r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 555d8608594803d49eeb9581c6b70702
d01e0201e0ba0cf751ef97226620338a853bc635
2885cdac311a30161a8ac9ef8e54c788afafd4f86ed197a651fc6d8bda077908
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2885CDAC311A30161A8AC9EF8E54C788AFAFD4F86ED197A651FC6D8BDA077908"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8549
Expires: Thu, 15 Dec 2022 04:38:26 GMT
Date: Thu, 15 Dec 2022 02:15:57 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3c0c53379f331e934f61070074d41035
420f6e542cbf741838566f22e475a80e2f600d21
4b7213ec107cdf1c2cd61a124453fb682ec291af0004d071105c87e2fe7528f5
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4B7213EC107CDF1C2CD61A124453FB682EC291AF0004D071105C87E2FE7528F5"
Last-Modified: Mon, 12 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2439
Expires: Thu, 15 Dec 2022 02:56:36 GMT
Date: Thu, 15 Dec 2022 02:15:57 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Backoff, Content-Length, Content-Type, Retry-After
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 15 Dec 2022 01:33:52 GMT
content-type: application/json
age: 2525
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d29881eeb0456eff8cf415ad2ce64ba0
e3cfdd5f56ff88066257ec8f4726f53e3a733bd3
2cd90072f113163f976ddb8bc7017884efd3f764e7e8961b04e3ba5ec0a17d85
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "2CD90072F113163F976DDB8BC7017884EFD3F764E7E8961B04E3BA5EC0A17D85"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3200
Expires: Thu, 15 Dec 2022 03:09:17 GMT
Date: Thu, 15 Dec 2022 02:15:57 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: NdLtqyKRsZZczT8YfIBleqHy+I7vvKzM3SvCeJArBmVdTg/8u9SrLGvHdUifkZiP27+lzc0yAzs=
x-amz-request-id: CYXWVM3GECHK8ZYC
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 15 Dec 2022 01:50:44 GMT
age: 1513
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 02:15:57 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Cache-Control, Backoff, Content-Length, Pragma, Alert, Expires, Last-Modified, Retry-After, ETag, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 15 Dec 2022 01:33:21 GMT
age: 2557
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 210b7a2584ae55362c4b582e325f37f7
5f1982f961f1c5db96bbb66af075bab3cb535963
cb3767debad90cb8a34ce287de194cdb2a4f7146e7b51560fd2e0eb11fbfbc2f
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1399
Cache-Control: max-age=112457
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Etag: "63999230-1d7"
Expires: Fri, 16 Dec 2022 09:30:15 GMT
Last-Modified: Wed, 14 Dec 2022 09:06:56 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 471
macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 3dd564cd153933ce76d59e01e52c9aa0
1a5cbe033a07bcc2f5ffbd552f1bf9a07f046f1f
feafb43a4ff8b2dc282c5ee13eadffcae14e3f2fb9585503c6ecda9e0ea46592
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/perompak-dirompak-selepas-merompak-bank.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 15 Dec 2022 02:15:58 GMT
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 29 Nov 2022 23:30:42 GMT
ETag: W/"041901b3a80248969b466b5cdf0e5ed4741b038e8ff9736ccf33d86c3cc39955"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35383
Server: GSE
fonts.googleapis.com/css?family=Droid+Sans|BenchNine
200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Sans|BenchNine
IP
Hash 8b6f85a2197a9a728afdd69caeab445c
585da1b7925202ea9e8ffc97d27bbca85cfa394a
336a6969fd14ae199beeada1a339cb913324bd397bd5c86eb77244a9fbda1d5b
GET /css?family=Droid+Sans|BenchNine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 15 Dec 2022 02:15:58 GMT
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
macamlawak.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 macamlawak.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 09:45:41 GMT
Expires: Thu, 15 Dec 2022 09:45:41 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 08 Dec 2022 08:52:41 GMT
Content-Type: text/javascript
Age: 577817
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b6e467e0cff2bd4faa86396567236736
e0ea11f9fa497eb7bef619283c31ea2eda18a284
fee86e0774b73a38572997c3777409be9fdd731419b9a234580ad714f763dc7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash b6e467e0cff2bd4faa86396567236736
e0ea11f9fa497eb7bef619283c31ea2eda18a284
fee86e0774b73a38572997c3777409be9fdd731419b9a234580ad714f763dc7c
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfb5d3c071cebab21e6ab8647e84b6ba
ebc1553e88dbe512449a31b3cb4c10c659484d7d
cf794ab56bfa29d8e47637d68f5c82e4c60b855a8f6b772f344a72c712da3c4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00f0cd16a4285109b0d728642f1d1df3
833e9fa9eb60302f3f4c0370e52b533befd2e2e2
748e2cfb115a307c593b875812af31efbc2310a2b4309bf35091f9af98dfb980
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00f0cd16a4285109b0d728642f1d1df3
833e9fa9eb60302f3f4c0370e52b533befd2e2e2
748e2cfb115a307c593b875812af31efbc2310a2b4309bf35091f9af98dfb980
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
200 OK 4.7 kB URL HTTP/2 1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 914cb50b25dc47e3ed42f95d23441c63
ef24e0d012ecf092bac18441337a9e6c991c0c82
9e959670380178206298ea5a13c8c80d9393ba7cf3a65146b665e92380ba8777
GET /-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="jatuh-kapalterbang.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4695
x-xss-protection: 0
date: Wed, 14 Dec 2022 23:29:09 GMT
expires: Sun, 27 Nov 2022 04:53:00 GMT
cache-control: public, max-age=86400, no-transform
age: 10009
etag: "v2426"
content-type: image/png
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 14:01:44 GMT
expires: Wed, 13 Dec 2023 14:01:44 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 13 Dec 2022 06:58:47 GMT
content-type: text/css
age: 130454
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 14:19:02 GMT
expires: Tue, 20 Dec 2022 14:19:02 GMT
cache-control: public, max-age=604800
last-modified: Mon, 12 Dec 2022 15:55:44 GMT
content-type: image/gif
age: 129416
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 22:01:48 GMT
expires: Wed, 13 Dec 2023 22:01:48 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 101650
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0ffd9494d7b15d0c02e09f86eb695397
0650b890aa6e1d7651089bfc3b298d5b8d88650d
ac0d60d80fcd6577aefe03b46683d3f087cbada34717a3e53ec31cfeb0ed11e7
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 088037aa3cd3f678776d4443ee3feec3
4e8c2c84585e93acaeaba3c4a5704a98a315b33d
5f6edbe6d09f7efebc225ecb6d07c98f1ec12fa127febec52a4194130affdc88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
200 OK 4.3 kB URL HTTP/2 1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4969f55f38298ce8b64e50c7256162d4
8cfd6f1939b1d189410c894d704fd2f554e12a62
abf3a18c7179167981435df2a623974d4b8de806ba04a0148d95a4fdbc290873
GET /-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="p6.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4283
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:15:58 GMT
expires: Tue, 29 Nov 2022 02:39:39 GMT
cache-control: public, max-age=86400, no-transform
etag: "vbfa8"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/2092647672-widgets.js
200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2092647672-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 689971018982703ab88ce528368b9190
be9697d57e5c19d36c52aacd8b04a6a159a2f3bd
cf8b513cfd596cffc3a7e456eccc198b8e409f5aaf624d5dbeecdd748dce0cef
GET /static/v1/widgets/2092647672-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56341
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:10:48 GMT
expires: Fri, 15 Dec 2023 02:10:48 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 10 Dec 2022 00:52:24 GMT
content-type: text/javascript
age: 310
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 09 Dec 2022 13:33:13 GMT
expires: Sat, 09 Dec 2023 13:33:13 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 09 Dec 2022 12:51:35 GMT
content-type: text/javascript
age: 477765
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
200 OK 428 B URL HTTP/1.1 ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (428), with no line terminators
Hash f2be58d66557d951b9c2706ec63c12d0
02919e5add3ee28a843d835354170b4a8ed541c2
25c1d86ce0e36b4a57631cd674e0a34dc018eed6c27d9c2d8ed99ac4261f869c
GET /banner.php?section=General&pub=636673&format=300x250&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:58 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 15 Dec 2022 02:15:58 GMT
Last-Modified: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
200 OK 1.6 kB URL HTTP/1.1 3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
IP
File type PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash fdb7528e7ccebcfe1daea52aa0195bd6
caa9b43d3056743538e12cb11a7320f9216712ea
08ee145d75eed8be290285f1a8b9fd40b9b8dc029ad10cc6283945b536270506
GET /-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="PhoXo2.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1610
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 23:42:41 GMT
Expires: Sat, 08 Oct 2022 07:19:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 9197
ETag: "v8b5"
Content-Type: image/png
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1279)
Hash 7ac44ef24e267df17ff72f195b252806
62db12d9ce11a576ccd7fa3544d851c5fd42f3b7
aae7897e7b55999c1b3166309381d19ac488dced51e14071339d8b193a686a61
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Thu, 15 Dec 2022 02:15:58 GMT
expires: Thu, 15 Dec 2022 02:15:58 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "7446758f13887885"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
200 OK 12 kB URL HTTP/2 encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 229x143, components 3\012- data
Hash 5a91ff00521c9c039138078d4258cf99
9d3937bc37fff0bfa98daac390ff5a9bab3ff07b
b87f3792f68189504233cf81d5d06decf0f3011b79123bdcc3299c7cfc2541f3
GET /images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw HTTP/1.1
Host: encrypted-tbn3.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 12346
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:15:58 GMT
expires: Fri, 15 Dec 2023 02:15:58 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Jul 2016 07:36:38 GMT
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
200 OK 20 kB URL HTTP/1.1 fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 20196, version 1.0\012- data
Hash d056bf3055437ed0bccae4176b65336e
9049f5482de61d9a66806a292701787d5524fb85
f60c3e8ac9f319f101cf1d20290469aba1eb7cdc63c64d092a02764beae55d9f
GET /s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20196
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 03:34:05 GMT
Expires: Thu, 14 Dec 2023 03:34:05 GMT
Cache-Control: public, max-age=31536000
Age: 81713
Last-Modified: Tue, 19 Apr 2022 19:06:50 GMT
Content-Type: font/woff2
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 15 Dec 2022 02:15:58 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:36 GMT
ETag: "638fbf08-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_G98lbBQBHHLYghq0CiGssSu9swzewKKfo8jl+suFInBG4LaWA7Eb6I3nbYukuTAXt0CI6X5j6CC6w1DTC+8EGA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
200 OK 0 B URL HTTP/1.1 ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
IP
ASN #201702 skHosting.eu s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /layer.php?section=General&pub=636673&ga=g&show=1&fp HTTP/1.1
Host: ylx-4.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: cFBLMMaj0xWJj0cSXk77IA==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: f4PGo4INBigJjbbtjlBfDvYSHdY=
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:58 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 06 Jan 2023 21:00:16 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 623742
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3y5CIkwrRZMWTl6xHhFDnqls98FlIX7UQ1F9Z%2FY8Gm7gz2C%2BFB%2B%2BYnI2NdC%2B7sbQHnYR5lEFjVFQKIpuCCTPtlns6RzXaIP0T3akfrt5lHUBd3c2hVYXQQrOnNv4LI4m"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 779bacb11ee81c0e-OSL
alt-svc: h2=":443"; ma=60
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs
IP
File type ASCII text, with very long lines (580)
Hash 813b15c3004464f6bd39fd0773b04757
bd2218fe1e647f61132aad70d29cd91fd0416f26
446c6d83404c0fc4bc1ca6e1c0895f9400309185a534b3f4b6d500e668efeadf
GET /_/scs/abc-static/_/js/k=gapi.lb.en.geaHZXF2-fw.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9yYF5eCIYPx4UH9gpJptM2Q_GGxQ/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57794
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 13 Dec 2022 19:47:45 GMT
expires: Wed, 13 Dec 2023 19:47:45 GMT
cache-control: public, max-age=31536000
age: 109693
last-modified: Tue, 01 Nov 2022 15:24:55 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:15:58 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 18:30:23 GMT
Expires: Wed, 28 Dec 2022 18:30:23 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 27935
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00f0cd16a4285109b0d728642f1d1df3
833e9fa9eb60302f3f4c0370e52b533befd2e2e2
748e2cfb115a307c593b875812af31efbc2310a2b4309bf35091f9af98dfb980
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=f783f1c2-6dd7-403f-8b2d-a3480724e812
200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=f783f1c2-6dd7-403f-8b2d-a3480724e812
IP
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=f783f1c2-6dd7-403f-8b2d-a3480724e812 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 02:15:58 GMT
last-modified: Thu, 15 Dec 2022 02:15:58 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash bfb5d3c071cebab21e6ab8647e84b6ba
ebc1553e88dbe512449a31b3cb4c10c659484d7d
cf794ab56bfa29d8e47637d68f5c82e4c60b855a8f6b772f344a72c712da3c4d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
200 OK 2.2 kB URL HTTP/2 1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash f1a6797f91242287a33a4fbd390461c0
1faa0cba38f656d320b66ffd54167243c3a11b2a
f7e3c056e77fe5a256f5fb37d6084d43b660632f34dc0a77cefa9224ffd15e64
GET /-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v54f9"
expires: Fri, 16 Dec 2022 02:15:58 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mains.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 02:15:58 GMT
server: fife
content-length: 2150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash e0dd7523e886ba9e0688313d09ac3553
9ac60244527182e44da961da0237a3dfc0c29d87
7e724d27272de80268a43beb459c3962a9254de93cd1e80b2eb3a44c4a27eeaf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 00f0cd16a4285109b0d728642f1d1df3
833e9fa9eb60302f3f4c0370e52b533befd2e2e2
748e2cfb115a307c593b875812af31efbc2310a2b4309bf35091f9af98dfb980
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
200 OK 4.1 kB URL HTTP/1.1 2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6d57e4858ab729e9db89b4a12996c30f
33d340600545ca608cc05649f9de69947ecbada5
99998e4b1f2f6a36badeb95410638ff41f5903dae2d93330ef556d99235a115b
GET /-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="hmkiasus_01.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4072
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:58 GMT
Expires: Tue, 29 Nov 2022 09:14:06 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8bf2"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 088037aa3cd3f678776d4443ee3feec3
4e8c2c84585e93acaeaba3c4a5704a98a315b33d
5f6edbe6d09f7efebc225ecb6d07c98f1ec12fa127febec52a4194130affdc88
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:58 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-8wYbY8ljhBY/T6i-wkKnzRI/AAAAAAAAGWU/8NUBMzkxYVc/s72-c/salena-gomes-bogel.png
404 Not Found 1.7 kB URL HTTP/2 2.bp.blogspot.com/-8wYbY8ljhBY/T6i-wkKnzRI/AAAAAAAAGWU/8NUBMzkxYVc/s72-c/salena-gomes-bogel.png
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-8wYbY8ljhBY/T6i-wkKnzRI/AAAAAAAAGWU/8NUBMzkxYVc/s72-c/salena-gomes-bogel.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 02:15:58 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 500d7838b7582b456b8025ffe03ac9a8
ba64ec0d9ae36361848bc1be73a99e7c38575271
0da1844c4988d6497821f944b47dd19158be73f10deac19945ebdd9c18927485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
200 OK 2.6 kB URL HTTP/1.1 1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9d2936e5ada19cf70ebcba407d9d9155
c59d9c8ef9d14b135fe15b31d9122cc9fcba58eb
a0ecc02e048826f41bb9b5da70fa1791db5f25297f95fc15e67e2cde369a40a7
GET /-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2647
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Wed, 07 Dec 2022 13:57:11 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v41ff"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
200 OK 3.8 kB URL HTTP/1.1 2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0df95f70ada2fd798ee29fd931a698f7
621494a4fd57382d9e3a8241c4bb456b09982ac6
d3503b6ffe77f928919fa21e4863ccb764a0dd9fa4f8f85bd3b07daccc4f1bcc
GET /-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="kanak-kanak-disembelih.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3770
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Wed, 07 Dec 2022 14:14:55 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8103"
Content-Type: image/jpeg
Age: 0
2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
200 OK 4.0 kB URL HTTP/1.1 2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1a7922b370e02385ee179c6e36297225
c3190c9f94ad43eea3ca4ce261206b9fea758e9b
5fbb684a31c3623382278b03b38c773df6bfa2f1bc398f78e13bae2aaf50efac
GET /-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Pertandingan Membuka 8r4 Paling Cepat Di Stesen Tv Indonesia (edit).jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4047
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Tue, 29 Nov 2022 09:14:06 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v278"
Content-Type: image/jpeg
Age: 0
4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
404 Not Found 1.7 kB URL HTTP/2 4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 15 Dec 2022 02:15:59 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
200 OK 4.5 kB URL HTTP/1.1 2.bp.blogspot.com/-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ee7cfb7abd5d834441781bde52da8df3
e59b4e8421dd29d1a94223c6aa086d438ced5cf5
4352c9009643e75015c483e8030b7b4cb04171241209c7a4a70e601927a7da80
GET /-gLsCOqpWWcg/Uo3eZUeQR9I/AAAAAAAAiZY/yyg2H8vua_Y/s72-c/festival_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="festival_01.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4541
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Tue, 29 Nov 2022 09:14:06 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8997"
Content-Type: image/jpeg
Age: 0
ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=167107055826699&xtt=9362372
200 OK 1.3 kB URL HTTP/1.1 ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=167107055826699&xtt=9362372
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1335), with no line terminators
Hash 048a637808f2378e9e7f74cc68867531
950b11f00f479ebc03112b029fe5e26e170d4cab
ed0fa79d40c4bdfb09a744133fe9f208d80e1b18a5081d9d2b57442dc52b7c68
GET /bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=167107055826699&xtt=9362372 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 15 Dec 2022 02:15:59 GMT
Last-Modified: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
Set-Cookie: used_ad2633677=1; expires=Thu, 15-Dec-2022 05:00:00 GMT; Max-Age=9841; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Thu, 15-Dec-2022 05:00:00 GMT; Max-Age=9841; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=300x250_881516516_0; expires=Sat, 14-Jan-2023 02:15:59 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
2.bp.blogspot.com/-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 06285d400bb092a25f4739f1f443dbb1
e58d2bc7eda37224d4da9c778b33e6aafd79ce58
379cedbd0f80f3ada94e6d603eb58e7a0f576b3e0ea53d601493f6f06015cbac
GET /-NQijtaJ9gYY/UpaYFwR16vI/AAAAAAAACtI/3ajygj7P1dY/s72-c/Melihat+Suasana+Di+Dalam+Bilik+Persalinan+Model-Model+Catwalk.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Melihat Suasana Di Dalam Bilik Persalinan Model-Model Catwalk.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10975
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Tue, 29 Nov 2022 09:14:06 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "vad3"
Content-Type: image/png
Age: 0
1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c89b3e4cc3d6462ae9580470a315791d
fd3be63550a4ef169863fca193012ece884df54f
2c694057ea793e99fb49186866251ab4e548d17a08e0230ecf3cfefb8d6c6bab
GET /-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1177"
Expires: Fri, 16 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10408547_10154511905900454_8487754128025911440_n.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:15:59 GMT
Server: fife
Content-Length: 4755
X-XSS-Protection: 0
www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
200 OK 2.4 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
IP
File type ASCII text, with very long lines (2149)
Hash cbafe83972442e457a19e0f65df92c8b
bed10a8306cb9202d1832adbe0ab4f2a0d9358b4
6f07bee420a11253512b4b4051bb0e045e84eb9f856e3a9b4f50dcba3f5db335
GET /geocompteur/trackwidget.php?idec=1009871715 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: application/javascript
Content-Length: 2373
Connection: keep-alive
set-cookie: ville_idec=diff; expires=Thu, 22-Dec-2022 02:15:58 GMT; Max-Age=604800; path=/; domain=widgeo.net
country_idec=diff; expires=Thu, 22-Dec-2022 02:15:58 GMT; Max-Age=604800; path=/; domain=widgeo.net
w_js_ads_code=ok; expires=Wed, 21-Dec-2022 02:15:58 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Thu, 22 Dec 2022 02:15:58 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=bBqo5IFzB1pIaKE00OMzYtkkGj6mpKZdhdOt2hlE%2BR6IfO7KYaS1z75FeOSjjZMhml9r1sP1jibL5JUlbDoWmdp9oq0O63ESy3ZhXRPqPo0cir2CCqzyLgztfecCYCCZ"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 779bacaffd54b51b-OSL
alt-svc: h2=":443"; ma=60
www.blogger.com/comment/frame/3754588090277075421?po=5021911276588083120&hl=en-GB&blogspotRpcToken=3645546
200 OK 18 kB URL HTTP/2 www.blogger.com/comment/frame/3754588090277075421?po=5021911276588083120&hl=en-GB&blogspotRpcToken=3645546
IP
Hash 476c052c49545ea2ee7a94a854e50775
c8c45570dfe6211bd9bc19f63a28718f66207d8c
0b1710399d2146975df93f69a68e533998b8c6d96d2031f7b4908d7a08148b93
GET /comment/frame/3754588090277075421?po=5021911276588083120&hl=en-GB&blogspotRpcToken=3645546 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 15 Dec 2022 02:15:58 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
cross-origin-opener-policy: same-origin
cross-origin-resource-policy: same-site
content-security-policy: require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport, script-src 'nonce-vf2HhEUyuFAUEgqlPpRF_g' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=Rc2L7WQGU_8yK7ItwJHk83o7yQ7Adf1j4gjFygx7VMqAZiw_s0JNuRyp1ElXV2rqsPKo9IF_rK2avZAHrg7rwkOv5b42xq26gvAK798wvowPvNH-Jk442xW3UEiRhh6Qyk2Yhb6qB7SqBgudnsSdIlg9GxIyw4_h3wyPNo6hYN4; expires=Fri, 16-Jun-2023 02:15:58 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.sectigo.com/
200 OK 472 B IP
Hash 80e4ff5f843f7c93839f1ff53869056a
bf2df204a901f8b03d4fae8950e6c5a74fa796dc
05e4c852c1780715ffb2a0de4af9ae53d3c12f7f85764b05d03474ab304a7c64
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Tue, 13 Dec 2022 21:35:58 GMT
Expires: Tue, 20 Dec 2022 21:35:57 GMT
Etag: "bf2df204a901f8b03d4fae8950e6c5a74fa796dc"
Cache-Control: max-age=500997,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb6
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 779bacb1dbba0b3d-OSL
4.bp.blogspot.com/-yUvO9n5Gwiw/UrhT21IiinI/AAAAAAAAi_U/imPRCi96Lcs/s1600/Larry-Poulos_mugshot.jpg
200 OK 29 kB URL HTTP/1.1 4.bp.blogspot.com/-yUvO9n5Gwiw/UrhT21IiinI/AAAAAAAAi_U/imPRCi96Lcs/s1600/Larry-Poulos_mugshot.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 595x344, components 3\012- data
Hash 324b71eab9e4cb9e28c09d9d38a05ca0
2c1fb4019fb8899cb9d738f60abe0dfd835c69e9
eb4099928aaca920ccde76751e01e0f82e51a69459052a3e4ccc751b425ab17a
GET /-yUvO9n5Gwiw/UrhT21IiinI/AAAAAAAAi_U/imPRCi96Lcs/s1600/Larry-Poulos_mugshot.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bf6"
Expires: Fri, 16 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Larry-Poulos_mugshot.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:15:59 GMT
Server: fife
Content-Length: 28954
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b8c2941f3c9a86a6539c878e9c6e3ba
253836587652ca8ce6a72d59faab1f6123f1492a
f21e4780960f8af601af76fb1eb2bd03608a7c82166a4bd8dedb81adbfdd0cf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=111422
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Etag: "6399939d-116"
Expires: Fri, 16 Dec 2022 09:13:01 GMT
Last-Modified: Wed, 14 Dec 2022 09:13:01 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a29a4c6b4ba43b8d4b85a33b27279a06
a9177ccbe185ee26f4e92115a4bc5831b64d050b
c2409b47733ef77aeaf73719b0c5fd6294c50c5e579f6ab79f71503efad63e6a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
yllix.com/images/aff/pub_7nc2s6.jpg
200 OK 74 kB URL HTTP/2 yllix.com/images/aff/pub_7nc2s6.jpg
IP
ASN #201702 skHosting.eu s.r.o.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=250, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x250, components 3\012- data
Hash 7a19e68cca2f5d28d919bb6db6faa8f0
877535b8821515cf43269fc2dfdcde54b5ec339f
d0af19a5198d12ead1c743bd66b969baef0a4682b8a7eb4fa05df216888da209
GET /images/aff/pub_7nc2s6.jpg HTTP/1.1
Host: yllix.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/jpeg
content-length: 74258
last-modified: Sun, 17 Apr 2016 08:55:25 GMT
etag: "57134f7d-12212"
expires: Sat, 14 Jan 2023 02:15:59 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b8c2941f3c9a86a6539c878e9c6e3ba
253836587652ca8ce6a72d59faab1f6123f1492a
f21e4780960f8af601af76fb1eb2bd03608a7c82166a4bd8dedb81adbfdd0cf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 0
Cache-Control: max-age=111422
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Etag: "6399939d-116"
Expires: Fri, 16 Dec 2022 09:13:01 GMT
Last-Modified: Wed, 14 Dec 2022 09:13:01 GMT
Server: ECS (ska/F71E)
X-Cache: HIT
Content-Length: 278
ocsp.digicert.com/
200 OK 278 B IP
Hash 6b8c2941f3c9a86a6539c878e9c6e3ba
253836587652ca8ce6a72d59faab1f6123f1492a
f21e4780960f8af601af76fb1eb2bd03608a7c82166a4bd8dedb81adbfdd0cf2
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cache-Control: max-age=111422
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Etag: "6399939d-116"
Expires: Fri, 16 Dec 2022 09:13:01 GMT
Last-Modified: Wed, 14 Dec 2022 09:13:01 GMT
Server: nginx
Content-Length: 278
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 500d7838b7582b456b8025ffe03ac9a8
ba64ec0d9ae36361848bc1be73a99e7c38575271
0da1844c4988d6497821f944b47dd19158be73f10deac19945ebdd9c18927485
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 664 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 89486fe9ec07bff5d79774e8d16db47e
f0230bbcbe6c9b34f55418ce31e55a6846918fae
dbdb631be170e6ab604cdf0bd3548704097d4030b97aa559b325fce656acb6ba
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 15 Dec 2022 02:15:59 GMT
date: Thu, 15 Dec 2022 02:15:59 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 664
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
cf-polished: origSize=4360
cache-control: public, max-age=604800
expires: Fri, 16 Dec 2022 04:31:38 GMT
last-modified: Sat, 01 Oct 2022 00:32:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 510259
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=dSd7WJmW6hxyFc2ywwjraI6yK7O51qW6wWhGrlKzvFkMow9GLYRGFI23tF7JyxFNrEGPjNFuVDF%2F1N0DRNhFO04NPwSNABQMY%2Fj%2BOeur6FDnxrl4Y%2Bi2YkALecwftvHs"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb45f8bb4f7-OSL
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 15 Dec 2022 02:15:59 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+502; expires=Sat, 14-Dec-2024 02:15:59 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 15 Dec 2022 02:15:59 GMT
cache-control: private
X-Firefox-Spdy: h2
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
200 OK 797 B URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
IP
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (615)
Hash 7484011e6ce38abd593a9818033079bc
2c9bdd4cf25959eb7cce4ba857adfe11fa4f1086
01134182094b57ea1df7fc42d2ae65b10cc2f2cb859a114dfb875e26b0ba1d2c
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:36 GMT
ETag: "638fbf08-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_G98lbBQBHHLYghq0CiGssSu9swzewKKfo8jl+suFInBG4LaWA7Eb6I3nbYukuTAXt0CI6X5j6CC6w1DTC+8EGA
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
200 OK 1.3 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 961dcad940bcae720f8f0ead6409f9d2
7199f8b763df9aec9c55bad14795e2166e6b1501
a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
ETag: W/"58409a4a-631"
Expires: Sat, 14 Jan 2023 02:15:59 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a74d25fc7331140c01af945c67988033
f56fa1bd199d06a1b0b9b4f8c4075a6199511b70
d14bdb8402eab47ba9838f925fbe5450dd2927c5d18edb9b6153f2e88328bec0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D14BDB8402EAB47BA9838F925FBE5450DD2927C5D18EDB9B6153F2E88328BEC0"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=8558
Expires: Thu, 15 Dec 2022 04:38:37 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fperompak-dirompak-selepas-merompak-bank.html&title=PEROMPAK%20DIROMPAK%20SELEPAS%20MEROMPAK%20BANK%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
200 OK 3.2 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fperompak-dirompak-selepas-merompak-bank.html&title=PEROMPAK%20DIROMPAK%20SELEPAS%20MEROMPAK%20BANK%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2735)
Hash ea40343e6345f328fc2a74ae8ad74223
a26224084ceaf6632975785b1b5a91964846647d
533ace904e49029b586516ae9b68978ca7cb3a89d9f3e8e1480e638753d3a2e7
GET /geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fperompak-dirompak-selepas-merompak-bank.html&title=PEROMPAK%20DIROMPAK%20SELEPAS%20MEROMPAK%20BANK%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Wed, 15-Mar-2023 02:15:58 GMT; Max-Age=7776000; path=/; domain=widgeo.net
country_name=Norway; expires=Wed, 15-Mar-2023 02:15:58 GMT; Max-Age=7776000; path=/; domain=widgeo.net
idcompteurcc_1410487131622=done; expires=Fri, 16-Dec-2022 02:15:58 GMT; Max-Age=86400; path=/
get_data_1410487131622=ok; expires=Thu, 15-Dec-2022 02:18:58 GMT; Max-Age=180; path=/; domain=widgeo.net
bonus_1410487131622=705; expires=Fri, 16-Dec-2022 02:15:58 GMT; Max-Age=86400; path=/
bonus_j_1410487131622=1; expires=Thu, 15-Dec-2022 02:18:58 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Thu, 15 Dec 2022 02:18:58 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=VHnSB5DzH8q6rxgVYXB2tchqFJjcol7Bip5297SceH12v%2B7M45cwinWk6zaNdr0L6fryM142rS54t64QDAhoQWfPE42yEhAIAJVf8ZWVZi19TTTjP1DrLCVB6QqVsghm"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 779bacb3be81b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fperompak-dirompak-selepas-merompak-bank.html&title=PEROMPAK%20DIROMPAK%20SELEPAS%20MEROMPAK%20BANK%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 12 Dec 2022 12:08:17 GMT
ETag: W/"639719b1-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zLRjEkf%2BMVlhjBwitEmSQsIXzWPURd3ZDdPQfUrmBlJydaMHzxBHS%2BXQ8Qv0gBsHKZXNqRN4Xk%2BhpXGzCOgt3SHuNA5GMqAW5xkTEP6oQiQIEF2cKAmRS650BtgD4nxF"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 779bacb4efbe1c0e-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sat, 17 Dec 2022 02:15:59 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3b59e600f451e1d9ee50eeb80805044c
84dcdad4c9072e38103ab84b747c98365ed9229f
f9426bebbf21a26d91180d1c1dbeb2940f4404a22106ec5b2a18250983d9c2cf
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F9426BEBBF21A26D91180D1C1DBEB2940F4404A22106EC5B2A18250983D9C2CF"
Last-Modified: Tue, 13 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4340
Expires: Thu, 15 Dec 2022 03:28:19 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
200 OK 26 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
IP
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash f46784dcc71c42f9406d242fede794f4
79269678d6fb002908aae6c5616ddd2f94f9691a
0df87463e7f01f1abbb4144ed58c36de50d1fdb3bc56046e0976ab642ed2f1bc
GET /aff/pub_s9c2nm.png?1480419364 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:04 GMT
ETag: W/"583d6824-68a8"
Expires: Sat, 14 Jan 2023 02:15:59 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
www.widgeo.net/geocompteur/css/tipTip.css
200 OK 593 B URL HTTP/1.1 www.widgeo.net/geocompteur/css/tipTip.css
IP
File type ASCII text, with very long lines (2057), with no line terminators
Hash a747347fbc4841ea98b69cc6b9e82340
9ff90c2abcbd22df2a8f618400421dc0c87ee3f2
181311b58305877b33a71d8f6b968783df4a5be2fbc51e6e2439c6272050626d
GET /geocompteur/css/tipTip.css HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fperompak-dirompak-selepas-merompak-bank.html&title=PEROMPAK%20DIROMPAK%20SELEPAS%20MEROMPAK%20BANK%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=2441
cache-control: public, max-age=604800
expires: Tue, 20 Dec 2022 08:59:55 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 148562
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BiwIdzQNKyXD%2BNnKT%2Bm1qZj3htEWn33y1X5y4xtCUWRdjTF%2F0fY35h7zEJZhEMl1RgTqe0JQ8kKk%2BbAi7%2FQa4buOU4T9OUIVHeUwQG0vP2nQa0KJ9dr%2FC69c7bM1EQ8D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 779bacb4eee7b51b-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=233207143476&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
200 OK 551 B URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=233207143476&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
IP
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (702), with no line terminators
Hash 38017b0cbb780fef0a02c62a3d988fdf
b0b2a0a092d08eae287397203ab6ec2ddb95f39d
d31c644f82b686edc6100de2a7d342c26314eae1ea5c09e46152ae63dffa3b78
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCZZZCCrkjCrxACrCrGCxCZxkkjjiZpCCr_37889&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg2NQ==&adApiR=loaded_string_6974835b0bce9d250429df012c0426f88d0bd_2633677_1671070559.0716_86807&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=233207143476&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: total_impressions=1; expires=Thu, 15-Dec-2022 04:59:59 GMT; Max-Age=9840; secure; SameSite=None
used_ad2633677=1; expires=Thu, 15-Dec-2022 04:59:59 GMT; Max-Age=9840; path=/; secure; SameSite=None
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Access-Control-Allow-Origin: *
Content-Encoding: gzip
1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b2eb20feb0cf76247b06b09fa0d9643e
39cfc489626188762fc83269d25fac275849b2b2
8258ce2affbce3c1555082bca3ff2514f2d13350b38bb3d2a67cf4147c9310e3
GET /-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12197
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v23ef"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2e709a04ea80113c435ca4f9d37e93e7
053f34d74eded192d698bb20956897ec3e3ad23b
2535554bd9d9004c7888cde496278d847002218fb1d35a3d4bacdd98c8a92ff9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ylx-1.com/trk/?9a14959b276ce58928433fcf02dd6530
200 OK 43 B URL HTTP/2 ylx-1.com/trk/?9a14959b276ce58928433fcf02dd6530
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?9a14959b276ce58928433fcf02dd6530 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 15 Dec 2022 02:15:59 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
200 OK 32 kB URL HTTP/1.1 1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
IP
File type GIF image data, version 89a, 47 x 36\012- data
Hash de8786141e6d1977bf7e2e6de7f1576b
eca2cf38a29141c00223120e03ddb0266d0eae5c
a66d397b2074119260adcf349ba9aa2d1de08ed098a6cb77c49f40e45795f9f6
GET /-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="06.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 31605
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v23f1"
Content-Type: image/gif
4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
200 OK 7.1 kB URL HTTP/1.1 4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b24f42a157fe0fd0c0670b82cdf4ed80
23cd6f155ff3ccd1b972446cd9769b95d7760fb3
97d910d193ef3ba80d2ec9e3fcc8c3e7669420389bbfa263d484d3626ed2cfa5
GET /-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="01.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7139
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Thu, 10 Nov 2022 21:31:55 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v23f3"
Content-Type: image/gif
3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
200 OK 7.7 kB URL HTTP/1.1 3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9cc44dc0d9d256729214bad1f2f203e
58090dfe6c40f94742026e6c995d1efa1528cea9
f738a2d77df5130907ab4d6ace1233bee0766be9bfbdcffef3c4c1a789843ede
GET /-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="02.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7678
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Wed, 05 Oct 2022 17:25:45 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f5"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
200 OK 2.0 kB URL HTTP/1.1 2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
IP
File type GIF image data, version 89a, 36 x 35\012- data
Hash 1b9200f411ac88d26abae6047bfb4839
0f583fbd1433ec2ce11d73a3a5d8d6fe6ec4afe7
93b826c061859ace5120ecf13154150954d1728e81964eb780fab9dbf7aedc0a
GET /-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="04.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1988
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sat, 19 Nov 2022 06:18:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v23f9"
Content-Type: image/gif
3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
IP
File type gzip compressed data, max compression\012- data
Hash 09af1481bdc74d180a0bed2c84af4ce2
688fc6254df705c2549b9c24a4d0a8299ae67c1b
6ca1e3b14a7ea4f233288af5ba98d19e38cd20a9bdbd0612f77218f554ae1c8e
GET /-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03a.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10557
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Fri, 11 Mar 2022 11:40:49 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f8"
Content-Type: image/gif
Age: 0
www.gstatic.com/recaptcha/releases/pn3ro1xnhf4yB8qmnrhh9iD2/recaptcha__en.js
200 OK 163 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/pn3ro1xnhf4yB8qmnrhh9iD2/recaptcha__en.js
IP
File type ASCII text, with very long lines (649)
Size 163 kB (163396 bytes)
Hash aa75370bb1ce2d5b05b0d02f6feecba4
f110915b53288da7b267c51210cfc239dc0b5591
cfb8dadaba93a5e0a08739ce589b55cc61fb93d0c616da564394ce925bef6197
GET /recaptcha/releases/pn3ro1xnhf4yB8qmnrhh9iD2/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 163396
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 14 Dec 2022 16:24:11 GMT
expires: Thu, 14 Dec 2023 16:24:11 GMT
cache-control: public, max-age=31536000
last-modified: Thu, 08 Dec 2022 01:21:32 GMT
content-type: text/javascript
age: 35508
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 1d6914eb78b0e6ba05418a388ab0abc8
1af2bc2925d92c78ab617e05d95784881ef0f28f
0fe6fda5d85b2370a5e27820a0dc5dc2bb53fe256bbd1470d76a5f0061295ee9
GET /-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="05.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11864
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Sun, 06 Nov 2022 03:33:01 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23fd"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
200 OK 13 kB URL HTTP/1.1 1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash aafd50d72e0f92a19f2e043a59d58f3c
8b565b7610a01b1bf5c1bd58fb94070c4fd1a085
d3b1a956d913c0017a5fa30b739d63dc7966fdc00c177626537a2a0b160f5fb7
GET /--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="09.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12733
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Wed, 02 Nov 2022 05:19:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2401"
Content-Type: image/gif
2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2754d2f6cd3621d09343cff0f3b3a6ef
0466a0996870b85bcb4de07a6028efdded023092
8bbd1eff8b018e50fa1189dc220a56bb0e7906ccc861bd59b0a57a6fecf8d0a1
GET /-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="11.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11140
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Thu, 10 Nov 2022 21:31:55 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2407"
Content-Type: image/gif
inklinkor.com/tag.min.js
200 OK 37 kB IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c248da2231270af36e1d9a4fa3fb392f
0d48cb1870a603f6d926dbbbe00b3c22e35bcc6d
650d456b648b07291dcbd76e6108a6b0133f8a7c4e41cb13a12e28ab4bd11da1
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 6c81a9f4234ba11b3ebf5fb2fb28012f
cache-control: max-age=86400
last-modified: Mon, 12 Dec 2022 14:41:11 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Fri, 16 Dec 2022 01:53:37 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 1342
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=hCjxmorrij7EJ%2BdvNiqB2VFOj4WDqbvqsBdYr9x%2BmmoxGWPoYxyhoSzi%2BS3j%2FTt7l0sXYtalQHZVQSUqhV%2BfE%2Fq5Lucu0dxGhDPx%2BoSf3cqn83bGHAXFBQKMQsP6gjy6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 779bacb40f5a0b49-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 61493dfb3c256f6247991635d959aa36
a78ff4b39f9540181d37b97fab7e412948f9feb0
f9c93ab91a81b6f010462e2d77c67e4eae52b80bab26d7046dd999914886c8df
GET /-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="7.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11789
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Thu, 10 Nov 2022 21:37:10 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23fc"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
200 OK 8.6 kB URL HTTP/1.1 1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 4b4f6e15739d67050873ca3f1a65786e
f42e1c5e677d6da97dbfbd32161fbe87202a27fd
ba67fba16537316a624f0f8344d77524e19c2df5f85b28aa86b702c5cf1285e1
GET /-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="12.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8611
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Tue, 11 Oct 2022 10:58:43 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2409"
Content-Type: image/gif
2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
200 OK 9.2 kB URL HTTP/1.1 2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 7f8668e6d3ad490f26348cc7282a4f90
2e166126a1217dcc5ce4cdf31716da22e6bd59d1
fa148f161258d3dc721eee88a5cc174559c6f1430176d647d2e9e2dc8b0a7209
GET /-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="13.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9176
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sat, 08 Oct 2022 02:39:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v240b"
Content-Type: image/gif
4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
200 OK 9.5 kB URL HTTP/1.1 4.bp.blogspot.com/-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash a3c63680b985a24cbc8470ce9915903c
b3099a767e94ce488e94eff9fff8672b7b29c822
fc15f81adba6e04d314c5ec08ef968eeea29aeb6286af4108db1bfcf928ed73b
GET /-wZJ_dnZta7c/UYl965ryHYI/AAAAAAAAJAw/Dj5XZi0L0OQ/s000/14.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="14.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9530
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v240e"
Content-Type: image/gif
2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
200 OK 7.9 kB URL HTTP/1.1 2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6229e0dc57d33c3b51d1b067ca69c625
2e445e3ab75ca465569838aa2d17c7609c8c45b9
0ac371efd8c7403e232169bd9b08de8676116b3768996abdc899bd91340beb8d
GET /-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="17.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7860
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sat, 19 Nov 2022 06:18:37 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2413"
Content-Type: image/gif
1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash abf8a5999f654d65c90a962779ebe9ff
e81b0d3b64b7bd830ec204d8c54c52e983d5fe15
5d72dd878b3b6e37f8c0d66ac059d78850f04613fa9b3bf3a7ee21b6042ba028
GET /-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="15.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3705
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Wed, 30 Nov 2022 19:49:49 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v240f"
Content-Type: image/gif
3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 0c7de4432447b874c2b6337fe6f675fe
845af5f406010c1462e1da4ec9c50ac84bb5679b
4b401f70a2d0a9e48f2826eb0c81554a868fbe202adee608d193b68d5f5763cc
GET /-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="16.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11938
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Sat, 26 Nov 2022 11:53:13 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2411"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash b16f3ef0d022879f521011b331f1f751
e3272da7a66d6ed1d275fcec3b154c8c0c34fdec
363e15dc2577e03ef8183224677d69d26ecaa07691d66b1c45fc0d4b7fe6b647
GET /-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="21.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4771
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sat, 08 Oct 2022 04:13:12 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2418"
Content-Type: image/gif
1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
200 OK 2.3 kB URL HTTP/1.1 1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 10bb241722f4180ff2149995133249c7
ecdba88ef548a01c63e04f1d6385f933904fcffe
1d7297ae79305a59aa464c72240610364da0e4424c57e5e4539644948e48e978
GET /-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="18.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2259
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Sun, 06 Nov 2022 03:46:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2415"
Content-Type: image/gif
2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 178ae7bc8ba7f2c93fce38923aa0a0e0
1a53ce687d64a38c5ec245dc32f25535d39df767
b78339e9b4454feb9a8a903a72b1526a0da4626d1d237e36287c27c8a8b9c3f6
GET /-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="27.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14382
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Thu, 10 Nov 2022 08:59:50 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2425"
Content-Type: image/gif
3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
IP
File type GIF image data, version 89a, 34 x 35\012- data
Hash 83e1107d6c3aab9177481cfae5a85766
62052a6816003bcb433f9d9156124873f304abc2
2f3a10a4dac6b35eb5e7c71c8e08b15af49d486a6bc94d09e2679f0f5e61cca8
GET /-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="22.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11966
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Wed, 02 Nov 2022 15:15:17 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241a"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
200 OK 6.2 kB URL HTTP/1.1 1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash d32de0777c3455570b8316da2e55c151
3d8f8c8ea71003845021291517263f2cf597e75d
60be4a95d4774dcb77aba69aa1bca4e98d5596aed56d584d49cf0f5c405f07e9
GET /-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="30.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6200
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Wed, 30 Nov 2022 14:00:16 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2429"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4557f99d9d9535e0134db96dfe8063b2
c9b446d4f382a8ee3d73b1b2e77c96c3e4787059
74305a78c814edc962f442dbbc14023e0b96c5822d5aa9f4ef4c8e4bc791fc00
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
200 OK 9.7 kB URL HTTP/1.1 1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9451c0f97aade01a0ee5fe500f91819
bccaad828c715be199eac75210ee248a9fed69cb
cc49b2fd8a07e1765061ae5893ec7700de8cc2dd53b9506b55c079f98fb5ccb9
GET /-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="28.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9651
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Tue, 29 Mar 2022 00:14:30 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2424"
Content-Type: image/gif
1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
200 OK 30 kB URL HTTP/1.1 1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2922070489895cdda39211911bb2e19b
9086810a13c3a1975637ce6432f833e536ba75ca
d35863d1bd2faa137b042ae5e673490891cd5170350085844981671895392e28
GET /-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="19.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30419
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Wed, 30 Mar 2022 13:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2417"
Content-Type: image/gif
1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 758a0518d4e16817962190748c2ed65b
7834a60870315b25a26610eadbf1cb76cb57425a
9f334e753336e3ddef1c187a36cefbd28723e13c9fe982d587be75c4bf25a399
GET /-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="26.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11518
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Tue, 22 Mar 2022 19:57:38 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v2420"
Content-Type: image/gif
2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
200 OK 2.5 kB URL HTTP/1.1 2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
IP
File type GIF image data, version 89a, 24 x 24\012- data
Hash faa74e8c61fc64d5edb11613c7eead2c
e043879d3ee94a3edf10260f21f44bfa4a6fc66e
483c4a0396691993a641ec409c44b8b7e1daab0ae7e2b2944c4bc59520bb7655
GET /-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="progress_ani.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2545
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Sat, 19 Nov 2022 06:56:31 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23eb"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4bdd6ef3e0ef2c33868d96eacf07dec
e37067aed86afe6d61372f325d5485dfcd35a350
56b8dc4555085a686f9cad922e1dc169140ae8d6475e24524096ca6f05576073
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ee6d6b52c53c776577813dd3b5e67346
a938b694e2aed81a1177a76a32b66b518e9fea78
585ea39592df809c30b51e7d367aeafa0413b2476beac6e9912484aacb0e326f
GET /-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="23.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12154
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Sat, 26 Nov 2022 11:53:13 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241b"
Content-Type: image/gif
Age: 0
lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
200 OK 11 kB URL HTTP/2 lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash ab3f2cda071a82b6dbc067404699fb84
f1aa69bdc7f29e7737413a82be8b97d93b15a6eb
4d3958cb51bc42b95a3257d96b16acca6e53dbcf32847704b1b441f9a7651c93
GET /-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="20.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11225
x-xss-protection: 0
date: Thu, 15 Dec 2022 00:54:33 GMT
expires: Wed, 16 Nov 2022 16:39:29 GMT
cache-control: public, max-age=86400, no-transform
age: 4886
etag: "v10b8"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4bdd6ef3e0ef2c33868d96eacf07dec
e37067aed86afe6d61372f325d5485dfcd35a350
56b8dc4555085a686f9cad922e1dc169140ae8d6475e24524096ca6f05576073
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
200 OK 2.1 kB URL HTTP/1.1 3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash bfb5c4ad3077b6067c24d727e85e4d55
683a3c57084227c6f3a94d1feda97a63eb8c902d
be82914e30dc50b25809b031abc0ebcb7c69fecf69b2c0848f81d8aedae88812
GET /-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="25.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2127
X-XSS-Protection: 0
Date: Thu, 15 Dec 2022 02:15:59 GMT
Expires: Sun, 06 Nov 2022 03:46:30 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2436"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4bdd6ef3e0ef2c33868d96eacf07dec
e37067aed86afe6d61372f325d5485dfcd35a350
56b8dc4555085a686f9cad922e1dc169140ae8d6475e24524096ca6f05576073
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
200 OK 6.0 kB URL HTTP/1.1 4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6f597a032fa3941248175f066ea7d85c
8d11b4fafa5dd5fa501507fec2541d6c41eb0980
8904c280153182d0ca0258b0163364994c8d644c06ccd3527819adc860d71fb4
GET /-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v2427"
Expires: Fri, 16 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="29.gif"
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:15:59 GMT
Server: fife
Content-Length: 5978
X-XSS-Protection: 0
lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
200 OK 7.5 kB URL HTTP/2 lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 19c1058bce48182f99d8defd40d7cc37
d3a356987b4b26ce3f7b1e6ffe948b83280470e7
d47ce018c59039146898b2bec0ca49d2b6e6c5aac3d9b54549490b7b0a7702f2
GET /-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="32.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7480
x-xss-protection: 0
date: Thu, 15 Dec 2022 00:07:38 GMT
expires: Sat, 29 Oct 2022 23:30:00 GMT
cache-control: public, max-age=86400, no-transform
age: 7701
etag: "v10da"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
200 OK 10 kB URL HTTP/2 lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2f6fd5905d46763e4250381d18a413eb
f35c7f8ddc23a44a543beacd1a42c9dd961f0529
fa5a337841922b3a6e6f9f25decd416ef368f002e34ac6b01ea7ee3e839b0df6
GET /-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="24.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 9958
x-xss-protection: 0
date: Thu, 15 Dec 2022 01:05:08 GMT
expires: Fri, 27 May 2022 17:27:00 GMT
cache-control: public, max-age=86400, no-transform
age: 4251
etag: "v10aa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
200 OK 7.0 kB URL HTTP/1.1 4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash 86a790169f7ee3eab648f73a3577d1db
484f5ef646ca88f04e42eec22b14dd4c4182f5ba
610f74fc26a960624833800cd25fe47635e75b9287dd89c78f3b137d683ef33d
GET /-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="31.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6957
X-XSS-Protection: 0
Date: Wed, 14 Dec 2022 22:24:43 GMT
Expires: Thu, 01 Dec 2022 09:40:40 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 13876
ETag: "v242b"
Content-Type: image/gif
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4bdd6ef3e0ef2c33868d96eacf07dec
e37067aed86afe6d61372f325d5485dfcd35a350
56b8dc4555085a686f9cad922e1dc169140ae8d6475e24524096ca6f05576073
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
200 OK 6.9 kB URL HTTP/2 lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
IP
File type GIF image data, version 89a, 36 x 36\012- data
Hash c3f6f37a1facf33abac47f1c5d5cedb2
34c323bc28abe8bb44598b94f56325827bbda75e
0ddd89667f12408f11369f673d035c1e9c329dbea848bffe05cca4d8a3b7bb5d
GET /-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="10.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6893
x-xss-protection: 0
date: Thu, 15 Dec 2022 00:07:38 GMT
expires: Sat, 04 Jun 2022 09:13:09 GMT
cache-control: public, max-age=86400, no-transform
age: 7701
etag: "v10fa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c4bdd6ef3e0ef2c33868d96eacf07dec
e37067aed86afe6d61372f325d5485dfcd35a350
56b8dc4555085a686f9cad922e1dc169140ae8d6475e24524096ca6f05576073
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/geocompteur/shadow/flag_norway.png
200 OK 880 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_norway.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e186cd78997ba86002ffe37b1bf7ea64
ec8365cf9b6db82cac866c92865cd8d6d4146ae5
de0cb6c3eada763844403b680fa08dcc451a48df4a234a7f607558987ee3371c
GET /geocompteur/shadow/flag_norway.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/webp
content-length: 880
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1041
content-disposition: inline; filename="flag_norway.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 22 Dec 2022 21:44:08 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1917110
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=yElQjl2CU%2BptLP2fAMGd5y%2FqSl94Ry%2FksxOC%2BjAnfjvrR62QZaaK%2BdnXixIBjBCpZq%2Bhd6Dd0HM21IQ5Bz7Y5CnifbQMDyjQaG08VTuDCZBmdN0TRjCo95SZ79%2B6TWU6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6d8d3b4f7-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 15 Dec 2022 19:39:07 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2529411
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rvkVOGq9384pMOcMaAkH0w2l0sYJR6pA90bIm12jblK7FFABI2wh0SdSvwkKMR0WerOwV73DZFiThe8bfcQCmP8lGhV3q5RYWHD2bQGYQWUn09hr1qR3cGRVWlodZQWu"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6d8d5b4f7-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 11 Jan 2023 21:27:27 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 190111
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4OHhZu9Q0Rk19WkFYyXcbVoK3ewZKHZUQLMmB6O58d9unJXY0Ygxjgm6J0WyJmBs4tsGs6ykjWa5yOBNcianABxLEjYaaBaicJal6NkSrxURCV%2B08hNwEFA2zRRFeElm"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6e8ddb4f7-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 13 Jan 2023 23:14:00 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 10918
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8Cu073ZQbiYSEuXNDUcFAiikb1XUG1xI3W4ct8iKhDEPxUdtv1%2BrrmUqFZn5Df%2FYS6fIrtd8bfFQHUyciPsppyN50Xi3FOtNAERiQU%2BrKchdTSikqBU107AFLr0D%2F7cf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6e8dbb4f7-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_finland.png
200 OK 724 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_finland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bb42c0a72d24163a22f5b03c19014ca
333c2b0e19045c6162ea18f96cde896e9568c965
57f34fcc77132fcdfc669956854f38ebc6089241f1d5f52d7218d06365c9e750
GET /geocompteur/shadow/flag_finland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: image/webp
content-length: 724
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=899
content-disposition: inline; filename="flag_finland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 12 Jan 2023 11:43:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 138731
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=zlNMwpCPB%2F6WbFtfZVzpc3oQTajQOfvufcs8GOcCrMSSYqE3BRxaR%2FcKdWTCPRmpjPleS27Ee7fseZSPjOIyah6KAQAk0%2BjxHJWopCPS685lx3V6bAd9zHVDA9etuGGF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6e8d9b4f7-OSL
X-Firefox-Spdy: h2
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.widgeo.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 12 Dec 2022 18:52:41 GMT
expires: Tue, 12 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 199398
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
macamlawak.blogspot.com/feeds/posts/summary/-/wtf?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18304774550365277057_1671070556253&_=1671070557101
200 OK 3.2 kB URL HTTP/1.1 macamlawak.blogspot.com/feeds/posts/summary/-/wtf?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18304774550365277057_1671070556253&_=1671070557101
IP
File type Unicode text, UTF-8 text, with very long lines (13370)
Hash 1d75c74d41e4585260af0afaef80dcad
b779130a03298d8b5747fb2c30b25a626562eca1
50f1aeddc5c0da1b11e22de0b9c1a955d190163dea1b86382b0a4ec9d5f5e17b
GET /feeds/posts/summary/-/wtf?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18304774550365277057_1671070556253&_=1671070557101 HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"873617659609ef3a8b660840fde1c06beba1b40588fe1a56938508a026919f7c"
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 15 Dec 2022 02:16:00 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Tue, 29 Nov 2022 23:30:42 GMT
Content-Encoding: gzip
Content-Length: 3205
X-Frame-Options: SAMEORIGIN
cdn.ebaaa.xyz/generic/348_78978EN-DW23-300x250.gif
200 OK 29 kB URL HTTP/1.1 cdn.ebaaa.xyz/generic/348_78978EN-DW23-300x250.gif
IP
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 300 x 250\012- data
Hash 227bd5cc79c41250eef369ea65c78d9f
a6dabf7805968098c1e8e8adbd42e6fc7b44e94d
d9d3316d7579d87210bfaad0cbb41c0aa3c52ab0346cef9deebfbfb7a35f0ca2
GET /generic/348_78978EN-DW23-300x250.gif HTTP/1.1
Host: cdn.ebaaa.xyz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ebaaa.xyz/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 15 Dec 2022 02:15:59 GMT
Content-Type: image/gif
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 28 Dec 2020 14:27:49 GMT
Vary: Accept-Encoding
ETag: W/"5fe9eb65-74f5"
Expires: Sat, 14 Jan 2023 02:15:59 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4284
Expires: Thu, 15 Dec 2022 03:27:23 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e30904bd9b57028f7ba1cc8e04ff08fd
9acb88374abef6387243ce8c5cf1149d73879ac1
be1ece2af7858ffc84e916d4554a805760c13a2eab346ac5a09a232b79116225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4284
Expires: Thu, 15 Dec 2022 03:27:23 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4284
Expires: Thu, 15 Dec 2022 03:27:23 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 08f7321e01de2d111fc8100424937061
01ea459fe9270ea25e3cec2228d1cf3cd61d80b8
36ca62b5281e0d5434f0bf6119b2074eb05f5336db3113b5556d2a4273ed2816
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "36CA62B5281E0D5434F0BF6119B2074EB05F5336DB3113B5556D2A4273ED2816"
Last-Modified: Mon, 12 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4284
Expires: Thu, 15 Dec 2022 03:27:23 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b76e8c43482cb1f6e9d3f5dd55185382
364236e338c799f7d7a604882451428d12cdc7c7
375600e8bedfec8fa85da9298fc3322b91e97261dee7fd94b1dad8e6f4faed67
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F886cc6e3-a038-4e4d-8da0-caf399786ff4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4523
x-amzn-requestid: 5404595d-f42f-49a0-9438-093b2fb1b852
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dBXWTGEcIAMFdnw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6396d28e-17f927945ee836a91a3148e0;Sampled=0
x-amzn-remapped-date: Mon, 12 Dec 2022 07:04:46 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: JBIoHXeeJIsyl_wj57ZEP_f1mg3eq0WJjgKveuc_DslNZzSiVf62Og==
via: 1.1 eece508272520f70691e4eebdc5a6dea.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 07:19:07 GMT
age: 68212
etag: "364236e338c799f7d7a604882451428d12cdc7c7"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5326af81-e7e2-4d6c-93a6-779a6e46a642.webp
200 OK 7.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5326af81-e7e2-4d6c-93a6-779a6e46a642.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 26fd0eea87bdde875285073a695d3005
03ec879b4eaef86b85f7528abecf1f383b9367d3
f0fbee34d53cc5ff66722caab6917f0833c778ed26b1b31a87424c06af7d480c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5326af81-e7e2-4d6c-93a6-779a6e46a642.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7028
x-amzn-requestid: f516be09-a7cf-486c-8bbd-75593c381048
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dJ8xJEPVIAMFdLw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a41a0-00fdce7b73e084af4ce63583;Sampled=0
x-amzn-remapped-date: Wed, 14 Dec 2022 21:35:28 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: WKlvxEojtZkTdZmuSTupikiYxxr-BFmS7JvzOqPvla0JgxOBVe2a2A==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 2bedbeaa49b4a77447d30097858cb81a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 21:40:06 GMT
age: 16553
etag: "03ec879b4eaef86b85f7528abecf1f383b9367d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14bcc069-6742-46d6-ba71-3624eec8f34e.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14bcc069-6742-46d6-ba71-3624eec8f34e.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 5c8a26b13c34491d35e416a0a315e9a8
c13edfc689666ab3586b49796a7fcd46bafee29d
bed8dff9ad852fe694ccf3e54b0bb5687bb154981d48bfa8c05fdcd30010185a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14bcc069-6742-46d6-ba71-3624eec8f34e.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5760
x-amzn-requestid: 5e94f6cf-8ab1-4a7a-9714-a3147af61e1d
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c3ftDFHtIAMFwxA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6392dfec-0ae05a42119198d6052c0f4b;Sampled=0
x-amzn-remapped-date: Fri, 09 Dec 2022 07:12:44 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5L0NOMl3xdN98bEYyq_3KMSpfqOoXrBOJcHCZW4JpbzdIszkCbKj-w==
via: 1.1 ddd913fbbe7367d44af4ac06097e7a2a.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 08:35:36 GMT
age: 63623
etag: "c13edfc689666ab3586b49796a7fcd46bafee29d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07861bcb-0cbb-458b-b85e-45f3efc2391a.jpeg
200 OK 5.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07861bcb-0cbb-458b-b85e-45f3efc2391a.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9d38060edf5f77bdaa18a4dd3b092c12
50b89e4fbdb88026899ce49cb45b0d6286f303a7
8ff9d03bca03022c717004f96a178d4982d16b575cb70a1a237ca76f90f4f0e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F07861bcb-0cbb-458b-b85e-45f3efc2391a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5789
x-amzn-requestid: bb0455df-4252-4b04-a24c-eb101e3e40db
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dKWBdFAUIAMFaig=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639a6a09-1e3f6b0d0a59da3807acffee;Sampled=0
x-amzn-remapped-date: Thu, 15 Dec 2022 00:27:53 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: QQrpPJpyUuwf5USygp_vUiZ-S2Jt7VUN8yClS2Pt_IUgVwMn-xeDhQ==
via: 1.1 c34da255183aa208dd1c722ff211f9b2.cloudfront.net (CloudFront), 1.1 98aedae6661e3904540676966998ed88.cloudfront.net (CloudFront), 1.1 google
date: Thu, 15 Dec 2022 00:38:36 GMT
etag: "50b89e4fbdb88026899ce49cb45b0d6286f303a7"
content-type: image/jpeg
age: 5843
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg
200 OK 4.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 9c7a1481c2acfca36dfc40d5525f4f5d
39ebe36d481dc83f16d42feff7e6a594eb1eb090
6fa67fb9185e55892298acd0a7aa2b81fb2aa5857aa9eddca3931189ea538457
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe03f69d5-77c0-42d9-9b2a-210a52667086.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4457
x-amzn-requestid: 82585058-e84a-4d7c-827e-25e5ad105cc0
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: c-EYmEpPoAMFc_g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63958103-5fdbaa223aa63f092c53655e;Sampled=0
x-amzn-remapped-date: Sun, 11 Dec 2022 07:04:35 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: i30kZRIWmHU04qtqe5zH2Wh3fxyNJTs7QxsGGzX89gJocxSojjoubg==
via: 1.1 470e3fe246a660ba6ace67a79f78d246.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 21:33:12 GMT
age: 16967
etag: "39ebe36d481dc83f16d42feff7e6a594eb1eb090"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
File type ASCII text, with very long lines (20080)
Hash 8b4caaca97bb4b340b81a043ca35121f
1d52c357e0090b4dde5075be547943c2c7269a76
17541dbf5cecfa39673ea7361246f8517f307e0fcd071376dba2f67fd970721b
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 15 Dec 2022 02:15:59 GMT
expires: Thu, 15 Dec 2022 02:15:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76261
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
macamlawak.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 macamlawak.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Thu, 15 Dec 2022 02:15:59 GMT
Date: Thu, 15 Dec 2022 02:15:59 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 29 Nov 2022 23:30:42 GMT
ETag: W/"041901b3a80248969b466b5cdf0e5ed4741b038e8ff9736ccf33d86c3cc39955"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash e30904bd9b57028f7ba1cc8e04ff08fd
9acb88374abef6387243ce8c5cf1149d73879ac1
be1ece2af7858ffc84e916d4554a805760c13a2eab346ac5a09a232b79116225
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 15 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
302 Found 147 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
IP
File type HTML document, ASCII text
Hash 32bda6076987f3a181733ac829a0f533
ffd3a9dc2c7c2e8713ac0da383467e1d904caf3c
1e92e3412557708e8af2a0927a4b2b700d7dbffaa7b56ef9ae82c774a42fdf7b
GET /hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 147
date: Thu, 15 Dec 2022 02:16:00 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=388EE7A5-6D85-4CFA-8C77-A1334C7FBF37; Path=/; Domain=xiti.com; Expires=Mon, 15 Jan 2024 02:16:00 GMT; HttpOnly
atidx=388EE7A5-6D85-4CFA-8C77-A1334C7FBF37; Path=/; Domain=xiti.com; Expires=Mon, 15 Jan 2024 02:16:00 GMT; HttpOnly; Secure
atid=388EE7A5-6D85-4CFA-8C77-A1334C7FBF37; Path=/; Domain=xiti.com; Expires=Mon, 15 Jan 2024 02:16:00 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Hw-B2qQkkMc9FxXOQda7G8hAxe74ZAwI-W_HAFJLaf9-XyWZl_uh2w==
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 08 Dec 2022 21:48:03 GMT
expires: Fri, 08 Dec 2023 21:48:03 GMT
cache-control: public, max-age=31536000
age: 534477
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 15 Dec 2022 02:08:37 GMT
expires: Fri, 15 Dec 2023 02:08:37 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
age: 443
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=trackwidget&hl=2x15x57&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Thu, 15 Dec 2022 02:16:00 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 095562e8748e634f880ee3c4ada2b6d0.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DPcN2wVOnc4b8lD-VdJSF22_fcJVhq_6nh2adEozCCrKpGVKPK5qKQ==
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash fb6b7affcab2b32d113fed499e663b71
bd1a5ee0a85c497bc5e10c7baa9b84e06188a668
a475dbafedab35e26c9c8cededc8844a6647899aec7106d116cf73556748ef75
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A475DBAFEDAB35E26C9C8CEDEDC8844A6647899AEC7106D116CF73556748EF75"
Last-Modified: Mon, 12 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3911
Expires: Thu, 15 Dec 2022 03:21:11 GMT
Date: Thu, 15 Dec 2022 02:16:00 GMT
Connection: keep-alive
my.rtmark.net/gid.js?userId=4a0b567d3b154364961232b3c640ea5e
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=4a0b567d3b154364961232b3c640ea5e
IP
File type JSON data\012- , ASCII text
Hash bf363f220eb99f79e5948780867d082f
da6b51b72ead5d810823714da1891cb04c12dd0a
3eb49c9d07f0a6c1976137d506826b8ac0e5df9e30488b51ad139f20ea371162
GET /gid.js?userId=4a0b567d3b154364961232b3c640ea5e HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 02:16:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=4a0b567d3b154364961232b3c640ea5e; expires=Fri, 15 Dec 2023 02:16:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
4.bp.blogspot.com/-51whLrHbiw8/Uq3RiWbrmZI/AAAAAAAAi4I/j5iVsZSKYZU/s70-c/Kumpulan+Sepah+1.jpg
200 OK 4.0 kB URL HTTP/1.1 4.bp.blogspot.com/-51whLrHbiw8/Uq3RiWbrmZI/AAAAAAAAi4I/j5iVsZSKYZU/s70-c/Kumpulan+Sepah+1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash 73087ac3580531174063455d5f3e5b0e
44ae0afaf592696ca72bc5f718651ab35e3205f5
5e6fef000e13d5f1c07b7e3025bc731b8f89d5a9cac43448675d8f20f41fbcc7
GET /-51whLrHbiw8/Uq3RiWbrmZI/AAAAAAAAi4I/j5iVsZSKYZU/s70-c/Kumpulan+Sepah+1.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8b83"
Expires: Fri, 16 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Kumpulan Sepah 1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:00 GMT
Server: fife
Content-Length: 4029
X-XSS-Protection: 0
3.bp.blogspot.com/-88ARDVq2r58/UqCXFQXqUwI/AAAAAAAAioE/lQj8mYsrmhE/s70-c/20131203_kurttay11.jpg
200 OK 3.5 kB URL HTTP/1.1 3.bp.blogspot.com/-88ARDVq2r58/UqCXFQXqUwI/AAAAAAAAioE/lQj8mYsrmhE/s70-c/20131203_kurttay11.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash 7f6392657f97e3c3d2fc2e14cd8d7b66
9405f8c0c55ce5750f952e873494f20c0c33df00
48176de7be9e1607efcf557d8207a95c2565d84fd53c45b02ebb854203ed7246
GET /-88ARDVq2r58/UqCXFQXqUwI/AAAAAAAAioE/lQj8mYsrmhE/s70-c/20131203_kurttay11.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8a82"
Expires: Fri, 16 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="20131203_kurttay11.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:00 GMT
Server: fife
Content-Length: 3539
X-XSS-Protection: 0
4.bp.blogspot.com/-zri8_aDdLB4/UqCVKj6FYBI/AAAAAAAAins/xSD8OuljWXs/s70-c/jami+(1).jpg
200 OK 4.8 kB URL HTTP/1.1 4.bp.blogspot.com/-zri8_aDdLB4/UqCVKj6FYBI/AAAAAAAAins/xSD8OuljWXs/s70-c/jami+(1).jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=4, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash b929ac3b5001ea62448d752125da07ba
cfd4b933d816fa3eb4e1d0125c60ad655d7edfa6
a0560e1a7759f9590f129645fc40d9c3ba39a7245a00b4ad2a67b158dd805ef0
GET /-zri8_aDdLB4/UqCVKj6FYBI/AAAAAAAAins/xSD8OuljWXs/s70-c/jami+(1).jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8a7c"
Expires: Fri, 16 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jami (1).jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:00 GMT
Server: fife
Content-Length: 4759
X-XSS-Protection: 0
4.bp.blogspot.com/-K8Vt8Kl2g04/UqCaIrEwMkI/AAAAAAAAioo/T_Mk5-8aRd8/s70-c/north_korean_officials_get_photoshop_totally_wrong_01.jpg
200 OK 3.4 kB URL HTTP/1.1 4.bp.blogspot.com/-K8Vt8Kl2g04/UqCaIrEwMkI/AAAAAAAAioo/T_Mk5-8aRd8/s70-c/north_korean_officials_get_photoshop_totally_wrong_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash c4008e097d992e1d71fd674feb9ee5f6
2b091af7d39e622f663af66c33f0f1f51e353147
9239d403299babc5562a74bab1e77c349d04dfccafe6352862095aeb556ed38b
GET /-K8Vt8Kl2g04/UqCaIrEwMkI/AAAAAAAAioo/T_Mk5-8aRd8/s70-c/north_korean_officials_get_photoshop_totally_wrong_01.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8a8b"
Expires: Fri, 16 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="north_korean_officials_get_photoshop_totally_wrong_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:00 GMT
Server: fife
Content-Length: 3375
X-XSS-Protection: 0
macamlawak.blogspot.com/2014/01/dek-pemerhati-menguji-kegayatan-anda-14.html
200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/dek-pemerhati-menguji-kegayatan-anda-14.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash c51819ec4f659ddc5e4f3de8ed0b2290
221bd93158aa6159123c26d764786124b2154aec
d8fb4ea9cba5e8c2117108be269e6c9c6ff0b1bd036c5fbf97e7e5a784bd81c0
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/dek-pemerhati-menguji-kegayatan-anda-14.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 15 Dec 2022 02:16:00 GMT
Date: Thu, 15 Dec 2022 02:16:00 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 29 Nov 2022 23:30:42 GMT
ETag: W/"041901b3a80248969b466b5cdf0e5ed4741b038e8ff9736ccf33d86c3cc39955"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35433
Server: GSE
1.bp.blogspot.com/-XokzO5axUu0/Uq3CW_27qwI/AAAAAAAAi2U/A1y7EpidSZo/s70-c/xpix_gal1.pagespeed.ic.S-9_sqUM-6.jpg
200 OK 2.6 kB URL HTTP/1.1 1.bp.blogspot.com/-XokzO5axUu0/Uq3CW_27qwI/AAAAAAAAi2U/A1y7EpidSZo/s70-c/xpix_gal1.pagespeed.ic.S-9_sqUM-6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 70x70, components 3\012- data
Hash c1304c39a72c45e9aebd20756e12985a
e0d4798562982279293020f33b548f3129ca319f
9c8226d39d57f20a1131cc364ac803f327881ef9ab7ae65ab4856733c17203d9
GET /-XokzO5axUu0/Uq3CW_27qwI/AAAAAAAAi2U/A1y7EpidSZo/s70-c/xpix_gal1.pagespeed.ic.S-9_sqUM-6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8b66"
Expires: Fri, 16 Dec 2022 02:16:00 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="xpix_gal1.pagespeed.ic.S-9_sqUM-6.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:00 GMT
Server: fife
Content-Length: 2599
X-XSS-Protection: 0
macamlawak.blogspot.com/2014/01/nadeem-dan-nora-danish-berb1k1ni-di.html
200 OK 36 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/nadeem-dan-nora-danish-berb1k1ni-di.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 2aca20e9a0e3575d62c0d8e5f982c824
ae8e7def1351a8f43b799dadff2d436601e3b2ee
074e7008cde5f4cdced97b3c402400c81163f7a46a55793989d027827144a51c
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/nadeem-dan-nora-danish-berb1k1ni-di.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/perompak-dirompak-selepas-merompak-bank.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 15 Dec 2022 02:16:00 GMT
Date: Thu, 15 Dec 2022 02:16:00 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 29 Nov 2022 23:30:42 GMT
ETag: W/"041901b3a80248969b466b5cdf0e5ed4741b038e8ff9736ccf33d86c3cc39955"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 36023
Server: GSE
1.bp.blogspot.com/--ROgbK3gz4k/UqfbiDvTHLI/AAAAAAABR4o/PqVOYGdcmEc/s1600/1.jpg
200 OK 75 kB URL HTTP/1.1 1.bp.blogspot.com/--ROgbK3gz4k/UqfbiDvTHLI/AAAAAAABR4o/PqVOYGdcmEc/s1600/1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 558x387, components 3\012- data
Hash dc26b90865506e6801b1e3f2d053bd6b
3186095b48a9a4bf5833c6fdef30abfdef9fa58c
90054c5b83b72d4b08747501eb16b1bbb86a2ed0f1632f70c0845cd7c3fd8a9c
GET /--ROgbK3gz4k/UqfbiDvTHLI/AAAAAAABR4o/PqVOYGdcmEc/s1600/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1478b"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 75402
X-XSS-Protection: 0
4.bp.blogspot.com/-u__ZaA_QBNU/UqfbYqW8P8I/AAAAAAABR4Q/cWKCm6jB35E/s1600/dimo7.jpg
200 OK 72 kB URL HTTP/1.1 4.bp.blogspot.com/-u__ZaA_QBNU/UqfbYqW8P8I/AAAAAAABR4Q/cWKCm6jB35E/s1600/dimo7.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 550x412, components 3\012- data
Hash ff6e46eaeb2dcb59e58e914bc7340841
e7f6b76b73641e1f7a79f4346b04471d8294bf52
322688e0c4d4d5a62b5194f2fe61cae99d5c627bdf65eb3c30942ef669629c2e
GET /-u__ZaA_QBNU/UqfbYqW8P8I/AAAAAAABR4Q/cWKCm6jB35E/s1600/dimo7.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14785"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="dimo7.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 72501
X-XSS-Protection: 0
1.bp.blogspot.com/-MSDsqK0E9e4/UqfbackHnNI/AAAAAAABR4g/8x8bp0KhmN8/s1600/dimo6.jpg
200 OK 96 kB URL HTTP/1.1 1.bp.blogspot.com/-MSDsqK0E9e4/UqfbackHnNI/AAAAAAABR4g/8x8bp0KhmN8/s1600/dimo6.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 500x500, components 3\012- data
Hash eb7477111abcf32625cb55e96df2a1fc
5d404cf66e435b0ef57d57777e880ad322b18c58
80dacd95a702c07ae813b39656cd8e6a717b1a106d3a5caf87577275b37fc8a2
GET /-MSDsqK0E9e4/UqfbackHnNI/AAAAAAABR4g/8x8bp0KhmN8/s1600/dimo6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14789"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="dimo6.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 96476
X-XSS-Protection: 0
1.bp.blogspot.com/-4l20zl7cAbk/UrhURsKh1wI/AAAAAAAAi_k/HWD9WGgziJk/s1600/Desktop491_01.jpg
200 OK 177 kB URL HTTP/1.1 1.bp.blogspot.com/-4l20zl7cAbk/UrhURsKh1wI/AAAAAAAAi_k/HWD9WGgziJk/s1600/Desktop491_01.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 600x1350, components 3\012- data
Size 177 kB (176992 bytes)
Hash 6cf9fcc7b9d86ce46994b3025a1711aa
2400f164fdd48ef242be0df2aeb2fa55fbaebd49
aba30d3a85b0f19485ad66fb3118a7715fd706df23630d821a06f0c5492a0522
GET /-4l20zl7cAbk/UrhURsKh1wI/AAAAAAAAi_k/HWD9WGgziJk/s1600/Desktop491_01.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bfa"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Desktop491_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 176992
X-XSS-Protection: 0
1.bp.blogspot.com/-FiiV-IUX6co/UqfbVFoCgPI/AAAAAAABR4A/oySi6x4S8bc/s1600/5afe2310618711e38df60eb8e57e63df_8.jpg
200 OK 165 kB URL HTTP/1.1 1.bp.blogspot.com/-FiiV-IUX6co/UqfbVFoCgPI/AAAAAAABR4A/oySi6x4S8bc/s1600/5afe2310618711e38df60eb8e57e63df_8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x640, components 3\012- data
Size 165 kB (164954 bytes)
Hash 8625bcc4a40fc157448eb05f5c3f8a67
0913518780f3a026adada07f4db943dca1814627
9e86dd59793d9e5428947cad4870db34a50d1579770f9ea867415938a3e34dc9
GET /-FiiV-IUX6co/UqfbVFoCgPI/AAAAAAABR4A/oySi6x4S8bc/s1600/5afe2310618711e38df60eb8e57e63df_8.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14783"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="5afe2310618711e38df60eb8e57e63df_8.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 164954
X-XSS-Protection: 0
1.bp.blogspot.com/-JGh8C6HfI6E/UqfbZn8eOhI/AAAAAAABR4Y/jNE6Qs9jayM/s1600/dimo4.jpg
200 OK 80 kB URL HTTP/1.1 1.bp.blogspot.com/-JGh8C6HfI6E/UqfbZn8eOhI/AAAAAAABR4Y/jNE6Qs9jayM/s1600/dimo4.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 500x500, components 3\012- data
Hash 6e49669917928caa15367a77da7c0e6d
7b5ab0bdddef6ec8bd9b7811b8e599463ad1bcb2
d327de493c0f1a089d6a400ba903828f937bfd5975793e6cb46a0e8c750ac27d
GET /-JGh8C6HfI6E/UqfbZn8eOhI/AAAAAAABR4Y/jNE6Qs9jayM/s1600/dimo4.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14787"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="dimo4.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 79999
X-XSS-Protection: 0
3.bp.blogspot.com/-UleuSlya640/UqfbVIiE7MI/AAAAAAABR38/gd99g7VNTVU/s1600/1e392de0616311e3a801121e0f202bd6_8.jpg
200 OK 153 kB URL HTTP/1.1 3.bp.blogspot.com/-UleuSlya640/UqfbVIiE7MI/AAAAAAABR38/gd99g7VNTVU/s1600/1e392de0616311e3a801121e0f202bd6_8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x640, components 3\012- data
Size 153 kB (152818 bytes)
Hash a880fcbdaa95d5e6b369fdbe924bdf15
48c3f0331d43de7e8aaf50eab596106b3bbf3861
ee2e64474996e211dbf532f99a34d1c156b26282edec1102246f5e471c894181
GET /-UleuSlya640/UqfbVIiE7MI/AAAAAAABR38/gd99g7VNTVU/s1600/1e392de0616311e3a801121e0f202bd6_8.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14782"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1e392de0616311e3a801121e0f202bd6_8.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 152818
X-XSS-Protection: 0
3.bp.blogspot.com/-MePAequM4lQ/UqfbU5fywyI/AAAAAAABR34/6psazyaogvc/s1600/89d88dc4617811e38e440ad7235ffb94_8.jpg
200 OK 111 kB URL HTTP/1.1 3.bp.blogspot.com/-MePAequM4lQ/UqfbU5fywyI/AAAAAAABR34/6psazyaogvc/s1600/89d88dc4617811e38e440ad7235ffb94_8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x640, components 3\012- data
Size 111 kB (110806 bytes)
Hash e39f8f0291acf03e29d3068bf483e4c4
8fc0eaf899e125c39c07f78bd73e41e837453912
bdd07e17614de66c0bc368753f12206288328f7308bfd387aa58f0d46515aa1f
GET /-MePAequM4lQ/UqfbU5fywyI/AAAAAAABR34/6psazyaogvc/s1600/89d88dc4617811e38e440ad7235ffb94_8.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v14781"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="89d88dc4617811e38e440ad7235ffb94_8.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 110806
X-XSS-Protection: 0
1.bp.blogspot.com/-QuN3A47Ct3A/UqfbTAFv8bI/AAAAAAABR3w/aewj9iWvuN0/s1600/8785dbe4615a11e38e780ec19be2b448_8.jpg
200 OK 100 kB URL HTTP/1.1 1.bp.blogspot.com/-QuN3A47Ct3A/UqfbTAFv8bI/AAAAAAABR3w/aewj9iWvuN0/s1600/8785dbe4615a11e38e780ec19be2b448_8.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 640x640, components 3\012- data
Size 100 kB (100467 bytes)
Hash f52d5f4eac02bafb72a332f9cdeec84e
66cb88883f96ffdf45523f3141012b56c5595038
e5efff8dfcaaea5dc1caa7f8e6533c7e36c1a37141a42c780a2822692e781c93
GET /-QuN3A47Ct3A/UqfbTAFv8bI/AAAAAAABR3w/aewj9iWvuN0/s1600/8785dbe4615a11e38e780ec19be2b448_8.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1477d"
Expires: Fri, 16 Dec 2022 02:16:01 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="8785dbe4615a11e38e780ec19be2b448_8.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 15 Dec 2022 02:16:01 GMT
Server: fife
Content-Length: 100467
X-XSS-Protection: 0
www.widgeo.net/geocompteur/trackwidget_js.js
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/trackwidget_js.js
IP
GET /geocompteur/trackwidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2426
cache-control: public, max-age=604800
expires: Tue, 20 Dec 2022 08:59:56 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 148562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vWJLFbiHAyZLj1MN%2B7uFLcbf6AwBaSQVl5m1SkV37XHRZFg8Cx68Up0RpUSQVMojpcfGt4fdOhB9qhp9Bg%2F5FipLrdbw6ZIAwtYGYVEHlK3DgbA3k1%2Fckpg%2F%2Bxv94S%2Fd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6188bb4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=trackwidget
200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=trackwidget
IP
GET /hitparade.php?pagexiti=trackwidget HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Thu, 15 Dec 2022 02:18:58 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4bLcMLbJK%2FF3QiVqXio6nT9988ZheO19ZFNRFzabzP9GnG3Cv1buwLg0NwEWraYbih3xOQbImzpV6qGRi4TJy8lSnO7Z4vVz8m40hcnanPUH5gTR10dEmwcy88aombUJ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb44f84b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.460.0
200 OK 0 B URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.460.0
IP
GET /5/3294720/?oo=1&js_build=iclick-v1.460.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/json
x-trace-id: 7505243fd19cb988f20fda9a2040dcc2
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=4a0b567d3b154364961232b3c640ea5e; expires=Fri, 15 Dec 2023 02:15:59 GMT; path=/; secure; SameSite=None
oaidts=1671070559; expires=Fri, 15 Dec 2023 02:15:59 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
IP
GET /geocompteur/js/jquery.tipTip.minified.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5251
cache-control: public, max-age=604800
expires: Tue, 20 Dec 2022 08:59:56 GMT
last-modified: Mon, 22 Mar 2010 15:10:00 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 148562
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=M5JP%2FoCeZr0AqU96RYmxVTD%2BK3bVIZ4kJesi6TQOnHl754Ohg0%2BJtcxfsm1lMBuu%2BaXn5dnM6PS3OdTmU6Co8lc3GNGzzjx%2BArqTGLKpk5mKgEhq8Zu5RlpQU%2B%2F9JdGh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb6188ab4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=trackwidget
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/javascript
last-modified: Mon, 12 Dec 2022 12:08:17 GMT
etag: W/"639719b1-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2Tfl%2FxPry9qk03mud524ZJC%2BwOxzNegMp8uiezjWfd7g9iZO7q7MHAReDeXpTcU06yOzcP%2FK7i4VB4rpRMysNILgtgsuXrChvsgZpK4JbyVSQTsIRXzbFjdUNMo9A3qL"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 779bacb708ecb4f7-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 17 Dec 2022 02:15:59 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg
200 OK 0 B URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg
IP
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa84ff272-725d-4ea2-9b73-d56ddbd06979.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3187
x-amzn-requestid: 01e45059-3240-4c5b-bd89-4cce8387e6f4
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: csUX0FUgoAMFYqA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638e6765-1db6a3fd5433985e5f0687a7;Sampled=0
x-amzn-remapped-date: Mon, 05 Dec 2022 21:49:25 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: ab-V5dPQRj6wn9lhjFnS0WCdjKhyKG0S_eXyDQM86Bg-8P4qxvwqQg==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 14 Dec 2022 17:09:04 GMT
age: 32815
etag: "ff5817aecda71a982779d5b12ba19e3264e964a3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
200 OK 0 B IP
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 15 Dec 2022 02:15:59 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3693
cache-control: public, max-age=604800
expires: Sat, 17 Dec 2022 08:08:57 GMT
last-modified: Wed, 12 Oct 2022 00:08:47 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 410821
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=vISznxb5J0UhoiIVCz3NNyKxyxwCn38OqA2Xms4azWlsLCBwagrlNROni5Y2VsVU1F5vAkbnihKR%2B5XR3WE9H9314%2BDPkUQvrV1xyHOjdVW2RVQKpcYs5KFUaaJvjZ4%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 779bacb42f75b4f7-OSL
content-encoding: br
X-Firefox-Spdy: h2
172.217.21.161
139.45.197.234
185.66.200.127
23.36.76.226
0.0.0.0