e2e3fe
GET /button/buttons.js HTTP/1.1
Host: w.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
content-length: 27019
content-encoding: gzip
server: nginx/1.20.1
x-robots-tag: noindex, nofollow
date: Thu, 30 Mar 2023 05:36:41 GMT
cache-control: max-age=259200
expires: Sun, 02 Apr 2023 05:17:27 GMT
etag: W/"64012767-1a2ca"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 1Zud2fjteMih24_H6yyOPY0QvqJsb1qZwyXDZn7iu2GYyyyYVd2W1A==
age: 171001
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:28 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/charts/loader.js
200 OK 18 kB URL HTTP/2 www.gstatic.com/charts/loader.js
IP
File type ASCII text, with very long lines (2065)
Hash bb134be461db219dd9d1e3c8bd2a31c5
616a74f6406eb3d7924bb93b9f6ccb8c566dc140
e6417c9fb72b13741b7048e6db086563784e815d5a108fa0d1fa2dd1ffc59aa2
GET /charts/loader.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-encoding: gzip
access-control-allow-credentials: true
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gviz
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gviz"
report-to: {"group":"gviz","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gviz"}]}
content-length: 18426
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Apr 2023 04:16:46 GMT
expires: Sat, 01 Apr 2023 05:16:46 GMT
cache-control: public, max-age=3600
last-modified: Sat, 18 Feb 2023 18:04:32 GMT
content-type: text/javascript
vary: Accept-Encoding, Origin
age: 1842
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=8981026530528854871&zx=f5e4490c-305e-4e50-9f3d-7ac4accac33a
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=8981026530528854871&zx=f5e4490c-305e-4e50-9f3d-7ac4accac33a
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=8981026530528854871&zx=f5e4490c-305e-4e50-9f3d-7ac4accac33a HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 04:47:28 GMT
last-modified: Sat, 01 Apr 2023 04:47:28 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
tracking.hostgator.com/img/Shared/160x600.gif
301 Moved Permanently 162 B URL HTTP/1.1 tracking.hostgator.com/img/Shared/160x600.gif
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /img/Shared/160x600.gif HTTP/1.1
Host: tracking.hostgator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Sat, 01 Apr 2023 05:01:58 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://www.hostgator.com/img/Shared/160x600.gif
www.youtube.com/embed/U_-0F6Ye_hc?hl=th_TH&version=3
301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/U_-0F6Ye_hc?hl=th_TH&version=3
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/U_-0F6Ye_hc?hl=th_TH&version=3 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Apr 2023 04:47:28 GMT
Location: https://www.youtube.com/embed/U_-0F6Ye_hc?hl=th_TH&version=3
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-GO57DsAt33Y/ULWE_cUlzWI/AAAAAAAABEU/PJYHT1NBreI/s1600/background.jpg
200 OK 30 kB URL HTTP/1.1 3.bp.blogspot.com/-GO57DsAt33Y/ULWE_cUlzWI/AAAAAAAABEU/PJYHT1NBreI/s1600/background.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1600x458, components 3\012- data
Hash e31768c98a020ffb0a6699984b4d9201
1d9af87f06d45520b84056d2a5f8f8cbb22ecb45
c2c778a7ddc0e535e34d317b875092d36c777724f01f939e805a709e696d42a3
GET /-GO57DsAt33Y/ULWE_cUlzWI/AAAAAAAABEU/PJYHT1NBreI/s1600/background.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="background.jpg"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 29834
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:28 GMT
Expires: Fri, 24 Mar 2023 13:14:08 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v445"
Content-Type: image/jpeg
Vary: Origin
Age: 0
1.bp.blogspot.com/-O4Ji4zCGehI/UkcMNf_NRxI/AAAAAAAATLE/VLT97MRihKI/s72-c/709951-topic-ix-0.jpg
404 Not Found 1.7 kB URL HTTP/1.1 1.bp.blogspot.com/-O4Ji4zCGehI/UkcMNf_NRxI/AAAAAAAATLE/VLT97MRihKI/s72-c/709951-topic-ix-0.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-O4Ji4zCGehI/UkcMNf_NRxI/AAAAAAAATLE/VLT97MRihKI/s72-c/709951-topic-ix-0.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Sat, 01 Apr 2023 04:47:29 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
1.bp.blogspot.com/-zvOUruX-NrA/ULWFFT2_GwI/AAAAAAAABE8/dxJWEwSu86I/s1600/header-bg.png
200 OK 20 kB URL HTTP/1.1 1.bp.blogspot.com/-zvOUruX-NrA/ULWFFT2_GwI/AAAAAAAABE8/dxJWEwSu86I/s1600/header-bg.png
IP
File type PNG image data, 960 x 160, 8-bit/color RGB, non-interlaced\012- data
Hash ea8fb7cb0d3006c4f7ac2d9a1273eec0
859b541ece2e3d0c71b29aae7500aa184c6413d1
921086335e89199a376a61a0dd2e57ca5c56764c525d2fa1edb649d49d2f59fa
GET /-zvOUruX-NrA/ULWFFT2_GwI/AAAAAAAABE8/dxJWEwSu86I/s1600/header-bg.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="header-bg.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 20093
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Sun, 02 Apr 2023 00:31:11 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v44f"
Content-Type: image/png
Vary: Origin
Age: 0
3.bp.blogspot.com/-vqOsB-Irf0Y/ULWFIMQwxbI/AAAAAAAABFM/46Vkk4w7GOk/s1600/menu-primary-bg.png
200 OK 292 B URL HTTP/1.1 3.bp.blogspot.com/-vqOsB-Irf0Y/ULWFIMQwxbI/AAAAAAAABFM/46Vkk4w7GOk/s1600/menu-primary-bg.png
IP
File type PNG image data, 2 x 168, 8-bit/color RGBA, non-interlaced\012- data
Hash 6fe5a655c273e0f05981c858bb48d2dd
80a8bc3a7232e3b622fcea1070656a8ecd272726
255d11b608da6388e7227284cfb395c5d59e39d5f9d68d351a8d96cb8a69b151
GET /-vqOsB-Irf0Y/ULWFIMQwxbI/AAAAAAAABFM/46Vkk4w7GOk/s1600/menu-primary-bg.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="menu-primary-bg.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 292
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Wed, 29 Mar 2023 16:18:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v453"
Content-Type: image/png
Vary: Origin
Age: 0
fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
200 OK 9.8 kB URL HTTP/1.1 fonts.gstatic.com/s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 9840, version 1.0\012- data
Hash afda6e429fd299054de28e1f157c683d
c1847d6f3df5fe11d5e96fd5e6a59b73ff7ed96b
81cd29d1413ecf75834fb3ce1da572fe5c39e53b22c61f5dafec5b14ed4ee12e
GET /s/oswald/v49/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://wifi-phitsanulok.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 9840
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 28 Mar 2023 11:52:03 GMT
Expires: Wed, 27 Mar 2024 11:52:03 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 18 Jul 2022 19:24:04 GMT
Content-Type: font/woff2
Age: 320126
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash db0a5cecdd07713b4933c3b921e3f64b
c3187084f1ebcc58dced22f2c837b815c710e251
481d4d6333c1e427f552645fcc1450a8cf3fd0b42febf6f30cf402cd3552e0f4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-ZvtQqwJ8NXY/Uhs2GJKREQI/AAAAAAAAS4g/T66WT-rpX9M/s72-c/signal.png
200 OK 5.2 kB URL HTTP/1.1 2.bp.blogspot.com/-ZvtQqwJ8NXY/Uhs2GJKREQI/AAAAAAAAS4g/T66WT-rpX9M/s72-c/signal.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash b9f38245446ca72eab075ef4608dcfe1
7b63433e9cd2158a4f4d4ec90cdf3b2f40f1069d
89169a8de1db38a08abafd0e0e4c606f8a37aa374b4bd8bcd435f63d32532a02
GET /-ZvtQqwJ8NXY/Uhs2GJKREQI/AAAAAAAAS4g/T66WT-rpX9M/s72-c/signal.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="signal.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5229
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Fri, 31 Mar 2023 18:44:24 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v4b89"
Content-Type: image/png
Vary: Origin
Age: 0
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: xPDYw6LRIcSMWQqIUEWOyw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 9Oos+GvWwOx8hluiqPfrO0GEU5c=
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 02ddc021542aadb090aa31099f7b9267
cb2091bff4ad6c225faa4c0c02182217bcdc502c
dcca0f6c051c27f611b9e51981fb34bd0c82a317c2e3ae3412ec6de80c596d24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs
200 OK 154 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (1530)
Size 154 kB (153566 bytes)
Hash c820ae1b97f3515ffcfe0bcd7943cc2a
d04d05745625bb1bcb83cf3fe84170a16c5d21f8
e4290af3fbde60e8a1ff2b7b958726ced60e9a92fecc0008d7b7a9ce1eee5da5
GET /_/scs/abc-static/_/js/k=gapi.lb.en.zUi2Oiqh0cQ.O/m=plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo-VnflFHGTzk3OsaVpWbqz0Ysb2Jw/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 153566
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 29 Mar 2023 17:24:49 GMT
expires: Thu, 28 Mar 2024 17:24:49 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 09 Mar 2023 16:31:32 GMT
content-type: text/javascript; charset=UTF-8
vary: Accept-Encoding
age: 213760
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ff36ec2657d8ee3b0f78d0a8b2bc9c96
7ce770b27771a2417292364a24af2d65bb9085a5
7c6a6029f3d8b5c88c0d52cfa1d8a6d79fe57080cbd88951ce40456d1ae214e0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 02ddc021542aadb090aa31099f7b9267
cb2091bff4ad6c225faa4c0c02182217bcdc502c
dcca0f6c051c27f611b9e51981fb34bd0c82a317c2e3ae3412ec6de80c596d24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-4S2GFmQIWvw/Uhs2e0Lt-cI/AAAAAAAAS4o/2EBeQyXjn7Y/s72-c/logo.png
200 OK 10 kB URL HTTP/1.1 2.bp.blogspot.com/-4S2GFmQIWvw/Uhs2e0Lt-cI/AAAAAAAAS4o/2EBeQyXjn7Y/s72-c/logo.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGBA, non-interlaced\012- data
Hash b2d913e05d16a957788a3bf0eec7f496
30543ed40f0b6386717fabc0605928f38f5ac8d5
1e13ba1d92fc2e28a32d2ca4da399330c0bb418603977b499b6e960c76d84448
GET /-4S2GFmQIWvw/Uhs2e0Lt-cI/AAAAAAAAS4o/2EBeQyXjn7Y/s72-c/logo.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="logo.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10253
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Fri, 31 Mar 2023 18:44:24 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v4b8b"
Content-Type: image/png
Vary: Origin
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 02ddc021542aadb090aa31099f7b9267
cb2091bff4ad6c225faa4c0c02182217bcdc502c
dcca0f6c051c27f611b9e51981fb34bd0c82a317c2e3ae3412ec6de80c596d24
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
s04.flagcounter.com/count/oAnd/bg_FFFFFF/txt_000000/border_CCCCCC/columns_3/maxflags_20/viewers_WiFiNews+Phitsanulok/labels_1/pageviews_1/flags_0/
200 OK 20 kB URL HTTP/1.1 s04.flagcounter.com/count/oAnd/bg_FFFFFF/txt_000000/border_CCCCCC/columns_3/maxflags_20/viewers_WiFiNews+Phitsanulok/labels_1/pageviews_1/flags_0/
IP
ASN #8100 ASN-QUADRANET-GLOBAL
File type PNG image data, 275 x 160, 8-bit/color RGB, non-interlaced\012- data
Hash c379f4d50c268dbaeb904c5c6c211bf6
b26d3a0517ca7259c49923bdbd0782f74a9af04d
65e8e481823908b5b02db071b044fc306b0930734ca4566d69f675e168da5e78
GET /count/oAnd/bg_FFFFFF/txt_000000/border_CCCCCC/columns_3/maxflags_20/viewers_WiFiNews+Phitsanulok/labels_1/pageviews_1/flags_0/ HTTP/1.1
Host: s04.flagcounter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:29 GMT
Server: Apache/2.4.6 (CentOS) OpenSSL/1.0.2k-fips
Pragma: no-cache
Cache-control: no-cache
Connection: close
Transfer-Encoding: chunked
Content-Type: image/png
4.bp.blogspot.com/-DXlK0ql3qoY/UqPB1f4vvmI/AAAAAAAAaRw/4DjVd3UAU9I/s1600/youtube_view10k.jpg
200 OK 78 kB URL HTTP/1.1 4.bp.blogspot.com/-DXlK0ql3qoY/UqPB1f4vvmI/AAAAAAAAaRw/4DjVd3UAU9I/s1600/youtube_view10k.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 701x407, components 3\012- data
Hash 3aa18d99902858d389f507f8d7e8e766
7f902f9791b93e78be735b9d8f3fb8939bdf3321
9d9af4c081d0f74a1ccb4056b864e552635bb04dc1cbc0ece5cfaa6453425b7c
GET /-DXlK0ql3qoY/UqPB1f4vvmI/AAAAAAAAaRw/4DjVd3UAU9I/s1600/youtube_view10k.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v73c1"
Expires: Sun, 02 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="youtube_view10k.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 01 Apr 2023 04:47:29 GMT
Server: fife
Content-Length: 77701
X-XSS-Protection: 0
www.dwebsale.com/radio/config/jquery-1.4.2.min.js
200 OK 29 kB URL HTTP/1.1 www.dwebsale.com/radio/config/jquery-1.4.2.min.js
IP
ASN #56309 408 Fl4 CATTOWER
File type ASCII text, with very long lines (820)
Hash c5206f32e41fc265497b7e8d4e92b612
5f19db2cea5d45463e89d867e517ce56aa8030fd
e572db1361b2b3c14d9f9a6f10b1dcc5f9276d645c71d6f439a496e69f45ae74
GET /radio/config/jquery-1.4.2.min.js HTTP/1.1
Host: www.dwebsale.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 01 Apr 2023 04:47:29 GMT
Content-Type: application/javascript
Last-Modified: Fri, 18 Feb 2022 04:28:30 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
ETag: W/"620f206e-119ee"
Content-Encoding: gzip
1.bp.blogspot.com/-zdx00nIXTfg/ULWFLVZAsoI/AAAAAAAABFk/snA3TKISVIU/s1600/meta-separator.png
200 OK 201 B URL HTTP/1.1 1.bp.blogspot.com/-zdx00nIXTfg/ULWFLVZAsoI/AAAAAAAABFk/snA3TKISVIU/s1600/meta-separator.png
IP
File type PNG image data, 1 x 9, 8-bit/color RGBA, non-interlaced\012- data
Hash e366c87083cdbec0054001ab9c469c36
e1891409a8c95521d7d07ec9c75c2f17f4317b4a
edf347e63bdc12c5dcec5d48b14fdec7186c77d4a750afadc530e7bcb6f38e42
GET /-zdx00nIXTfg/ULWFLVZAsoI/AAAAAAAABFk/snA3TKISVIU/s1600/meta-separator.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="meta-separator.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 201
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Thu, 30 Mar 2023 07:43:02 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v459"
Content-Type: image/png
Vary: Origin
Age: 0
www.youtube.com/embed/9747cXE3FZY?rel=0&autoplay=1
301 Moved Permanently 0 B URL HTTP/1.1 www.youtube.com/embed/9747cXE3FZY?rel=0&autoplay=1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/9747cXE3FZY?rel=0&autoplay=1 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
X-Content-Type-Options: nosniff
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 01 Apr 2023 04:47:29 GMT
Location: https://www.youtube.com/embed/9747cXE3FZY?rel=0&autoplay=1
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.facebook.com/plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80
301 Moved Permanently 0 B URL HTTP/1.1 www.facebook.com/plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://www.facebook.com/plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80
Content-Type: text/plain
Server: proxygen-bolt
Date: Sat, 01 Apr 2023 04:47:29 GMT
Connection: keep-alive
Content-Length: 0
news.mthai.com/wp-content/uploads/2014/07/0006-500x291.jpg
403 Forbidden 77 kB URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/0006-500x291.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
Hash df576b27fd285e51e53b88f1434c38ba
6cfcf8b1173773aaf2d80ec9013556ea2323dece
1fb2e9069249b71c42715d711f0d8e41ed09efd7c22db11db206377a88119b34
GET /wp-content/uploads/2014/07/0006-500x291.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
ocsp.digicert.com/
200 OK 471 B IP
Hash 02303126c6c390b3c06593625186f4bf
1b71c1b9a6e5c84536de78021f94f87424579298
2cffed5b6470da73dc57dd9c5c7a5683e83f0e947eb63fbd8a8e226b18192a76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6424
Cache-Control: max-age=145134
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Etag: "64273237-1d7"
Expires: Sun, 02 Apr 2023 21:06:23 GMT
Last-Modified: Fri, 31 Mar 2023 19:19:19 GMT
Server: ECAcc (ska/F756)
X-Cache: HIT
Content-Length: 471
www.facebook.com/plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?href=https://www.facebook.com/PressAgent.WiFi.Phitsanulok&layout=standard&show_faces=false&width=450&action=like&font=tahoma&colorscheme=light&height=80 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com *.fbcdn.net 'unsafe-eval';script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' blob: data: 'self' connect.facebook.net 'unsafe-eval';style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":86400,"endpoints":[{"url":"https:\/\/www.facebook.com\/browser_reporting\/?minimize=0"}],"group":"coep_report"}, {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-embedder-policy-report-only: require-corp;report-to="coep_report"
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: f4CowVcK5nAOxB5eC7ey8KbTs/eIVGvx26zLyT+M9tsjvXt67Ph1DjQuK1FIC8gdSHcU0iVUq/iUGDyWIko6Uw==
content-length: 0
date: Sat, 01 Apr 2023 04:47:29 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
4.bp.blogspot.com/-2TedxO3v6dA/ULWFMURmEKI/AAAAAAAABFo/kDVNgNQTN2k/s1600/search.png
200 OK 556 B URL HTTP/1.1 4.bp.blogspot.com/-2TedxO3v6dA/ULWFMURmEKI/AAAAAAAABFo/kDVNgNQTN2k/s1600/search.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash e7838176a803296de2d685f0e33f52c7
f6d89ee60f96206d2a484e4d66ca572fb3abeaf5
06100921f282653046833dca88d1ea5411847d9a9350145e081f8c23a7a88019
GET /-2TedxO3v6dA/ULWFMURmEKI/AAAAAAAABFo/kDVNgNQTN2k/s1600/search.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="search.png"
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 556
X-XSS-Protection: 0
Date: Sat, 01 Apr 2023 04:47:29 GMT
Expires: Wed, 29 Mar 2023 16:18:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v45a"
Content-Type: image/png
Vary: Origin
Age: 0
ocsp.digicert.com/
200 OK 471 B IP
Hash 02303126c6c390b3c06593625186f4bf
1b71c1b9a6e5c84536de78021f94f87424579298
2cffed5b6470da73dc57dd9c5c7a5683e83f0e947eb63fbd8a8e226b18192a76
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6424
Cache-Control: max-age=145134
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Etag: "64273237-1d7"
Expires: Sun, 02 Apr 2023 21:06:23 GMT
Last-Modified: Fri, 31 Mar 2023 19:19:19 GMT
Server: ECAcc (ska/F6AF)
X-Cache: HIT
Content-Length: 471
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:31:35 GMT
expires: Wed, 27 Mar 2024 10:31:35 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
age: 324954
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4eec701fec69b73ab6ff1af2c178806f
5de0d4c444297364831a311b4c13954aa31976b0
fda1ec0d2c39aafdb994d336b4d8b5d819fcd064a64b43649598609dac04f512
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b659ba21b71473d2f3b2d4aa16e37f06
bb64d95a2d25e7fa9c2577e16d7be664816bdb94
5220ed8dd94613cf15ac539ad97b9fbe9b47e19c68d3873f48f837a291039325
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.doubleclick.net/instream/ad_status.js
200 OK 29 B URL HTTP/2 static.doubleclick.net/instream/ad_status.js
IP
Hash 1fa71744db23d0f8df9cce6719defcb7
e4be9b7136697942a036f97cf26ebaf703ad2067
eed0dc1fdb5d97ed188ae16fd5e1024a5bb744af47340346be2146300a6c54b9
GET /instream/ad_status.js HTTP/1.1
Host: static.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="ads-doubleclick-media"
report-to: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]}
timing-allow-origin: *
content-length: 29
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 01 Apr 2023 04:35:12 GMT
expires: Sat, 01 Apr 2023 04:50:12 GMT
cache-control: public, max-age=900
age: 737
last-modified: Thu, 12 Dec 2013 23:40:16 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
googleads.g.doubleclick.net/pagead/id
302 Found 0 B URL HTTP/2 googleads.g.doubleclick.net/pagead/id
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /pagead/id HTTP/1.1
Host: googleads.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
p3p: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1
access-control-allow-credentials: true
access-control-allow-origin: https://www.youtube.com
date: Sat, 01 Apr 2023 04:47:29 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
server: cafe
content-length: 0
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
200 OK 360 B URL HTTP/1.1 www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (497), with no line terminators
Hash 70a4938c2043e86998ac69cdcc6e2330
b7d1e6c5a2f18dcac5fa62ff433485eec034f382
1d16892f07d0eb98715c30986f18514b89d374df3d31305fee0c04a0eaea3b42
GET /player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hWcCEq3ImVluOwd8LNEcPkJkqCjRoi9HrXs8B4%2Bz0eUeM1JY0VbOjZ5OrAr0F%2BwOCU86XHNjr34nhr7V2Zro1FYLMJLJVWKoe22%2BFfE1BQvpN92jRzEnDGkTK%2BsS4CM%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0e31c30b1a067b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 28 Mar 2023 10:31:03 GMT
expires: Wed, 27 Mar 2024 10:31:03 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 324986
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 4eec701fec69b73ab6ff1af2c178806f
5de0d4c444297364831a311b4c13954aa31976b0
fda1ec0d2c39aafdb994d336b4d8b5d819fcd064a64b43649598609dac04f512
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b659ba21b71473d2f3b2d4aa16e37f06
bb64d95a2d25e7fa9c2577e16d7be664816bdb94
5220ed8dd94613cf15ac539ad97b9fbe9b47e19c68d3873f48f837a291039325
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 0 B URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type,x-goog-api-key,x-user-agent
Referer: https://www.youtube.com/
Origin: https://www.youtube.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.youtube.com
vary: origin, referer, x-origin
access-control-allow-credentials: true
access-control-allow-methods: DELETE,GET,HEAD,OPTIONS,PATCH,POST,PUT
access-control-allow-headers: content-type,x-goog-api-key,x-user-agent
access-control-max-age: 3600
date: Sat, 01 Apr 2023 04:47:30 GMT
content-type: text/html
server: ESF
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 00d3778ed4225daed0d053b47cc04a3b
7ffb0bce63a9b4a086af9c8db94742e277c92e4f
d37c96e2224cd08f3957b5de2c58a3ce3a68c076c7ef7027c69a608411f0845f
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 01 Apr 2023 04:47:30 GMT
server: ESF
cache-control: private
content-length: 31105
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dj.in.th/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.dj.in.th/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 21 Mar 2023 12:31:17 GMT
ETag: W/"6419a395-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fJXjcuFKuHClsc6QU9QLjCNeBSa6us9Us1Z3ox2W3Lx0hYVw8z4x4QZDwGeh6eRmbtJIFJnzUxfF20tMdY1Qc5Me5aAqnloZOLgm208uzHSHDLcb5x4G%2FZZq1EQB5AI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31c69bf5067b-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 03 Apr 2023 04:47:30 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19900
Expires: Sat, 01 Apr 2023 10:19:10 GMT
Date: Sat, 01 Apr 2023 04:47:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19900
Expires: Sat, 01 Apr 2023 10:19:10 GMT
Date: Sat, 01 Apr 2023 04:47:30 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 14539c5e0ca6ce826e62bdadad738bbd
92ce1bbc7f338d3e48e35d637513ab0aba610a98
58e8d186f5d0531c2597d267b0a92bb46909e8fa162b2b5f7fa6e50b2e0af357
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "58E8D186F5D0531C2597D267B0A92BB46909E8FA162B2B5F7FA6E50B2E0AF357"
Last-Modified: Fri, 31 Mar 2023 15:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19900
Expires: Sat, 01 Apr 2023 10:19:10 GMT
Date: Sat, 01 Apr 2023 04:47:30 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash da174e6ccc9451c5071ba10eeb97f6f6
c38827a9ac1218768839877263e1f2984fbdc454
76da406c8ae8cd6ca8471928f3aec3876aed2c21bc10edc0fbdaef5c100c1030
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff94a70cc-7556-4fae-8603-14d3b253f74c.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9859
x-amzn-requestid: c00efe5b-7fdb-445a-a924-75ddd461b72b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: COQPtHizoAMF7-Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-641bfa64-3eb90ae703b78e8a06130540;Sampled=0
x-amzn-remapped-date: Thu, 23 Mar 2023 07:06:12 GMT
x-amz-cf-pop: SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: nZfXy-IsoHliuLodEocEZlH-IvmIV9G-noSmSEU1wmuMPfBx3rLJ9w==
via: 1.1 02f1a759e4ec9fab6fc17c080dd851dc.cloudfront.net (CloudFront), 1.1 331202b5b8aab67acbf389883133f256.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 10:41:48 GMT
age: 65142
etag: "c38827a9ac1218768839877263e1f2984fbdc454"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95196399-f417-4284-9902-cf35b1e83360.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95196399-f417-4284-9902-cf35b1e83360.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash deb930830ac86ec8ace6a232f67810ba
d084bf4331446c35236019010b2bcf82d45dad1c
bb81782bf590d601110ec8fb891f701e0f5084bda46370d30345bd81403a33ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F95196399-f417-4284-9902-cf35b1e83360.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5830
x-amzn-requestid: 0897bf26-6156-48d3-ba67-596cc326dddc
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CqnHHG0JoAMF87w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6427522d-6f380d901d9d6b737ec19d6d;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:35:41 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Miss from cloudfront
x-amz-cf-id: UfN2iRmDUhddBZW6qGy3q2-HCqb6Kx3iDENnirUkIoCJ6BW6zdWVtw==
via: 1.1 8f251d23da31b683c3c9d6fad6ca944c.cloudfront.net (CloudFront), 1.1 b4085435efbe95a420f374958bd145be.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 22:44:32 GMT
etag: "d084bf4331446c35236019010b2bcf82d45dad1c"
content-type: image/jpeg
age: 21778
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
s.sharethis.com/loader.js
200 OK 15 kB URL HTTP/2 s.sharethis.com/loader.js
IP
Hash ffcb914c6383b9382f328e694b4d6839
715d33bb1a40c44642ecfa1109fb5435a8226d13
268db73876237022381b2c51da1e5f600cb6c3913a250ca0ed9d1c7b0e956604
GET /loader.js HTTP/1.1
Host: s.sharethis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript
last-modified: Tue, 20 Aug 2019 17:22:04 GMT
x-robots-tag: noindex, nofollow
server: AmazonS3
content-encoding: gzip
date: Sat, 01 Apr 2023 04:43:36 GMT
cache-control: public, max-age=86400
etag: W/"a637698b696964cb3a292f5482138425"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 0c35b89cb607eddb1b7cc5d6ada865d6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FvhEE-rheCvW18gxY93eOpi-4XIqMpnh8_ypcOJe5FSu1MeR8Mtthg==
age: 287
strict-transport-security: max-age=31536000; includeSubDomains
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa438448b-437b-48c9-af47-94514486c67e.jpeg
200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa438448b-437b-48c9-af47-94514486c67e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 0ee37ccafa69e9c352768fa30819a54f
c5268d4749fa57e8602fcb12fd11d5ffb10d0503
4186438aaede57d6b47306caa12a61328fdc83f421cecce44337ff6df9c8c028
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa438448b-437b-48c9-af47-94514486c67e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8513
x-amzn-requestid: c96fbbef-3321-40ca-9f82-79db833d14ed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: CqnXDEcQoAMFZkA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-64275293-75f3dfe836f9fb52292e0c21;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:37:23 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: UMFfJ465bKY7Fr0I3-8brzOQtUUbCvnqkwvHmbBKYB65f-Gd8h8tOQ==
via: 1.1 4b800f7fa2c3fbb9f4f3c505b0df315e.cloudfront.net (CloudFront), 1.1 536063cb28bfc05fcb7a78183dd89b72.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:46:59 GMT
age: 25231
etag: "c5268d4749fa57e8602fcb12fd11d5ffb10d0503"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fb8174c-0fbe-4857-bc0b-3e50751be490.jpeg
200 OK 3.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fb8174c-0fbe-4857-bc0b-3e50751be490.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash ddcef2c96778d9fdee670e187a43ab32
e8c98891a1ffdbb6d30cf8746e067d56fe65d964
4e6fb506079b1daab0b1913a31c6252452f133af9276e18d25fe6fb622ce54ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6fb8174c-0fbe-4857-bc0b-3e50751be490.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3800
x-amzn-requestid: a182fb32-649a-4228-a591-080aae8c053a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm9VEY2oAMFf5g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751ee-3a1abb584aa61a954dbd52c1;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:38 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: ycsh7rNJt9blXZVpFbbdBDu5pZbGDfGIPLt5k0Ff9-fvWTX86Ndz6A==
via: 1.1 88a7ff956a5b49ec3a35abfc0027af12.cloudfront.net (CloudFront), 1.1 6a6653dfb47ccc5082f2a5b9d0d168ce.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:45:01 GMT
age: 25349
etag: "e8c98891a1ffdbb6d30cf8746e067d56fe65d964"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg
200 OK 6.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 800c2662fd6ab8829a02b7d63084c38d
0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239
76545e9f75dc558fdb7b54550934c7775318fb4150a9309f60e65d982d2e576e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F808d12ec-c97a-4c49-976e-6025ea897112.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5950
x-amzn-requestid: 5d5a94f5-db2f-4c4c-9c9f-08c14b0ccd80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Cqm7NG2NIAMF-sQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-642751e1-57c957f442c42fe148e66831;Sampled=0;lineage=69363f46:0
x-amzn-remapped-date: Fri, 31 Mar 2023 21:34:25 GMT
x-amz-cf-pop: HIO52-P1, SEA19-C1
x-cache: Hit from cloudfront
x-amz-cf-id: KkjS04mCLqFET4v9-sePYK-zcztrds608GECT1Fxz3BEpslgxnpLOg==
via: 1.1 f193acd25f2604e189bfbfaf539aaa06.cloudfront.net (CloudFront), 1.1 2241406ac19fffc8f35d6ddef8e22f56.cloudfront.net (CloudFront), 1.1 google
date: Fri, 31 Mar 2023 21:37:17 GMT
age: 25813
etag: "0917d2c376f8d2af2a436a33ce2bfe1cbdb8b239"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
mono29.mthai.com/embed?episode_id=7364
302 Found 0 B URL HTTP/1.1 mono29.mthai.com/embed?episode_id=7364
IP
ASN #45758 Triple T Broadband Public Company Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed?episode_id=7364 HTTP/1.1
Host: mono29.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-length: 0
Location: https://mono29.com/embed?episode_id=7364
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Sat, 01 Apr 2023 04:47:30 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+339; expires=Mon, 31-Mar-2025 04:47:30 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 01 Apr 2023 04:47:30 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1580
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Sat, 01 Apr 2023 04:47:30 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+449; expires=Mon, 31-Mar-2025 04:47:30 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
expires: Sat, 01 Apr 2023 04:47:30 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 741a2f47aab81a2c7ed0fadaa1fa74e3
be34e0df4a5f272589a017ce77ece974d890f27c
4ea1737c8246072ea1072314ae684c1f7e518a81a5200c46374e47378bfb6b63
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
200 OK 31 kB URL HTTP/2 jnn-pa.googleapis.com/$rpc/google.internal.waa.v1.Waa/Create
IP
File type JSON data\012- , ASCII text, with very long lines (65536), with no line terminators
Hash 67442a4d663a273c0349da6e3ef0ab05
d96f6cefdbc306a93fe69b828a47342f4593b82d
a5297144ea10c3dd53e1ddaeb981e7fd85b72ebb96e5d2376b105dfe92e5bcb9
POST /$rpc/google.internal.waa.v1.Waa/Create HTTP/1.1
Host: jnn-pa.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Goog-Api-Key: AIzaSyDyT5W0Jh49F30Pqqtyfdf7pDLFKLJoAnw
Content-Type: application/json+protobuf
X-User-Agent: grpc-web-javascript/0.1
Content-Length: 24
Origin: https://www.youtube.com
Connection: keep-alive
Referer: https://www.youtube.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: application/json+protobuf; charset=UTF-8
vary: Origin, X-Origin, Referer
content-encoding: gzip
date: Sat, 01 Apr 2023 04:47:30 GMT
server: ESF
cache-control: private
content-length: 31292
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
access-control-allow-origin: https://www.youtube.com
access-control-allow-credentials: true
access-control-expose-headers: vary,vary,vary,content-encoding,date,server,content-length
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 669 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 5e08457f9c9c73cc698fe5f1fcceb865
3168acfcc8cf450d895b8b6bbff186fec00f7b6b
aa39591eba2087b114b05deb297c7213d21ecacef2bc4b3323d5cff2bc41b872
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Sat, 01 Apr 2023 04:47:30 GMT
date: Sat, 01 Apr 2023 04:47:30 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 669
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.dj.in.th/external/playerv2.js?v4
200 OK 6.4 kB URL HTTP/1.1 www.dj.in.th/external/playerv2.js?v4
IP
File type ASCII text, with very long lines (15687), with no line terminators
Hash 0bd80798edf10b0d669c17553d296f2b
4aea78083a2e99904f455b0a950a060e39e80416
ad7aa2145361b8a1461d753de81bd14cbbbdc1804bf2446d48fe3e0489a28607
GET /external/playerv2.js?v4 HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:30 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=17031
cache-control: public, max-age=604800
etag: W/"4287-5f0da9ed-47da60;gz"
expires: Sat, 07 Jan 2023 11:41:37 GMT
last-modified: Tue, 14 Jul 2020 12:49:49 GMT
vary: Accept-Encoding
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PWWRoIc%2BjZfmVwXQAWYt7BdRRQ6yf5C6kEIbndjpySDJIFwwXF6JDmUAi4XTUkCvPuRxina1sSgfgCvc4FxrNJ09UkDl3VBn9ZAal2UzJvpRoND4AK9OUsbnTZqMxPY%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0e31c88c83067b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
cdnjs.cloudflare.com/ajax/libs/howler/2.1.3/howler.min.js
200 OK 8.2 kB URL HTTP/2 cdnjs.cloudflare.com/ajax/libs/howler/2.1.3/howler.min.js
IP
File type ASCII text, with very long lines (25420)
Hash 32bfd676fe0c477d6fffe589d4cc8a60
c7625ee7d45d304c87373b46413b15bd89345994
05939a8b379933dc659b30760139cb886545e5505e1db0638b46426e92c4cb21
GET /ajax/libs/howler/2.1.3/howler.min.js HTTP/1.1
Host: cdnjs.cloudflare.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.dj.in.th/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 01 Apr 2023 04:47:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 8243
access-control-allow-origin: *
cache-control: public, max-age=30672000
content-encoding: br
etag: "5eb03e9d-87ca"
last-modified: Mon, 04 May 2020 16:11:09 GMT
cf-cdnjs-via: cfworker/kv
cross-origin-resource-policy: cross-origin
timing-allow-origin: *
x-content-type-options: nosniff
expect-ct: max-age=604800, report-uri="https://report-uri.cloudflare.com/cdn-cgi/beacon/expect-ct"
vary: Accept-Encoding
cf-cache-status: HIT
age: 25765314
expires: Thu, 21 Mar 2024 04:47:30 GMT
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RpKkb8TTQhyxhMqyQjdOgp3HrXlTri68zt3eowq8IC1V6iTH7Yw1KQXFJVpO2xMISWzHs9AM%2FM6e0p1a8AFJW3ctqM%2BWfM2drzd9M75oYYM539SkFnk%2BVFCyFZG6IE02U3BK7RnR"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}
strict-transport-security: max-age=15780000
server: cloudflare
cf-ray: 7b0e31ca6e38b4ff-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.hostgator.com/img/Shared/160x600.gif
404 Not Found 12 kB URL HTTP/2 www.hostgator.com/img/Shared/160x600.gif
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (21152)
Hash 5146aeb5161457ce73d3c758b6e0dac1
fc6076f2d8dc0e5ee0afa25e8b53a4c98074339a
17ca908043dbd6594224b95d2775c99c5d5cb07e2ecd41ff476ea999566cfa03
GET /img/Shared/160x600.gif HTTP/1.1
Host: www.hostgator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Sat, 01 Apr 2023 04:47:30 GMT
content-type: text/html; charset=UTF-8
x-eig-cache-control: private, max-age=0, no-cache
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: country=USA; domain=.hostgator.com; path=/; secure
Currency=USD; domain=.hostgator.com; path=/; secure
Currency_Symbol=%24; domain=.hostgator.com; path=/; secure
eigi-geolocated-country-code=no; domain=.hostgator.com; path=/; expires=Sun, 31-Mar-2024 04:48:07 GMT; secure
host=U2FsdGVkX195TwqTbNIf3FcJFM12WOPJ%2ByR%2BY3KiH5Uh4Nqn%2FNHKzpUJEGA2kBsSI5bxsoiZW%2BtHp1ziVkWq72sj%2BiBSoWpwgGjVPqQbIGLGxx4DywTO8A%3D%3D; domain=.hostgator.com; path=/; secure
session_id=5e9cfc9c0ea51b67e0ed416a700ec10cd; domain=.hostgator.com; path=/; secure
customerpixel=%7B%22visits%22%3A1%2C%22current_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22last_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22first_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22login%22%3A0%7D; domain=.hostgator.com; path=/; expires=Sun, 31-Mar-2024 04:48:07 GMT; secure
x-eig-tracking-id: SAM.578d6b205549c4f5d75a677b96f04b79
cache-control: private, no-cache, max-age=0, max-age=14400
expires: Sat, 01 Apr 2023 08:48:07 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
ocsp.godaddy.com/
200 OK 1.8 kB IP
Hash 405bb94f308237a76f85590ea33f21bd
c4d08b187ca4bf36a8228c663d30844971270bee
dce1750201a9fd50abffb64c4a6c6d6afca957e886313e7cac7db5bb8f6c6558
POST / HTTP/1.1
Host: ocsp.godaddy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 75
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: Sucuri/Cloudproxy
Date: Sat, 01 Apr 2023 04:47:31 GMT
Content-Type: application/ocsp-response
Content-Length: 1777
Connection: keep-alive
X-Sucuri-ID: 19024
Content-Transfer-Encoding: Binary
Cache-Control: public, no-transform, must-revalidate
Last-Modified: Fri, 31 Mar 2023 17:40:06 GMT
Expires: Sat, 01 Apr 2023 17:40:06 GMT
ETag: "c4d08b187ca4bf36a8228c663d30844971270bee"
P3P: CP="IDC DSP COR LAW CUR ADM DEV TAI PSA PSD IVA IVD HIS OUR SAM PUB LEG UNI COM NAV STA"
mono29.com/embed?episode_id=7364
301 Moved Permanently 162 B URL HTTP/2 mono29.com/embed?episode_id=7364
IP
ASN #45758 Triple T Broadband Public Company Limited
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /embed?episode_id=7364 HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
server: nginx
date: Sat, 01 Apr 2023 04:44:59 GMT
content-type: text/html
content-length: 162
location: http://mono29.com/embed/?episode_id=7364
x-ua-compatible: IE=Edge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
www.dj.in.th/api.php?f=json&u=null&id=playergen&p=mcclean&e=1%3A8020%3A1
200 OK 381 B URL HTTP/1.1 www.dj.in.th/api.php?f=json&u=null&id=playergen&p=mcclean&e=1%3A8020%3A1
IP
File type JSON data\012- , ASCII text, with very long lines (681), with no line terminators
Hash e545cb9b34dca3cdb56a8616218e8a7c
237c5f15de7f5c1cb769421c9586f1e55d6e3e4f
359f4752e129786b64e3124b75f3b35d6c13863e025c660c111d44b68ce319f3
GET /api.php?f=json&u=null&id=playergen&p=mcclean&e=1%3A8020%3A1 HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
access-control-allow-origin: *
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KRIq%2F63pXJa4JWoyGKW5Uc5KWSy6rNNdP82qp3KR3ECnuSBEF8iQS%2BkhD%2FyXJt1%2BjwIDNrDTDKSY6ceGhTOUmt1ofsUOEuflS1h6fpzCay5mZd41OFkDzlGfwFKgn%2FI%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7b0e31d03e35067b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
sstatic1.histats.com/0.gif?2435607&101
200 OK 43 B URL HTTP/1.1 sstatic1.histats.com/0.gif?2435607&101
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 07fff40b5dd495aca2ac4e1c3fbc60aa
e8ac224ba9ee97e87670ed6f3a2f0128b7af9fe4
a065920df8cc4016d67c3a464be90099c9d28ffe7c9e6ee3a18f257efc58cbd7
GET /0.gif?2435607&101 HTTP/1.1
Host: sstatic1.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:31 GMT
Content-Type: image/gif
Content-Length: 43
Connection: close
mono29.com/embed/?episode_id=7364
302 Found 0 B URL HTTP/1.1 mono29.com/embed/?episode_id=7364
IP
ASN #45758 Triple T Broadband Public Company Limited
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /embed/?episode_id=7364 HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Cache-Control: no-cache
Content-length: 0
Location: https://mono29.com/embed/?episode_id=7364
www.dj.in.th/external/player/skin_mcclean/statusstop.png
200 OK 136 B URL HTTP/1.1 www.dj.in.th/external/player/skin_mcclean/statusstop.png
IP
File type PNG image data, 2 x 2, 8-bit/color RGBA, interlaced\012- data
Hash 6e6b717c8a7eb5e0d8c44ed3ca3eb946
fca580d0c2897c2ebe9ac2ff0f2894e3b1e934ed
11e98c128ba54ebd47341b7df9ee5d95aa9c0e8dd32cefdf3e5bfc34ddeb601f
GET /external/player/skin_mcclean/statusstop.png HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: image/png
Content-Length: 136
Connection: keep-alive
cache-control: public, max-age=604800
expires: Fri, 17 Feb 2023 23:18:55 GMT
etag: "88-4ef872ce-4c16361;;;"
last-modified: Mon, 26 Dec 2011 13:12:46 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FBBfXDYhgPNXOoPbRVTktdzk9cku5BE3fpvWMwJkujuvpoZlNUP0ugXMiw5TKOj%2BuMSO3GTq%2FmydK43MdEqcDYHimeOz%2FUk1FZFHuMs0J0TEm1gz5w4V%2B%2FhO2nhcAo4%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31d2081db517-OSL
alt-svc: h2=":443"; ma=60
www.dj.in.th/external/player/skin_mcclean/stop.jpg
200 OK 1.5 kB URL HTTP/1.1 www.dj.in.th/external/player/skin_mcclean/stop.jpg
IP
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 100x100, segment length 16, progressive, precision 8, 28x26, components 3\012- data
Hash 02f7263ce82ee5b0ba283cc66749a55c
27a00329daa5e008eb14c4bb727a81ad4feef45b
a0e923176fb5fbb7fac28e6261a0078dcdc1e9830b3fd5a72893c088870ad5fc
GET /external/player/skin_mcclean/stop.jpg HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: image/jpeg
Content-Length: 1459
Connection: keep-alive
cache-control: public, max-age=604800
expires: Fri, 17 Feb 2023 23:18:55 GMT
etag: "5b3-4ef872ce-4c16367;;;"
last-modified: Mon, 26 Dec 2011 13:12:46 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yyHdHVg4mchIzSluIgAsH6Asj94Y3MqkxlE9Jgrq79%2FFFFd0AoHR%2BlRwCUNzCpmtQ7DLw0W%2FHfZfFYBqlLJMbCSnip30GBzG3GTkoT2vnlOw6jj4YE%2BGc%2B8KgVYwD4s%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31d20c34b51e-OSL
alt-svc: h2=":443"; ma=60
www.dj.in.th/external/player/skin_mcclean/play.gif
200 OK 1.5 kB URL HTTP/1.1 www.dj.in.th/external/player/skin_mcclean/play.gif
IP
File type GIF image data, version 89a, 28 x 26\012- data
Hash b6a5dfa0a4a17b886d12e9fb795cc4ca
cab8ee98e14872bdefcad9bfbd3a9921f04f37f2
8a7d1c77115f9343ad542c9fdc2438080631ab3cee67f56fd912f9d3d90af529
GET /external/player/skin_mcclean/play.gif HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: image/gif
Content-Length: 1493
Connection: keep-alive
cache-control: public, max-age=604800
expires: Tue, 28 Feb 2023 19:58:13 GMT
etag: "5d5-4ef872ce-4c16363;;;"
last-modified: Mon, 26 Dec 2011 13:12:46 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=EHVrUrbdWW8meRjhBMia%2BfKLIiZf5X5bgmtDbgUCMYh2dGlNgMKtJQTAcmw3c%2BH889pSkcLbgFown7tE6yr6biBW1mYLw990gwlhsWQsKMBbVwNSFm5e8ES8iDo4Rgw%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31d1fea4067b-OSL
alt-svc: h2=":443"; ma=60
www.dj.in.th/external/player/skin_mcclean/holder.png
200 OK 830 B URL HTTP/1.1 www.dj.in.th/external/player/skin_mcclean/holder.png
IP
File type PNG image data, 17 x 16, 8-bit/color RGBA, interlaced\012- data
Hash 0ea9752ef82aeaa3e4331dd70395c4ca
2fb90e887b4e9f75e1a7a0dfe6c9895f5987a53e
b8ae57d52ce4e0eda4fe0d85b3ab352e66aba72c560ebae03ada4a22da917313
GET /external/player/skin_mcclean/holder.png HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: image/png
Content-Length: 830
Connection: keep-alive
cache-control: public, max-age=604800
expires: Thu, 16 Feb 2023 01:47:01 GMT
etag: "33e-4ef872ce-4c16365;;;"
last-modified: Mon, 26 Dec 2011 13:12:46 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wOkHHy%2B9ji%2FiUzKHVt%2BtzdYiamkyWHzoGhNW8dEY1TIqNoOLNLlWHryCFr2QgKbuAj8cZHn0FU1AOsrCzY%2FRf9dH4y2F9%2B7gpRge4vEZSX%2BkuiWMsPiqPqm7IMZCtkg%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31d22ca9b511-OSL
alt-svc: h2=":443"; ma=60
www.dj.in.th/external/player/skin_mcclean/bg.png
200 OK 3.6 kB URL HTTP/1.1 www.dj.in.th/external/player/skin_mcclean/bg.png
IP
File type PNG image data, 180 x 60, 8-bit/color RGBA, interlaced\012- data
Hash 06727335ab7119bdc9363fe5b3aa7e13
f2dfa553c5ade62e6c223d65c24ed859afd1cd16
555053a9ef3fceda7f22b9a3ea0262ac5c6031d40e4647ddf0846669406bcb4b
GET /external/player/skin_mcclean/bg.png HTTP/1.1
Host: www.dj.in.th
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.dj.in.th/player-1-1-8020-100-true-mcclean-ONDIO%20New%20[%20www.ondio.in%20].html
HTTP/1.1 200 OK
Date: Sat, 01 Apr 2023 04:47:32 GMT
Content-Type: image/png
Content-Length: 3649
Connection: keep-alive
cache-control: public, max-age=604800
expires: Fri, 17 Feb 2023 23:18:55 GMT
etag: "e41-4ef872ce-4c16362;;;"
last-modified: Mon, 26 Dec 2011 13:12:46 GMT
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Iwe2q66n%2FPWa8Igio6VUEfKb%2FzXQ%2BfmrR0xO5a7kyWqYyKNIM9hjKXhenY8k%2BxxwFXt5Z3hfZ%2BCSdmuIS8cnBX4QVnploLHoDqe23K1wxLIaJSn%2BsvCCgqrM%2FA%2Fybz0%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7b0e31d229b3b50c-OSL
alt-svc: h2=":443"; ma=60
mono29.com/embed/?episode_id=7364
200 OK 2.1 kB URL HTTP/2 mono29.com/embed/?episode_id=7364
IP
ASN #45758 Triple T Broadband Public Company Limited
Hash 425d5f5aa7faadc6b7612e15f1f40a09
f7f6a336113945e14aae10c4f54233e53127a560
0681478a3f9936155f68016c2c5d5b41398284f83df70a95dee06bf3c2f91c1f
GET /embed/?episode_id=7364 HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:45:00 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
set-cookie: ppwp_wp_session=88eabe1853eb488ca03e1a416b66852f%7C%7C1680326100%7C%7C1680325740; expires=Sat, 01-Apr-2023 05:15:00 GMT; Max-Age=1800; path=/
fastcgi-cache: BYPASS
x-ua-compatible: IE=Edge
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
mono29.com/mono29_livetv/css/bootstrap.min.css
200 OK 5.7 kB URL HTTP/2 mono29.com/mono29_livetv/css/bootstrap.min.css
IP
ASN #45758 Triple T Broadband Public Company Limited
Hash c7a06f4967c96fc3c15aeafdb99e6ecd
f89710b5fe6156b734369bb6c066153e2b7f7efa
24f2678c756f4a039b254f7021c958cbf033ab29b4ee1561da8253084c18cb3e
GET /mono29_livetv/css/bootstrap.min.css HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/embed/?episode_id=7364
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:45:00 GMT
content-type: text/css; charset=utf-8
last-modified: Fri, 31 Mar 2023 09:14:49 GMT
vary: Accept-Encoding
etag: W/"6426a489-602f"
expires: Sun, 31 Mar 2024 04:45:00 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
ssl.google-analytics.com/ga.js
200 OK 17 kB URL HTTP/2 ssl.google-analytics.com/ga.js
IP
File type ASCII text, with very long lines (1305)
Hash 01d5892e6e243b52998310c2925b9f3a
58180151b6a6ee4af73583a214b68efb9e8844d4
7e90efb4620a78e8869796d256bcddbde90b853c8c15c5cc116cb11d3d17bc4d
GET /ga.js HTTP/1.1
Host: ssl.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 17168
date: Sat, 01 Apr 2023 04:41:44 GMT
expires: Sat, 01 Apr 2023 06:41:44 GMT
cache-control: public, max-age=7200
age: 349
last-modified: Tue, 10 Jan 2023 21:29:14 GMT
content-type: text/javascript
vary: Accept-Encoding
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5b6731341a66be32757ea461f5bd605a
f9a017cd1195d1eafb3839a899baf75f2e71958f
4bda8352f303d3fb71b8c4b2ecc9fbe75dcfc91dd2232260afb1e37ebbf139fb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 01 Apr 2023 04:47:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.p.jwpcdn.com/player/v/8.11.7/jwpsrv.js
200 OK 17 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.11.7/jwpsrv.js
IP
File type ASCII text, with very long lines (59078)
Hash 4fca0c01776eb9b678fb71258f198c9e
78355e9c564c49c0d3bfc7e407c07d47dbab397d
4f472ac5bd92043b414f1017d720e0b2fbe42f647464997242447cc027dfcad7
GET /player/v/8.11.7/jwpsrv.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
last-modified: Wed, 25 Nov 2020 15:43:48 GMT
etag: "dc6ac994f6a929ba177587504ee3c159"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 01 Apr 2023 04:47:33 GMT
via: 1.1 varnish
age: 2434
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1680324453.452464,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 17400
X-Firefox-Spdy: h2
mono29.com/mono29_livetv/js/jwplayer-8.11.7/jwplayer.js
200 OK 69 kB URL HTTP/2 mono29.com/mono29_livetv/js/jwplayer-8.11.7/jwplayer.js
IP
ASN #45758 Triple T Broadband Public Company Limited
File type ASCII text, with very long lines (65140)
Hash 79046d3932a21629a7a91907c1866f0b
14c6e2f76ddb7f753940aec49bab65f4c0be2d24
11211091eab87b1c083f40db8e7639fef763792bd690e40dfcdbb52577a786a4
GET /mono29_livetv/js/jwplayer-8.11.7/jwplayer.js HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/embed/?episode_id=7364
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:45:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 31 Mar 2023 09:14:49 GMT
vary: Accept-Encoding
etag: W/"6426a489-1bdb6"
expires: Sun, 31 Mar 2024 04:45:00 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
ssl.p.jwpcdn.com/player/v/8.11.7/jwplayer.core.controls.js
200 OK 71 kB URL HTTP/2 ssl.p.jwpcdn.com/player/v/8.11.7/jwplayer.core.controls.js
IP
File type Unicode text, UTF-8 text, with very long lines (65132)
Hash 795686d76e47997d8d1b08edff5d62fd
3097ed0c58c645a1f36d9ed585ed5ac53455938c
f6471480185379c009f1d7aca01b026e5aa598663ea9ca4224046fbf04c2808d
GET /player/v/8.11.7/jwplayer.core.controls.js HTTP/1.1
Host: ssl.p.jwpcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=31536000, immutable
last-modified: Fri, 01 Nov 2019 20:45:09 GMT
etag: "b6a2373c8f3e7c776ff7ff4f85b39717"
content-type: application/javascript
server: AmazonS3
content-encoding: gzip
accept-ranges: bytes
date: Sat, 01 Apr 2023 04:47:33 GMT
via: 1.1 varnish
age: 1490946
x-served-by: cache-bma1626-BMA
x-cache: HIT
x-cache-hits: 1
x-timer: S1680324453.452541,VS0,VE1
vary: Accept-Encoding
access-control-allow-origin: *
content-length: 71416
X-Firefox-Spdy: h2
prd.jwpltx.com/v1/error/ping.gif?h=-1471333687&e=ers&n=8654622331470112&abc=0&aid=b8v%2B2gENEeqXACrPy7N%2ByA&=0&at=1&c=0&ccp=0&cp=0&d=0&eb=0&ed=6&emi=3yc7kp8kdsfm&i=1&lid=g14gm41ak98c&lsa=set&mt=0&pbd=1&pbr=1&pgi=1aonqwn19t7v&ph=0&pii=0&pl=0&plc=0&pli=y3nfa6179iu7&pp=&prc=1&ps=0&pss=0&pt=%E0%B8%84%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B1%E0%B8%81%E0%B8%8A%E0%B8%B2%E0%B8%A7%E0%B8%AD%E0%B8%B1%E0%B8%87%E0%B8%81%E0%B8%A4%E0%B8%A9%E0%B8%95%E0%B8%B2%E0%B8%A1%E0%B8%AB%E0%B8%B2%E0%B8%84%E0%B8%99%E0%B9%84%E0%B8%97%E0%B8%A2%E0%B8%8A%E0%B9%88%E0%B8%A7%E0%B8%A2%E0%B8%8A%E0%B8%B5%E0%B8%A7%E0%B8%B4%E0%B8%95&pu=http%3A%2F%2Fwifi-phitsanulok.blogspot.com%2F&pv=8.11.7&pyc=0&s=0&sdk=0&stc=1&stpe=0&tv=3.26.1&vl=90&wd=0&cme=0&erc=102630&flc=0&sa=1680324452131
204 No Content 0 B URL HTTP/2 prd.jwpltx.com/v1/error/ping.gif?h=-1471333687&e=ers&n=8654622331470112&abc=0&aid=b8v%2B2gENEeqXACrPy7N%2ByA&=0&at=1&c=0&ccp=0&cp=0&d=0&eb=0&ed=6&emi=3yc7kp8kdsfm&i=1&lid=g14gm41ak98c&lsa=set&mt=0&pbd=1&pbr=1&pgi=1aonqwn19t7v&ph=0&pii=0&pl=0&plc=0&pli=y3nfa6179iu7&pp=&prc=1&ps=0&pss=0&pt=%E0%B8%84%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B1%E0%B8%81%E0%B8%8A%E0%B8%B2%E0%B8%A7%E0%B8%AD%E0%B8%B1%E0%B8%87%E0%B8%81%E0%B8%A4%E0%B8%A9%E0%B8%95%E0%B8%B2%E0%B8%A1%E0%B8%AB%E0%B8%B2%E0%B8%84%E0%B8%99%E0%B9%84%E0%B8%97%E0%B8%A2%E0%B8%8A%E0%B9%88%E0%B8%A7%E0%B8%A2%E0%B8%8A%E0%B8%B5%E0%B8%A7%E0%B8%B4%E0%B8%95&pu=http%3A%2F%2Fwifi-phitsanulok.blogspot.com%2F&pv=8.11.7&pyc=0&s=0&sdk=0&stc=1&stpe=0&tv=3.26.1&vl=90&wd=0&cme=0&erc=102630&flc=0&sa=1680324452131
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v1/error/ping.gif?h=-1471333687&e=ers&n=8654622331470112&abc=0&aid=b8v%2B2gENEeqXACrPy7N%2ByA&=0&at=1&c=0&ccp=0&cp=0&d=0&eb=0&ed=6&emi=3yc7kp8kdsfm&i=1&lid=g14gm41ak98c&lsa=set&mt=0&pbd=1&pbr=1&pgi=1aonqwn19t7v&ph=0&pii=0&pl=0&plc=0&pli=y3nfa6179iu7&pp=&prc=1&ps=0&pss=0&pt=%E0%B8%84%E0%B8%B9%E0%B9%88%E0%B8%A3%E0%B8%B1%E0%B8%81%E0%B8%8A%E0%B8%B2%E0%B8%A7%E0%B8%AD%E0%B8%B1%E0%B8%87%E0%B8%81%E0%B8%A4%E0%B8%A9%E0%B8%95%E0%B8%B2%E0%B8%A1%E0%B8%AB%E0%B8%B2%E0%B8%84%E0%B8%99%E0%B9%84%E0%B8%97%E0%B8%A2%E0%B8%8A%E0%B9%88%E0%B8%A7%E0%B8%A2%E0%B8%8A%E0%B8%B5%E0%B8%A7%E0%B8%B4%E0%B8%95&pu=http%3A%2F%2Fwifi-phitsanulok.blogspot.com%2F&pv=8.11.7&pyc=0&s=0&sdk=0&stc=1&stpe=0&tv=3.26.1&vl=90&wd=0&cme=0&erc=102630&flc=0&sa=1680324452131 HTTP/1.1
Host: prd.jwpltx.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx
accept-ranges: bytes
date: Sat, 01 Apr 2023 04:47:33 GMT
via: 1.1 varnish
x-served-by: cache-bma1626-BMA
x-cache: MISS
x-cache-hits: 0
X-Firefox-Spdy: h2
entitlements.jwplayer.com/b8v+2gENEeqXACrPy7N+yA.json
200 OK 80 B URL HTTP/2 entitlements.jwplayer.com/b8v+2gENEeqXACrPy7N+yA.json
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash c6fbe9486c49ec5e44a993418f21a81d
bd0a01b253c404891ddad09ffc0e9ee2fea743d5
42bd7261447d14ca82b08fbcb05957e84cf67725f476d9eeb5def94aa5d73aba
GET /b8v+2gENEeqXACrPy7N+yA.json HTTP/1.1
Host: entitlements.jwplayer.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://mono29.com
Connection: keep-alive
Referer: https://mono29.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
access-control-allow-origin: *
cache-control: max-age=1800, s-maxage=20760
content-type: application/json
date: Sat, 01 Apr 2023 04:47:34 GMT
server: nginx
vary: Accept-Encoding
content-length: 80
X-Firefox-Spdy: h2
news.mthai.com/wp-content/uploads/2014/07/0008-300x300.jpg
403 Forbidden 0 B URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/0008-300x300.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /wp-content/uploads/2014/07/0008-300x300.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
www.youtube.com/embed/U_-0F6Ye_hc?hl=th_TH&version=3
200 OK 0 B URL HTTP/2 www.youtube.com/embed/U_-0F6Ye_hc?hl=th_TH&version=3
IP
GET /embed/U_-0F6Ye_hc?hl=th_TH&version=3 HTTP/1.1
Host: www.youtube.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: embed
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html; charset=utf-8
x-content-type-options: nosniff
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 04:47:29 GMT
strict-transport-security: max-age=31536000
cross-origin-resource-policy: cross-origin
report-to: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-opener-policy-report-only: same-origin; report-to="youtube_main"
p3p: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=th for more info."
content-encoding: br
server: ESF
x-xss-protection: 0
set-cookie: YSC=a3-AcOksroY; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none
VISITOR_INFO1_LIVE=j0zxcLIQudg; Domain=.youtube.com; Expires=Thu, 28-Sep-2023 04:47:29 GMT; Path=/; Secure; HttpOnly; SameSite=none
CONSENT=PENDING+409; expires=Mon, 31-Mar-2025 04:47:29 GMT; path=/; domain=.youtube.com; Secure
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
news.mthai.com/wp-content/uploads/2014/07/0006-500x291.jpg
403 Forbidden 0 B URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/0006-500x291.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /wp-content/uploads/2014/07/0006-500x291.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
mono29.com/mono29_livetv/js/jquery-3.1.1.min.js
200 OK 0 B URL HTTP/2 mono29.com/mono29_livetv/js/jquery-3.1.1.min.js
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /mono29_livetv/js/jquery-3.1.1.min.js HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/embed/?episode_id=7364
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:45:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 31 Mar 2023 09:14:49 GMT
vary: Accept-Encoding
etag: W/"6426a489-152b5"
expires: Sun, 31 Mar 2024 04:45:00 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
www.hostgator.com/img/Green/160x600.gif
404 Not Found 0 B URL HTTP/2 www.hostgator.com/img/Green/160x600.gif
IP
GET /img/Green/160x600.gif HTTP/1.1
Host: www.hostgator.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
server: nginx
date: Sat, 01 Apr 2023 04:47:30 GMT
content-type: text/html; charset=UTF-8
x-eig-cache-control: private, max-age=0, no-cache
x-frame-options: DENY
strict-transport-security: max-age=31536000; includeSubDomains
set-cookie: country=USA; domain=.hostgator.com; path=/; secure
Currency=USD; domain=.hostgator.com; path=/; secure
Currency_Symbol=%24; domain=.hostgator.com; path=/; secure
eigi-geolocated-country-code=no; domain=.hostgator.com; path=/; expires=Sun, 31-Mar-2024 04:48:07 GMT; secure
host=U2FsdGVkX1%2Fgt5KMyeFKketxh%2B9njuQPUErCTc25NZ62l5Qg0xJuTCv3j%2Beg5ft1nXZJ2JKCi0xhfJ1%2B6uUbBTpEpaBgU5pK1UE8En8Wn6aztYOvrPGSwQ%3D%3D; domain=.hostgator.com; path=/; secure
session_id=9cfc9c0ea51b67e0ed416a700ec10cdc7; domain=.hostgator.com; path=/; secure
customerpixel=%7B%22visits%22%3A1%2C%22current_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22last_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22first_visit%22%3A%222023-03-31%2023%3A48%3A07%22%2C%22login%22%3A0%7D; domain=.hostgator.com; path=/; expires=Sun, 31-Mar-2024 04:48:07 GMT; secure
x-eig-tracking-id: SAM.3b5a120fa8dceecbd87940a3b999364c
cache-control: private, no-cache, max-age=0, max-age=14400
expires: Sat, 01 Apr 2023 08:48:07 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
news.mthai.com/wp-content/uploads/2014/07/414-500x285.jpg
403 Forbidden 0 B URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/414-500x285.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /wp-content/uploads/2014/07/414-500x285.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
200 OK 0 B URL HTTP/2 translate.google.com/translate_a/element.js?cb=googleTranslateElementInit
IP
GET /translate_a/element.js?cb=googleTranslateElementInit HTTP/1.1
Host: translate.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://wifi-phitsanulok.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/javascript; charset=utf-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 01 Apr 2023 04:47:29 GMT
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
set-cookie: CONSENT=PENDING+681; expires=Mon, 31-Mar-2025 04:47:29 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
9zean.com/favicon_2_.ico
404 Not Found 0 B IP
GET /favicon_2_.ico HTTP/1.1
Host: 9zean.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 404 Not Found
cache-control: no-cache
content-type: text/html
x-reason: MediaRequest
mono29.com/mono29_livetv/js/bootstrap.min.js
200 OK 0 B URL HTTP/2 mono29.com/mono29_livetv/js/bootstrap.min.js
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /mono29_livetv/js/bootstrap.min.js HTTP/1.1
Host: mono29.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://mono29.com/embed/?episode_id=7364
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
server: nginx
date: Sat, 01 Apr 2023 04:45:00 GMT
content-type: application/javascript; charset=utf-8
last-modified: Fri, 31 Mar 2023 09:14:49 GMT
vary: Accept-Encoding
etag: W/"6426a489-8b11"
expires: Sun, 31 Mar 2024 04:45:00 GMT
cache-control: max-age=31536000, public
content-encoding: gzip
strict-transport-security: max-age=16000000; includeSubDomains; preload;
X-Firefox-Spdy: h2
news.mthai.com/wp-content/uploads/2014/07/0008-300x300.jpg
403 Forbidden 0 B URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/0008-300x300.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /wp-content/uploads/2014/07/0008-300x300.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
news.mthai.com/wp-content/uploads/2014/07/414-500x285.jpg
403 Forbidden 0 B URL HTTP/1.0 news.mthai.com/wp-content/uploads/2014/07/414-500x285.jpg
IP
ASN #45758 Triple T Broadband Public Company Limited
GET /wp-content/uploads/2014/07/414-500x285.jpg HTTP/1.1
Host: news.mthai.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://wifi-phitsanulok.blogspot.com/
HTTP/1.0 403 Forbidden
Cache-Control: no-cache
Connection: close
Content-Type: text/html
216.58.207.193
23.36.77.32
188.114.96.1
110.164.205.177
157.240.205.35
104.17.25.14
149.56.240.127