firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Mon, 26 Sep 2022 03:15:18 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a2b4f68a89fc87406bff22c95fc07fba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: sRq_5VPCdCEMoCyOk75L23HolR5JzsXIgjNTI9WYRplrYW8nV-PNcQ==
Age: 2111
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=9218
Expires: Mon, 26 Sep 2022 06:24:07 GMT
Date: Mon, 26 Sep 2022 03:50:29 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Sun, 25 Sep 2022 04:35:15 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: B0gB5lJZJN6wNBeG_vWshCjWQU5_O6auZer4ePN93akZZaRfMwMhXw==
age: 83715
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 03:50:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Mon, 26 Sep 2022 03:04:17 GMT
Expires: Mon, 26 Sep 2022 03:22:16 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 8e6dce34fd223e0c9d89fd938d1784a2.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: pLIdeVsX3To_0qn-jTclVbSGM9ZxpcVdw54jVzUO1Pfjrf2iYAl60w==
Age: 2772
ocsp.digicert.com/
200 OK 471 B IP
Hash fd3b36dc2b620b48de491a8d9ba00fc0
be67ba7db5215dcb7c9225876e35a5e0a5005c9e
28205ee62c77b1caad6cc24c1ce98ddb92d26f67d41270f7d5278208a907c62f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1961
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Last-Modified: Mon, 26 Sep 2022 03:17:49 GMT
Server: ECS (ska/F70A)
X-Cache: HIT
Content-Length: 471
macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash aba1431bc3874a25323427532c07a352
226dd87cea0f9937d245622e5a84836e30367d50
719a3aadc7a102a89950eb68784375d5af60740f0b1d212e8ca18cd174fe183d
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/rancangan-lamaran-oleh-seorang-lelaki.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 26 Sep 2022 03:50:30 GMT
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35168
Server: GSE
fonts.googleapis.com/css?family=Droid+Sans|BenchNine
200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Sans|BenchNine
IP
Hash 8b6f85a2197a9a728afdd69caeab445c
585da1b7925202ea9e8ffc97d27bbca85cfa394a
336a6969fd14ae199beeada1a339cb913324bd397bd5c86eb77244a9fbda1d5b
GET /css?family=Droid+Sans|BenchNine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Mon, 26 Sep 2022 03:50:30 GMT
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
macamlawak.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 macamlawak.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Mon, 26 Sep 2022 03:50:30 GMT
Expires: Mon, 03 Oct 2022 03:50:30 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 25 Sep 2022 23:50:58 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 09:37:50 GMT
expires: Sun, 24 Sep 2023 09:37:50 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 151960
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
200 OK 6.5 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3262169375-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1264)
Hash 30af015884191ce4fe52ce1e707baed9
faa1418efa036704d31eb90f4fbd82de456b81b7
0456cf81299c957c8e54dabb00b4d6d96b76be729b1e112d478b34ba56d8059d
GET /static/v1/jsbin/3262169375-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6499
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 09:56:02 GMT
expires: Mon, 25 Sep 2023 09:56:02 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 24 Sep 2022 17:50:40 GMT
content-type: text/javascript
age: 64468
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 05:11:14 GMT
expires: Sun, 02 Oct 2022 05:11:14 GMT
cache-control: public, max-age=604800
last-modified: Sat, 24 Sep 2022 17:50:40 GMT
content-type: image/gif
age: 81556
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 21:18:29 GMT
expires: Mon, 25 Sep 2023 21:18:29 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 17:51:02 GMT
content-type: text/css
age: 23521
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash f09a18ffd47757d6303864753f40a57c
6f056a04785c83dae4a4f40eaac5ac34a5a391f2
9969afe37e2b095cd931423fcc9dbfaa9a751d81a055bcd8f77a1aa7a51bd72e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ec532eda6cd0a1af47423884b7b95079
0317ef8c1fed6921f0e8d12a39f864d11bc770fe
6f8cf4e43525bf8b3f22cdfe29a49282bbaf893937ec7581f43f83ec7c92efde
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/4150139458-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b
GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 42840
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
200 OK 12 kB URL HTTP/2 encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 229x143, components 3\012- data
Hash 5a91ff00521c9c039138078d4258cf99
9d3937bc37fff0bfa98daac390ff5a9bab3ff07b
b87f3792f68189504233cf81d5d06decf0f3011b79123bdcc3299c7cfc2541f3
GET /images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw HTTP/1.1
Host: encrypted-tbn3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 12346
date: Mon, 26 Sep 2022 03:50:30 GMT
expires: Tue, 26 Sep 2023 03:50:30 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Jul 2016 07:36:38 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
200 OK 428 B URL HTTP/1.1 ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (428), with no line terminators
Hash 14733dd9678c97e5fbf2d4acbe02ba4f
1ecfc88fef4e03d82e825f570969dde3cf9f3311
9103dd6eb0a5f94c1b5b118b31e4787c7465abf3734493ffa0c349cf0302986c
GET /banner.php?section=General&pub=636673&format=300x250&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Sep 2022 03:50:30 GMT
Last-Modified: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Mon, 26 Sep 2022 03:50:30 GMT
expires: Mon, 26 Sep 2022 03:50:30 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
200 OK 0 B URL HTTP/1.1 ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
IP
ASN #201702 skHosting.eu s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /layer.php?section=General&pub=636673&ga=g&show=1&fp HTTP/1.1
Host: ylx-4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:13 GMT
ETag: "6324a855-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_QCijHgXs7oQKil/eIE2NqkJa/O6dsqAiRyvgXgTP1czDdgf1yj0DwE5lfC39OLIsoM6xbAB7lqEufX3RKg6ufw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
200 OK 1.6 kB URL HTTP/1.1 3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
IP
File type PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash fdb7528e7ccebcfe1daea52aa0195bd6
caa9b43d3056743538e12cb11a7320f9216712ea
08ee145d75eed8be290285f1a8b9fd40b9b8dc029ad10cc6283945b536270506
GET /-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="PhoXo2.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1610
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 01:57:44 GMT
Expires: Fri, 02 Sep 2022 14:21:17 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 6766
ETag: "v8b5"
Content-Type: image/png
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: /Owzz4rGK17g+L+St86rCA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: Nnr8wjkadiTXsC+96D491/lfCsM=
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 07:25:39 GMT
expires: Mon, 25 Sep 2023 07:25:39 GMT
cache-control: public, max-age=31536000
age: 73491
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 13:24:47 GMT
Expires: Sun, 09 Oct 2022 13:24:47 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 51943
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 19 Oct 2022 22:18:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 538301
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nsd7Mdg36YvnV39F%2B2h43pK2VvArejExtlzqFCCzvRofFWOFgm2mK7tbZi9e2B6GT9PQswNT%2FdE9GCCiaUOcnardGjKIgQYn83Mogt7QUpOBwFAVITjoNldgqiEIPMG7"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 750909299933b529-OSL
alt-svc: h2=":443"; ma=60
3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
200 OK 2.4 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
IP
File type ASCII text, with very long lines (2149)
Hash cbafe83972442e457a19e0f65df92c8b
bed10a8306cb9202d1832adbe0ab4f2a0d9358b4
6f07bee420a11253512b4b4051bb0e045e84eb9f856e3a9b4f50dcba3f5db335
GET /geocompteur/trackwidget.php?idec=1009871715 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: application/javascript
Content-Length: 2373
Connection: keep-alive
set-cookie: ville_idec=diff; expires=Mon, 03-Oct-2022 03:50:29 GMT; Max-Age=604800; path=/; domain=widgeo.net
country_idec=diff; expires=Mon, 03-Oct-2022 03:50:29 GMT; Max-Age=604800; path=/; domain=widgeo.net
w_js_ads_code=ok; expires=Sun, 02-Oct-2022 03:50:29 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Mon, 03 Oct 2022 03:50:29 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LwOj2UbRH%2BVGT760QIvCkPmdJsj6JnlK3hQO8nPB43a%2Fa1toTcocYn90YXGYvNPARcSTpjzUCjXwlFpOq7AFrMsMXKLXeVu6ya%2B0cRDrjzt4TRzKF1O0qLWmcRM1JzyU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75090927be9ab50b-OSL
alt-svc: h2=":443"; ma=60
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 8c5ef2f4f663344f1632b3eb8d0649c3
6c2b58649ef2cf95baa7738144b39ed986580c95
26b6489dab75fc0e12f7cf1249ede296389ab38eb034d67daeb3e9750dec81d5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c89b3e4cc3d6462ae9580470a315791d
fd3be63550a4ef169863fca193012ece884df54f
2c694057ea793e99fb49186866251ab4e548d17a08e0230ecf3cfefb8d6c6bab
GET /-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1177"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10408547_10154511905900454_8487754128025911440_n.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 4755
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
200 OK 4.1 kB URL HTTP/1.1 2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6d57e4858ab729e9db89b4a12996c30f
33d340600545ca608cc05649f9de69947ecbada5
99998e4b1f2f6a36badeb95410638ff41f5903dae2d93330ef556d99235a115b
GET /-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bf2"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="hmkiasus_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 4072
X-XSS-Protection: 0
fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
200 OK 20 kB URL HTTP/1.1 fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20196, version 1.0\012- data
Hash d056bf3055437ed0bccae4176b65336e
9049f5482de61d9a66806a292701787d5524fb85
f60c3e8ac9f319f101cf1d20290469aba1eb7cdc63c64d092a02764beae55d9f
GET /s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20196
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 23 Sep 2022 08:19:33 GMT
Expires: Sat, 23 Sep 2023 08:19:33 GMT
Cache-Control: public, max-age=31536000
Age: 243057
Last-Modified: Tue, 19 Apr 2022 19:06:50 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d1256b6452c58ffb05e1db44d9d37a5f
04538f69abefe1019a0c4c6cc1fd3ffe5a5b2cfd
4bf592b24e41cf58e4ea973378a8559c4011a25ccdc51cc7a31457cc6561d22b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.sectigo.com/
200 OK 472 B IP
Hash 51504f4eb93af1b9ed4db7e1978cc6c0
727ecdb93c33a03b5afa3bf096544c0a556b9fda
facd2789ac1063ad9e1ed036e8387eacd96a1b4e57c9b1bd1139e831abd8d580
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 24 Sep 2022 09:35:58 GMT
Expires: Sat, 01 Oct 2022 09:35:57 GMT
Etag: "727ecdb93c33a03b5afa3bf096544c0a556b9fda"
Cache-Control: max-age=452126,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7509092a3fdbb509-OSL
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
200 OK 3.8 kB URL HTTP/1.1 2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0df95f70ada2fd798ee29fd931a698f7
621494a4fd57382d9e3a8241c4bb456b09982ac6
d3503b6ffe77f928919fa21e4863ccb764a0dd9fa4f8f85bd3b07daccc4f1bcc
GET /-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8103"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="kanak-kanak-disembelih.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 3770
X-XSS-Protection: 0
3.bp.blogspot.com/-U4oCc7Kntsc/UrQoWVSdqxI/AAAAAAABnHM/9KvRh0C6weM/s640/a_disney_world_proposal_fail_640_02.jpg
200 OK 59 kB URL HTTP/1.1 3.bp.blogspot.com/-U4oCc7Kntsc/UrQoWVSdqxI/AAAAAAABnHM/9KvRh0C6weM/s640/a_disney_world_proposal_fail_640_02.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x360, components 3\012- data
Hash 6655cc1511f91d6036949362d6048fe7
d4a51a53728de24dcb0b66237beff753fd8bbe6b
b464a8b45fc9d0d9f501703e37d3ab2e12d767502ab5d32ab054ec0e49331dbd
GET /-U4oCc7Kntsc/UrQoWVSdqxI/AAAAAAABnHM/9KvRh0C6weM/s640/a_disney_world_proposal_fail_640_02.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19c76"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="a_disney_world_proposal_fail_640_02.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 59374
X-XSS-Protection: 0
2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
200 OK 4.5 kB URL HTTP/1.1 2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ee7cfb7abd5d834441781bde52da8df3
e59b4e8421dd29d1a94223c6aa086d438ced5cf5
4352c9009643e75015c483e8030b7b4cb04171241209c7a4a70e601927a7da80
GET /-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8997"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="festival_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 4541
X-XSS-Protection: 0
1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
200 OK 2.6 kB URL HTTP/1.1 1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9d2936e5ada19cf70ebcba407d9d9155
c59d9c8ef9d14b135fe15b31d9122cc9fcba58eb
a0ecc02e048826f41bb9b5da70fa1791db5f25297f95fc15e67e2cde369a40a7
GET /-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v41ff"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 2647
X-XSS-Protection: 0
1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
200 OK 4.3 kB URL HTTP/2 1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4969f55f38298ce8b64e50c7256162d4
8cfd6f1939b1d189410c894d704fd2f554e12a62
abf3a18c7179167981435df2a623974d4b8de806ba04a0148d95a4fdbc290873
GET /-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="p6.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4283
x-xss-protection: 0
date: Mon, 26 Sep 2022 03:50:30 GMT
expires: Sat, 24 Sep 2022 06:11:37 GMT
cache-control: public, max-age=86400, no-transform
etag: "vbfa8"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
200 OK 4.5 kB URL HTTP/2 1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9b7344f5521aa04d976b2cfad6f7a8c2
9995760dc29120bcd34877448a305d0b4c39a1b3
917b7d172e92722ee272dd4344a6a958c5a5c5d283087f0b0da4e3232d7de22a
GET /-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="FB_IMG_1579940468844.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4524
x-xss-protection: 0
date: Mon, 26 Sep 2022 03:50:30 GMT
expires: Mon, 26 Sep 2022 03:00:01 GMT
cache-control: public, max-age=86400, no-transform
etag: "v64b0"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:12 GMT
ETag: "6324a854-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_QCijHgXs7oQKil/eIE2NqkJa/O6dsqAiRyvgXgTP1czDdgf1yj0DwE5lfC39OLIsoM6xbAB7lqEufX3RKg6ufw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
200 OK 4.0 kB URL HTTP/1.1 2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1a7922b370e02385ee179c6e36297225
c3190c9f94ad43eea3ca4ce261206b9fea758e9b
5fbb684a31c3623382278b03b38c773df6bfa2f1bc398f78e13bae2aaf50efac
GET /-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v278"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Pertandingan Membuka 8r4 Paling Cepat Di Stesen Tv Indonesia (edit).jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 4047
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5081dc1508d43c1e614957b7a94bab1a
4eecce92d0ed0a867a5c6545238b8ec255aded8b
17aeec36af397aa62a479b610a5dd05987c22cbb58d26d4e79b3e403af5cf9b1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg
404 Not Found 1.7 kB URL HTTP/2 1.bp.blogspot.com/-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 03:50:30 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-fE5wCPwBWq0/T6jI5KFjNNI/AAAAAAAAGWo/YtK6ZUNHa8w/s72-c/suhaila-anak-luar-nikah.jpg
404 Not Found 1.7 kB URL HTTP/2 3.bp.blogspot.com/-fE5wCPwBWq0/T6jI5KFjNNI/AAAAAAAAGWo/YtK6ZUNHa8w/s72-c/suhaila-anak-luar-nikah.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-fE5wCPwBWq0/T6jI5KFjNNI/AAAAAAAAGWo/YtK6ZUNHa8w/s72-c/suhaila-anak-luar-nikah.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 03:50:30 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166416423013591&xtt=7342064
200 OK 1.3 kB URL HTTP/1.1 ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166416423013591&xtt=7342064
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1335), with no line terminators
Hash 5435beb692fa464cc9ff4a8b488f28e9
508c259c7921051f9723c97a29fe55c21534b471
c6b79902aa0e2f8631c33881cd956eeda1da90ce45aa7f86f434401f03ea37ae
GET /bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166416423013591&xtt=7342064 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Sep 2022 03:50:30 GMT
Last-Modified: Mon, 26 Sep 2022 03:50:30 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
Set-Cookie: used_ad2633389=1; expires=Mon, 26-Sep-2022 04:00:00 GMT; Max-Age=570; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Mon, 26-Sep-2022 04:00:00 GMT; Max-Age=570; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=300x250_881516516_0; expires=Wed, 26-Oct-2022 03:50:30 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
404 Not Found 1.7 kB URL HTTP/2 4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 03:50:30 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
yllix.com/images/aff/pub_7nc2s6.jpg
200 OK 74 kB URL HTTP/2 yllix.com/images/aff/pub_7nc2s6.jpg
IP
ASN #201702 skHosting.eu s.r.o.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=250, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x250, components 3\012- data
Hash 7a19e68cca2f5d28d919bb6db6faa8f0
877535b8821515cf43269fc2dfdcde54b5ec339f
d0af19a5198d12ead1c743bd66b969baef0a4682b8a7eb4fa05df216888da209
GET /images/aff/pub_7nc2s6.jpg HTTP/1.1
Host: yllix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 03:50:30 GMT
content-type: image/jpeg
content-length: 74258
last-modified: Sun, 17 Apr 2016 08:55:25 GMT
etag: "57134f7d-12212"
expires: Wed, 26 Oct 2022 03:50:30 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&title=Rancangan%20Lamaran%20Oleh%20Seorang%20Lelaki%20Kepada%20Teman%20Wanita%20Yang%20%23FAIL%20(4%20Gambar)%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
200 OK 3.5 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&title=Rancangan%20Lamaran%20Oleh%20Seorang%20Lelaki%20Kepada%20Teman%20Wanita%20Yang%20%23FAIL%20(4%20Gambar)%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2915)
Hash ed4a671e5acef8dfaf206b4d7acfdc97
9a94103357440709c61bd12e2ec2aeac64156e51
491d4a7af1872d363f0f5a0c2d5071eb6f46f87c6badc4dc8d01611d13d08804
GET /geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&title=Rancangan%20Lamaran%20Oleh%20Seorang%20Lelaki%20Kepada%20Teman%20Wanita%20Yang%20%23FAIL%20(4%20Gambar)%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:30 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Sun, 25-Dec-2022 03:50:29 GMT; Max-Age=7776000; path=/; domain=widgeo.net
country_name=Norway; expires=Sun, 25-Dec-2022 03:50:29 GMT; Max-Age=7776000; path=/; domain=widgeo.net
idcompteurcc_1410487131622=done; expires=Tue, 27-Sep-2022 03:50:29 GMT; Max-Age=86400; path=/
get_data_1410487131622=ok; expires=Mon, 26-Sep-2022 03:53:29 GMT; Max-Age=180; path=/; domain=widgeo.net
bonus_1410487131622=577; expires=Tue, 27-Sep-2022 03:50:29 GMT; Max-Age=86400; path=/
bonus_j_1410487131622=1; expires=Mon, 26-Sep-2022 03:53:29 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Mon, 26 Sep 2022 03:53:29 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ACenqaAWb44DRGypXqo00Vhlg4ohL3GR9gU%2BdgtrVT9GsMlzosoS6mF5IQG2FKGKRCHF6u5hgQWRqtygZeo4OWDcWzt7DdcZAmXKifzm3ozdeeUqyAFDOTxfjETBOcsd"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7509092a9823b50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
1.bp.blogspot.com/-tM6hB0bFAmw/UrQoWWhgUHI/AAAAAAABnHI/SLcYIepW2PE/s640/a_disney_world_proposal_fail_640_03.jpg
200 OK 64 kB URL HTTP/1.1 1.bp.blogspot.com/-tM6hB0bFAmw/UrQoWWhgUHI/AAAAAAABnHI/SLcYIepW2PE/s640/a_disney_world_proposal_fail_640_03.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x360, components 3\012- data
Hash 0624113df569fdca924f55985595d2e8
02de0d41f952c2c4ab514119c5aae7763770c88d
380fcf80671824cd0027d4bdf37dafe7ad6733dd39bf76f6013ce167d5ad600e
GET /-tM6hB0bFAmw/UrQoWWhgUHI/AAAAAAABnHI/SLcYIepW2PE/s640/a_disney_world_proposal_fail_640_03.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19c75"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="a_disney_world_proposal_fail_640_03.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 64124
X-XSS-Protection: 0
1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
200 OK 2.2 kB URL HTTP/2 1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash f1a6797f91242287a33a4fbd390461c0
1faa0cba38f656d320b66ffd54167243c3a11b2a
f7e3c056e77fe5a256f5fb37d6084d43b660632f34dc0a77cefa9224ffd15e64
GET /-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v54f9"
expires: Tue, 27 Sep 2022 03:50:31 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mains.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 03:50:31 GMT
server: fife
content-length: 2150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
200 OK 4.7 kB URL HTTP/2 1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 914cb50b25dc47e3ed42f95d23441c63
ef24e0d012ecf092bac18441337a9e6c991c0c82
9e959670380178206298ea5a13c8c80d9393ba7cf3a65146b665e92380ba8777
GET /-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2426"
expires: Tue, 27 Sep 2022 03:50:31 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="jatuh-kapalterbang.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Mon, 26 Sep 2022 03:50:31 GMT
server: fife
content-length: 4695
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bc7883d0a03d9c3559288a600fecc70a
b0e538996510ec8c861264cba4bf79fa73f6f7d6
c3bdc9bb12c7c951ca2d861c95156de2c724acc82386e882864c464132e07ac3
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/tcm.js
200 OK 5.3 kB IP
File type HTML document, ASCII text
Hash 7fcd3b9d88cc29ea6fb51ed9b3d04d49
9bbd4268c92bc4ea44c3e1c88589a7a6b99ef00a
160e950f0aab3da4a818f13c78baa01aee2a8b0da054fd734bd2811a3a9d96f0
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Mon, 03 Oct 2022 03:50:29 GMT
last-modified: Fri, 01 Jul 2022 12:09:33 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dzGi7QXrdtn74Lkl1Zs8H1HoZosYw%2BZYfKR%2Fb3saYp7pz1pLtFkgjV2P5ifmgSqtso6c6iXpyfwquA8aNXhvy6ynqlPQzDAU%2F9eWd85BB7m2SSEXi0%2FDr029Yk%2FWsyD%2B"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092ab838b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/css/tipTip.css
200 OK 593 B URL HTTP/1.1 www.widgeo.net/geocompteur/css/tipTip.css
IP
File type ASCII text, with very long lines (2057), with no line terminators
Hash a747347fbc4841ea98b69cc6b9e82340
9ff90c2abcbd22df2a8f618400421dc0c87ee3f2
181311b58305877b33a71d8f6b968783df4a5be2fbc51e6e2439c6272050626d
GET /geocompteur/css/tipTip.css HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&title=Rancangan%20Lamaran%20Oleh%20Seorang%20Lelaki%20Kepada%20Teman%20Wanita%20Yang%20%23FAIL%20(4%20Gambar)%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=2441
cache-control: public, max-age=604800
expires: Tue, 27 Sep 2022 23:07:13 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 448998
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0AWQ9cVrP%2Fxe0cwaeDk2q0cX%2FtcpFqIen2OPFJydyXhVW2UM97nUyqfDP6M4tOixBtEm1sXgkKERCok0%2BtfvPYziCkLQ40vXBz9fYJui4HhCWDRyRqkIg%2Faf3CgZl47v"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7509092c29aeb50b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 80585e7d4f1510898eeba1ae4175a6fc
a5a6a723aecc70bc2f23ff11d05b10838c3f557b
c0d82c824a37384777d1493508b45b05f5286b3a8366377b43db8f0f84fc0eb8
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Mon, 26 Sep 2022 03:50:31 GMT
date: Mon, 26 Sep 2022 03:50:31 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Mon, 26 Sep 2022 03:50:31 GMT
last-modified: Mon, 26 Sep 2022 03:50:31 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b2eb20feb0cf76247b06b09fa0d9643e
39cfc489626188762fc83269d25fac275849b2b2
8258ce2affbce3c1555082bca3ff2514f2d13350b38bb3d2a67cf4147c9310e3
GET /-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12197
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Tue, 08 Mar 2022 09:33:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23ef"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4474bfba80fa3257384d1c908e1353bf
9a2869a3888743d575e6f87d2a7479d5d97fa123
63378e949c0ea9564e7660ea0522ce7a59727a0a5232b81b77f8525899f67a2b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
200 OK 32 kB URL HTTP/1.1 1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
IP
File type GIF image data, version 89a, 47 x 36\012- data
Hash de8786141e6d1977bf7e2e6de7f1576b
eca2cf38a29141c00223120e03ddb0266d0eae5c
a66d397b2074119260adcf349ba9aa2d1de08ed098a6cb77c49f40e45795f9f6
GET /-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="06.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 31605
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Mon, 06 Dec 2021 15:33:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f1"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
200 OK 7.7 kB URL HTTP/1.1 3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9cc44dc0d9d256729214bad1f2f203e
58090dfe6c40f94742026e6c995d1efa1528cea9
f738a2d77df5130907ab4d6ace1233bee0766be9bfbdcffef3c4c1a789843ede
GET /-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="02.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7678
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f5"
Content-Type: image/gif
Age: 0
4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
200 OK 7.1 kB URL HTTP/1.1 4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b24f42a157fe0fd0c0670b82cdf4ed80
23cd6f155ff3ccd1b972446cd9769b95d7760fb3
97d910d193ef3ba80d2ec9e3fcc8c3e7669420389bbfa263d484d3626ed2cfa5
GET /-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="01.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7139
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f3"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e0efb02c657f5cd002fe98568c94a93b
e79c6d48316d628653fa0f2234c85fa4fc77c261
25ad56a82cd57d11572d9e28d8b1ce5e02d1422d4a523d9d336adcad45e2cd0f
GET /-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03a.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10557
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Fri, 11 Mar 2022 11:40:49 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f8"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
200 OK 2.0 kB URL HTTP/1.1 2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
IP
File type GIF image data, version 89a, 36 x 35\012- data
Hash 1b9200f411ac88d26abae6047bfb4839
0f583fbd1433ec2ce11d73a3a5d8d6fe6ec4afe7
93b826c061859ace5120ecf13154150954d1728e81964eb780fab9dbf7aedc0a
GET /-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="04.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1988
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 17 Nov 2021 18:18:55 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f9"
Content-Type: image/gif
Age: 0
inklinkor.com/tag.min.js
200 OK 36 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash fcac42f6efa869ce55488b6410cccee9
1a859ad2dda1a261a3770713671ca44e322e3eba
b804bdea44d2ce3bec657a4f63f0d70410cc8b41c81454571c8e975ff082fc6f
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:30 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: cebba0adcee8f07a74010af706d9d7e8
cache-control: max-age=86400
last-modified: Fri, 23 Sep 2022 16:03:17 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Tue, 27 Sep 2022 03:45:59 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 271
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DXX%2BuokeHEUz2fRZW%2FdayVqX%2F2i3Aajj5NW9npdqcpmF5iDhuHrLI9rktgHjdWeb1v1Er%2BULw2zGe1xs5Qq964GYAADs8P5HYV76brn%2FXUquY4vmhKSqsqpp4UYvKXV2"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509092ab9e90b39-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
4.bp.blogspot.com/-ijKhGLJFlas/UrQoXPa569I/AAAAAAABnHc/S4lXha67EZE/s640/a_disney_world_proposal_fail_640_04.jpg
200 OK 70 kB URL HTTP/1.1 4.bp.blogspot.com/-ijKhGLJFlas/UrQoXPa569I/AAAAAAABnHc/S4lXha67EZE/s640/a_disney_world_proposal_fail_640_04.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x360, components 3\012- data
Hash 85aabba2fb33ddc53f71d5a9a2bc1cdb
14310730ca36642eb5b31a7769545251243ce2d8
fda1494b8d0414abccc5df1d4a8af811face923317b5686b7222fe4f3f9f5fb4
GET /-ijKhGLJFlas/UrQoXPa569I/AAAAAAABnHc/S4lXha67EZE/s640/a_disney_world_proposal_fail_640_04.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19c78"
Expires: Tue, 27 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="a_disney_world_proposal_fail_640_04.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:31 GMT
Server: fife
Content-Length: 70134
X-XSS-Protection: 0
1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
200 OK 13 kB URL HTTP/1.1 1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash aafd50d72e0f92a19f2e043a59d58f3c
8b565b7610a01b1bf5c1bd58fb94070c4fd1a085
d3b1a956d913c0017a5fa30b739d63dc7966fdc00c177626537a2a0b160f5fb7
GET /--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="09.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12733
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Sun, 17 Jul 2022 04:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2401"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 27c2fbd98af4e80cfd9a0ea066053744
839c502889b0a4d6e928ed211e9d201b596c26c4
020f931d362228610e97493a931d9b5771fe9d732c4171756ecceda2814427af
GET /-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="8.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12211
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 17 Nov 2021 07:42:37 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23ff"
Content-Type: image/gif
Age: 0
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Mon, 26 Sep 2022 03:50:31 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+549; expires=Wed, 25-Sep-2024 03:50:31 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 26 Sep 2022 03:50:31 GMT
cache-control: private
X-Firefox-Spdy: h2
3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 61493dfb3c256f6247991635d959aa36
a78ff4b39f9540181d37b97fab7e412948f9feb0
f9c93ab91a81b6f010462e2d77c67e4eae52b80bab26d7046dd999914886c8df
GET /-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="7.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11789
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23fc"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2754d2f6cd3621d09343cff0f3b3a6ef
0466a0996870b85bcb4de07a6028efdded023092
8bbd1eff8b018e50fa1189dc220a56bb0e7906ccc861bd59b0a57a6fecf8d0a1
GET /-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="11.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11140
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Sun, 08 May 2022 18:57:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2407"
Content-Type: image/gif
Age: 0
4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
200 OK 9.5 kB URL HTTP/1.1 4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash a3c63680b985a24cbc8470ce9915903c
b3099a767e94ce488e94eff9fff8672b7b29c822
fc15f81adba6e04d314c5ec08ef968eeea29aeb6286af4108db1bfcf928ed73b
GET /-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="14.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9530
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v240e"
Content-Type: image/gif
Age: 0
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 9.3 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash c8d329cae189caa8b9aae760dbc13a04
3735402fbc784e46606443019dda09518cf5f499
9941b04ca889fdad794b6338f2872a1fdc53b761e5db8b12a1253efb2f2305e1
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Mon, 26 Sep 2022 03:50:31 GMT
date: Mon, 26 Sep 2022 03:50:31 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash abf8a5999f654d65c90a962779ebe9ff
e81b0d3b64b7bd830ec204d8c54c52e983d5fe15
5d72dd878b3b6e37f8c0d66ac059d78850f04613fa9b3bf3a7ee21b6042ba028
GET /-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="15.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3705
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Mon, 06 Dec 2021 15:33:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v240f"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
200 OK 9.2 kB URL HTTP/1.1 2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 7f8668e6d3ad490f26348cc7282a4f90
2e166126a1217dcc5ce4cdf31716da22e6bd59d1
fa148f161258d3dc721eee88a5cc174559c6f1430176d647d2e9e2dc8b0a7209
GET /-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="13.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9176
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Fri, 23 Sep 2022 01:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v240b"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
200 OK 2.3 kB URL HTTP/1.1 1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 10bb241722f4180ff2149995133249c7
ecdba88ef548a01c63e04f1d6385f933904fcffe
1d7297ae79305a59aa464c72240610364da0e4424c57e5e4539644948e48e978
GET /-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="18.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2259
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Mon, 26 Sep 2022 20:27:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2415"
Content-Type: image/gif
Age: 0
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1560
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Mon, 26 Sep 2022 03:50:31 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+900; expires=Wed, 25-Sep-2024 03:50:31 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Mon, 26 Sep 2022 03:50:31 GMT
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 348b8e9ff9789e9d04b35565f1f4a16e
a389fe1e390d2177191f58967c5291e9fcf8fea9
42393bbebc5bda5422c410adb413ddebf976d70fea8ca3ae50bd8dfddee645df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "42393BBEBC5BDA5422C410ADB413DDEBF976D70FEA8CA3AE50BD8DFDDEE645DF"
Last-Modified: Sun, 25 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7381
Expires: Mon, 26 Sep 2022 05:53:32 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 758a0518d4e16817962190748c2ed65b
7834a60870315b25a26610eadbf1cb76cb57425a
9f334e753336e3ddef1c187a36cefbd28723e13c9fe982d587be75c4bf25a399
GET /-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="26.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11518
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Tue, 22 Mar 2022 19:57:38 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2420"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
200 OK 30 kB URL HTTP/1.1 1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2922070489895cdda39211911bb2e19b
9086810a13c3a1975637ce6432f833e536ba75ca
d35863d1bd2faa137b042ae5e673490891cd5170350085844981671895392e28
GET /-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="19.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30419
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 30 Mar 2022 13:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2417"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 0c7de4432447b874c2b6337fe6f675fe
845af5f406010c1462e1da4ec9c50ac84bb5679b
4b401f70a2d0a9e48f2826eb0c81554a868fbe202adee608d193b68d5f5763cc
GET /-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="16.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11938
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2411"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
200 OK 7.9 kB URL HTTP/1.1 2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6229e0dc57d33c3b51d1b067ca69c625
2e445e3ab75ca465569838aa2d17c7609c8c45b9
0ac371efd8c7403e232169bd9b08de8676116b3768996abdc899bd91340beb8d
GET /-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="17.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7860
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 11 May 2022 19:21:33 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2413"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
IP
File type GIF image data, version 89a, 34 x 35\012- data
Hash 83e1107d6c3aab9177481cfae5a85766
62052a6816003bcb433f9d9156124873f304abc2
2f3a10a4dac6b35eb5e7c71c8e08b15af49d486a6bc94d09e2679f0f5e61cca8
GET /-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="22.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11966
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241a"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 178ae7bc8ba7f2c93fce38923aa0a0e0
1a53ce687d64a38c5ec245dc32f25535d39df767
b78339e9b4454feb9a8a903a72b1526a0da4626d1d237e36287c27c8a8b9c3f6
GET /-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="27.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14382
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 20 Jul 2022 09:05:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2425"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b16f3ef0d022879f521011b331f1f751
e3272da7a66d6ed1d275fcec3b154c8c0c34fdec
363e15dc2577e03ef8183224677d69d26ecaa07691d66b1c45fc0d4b7fe6b647
GET /-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="21.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4771
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Wed, 17 Nov 2021 07:16:21 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2418"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ee6d6b52c53c776577813dd3b5e67346
a938b694e2aed81a1177a76a32b66b518e9fea78
585ea39592df809c30b51e7d367aeafa0413b2476beac6e9912484aacb0e326f
GET /-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="23.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12154
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241b"
Content-Type: image/gif
Age: 0
ylx-1.com/show.php?u15451664164230=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=e44d193374525cb69beac5952ed3964a&cc=NO&useAf=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
200 OK 1.7 kB URL HTTP/1.1 ylx-1.com/show.php?u15451664164230=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=e44d193374525cb69beac5952ed3964a&cc=NO&useAf=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (594), with CRLF line terminators
Hash c796248de2e5ad3aec346b98eb902771
f86a5f1e8e4d45729348672f40f2c8505c85e4f5
bea7c377371c61f5d9cdb2d07479cb106a47a09af9bd12aee49a55134a1c160e
GET /show.php?u15451664164230=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=e44d193374525cb69beac5952ed3964a&cc=NO&useAf=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw== HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166416423013591&xtt=7342064
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Mon, 26 Sep 2022 03:50:31 GMT
Last-Modified: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
200 OK 2.5 kB URL HTTP/1.1 2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
IP
File type GIF image data, version 89a, 24 x 24\012- data
Hash faa74e8c61fc64d5edb11613c7eead2c
e043879d3ee94a3edf10260f21f44bfa4a6fc66e
483c4a0396691993a641ec409c44b8b7e1daab0ae7e2b2944c4bc59520bb7655
GET /-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="progress_ani.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2545
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Sat, 24 Sep 2022 12:31:26 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23eb"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
200 OK 2.1 kB URL HTTP/1.1 3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash bfb5c4ad3077b6067c24d727e85e4d55
683a3c57084227c6f3a94d1feda97a63eb8c902d
be82914e30dc50b25809b031abc0ebcb7c69fecf69b2c0848f81d8aedae88812
GET /-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="25.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2127
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2436"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
200 OK 9.7 kB URL HTTP/1.1 1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9451c0f97aade01a0ee5fe500f91819
bccaad828c715be199eac75210ee248a9fed69cb
cc49b2fd8a07e1765061ae5893ec7700de8cc2dd53b9506b55c079f98fb5ccb9
GET /-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="28.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9651
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Tue, 29 Mar 2022 00:14:30 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2424"
Content-Type: image/gif
Age: 0
4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
200 OK 6.0 kB URL HTTP/1.1 4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6f597a032fa3941248175f066ea7d85c
8d11b4fafa5dd5fa501507fec2541d6c41eb0980
8904c280153182d0ca0258b0163364994c8d644c06ccd3527819adc860d71fb4
GET /-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="29.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5978
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 22 Sep 2022 15:33:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2427"
Content-Type: image/gif
Age: 0
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP
File type ASCII text, with very long lines (826)
Size 158 kB (158248 bytes)
Hash db1b5789e9915e9c82f5df92e5982980
2e193e502995501c85f45fd89d9f83707a7f9573
db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:25:55 GMT
expires: Mon, 25 Sep 2023 22:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 19476
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
200 OK 6.2 kB URL HTTP/1.1 1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash d32de0777c3455570b8316da2e55c151
3d8f8c8ea71003845021291517263f2cf597e75d
60be4a95d4774dcb77aba69aa1bca4e98d5596aed56d584d49cf0f5c405f07e9
GET /-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="30.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6200
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Mon, 20 Jun 2022 06:51:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2429"
Content-Type: image/gif
Age: 0
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 14 Oct 2022 22:20:50 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 970180
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=CfY%2BNOvK2MxYA2TNuA7qdx3aV4m8Yh4G2kupFxnNiThdHTQbgf4Klfnh63F6VTsTWltHcGkuLtLK52jmPA9Y1ouoKy1TxVrKz4PyZEJZum66ACn4P1cBYLM8J3Y%2F2%2Fvy"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092e0ab9b50b-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_finland.png
200 OK 724 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_finland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bb42c0a72d24163a22f5b03c19014ca
333c2b0e19045c6162ea18f96cde896e9568c965
57f34fcc77132fcdfc669956854f38ebc6089241f1d5f52d7218d06365c9e750
GET /geocompteur/shadow/flag_finland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: image/webp
content-length: 724
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=899
content-disposition: inline; filename="flag_finland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 09 Oct 2022 16:35:01 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1422930
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NOprV54ENrF8NXBmhbNmO3G7H1fdXt0VfLZubSMmThAHn88N2E0iIkhagmBmdKagy0QVE3IVz1u8zyDLdZF4R0HopUtpsoB02i6EGskt9zUNI%2Fhfd6eKLdnhbz%2Fi7xcY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092e0abab50b-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_norway.png
200 OK 880 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_norway.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e186cd78997ba86002ffe37b1bf7ea64
ec8365cf9b6db82cac866c92865cd8d6d4146ae5
de0cb6c3eada763844403b680fa08dcc451a48df4a234a7f607558987ee3371c
GET /geocompteur/shadow/flag_norway.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: image/webp
content-length: 880
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1041
content-disposition: inline; filename="flag_norway.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 05 Oct 2022 05:36:42 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1808028
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0xa9Mnx%2FGh69fZ9jqCJJm%2BNyqSVNxJ%2FmJIMwjZGAu86fKdvoHNL82Xotye9RoPC7AvPotwFXd6NORjksaP4M83nR9EztxEL4IqPlZxPZt3UKs4QFVdCjjOe%2FaWr3eTOi"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092e0ab8b50b-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 01:57:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 265998
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8KlZp5XqqV1jci2tUYCnaj9helEH9HZtY%2BeTrW%2F7SfxJH0hKUH9WUcs872UMtvaZye6Y6zDifaxiy%2FxJws0yHSJVWX4ENOFvxE%2FFY8uWjNWRFqXo4Fz8UPZgC51w0ill"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092e0abbb50b-OSL
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=trackwidget
200 OK 46 kB URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=trackwidget
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash b1ad9d0bfc678ad534c2d0da294ff3c9
1ea54034e5e09570fbddc4104eb5184c25509dd1
0605cea78ebc4f43e260e1a8ed185c3dcb8ab15d25171e3619999585f8de3cc4
GET /hitparade.php?pagexiti=trackwidget HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Mon, 26 Sep 2022 03:53:29 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3izgOhxVoT%2FAEWnCFKRfjeuPCrImr7djcANjhEKSvIWgmygs723uD9u%2FzR7IepDP1q8lzuqlZMPt6bLziQss%2FWiZ70sptiBD%2FWiNMfqBSEqu9rtR76cuj1yNg%2Fv6lIpm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092aa82eb50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
200 OK 7.0 kB URL HTTP/1.1 4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 86a790169f7ee3eab648f73a3577d1db
484f5ef646ca88f04e42eec22b14dd4c4182f5ba
610f74fc26a960624833800cd25fe47635e75b9287dd89c78f3b137d683ef33d
GET /-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="31.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6957
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 03:50:31 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v242b"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
200 OK 11 kB URL HTTP/2 lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ab3f2cda071a82b6dbc067404699fb84
f1aa69bdc7f29e7737413a82be8b97d93b15a6eb
4d3958cb51bc42b95a3257d96b16acca6e53dbcf32847704b1b441f9a7651c93
GET /-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="20.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11225
x-xss-protection: 0
date: Mon, 26 Sep 2022 02:42:21 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 4090
etag: "v10b8"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
200 OK 7.5 kB URL HTTP/2 lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 19c1058bce48182f99d8defd40d7cc37
d3a356987b4b26ce3f7b1e6ffe948b83280470e7
d47ce018c59039146898b2bec0ca49d2b6e6c5aac3d9b54549490b7b0a7702f2
GET /-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="32.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7480
x-xss-protection: 0
date: Mon, 26 Sep 2022 02:42:21 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 4090
etag: "v10da"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-tqBg-FQ6ulU/UrhOc9cJUUI/AAAAAAAAi-M/9t6NJ-Ebj8Q/s1600/a_disney_world_proposal_fail_640_01.jpg
200 OK 10 kB URL HTTP/1.1 2.bp.blogspot.com/-tqBg-FQ6ulU/UrhOc9cJUUI/AAAAAAAAi-M/9t6NJ-Ebj8Q/s1600/a_disney_world_proposal_fail_640_01.jpg
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2f6fd5905d46763e4250381d18a413eb
f35c7f8ddc23a44a543beacd1a42c9dd961f0529
fa5a337841922b3a6e6f9f25decd416ef368f002e34ac6b01ea7ee3e839b0df6
GET /-tqBg-FQ6ulU/UrhOc9cJUUI/AAAAAAAAi-M/9t6NJ-Ebj8Q/s1600/a_disney_world_proposal_fail_640_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8be4"
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="a_disney_world_proposal_fail_640_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:30 GMT
Server: fife
Content-Length: 48871
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
200 OK 6.9 kB URL HTTP/2 lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash c3f6f37a1facf33abac47f1c5d5cedb2
34c323bc28abe8bb44598b94f56325827bbda75e
0ddd89667f12408f11369f673d035c1e9c329dbea848bffe05cca4d8a3b7bb5d
GET /-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="10.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6893
x-xss-protection: 0
date: Mon, 26 Sep 2022 02:42:21 GMT
expires: Sun, 08 May 2022 07:10:40 GMT
cache-control: public, max-age=86400, no-transform
age: 4090
etag: "v10fa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash ffb1ee0c677f670f393bc590d5c6bd11
494d666d08ace557a8b22aff6045d24bd68c1844
8d9e49545b65e314e949a0d012c664fbe8d2dae912906d1506c2e1243f154258
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
macamlawak.blogspot.com/feeds/posts/summary/-/serius?max-results=5&orderby=published&alt=json-in-script&callback=jQuery183030805022814291727_1664164228784&_=1664164229571
200 OK 2.9 kB URL HTTP/1.1 macamlawak.blogspot.com/feeds/posts/summary/-/serius?max-results=5&orderby=published&alt=json-in-script&callback=jQuery183030805022814291727_1664164228784&_=1664164229571
IP
File type Unicode text, UTF-8 text, with very long lines (12706)
Hash 845729192a23f33361510f5f9d494aec
454f839164c9aa0a74a494b2b9c594e59144269d
dbe0b35e7bf38f9b5fe104a8fea284fd1d6c4cb339708ff74e3a74daf9565845
GET /feeds/posts/summary/-/serius?max-results=5&orderby=published&alt=json-in-script&callback=jQuery183030805022814291727_1664164228784&_=1664164229571 HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"89b57fb5afe6a8031f47a503a444db00867ed775fb819a49fef7323f048e6511"
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Mon, 26 Sep 2022 03:50:32 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
Content-Encoding: gzip
Content-Length: 2877
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
File type ASCII text, with very long lines (17807)
Hash 25029deb7fb2af9e7a30b134664785b1
c314e3f7d926ccfcf9bc33d72ac2748f581bed82
6de7c25db215da171307366cd99213f3a733d5ed76e53814609e3cdd44528a28
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Mon, 26 Sep 2022 03:50:31 GMT
expires: Mon, 26 Sep 2022 03:50:31 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74559
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 1db3e1d6bf7a5e2d0c87eab75a6e52fe
b923a169beb9248ea6a5070a04b57bc0aa44799b
f35aafc9c21937ac03d9b711aa18ef518aaaec6d0f9dbcecb42f757a0e70915c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
200 OK 1.3 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 961dcad940bcae720f8f0ead6409f9d2
7199f8b763df9aec9c55bad14795e2166e6b1501
a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
ETag: W/"58409a4a-631"
Expires: Wed, 26 Oct 2022 03:50:31 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x50x29&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
302 Found 147 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x50x29&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
IP
File type HTML document, ASCII text
Hash 8f23565191f193e4e4e6ea98ad4bf844
2b2909298a398addc23e14ab874321320ee4370b
291d80802df6476d068093c6eef9834b9a0f5001d5e27ede64f83b2d769f7c17
GET /hit.xiti?s=281802&p=trackwidget&hl=3x50x29&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 147
date: Mon, 26 Sep 2022 03:50:31 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=trackwidget&hl=3x50x29&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=E6B5B311-4ED1-445E-9151-0F49F371F846; Path=/; Domain=xiti.com; Expires=Thu, 26 Oct 2023 03:50:31 GMT; HttpOnly
atidx=E6B5B311-4ED1-445E-9151-0F49F371F846; Path=/; Domain=xiti.com; Expires=Thu, 26 Oct 2023 03:50:31 GMT; HttpOnly; Secure
atid=E6B5B311-4ED1-445E-9151-0F49F371F846; Path=/; Domain=xiti.com; Expires=Thu, 26 Oct 2023 03:50:31 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 1ca0323262515c9240c58fe69a9ac826.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: l5D7h1y__tRSznzlwT78V6xjZBOnghQR2ejzNC4HPMgYfCAcgnzyRw==
X-Firefox-Spdy: h2
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
200 OK 794 B URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (626)
Hash 6ed0414b21661b82318c5d408e2fbe35
386d69f3aaa09b332a6ef05ebcb0b061df10d89a
e7ef9e48b343cd79757bdbaf16474eb8142a28868ce898afaeb5b6c7ad053dde
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip
ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
200 OK 26 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash f46784dcc71c42f9406d242fede794f4
79269678d6fb002908aae6c5616ddd2f94f9691a
0df87463e7f01f1abbb4144ed58c36de50d1fdb3bc56046e0976ab642ed2f1bc
GET /aff/pub_s9c2nm.png?1480419364 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:04 GMT
ETag: W/"583d6824-68a8"
Expires: Wed, 26 Oct 2022 03:50:31 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
macamlawak.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 macamlawak.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Mon, 26 Sep 2022 03:50:31 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Cache-Control: private, max-age=86400
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d1d31e1cf5b28eaddd72e6ecf7d9fa4b
ec015bd7339acb725004e27d697af37539b8b6a2
381f9c0b042f6632f9adf1571d9ad33ab6807e3f17c910abf9d244b8f8aa1d25
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "381F9C0B042F6632F9ADF1571D9AD33AB6807E3F17C910ABF9D244B8F8AA1D25"
Last-Modified: Sun, 25 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2334
Expires: Mon, 26 Sep 2022 04:29:25 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12397
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12397
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12397
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12397
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12397
Expires: Mon, 26 Sep 2022 07:17:08 GMT
Date: Mon, 26 Sep 2022 03:50:31 GMT
Connection: keep-alive
ylx-1.com/trk/?e44d193374525cb69beac5952ed3964a
200 OK 43 B URL HTTP/2 ylx-1.com/trk/?e44d193374525cb69beac5952ed3964a
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?e44d193374525cb69beac5952ed3964a HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: image/gif
content-length: 43
last-modified: Mon, 26 Sep 2022 03:50:31 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 2fe8c4f0c70fb6c1f4259eabedc7015e
85e378d0fff856832a8dd01743516b9476fed8c6
508a1c7d350fcf82d1ece0b99f8557b2f300c7c1148f28c3ae9fece20530e4b6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Febd85aa2-fe15-49c2-aa3e-38b97cb99849.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5157
x-amzn-requestid: b5748f49-693f-4bc3-a850-cb68e770de24
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUG9GUHIAMF7pw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd5f-5d2aaa212cf1be2506593746;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:27 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4h9lb_7egxb2hBbxjcS_cpZ5lDq6Lx-c_WUZyRHdUA0YTwr6kgDuiQ==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:10:16 GMT
age: 20415
etag: "85e378d0fff856832a8dd01743516b9476fed8c6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=446534583757&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
200 OK 4.3 kB URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=446534583757&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (25611), with no line terminators
Hash 4019020041e614e0ec7049ff95065993
40bdcb1b0d64ed345f055aa84e89b393933c33a8
02d69ba7761870b92829e56a0423eba1ce661c4adcafbff10789d5ea860133db
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_50236&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1OQ==&adApiR=loaded_string_1464235b0bce9d250429df012c0426f88d0bd_2633389_1664164230.8993_43841&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=446534583757&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:31 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: total_impressions=1; expires=Mon, 26-Sep-2022 03:59:59 GMT; Max-Age=568; secure; SameSite=None
used_ad2633389=1; expires=Mon, 26-Sep-2022 03:59:59 GMT; Max-Age=568; path=/; secure; SameSite=None
used_c_51859=1; expires=Tue, 27-Sep-2022 03:50:31 GMT; Max-Age=86400; path=/; secure; SameSite=None
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Access-Control-Allow-Origin: *
Content-Encoding: gzip
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 27d324b1fb661c318aced98468501b3c
5c4ee294c98e8fc9312a7d481b6ec165494cf852
937296b5da48df0495ebd0cb3509b7c00059725c00c5b97f475ba2382a0e5437
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F20fede81-e065-476d-b8c9-466c4d80f419.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7998
x-amzn-requestid: beedf4d8-29c0-43c6-92d0-40af6b9ee9f9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTibE5LoAMFXLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cc75-1be97f2a525b9a5e3146d4be;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:47:33 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: i8BwIohBNqfEavPXBqSWshg7G-WF9UkBBScnDcyH4qEYV9TzreLXWA==
via: 1.1 e5af640ced3aa8764b82c4bc3f7af38e.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:03:29 GMT
age: 20822
etag: "5c4ee294c98e8fc9312a7d481b6ec165494cf852"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a7e9af9-ebe4-49ea-9af4-d118f2ef0b43.jpeg
200 OK 8.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a7e9af9-ebe4-49ea-9af4-d118f2ef0b43.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 431ff1171a3d7c60a31cc1c3f62164ee
4b32113aaf50132b38c8034017a6eb5a32d7040b
65d598db252fb3979d3df3cb8d052861bb31d6187552f9c694ec27a322b308c9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F3a7e9af9-ebe4-49ea-9af4-d118f2ef0b43.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8851
x-amzn-requestid: dbe6ba4c-3d38-48e8-9d08-088d8e26e7a4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCUDAE23oAMF_yg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cd46-4f3b85952fa3109d2921d0e1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:51:02 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: wbbfzE5nQkhK_nsXX8XGJbOl3Yf6NDA1r_AC-0dOzqJDkLQ2BLxK9A==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 09331f0822fc98eebaf04130a83dbd44.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 23:15:06 GMT
age: 16525
etag: "4b32113aaf50132b38c8034017a6eb5a32d7040b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
200 OK 7.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6d79a3a5bd7dc7aa6cab306176fafd11
0d5cb1f3e3ea510308034a5e569c0e65fae30835
57979dfcf6fdc76f04e4790c2b94b876e188ac780aa49d9bfc8a58c498dc4203
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2f39b5b4-f60c-42d8-9916-f71d7998f158.png HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7185
x-amzn-requestid: e7b997d7-f9ce-40c6-b9bb-372ee10d8ad0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCTAfEX5oAMFcHA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330cb9c-31e295e33ead940f381121a1;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:43:56 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: YW8Pk1qXdq3DBNRDO3abND1HGTqhUInN2Wo3N8Uzb0zzyXrsKPCvYg==
via: 1.1 4d7fa73f804f1c93f20cfc24c4b1266e.cloudfront.net (CloudFront), 1.1 1508efc4152aa1778ed4adecb328b374.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:48:52 GMT
age: 21699
etag: "0d5cb1f3e3ea510308034a5e569c0e65fae30835"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a90590f26bae9ad9e95ffdfbfb7dd21d
cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3
33fe3394213e01d11c3e005cb5a678ba74511704d4132fc2bd9f7ad4e1b7dbfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdc9985e6-5fe2-4d64-8060-3ea9e7ea528d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10318
x-amzn-requestid: 6a205445-8a9e-4f25-b144-ba6e6934d383
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZCSlhFNAIAMFmBA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6330caef-61ecbf9154cd56131b940ac0;Sampled=0
x-amzn-remapped-date: Sun, 25 Sep 2022 21:41:04 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qP5-TglQAoTGc78-rIK27mKRTS_WthN0OpiiMqSF-y2rmWxVOyfNVw==
via: 1.1 d83ae0e1ba84e92e58bc1efc23a0c652.cloudfront.net (CloudFront), 1.1 5fe5f2a3903f1378941d92eceaf3fa16.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 22:02:10 GMT
age: 20901
etag: "cde7845f38c4c077f1f1cfda1d1e3b00065d3ac3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3 DIY-Thermocam raw data\012- (Lepton 2.x), scale 3-257, spot sensor temperature 0.000000, unit celsius, color scheme 0, show scale bar, calibration: offset 0.000000, slope 241253891388563521536.000000\012- data
Hash b3a72e81317074689a71dac7059e4b6a
b6d56333d7f1ea7ddc8838d84de498ff913c5464
e665a8821b5e7b2e78787647a08d629bf70cbf4cbfee2057c8601cf0565154a1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F1deb918e-bcb0-4629-aaa7-0ae0322969be.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12826
x-amzn-requestid: f075cf62-acfc-4bc1-be14-7c3dafb7aaed
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YfVRNFP-oAMFgrA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6322cf3a-184b678042d64ac9266b1128;Sampled=0
x-amzn-remapped-date: Thu, 15 Sep 2022 07:07:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: rN_8rm10Pxb0AUKW6ECfNulcYxBaS7FgGD15gT14dX-FlsGJfqahxA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 89791e6b21b9a30cc51cac1bc51cf098.cloudfront.net (CloudFront), 1.1 google
date: Sun, 25 Sep 2022 21:37:35 GMT
age: 22376
etag: "b6d56333d7f1ea7ddc8838d84de498ff913c5464"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
200 OK 1.6 kB URL HTTP/2 www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
IP
File type ASCII text, with very long lines (4420), with no line terminators
Hash a8fac973035526e2864f6a8b857a711d
09226032ec2948f52f73cb423139ddd979aeade3
e8128f98ae1272cefe67b72ddac0a1a80ca519946f443bd7db0a39fa339dc350
GET /geocompteur/js/jquery.tipTip.minified.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5251
cache-control: public, max-age=604800
expires: Tue, 27 Sep 2022 23:07:13 GMT
last-modified: Mon, 22 Mar 2010 15:10:00 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 448997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kVv12A6eY1Dapm3M71IDWeMW9jsWfP50aCjHjitMFK8vERn6KRILQD3YPFfyjFynlHvs%2FUXI02HOg5u5R%2B9B02gY%2BP2CriC%2BY2iIg2tNENQxd0x3o6yxX3Br3ve2tcAf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092dba89b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 471 B IP
Hash af56ebb29d27fb6a049680fe85c8828b
235a3579a72192a6a1fc0366d6d8671e2630b9f5
68454f522f57ca84315459fbf178251544804533512e9bebb8a6e3f3bce12895
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Mon, 26 Sep 2022 03:50:32 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Thu, 22 Sep 2022 18:25:22 GMT
Expires: Thu, 29 Sep 2022 18:25:21 GMT
Etag: "235a3579a72192a6a1fc0366d6d8671e2630b9f5"
Cache-Control: max-age=311088,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb2
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 750909330c4ab509-OSL
my.rtmark.net/gid.js?userId=649d916301844db08924ff50fcdf3f6b
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=649d916301844db08924ff50fcdf3f6b
IP
File type JSON data\012- , ASCII text
Hash 893ca5f0308eafaa0359676318146a09
86daec433a8dbf56a7ffb1df6ed3ecff8da811b1
1f353b41569bf4c075e2875bebf45cb88774565f6e86dae055f860d5ed038d85
GET /gid.js?userId=649d916301844db08924ff50fcdf3f6b HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 03:50:32 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=649d916301844db08924ff50fcdf3f6b; expires=Tue, 26 Sep 2023 03:50:32 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=otowqYddl0Q1PgmXJRK-zJ9-HWqxCXnSHic1uRITKhFuRMKru5jdGTZl1JF7IokraJnDAwxehITa7wgtWZNeSo9tIELlac4BHi7VUGkv-C4pGJxfCeX0y9xAcjn0u5L17kXueU4KFTsj8J0pYLcuoQfV3aEvhCz5q4R3jV5BKADokxHfF2dRieC2vkIqQIeilyUldOj0PwgSohSxu-jQjLZzYuw_az1uZxI6Tg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=e5077c05-fa18-479d-8202-2e3e3f173bf4&userId=649d916301844db08924ff50fcdf3f6b&m=link
200 OK 1.7 kB URL HTTP/1.1 onmarshtompor.com/?rb=otowqYddl0Q1PgmXJRK-zJ9-HWqxCXnSHic1uRITKhFuRMKru5jdGTZl1JF7IokraJnDAwxehITa7wgtWZNeSo9tIELlac4BHi7VUGkv-C4pGJxfCeX0y9xAcjn0u5L17kXueU4KFTsj8J0pYLcuoQfV3aEvhCz5q4R3jV5BKADokxHfF2dRieC2vkIqQIeilyUldOj0PwgSohSxu-jQjLZzYuw_az1uZxI6Tg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=e5077c05-fa18-479d-8202-2e3e3f173bf4&userId=649d916301844db08924ff50fcdf3f6b&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2213), with no line terminators
Hash 7f50fdb5edacd9b1a7eb2449943ba829
4c1488c2d7356be71fbfadf060ba8ecb116122eb
dccda5a656156b85416bbc4a7e82305393e6c09eebfa88afa4d22e30bd3e6572
GET /?rb=otowqYddl0Q1PgmXJRK-zJ9-HWqxCXnSHic1uRITKhFuRMKru5jdGTZl1JF7IokraJnDAwxehITa7wgtWZNeSo9tIELlac4BHi7VUGkv-C4pGJxfCeX0y9xAcjn0u5L17kXueU4KFTsj8J0pYLcuoQfV3aEvhCz5q4R3jV5BKADokxHfF2dRieC2vkIqQIeilyUldOj0PwgSohSxu-jQjLZzYuw_az1uZxI6Tg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Francangan-lamaran-oleh-seorang-lelaki.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=e5077c05-fa18-479d-8202-2e3e3f173bf4&userId=649d916301844db08924ff50fcdf3f6b&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://macamlawak.blogspot.com/
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Mon, 26 Sep 2022 03:50:32 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: baeef3f759189933370ee4860c30e9af
Access-Control-Allow-Origin: http://macamlawak.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=649d916301844db08924ff50fcdf3f6b; expires=Tue, 26 Sep 2023 03:50:32 GMT; path=/
oaidts=1664164232; expires=Tue, 26 Sep 2023 03:50:32 GMT; path=/
syncedCookie=true; expires=Mon, 03 Oct 2022 03:50:32 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
2.bp.blogspot.com/-TGmM9mta03w/Uqbwx9nnQ2I/AAAAAAAAiw4/lVCQTGfuRmM/s70-c/Desktop438_01.jpg
200 OK 5.1 kB URL HTTP/1.1 2.bp.blogspot.com/-TGmM9mta03w/Uqbwx9nnQ2I/AAAAAAAAiw4/lVCQTGfuRmM/s70-c/Desktop438_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash a8595a92e5cb9d6e217f799ac2ea31d7
ab9cd48af8378cf4aa90807c02e71356a1615b1d
02d77301b36b1ccb9e74dbe25db2491ed464a0cfe39836c04c262adc08193cf5
GET /-TGmM9mta03w/Uqbwx9nnQ2I/AAAAAAAAiw4/lVCQTGfuRmM/s70-c/Desktop438_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8b10"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Desktop438_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 5142
X-XSS-Protection: 0
1.bp.blogspot.com/-NN_gNVy6Fz8/Uq276gQQ3JI/AAAAAAAAi04/TPOFpLZSbfw/s70-c/chess_boxing_01.jpg
200 OK 5.0 kB URL HTTP/1.1 1.bp.blogspot.com/-NN_gNVy6Fz8/Uq276gQQ3JI/AAAAAAAAi04/TPOFpLZSbfw/s70-c/chess_boxing_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash 943e841fa4d715df838d31849a04991c
eba1cba6e34de9e6fd4c7bcde7fed42904199839
bcfd2052a37601f46d85f4adf2abb254825059afc6da2a6d773cf6639d156206
GET /-NN_gNVy6Fz8/Uq276gQQ3JI/AAAAAAAAi04/TPOFpLZSbfw/s70-c/chess_boxing_01.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8b4f"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="chess_boxing_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 4981
X-XSS-Protection: 0
3.bp.blogspot.com/-HiCewFt_ZKI/Uq3NvU-HKbI/AAAAAAAAi3k/lULgipnwjHA/s70-c/how_to_protect_your_child.jpg
200 OK 3.2 kB URL HTTP/1.1 3.bp.blogspot.com/-HiCewFt_ZKI/Uq3NvU-HKbI/AAAAAAAAi3k/lULgipnwjHA/s70-c/how_to_protect_your_child.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash bdbc57e0b17b0d41ad72c0b1f927ed0d
38024ef4bc18ae0e0d51356b002c0000f23c03ba
3378ad41a34c0b959534e0f33d94231b0b80c3128e30b4dddce3e0d409dca56e
GET /-HiCewFt_ZKI/Uq3NvU-HKbI/AAAAAAAAi3k/lULgipnwjHA/s70-c/how_to_protect_your_child.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8b7a"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="how_to_protect_your_child.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 3167
X-XSS-Protection: 0
2.bp.blogspot.com/-IfDybQQXIiw/UrLcGIfNxnI/AAAAAAAAi7c/iQ1_BLtHYxA/s70-c/swiss_bank_deposit_01.jpg
200 OK 4.7 kB URL HTTP/1.1 2.bp.blogspot.com/-IfDybQQXIiw/UrLcGIfNxnI/AAAAAAAAi7c/iQ1_BLtHYxA/s70-c/swiss_bank_deposit_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash da803e2ddf11aeb9ed3dc247fbee71df
f76ed5675b45819244bb6213c9123b1c5169a7fa
6afe5e7b7305540591c8f1f1b931d1debcd6157d5513e216b46c3e910b1317a5
GET /-IfDybQQXIiw/UrLcGIfNxnI/AAAAAAAAi7c/iQ1_BLtHYxA/s70-c/swiss_bank_deposit_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bb8"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="swiss_bank_deposit_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 4721
X-XSS-Protection: 0
2.bp.blogspot.com/-eXacBMy3P1Y/Up0dkZYBDfI/AAAAAAAAilg/Gi3ggDE18tg/s70-c/sunbather_escapes_death_01.jpg
200 OK 2.9 kB URL HTTP/1.1 2.bp.blogspot.com/-eXacBMy3P1Y/Up0dkZYBDfI/AAAAAAAAilg/Gi3ggDE18tg/s70-c/sunbather_escapes_death_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash 569ee54f6288898aab9dec804a589197
dce35fbf8b4efebe66cc7445ed1f7d6a4396d21a
955c4f4b504064b23adcfcb1b1aad278d550faa36a82d8f864a5ac010ce30704
GET /-eXacBMy3P1Y/Up0dkZYBDfI/AAAAAAAAilg/Gi3ggDE18tg/s70-c/sunbather_escapes_death_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8a59"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sunbather_escapes_death_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 2926
X-XSS-Protection: 0
macamlawak.blogspot.com/2014/01/gadis-vietnam-jadi-terkenal-di-china.html
200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/gadis-vietnam-jadi-terkenal-di-china.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash b909896be19b7c758698f22bc0e6ef37
180d1def0c534a5e0f397e76fc60d1c9491716d3
75a665486821166b5d5432592cbd2a95d7e62988a7288e89a21d34752c731cc7
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/gadis-vietnam-jadi-terkenal-di-china.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 26 Sep 2022 03:50:32 GMT
Date: Mon, 26 Sep 2022 03:50:32 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35259
Server: GSE
1.bp.blogspot.com/-qkGSGbEXzng/UrgeLpLmFFI/AAAAAAAAi9c/EZnvIJAib_w/s1600/13876811157128615.jpg
200 OK 50 kB URL HTTP/1.1 1.bp.blogspot.com/-qkGSGbEXzng/UrgeLpLmFFI/AAAAAAAAi9c/EZnvIJAib_w/s1600/13876811157128615.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 499x284, components 3\012- data
Hash 0f3e0e51a81f7bab13338b65e83f6ecb
aa31d4dfa693752a807d6730f9cdd016073a5b56
377a7c5a5dff399749badb4cf7764135bc853aede59edd6f9045a30db576de0a
GET /-qkGSGbEXzng/UrgeLpLmFFI/AAAAAAAAi9c/EZnvIJAib_w/s1600/13876811157128615.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bd8"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="13876811157128615.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 50371
X-XSS-Protection: 0
3.bp.blogspot.com/-uqL8xIIGItI/UreG-ioOktI/AAAAAAABnM0/7ZvIDJazXmg/s640/13876823387472807.jpg
200 OK 82 kB URL HTTP/1.1 3.bp.blogspot.com/-uqL8xIIGItI/UreG-ioOktI/AAAAAAABnM0/7ZvIDJazXmg/s640/13876823387472807.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 536x640, components 3\012- data
Hash ad6dec8be0a740586124037b37d56330
0a00c69ecdfce4cb2e8e4736d0d44038ebb661da
c42c26b008519297a0914895daa61d7371bd83d9dd64817d67983c1a179ee349
GET /-uqL8xIIGItI/UreG-ioOktI/AAAAAAABnM0/7ZvIDJazXmg/s640/13876823387472807.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1abb6"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="13876823387472807.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 82394
X-XSS-Protection: 0
1.bp.blogspot.com/-G-NfACxEGn8/UreG-kMnClI/AAAAAAABnMs/-MnbnUTY-Oo/s640/13876811165517648.jpg
200 OK 51 kB URL HTTP/1.1 1.bp.blogspot.com/-G-NfACxEGn8/UreG-kMnClI/AAAAAAABnMs/-MnbnUTY-Oo/s640/13876811165517648.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 495x326, components 3\012- data
Hash f5820d4bc6eff3bee74993a9aaabe26b
f45f7ea178327a0c53f2a5d31629e8882be6d746
2550a280713225b293363046055380861af78864016993b79cde16df790bcf35
GET /-G-NfACxEGn8/UreG-kMnClI/AAAAAAABnMs/-MnbnUTY-Oo/s640/13876811165517648.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19cce"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="13876811165517648.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 50552
X-XSS-Protection: 0
3.bp.blogspot.com/-8gB5kNwNhwg/UreG_Dppm5I/AAAAAAABnM8/ddt6e16bajQ/s640/13876823404636846.jpg
200 OK 50 kB URL HTTP/1.1 3.bp.blogspot.com/-8gB5kNwNhwg/UreG_Dppm5I/AAAAAAABnM8/ddt6e16bajQ/s640/13876823404636846.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 464x409, components 3\012- data
Hash b5af23ff56770280c9b3a953947fdc8b
8f89905dd025f73afd34349f7264dd9c11957443
829cc3e80ae71c047fc2d9e19851e751c46907a00f1b738e99774a78c5ef27ad
GET /-8gB5kNwNhwg/UreG_Dppm5I/AAAAAAABnM8/ddt6e16bajQ/s640/13876823404636846.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v19cd1"
Expires: Tue, 27 Sep 2022 03:50:32 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="13876823404636846.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Mon, 26 Sep 2022 03:50:32 GMT
Server: fife
Content-Length: 50487
X-XSS-Protection: 0
macamlawak.blogspot.com/2014/01/kirim-sms-percuma-guna-internet.html
200 OK 34 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/kirim-sms-percuma-guna-internet.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 8c0b19005cb99f289737063d28e48905
114be6bd030325071ff8df6c0e2ed9d55f4a47ac
0e37161f51aeb33011c0157a1ef65396b26568a59e423e963bf76cd1e385b714
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/kirim-sms-percuma-guna-internet.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/rancangan-lamaran-oleh-seorang-lelaki.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Mon, 26 Sep 2022 03:50:32 GMT
Date: Mon, 26 Sep 2022 03:50:32 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 34416
Server: GSE
www.widgeo.net/geocompteur/trackwidget_js.js
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/trackwidget_js.js
IP
GET /geocompteur/trackwidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2426
cache-control: public, max-age=604800
expires: Tue, 27 Sep 2022 23:07:13 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 448997
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=0dyidPFXkdxta2AFYmpHgRDRSW8O1eQkRSAaNhRQaYamUhfqxIUERntFFYWByIh%2Fmx1zDksH2xRCQoRpSwWnS4qOLYppbaALGrj0%2FPcM7x4I%2F1qF4ywFOV3P4MubwY0Q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092dba8db50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
IP
GET /5/3294720/?oo=1&js_build=iclick-v1.430.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/json
x-trace-id: d8317f4af8a5add545ae82479d39c4e6
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=649d916301844db08924ff50fcdf3f6b; expires=Tue, 26 Sep 2023 03:50:31 GMT; path=/; secure; SameSite=None
oaidts=1664164231; expires=Tue, 26 Sep 2023 03:50:31 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Mon, 03 Oct 2022 03:50:29 GMT
last-modified: Mon, 25 Jul 2022 16:50:39 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=KhW92EzsSAmOrLKW0bllK95tHvHUN6CAd5Ye5V1sGYDflT7zuG9NSxNJNNdAeLQPsqP7SrGs%2B9DhAo213TmUAA1DAT39VQkK1gLvGGIXmVrj8rSX6z7%2B4MvpYq0c0Y5H"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7509092aa82db50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=trackwidget
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Mon, 26 Sep 2022 03:50:31 GMT
content-type: application/javascript
last-modified: Wed, 21 Sep 2022 17:11:54 GMT
etag: W/"632b45da-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nv3jZSWjJmvz%2F9Tcb%2F%2BwdIoM09azrpDAY8zBduHL%2FUpkcQwBqUaJ9H6ieumwtXLgCW%2FYSTaN5gHOCzEXzf2wsa0sXZEseFp5%2BopuuU%2BmLNWCZ8mWZG9YOxaTt0V6CwY3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7509092dca9eb50b-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Wed, 28 Sep 2022 03:50:31 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
142.250.74.161
185.66.200.127
139.45.197.243
23.36.76.226
104.21.91.63