r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d6a971d765338f107fe9d2c67fa4bbdf
a72bdf191446a37fa0420cc9d7c087aaff757cd6
dc5291c136b0b81621a02679a31f6b7c852e2803429d54c2a9afcc8edf031328
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "DC5291C136B0B81621A02679A31F6B7C852E2803429D54C2A9AFCC8EDF031328"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4803
Expires: Sat, 24 Dec 2022 03:37:01 GMT
Date: Sat, 24 Dec 2022 02:16:58 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash ede732d48f2c32ad5e3b899bb4348df9
15fa12733818b3ae39f3022a715ed0f431b28242
446c9bf6bc38a43f5758f6f44f89ad76eff44eb8779cf7e62bbfeb002b298dee
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "446C9BF6BC38A43F5758F6F44F89AD76EFF44EB8779CF7E62BBFEB002B298DEE"
Last-Modified: Thu, 22 Dec 2022 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11715
Expires: Sat, 24 Dec 2022 05:32:13 GMT
Date: Sat, 24 Dec 2022 02:16:58 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 30db107dcf4380cef05efea409c2e6a3
96e6a306fbc07299aba64e5c14e2bfca35872fa9
b64051a4a8e346e3c72b2aef77f360a5736ab5e16711d8e0bae3876feaa15b6e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Alert, Content-Type, Content-Length, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sat, 24 Dec 2022 01:46:12 GMT
content-type: application/json
age: 1846
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 32167242c3bbe7e45a2a865279df94a6
d03436f418ff77d50a553daa892c05e0725ba908
d5578d537296da18f3f349a98465e9fe930dca60a8ed62c183e9c9f6eb53f493
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D5578D537296DA18F3F349A98465E9FE930DCA60A8ED62C183E9C9F6EB53F493"
Last-Modified: Wed, 21 Dec 2022 11:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2427
Expires: Sat, 24 Dec 2022 02:57:25 GMT
Date: Sat, 24 Dec 2022 02:16:58 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain
IP
File type PEM certificate\012- , ASCII text
Hash b1fcd419a4245617397846e8d17233f6
2a037ce244587640b27ead9a0ec2af4f862d91b2
e059b6d834c06e58494c43fb2ff42acbc27c1a1d8f7f30e2f32ca0e167599e2f
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-08-14-47-57.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: B4Rnj+yreS+5jBqeMPTLpx45KqntQ10EjwV48ABRQUspNSASw0hPX4/sJab7d+mMdS9P5n8pdyE=
x-amz-request-id: QMJHAE3FJ7TWEYRR
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sat, 24 Dec 2022 01:56:25 GMT
age: 1233
last-modified: Tue, 20 Dec 2022 14:47:58 GMT
etag: "b1fcd419a4245617397846e8d17233f6"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
pak-janggut.blogspot.com/search/label/Edisi
200 OK 14 kB URL HTTP/1.1 pak-janggut.blogspot.com/search/label/Edisi
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (4463)
Hash ee635e00f89e945612245805055db9a3
dc2ef709849bc2d72819163f5eeff321b9d80c29
ea5ab9b21e417cbc701328e5c18351a7cc90c0815d395933fdb77b385b0bb918
Analyzer Verdict Alert fortinet Phishing
GET /search/label/Edisi HTTP/1.1
Host: pak-janggut.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sat, 24 Dec 2022 02:16:58 GMT
Date: Sat, 24 Dec 2022 02:16:58 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 10 Dec 2022 14:53:52 GMT
ETag: W/"31ca276a91db0f797e92e975b9ca1bcbe641ad242c16fba93fa754407f6bad0d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 13480
Server: GSE
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 02:16:58 GMT
content-type: application/json
content-length: 12
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-expose-headers: content-type
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
200 OK 27 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash 88ed7d5a26ffff39cbae41fa7b2c615d
5ea49f5aeeb49e8abd640da2f6d657fb57cc5acc
52943bd40a595c39f84e23ddd74755daa4d013b55c709de9b312661e59103ab3
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 27266
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Dec 2022 08:01:28 GMT
Expires: Thu, 21 Dec 2023 08:01:28 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 238530
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
pak-janggut.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 pak-janggut.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: pak-janggut.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/search/label/Edisi
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sat, 24 Dec 2022 02:16:58 GMT
Expires: Sat, 31 Dec 2022 02:16:58 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 23 Dec 2022 19:49:45 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90
301 Moved Permanently 211 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d8e41aba175e30cec76c81840b918f0a
6dfb307f00233621fce9ab173f49cd06e2d87937
2385d24a0dd2d25233391aa35b037a002cd1c30b160c06a832047f8e6dd2c18a
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 211
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash d4e4d4a48ee18114b8518db65a17e250
865aa0d38ee7d823fb08c0320c59fa19d5f9e073
ca13416e5755f3340257b632260ab72602d6c8e660c4a07d93df424cdfafe8b1
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 249
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250
301 Moved Permanently 212 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 6dba0e0c6a1afb54d86bdd57c5d2943a
55a5a3d1bbcba2eda169245becb427b831299f6f
331bdbf606b5a7b744f95bbc31c6d5ecc4aa4e75ce50e308d4b6164217107957
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 212
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 12d9b2565cb5463a2454530f27a01c8e
f5826ca68e482a740cc0dfe6d541b5e552ddae26
db32e6ede2240f88efd408a33cf7befa41c3d12a21a5c8af362e5f0d03875d42
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 249
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097b324617b2c2f191bfa139ad222edc
c69136d4580356468142395f32d64586f5fa3b17
8f576320a0920bb31cb5b75dd2564ea5c9e9519ea05786c374d75318112b975a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 76d5cc6d4b48e04cf451b197f17f49f7
7689488740a4382ed6314a06e021e8099f58dd8b
b62cbcd7cc59b65e3b76b546d418d6351e252671f151197a0dfbb138215226a0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097b324617b2c2f191bfa139ad222edc
c69136d4580356468142395f32d64586f5fa3b17
8f576320a0920bb31cb5b75dd2564ea5c9e9519ea05786c374d75318112b975a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Dec 2022 15:56:25 GMT
expires: Sun, 17 Dec 2023 15:56:25 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 17 Dec 2022 07:49:59 GMT
content-type: text/css
age: 555634
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
apis.google.com/js/platform.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1429)
Hash 1cc36f699291ba29dab9ec0f885b281b
d536f8bda7d333c21eae8e3d816d690402adb90c
6b20ce0ec6b6c57b33e8118f8d5d3c501ede61b8589ebab71d411b81d0fae994
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20933
date: Sat, 24 Dec 2022 02:16:59 GMT
expires: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "4fcbc207c89b8c6c"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1197256859-widgets.js
200 OK 56 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1197256859-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 15d181d1185f956f34ef9d8cff4af838
41a3dfc3567601d72332b73abadda6031cdf593b
2c8823905cd520208804414a54a064a4f98e315a8b97cca381cfae0fe630b7e1
GET /static/v1/widgets/1197256859-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56470
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 18 Dec 2022 03:01:04 GMT
expires: Mon, 18 Dec 2023 03:01:04 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 18 Dec 2022 00:52:06 GMT
content-type: text/javascript
age: 515755
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/all.js
301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/all.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Sat, 24 Dec 2022 02:16:59 GMT
Connection: keep-alive
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 097b324617b2c2f191bfa139ad222edc
c69136d4580356468142395f32d64586f5fa3b17
8f576320a0920bb31cb5b75dd2564ea5c9e9519ea05786c374d75318112b975a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash f37c9faffd8b6d93a4994c02ff1d3d21
b41b823e9b33d7fff8c1670cf510edda28f7082b
7494a95cab50f2a0409796d95e999fc5add96030fba70be912c1c80124169bc6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
ocsp.digicert.com/
200 OK 471 B IP
Hash 1dff53e8811ed358c6312229839778e0
79b4bb8a649b28725355d550dcddedab8ce3b29c
8aa0e7c04e39ac810428a9cace465fc9d7fe99b0224443cdf2eed12b148260cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3955
Cache-Control: max-age=160321
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Etag: "63a620e9-1d7"
Expires: Sun, 25 Dec 2022 22:49:00 GMT
Last-Modified: Fri, 23 Dec 2022 21:43:05 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 3b11f652ae78d0bab9516066f8d129b4
22c6d3abf828642ea1859250a540cf6be05d362d
66ebb9c960f4c061993a45daac769d2e9de6ae79ad3659514460809586c9ebc5
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: e4e4ecc77798bc334c4671a105def70f
etag: "4309a7edd9bf848ee15bde2ca7f0c7e9"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sat, 24 Dec 2022 02:23:12 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: OxH2Uq540Lq5UWBm+NEptA==
x-fb-debug: x2Gsn9dHqS6GEAyWgjG1EHK0RbU2BpU13rfCVyjbdNKU2SgQnnzLmtqE2PZSuFq/x0lkME6s/m2ExTB7LmBjHg==
priority: u=3,i
content-length: 1687
x-fb-trip-id: 1904183273
date: Sat, 24 Dec 2022 02:16:59 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/geocity.php?c=geocity_rose&id=2052431&adult=0&cat=news
200 OK 2.0 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity.php?c=geocity_rose&id=2052431&adult=0&cat=news
IP
File type ASCII text, with very long lines (2149)
Hash 4b0c1a0d1aa4234cf191557e6bb22f21
4bbce4d28e0427fd5208694531db1b6687e0baf7
f8de6883280e63d4cd9b96b7e5e1cf657a2517f9ee1ac3bfb13eb52b62880cff
GET /geocompteur/geocity.php?c=geocity_rose&id=2052431&adult=0&cat=news HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/javascript
Content-Length: 2034
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Fri, 30-Dec-2022 02:16:58 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Sat, 31 Dec 2022 02:16:58 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=54OhG3Hv4Goyj3PEiKuyr1MzgMnWAjhv2VQvMZIfugtwPS3DorQEBMTamicrdGkKzVTaH0cOJO%2FTrk56ZGuoO976LPuV%2F5zMkpL%2F65ltZgyivhLPXRsWaYPoO%2FmhuE49"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77e5d688bfd9b509-OSL
alt-svc: h2=":443"; ma=60
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90
IP
File type ASCII text, with very long lines (704), with CRLF line terminators
Hash 9e2dcc9e5c7e07a21acc62d9887ca4d3
bd3a14abb1cab3850e02b635c420ecc7c8e4ff90
65e989d6c00e712c368bb428eafc6536ca7afcd645f85a92110bee63f3287eee
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 1336
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169954
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169954
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1169954 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250
IP
File type ASCII text, with very long lines (705), with CRLF line terminators
Hash adfd8af029773a14a599e4f1e0dfdcdb
423df289f331de553ecd55137608b01083292ec5
8789bac84fca2d914978fd37d5e16d390305eacfcaf7ffe527dd18255c2f9a98
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=300x250 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 1337
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 1dff53e8811ed358c6312229839778e0
79b4bb8a649b28725355d550dcddedab8ce3b29c
8aa0e7c04e39ac810428a9cace465fc9d7fe99b0224443cdf2eed12b148260cc
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3955
Cache-Control: max-age=160321
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Etag: "63a620e9-1d7"
Expires: Sun, 25 Dec 2022 22:49:00 GMT
Last-Modified: Fri, 23 Dec 2022 21:43:05 GMT
Server: ECS (ska/F70D)
X-Cache: HIT
Content-Length: 471
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169949
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169949
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1169949 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1167641
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1167641
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1167641 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right
IP
File type ASCII text, with very long lines (715), with CRLF line terminators
Hash d9492c86f50776d99fb5f87c897ef9bf
0251f6229dc4a3a5e4107e53fa3b605dc7ca5837
efec80690685737cb090cc20c82a4e5bf64a5ca33a6de6eccd87685ba618a96e
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=160x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 1346
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169953
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169953
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1169953 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom
IP
File type ASCII text, with very long lines (716), with CRLF line terminators
Hash 827c141790f7849e9867f2860fa0b292
72732598323b41317af2a371f53e16aab77a94fa
8e6319519e2a5a9ea185c720f7fc0da24e82a51842bd019871873c0c984cfff0
GET /tags.js?site=4b434a53d7981a49e81903f9d05b6efe&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 1346
X-Firefox-Spdy: h2
www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
200 OK 7.1 kB URL HTTP/1.1 www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (16367)
Hash ee9e4b9fc20367dd463a32f66e7a28f4
982752824ddf53b995df938f5db33191315cc3ee
ec0a71e077be1d57f7ba4807b09fc1d37543f7d4547fa9178789af6f1b35ec05
Analyzer Verdict Alert fortinet Malware
GET /samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741 HTTP/1.1
Host: www.samsengfb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
i66.photobucket.com/albums/h260/toonybug/templatestag.png
301 Moved Permanently 167 B URL HTTP/1.1 i66.photobucket.com/albums/h260/toonybug/templatestag.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h260/toonybug/templatestag.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i66.photobucket.com/albums/h260/toonybug/templatestag.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: -pstReY4Zw_9wOnj6LCHmHadpw0Y2IYc0YmFQvroAQ53BHAO-J4dGw==
Vary: Origin
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 22 Jan 2023 01:40:21 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 88596
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2gonh1Pfo%2FbvOwzdt%2B4gWuMFL5ElxNoWi%2Bip8QFXrmqO6AN%2BTuSDwlXsQCnHCHwsCmCQMOoXEufwxdSgXUkwWIPiFBSGGVdn%2Bi6caf38TYLN3YtHtWiUasVsNlGmA9kU"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77e5d68a8886b509-OSL
alt-svc: h2=":443"; ma=60
i155.photobucket.com/albums/s282/theviejo/recurso_9_7.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i155.photobucket.com/albums/s282/theviejo/recurso_9_7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/s282/theviejo/recurso_9_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i155.photobucket.com/albums/s282/theviejo/recurso_9_7.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: fcmYjEUY9xYxrckyYVMmTeUR9Jw88Sr3xMIHFAetvms_4GU0ucHl3g==
Vary: Origin
i66.photobucket.com/albums/h260/toonybug/background2-20.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i66.photobucket.com/albums/h260/toonybug/background2-20.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h260/toonybug/background2-20.jpg HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i66.photobucket.com/albums/h260/toonybug/background2-20.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: YiU0Co5esWvUxrODDU7NRNTpo2z6riOwqwnX7hXNAStppiAmFPMj-w==
Vary: Origin
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, ETag, Pragma, Last-Modified, Expires, Alert, Content-Type, Retry-After, Cache-Control, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sat, 24 Dec 2022 01:33:25 GMT
age: 2614
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.linkwithin.com/pixel.png
200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Fri, 23 Dec 2022 12:33:56 GMT
Expires: Fri, 06 Jan 2023 12:33:56 GMT
Cache-Control: public, max-age=1209600
Age: 49383
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 665 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (622)
Hash 2d69af566a62640964ed9dacf7e618e0
dba3846fa308ca0a74579bd32907e9aebc6813a3
2cfc1c7404ae46a2dd63d6d6f7c6d2edf625281e1c87b4e6b06706cfbece80fd
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 665
fonts.gstatic.com/s/molengo/v16/I_uuMpWeuBzZNBtQXbNakw.woff2
200 OK 14 kB URL HTTP/1.1 fonts.gstatic.com/s/molengo/v16/I_uuMpWeuBzZNBtQXbNakw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 14016, version 1.0\012- data
Hash eca165efaa8a5c693fcf7b3a26cef43b
b5b486f83648089b2653aacdcab3d4516a6aee98
31addde7fb28b34660534c075be0623c663561d371279da1ab9689761db6c7da
GET /s/molengo/v16/I_uuMpWeuBzZNBtQXbNakw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 14016
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 23 Dec 2022 14:08:29 GMT
Expires: Sat, 23 Dec 2023 14:08:29 GMT
Cache-Control: public, max-age=31536000
Age: 43710
Last-Modified: Tue, 26 Apr 2022 15:27:44 GMT
Content-Type: font/woff2
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi&href=undefined&rnd=0.6154249655364497&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 0
X-Firefox-Spdy: h2
i66.photobucket.com/albums/h260/toonybug/header2-12.png
301 Moved Permanently 167 B URL HTTP/1.1 i66.photobucket.com/albums/h260/toonybug/header2-12.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h260/toonybug/header2-12.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i66.photobucket.com/albums/h260/toonybug/header2-12.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 20UwpbyG-mn_TSJdyJQO2seLt2xK0fdfXwOQz60okCxHic34GlWtXg==
Vary: Origin
1.bp.blogspot.com/-xM0RUnRQQl4/UVQCVtyuDvI/AAAAAAABfJA/hUEHWtC4vT8/w72-h72-p-k-no-nu/Negara+China+Semakin+Panas!.jpg
200 OK 4.2 kB URL HTTP/1.1 1.bp.blogspot.com/-xM0RUnRQQl4/UVQCVtyuDvI/AAAAAAABfJA/hUEHWtC4vT8/w72-h72-p-k-no-nu/Negara+China+Semakin+Panas!.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash db14fb300b83cb95fa7a5cf34d5c661b
934210ef79b693a947be1d094a63e60f21915899
d1f0c18206b88e00e651d9c42def68ee0177db3a4b2eecf0b5db667aa915b2cc
GET /-xM0RUnRQQl4/UVQCVtyuDvI/AAAAAAABfJA/hUEHWtC4vT8/w72-h72-p-k-no-nu/Negara+China+Semakin+Panas!.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17c91"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Negara China Semakin Panas!.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 4227
X-XSS-Protection: 0
fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
200 OK 30 kB URL HTTP/1.1 fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29868, version 1.0\012- data
Hash 8b26cc331e323dda95ea6d0dcf4d7542
1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9
2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 23 Dec 2022 13:37:15 GMT
Expires: Sat, 23 Dec 2023 13:37:15 GMT
Cache-Control: public, max-age=31536000
Age: 45584
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/bentham/v18/VdGeAZQPEpYfmHglGWsxCQ.woff2
200 OK 18 kB URL HTTP/1.1 fonts.gstatic.com/s/bentham/v18/VdGeAZQPEpYfmHglGWsxCQ.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 17988, version 1.0\012- data
Hash bf6a5846cb67a28b10fc51624b7c2021
aecc7ba490ee2def0bec0ad3bd79ba0caa0a4347
cb9dc64865a8ff81a07712442c9647fe79d1b371cdcbad6047d46bc7ee8254da
GET /s/bentham/v18/VdGeAZQPEpYfmHglGWsxCQ.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 17988
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Dec 2022 08:33:15 GMT
Expires: Fri, 22 Dec 2023 08:33:15 GMT
Cache-Control: public, max-age=31536000
Age: 150224
Last-Modified: Tue, 19 Apr 2022 19:21:54 GMT
Content-Type: font/woff2
2.bp.blogspot.com/-rDPhGMWiwVk/UVAS1kqafxI/AAAAAAABe94/h1DHqw3r1cI/w72-h72-p-k-no-nu/Nadia+Seksi+Dancer.jpg
200 OK 2.7 kB URL HTTP/1.1 2.bp.blogspot.com/-rDPhGMWiwVk/UVAS1kqafxI/AAAAAAABe94/h1DHqw3r1cI/w72-h72-p-k-no-nu/Nadia+Seksi+Dancer.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 864cdb3ad2a6447a25686e13a42b4398
ab7460f71741c58941deeb4a86d9506769d9fb3d
701b75b4d82ff8b27839a45b38b9e202ec1b2ee1f6aa1b9e13b1037c30e5f9bd
GET /-rDPhGMWiwVk/UVAS1kqafxI/AAAAAAABe94/h1DHqw3r1cI/w72-h72-p-k-no-nu/Nadia+Seksi+Dancer.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17bdf"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Nadia Seksi Dancer.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 2704
X-XSS-Protection: 0
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 3bc9eef9d5ba6f78245b63c3cc28b9b3
1c45ae24eff740f1750b0f1734a206bf1b89089e
d9b7e8c336884aada39594925c128fc0f63ff1f7b211f4be6d1ea34d7b4181a4
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D9B7E8C336884AADA39594925C128FC0F63FF1F7B211F4BE6D1EA34D7B4181A4"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7494
Expires: Sat, 24 Dec 2022 04:21:53 GMT
Date: Sat, 24 Dec 2022 02:16:59 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/geocity_html.php?id=2052431&c=geocity_rose&size=&nostats=&title=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&ref=pak-janggut.blogspot.com&fullurl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi
200 OK 2.1 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity_html.php?id=2052431&c=geocity_rose&size=&nostats=&title=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&ref=pak-janggut.blogspot.com&fullurl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (309)
Hash 411dca21ec934a9e00135af6077d3bd1
cbff0ebb82e5b6c7df837255af79a4047a9dfc39
833bb1ec2b3f542ca45375d4280174a27c21be525019d87ce213f91d08a65edc
GET /geocompteur/geocity_html.php?id=2052431&c=geocity_rose&size=&nostats=&title=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&ref=pak-janggut.blogspot.com&fullurl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Fri, 24-Mar-2023 02:16:58 GMT; Max-Age=7776000; path=/
pays=Norway; expires=Fri, 24-Mar-2023 02:16:58 GMT; Max-Age=7776000; path=/
ville=Oslo; expires=Fri, 24-Mar-2023 02:16:58 GMT; Max-Age=7776000; path=/
idcompteurcc_2052431=done; expires=Sun, 25-Dec-2022 02:16:58 GMT; Max-Age=86400; path=/
online_idcompteurcc_2052431=done; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
originecc_2052431=United%2BStates%2523United%2BStates%2BCity%252314612%257CCanada%2523Canada%2BCity%25234911%257CCanada%2523Burnaby%25232314%257CUnited%2BStates%2523Boardman%25232264%257CUnited%2BStates%2523Chicago%2523844%257CUnited%2BStates%2523Fort%2BLauderdale%2523656%257CRussian%2BFederation%2523Moscow%2523630%257CNew%2BZealand%2523Auckland%2523528%257CGermany%2523Frankfurt%2BAm%2BMain%2523279%257CMalaysia%2523Kuala%2BLumpur%2523252%257CUnited%2BStates%2523Wilmington%2523242%257CUnited%2BStates%2523Los%2BAngeles%2523211%257CUnited%2BStates%2523San%2BJose%2523204%257CUnited%2BStates%2523Seattle%2523198%257CKorea%252C%2BRepublic%2Bof%2523Jungnang%2523183%257CUnited%2BKingdom%2523United%2BKingdom%2BCity%2523172%257CMalaysia%2523Malaysia%2BCity%2523165%257CNetherlands%2523Netherlands%2BCity%2523150%257CCanada%2523Toronto%2523145%257CUnited%2BKingdom%2523London%2523142%257CUnited%2BStates%2523Raleigh%2523128%257CRussian%2BFederation%2523Kazan%2523128%257CUnited%2BStates%2523Lenexa%2523114%257CIreland%2523Dublin%2523107%257CUnited%2BStates%2523Las%2BVegas%252399%257CRussian%2BFederation%2523Saint%2BPetersburg%252397%257CUnited%2BKingdom%2523Bath%252396%257CSingapore%2523Singapore%252382%257CKorea%252C%2BRepublic%2Bof%2523Korea%252C%2BRepublic%2Bof%2BCity%252381%257C; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
online_2052431=1; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
jour_2052431=1; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
total_2052431=34294; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
bonus_2052431=2456; expires=Sun, 25-Dec-2022 02:16:58 GMT; Max-Age=86400; path=/
bonus_j_2052431=1; expires=Sat, 24-Dec-2022 02:19:58 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Sat, 24 Dec 2022 02:19:58 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ErL3RuQZVnmEZisUtgTbIjWDDTR%2F0dWqCT47E068%2FyhlREShNpz7Tc8vEOr8Hfdwgv6w%2FcUo8XV3%2B7V2KhWCBulr%2FvrDHR5cBvB6YbJF6B9r8vXrZVnHWmVWwgz4dWcW"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 77e5d68b88e0b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
i66.photobucket.com/albums/h260/toonybug/templatestag.png
200 OK 6.1 kB URL HTTP/2 i66.photobucket.com/albums/h260/toonybug/templatestag.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 034aa733dacc7922e2d827d110a6277b
2bc7f2d7a43f541078f389e430a513d42451165b
aa1194a4bde2d3989823fb461bff38780122f52b25260bd8bbf4ae269627dd46
GET /albums/h260/toonybug/templatestag.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/webp
content-length: 6098
date: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="templatestag.webp"
expires: Sun, 24 Dec 2023 02:16:59 GMT
server: photobucket
x-amzn-trace-id: Root=1-63a6611b-5b05b00a5ecc68f44f2e94fe
x-request-id: F9atuDl0sptTlrngOAUc0
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: RZv16htOEewA47H1PBjZyRF7WRvbtWwwI9yVYVjUM8P2FrDOSarzpg==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 280 B IP
Hash ecaeb3538bba424b6358a6998090c2ba
754d9093717e933bf4deb0881115c31aee03de06
e97481357faca122fed8414b1766af345c6a888d26fb67a6c0b6ee828dffe589
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6097
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Last-Modified: Sat, 24 Dec 2022 00:35:22 GMT
Server: ECS (amb/6BB9)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 280 B IP
Hash ecaeb3538bba424b6358a6998090c2ba
754d9093717e933bf4deb0881115c31aee03de06
e97481357faca122fed8414b1766af345c6a888d26fb67a6c0b6ee828dffe589
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 842
Cache-Control: max-age=112197
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Etag: "63a57116-118"
Expires: Sun, 25 Dec 2022 09:26:56 GMT
Last-Modified: Fri, 23 Dec 2022 09:12:54 GMT
Server: ECS (amb/6BBA)
X-Cache: HIT
Content-Length: 280
ocsp.digicert.com/
200 OK 471 B IP
Hash c615c937e6371bda0824b44af0c21c74
b097d69452bcc60085f563d094388185c26f0e7d
9f1194921b5d57dd52a217a47e69ad4cec7c08378c73c8dfccc3817119fcbb41
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 231
Cache-Control: max-age=111219
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Etag: "63a56fa7-1d7"
Expires: Sun, 25 Dec 2022 09:10:38 GMT
Last-Modified: Fri, 23 Dec 2022 09:06:47 GMT
Server: ECS (ska/F70E)
X-Cache: HIT
Content-Length: 471
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash a1e8bbf68deda6229b0676065fdfa973
a4aed1028ce1a034a9f8129e39539ca55d0c4941
a8701f531418056e1db9498fd127e3650e7139bd19cca1480ecdde1e14fce5d3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A8701F531418056E1DB9498FD127E3650E7139BD19CCA1480ECDDE1E14FCE5D3"
Last-Modified: Thu, 22 Dec 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4494
Expires: Sat, 24 Dec 2022 03:31:53 GMT
Date: Sat, 24 Dec 2022 02:16:59 GMT
Connection: keep-alive
www.buatcoklat.com/images/banner03.gif
302 Found 0 B URL HTTP/1.1 www.buatcoklat.com/images/banner03.gif
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /images/banner03.gif HTTP/1.1
Host: www.buatcoklat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: https://d39f23jfph0ylk.cloudfront.net/buatcoklat.com.gif
vary: Accept-Language
content-language: en
connection: close
statinside.com/counter.js
200 OK 3.6 kB URL HTTP/1.1 statinside.com/counter.js
IP
ASN #49981 WorldStream B.V.
File type exported SGML document, ASCII text, with very long lines (8377)
Hash 5ad34b4389f75ee0d7671e8af0920867
f773036162087644d3e2e7398b7df95203d7621a
21238be1d8176abcc722cf04564b3d18baef74bc35b3383ead9d2b29e9c747e5
GET /counter.js HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/javascript
Last-Modified: Fri, 16 Dec 2022 13:34:03 GMT
Transfer-Encoding: chunked
Connection: keep-alive
ETag: W/"639c73cb-20ba"
Content-Encoding: gzip
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 14 Jan 2023 19:09:54 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 716823
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=US%2Fq4KOKAntzvvegxl8jTYtU7A9aCp8Dg3yx6D9NlkTVRAMUDcTZCHume1g89pvE5Xu0DO6XAhQQYojdDB9d%2F2s1reIC%2F%2FnFUkS2XZHXllvYCSdpdjyls3BBIFk4FzP6"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cce71b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 20 Jan 2023 20:38:16 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 193122
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A6c3bolLZxFU%2FpripSGq7DuXjLcXyUNCmLc8tNWV4m%2BnYXfS6mLok3d0KSy9WldVQcd6B6feNK27i13LOXP7Muo7pX4EURlPRI2vFSFzlwUxyeVt6%2Bneh0Yd2UjlZak%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cce73b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_new%20zealand.png
200 OK 940 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_new%20zealand.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8719b63ac81155fd64422298ef8a8b25
c034b5869772ddf1675ebdbeb3c0d3c540738c24
b313f56a36c855a1a34a02b96910ee4307e553a28a6e52bc64e2ab1bc2cfdae5
GET /geocompteur/shadow/flag_new%20zealand.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 940
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1173
content-disposition: inline; filename="flag_new%20zealand.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 21 Jan 2023 12:43:23 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 135215
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=MYXmR8WGZ01qd4TjIxwIxokWFCh1tD5MD%2FGHdpr6fyIIwpVFAeV2GbgUwPT%2Bo1MmDd5KhCZKuEpK8lfxKkBkB7lrFAv0ymZDX0HXB5kxl%2FbWnbjhAP2S7FslcTdRlfuW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cce76b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
200 OK 680 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 852881aef6d6a8bca3123c3201f64c74
0e5ef2c61383bb79c8a6ea068d9a688631d844fa
41c20a2d0dc8fe26ec1e5c7e71b5d82fc09e7ce0bd30db7abb516474f5c186a1
GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 680
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=857
content-disposition: inline; filename="flag_russian%20federation.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 28 Dec 2022 03:12:56 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2243042
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZ%2F91TuJL2JSCLBZTwF0dByxwCDV50IbzG7CorczY38%2FWW5QFCahsztNYeyhWrGSQ2c7EEYrLQzpN5FePgRdVYSuAmWiCe6hJ53a7%2F9ayVuI5Ws9neCBckdYaBvkFaJh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cce75b4f9-OSL
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 1e427b660d9b9ed6dfb71281f71a39ab
ecda9e0024b7d3a40422699479294c3973489376
b426117bd7f44e35c57e7123735e9a61b9b9db94867cf0b2670e0a2488a951da
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "B426117BD7F44E35C57E7123735E9A61B9B9DB94867CF0B2670E0A2488A951DA"
Last-Modified: Fri, 23 Dec 2022 06:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2885
Expires: Sat, 24 Dec 2022 03:05:04 GMT
Date: Sat, 24 Dec 2022 02:16:59 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 13 Jan 2023 23:14:00 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 788578
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=qsQ%2B7fR46vQfiv0ZrUX9tiT4AW%2FWpONCl1pmrPumNLSI1A5MXy6%2B3H9rYuaa17Ln6AmT8vn1exYF76caNyqO5BwxiUF9odcCNaBJlJaZLoxX%2F9zKRMpFzNnCgG3tN6Jx"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde7ab4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocity_html.php?id=2052431&c=geocity_rose&size=&nostats=&title=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&ref=pak-janggut.blogspot.com&fullurl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 20 Dec 2022 16:36:20 GMT
ETag: W/"63a1e484-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GbyZ2aRuMd8RlK3o4zyHQ7lPU4SdTDWYAXLiaTigTT%2BsWsTpJObfFj6L4REIsbwyDna7wcb1RIkyaxO9n3tUJLP1PrFWZvLHe%2FTumxAzM2DX6fsi48lmlLPeGWSO9cYv"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77e5d68cd962b509-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Mon, 26 Dec 2022 02:16:59 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/shadow/flag_malaysia.png
200 OK 990 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_malaysia.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash b69697ab6effe9c72ebc0d4768d9f8bc
806c9c63795f99ce88b81475741fe06b1346a94d
1a473a4d01199896dd76d0882be0aa5e3a9ada7201e4d21f61c74ec3ee5463da
GET /geocompteur/shadow/flag_malaysia.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 990
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1216
content-disposition: inline; filename="flag_malaysia.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 22 Jan 2023 01:29:45 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 89232
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=YwrP8OmMQXNh4jtRT3pf8onhfrbSDPex6nUAHpqiHmeF6uEVRvk6HnHYfQjY%2BJk1KvgwWyFtlAHIUd0NIFXTU%2FOj5GSZyrh6Nx7aNNL42bA5M6HyXLt4x7wcXFSDo051"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde7fb4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
200 OK 1.9 kB IP
File type HTML document, ASCII text, with very long lines (673)
Hash d24b386f757ff8ddd1fa4e4760583467
3e0a898989b4266f08b2f766c2df617c490293e8
adb59bdd376230223cda4c2272014169e46e9187917d1be426ca2bedcb13635d
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=3693
cache-control: public, max-age=604800
expires: Sat, 24 Dec 2022 09:02:48 GMT
last-modified: Wed, 12 Oct 2022 00:08:47 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 580450
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=WsWSMM%2FPsWHN3QxGQF198iSZe2Ik1NX9421n7wUF6ISSO8YnymsowX4ApxMtOyKZ548MOEty%2F3gYJmkM7%2BTBVDmSfpOJ5nAuEYeqaO%2FZJ8euxTGIcgVIPXQwshtNbgmQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cae68b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
200 OK 1.2 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0fca0f8c1f72968c8849d783accae326
6d6f3b4500a3f1fccc3474d59c716b2f60a59ea4
c1319ad29f9822f08a6740f0b89e91127cfb11a449f99528f0a7928156032c9e
GET /geocompteur/shadow/flag_united%20kingdom.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 1220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1459
content-disposition: inline; filename="flag_united%20kingdom.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 27 Dec 2022 07:58:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2312285
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3ol%2BHmqGtjoEOWITSzyJY9TlGE5CxxQ2oFnUoszFz1D1JG%2BPEvMN%2FZV4Y3iCstcS8pyyv3z5yyoU3iQq3Jvm2i99SXqmApWK5xN1YwqYRfsJqoi9X5cfjA1pCIzkVJAB"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde83b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_ireland.png
200 OK 712 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_ireland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e55f246106bcd5ae49ef1a026ec80d3
a5afe18fe64456cbb16e31287f4106228267f584
eaf4b1563a65fb7bd06ace795835a00a4f491a48506996bd65c161d35002351e
GET /geocompteur/shadow/flag_ireland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 712
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=937
content-disposition: inline; filename="flag_ireland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 22 Jan 2023 13:30:46 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 45972
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2F2Eh0EoNWRqx2unClOqunZLuU%2BNeqjjLiV3HCscmIsAwXooM9uW0a87CKlgRc0plMlm3qrZiDAjMLE%2F54Xje3jGDe3VgFy%2FUdbEn%2B6cxJTJVgzrf5MtluKy4bFGIW4QD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde87b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_netherlands.png
200 OK 710 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_netherlands.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4d48534384964664d122ef558ebf1acd
8cbccb6b66f6161c329f9945b58e79e09640cc90
286ee399704cd53efeabbca51dfc8459fb9633265ae4e9e046610f7d61d087bb
GET /geocompteur/shadow/flag_netherlands.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 710
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=892
content-disposition: inline; filename="flag_netherlands.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 21 Jan 2023 03:22:26 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 168873
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rCtJAPVYt4ruNrj8zGCcPFm3XAd%2F%2FV9N%2BiBx7Qt%2B0HyBng1SHbbVq%2BRPRdvVU%2FqxVwI4fezjFUNzHDYRNeXbQCc8fEZmM29wzTm2o7QxHtVA7P8bDEQz5yWjla4%2FkRu8"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde84b4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_singapore.png
200 OK 768 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_singapore.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 931d98f74f8bbb82364a40f7c3c5ea3b
f844a679d51126b38659a25e9c71c748da392714
04f122230781518f0b5807695a1c731e33bea9ba0264d612c799485074204627
GET /geocompteur/shadow/flag_singapore.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 768
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=939
content-disposition: inline; filename="flag_singapore.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 03 Jan 2023 21:38:37 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1658302
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=rLtgq3aX9y7FsLFPneWsoTo5tMnZuXcjtrbf9F8QSotjdsooDc7Gx0Q%2BXHl4ugXeU8hujn8R%2FHUtsFoHT5I7GbNE4lufcmBraVN51VfGubmWP5Wtj1u40bFo%2FxOySvDP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cee88b4f9-OSL
X-Firefox-Spdy: h2
1.bp.blogspot.com/-FKnrqMv8zQk/UU_0DbR3UwI/AAAAAAABe8M/94DbubkMI9g/w72-h72-p-k-no-nu/almy+nadia.jpg
200 OK 5.0 kB URL HTTP/1.1 1.bp.blogspot.com/-FKnrqMv8zQk/UU_0DbR3UwI/AAAAAAABe8M/94DbubkMI9g/w72-h72-p-k-no-nu/almy+nadia.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, description=Almy Nadia - MAJLIS DOA SELAMAT DAN PELANCARAN FILEM 4 MADU, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7445bbcb870eac69690129e9bf030c22
b53014de49581764c89280efeee16ad29b413212
2ce37c11b36ba515d52ef84780be47eb64686800fd546fb637e5210006d31122
GET /-FKnrqMv8zQk/UU_0DbR3UwI/AAAAAAABe8M/94DbubkMI9g/w72-h72-p-k-no-nu/almy+nadia.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17bc4"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="almy nadia.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 4999
X-XSS-Protection: 0
2.bp.blogspot.com/-mBe-9zr39bk/UFqdOJC2vvI/AAAAAAAAjwo/aRRvG7U9cXE/w72-h72-p-k-no-nu/anwar+ibrahim.JPG
200 OK 2.2 kB URL HTTP/1.1 2.bp.blogspot.com/-mBe-9zr39bk/UFqdOJC2vvI/AAAAAAAAjwo/aRRvG7U9cXE/w72-h72-p-k-no-nu/anwar+ibrahim.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash b278e546d755ecf0506758eea3b069f9
ed2976bc479a480c875e9140b283d23279c81867
4b3f052870f596408c3d279c3e1d5c7a03a6986d0ea12d0af908d8af87f047be
GET /-mBe-9zr39bk/UFqdOJC2vvI/AAAAAAAAjwo/aRRvG7U9cXE/w72-h72-p-k-no-nu/anwar+ibrahim.JPG HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8f0a"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="anwar ibrahim.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 2172
X-XSS-Protection: 0
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
s10.histats.com/js15.js
200 OK 4.4 kB IP
File type HTML document, ASCII text, with very long lines (11088), with no line terminators
Hash 688a4c6f6b98b3bfb618172e90695341
432a0d43c31e466673d13308db9e1ba5e519619c
becf42e9318b096cf691c11947c601c75b0b5ba2a6421fd2e676f62c646c17c5
GET /js15.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
date: Sat, 24 Dec 2022 02:07:54 GMT
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 116623403
etag: W/"980881274"
content-type: application/javascript; charset=UTF-8
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
content-length: 4405
x-iplb-request-id: 5B5A2A9A:8BB4_2E69C9F0:0050_63A6611B_2128:15D5E
x-iplb-instance: 40744
lh6.ggpht.com/-SLaBZNnuPC8/UFlUJ1I16BI/AAAAAAAAjGU/0ebdhiYhMl0/image_thumb.jpg?imgmax=800
200 OK 23 kB URL HTTP/1.1 lh6.ggpht.com/-SLaBZNnuPC8/UFlUJ1I16BI/AAAAAAAAjGU/0ebdhiYhMl0/image_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 244x184, components 3\012- data
Hash dd9fdb1257d1fa9d0c2d80122c896bd4
55ea0e142e02f322a53dbcc7332d32b030e25a6f
4d3c9f89fb7a0561c1e1d55e7757d4fcae9dc1ef5bdad0faae74509dc872621a
GET /-SLaBZNnuPC8/UFlUJ1I16BI/AAAAAAAAjGU/0ebdhiYhMl0/image_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8c65"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="image_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 23335
X-XSS-Protection: 0
www7.cbox.ws/box/?boxid=438668&boxtag=56x6cw&sec=main
200 OK 653 B URL HTTP/1.1 www7.cbox.ws/box/?boxid=438668&boxtag=56x6cw&sec=main
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d0d05a23cb23fe35908361694e15b565
d14818ca4dc04d998081b92c3975ff6e9f6dcdea
1fe598dd28104053751c17c7371ef1e42ec25c08b513993cbc93a4f6b4b9c716
GET /box/?boxid=438668&boxtag=56x6cw&sec=main HTTP/1.1
Host: www7.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 17 Nov 2004 05:00:00 GMT
Last-Modified: Fri, 24 Dec 2021 02:16:59 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Cache: MISS
Content-Encoding: gzip
www7.cbox.ws/box/?boxid=438668&boxtag=56x6cw&sec=form
204 No Content 0 B URL HTTP/1.1 www7.cbox.ws/box/?boxid=438668&boxtag=56x6cw&sec=form
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=438668&boxtag=56x6cw&sec=form HTTP/1.1
Host: www7.cbox.ws
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 204 No Content
Server: nginx
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Sun, 24 Dec 2023 02:16:59 GMT
Cache-Control: public, max-age=31536000
X-Cache: MISS
lh3.ggpht.com/-95STl0NlmZ8/UF-EJoGl9NI/AAAAAAAAmVg/M_i0VuiCz-c/w72-h72-p-k-no-nu/po_01.1_thumb.jpg?imgmax=800
200 OK 3.6 kB URL HTTP/1.1 lh3.ggpht.com/-95STl0NlmZ8/UF-EJoGl9NI/AAAAAAAAmVg/M_i0VuiCz-c/w72-h72-p-k-no-nu/po_01.1_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 264e1c14d2cebdf22b13d329c1f22808
4b6f969bbf0248be1034eb776ae63f463e3010cf
b17ad3b61daaef9033c3018273240b2fab2a48b7fdd325e93d761ddee26e5d82
GET /-95STl0NlmZ8/UF-EJoGl9NI/AAAAAAAAmVg/M_i0VuiCz-c/w72-h72-p-k-no-nu/po_01.1_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v9958"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="po_01.1_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 3570
X-XSS-Protection: 0
4.bp.blogspot.com/-r2e2m8EAjLA/T-s9-dah_SI/AAAAAAAAEOk/goafVAo4MUY/w72-h72-p-k-no-nu/raja+azmi+lambai+2.jpg
200 OK 3.4 kB URL HTTP/1.1 4.bp.blogspot.com/-r2e2m8EAjLA/T-s9-dah_SI/AAAAAAAAEOk/goafVAo4MUY/w72-h72-p-k-no-nu/raja+azmi+lambai+2.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash dfbdf5fa0afcc078b4271cfb543c3089
1464a146850d89cd9942834804a46d4db6ee505d
2d982d42c8dbdd9fc781e832e79bbbb72fffd0f341e44e667860ceee38ea1b3a
GET /-r2e2m8EAjLA/T-s9-dah_SI/AAAAAAAAEOk/goafVAo4MUY/w72-h72-p-k-no-nu/raja+azmi+lambai+2.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v10e9"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="raja azmi lambai 2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 3370
X-XSS-Protection: 0
lh6.ggpht.com/-aPd-Q2up9is/UfnTeyMl75I/AAAAAAABzAU/bm2TTgPVFBI/w72-h72-p-k-no-nu/1013400_177175285783447_129086622_n1_thumb.jpg?imgmax=800
200 OK 3.8 kB URL HTTP/1.1 lh6.ggpht.com/-aPd-Q2up9is/UfnTeyMl75I/AAAAAAABzAU/bm2TTgPVFBI/w72-h72-p-k-no-nu/1013400_177175285783447_129086622_n1_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 669cd2e5aaba5c409c6119fa61f87503
33ca74c488dea7f88baa94e46b973159c0ce49e4
de49189aabff54c452860dc1411c15d116768afba903cde1e2a83bef6cd0ead4
GET /-aPd-Q2up9is/UfnTeyMl75I/AAAAAAABzAU/bm2TTgPVFBI/w72-h72-p-k-no-nu/1013400_177175285783447_129086622_n1_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1cc06"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1013400_177175285783447_129086622_n1_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 3815
X-XSS-Protection: 0
i155.photobucket.com/albums/s282/theviejo/recurso_9_7.jpg
200 OK 866 B URL HTTP/2 i155.photobucket.com/albums/s282/theviejo/recurso_9_7.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash cc4c3239458044ac24fec670759abe98
1d82930aeb5ee83c27c9cf18e4032c5ccc79fa9e
7e7869c41d518540d17a4197002c2d327bb3b39714f2ae67ede24aeaabc2a6f9
GET /albums/s282/theviejo/recurso_9_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 866
date: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_9_7.webp"
expires: Sun, 24 Dec 2023 02:16:59 GMT
server: photobucket
x-amzn-trace-id: Root=1-63a6611b-48ab5d9f5331a70470ac2362
x-request-id: ifG3YwAIEQJpYNfgjTnHZ
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: v-gv9T8lhboeo4xNxS5ZBvS_S0feyrHEGKTOb3aLHiYd3crCD6fJNQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-eoVchlcTns4/UVUIdFvE7wI/AAAAAAABfLs/iDN7ZYIQGjE/w72-h72-p-k-no-nu/SAZZY-565x506.png
200 OK 10 kB URL HTTP/1.1 4.bp.blogspot.com/-eoVchlcTns4/UVUIdFvE7wI/AAAAAAABfLs/iDN7ZYIQGjE/w72-h72-p-k-no-nu/SAZZY-565x506.png
IP
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 418a303623aa38fa843eacb7f16b707a
813fbdc6d64f474bc21627eefcdae98e91c81840
8284d95dfd19797701509a6559fcb968a211c1f5518118e79f61a0735aa2ef5e
GET /-eoVchlcTns4/UVUIdFvE7wI/AAAAAAABfLs/iDN7ZYIQGjE/w72-h72-p-k-no-nu/SAZZY-565x506.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v17cbc"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="SAZZY-565x506.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 10494
X-XSS-Protection: 0
i66.photobucket.com/albums/h260/toonybug/postimage.png
301 Moved Permanently 167 B URL HTTP/1.1 i66.photobucket.com/albums/h260/toonybug/postimage.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h260/toonybug/postimage.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i66.photobucket.com/albums/h260/toonybug/postimage.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: bTgSTSQk4TugnM_Kj1qwc9VBDDOLYZITrLUBaAFmFmxRAYRUEpoFQA==
Vary: Origin
lh6.ggpht.com/-BKWpN4S7sSs/Uu8UuLO2o-I/AAAAAAAB1C0/9QRhZM9KcIU/w72-h72-p-k-no-nu/Gambar%252520Shila%252520Amzah%252520terkangkang%252520undang%252520kontroversi%252520di%252520Instagram_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.5 kB URL HTTP/1.1 lh6.ggpht.com/-BKWpN4S7sSs/Uu8UuLO2o-I/AAAAAAAB1C0/9QRhZM9KcIU/w72-h72-p-k-no-nu/Gambar%252520Shila%252520Amzah%252520terkangkang%252520undang%252520kontroversi%252520di%252520Instagram_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash ac7999b071bec0fa1c7617722ad98fd8
f6c67842f940e1abdf49b46293305cd2bba90e46
1d302669b15d68601ed269457cb820d3f7dae650fb3a07aea041d3222d024526
GET /-BKWpN4S7sSs/Uu8UuLO2o-I/AAAAAAAB1C0/9QRhZM9KcIU/w72-h72-p-k-no-nu/Gambar%252520Shila%252520Amzah%252520terkangkang%252520undang%252520kontroversi%252520di%252520Instagram_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d42e"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Gambar Shila Amzah terkangkang undang kontroversi di Instagram_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 3505
X-XSS-Protection: 0
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 669 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (626)
Hash cdba1423b83e5addc3a676b7e8cc27e8
2587c37e2ba67c2c7b91df653a0efae4c72dbb2c
cc2fb49d66cac55229025e4b35dae31612f9ce065b3fc0cb26f600b70b838022
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:16:58 GMT
Content-Length: 669
cleverjump.org/hit?z0;s1280*1024*24;f7gKFW1TM7SnODyZHl2tWdusJKxg6ji;cshb2;r;uhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23;hPak%20Janggut%20Tukang%20Cerita%3A%20Edisi;0.6509194894543967
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;f7gKFW1TM7SnODyZHl2tWdusJKxg6ji;cshb2;r;uhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23;hPak%20Janggut%20Tukang%20Cerita%3A%20Edisi;0.6509194894543967
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;f7gKFW1TM7SnODyZHl2tWdusJKxg6ji;cshb2;r;uhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23;hPak%20Janggut%20Tukang%20Cerita%3A%20Edisi;0.6509194894543967 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=iCJxLmwIjIsPuDRrlfS3c4BzkTxdnj; expires=Sun, 24-Dec-2023 02:16:59 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
lh3.ggpht.com/-OpFqdB1MeSE/UOuFv-Y8wvI/AAAAAAABNCY/hcrBu2IodSA/w72-h72-p-k-no-nu/01_thumb.jpg?imgmax=800
200 OK 3.7 kB URL HTTP/1.1 lh3.ggpht.com/-OpFqdB1MeSE/UOuFv-Y8wvI/AAAAAAABNCY/hcrBu2IodSA/w72-h72-p-k-no-nu/01_thumb.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 88cc024353c47daee9d9798f5eab9632
e2a724a788e1452e6d4292864dc26488c1bb02b6
a80f9abfe3c942342d344d934a165ab4ae372d73e5a61225e6e1cfd33397b701
GET /-OpFqdB1MeSE/UOuFv-Y8wvI/AAAAAAABNCY/hcrBu2IodSA/w72-h72-p-k-no-nu/01_thumb.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v13426"
Expires: Sun, 25 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="01_thumb.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sat, 24 Dec 2022 02:16:59 GMT
Server: fife
Content-Length: 3698
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 280 B IP
Hash ecaeb3538bba424b6358a6998090c2ba
754d9093717e933bf4deb0881115c31aee03de06
e97481357faca122fed8414b1766af345c6a888d26fb67a6c0b6ee828dffe589
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Etag: "63a57116-118"
Server: ECS (amb/6B7D)
Content-Length: 280
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash dc2725df0fb812e32298bb7faaf0c231
4ce4ac649b05b8eedab5bda51f4baf5f98417689
1a60eb1f9b71718c2061dfeb9de8241bef6fecab5d48adbc8ce3a89d1dddb8f5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i66.photobucket.com/albums/h260/toonybug/divider-9.png
301 Moved Permanently 167 B URL HTTP/1.1 i66.photobucket.com/albums/h260/toonybug/divider-9.png
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/h260/toonybug/divider-9.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i66.photobucket.com/albums/h260/toonybug/divider-9.png
X-Cache: Redirect from cloudfront
Via: 1.1 6a757ab2991da716151f94ca00b38098.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: S65W-gkaD3OLVZPAUWF47JujQgNO2rhWfHCJNX0-VcizqffOrH2b7A==
Vary: Origin
www.widgeo.net/geocompteur/img/tmp/earth_red.png
200 OK 2.6 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/earth_red.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 58980cc45f0ee0efffdc30ade3c1e295
ed75a1ea320a5a5993f2d8c27b2873bde09364e7
e994d6dfb98c97b89266605ccb40fade20b65078c94749428fd2d2485725a602
GET /geocompteur/img/tmp/earth_red.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_rose
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 2616
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3362
content-disposition: inline; filename="earth_red.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sat, 21 Jan 2023 14:53:05 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 127433
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=8ORTmGLtWArdMnAaQbDUR0SJBtJ1%2FT2BKNwa5hrTS9YVYI75tGkBwHotxGMfbch%2F1oXX5DkmXVw8nfHtxpIFUA4L7RzhCnsJ8hpTS8XmcpM23ovrgaMoCwKShPIkSSiq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68e0f3ab4f9-OSL
X-Firefox-Spdy: h2
statinside.com/api/add-page-view
200 OK 115 B URL HTTP/1.1 statinside.com/api/add-page-view
IP
ASN #49981 WorldStream B.V.
File type JSON data\012- , ASCII text
Hash 99610b8b464a4e4dc52c2e0453ddf105
5abf4bd225da5b8bd9d32f411058d626e33a2639
14e4143d20b8510e95bd3aca56c4f10d906ee571ad29ba9a8ef856442c585d95
POST /api/add-page-view HTTP/1.1
Host: statinside.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 256
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: application/json; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: *
Content-Encoding: gzip
www.widgeo.net/geocompteur/img/tmp/geocity_rose.png
200 OK 1.5 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/geocity_rose.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash fd8fcb06a3c68c043307fabecea3593f
0e5bc3f93162c0ead5a509577d5e044220bb0a34
20b0d8b04ef5ea8054fa50e23cb038e81f2af5b15bde64a1af632a9a65e6c5b9
GET /geocompteur/img/tmp/geocity_rose.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_rose
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: image/webp
content-length: 1456
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=2256
content-disposition: inline; filename="geocity_rose.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 22 Jan 2023 14:50:41 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 41178
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eXWhoWzqgkVD2st0wJMJ4Mg31jKY0LI5grslFnkfL69DyohwLtqTX1Q8Wi94K%2B%2FTwXWMLcbKZ0Pzgpuk%2FCCaM4dwxmjQn6rFCIiYfhRTEpJhd4CKnUEnyzsoWpZG9B0v"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68e1f3db4f9-OSL
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
200 OK 0 B URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: application/javascript
content-length: 0
cf-bgj: minify
cf-polished: origSize=4360
cache-control: public, max-age=604800
expires: Fri, 30 Dec 2022 10:03:24 GMT
last-modified: Sat, 01 Oct 2022 00:32:25 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 58413
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eN0HiVyR89Jt%2B43bZYlYUhZ5b30LLdJrKgyS5D5Aa21CZ%2B%2Bn1OrGf%2BxfksaWbGhy1z%2FRa4oKaqTxmIzjo1rMnRIUGSy3Cmib79hQR091opBETSUhXt50Uf7%2BgkDzg4lY"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68e1f42b4f9-OSL
X-Firefox-Spdy: h2
d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
200 OK 1.2 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/activejs/bdv_fsthd.js
IP
File type ASCII text, with CRLF line terminators
Hash 263303c015aaddbd3c417327b3b50823
c5c4f7ec9f5c1a2cfafad6b5810ed0da2080d3cb
871bcbf1631eba9d4218fddb8dd96a075fdf33725e1ff991b345808c15c66617
GET /activejs/bdv_fsthd.js HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: application/javascript
Content-Length: 1199
Connection: keep-alive
Last-Modified: Thu, 14 Jan 2021 11:27:17 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Fri, 23 Dec 2022 20:27:04 GMT
ETag: "977ef3668ead61:0"
X-Cache: Hit from cloudfront
Via: 1.1 d9fb4c3794a085bb4ee2c5798c2cb1b8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: KcgeNW35_CplxFfUuqLmtWPHpg6Os7q4-xowCqn6lozW_HOJrH-bzA==
Age: 21059
d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
200 OK 2.9 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/88x726.css?cbst=2
IP
File type ASCII text, with CRLF line terminators
Hash 4168b5a2517e8d07be159017f22759e7
ade414bcff8b8babb58bf6369fdbc7b8e2cf67b6
816427321da11d1632fac7711648e373bcbc01cf8b7b372d7b9178827906430a
GET /css/88x726.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2866
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:19:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 01:14:28 GMT
ETag: "8ae83247890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 5P83fIQRGPgK0QrLXpVlej-G1q8clCAxRzoDJuw0LCx7ENmAth0NdQ==
Age: 3986
d2b9l3u54v5v39.cloudfront.net/css/default.css
200 OK 1.5 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/default.css
IP
File type ASCII text, with CRLF line terminators
Hash 8ea20baef891abad5a169261301f1b0d
b983c5b36da773d38fc2d9d56fb1e462080ac0f8
27306e4a14ab04d39e59d9d73d6fac0fca90bbab3da5d9358c0000b9119c90af
GET /css/default.css HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 1489
Connection: keep-alive
Last-Modified: Mon, 21 Sep 2015 08:25:40 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Fri, 23 Dec 2022 22:28:32 GMT
ETag: "70d0ec1947f4d01:0"
X-Cache: Hit from cloudfront
Via: 1.1 8ac66e1d6983a0f44cf391b1ec3b1cce.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: zMAZanHE_LrHAVGU43OuV8mBk5Lb3gOlUZXwET91SO1y-ULhLTulwA==
Age: 15653
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=300x250&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7345938087960949&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:16:58 GMT
content-length: 0
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK 25 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash cc24419c482370498f3c227ac73d666b
37fc103ace873f47102e0ca88eb4735bc6806750
152fa070788f0cf29dc062f03860897c39c7ffa13e6eee2dc3e5dc131ecbc7aa
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 17 Dec 2022 12:33:42 GMT
expires: Sun, 17 Dec 2023 12:33:42 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 567797
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: BkLweSg8tiBgpXoHmQZlWw==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: xPBLJ/9wSDHgFH2urlSIdqbOAzk=
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sat, 24 Dec 2022 02:16:59 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.widgeo.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 19 Dec 2022 18:52:41 GMT
expires: Tue, 19 Dec 2023 18:52:41 GMT
cache-control: public, max-age=31536000
age: 372258
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 58ad5c6e3caf13013c7ec3a32fe8e033
d53bb5f6c3618a359bc4cf9ead378176a703c94a
71901bd1fc0c8175e1ca424c04d6b92745a962dbe4e4e5b5767d6a7166cff8f0
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "71901BD1FC0C8175E1CA424C04D6B92745A962DBE4E4E5B5767D6A7166CFF8F0"
Last-Modified: Thu, 22 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3195
Expires: Sat, 24 Dec 2022 03:10:14 GMT
Date: Sat, 24 Dec 2022 02:16:59 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/geowidget_js.js
200 OK 484 B URL HTTP/2 www.widgeo.net/geocompteur/geowidget_js.js
IP
File type ASCII text, with very long lines (866)
Hash 95318f9cd9495d1c1b01bc338791e8d7
85c78fc3679e7e1346413996edc8f7b52cf732b0
658669cb312415e35ee3173c178907ab5a796504dff5f527164e3d39a3faa943
GET /geocompteur/geowidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2217
cache-control: public, max-age=604800
expires: Tue, 27 Dec 2022 13:33:05 GMT
last-modified: Thu, 13 Feb 2020 12:35:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 305034
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=OgezuJpeB79ygpwWdn2PNXY4M4UZUjFDv1H0EzFK6KiAnZhKQDFcgddHnxneSWyhX%2FOteonk2gI%2F8QENlrTsEcDC8TNySLF6jcHgnUwBl0ATG5%2BLb9mwIn8Ew7vDo5td"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68e1f3eb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 305e61785b6a439d62cc6d1eb782acf0
51c1e3e213b20326f9b0a6089a07d64559945d85
b04548c1d4e00ddc872aad4bd3b532cade0bf423138620e351a6d58a2e8f19fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b9643a377daeefa9e867de25d84d90a4
7ab8aade6752606edfa9a6e68248fdbdca76dae8
0265378147b5eaa4ad2c4f570790b2b71b1abe8386e674c565bf0885396c04d0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:16:59 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
my.rtmark.net/gid.js?userId=bedd0728765e44a09e5b203334550a9c
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=bedd0728765e44a09e5b203334550a9c
IP
File type JSON data\012- , ASCII text
Hash 1084497efc653be4b13077a5786b62d1
3ecbf9b63c655f5bb7ceb6215d3ca5e574ffb28f
1d37c10d6249c0fa05bfe5438f1f3aa105f5268e473c5d6c1d108c5fc949f1ff
GET /gid.js?userId=bedd0728765e44a09e5b203334550a9c HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 02:17:00 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://pak-janggut.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=bedd0728765e44a09e5b203334550a9c; expires=Sun, 24 Dec 2023 02:17:00 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 76 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
File type ASCII text, with very long lines (20080)
Hash 85e52b5f52ed5c4126a532153a28d1b2
f6096c80e3c59a556304963a19f3f0014ae248d2
f045666d58128983f8c34113e91b44b201608a68d887ecfbaa27d37036ffa9c5
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Sat, 24 Dec 2022 02:16:59 GMT
expires: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 76253
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 2.6 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash 339de18368395c10d3217a7437cb6757
d191b555bbd1f5a72552cd0b8cb6666874ffa2e9
3203ee345239f4e944f54dcfd9a310290148cc74c9d543afa7cdfddeff0b6d6a
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Sat, 24 Dec 2022 02:16:59 GMT
date: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 305e61785b6a439d62cc6d1eb782acf0
51c1e3e213b20326f9b0a6089a07d64559945d85
b04548c1d4e00ddc872aad4bd3b532cade0bf423138620e351a6d58a2e8f19fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i66.photobucket.com/albums/h260/toonybug/header2-12.png
200 OK 88 kB URL HTTP/2 i66.photobucket.com/albums/h260/toonybug/header2-12.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e77dc4b55a98f0276e869e8233aad288
f77186296a3c1a292896bb5f14300fc3cc73e517
1ab90235b5b9dd020b47882fad9b575eb25f3af7bd95362ad95c9089ab53b146
GET /albums/h260/toonybug/header2-12.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 88336
date: Sat, 24 Dec 2022 02:16:59 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="header2-12.webp"
expires: Sun, 24 Dec 2023 02:16:59 GMT
server: photobucket
x-amzn-trace-id: Root=1-63a6611b-0355934f500496b4256f4257
x-request-id: cqJKSkQUMTQ5979yT-C81
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 9pGoe05umaMrrQSzjIHpiVMAk1pidBl3PEX3-A2Fz0eYifQ3ep85mA==
vary: Accept, Origin
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/
302 Found 149 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/
IP
File type HTML document, ASCII text
Hash 249901d3bde6958675b188e742cc48be
fabcfde295feb22e73f2476aad09ccf360f91235
e828802a10100d113670982a5acea24cf4b427feb636fcd3cf142490ce71261d
GET /hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 149
date: Sat, 24 Dec 2022 02:17:00 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=B571AA6B-4496-46C4-A91F-A35CA3CFE6AD; Path=/; Domain=xiti.com; Expires=Wed, 24 Jan 2024 02:17:00 GMT; HttpOnly
atidx=B571AA6B-4496-46C4-A91F-A35CA3CFE6AD; Path=/; Domain=xiti.com; Expires=Wed, 24 Jan 2024 02:17:00 GMT; HttpOnly; Secure
atid=B571AA6B-4496-46C4-A91F-A35CA3CFE6AD; Path=/; Domain=xiti.com; Expires=Wed, 24 Jan 2024 02:17:00 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: aKWbuHYv2lfXfQOdKsleFJjUc9ix221-odDO5VaUY4kgfK-ZtDxAPg==
X-Firefox-Spdy: h2
i66.photobucket.com/albums/h260/toonybug/background2-20.jpg
200 OK 227 kB URL HTTP/2 i66.photobucket.com/albums/h260/toonybug/background2-20.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Size 227 kB (226614 bytes)
Hash ef7477fb8ee9a569a09ee99354e024bc
1a7406d2f52fe0a9ead58edd224c0994a9c82fe5
6c1d19b7a44d5762cb0d83a48844d4d109b1a64f31278a9673e6a69fce21fa44
GET /albums/h260/toonybug/background2-20.jpg HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 226614
date: Sat, 24 Dec 2022 02:17:00 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="background2-20.webp"
expires: Sun, 24 Dec 2023 02:17:00 GMT
server: photobucket
x-amzn-trace-id: Root=1-63a6611b-53b21c143c1e76ba3c32511a
x-request-id: 3_Vv0-7iPHmEuSdl85PuY
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: hW7ql82TWVvftPFo3H9_YN_RTZoRxQZuqn8FHd0sqr_zTgHvHoEmOQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
i66.photobucket.com/albums/h260/toonybug/divider-9.png
200 OK 24 kB URL HTTP/2 i66.photobucket.com/albums/h260/toonybug/divider-9.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e9929d28305d0d1ee747a5cc2720950
7e30aa627a668c6fb4255263eea518d48a39f847
3ec6ad44f4ed89b90afc1db1d8f36e87558691e4741d00ddd804dbb22e7bf145
GET /albums/h260/toonybug/divider-9.png HTTP/1.1
Host: i66.photobucket.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 23600
date: Sat, 24 Dec 2022 02:17:00 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="divider-9.webp"
expires: Sun, 24 Dec 2023 02:17:00 GMT
server: photobucket
x-amzn-trace-id: Root=1-63a6611b-3740291558bab5d62ce084c2
x-request-id: SFG-vKpNprI2JyQUAxfdR
x-cache: Miss from cloudfront
via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6PSrsOQjm8Gw4UhUV9Hv-ku8Azs9torTJBgXvPHh2pa7r4_ooMpzyQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 034f06ffe21c09bc64e487db781efa0f
6b40ce36cb3ab0ff1244af32e6b4f61781c59289
32da0a27097271991f020b761224104e2de198ebb37beda659761e5a0afd40a9
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:00 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logv33.xiti.com/hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geocity_rose&hl=2x16x58&r=1280x1024x24x24&ref=http://pak-janggut.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Sat, 24 Dec 2022 02:17:00 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 50584ad285d5f627ddebae74efdd0770.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QXUFUt1XIowEknUH4L3UE1i225ihcfG1RAqvSOlyQZyuTdg-e9xYjw==
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true
302 Found 474 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (503)
Hash 4a0c8db3e23b8ef68e0bbee3a8b2d5e9
c891dc7ae47a4070c3b6b16a0af588cf64c8f0a5
0e3088a1948d9c9bc805cbaad690149a80c5972607e3a2dedd459acaa838a27c
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D3330746960625431196%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50%26pageSize%3D21%26origin%3Dhttp://pak-janggut.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.ydLROSGdlBE.O/d%253D1/rs%253DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sat, 24 Dec 2022 02:17:00 GMT
location: https://www.blogger.com/followers.g?blogID=3330746960625431196&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByM2YjU4NDgiByM4YWI1YWMqByNmZmQ5NjYyByMzODc2MWQ6ByM2YjU4NDhCByM4YWI1YWNKByM2YjU4NDhSByM4YWI1YWNaC3RyYW5zcGFyZW50&pageSize=21&origin=http%3A%2F%2Fpak-janggut.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.ydLROSGdlBE.O%2Fd%3D1%2Frs%3DAHpOoo_OUY4V-VcsLuRVnUuYVO758FydkA%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-YIu4D-xHMG0LfqgZreGUmQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 474
server: GSE
set-cookie: __Host-GAPS=1:lWsR8B6jAAjjkejzNirMq6uRVpmIUA:dV6ts6QYZivfvi3l;Path=/;Expires=Mon, 23-Dec-2024 02:17:00 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169953
200 OK 9.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1169953
IP
File type ASCII text, with CRLF line terminators
Hash 0d489677aaa27440619b64706f2cafe9
b87bf2207059e1db5a939e804c7e586e7b8ad125
0dab6095a7e07c26dc21102cfb0e3e81eda68ed0681d34b23719bd31bc188539
GET /BidVertiser.dbm?pid=361547%26bid=1169953 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/javascript
Pragma: no-cache
Cache-Control: no-store
Expires: -1
Connection: close
Content-Length: 9014
www.kekcoklat.com/images/banner/banner180.gif
200 OK 58 kB URL HTTP/1.1 www.kekcoklat.com/images/banner/banner180.gif
IP
ASN #46606 UNIFIEDLAYER-AS-1
File type GIF image data, version 89a, 180 x 60\012- data
Hash a741428fab4e3f6215f41f8a41200be3
2f2110a1ea3f1fe6be661d72e61b51c7fdbb2a87
68fc167c81c53c0f80769227b3db5ce7cbddef69e0c00fc3512714edf03faf91
GET /images/banner/banner180.gif HTTP/1.1
Host: www.kekcoklat.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:00 GMT
Server: Apache
Upgrade: h2,h2c
Connection: Upgrade, Keep-Alive
Last-Modified: Tue, 08 May 2012 04:36:55 GMT
Accept-Ranges: bytes
Content-Length: 57811
Keep-Alive: timeout=5, max=75
Content-Type: image/gif
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169954&RD=0901788031406&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=0901788031406&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
200 OK 7.0 kB URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169954&RD=0901788031406&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=0901788031406&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (405), with CRLF, LF line terminators
Hash 0a07d03d6067d63ad46a4c64936bdfc3
45390c280a2675f7bf0b5b1a2d7aadc6955ad4c7
e02129edae821ae850c522387e988a877002507fd58f28c397ef7741caa2882a
GET /BidVertiser.dbm?pid=361547&bid=1169954&RD=0901788031406&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=0901788031406&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:00 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:00 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:00 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:00 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 4161
CONNECTION: Close
www.shamsuriyadi.com/ccimages/banner180.gif
200 OK 65 kB URL HTTP/1.1 www.shamsuriyadi.com/ccimages/banner180.gif
IP
ASN #38182 Extreme Broadband - Total Broadband Experience
File type GIF image data, version 89a, 180 x 60\012- data
Hash e1c391f5ab9c77da204bd9f541a68295
542f2c2871453154990ab8fab80862d2d9fac376
f73d96f6cfea71b678c762ccba4f9d5ec7acdd8cd55fce78434f7368a853a6ac
GET /ccimages/banner180.gif HTTP/1.1
Host: www.shamsuriyadi.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
cache-control: public, max-age=31536000
expires: Sun, 24 Dec 2023 02:16:58 GMT
content-type: image/gif
last-modified: Mon, 05 Mar 2012 05:04:54 GMT
etag: "fee3-4f544976-0;;;"
accept-ranges: bytes
content-length: 65251
date: Sat, 24 Dec 2022 02:16:58 GMT
server: LiteSpeed
referrer-policy: no-referrer-when-downgrade
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 92082e50c05641e2e3a6d2f6f10f9b6d
19431c3456f2f8608ab5260eb08254a376b7c2fa
589ce4c6f71a6269fc44f6df8e9ec2df42d43c8d7203f25da5f7630c6aaf9da1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d7dc6f29af0912baf33dc26771c4bda2
032fcf4f0dff6644aceadade92866c74937e6540
6dfcbb4b2403b85a352f8602c24e0555c4e66d77638e9f77d57c041651f6834e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
200 OK 1.5 kB URL HTTP/2 1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2c53c52d7f8e27257535cfddaf818761
2b0aaeae7b0e715d7c6194e514591fd0c2a350b4
8d10c19235052321c5bf4aa25f86083366ca7c2c25e4ed71991d1902148bbd52
GET /-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v545e"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="boa.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 1508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
d2b9l3u54v5v39.cloudfront.net/css/598x158.css?cbst=2
200 OK 2.8 kB URL HTTP/1.1 d2b9l3u54v5v39.cloudfront.net/css/598x158.css?cbst=2
IP
File type ASCII text, with CRLF line terminators
Hash 68d57d3699fb5df19a82f9792073203f
8cba5e108ef62b9b68d991eca1a1c409bb016f01
49617ae18de9b53d3d940741d580dbe36ba050c5d07cd32fd937904cf00bde2d
GET /css/598x158.css?cbst=2 HTTP/1.1
Host: d2b9l3u54v5v39.cloudfront.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://bdv.bidvertiser.com/
HTTP/1.1 200 OK
Content-Type: text/css
Content-Length: 2817
Connection: keep-alive
Last-Modified: Thu, 18 Jan 2018 16:21:47 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:17:01 GMT
ETag: "82363f707890d31:0"
X-Cache: Hit from cloudfront
Via: 1.1 784cb0c259a6d79800d037bda4e7de86.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-P1
X-Amz-Cf-Id: 05lNfOhOdG2tP2iRghIeGTGnbml654XZIGWb020INdBKD-tMaBLPLg==
Age: 19772
2.bp.blogspot.com/-6CJapH-LO2U/T3BQXyK0SpI/AAAAAAAAAA0/-ip6dt991jE/s45-c/3.jpg
200 OK 1.7 kB URL HTTP/2 2.bp.blogspot.com/-6CJapH-LO2U/T3BQXyK0SpI/AAAAAAAAAA0/-ip6dt991jE/s45-c/3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 3ca675e0655fedbc0a2188cbb234afa8
2c8e15607147f1191fdc2c1e36a88ab4831a78c3
60b1608bc686e7d47d25ce10e7f37950a5dd115c56f42545299bcda6ca84fb5a
GET /-6CJapH-LO2U/T3BQXyK0SpI/AAAAAAAAAA0/-ip6dt991jE/s45-c/3.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="3.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1707
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Sat, 24 Dec 2022 19:10:29 GMT
cache-control: public, max-age=86400, no-transform
etag: "vd"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/AD5-WClDhTRx08AJgJF8i9egMnJZ-KPqvFgEoTSBV1FXlQ=s45-c
200 OK 1.9 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WClDhTRx08AJgJF8i9egMnJZ-KPqvFgEoTSBV1FXlQ=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 4a6ddb0ab06a55a944665233057e143a
f0f3d7c859f5206d783e82b0ff0f48fb5e3441f7
2d5aae9caa5fe36a4ea0510adb4d36de1d7e83ceb3c07543882376eca63a3e2d
GET /a-/AD5-WClDhTRx08AJgJF8i9egMnJZ-KPqvFgEoTSBV1FXlQ=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v11f"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 1893
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 92082e50c05641e2e3a6d2f6f10f9b6d
19431c3456f2f8608ab5260eb08254a376b7c2fa
589ce4c6f71a6269fc44f6df8e9ec2df42d43c8d7203f25da5f7630c6aaf9da1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d7dc6f29af0912baf33dc26771c4bda2
032fcf4f0dff6644aceadade92866c74937e6540
6dfcbb4b2403b85a352f8602c24e0555c4e66d77638e9f77d57c041651f6834e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d7dc6f29af0912baf33dc26771c4bda2
032fcf4f0dff6644aceadade92866c74937e6540
6dfcbb4b2403b85a352f8602c24e0555c4e66d77638e9f77d57c041651f6834e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17008
Expires: Sat, 24 Dec 2022 07:00:29 GMT
Date: Sat, 24 Dec 2022 02:17:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2370a8-14bd-40e5-9d9f-63e8b4b4e9f3.jpeg
200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2370a8-14bd-40e5-9d9f-63e8b4b4e9f3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fae75097a9e461f59779e2725dd153d9
95b1e2797d9d047ca71f60851976937e83c804be
63981e99d995c1c79028f5e2205883a13ef9b1b96f3aa47cde2f4aa08ae6badb
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9f2370a8-14bd-40e5-9d9f-63e8b4b4e9f3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10613
x-amzn-requestid: da298549-e2ce-47b1-9efa-ed817c6c416c
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnniXE12oAMF-Jw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fa8-2b396ad16595c0b349fdb450;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:37:44 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: _C8_4MMvadzwCZt0X_zX1Ors5vXDfS3NUMZAYFYwMXwZZOhpwsBdhA==
via: 1.1 7f5e0d3b9ea85d0d75063a66c0ebc840.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:24:24 GMT
age: 13957
etag: "95b1e2797d9d047ca71f60851976937e83c804be"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa38f10fa-e28a-4f22-9537-13ffbe227fba.jpeg
200 OK 6.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa38f10fa-e28a-4f22-9537-13ffbe227fba.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8baae04b740bed3179080c11cde8ff6f
b85c6dc73fbf5b4310c79db2b8e9f565b9f6565b
ec09fca4de28d27232ae104605ed60d62b7e71970f41cb259999c53a07406dde
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa38f10fa-e28a-4f22-9537-13ffbe227fba.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 6899
x-amzn-requestid: 34fb1770-87f1-4b1a-ab5a-078649d4b0f5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnbDEwBoAMF5fQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61f79-6db6657c76b5c2de36399317;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:36:57 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: M_bS5-sR65aF2-yQi0XCGaEkSbUxT9QIu1x5VpbfoOnyUZLp6V37BA==
via: 1.1 9c60d6224ac0b44e908b5c9dcf70e9a4.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:53:04 GMT
age: 15837
etag: "b85c6dc73fbf5b4310c79db2b8e9f565b9f6565b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17008
Expires: Sat, 24 Dec 2022 07:00:29 GMT
Date: Sat, 24 Dec 2022 02:17:01 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 92082e50c05641e2e3a6d2f6f10f9b6d
19431c3456f2f8608ab5260eb08254a376b7c2fa
589ce4c6f71a6269fc44f6df8e9ec2df42d43c8d7203f25da5f7630c6aaf9da1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh3.googleusercontent.com/a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c
200 OK 2.3 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 58bc498fa916d7a72d1ea6e06d248f64
b3852656d68829ae2d8428db8ae4717b0c4b0399
be198d54609961e3b6073376518d11c221b70256977810598d49fa6129c0bc78
GET /a-/AD5-WCkuTNnmDY1b6LQEfyj36hSpbOdHCZ4CBs4TI96v6I0=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="unnamed.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2315
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Wed, 07 Dec 2022 00:19:59 GMT
cache-control: public, max-age=86400, no-transform
etag: "v8298"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-SNHNQmxoVNs/TvVAp5vIAhI/AAAAAAAABWw/asRFhUakkO8/s45-c/DSC05641.JPG
200 OK 2.0 kB URL HTTP/2 3.bp.blogspot.com/-SNHNQmxoVNs/TvVAp5vIAhI/AAAAAAAABWw/asRFhUakkO8/s45-c/DSC05641.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 4baee26cd326fe1bac951002f135cb97
fb115c64a6e8c90954147e1685e7bf84b099c56e
caac06f13c005445b14fd2479ddda47be11487bd12e0db5d395a9f3a9e0e763b
GET /-SNHNQmxoVNs/TvVAp5vIAhI/AAAAAAAABWw/asRFhUakkO8/s45-c/DSC05641.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="DSC05641.JPG"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1953
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Wed, 21 Dec 2022 06:16:30 GMT
cache-control: public, max-age=86400, no-transform
etag: "v56c"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp
200 OK 4.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b971f9cebfb83d4e05f58c5e0c7e2436
440e6429b1e04564052e1de277b2cfafdc3203fd
bf885ad9432b12fb3ad6c62204892d2521a4ab967e635de8af584b6a1e21bbab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F49fa7cd8-f48a-4820-8943-7f876a15bfe2.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4597
x-amzn-requestid: 156d6291-928f-4c2d-93f5-edf1ac1a95bb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoRuHHjoAMFZfQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a620d7-7f7726b749a2dd6f3be7ac2b;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:42:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: n8El7mjtpJmBXFtB8Ye9HqTJY5AWev5qPqcp00evrd3iK2fWa3wVBQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 9046e5a276a05e60ee34c8475e92b8e6.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:36:20 GMT
age: 13241
etag: "440e6429b1e04564052e1de277b2cfafdc3203fd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg
200 OK 7.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash a41cf13f4970b1cb479194c1baab7223
ab59fa2cb8359ae9f5e037cdf1fe2684be034731
5ac5a0616f104b0f235f93be9f6b48c7a7f6b3326b7611c4e9a63127a13ebf1e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F626da29b-d70f-4848-8a1b-cf70a01d8da9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7886
x-amzn-requestid: 2f30ee9a-839a-4f78-9dc5-d4c588f7d866
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnnquGXLIAMFWRw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a61fde-72fad8c258a58ec44a066f71;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:38:38 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: S2l-WQXdgS1MorrfG7hFiyA2GH-tPhMal21ZBhLYUN_5i38MsLrPxg==
via: 1.1 5a1753718d8b33365e5f693dd338c510.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 22:12:55 GMT
age: 14646
etag: "ab59fa2cb8359ae9f5e037cdf1fe2684be034731"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 6ce699bd0db3ee9d3a4ef6dcf941f9f1
14d813942d74d801024c42e2a4628ecd9306d2ad
060de67922db1f612b7f4c173f11e8714c8329d20fbec45a421bcefe7451f388
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "060DE67922DB1F612B7F4C173F11E8714C8329D20FBEC45A421BCEFE7451F388"
Last-Modified: Thu, 22 Dec 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17008
Expires: Sat, 24 Dec 2022 07:00:29 GMT
Date: Sat, 24 Dec 2022 02:17:01 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 50705ab69dfed4f096be357417729ea6
86b6a457d2eefd5104561d15a9557441f10804f2
30cc593e7bf3cf1af8977f7c7a22c12f5c4e859c55a4efffcd504b7e56c74dbf
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2b7298a2-2f41-4b7e-a1c6-2819da4067a7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12686
x-amzn-requestid: 5ff517eb-a8ea-4051-9277-7730c04003d1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dhyVlH_toAMF-QA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a3ca89-197af9f660f57fd11e178cd6;Sampled=0
x-amzn-remapped-date: Thu, 22 Dec 2022 03:10:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: niapAUk39VyD6tjbfb91o8MoKBAEVV97AVmVIbC9qKRR_S8HbraMCQ==
via: 1.1 010c0731b9775a983eceaec0f5fa6a2e.cloudfront.net (CloudFront), 1.1 7022a5bbf9872d4a09d63e6cdb457dfe.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 04:07:37 GMT
age: 79764
etag: "86b6a457d2eefd5104561d15a9557441f10804f2"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 92082e50c05641e2e3a6d2f6f10f9b6d
19431c3456f2f8608ab5260eb08254a376b7c2fa
589ce4c6f71a6269fc44f6df8e9ec2df42d43c8d7203f25da5f7630c6aaf9da1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 92082e50c05641e2e3a6d2f6f10f9b6d
19431c3456f2f8608ab5260eb08254a376b7c2fa
589ce4c6f71a6269fc44f6df8e9ec2df42d43c8d7203f25da5f7630c6aaf9da1
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3071a834e874a992c3b14f7a3f91b30f
559014c7e6e5019097b7da8b3a820a80a1f55b6c
4f8e29303936b4168f0ad765d8a2773a7247f249396147f68f6f9639b1ad1208
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4e532075-b8a0-41ff-8f08-8512cbb1b3d4.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10356
x-amzn-requestid: 32dbf731-a18f-4150-b3cd-f30d2ab3c6a1
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: dnoi1GY2oAMFesg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63a62145-55a5f14a6ea6e7dc3754a8be;Sampled=0
x-amzn-remapped-date: Fri, 23 Dec 2022 21:44:37 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: DC1Eu98-ihibH4I6ZY03Af2PxBrywSyjnoJRR2N453KiYvsa6hGefw==
via: 1.1 41e349e25dc4bc856d0e5d2c162428a0.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Fri, 23 Dec 2022 21:49:04 GMT
age: 16077
etag: "559014c7e6e5019097b7da8b3a820a80a1f55b6c"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash d7dc6f29af0912baf33dc26771c4bda2
032fcf4f0dff6644aceadade92866c74937e6540
6dfcbb4b2403b85a352f8602c24e0555c4e66d77638e9f77d57c041651f6834e
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:01 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-TlgYh-wBM3M/U99iwdQgGPI/AAAAAAAACrc/UWt6D9231rU/s45-c/*
200 OK 1.9 kB URL HTTP/2 3.bp.blogspot.com/-TlgYh-wBM3M/U99iwdQgGPI/AAAAAAAACrc/UWt6D9231rU/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash b70a390b0b8c4f4bee8829cc1a59d1dd
46917da08d914b4cc594a1332b163c98004ab337
60b54b8ea208150f2cbbced26a89bd408ebfd9366b6186dc9e7b445ef25624ab
GET /-TlgYh-wBM3M/U99iwdQgGPI/AAAAAAAACrc/UWt6D9231rU/s45-c/* HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1941
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Sat, 24 Dec 2022 09:23:01 GMT
cache-control: public, max-age=86400, no-transform
etag: "vab8"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-a2a8F1cZ1pA/UtDEQAf7UKI/AAAAAAAABSs/Pw78LKftJSM/s45-c/*
200 OK 1.8 kB URL HTTP/2 2.bp.blogspot.com/-a2a8F1cZ1pA/UtDEQAf7UKI/AAAAAAAABSs/Pw78LKftJSM/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 99fab51d6ad334c42a05f0db6cc8532f
b5619d3d6a023d183e3524204ce1181536583572
2c634c594cdc4cc67f259a1af221cc120b66c2326bc7ca6afec0cda9daadb901
GET /-a2a8F1cZ1pA/UtDEQAf7UKI/AAAAAAAABSs/Pw78LKftJSM/s45-c/* HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1810
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Sat, 17 Dec 2022 05:04:43 GMT
cache-control: public, max-age=86400, no-transform
etag: "v52c"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-6GdEdpO3Gdg/WDIAt5uPizI/AAAAAAAAC48/-Hv8HOF8eF0PnEk8Uyv_XnAWaIF4nKY4gCK4B/s45-c/*
200 OK 1.2 kB URL HTTP/2 3.bp.blogspot.com/-6GdEdpO3Gdg/WDIAt5uPizI/AAAAAAAAC48/-Hv8HOF8eF0PnEk8Uyv_XnAWaIF4nKY4gCK4B/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 423e44e1f3bc9ca1a9e53e6d39169a6f
148addc1613b225d191d2c8d46985c70d81ae7e8
2daf6ebc1e8581e6dcb816e7f4ef64c3c9f8f42773440f3e5d4c260825dc6432
GET /-6GdEdpO3Gdg/WDIAt5uPizI/AAAAAAAAC48/-Hv8HOF8eF0PnEk8Uyv_XnAWaIF4nKY4gCK4B/s45-c/* HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vba1"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="*.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 1151
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOEn9dswkY4CumDXosvqWFeexkMpQcqHsM3IIrg=s45-c?key=CMK-n9G43sO93AE
200 OK 3.3 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOEn9dswkY4CumDXosvqWFeexkMpQcqHsM3IIrg=s45-c?key=CMK-n9G43sO93AE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 1377170ceb9a6f6b23761f26fa15ae67
46838ef55fa2bfb9b79b410f0ae68286c08db0e3
6dfc06e20d620704d268bdcd08e805918b19228b081a25542de1454101452ca2
GET /p/AF1QipOEn9dswkY4CumDXosvqWFeexkMpQcqHsM3IIrg=s45-c?key=CMK-n9G43sO93AE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vbe2d"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 3339
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/a-/AD5-WCmmsgskJGXwuizAtDaLsDuwjlychGf717-xFHczIg=s45-c
200 OK 2.0 kB URL HTTP/2 lh3.googleusercontent.com/a-/AD5-WCmmsgskJGXwuizAtDaLsDuwjlychGf717-xFHczIg=s45-c
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 987e36f034d079170ec0f71f30d7153e
1437ae261b298e1a4aa2f66f6b41b32dd93fc94b
099658a1b178270d676d5598760ada77dac5e399e5c73e537bfb47ba3d6622b5
GET /a-/AD5-WCmmsgskJGXwuizAtDaLsDuwjlychGf717-xFHczIg=s45-c HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v24a2"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 2039
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOjeQnPAhFtBXHRFzTuHvGRFuuRRLaVIQiHqQRK=s45-c?key=CNzb563G_YfV6gE
200 OK 4.4 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOjeQnPAhFtBXHRFzTuHvGRFuuRRLaVIQiHqQRK=s45-c?key=CNzb563G_YfV6gE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 846538a41e9d5e1dcec315a103d57e2b
237d7df220da8aa15cd2c8644bf05d03beed5bb0
4403b2a019bbe8f90dd58478a4b32281ae0024ef9f4bbf6b16b27540fc60cae1
GET /p/AF1QipOjeQnPAhFtBXHRFzTuHvGRFuuRRLaVIQiHqQRK=s45-c?key=CNzb563G_YfV6gE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v6101"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 4423
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-l_MtnsNlBZI/XHvfOsHoUdI/AAAAAAAAPDg/ffItTCsQJ78ztuaKYyC7mW6zFw_j0TtpgCK4BGAYYCw/s45-c/IMG_20190222_212513-01.jpeg
200 OK 2.4 kB URL HTTP/2 4.bp.blogspot.com/-l_MtnsNlBZI/XHvfOsHoUdI/AAAAAAAAPDg/ffItTCsQJ78ztuaKYyC7mW6zFw_j0TtpgCK4BGAYYCw/s45-c/IMG_20190222_212513-01.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash afad5c0f078b437134f587059f3dbf9c
f82a657abf5ad086ea0294bec117a5b676409727
71e5321d2134f07f83b4369c454d6549f533f9d67e4a742d0b3c07aacb7a93bc
GET /-l_MtnsNlBZI/XHvfOsHoUdI/AAAAAAAAPDg/ffItTCsQJ78ztuaKYyC7mW6zFw_j0TtpgCK4BGAYYCw/s45-c/IMG_20190222_212513-01.jpeg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="IMG_20190222_212513-01.jpeg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2386
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Fri, 09 Dec 2022 06:26:19 GMT
cache-control: public, max-age=86400, no-transform
etag: "v3c3b"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipMRn3ssADqmxxQw8WyTpbO7ez7yNAtSyzxsLuh_=s45-c?key=CNa_2q_bj_zg8gE
200 OK 5.2 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipMRn3ssADqmxxQw8WyTpbO7ez7yNAtSyzxsLuh_=s45-c?key=CNa_2q_bj_zg8gE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash cdaf673bfe7dbc5e729bcfa73bf9ef22
36d5da096e666cb65c0e50f91812441c297ca197
c5d90b055ad482aeae4510e7b7a51d8e003388c94a0e524b41da32002b7bde8b
GET /p/AF1QipMRn3ssADqmxxQw8WyTpbO7ez7yNAtSyzxsLuh_=s45-c?key=CNa_2q_bj_zg8gE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v323d"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 5177
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOEBc78rwMCaw4pbkmN31x4HvwSDk6wgwJ2FH9_=s45-c?key=CJCt4JiI4NP6KA
200 OK 4.8 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOEBc78rwMCaw4pbkmN31x4HvwSDk6wgwJ2FH9_=s45-c?key=CJCt4JiI4NP6KA
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 9019a1e07522f0e04d33c5e7dd75f59e
1e23f221a4200e67ce4ac9fe81cd15593ad5a259
6f259a700e64b7ebdbcdc159c28b3f97c8de16827b02c131aac85b25da7561c7
GET /p/AF1QipOEBc78rwMCaw4pbkmN31x4HvwSDk6wgwJ2FH9_=s45-c?key=CJCt4JiI4NP6KA HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v290f"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 4825
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/_efYYsFWNGPw/S6GCbKmYGCI/AAAAAAAABXI/kakzSVFIr8o/S45-s45-c/dn100x50.gif
200 OK 3.4 kB URL HTTP/2 4.bp.blogspot.com/_efYYsFWNGPw/S6GCbKmYGCI/AAAAAAAABXI/kakzSVFIr8o/S45-s45-c/dn100x50.gif
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 6e7b6548fbba2f4c7ebf3063af3db330
75d615a98bb4cc181351d6d3592fe7a64abe7e0c
ed91f355e8a19ac0f139736c37970c621dfd8c671b789ca03ecd83d9e9202f68
GET /_efYYsFWNGPw/S6GCbKmYGCI/AAAAAAAABXI/kakzSVFIr8o/S45-s45-c/dn100x50.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v572"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="dn100x50.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 3429
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipOc5oVmpkwLSuI_Ba2qZh8_sYEUWY0Gt1bpuP7Y=s45-c?key=COKk8_uMmY3xIw
200 OK 3.4 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipOc5oVmpkwLSuI_Ba2qZh8_sYEUWY0Gt1bpuP7Y=s45-c?key=COKk8_uMmY3xIw
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 672c6a659f5b4e0fccde03020e6e91c2
bd61f22277929a2132c6cc7e081d87ab5e2a9496
ebac13e4b0796f7e385d84ee6daf306265af10c8b67354790b78d7b2af946dda
GET /p/AF1QipOc5oVmpkwLSuI_Ba2qZh8_sYEUWY0Gt1bpuP7Y=s45-c?key=COKk8_uMmY3xIw HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v271e"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 3391
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-FyYmc13_oNk/YtWsTpzMOtI/AAAAAAAAax4/b1WkV59-xokJGVLGV14OAlAKc8zgv5pMwCK4BGAYYCw/s45-c/1657207902075.png
200 OK 3.0 kB URL HTTP/2 2.bp.blogspot.com/-FyYmc13_oNk/YtWsTpzMOtI/AAAAAAAAax4/b1WkV59-xokJGVLGV14OAlAKc8zgv5pMwCK4BGAYYCw/s45-c/1657207902075.png
IP
File type PNG image data, 45 x 45, 8-bit/color RGBA, non-interlaced\012- data
Hash 420b8479d6a82697e5a84e7d4fcbcfda
1087ab065b87e34f659de2e18d07d2f59b74a2bd
062a3b33b7eecc1336b7f7b7b9129201091e945104a8d0017a4261753c2fbd13
GET /-FyYmc13_oNk/YtWsTpzMOtI/AAAAAAAAax4/b1WkV59-xokJGVLGV14OAlAKc8zgv5pMwCK4BGAYYCw/s45-c/1657207902075.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="1657207902075.png"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 3027
x-xss-protection: 0
date: Sat, 24 Dec 2022 02:17:01 GMT
expires: Wed, 21 Dec 2022 17:06:04 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6b21"
content-type: image/png
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-V-f0RwnYuMo/Vxrz2L3m2cI/AAAAAAAAMnY/CDfnQjbjj4MOMpirTn4ezzNvZFaO230ZQCK4B/s45-c/irfan3.jpg
200 OK 2.2 kB URL HTTP/2 3.bp.blogspot.com/-V-f0RwnYuMo/Vxrz2L3m2cI/AAAAAAAAMnY/CDfnQjbjj4MOMpirTn4ezzNvZFaO230ZQCK4B/s45-c/irfan3.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 0516e8aaee06ea09a4b340e0b82181b3
6ed562b861805c6e191128a9869ad2e384c33c49
331cea53b7ce5d6095a1cb7f180c96e7d9acc69065c6559635722ae1afcc3463
GET /-V-f0RwnYuMo/Vxrz2L3m2cI/AAAAAAAAMnY/CDfnQjbjj4MOMpirTn4ezzNvZFaO230ZQCK4B/s45-c/irfan3.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v3278"
expires: Sun, 25 Dec 2022 02:17:01 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="irfan3.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 2179
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNB_mfBlRYQachQtwH2U-p7lIXgtlMqL0oVZ4ZZ=s45-c?key=CJfIve-s1IyvsgE
200 OK 3.8 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNB_mfBlRYQachQtwH2U-p7lIXgtlMqL0oVZ4ZZ=s45-c?key=CJfIve-s1IyvsgE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 2aef9032987f0b48a3d42bf9ae5811a3
db4c78d61bc66b106e6163f2ecc4605bf408331c
b5c66faa840338ac9d19262cb06fbc15bfe4f965bbf71b956f6f25b18965b09e
GET /p/AF1QipNB_mfBlRYQachQtwH2U-p7lIXgtlMqL0oVZ4ZZ=s45-c?key=CJfIve-s1IyvsgE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 3809
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNCI3gfVvw3moJryrsqQyNwZ4zv6KV1WzCC6oD7=s45-c?key=CI39gaO4suKFyAE
200 OK 5.5 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNCI3gfVvw3moJryrsqQyNwZ4zv6KV1WzCC6oD7=s45-c?key=CI39gaO4suKFyAE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash 214954def0d349df98a04a6d3a8638ac
3770b41d6ba7d798c4b7d3a629230e0231e3acff
3964579f74a9550bbd726706541193eeaceb5db31ca1cf234f29942d1893e3b9
GET /p/AF1QipNCI3gfVvw3moJryrsqQyNwZ4zv6KV1WzCC6oD7=s45-c?key=CI39gaO4suKFyAE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v131c"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 5543
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/p/AF1QipNWwZDeonv-h87yzNRTUYGU4T8PuLIsEqr_yaJQ=s45-c?key=CJeUyZWt8_K-lgE
200 OK 4.2 kB URL HTTP/2 lh3.googleusercontent.com/p/AF1QipNWwZDeonv-h87yzNRTUYGU4T8PuLIsEqr_yaJQ=s45-c?key=CJeUyZWt8_K-lgE
IP
File type PNG image data, 45 x 45, 8-bit/color RGB, non-interlaced\012- data
Hash dffcc95ac2f05220da08a60accb12d7d
1d14320be034c6f7bad646e4e7a446d1ccbca0aa
520d2a43c8eeb16590a2a8b538f34ce166bcb3b23e3d565100ed5872d6987abe
GET /p/AF1QipNWwZDeonv-h87yzNRTUYGU4T8PuLIsEqr_yaJQ=s45-c?key=CJeUyZWt8_K-lgE HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2b9b"
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: private, max-age=86400, no-transform
content-disposition: inline;filename="Profile picture.png"
content-type: image/png
vary: Origin
x-content-type-options: nosniff
date: Sat, 24 Dec 2022 02:17:01 GMT
server: fife
content-length: 4197
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.feedburner.com/fb/images/pub/i_heart_fb.gif
200 OK 1.7 kB URL HTTP/1.1 www.feedburner.com/fb/images/pub/i_heart_fb.gif
IP
File type GIF image data, version 89a, 89 x 32\012- data
Hash 9d1a9e12e20db57876534f01de99d1ca
c2ba81d7d1f5189970efabab533b8c3d5ee1990e
bf428aaa348d904fc5a772bd2bc2e1404d6b8e305c1924c8391e397ada7beafd
GET /fb/images/pub/i_heart_fb.gif HTTP/1.1
Host: www.feedburner.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/pichu-static
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="pichu-static"
Report-To: {"group":"pichu-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/pichu-static"}]}
Content-Length: 1743
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 24 Dec 2022 02:17:02 GMT
Expires: Sat, 24 Dec 2022 02:17:02 GMT
Cache-Control: public, max-age=0
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/gif
Age: 0
widgets.amung.us/colored.js
200 OK 3.2 kB URL HTTP/1.1 widgets.amung.us/colored.js
IP
File type ASCII text, with very long lines (8596), with no line terminators
Hash fb2d2d6ae1380dd532a4f653267faf5e
5f1c850f1872fc8b43ec5bb2ebc29a76c77292b9
df88edf6843167ac3284b229fca9e2ef641db2c5b7abce9f638d7fc5d260713f
GET /colored.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:02 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Sat, 17 Dec 2022 20:59:16 GMT
etag: W/"639e2da4-2194"
expires: Sun, 25 Dec 2022 01:31:38 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 2724
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77e5d69ebe6b992c-ARN
connect.facebook.net/en_US/all.js?hash=02848bc0bd5309a9522f3db47918aba5
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=02848bc0bd5309a9522f3db47918aba5
IP
File type ASCII text, with very long lines (18734)
Hash 4e5ea25b48424960834f02b244583c18
4306982aa21c771902f69d9ac5db95b313abdcca
a266b3e92b1da3398a57a47acabb0fc6757fc4215e9eff46ef39c5d639fc07fd
GET /en_US/all.js?hash=02848bc0bd5309a9522f3db47918aba5 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 4e2cb7a9ad0e5b5359db3db640484144
etag: "523d25e28e3499c2a13159b11263d049"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Sun, 24 Dec 2023 01:47:01 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: Tl6iW0hCSWCDTwKyRFg8GA==
x-fb-debug: QAd1Zk2VWGAn5bUBE4o2OEImTXXPvAuq6xRfSaJA1ESy67yG/JQcuy3uqB35+Xg7D8X+ngpIcXw5sOVLgx8nDw==
content-length: 86847
x-fb-trip-id: 1904183273
date: Sat, 24 Dec 2022 02:17:02 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
200 OK 471 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/JNJj-Xek6-M
IP
Hash 5a50bf1778701cb7e27f6f9b7877f49e
b2c64e2cbef60a975373f359a13b8962b32bb74f
43f1ef3b9dee4d6275b62915beaf52e0f86c5d5e300e264a210f97ec86b59a0f
POST /s/gts1p5/JNJj-Xek6-M HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sat, 24 Dec 2022 02:17:02 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pak-janggut.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 pak-janggut.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: pak-janggut.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/search/label/Edisi
Cookie: ck_TCM_pop=1; HstCfa1960718=1671848218124; HstCla1960718=1671848218124; HstCmu1960718=1671848218124; HstPn1960718=1; HstPt1960718=1; HstCnv1960718=1; HstCns1960718=1; si_user_id=1671848219.8434694710706; si_sess_id=1671848219.8434694710706; cj_uid=iCJxLmwIjIsPuDRrlfS3c4BzkTxdnj; prefetchAd_3294720=true
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sat, 24 Dec 2022 02:17:02 GMT
Date: Sat, 24 Dec 2022 02:17:02 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 10 Dec 2022 14:53:52 GMT
ETag: W/"31ca276a91db0f797e92e975b9ca1bcbe641ad242c16fba93fa754407f6bad0d"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 06c6ef3c5ab777aa847049c1d91f319d
7540a1ce57b9530e42a8d3b0e6854da0672183b1
62a1f82d4087b6145c68bd9734b51a7b3c5dc2689d446ac57effa165b3a62415
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "62A1F82D4087B6145C68BD9734B51A7B3C5DC2689D446AC57EFFA165B3A62415"
Last-Modified: Wed, 21 Dec 2022 10:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2467
Expires: Sat, 24 Dec 2022 02:58:09 GMT
Date: Sat, 24 Dec 2022 02:17:02 GMT
Connection: keep-alive
s4.histats.com/stats/1960718.php?1960718&@f16&@g1&@h1&@i1&@j1671848218124&@k0&@l1&@mPak%20Janggut%20Tukang%20Cerita%3A%20Edisi&@n0&@o1000&@q0&@r0&@s4005&@ten-US&@u1280&@b1:-50451103&@b3:1671848218&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&@w
200 OK 101 B URL HTTP/1.1 s4.histats.com/stats/1960718.php?1960718&@f16&@g1&@h1&@i1&@j1671848218124&@k0&@l1&@mPak%20Janggut%20Tukang%20Cerita%3A%20Edisi&@n0&@o1000&@q0&@r0&@s4005&@ten-US&@u1280&@b1:-50451103&@b3:1671848218&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&@w
IP
File type ASCII text, with no line terminators
Hash 550caf369f71d5dc0d574ce77b52dd75
917bd2e6948416278cbf16a23fd8d17619bc3340
5f1d093598c9840e58cfbb41ddf873fa46f3f91698e564e9741d7161eb869681
GET /stats/1960718.php?1960718&@f16&@g1&@h1&@i1&@j1671848218124&@k0&@l1&@mPak%20Janggut%20Tukang%20Cerita%3A%20Edisi&@n0&@o1000&@q0&@r0&@s4005&@ten-US&@u1280&@b1:-50451103&@b3:1671848218&@b4:js15.js&@b5:0&@a-_0.2.1&@vhttp%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&@w HTTP/1.1
Host: s4.histats.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:02 GMT
Content-Type: text/html;charset=UTF-8
Content-Length: 101
Connection: close
bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169949&RD=9261116368&DIF=2
200 OK 10 kB URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169949&RD=9261116368&DIF=2
IP
Hash 096cf348f0068d652c2128f18cc46da4
b90081b21984348905e9593393b2110e9dbc4c9f
a876e91a38cad8b3ef87b7c76ca065b4c230fdaec10fd73892ce153e8b36d6ab
GET /bidvertiser.dbm?pid=361547&bid=1169949&RD=9261116368&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:02 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:02 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
onmarshtompor.com/?rb=TGJ8152qeFz9D_XV6bq8PGnGrkxKDQWkj2y98zrCDEUoDXR7c535StzqUc9t-0oM61U60Ol_i_aZ32LfLAdmKPM71BpjO6UrdkJQOfpyFbc47iRE0Trc4z3PLRP1Wl5wDarZ-BeMvlgt9cRRfREWCLGIXKxorJKH4dIjAbwlEW-gmXTRfFgshWyDVDeDs4Na-PsC74UtiYJQ_Lb-wPP5HggHAZ1ZUjvHrdZZNl4rBIsSZ2l90iBnwjttXTk%3D&request_ab2=96002&zoneid=3294720&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=7&pl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=649c945f-6783-4e1d-b2f2-0209787c27c2&userId=bedd0728765e44a09e5b203334550a9c&m=link
200 OK 1.6 kB URL HTTP/1.1 onmarshtompor.com/?rb=TGJ8152qeFz9D_XV6bq8PGnGrkxKDQWkj2y98zrCDEUoDXR7c535StzqUc9t-0oM61U60Ol_i_aZ32LfLAdmKPM71BpjO6UrdkJQOfpyFbc47iRE0Trc4z3PLRP1Wl5wDarZ-BeMvlgt9cRRfREWCLGIXKxorJKH4dIjAbwlEW-gmXTRfFgshWyDVDeDs4Na-PsC74UtiYJQ_Lb-wPP5HggHAZ1ZUjvHrdZZNl4rBIsSZ2l90iBnwjttXTk%3D&request_ab2=96002&zoneid=3294720&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=7&pl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=649c945f-6783-4e1d-b2f2-0209787c27c2&userId=bedd0728765e44a09e5b203334550a9c&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2031), with no line terminators
Hash 0c6dec422c4764b788472c51fb85b77f
3a9a0034a05ede70d2b87bff777348a7067cac7a
00841a9e2a36b15e5544409d7b2ef816c8c7cf99a0fcba51a286216a223c9b93
GET /?rb=TGJ8152qeFz9D_XV6bq8PGnGrkxKDQWkj2y98zrCDEUoDXR7c535StzqUc9t-0oM61U60Ol_i_aZ32LfLAdmKPM71BpjO6UrdkJQOfpyFbc47iRE0Trc4z3PLRP1Wl5wDarZ-BeMvlgt9cRRfREWCLGIXKxorJKH4dIjAbwlEW-gmXTRfFgshWyDVDeDs4Na-PsC74UtiYJQ_Lb-wPP5HggHAZ1ZUjvHrdZZNl4rBIsSZ2l90iBnwjttXTk%3D&request_ab2=96002&zoneid=3294720&js_build=iclick-v1.464.1&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wih=939&wiw=1280&wfc=7&pl=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.464.1&bs=649c945f-6783-4e1d-b2f2-0209787c27c2&userId=bedd0728765e44a09e5b203334550a9c&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://pak-janggut.blogspot.com/
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Sat, 24 Dec 2022 02:17:05 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: bf49014ed0448da05213bf7282ae4b58
Access-Control-Allow-Origin: http://pak-janggut.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=bedd0728765e44a09e5b203334550a9c; expires=Sun, 24 Dec 2023 02:17:05 GMT; path=/
oaidts=1671848225; expires=Sun, 24 Dec 2023 02:17:05 GMT; path=/
syncedCookie=true; expires=Sat, 31 Dec 2022 02:17:05 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 683 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (640)
Hash 9da536139acbb11d6174a6e23430e0ce
16ccb37735d952b4f5840fcded1b656fb6e26efc
e92c979e72ec32e3274cf83a07293cfe2eb3857dd7df2ba884b3df2d92c6ec73
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:17:04 GMT
Content-Length: 683
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 681 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (638)
Hash 0d7597c4411aad52669c1892baf568fe
f3ee6f712ac51e6b71928ce57f7bbd952bfd4fb6
a14728bb49bb5288fdb63fb9acb536358b1b0f5333637623082010c81954ce46
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Sat, 24 Dec 2022 02:17:04 GMT
Content-Length: 681
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.30095233518131126&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:17:04 GMT
content-length: 0
X-Firefox-Spdy: h2
tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=4b434a53d7981a49e81903f9d05b6efe&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&href=undefined&rnd=0.7877813099655431&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://pak-janggut.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Sat, 24 Dec 2022 02:17:04 GMT
content-length: 0
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=uweqylw0i29o&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&c=u&x=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&y=&a=0&d=7.346&v=27&r=291
200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=uweqylw0i29o&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&c=u&x=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&y=&a=0&d=7.346&v=27&r=291
IP
File type ASCII text, with no line terminators
Hash d2428a02047f7448c67dc8f454386e8f
d98add564e27679dc3526e41c566f8e30a4a3d69
d3e6f88427c33bd209e7315719175cb5ee4f8b2a06958633f9763edf722eb919
GET /pingjs/?k=uweqylw0i29o&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&c=u&x=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&y=&a=0&d=7.346&v=27&r=291 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:05 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e5d6b34ca695df-ARN
widgets.amung.us/colwid/?c=ff77e82d00ca
200 OK 4.0 kB URL HTTP/1.1 widgets.amung.us/colwid/?c=ff77e82d00ca
IP
File type PNG image data, 116 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash 54c64aa8587c69df6f10b0763891b0b4
74f60d1fa9eb41d431dd3fe36d91e0c274ab7608
79d32b58eba104fc11044721004222599f3c6a2769f33ad0b7522f4536c5592c
GET /colwid/?c=ff77e82d00ca HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:06 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
content-disposition: filename=wau-widget.png
expires: Sun, 25 Dec 2022 02:17:06 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: MISS
Last-Modified: Sat, 24 Dec 2022 02:17:06 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 77e5d6b448c7992c-ARN
ocsp.sectigo.com/
200 OK 471 B IP
Hash 31b92dcf24f74d1adeb282e62192d5ae
00f1b66d5aa8f1ad6e99af7fb35a204c3eb269e5
3da487c07eb2b8406b58ffebb85a542620f793f4b650de901d85540dd251d2f1
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sat, 24 Dec 2022 02:17:06 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Wed, 21 Dec 2022 23:33:42 GMT
Expires: Wed, 28 Dec 2022 23:33:41 GMT
Etag: "00f1b66d5aa8f1ad6e99af7fb35a204c3eb269e5"
Cache-Control: max-age=421594,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 77e5d6b46d4fb518-OSL
cdn.tynt.com/tc.js
200 OK 6.7 kB IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (647)
Hash 1c19de1014ecbb64bf79594584b7e243
e2ab949e99c448f107245a0a39c10e0b30130e9f
5c80cda6336fe83e049aea16c899b4983fa70744beccddd14d75ee0c178c5c77
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:17:06 GMT
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 14:57:21 GMT
vary: Accept-Encoding
etag: W/"62d96951-4599"
content-encoding: gzip
cf-cache-status: HIT
age: 211790
expires: Tue, 27 Dec 2022 02:17:06 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 77e5d6b6fe30b518-OSL
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&cu=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&cu=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi&cu=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:06 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=w!uweqylw0i29o&dn=TC&cc=1&r=
200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=w!uweqylw0i29o&dn=TC&cc=1&r=
IP
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=w!uweqylw0i29o&dn=TC&cc=1&r= HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=86400
expires: Sun, 25 Dec 2022 02:17:06 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Sat, 24 Dec 2022 02:17:06 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita&t=Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:07 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:07 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0&ct=Pak%20Janggut%20Tukang%20Cerita HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:07 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:07 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!uweqylw0i29o&lm=0&ts=1671848224812&dn=TC&iso=0 HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sat, 24 Dec 2022 02:17:07 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=geocity_rose
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: application/javascript
last-modified: Tue, 20 Dec 2022 16:36:20 GMT
etag: W/"63a1e484-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=4mv%2FLusJT3L2gLeTeoOVri6FUq7nRM3B0VAIOXTnDhG60bGRgtOwrU%2BLsH5sxbNd0ZTC0WPlwy%2FCdXbFC5cyyeukYsYckWZ3mYVThzDU2hE3TWXWsJMnU%2FhWgsIBQTXq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e5d68e6f5cb4f9-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Mon, 26 Dec 2022 02:16:59 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169953&RD=16137885204954&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=16137885204954&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169953&RD=16137885204954&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=16137885204954&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
GET /BidVertiser.dbm?pid=361547&bid=1169953&RD=16137885204954&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=16137885204954&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:01 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:01 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:01 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:01 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 7615
CONNECTION: Close
bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169954&RD=73909182449756&DIF=2
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169954&RD=73909182449756&DIF=2
IP
GET /bidvertiser.dbm?pid=361547&bid=1169954&RD=73909182449756&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:02 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:02 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169949&RD=74739687187624&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=74739687187624&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169949&RD=74739687187624&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=74739687187624&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
GET /BidVertiser.dbm?pid=361547&bid=1169949&RD=74739687187624&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=74739687187624&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:16:59 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:16:59 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:16:59 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:16:59 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5305
CONNECTION: Close
www.widgeo.net/geocompteur/css/city_css.php?c=geocity_rose
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/css/city_css.php?c=geocity_rose
IP
GET /geocompteur/css/city_css.php?c=geocity_rose HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: text/css;charset=UTF-8
cache-control: public, max-age=604800
expires: Sat, 31 Dec 2022 02:16:58 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=1ju5jS4zh%2BzWZVv1WX1GYNw%2FsHdjKFjXSrDGe3xxIxLN25X4uOYT4t8yIGYcYOCVOcS6K55Me2qqH4rRuLtplwCNzFlZingIogfZvLeX%2FZM3brpjt5HIZ2HsxW599bt%2F"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cbe6eb4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
inklinkor.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 0c1a91d740197341f5ff345397edd146
cache-control: max-age=86400
last-modified: Fri, 16 Dec 2022 15:53:36 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Sun, 25 Dec 2022 00:27:06 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 6587
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ncLJqKxd6Vp2rCr66Jb5%2BnEQPaNZJ1RMLPc%2FO3XjQIpezq0AK%2FnEHuod2ybGzLur7mVzLYKDAabgS8MazqN8D5MvtpcjVVxMRPW1k22tlHllZOTC4G%2F85shk%2FqczcE%2FZ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 77e5d68b9a55b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
t.dtscout.com/i/?l=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&j=
200 OK 0 B URL HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&j=
IP
GET /i/?l=http%3A%2F%2Fpak-janggut.blogspot.com%2Fsearch%2Flabel%2FEdisi%23&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:17:02 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Sat, 24-Dec-2022 03:40:22 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sat, 24-Dec-2022 06:17:02 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1671848222; Domain=dtscout.com; Expires=Mon, 03-Apr-2023 02:17:02 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.552
expires: Sat, 24 Dec 2022 02:17:01 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=2VEYV%2FJLqNRzmyWvJb8o5C2SY6ej4i7FvKgbz9nuVPmtiHd04o9As5NCi3NFwdBADx75xHHf7Tf2QZXWcrN5pb2dokp6TijkvQZ5s1%2FtA5FWXDhW3rmqKfljlJnykD8%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d69fd9ecf152-ARN
content-encoding: br
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1167641&RD=03341739460454&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=03341739460454&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1167641&RD=03341739460454&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=03341739460454&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
GET /BidVertiser.dbm?pid=361547&bid=1167641&RD=03341739460454&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=03341739460454&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:16:59 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:16:59 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:16:59 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:16:59 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 5305
CONNECTION: Close
www.widgeo.net/hitparade.php?pagexiti=geocity_rose
200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geocity_rose
IP
GET /hitparade.php?pagexiti=geocity_rose HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Sat, 24 Dec 2022 02:19:59 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xGA0KKtBqvN%2B2HOkZ9UQGnHaupyisVnKd2Eo3iNgUISl3BfGka2FgMyZ7ASVMXHY0d7AeLAjo0yD2Uw5ZPAXjTgFm1CNMXZG5JIErVkS%2FgCSi1s%2BaHGsXIL1UuIETMd5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d68cde81b4f9-OSL
content-encoding: br
X-Firefox-Spdy: h2
bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169953&RD=4110642539224&DIF=2
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/bidvertiser.dbm?pid=361547&bid=1169953&RD=4110642539224&DIF=2
IP
GET /bidvertiser.dbm?pid=361547&bid=1169953&RD=4110642539224&DIF=2 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:02 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:02 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/javascript; charset=utf-8
Content-Len: 0
CONNECTION: Close
t.dtscout.com/pv/?_a=v&_h=pak-janggut.blogspot.com&_ss=51sbbl6shr&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=45nj&_cb=_dtspv.c
200 OK 0 B URL HTTP/2 t.dtscout.com/pv/?_a=v&_h=pak-janggut.blogspot.com&_ss=51sbbl6shr&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=45nj&_cb=_dtspv.c
IP
GET /pv/?_a=v&_h=pak-janggut.blogspot.com&_ss=51sbbl6shr&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=45nj&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Cookie: m=1; oa=1; df=1671848222
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Sat, 24 Dec 2022 02:17:03 GMT
content-type: application/javascript
x-t: 0.138
x-c: 0
expires: Sat, 24 Dec 2022 02:17:02 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=sTZxgs%2FxUKs2GhM3EwkUw2wN8uJqF7keeFGqMtTP2czf8CKMS1nOg8zACzA9fqHQmNBWBdyR8DkaBC3yW69AGExwJumq8n3TpEbCV%2BvOkzCbvq81HtXYjndzosrqdx0%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 77e5d6a16a3ef152-ARN
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.464.1
200 OK 0 B URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.464.1
IP
GET /5/3294720/?oo=1&js_build=iclick-v1.464.1 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://pak-janggut.blogspot.com
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sat, 24 Dec 2022 02:16:59 GMT
content-type: application/json
x-trace-id: 4a41234b7a082c712b85a3531f7fb5b7
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://pak-janggut.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=bedd0728765e44a09e5b203334550a9c; expires=Sun, 24 Dec 2023 02:16:59 GMT; path=/; secure; SameSite=None
oaidts=1671848219; expires=Sun, 24 Dec 2023 02:16:59 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169953&RD=9217690056558&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=9217690056558&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
200 OK 0 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547&bid=1169953&RD=9217690056558&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=9217690056558&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi
IP
GET /BidVertiser.dbm?pid=361547&bid=1169953&RD=9217690056558&DIF=1&bd_ref_v=pak-janggut.blogspot.com&tref=1&win_name=null&docref=&jsrand=9217690056558&js1loc=-&loctitle=%20Pak%20Janggut%20Tukang%20Cerita%3A%20Edisi HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://pak-janggut.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Saturday, 24-Dec-2022 02:17:01 GMT
Cache-Control: no-store
Last-Modified: Friday, 24-Dec-2021 02:17:01 GMT
Set-Cookie: bdv_c12p=244; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:01 GMT
bdv_c12p=1_1_1; domain=.bidvertiser.com; path=/; expires=Sun, 25-Dec-2022 02:17:01 GMT
P3P: policyref="http://www.bidvertiser.com/bdv/bidvertiser/p3p.xml", CP="NOI DEV PSA PSD IVA OTP OUR OTR IND OTC"
Content-Type: text/html; charset=utf-8
Content-Len: 7615
CONNECTION: Close
142.250.74.161
113.23.169.115
23.36.76.226
104.18.32.68
217.23.10.44
31.13.72.12
93.184.220.29
46.105.201.240
149.56.240.131