r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash d2560f62890e75b8de444fed96c22f52
334ce0c48e606ee029f31eeb1463af87b1024bb9
4397e6b45b5822fbab9b83abe0b96ee70efba7cd2160b51936159865ede5fdb1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4397E6B45B5822FBAB9B83ABE0B96EE70EFBA7CD2160B51936159865EDE5FDB1"
Last-Modified: Sun, 25 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6382
Expires: Tue, 27 Sep 2022 05:39:36 GMT
Date: Tue, 27 Sep 2022 03:53:14 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 2d12f67fe57a87e7366b662d153a5582
d7b02d81cc74f24a251d9363e0f4b0a149264ec1
73c273c0b5a2de3cb970b8e8c187999d3b55e760dc7766dab4bb76428d19b551
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length, Backoff, Content-Type, Retry-After, Alert
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 27 Sep 2022 03:15:30 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 8ddb6d7670d8c5a85c04a10525a71b90.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: WmZJNi5RYjjibXEyDEpD94M9N2Zc8sGlHeiOWzw9Il2BcqYljGmtLQ==
Age: 2264
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Mon, 26 Sep 2022 04:35:16 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 475d4ecb64796af058573c6f1048e898.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: NaAMB6KW9OUCw2YCchGbzqUrBjokBOOK1IO8HzTmudu315Eal09W-A==
age: 83879
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 03:53:14 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
aniekelate.blogspot.com/2013/06/artis-wanita-naik-angin-bila-ditegur.html
200 OK 19 kB URL HTTP/1.1 aniekelate.blogspot.com/2013/06/artis-wanita-naik-angin-bila-ditegur.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (2904)
Hash edf20049ee705c66bc546b3f07cae5f9
f089f7e5497d5b56531bf3d8a7d464bb97d9bd30
b1e3c63adedc5b46c3e68c594eb56e910d87f5aed9f29b8e4121ff16d49c1474
Analyzer Verdict Alert fortinet Phishing
GET /2013/06/artis-wanita-naik-angin-bila-ditegur.html HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Tue, 27 Sep 2022 03:53:14 GMT
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: private, max-age=0
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
ETag: W/"e1ba656da3dacd230d4c39fb05c0b322721591c9c17ab34fcab3ae03a8b72d8e"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 19236
Server: GSE
ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
200 OK 27 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.4.4/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash 88ed7d5a26ffff39cbae41fa7b2c615d
5ea49f5aeeb49e8abd640da2f6d657fb57cc5acc
52943bd40a595c39f84e23ddd74755daa4d013b55c709de9b312661e59103ab3
GET /ajax/libs/jquery/1.4.4/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 27266
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 22 Sep 2022 05:22:30 GMT
Expires: Fri, 22 Sep 2023 05:22:30 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 426644
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
200 OK 20 kB URL HTTP/1.1 ajax.googleapis.com/ajax/libs/jquery/1.3.2/jquery.min.js
IP
File type ASCII text, with very long lines (39660)
Hash 6ad9e9100f68042a634e403e56e3744a
3d148af6eb9f86b03d5a815f4fb3a49c7b2df356
72bbdea3217793991ab87a6c7cb165d267551810d3d88b5fd2fd489748d04b7a
GET /ajax/libs/jquery/1.3.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="hosted-libraries-pushers"
Report-To: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
Timing-Allow-Origin: *
Content-Length: 19926
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 13:30:22 GMT
Expires: Mon, 25 Sep 2023 13:30:22 GMT
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Last-Modified: Tue, 03 Mar 2020 19:15:00 GMT
Content-Type: text/javascript; charset=UTF-8
Age: 138172
aniekelate.blogspot.com/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 aniekelate.blogspot.com/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Phishing
GET /js/cookienotice.js HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/06/artis-wanita-naik-angin-bila-ditegur.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Tue, 27 Sep 2022 03:53:14 GMT
Expires: Tue, 04 Oct 2022 03:53:14 GMT
Cache-Control: public, max-age=604800
Last-Modified: Mon, 26 Sep 2022 16:53:43 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
301 Moved Permanently 212 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash fcfe676ab627a22720dc3fef78eab91b
4d2413a9e993b244f910e225eb1302b314aeeb73
e000cc4af59d694536fb13b1092e9414f6e0e3888da02874c0876d2eca48418d
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:13 GMT
Content-Length: 212
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
301 Moved Permanently 211 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 32ec5bc669735970d512f8f7df96d2f9
ca9b5eb78724887e5237720f70a385520a35a525
b79c2805b8775d9e298c8f96b52d53e80ae9b8a1d29ad923fff6cfdb43243431
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:13 GMT
Content-Length: 211
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6133e354a7138d14e713ab4cd4d0e7
d86dc2d8002443648774db9fbc709a5cff7bb716
a19ed99c04a15360ef292e662bd3334732993732317a38c36e6f7041734d9097
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 8ecc94a41c3ff47dfd21fc2d2bd9ef51
f622492988a2a3d787aa55d68ff3e55fe8674b10
89a8b73edcd434521dacb01b8009d44cabc5a2908a7a7a13a5c3bb0685c056b6
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:13 GMT
Content-Length: 249
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
301 Moved Permanently 249 B URL HTTP/1.1 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 5799e0e68ef11f974b99fd89204172af
5e7eb09100a411282cacba7c44592cf7578bb9d3
ac30887bee0c593e79b8c8c978626374504e337be360d4fb661c4c872b4ef3cf
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:13 GMT
Content-Length: 249
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6133e354a7138d14e713ab4cd4d0e7
d86dc2d8002443648774db9fbc709a5cff7bb716
a19ed99c04a15360ef292e662bd3334732993732317a38c36e6f7041734d9097
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.statcounter.com/counter/counter_xhtml.js
200 OK 14 kB URL HTTP/1.1 www.statcounter.com/counter/counter_xhtml.js
IP
File type ASCII text, with very long lines (43632), with no line terminators
Hash ec70672a2f4620ce69dbd93d41715fb2
68d559ba806e8aa338221616ba9a85ae582e03a3
f6cd20fa5ef3de2a6bd894efa434c1650f12cf6b3c9df03d45489aff18c44b7e
GET /counter/counter_xhtml.js HTTP/1.1
Host: www.statcounter.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Last-Modified: Fri, 23 Sep 2022 09:41:24 GMT
ETag: W/"aa70-5e954fb2f9d71"
Cache-Control: max-age=43200
Expires: Tue, 27 Sep 2022 12:45:31 GMT
Access-Control-Allow-Origin: *
P3P: policyref="http://www.statcounter.com/w3c/p3p.xml", CP="ADMa OUR COM NAV NID DSP NOI COR"
User-Cache-Control: max-age=43200
Content-Encoding: gzip
CF-Cache-Status: HIT
Age: 11263
Server: cloudflare
CF-RAY: 75114a8a4b1ffabc-OSL
www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
200 OK 7.8 kB URL HTTP/2 www.blogger.com/static/v1/widgets/2975350028-css_bundle_v2.css
IP
File type ASCII text, with very long lines (35959)
Hash 5aa2d3297bdc86bc81322aedecbb5e79
1c0a3c007e41726e167e79b70ddea76198650884
feae1fac625d0f30b5f10fa00b62df1a5600cd2178062c427e55f289b29cc630
GET /static/v1/widgets/2975350028-css_bundle_v2.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 7776
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:55:32 GMT
expires: Mon, 25 Sep 2023 15:55:32 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 24 Sep 2022 18:50:26 GMT
content-type: text/css
age: 129462
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 39f4c6b878fc92202be480070361362c
5963f72aea1957734b22dfb4019291dc2db459a3
a5954460fca600556f47d2ef8b59206644e00fae1acef9faaff3156d417642a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/4150139458-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b
GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 129404
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1961)
Hash a83f3f604afba51d8f4624c6f462384a
a078be2f5f1df08b62f3caead00d8b79ffc3a372
62efd9e83340bb7437cb65316ba334b4a580054d8c44b4531dc8d1a2335b47f2
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Expose-Headers: X-FB-Content-MD5
x-fb-content-md5: c72bb58b43b12e5de532091cbe92ccc2
ETag: "b510a28a8b56a48e2dc01852e5cc6fdf"
Content-Type: application/x-javascript; charset=utf-8
timing-allow-origin: *
Access-Control-Allow-Origin: *
cross-origin-resource-policy: cross-origin
Expires: Tue, 27 Sep 2022 03:54:25 GMT
Cache-Control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
X-Content-Type-Options: nosniff
x-fb-rlafr: 0
X-Frame-Options: DENY
Strict-Transport-Security: max-age=31536000; preload; includeSubDomains
Content-MD5: qD8/YEr7pR2PRiTG9GI4Sg==
X-FB-Debug: q264lmZEPibs0YT2Rdeulv0o6NbPQHAsomYKopeh+wnIy9Gpn6Aq+w3OO21LKb9tduVC7Or/RFU9niCDWqRGzw==
Priority: u=3,i
X-FB-TRIP-ID: 1679558926
Date: Tue, 27 Sep 2022 03:53:14 GMT
Alt-Svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
Connection: keep-alive
Content-Length: 1685
apis.google.com/js/platform.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Tue, 27 Sep 2022 03:53:14 GMT
expires: Tue, 27 Sep 2022 03:53:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 39f4c6b878fc92202be480070361362c
5963f72aea1957734b22dfb4019291dc2db459a3
a5954460fca600556f47d2ef8b59206644e00fae1acef9faaff3156d417642a4
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6a6133e354a7138d14e713ab4cd4d0e7
d86dc2d8002443648774db9fbc709a5cff7bb716
a19ed99c04a15360ef292e662bd3334732993732317a38c36e6f7041734d9097
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/plusone.js
200 OK 20 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1277)
Hash 202067c443611dc148225b75c0e3d556
9e6be316508f5c2a2e4b8cecc561b0e7415bd38c
5d9db864eb7c211f62d61436846b80db003b0102c903dda9bc15af29e5eefa39
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20362
date: Tue, 27 Sep 2022 03:53:14 GMT
expires: Tue, 27 Sep 2022 03:53:14 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "5f35d22782378ad2"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4538701cf9bc34d908f50370beb922f4
df141b9c3ec626ecaba7c1899073a48b811c4113
61497b93eb237687a8fff5845a7a81aff2f2f53dc56f2d0818bfb98dd1256d6f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 5adb7eb1d103eadeeafac36e663ffdd3
23b784388dd634fa736cd60aed71570661e73d02
5c95ba48bc342887b4f7ef697bd4def50f6f2f472f654169179e5ac44df883d9
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 491
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:14 GMT
Last-Modified: Tue, 27 Sep 2022 03:45:03 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
200 OK 4.4 kB URL HTTP/1.1 www.samsengfb.com/samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741
IP
ASN #49981 WorldStream B.V.
File type HTML document text\012- HTML document, ASCII text, with very long lines (4736)
Hash 9f9b2ee811709e30c6204148dd485fc3
dc17d252e4f0ee1c7166d65a4a27a4dfbee4aacb
5ff1a77edb2e86969fcc5af2dd6fca215b07f5343394a3bcfc1a740eb6de4d52
Analyzer Verdict Alert fortinet Malware
GET /samsengfb.js.php?token=8bce1b2342553c8507f0f7f5de798bc3.5912.6741 HTTP/1.1
Host: www.samsengfb.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.20.2
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding, Accept-Encoding
X-Powered-By: PHP/7.2.34
Content-Encoding: gzip
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90
IP
File type ASCII text, with very long lines (704), with CRLF line terminators
Hash f80f2606dc583da50e3fe9a91fb50096
89d499f14cfaacb858867877a3b6ed09e5424dc1
38fd6bfdd9a18d288c773272df470c283ac1ea2df52b103a7afd549553af2fb2
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 1335
X-Firefox-Spdy: h2
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280
IP
File type ASCII text, with very long lines (705), with CRLF line terminators
Hash 66229ba085fabe0975b650931b440ba3
d20b1ed33a0d14c965d3f2d6d6cd651f1b840902
01e171e095331678c2826ccefc6ce1279891fdd6fe2b96188af236eb003435ab
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280 HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 1337
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:10:46 GMT
Cache-Control: max-age=3600, max-age=3600
Expires: Tue, 27 Sep 2022 03:36:19 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 6480520a5e02f3163410e3134bd77baa.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: N4sxTCqTAHDHYWQJh7aGcy00w9AL7mXbBol9HZAtNIqk60Q5RTAJHQ==
Age: 2548
www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
200 OK 2.0 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe
IP
File type ASCII text, with very long lines (2149)
Hash a8847b4c51707a70c275ad40f47c497f
9d522afaee3d4093626d474468d20ec51f7bb9e7
acfca2cab05002f318d7678734cb1a7f1437dc226e795b6cad01c45ebb1da3a8
GET /geocompteur/geocity.php?c=geocity_orange&id=1955922&adult=0&cat=societe HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: application/javascript
Content-Length: 2036
Connection: keep-alive
set-cookie: w_js_ads_code=ok; expires=Mon, 03-Oct-2022 03:53:13 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Tue, 04 Oct 2022 03:53:13 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6TRv4ANHzWCrV23lgS6UJdUdtQ0C%2BcYc5Vefcau0kwsgNmWx%2BgZviFGc317MNkNPU0I82JqrMfdv9Z5xsQKBGAISpcXvYvCGO6jJ0HPemvddXJDkbscl2HaqYDpdvgHg"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75114a8a4d28fac0-OSL
alt-svc: h2=":443"; ma=60
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
200 OK 87 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317136
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 6c60754af27389e2778b3584bf10f3a1
196be0cdc74708ee01c01f86a648c16573e18fc6
ff2485a3dc35082ae7e3799388665929ffd72227191bf24b7c01033bfe19ddd9
GET /BidVertiser.dbm?pid=361547%26bid=1317136 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Content-Length: 87
bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
200 OK 87 B URL HTTP/1.1 bdv.bidvertiser.com/BidVertiser.dbm?pid=361547%26bid=1317133
IP
File type HTML document text\012- HTML document, ASCII text, with no line terminators
Hash 6c60754af27389e2778b3584bf10f3a1
196be0cdc74708ee01c01f86a648c16573e18fc6
ff2485a3dc35082ae7e3799388665929ffd72227191bf24b7c01033bfe19ddd9
GET /BidVertiser.dbm?pid=361547%26bid=1317133 HTTP/1.1
Host: bdv.bidvertiser.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/html
Connection: close
Content-Length: 87
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right
IP
File type ASCII text, with very long lines (715), with CRLF line terminators
Hash ed01fd18f608b038ee0cd7fc586f47f5
24d3162967d61d62566c75d90a05b0bccc28e80e
f0edc414a24e8778898eb79200a933657f2f9a25b74b3e3f650018cab6194bcb
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=120x600&name=From+Right HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 1345
X-Firefox-Spdy: h2
tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
200 OK 1.3 kB URL HTTP/2 tags.h12-media.com/tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom
IP
File type ASCII text, with very long lines (716), with CRLF line terminators
Hash 138b1c92bce9441c44f7397bc99706ad
149ae795e1811ce9e83fedd59be339b321328fb3
b5a604aa39478641ac45a1c4b0d158d731eaea950120fa003d82011e24af3bed
GET /tags.js?site=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&size=728x90&name=From+Bottom HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
content-encoding: gzip
vary: Accept-Encoding
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 1346
X-Firefox-Spdy: h2
3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
200 OK 3.1 kB URL HTTP/1.1 3.bp.blogspot.com/-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6e45b7967ba56d5acbb4bc6489d34ae0
df158f16e15c047f963588d11e0ee565a323503a
b46cb83ea3cd77840e3dc1020052e5415699c043add0eb4f1eb0f50863e1f9d2
GET /-UQn2GAtco_0/U0Nn-YX6DWI/AAAAAAABZRs/EFQz7zIMC-o/s72-c/pakai+tudung+tapi+seksi.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="pakai tudung tapi seksi.jpeg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3079
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:14 GMT
Expires: Thu, 22 Sep 2022 02:02:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1651c"
Content-Type: image/jpeg
Age: 0
3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
200 OK 3.0 kB URL HTTP/1.1 3.bp.blogspot.com/--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 618f03401052046c8420cffd4f6ccd9c
4c71f8cc34782da2ad4f5a44b01a68f3a0bc860f
77bde2e7864e9b8a3f6ce3e3d80914879384207989423370c81028f3a776a99e
GET /--75H3iRhYhs/UWSZVK_MEyI/AAAAAAAA7x8/oeFnTDNap4Q/s72-c/168437_1802777510716_6075141_a.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vef20"
Expires: Wed, 28 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="168437_1802777510716_6075141_a.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:14 GMT
Server: fife
Content-Length: 2989
X-XSS-Protection: 0
2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
200 OK 5.6 kB URL HTTP/1.1 2.bp.blogspot.com/-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 14636a2212513eaf52b7cf83887208bd
9da1b8ad1c4e4b820d2132062ba4d34253b015d7
d1a2dd943f651fa66cae21cf538d1608f4656a9ad0ec7b2e1a09d0ad3d16ec4e
GET /-mnw-f-x458g/UD56nKC1TOI/AAAAAAAAZ-A/KoGz2nYaAxg/s72-c/chicken-biryani.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v67e0"
Expires: Wed, 28 Sep 2022 03:53:14 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="chicken-biryani.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:14 GMT
Server: fife
Content-Length: 5597
X-XSS-Protection: 0
sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
302 Found 216 B URL HTTP/2 sites.google.com/site/unwanted86/javascript/animatedrecentpost.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 39e83bbb13ffce196029a2df35b63b32
7b13d6e23356c2708d0a179a117d242c0e152584
eadf76ac5391f5337c16d17794e8e2a09441670121611336c723b1b699b61958
GET /site/unwanted86/javascript/animatedrecentpost.js HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: SAMEORIGIN
x-robots-tag: noarchive
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 27 Sep 2022 03:53:14 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
location: https://sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 216
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah6.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah6.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah6.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah6.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: VAR5gQAvTDJOrhHQk8MX-s8YWCvSqOEJIPU0eD_ajH9al957Su0JJQ==
Vary: Origin
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah5.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah5.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah5.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah5.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: aNRigWLFdBhOTRqF31382Q8TsFBJ8pAjWaEc2YhnmcQC9Ib_vh5GUw==
Vary: Origin
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 13:54:51 GMT
Expires: Mon, 10 Oct 2022 13:54:51 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 50303
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah3.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah3.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah3.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah3.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: RAhFeg9O1AgXMwFAm1miTdus5dWLlDpxx258sOoDqvzXUlAMk8t7mg==
Vary: Origin
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: nGTMm7GugMUTidxIHMGkw50g5yxPY8qUFkUQW3ONbUoIRiPw3P-w5Q==
Vary: Origin
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah2.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah2.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah2.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah2.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Vk-pneuw8nz8NOwcs_IV9mQFwIDb4Zi7CAq5DpBdnZHpYfCnK5oimQ==
Vary: Origin
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah4.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah4.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/oo307/beautifulnara/bnara/aishah4.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah4.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 f46f7100ad6fc83a021f62212f945830.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: A-X0ZFIeSZZIY0dyZMUEPxnk_nSIz-hKFanm0ANyqgFkUVhaJai33w==
Vary: Origin
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 8c91c66974858f77efc2e7be5e41295c
57435a6654410b4bfe974d68312d00df6cd54c7b
8bbb7b9f71c2fcaf1e5cd16c052d3d8384898c5af3000df56a5493246b6a8115
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "8BBB7B9F71C2FCAF1E5CD16C052D3D8384898C5AF3000DF56A5493246B6A8115"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=801
Expires: Tue, 27 Sep 2022 04:06:35 GMT
Date: Tue, 27 Sep 2022 03:53:14 GMT
Connection: keep-alive
3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg
IP
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-nl6XDk2Ln_s/TxyDYsxcC8I/AAAAAAAAAIg/C8dFsyqYlos/s72-c/tyra-banks-bald-head.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:14 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 03:53:14 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
www.widgeo.net/img/logopm.png
200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 19 Oct 2022 22:18:47 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 624866
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=z9u6bMXvR3uBfjmAfuANmCKF0xF702J9%2FNBTS0Ridu7%2BEP%2FWdhIDYP1D64byCqkmeKVVEmVkK%2BZJG0%2BaPwP2CuJVXE%2FFGdU1O1ajsks1mL7E8Z3upXYK9TxSujlscYmr"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75114a8cde30fac0-OSL
alt-svc: h2=":443"; ma=60
cleverjump.org/counter.js
200 OK 5.6 kB URL HTTP/1.1 cleverjump.org/counter.js
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with CRLF line terminators
Hash 83126dc4af783a2179ab362a5bbec530
b1fe91477d92ab09066f28ddda5b31a4bf0f1689
cb1ef4607e93916a5dd30beae4617069924cb5f10edb65d8f93468c3fbdc1dc4
GET /counter.js HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: application/javascript
Content-Length: 5571
Last-Modified: Wed, 20 Jan 2021 12:50:32 GMT
Connection: keep-alive
ETag: "60082718-15c3"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: max-age=86400
Accept-Ranges: bytes
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 695 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (652)
Hash c55419ea844ec8ca6cfb93dfdca5086f
73ec8300a0661eea98bf95d300b006a32ea229be
e7aff140924bba9d0645c9ad1f9ea10c502a30041142b21c25201fad80a4f560
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Length: 695
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
301 Moved Permanently 167 B URL HTTP/1.1 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash f5d40b7259645010f9a248858ad14178
b3051d17a6ec8c9e166bf09a62b48261ab86957b
7f5007068d2b56ea9735e2490d60cff2e72cae312024ac1f6c91158eba47d05d
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Server: CloudFront
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: text/html
Content-Length: 167
Connection: keep-alive
Location: https://i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
X-Cache: Redirect from cloudfront
Via: 1.1 aa34a836095df9de9d246a53dd63f1d6.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: JWTT3Wh48mdMLSlIndYCAGuxYdx0fivj858GGxTZBdhkrcy_R-x1Mw==
Vary: Origin
4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
200 OK 84 kB URL HTTP/1.1 4.bp.blogspot.com/-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1090x290, components 3\012- data
Hash 7a24f6e479883b65a999dc1923608118
a2cbff8e7b6cd2176dd629823d34f7ab0d118349
b0d35cd8c5fc6cbb3ee76e7cbfd5f4aabb6a374c7ce5cff14dad96d587bc70c2
GET /-sLtBF0uhx3s/T8o1DAur7tI/AAAAAAAACgY/LT2RBwg7rbs/s1600/ert.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va06"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ert.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 83873
X-XSS-Protection: 0
sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
302 Found 464 B URL HTTP/2 sites.google.com/site/unwanted86/javascript/animatedrecentpost.js?attredirects=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (425)
Hash e38cdcf964b42632d47a32c1e3c27ab2
58c8c4e964f03df800bc49ebe3b3f08ab3c965ca
d74e317a9c285b31c9b2a1e257f29f9bee2c56f75c1935f605f9b53b52b34488
GET /site/unwanted86/javascript/animatedrecentpost.js?attredirects=0 HTTP/1.1
Host: sites.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
location: https://26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cqTdqsTcAXN6Y5eOgzSnvYKr3MBJSv4tL1lPDdWF-urZF5iMM09Zd1ybN2akFJ8hkvVeO_ZG2RSVpux1xmj7hm7T9ZaYpIYZoLUjLbCaJX5p9WPdShMlvPQvXLnYlWIktE9vWtv2nq9raNReO4CpTjeGZUWjezKvRMmXpbCmTBaMVl27RNM04XE2qCAaGSl0o5fWCLbjlTS_X8vfjH5prHFpTWIwWU3EugfvSXYZAEzoJ8wjGs%3D&attredirects=0
content-encoding: gzip
date: Tue, 27 Sep 2022 03:53:14 GMT
expires: Tue, 27 Sep 2022 03:53:14 GMT
cache-control: private, max-age=0
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 464
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=728x90&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.6862143402738274&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 0
X-Firefox-Spdy: h2
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: u4U7ZeYEWxB044tJnvVB1g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: EKDRphMu4WH2Vdp16AzmwSwVwdI=
2.bp.blogspot.com/-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg
200 OK 3.2 kB URL HTTP/1.1 2.bp.blogspot.com/-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d0dbd50407c501efa5769b24df56848a
7849d9fd846dc1f5e695e0b64d577ae4d79f11f0
174adcb8363845f08ba6ca6e0d1b3de6d32e706e88ae9f8446533894bb7ec3ef
GET /-iiDnzGXOivQ/Ub9cxIt_uXI/AAAAAAABtoI/arQnLCnIXzE/w72-h72-p-k-no-nu/Aksi+Wawa+Zainal+Di+Dalam+Kereta.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1b683"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Aksi Wawa Zainal Di Dalam Kereta.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3167
X-XSS-Protection: 0
www.blogblog.com/1kt/transparent/white80.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/white80.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 94a1820903fb1f98de19df188a6ad531
599ad7d04fd5b1fa13f334e95240a5a9f4a66583
6e232a3693a281342acc16b293dddeafcf91579f1b52df2cf22303b17c2a0e57
GET /1kt/transparent/white80.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 11:08:41 GMT
Expires: Sun, 02 Oct 2022 11:08:41 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Sep 2022 17:50:40 GMT
Content-Type: image/png
Age: 146674
www.blogblog.com/1kt/transparent/header_gradient_shade.png
200 OK 424 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/header_gradient_shade.png
IP
File type PNG image data, 88 x 300, 8-bit colormap, non-interlaced\012- data
Hash 68d74f6988b7bcb8d69e382c1769f6af
956161f38d64d4fbf81cafe0b009339dcdbcb73c
4bf4e9296165fffe3661a6a978e175f37f9ff65e6ac2beb9f40a92e2d96710c3
GET /1kt/transparent/header_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 424
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 04:06:47 GMT
Expires: Sun, 02 Oct 2022 04:06:47 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Sep 2022 20:53:32 GMT
Content-Type: image/png
Age: 171988
www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
200 OK 185 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/tabs_gradient_shade.png
IP
File type PNG image data, 50 x 50, 8-bit/color RGBA, non-interlaced\012- data
Hash a2d40695f173ddb461829cb8bf9b3dd8
530a14dc6f0baa0de1f90c5a17c28126e0daa812
9f9fb5396ea8566bb59a43a174a5ec23bf4e04ec9cc18b85b69af22d9206ddd6
GET /1kt/transparent/tabs_gradient_shade.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 185
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 14:55:52 GMT
Expires: Sun, 02 Oct 2022 14:55:52 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Sep 2022 19:50:11 GMT
Content-Type: image/png
Age: 133043
www.linkwithin.com/pixel.png
200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
cleverjump.org/hit?z0;s1280*1024*24;f1gka0lv5ot1aWmlrrCjsT3nvFNshMi;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html;hBebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20;0.3773349195943737
200 OK 0 B URL HTTP/1.1 cleverjump.org/hit?z0;s1280*1024*24;f1gka0lv5ot1aWmlrrCjsT3nvFNshMi;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html;hBebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20;0.3773349195943737
IP
ASN #49981 WorldStream B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /hit?z0;s1280*1024*24;f1gka0lv5ot1aWmlrrCjsT3nvFNshMi;cshb2;r;uhttp%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html;hBebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20;0.3773349195943737 HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
P3P: CP=CleverJump
Set-Cookie: _cjuh=d9UFTINUwPLIjdX9uew6WSoryuYfsU; expires=Wed, 27-Sep-2023 03:53:15 GMT; Max-Age=31536000; path=/hit; httponly; SameSite=None; Secure
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5454169b1878e99960907cb8926c8b32
55b6f1ada03d6e7e87b15b050a4a02b9cc94f402
bc608b69cf3373d7926f7493d58c0dea29915b6071599b2aed9811283c718562
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
synad2.nuffnang.com.my/k.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/k.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2dc70b6c45bf3273ce02cc411906180e
3e706e22af3600df7ca611184af391f70755d256
32a8cb54b2eda028acc7b6cc832de6dcc6f82b4ec288620ec870def3f74b1b6c
GET /k.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/k.js
Cache-Control: max-age=86400
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
3.bp.blogspot.com/-q4rfd2XU4Z0/UazaJ4IKPwI/AAAAAAABqO4/_sjunUK2n1Y/w72-h72-p-k-no-nu/malaikat.jpg
200 OK 4.0 kB URL HTTP/1.1 3.bp.blogspot.com/-q4rfd2XU4Z0/UazaJ4IKPwI/AAAAAAABqO4/_sjunUK2n1Y/w72-h72-p-k-no-nu/malaikat.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash d0f2df5e65c3852f249583c7c4db3a05
3ba43d1b4c537f1db2bda76181a4c935da294699
aa6085ed8bd9e3ec0b92558c4c686de1883cda350fabef10211050238bfbe3e0
GET /-q4rfd2XU4Z0/UazaJ4IKPwI/AAAAAAABqO4/_sjunUK2n1Y/w72-h72-p-k-no-nu/malaikat.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1a8ee"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="malaikat.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 4008
X-XSS-Protection: 0
synad2.nuffnang.com.my/j.js
302 Found 314 B URL HTTP/1.1 synad2.nuffnang.com.my/j.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 57577e65e048d98e8b1deceb81e22a3d
c261ab50058de936852f367d6b5555f3f99fc290
1d5c5d863b0436f2c77e48b9568f171f343afd9f293697e1bb0ebc7dbbb1cd99
GET /j.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/j.js
Cache-Control: max-age=86400
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Content-Length: 314
Connection: close
Content-Type: text/html; charset=iso-8859-1
synad2.nuffnang.com.my/lmn.js
302 Found 316 B URL HTTP/1.1 synad2.nuffnang.com.my/lmn.js
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 0b51d68ad3aa17a93ef618d7479f6dd6
a81c838d670ba94af83ddaf7d9f5bcdc4477373a
fea7caa1b9f39836624981f4498503e8f593e343824e2dd366390cf91c6283fd
GET /lmn.js HTTP/1.1
Host: synad2.nuffnang.com.my
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 302 Found
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: Apache/2.2.34 (Amazon)
Access-Control-Allow-Origin: *
Access-Control-Allow-Methods: POST, GET, OPTIONS, DELETE, PUT
Access-Control-Max-Age: 1000
Access-Control-Allow-Headers: x-requested-with, Content-Type, origin, authorization, accept, client-security-token
Location: https://eccdn1.synad3.nuffnang.com.my/lmn.js
Cache-Control: max-age=86400
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Content-Length: 316
Connection: close
Content-Type: text/html; charset=iso-8859-1
lh4.ggpht.com/-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 4.0 kB URL HTTP/1.1 lh4.ggpht.com/-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 7a295d004401d2c95d4468c3ba62284c
631f77b2b47b63853b4618643f2034649e31933d
d0db18488e5641decc1b457b3b65538c8cae1b3129f90958b396ca6a38483cca
GET /-o5ueMRbS4VM/UwKczrtfPpI/AAAAAAAB1Lk/7yYEa_qQw-8/w72-h72-p-k-no-nu/IMG_20140216_131805_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="IMG_20140216_131805_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4016
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:15 GMT
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d4ba"
Content-Type: image/jpeg
Age: 0
lh3.ggpht.com/-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.7 kB URL HTTP/1.1 lh3.ggpht.com/-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 25afd57dab09da9712c98af340067728
c321921f70ad71b22330c8fd2689301892feee0f
ec58051ce3cc85394878c54f342c4fdf9bef88649ca3c8ef1fd9c3c8b43dd9d0
GET /-y0o1xRvkinM/UaOnjnexsOI/AAAAAAABop4/KTvoPq_8wXY/w72-h72-p-k-no-nu/Puteri%252520Sarah%252520dan%252520Ammar%252520Alfian_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Puteri Sarah dan Ammar Alfian_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3731
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:15 GMT
Expires: Sun, 25 Sep 2022 02:33:33 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1a29e"
Content-Type: image/jpeg
Age: 0
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah3.jpg
200 OK 23 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah3.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 348a7147f85158020d3aec44de427b98
74a0c4a47657d25570546121a0f0ebd4ac3b2d3e
df80f945942102d0be708c93018b3d07aacb1b40cf3bfbb4587def8cf71a32f2
GET /albums/oo307/beautifulnara/bnara/aishah3.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 22790
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah3.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-39e5c27f209686cf6cb93329
x-request-id: v1VHM9I51P6nKuV6n1nz3
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: HlA4EFLGX9fbFQePjmLZcp5Voe_08BTpXljsIJecHeZHLwaBn1tbQg==
vary: Accept, Origin
X-Firefox-Spdy: h2
lh3.ggpht.com/-89V_x6IlJmQ/UY7CLJxYWDI/AAAAAAABlQ8/FGj8tMGs1bI/w72-h72-p-k-no-nu/CurvyKimKardashian_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.2 kB URL HTTP/1.1 lh3.ggpht.com/-89V_x6IlJmQ/UY7CLJxYWDI/AAAAAAABlQ8/FGj8tMGs1bI/w72-h72-p-k-no-nu/CurvyKimKardashian_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash db2e45ae7ba2f85a491e9a38eb6aab89
75d410f4dbb73e1f6029df51c223e7f62a4124c5
b8eb418fe665d429a2aee04bebe3e08a6a538b793da42915997dd705cd17eb99
GET /-89V_x6IlJmQ/UY7CLJxYWDI/AAAAAAABlQ8/FGj8tMGs1bI/w72-h72-p-k-no-nu/CurvyKimKardashian_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1950f"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="CurvyKimKardashian_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3235
X-XSS-Protection: 0
lh3.ggpht.com/-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 3.2 kB URL HTTP/1.1 lh3.ggpht.com/-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash b26415ff385cb1913f4ae1cd97dc0b9d
bc3fb3b16f369b62640a2b915e58173b7e0162a5
1cb854473c22c281b88bbe7f2e87d0a35a0b54525575a0f4da23492bb1c93bb3
GET /-tO_upXceqeA/UESzOroMg_I/AAAAAAAAZ4o/YhgBrFsy4C0/w72-h72-p-k-no-nu/image%252520%2525283%252529_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v678a"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="image (3)_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3168
X-XSS-Protection: 0
4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
200 OK 3.7 kB URL HTTP/1.1 4.bp.blogspot.com/-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 60x80, components 3\012- data
Hash c93233f793ed806ff86fdae4d003228c
e9809624b85984532903836e7b80b6ee8588ef52
e056e562bab90ce13baba9feb03d199524cfff4ef5d656d960d565a0d56d80b6
GET /-CL0UaqstldU/TvVAlM1ACWI/AAAAAAAABWM/PSpKeaOpPL0/s80/DSC05641.JPG HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v563"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="DSC05641.JPG"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3676
X-XSS-Protection: 0
cleverjump.org/hit/get-uid.php
200 OK 30 B URL HTTP/1.1 cleverjump.org/hit/get-uid.php
IP
ASN #49981 WorldStream B.V.
File type ASCII text, with no line terminators
Hash 8974e5d8b596db73b640e09026bf5fab
db198cb8e30dd88405d7852d1aeaa58d55029a08
cd03400abcb16b6f1ac02a4429827184becb394b49246dc3f2918f804a72d736
Analyzer Verdict Alert fortinet Malware
GET /hit/get-uid.php HTTP/1.1
Host: cleverjump.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Cookie: _cjuh=d9UFTINUwPLIjdX9uew6WSoryuYfsU
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.18.0
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
X-Powered-By: PHP/7.2.34
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah4.jpg
200 OK 24 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah4.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash bf8891d7eb22b8c7cb308d5e1fa400ac
ca95ee34da6593d09b3e357d0faedde5740456ab
83d934442bc07664ab5550cad8ff1b48e49e3c2737660c6c3eb3dad9cf09e5ba
GET /albums/oo307/beautifulnara/bnara/aishah4.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 24272
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah4.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-4c8680c825a368bd13d60b2b
x-request-id: CktoZQSldYmkuJ_PxbiPA
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 0eTeticagOifq6d72X_E8_N8usYB8WO6M6BmP5g93NfrZ5WMLAEqJg==
vary: Accept, Origin
X-Firefox-Spdy: h2
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
301 Moved Permanently 0 B URL HTTP/1.1 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: application/binary
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 27 Sep 2022 03:53:15 GMT
Location: https://themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
Server: ESF
Content-Length: 0
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
lh5.ggpht.com/-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 4.0 kB URL HTTP/1.1 lh5.ggpht.com/-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 72736913e9c828ea1196037c3db09386
772eab334066533e7f27ffaf30c04fac39ad0326
69729a0587818420e4790292d6a5b690c7b74034f2b7aeaabcb9521dd9ba6777
GET /-4DbKmJT7ngQ/Ua7HDys3U8I/AAAAAAABqpY/QMGGV3fXdxY/w72-h72-p-k-no-nu/fazuraturki03_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1aa96"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="fazuraturki03_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3998
X-XSS-Protection: 0
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah.jpg
200 OK 24 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1e68e2c7617ac46ddc70efea3d70266b
d041372660385bb0537592a396d5a5f87d361505
dc79706a5cf5ca53a0546c09836dafad5062966de245c08e7a9dfda41ceff4a4
GET /albums/oo307/beautifulnara/bnara/aishah.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 23864
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-2e4e24a87afed924186d5396
x-request-id: sQjIEJm_R8ijDgjPM6vET
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 6QRwsR_4hSSX3-wYrt6-FRUloW2B0-N9rUbTCQvlFA07yxQQ5VYNnQ==
vary: Accept, Origin
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6908b750175e1c2e2af86c77945ed11
ea6bc6f581500a0974977bbef6bd3432c181bc0f
1dde4f6f372d8e056a96129e101a31d04a0f97448c66df7175251060c6a8d0cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
200 OK 746 B URL HTTP/2 i155.photobucket.com/albums/s282/theviejo/recurso_10_7.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash e4122d87cb9a5f68196feea53f8c15bb
00e6127fd0c2d6dbf19a6bd7b4af50fce0c44dbe
f1c68f26be0dc943e60667b1cfff7aa3706dcf91614c1ae9ade2d15250fa11bc
GET /albums/s282/theviejo/recurso_10_7.jpg HTTP/1.1
Host: i155.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 746
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="recurso_10_7.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-750dd6bf3aafdc0e7a6cdbae
x-request-id: XEOOYlx8pXh1fpje4JL7h
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 75Mb6b2xst82-pRYXuvSYoopoV8iJdv7RKEnCdW6Vnaw-mVErFIReA==
vary: Accept, Origin
X-Firefox-Spdy: h2
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah6.jpg
200 OK 15 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah6.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0616dc9927eee4eafcc55f34b8c8ea53
1a65f4c762d304455d990590f6064506dd67e596
ab7fc37028caa36751d36911a0111e37f98cdadd2740bccdb110b963fa8201e0
GET /albums/oo307/beautifulnara/bnara/aishah6.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 15384
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah6.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-716be0394508eb8c5444b7a0
x-request-id: fgtQ5otITbviaeRvCsJB1
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: g4gFqWQD3rZGMJ2tlW69iZx8ld-NloZw8sv7RGb-ngTM39secF-_Iw==
vary: Accept, Origin
X-Firefox-Spdy: h2
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah5.jpg
200 OK 24 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah5.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 5677e5dbc1e8c268332618b9ba20ea01
359a12fad3657c147c28fb9988d014b40b964957
711b202f0455007fd3878eb83a1bc3005f93789f27aa43098406b89c97fbd9e3
GET /albums/oo307/beautifulnara/bnara/aishah5.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 24364
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah5.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-3e6fac2d07c4e83158f0cdc3
x-request-id: Q6X7TBeud59hgnxrZzIC6
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: lMozLXGtDpZIcwnLBiD_zMNALaB6dM6ol28i_aadLYKKN-QjJkIAow==
vary: Accept, Origin
X-Firefox-Spdy: h2
lh6.ggpht.com/-tg3F2ACklLc/UbFDZx8NcBI/AAAAAAABrJg/qhgU2ZLJK9Y/w72-h72-p-k-no-nu/jjjkjklkl_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 4.5 kB URL HTTP/1.1 lh6.ggpht.com/-tg3F2ACklLc/UbFDZx8NcBI/AAAAAAABrJg/qhgU2ZLJK9Y/w72-h72-p-k-no-nu/jjjkjklkl_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash b417c0d25fa83e1c017de3265348ebb6
016d36763af2d12b7e73f9b9748475614ee525be
6e614dca9ae619322a0c0d17859ba25c90da50eda9b129ca76a1f0633a947848
GET /-tg3F2ACklLc/UbFDZx8NcBI/AAAAAAABrJg/qhgU2ZLJK9Y/w72-h72-p-k-no-nu/jjjkjklkl_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1ac98"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="jjjkjklkl_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 4476
X-XSS-Protection: 0
1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
200 OK 3.3 kB URL HTTP/1.1 1.bp.blogspot.com/-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash e214dcb520106f80f45216102370368a
ee450ee79d7a8ebce5f4d4819d6e4583d474b0ca
1663f0d5743e44b72949f17bd51454e370ef70d984a2f8019fa9edf3de733cfb
GET /-F1HPYGAW8AQ/TnE42IeUyEI/AAAAAAAADk0/WBGduwHyaDc/s72-c/Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "ve4d"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Myvi_EXTREME_3_4_FRONT_LEFT_C.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3326
X-XSS-Protection: 0
lh6.ggpht.com/-2L5z-nk5Ees/UbNTYGkeAbI/AAAAAAABrn4/SDU-APd9vm8/ainul-aisyah02_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 26 kB URL HTTP/1.1 lh6.ggpht.com/-2L5z-nk5Ees/UbNTYGkeAbI/AAAAAAABrn4/SDU-APd9vm8/ainul-aisyah02_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 346x260, components 3\012- data
Hash 4719df9978b332b73f8bede19bb624a0
ca9b7f546131912701acb8d6c513377d70728a62
2163d458d960ee710bcae995a34e4f6b433245db82a17f13988d272180575664
GET /-2L5z-nk5Ees/UbNTYGkeAbI/AAAAAAABrn4/SDU-APd9vm8/ainul-aisyah02_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1ae7f"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="ainul-aisyah02_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 26001
X-XSS-Protection: 0
1.bp.blogspot.com/-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg
200 OK 3.9 kB URL HTTP/1.1 1.bp.blogspot.com/-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 34c63dbbea4d8c5625c675a51878025e
ca332c10a77824cb4f9b980e1863f1e8ead25c66
c3fb872fed3aa2d07afa0f848132f411f013e043658e944f48f465566b8e39e8
GET /-ZlRNqQkQeUs/UFa7YYHFDnI/AAAAAAAAhuE/LcqeJUrl5z0/w72-h72-p-k-no-nu/du_05.1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v86e1"
Expires: Wed, 28 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="du_05.1.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: fife
Content-Length: 3935
X-XSS-Protection: 0
i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah2.jpg
200 OK 23 kB URL HTTP/2 i386.photobucket.com/albums/oo307/beautifulnara/bnara/aishah2.jpg
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 79782210c4abad6048fbef745a5fb603
eadb8379806a33356d607a6f85d0b5bd9dcd6620
087864aa7f8f0fcd467055856d261270e92914b5742ddddef3d26d9f90a19c02
GET /albums/oo307/beautifulnara/bnara/aishah2.jpg HTTP/1.1
Host: i386.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/webp
content-length: 23366
date: Tue, 27 Sep 2022 03:53:15 GMT
cache-control: max-age=31536000, public
content-disposition: inline; filename="aishah2.webp"
expires: Wed, 27 Sep 2023 03:53:15 GMT
server: photobucket
x-amzn-trace-id: Root=1-633273ab-1fb4d7f53c867ca5532a5ffd
x-request-id: thG8EY_r6Ktqg7UfHMoQQ
x-cache: Miss from cloudfront
via: 1.1 f66e3db0f0449307dba3fbf72bbf3bac.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: eWGcPj-2YsuwfBJAIsE_oK8rNIhhhxatJFu-EpdT2e2q9JcAAolWPg==
vary: Accept, Origin
X-Firefox-Spdy: h2
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 33471f920f4baa42d5480d4e45880ac3
845ab0925730fbc59802105d4e20ee5d70bea64e
d4a58feeaa0cf04b560d8c32a69042468ced286f4a23234a5b18f5b447c27581
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 2rJwmvntNn9PBnEm5A7dqIadEIRbhuN8IYVg0aQ7HSHxXKP8RSMz9Q==
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
200 OK 168 kB URL HTTP/2 themes.googleusercontent.com/image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1800x2699, components 3\012- data
Size 168 kB (168013 bytes)
Hash 7ee3746ae0a6700164cb1fd3ca54483a
ffeb6d4e14ff136150531dbade87668b2db4563e
e74fa1a411c6eeeb0d1d415a04e2fc5dde7dcd42503b8c105e4754dbb117de61
GET /image?id=1IgO1wWgj0K_rUZAoQza9BXyXF8I_PEFrP-DP9u0fUqePLlRNOTLtrSyYQglz9OZfPNqD HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v1"
expires: Wed, 28 Sep 2022 03:53:15 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="unnamed.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:15 GMT
server: fife
content-length: 168013
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b6908b750175e1c2e2af86c77945ed11
ea6bc6f581500a0974977bbef6bd3432c181bc0f
1dde4f6f372d8e056a96129e101a31d04a0f97448c66df7175251060c6a8d0cd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 696 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (653)
Hash acadeeadafff48287a2af8d440ac4870
7f1e2d624b4d8c128f8ceb01489a03915a05f621
379405b5746b91b23cb9cc903973c6d87a0a6a39b07197b765cf594ac619978e
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:14 GMT
Content-Length: 696
fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
200 OK 24 kB URL HTTP/1.1 fonts.gstatic.com/s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 24236, version 1.0\012- data
Hash 0caf6947dd9d590934bb7a28548893b9
e7d4be7452b4c60635726fa7578e5b6aecdf185d
5c2d691a9e7ca08b1fccf8dae98e55b58eca6673080c7cb8a2a5972ef71a97d4
GET /s/cherrycreamsoda/v21/UMBIrOxBrW6w2FFyi9paG0fdVdRciQd9A98.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 24236
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Mon, 26 Sep 2022 20:42:27 GMT
Expires: Tue, 26 Sep 2023 20:42:27 GMT
Cache-Control: public, max-age=31536000
Age: 25848
Last-Modified: Tue, 19 Apr 2022 18:58:30 GMT
Content-Type: font/woff2
fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
200 OK 30 kB URL HTTP/1.1 fonts.gstatic.com/s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 29868, version 1.0\012- data
Hash 8b26cc331e323dda95ea6d0dcf4d7542
1f6b0e5440044f6aa75b1f73d2f9c63a2f75bba9
2d5059c07b957f989ee2ed276e1f6d20428f4d3ed2523e7c305bd3e3ebc092ec
GET /s/calligraffitti/v19/46k2lbT3XjDVqJw3DCmCFjE0vkFeOZc.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 29868
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 21 Sep 2022 13:13:58 GMT
Expires: Thu, 21 Sep 2023 13:13:58 GMT
Cache-Control: public, max-age=31536000
Age: 484757
Last-Modified: Tue, 19 Apr 2022 19:09:14 GMT
Content-Type: font/woff2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=336x280&erdal=mercan&size=&appearance=&pname=&debug=&name=&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.9597286871697603&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:14 GMT
content-length: 0
X-Firefox-Spdy: h2
i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
403 Forbidden 243 B URL HTTP/1.1 i710.photobucket.com/albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg
IP
File type XML 1.0 document text\012- XML document, ASCII text
Hash 2ad9f6934ff2d4f352e11ba09d911347
e990fa8d297fe441a6c21e68a46c19a79a4ec1f7
213241518153e338e63e8788da930d4c5beb42118731cb5eb85e2721077e13f8
GET /albums/ww103/kamasutrabergambar/kamasutra_468x60_2.jpg HTTP/1.1
Host: i710.photobucket.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 403 Forbidden
Content-Type: application/xml
Transfer-Encoding: chunked
Connection: keep-alive
Date: Tue, 27 Sep 2022 03:53:15 GMT
Server: AmazonS3
X-Cache: Error from cloudfront
Via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: 50q4yE1L_Ake47qebhNEFP1dl4_qtlqezV0ZQYJUymAmnu6ANDPQfg==
www.linkwithin.com/widget.js
404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Tue, 27 Sep 2022 03:53:15 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
www.blogger.com/img/logo-16.png
200 OK 279 B URL HTTP/1.1 www.blogger.com/img/logo-16.png
IP
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 5ffecab6c722bb0adc3fce8d83b27993
0e59b05d3da526e82bb4f5d47c5d94e2a318dafb
cca664ca16fde285160e80eae6ba4501c27b1dd1ce09aec1e84caa74b5baff53
GET /img/logo-16.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 279
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 09:56:56 GMT
Expires: Sun, 02 Oct 2022 09:56:56 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Sep 2022 13:50:12 GMT
Content-Type: image/png
Age: 150979
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
200 OK 34 kB URL HTTP/2 www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
IP
File type ASCII text, with very long lines (2800)
Hash 449d375b22b6e2bdc6c2c7a93ee63bda
797e8cf93405a246f90d9d23492da9f8cbdb45a3
149587fafff105da10d1b8de60c8bb03e819cb09cd42cc16e3807b6945b99181
GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding, Origin
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/product-feedback-gathering
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="product-feedback-gathering"
report-to: {"group":"product-feedback-gathering","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/product-feedback-gathering"}]}
content-length: 33836
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 27 Sep 2022 03:29:11 GMT
expires: Tue, 27 Sep 2022 04:19:11 GMT
cache-control: public, max-age=3000
last-modified: Thu, 22 Sep 2022 19:58:11 GMT
content-type: text/javascript
age: 1444
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 737756d717fd215d94458a21028ae486
ee3c3097bcb2ff3f5482b0dc6056b1549afa8f1f
8e705bae2060960e1b2f79c42ebc445d52f307aeac41b34d3a1789879e51b85a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 17b745b5d3e387127df4aba170081743
e59dc2fcbab312428ac919358c3f8afe301e723b
94b6219f1fdabe19021204226c005ab3f82f148cbfabd240a999f18267895bdb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:15 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cqTdqsTcAXN6Y5eOgzSnvYKr3MBJSv4tL1lPDdWF-urZF5iMM09Zd1ybN2akFJ8hkvVeO_ZG2RSVpux1xmj7hm7T9ZaYpIYZoLUjLbCaJX5p9WPdShMlvPQvXLnYlWIktE9vWtv2nq9raNReO4CpTjeGZUWjezKvRMmXpbCmTBaMVl27RNM04XE2qCAaGSl0o5fWCLbjlTS_X8vfjH5prHFpTWIwWU3EugfvSXYZAEzoJ8wjGs%3D&attredirects=0
200 OK 1.4 kB URL HTTP/2 26ed6613-a-62cb3a1a-s-sites.googlegroups.com/site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cqTdqsTcAXN6Y5eOgzSnvYKr3MBJSv4tL1lPDdWF-urZF5iMM09Zd1ybN2akFJ8hkvVeO_ZG2RSVpux1xmj7hm7T9ZaYpIYZoLUjLbCaJX5p9WPdShMlvPQvXLnYlWIktE9vWtv2nq9raNReO4CpTjeGZUWjezKvRMmXpbCmTBaMVl27RNM04XE2qCAaGSl0o5fWCLbjlTS_X8vfjH5prHFpTWIwWU3EugfvSXYZAEzoJ8wjGs%3D&attredirects=0
IP
File type HTML document text\012- HTML document, ASCII text, with very long lines (2566), with CRLF line terminators
Hash 31e1c67012a965c0946f9b1a57e37522
3e4f432c76e07fb51f7d172c646b1e51a9e6dbd5
a2c830719561d83caa19ddab4ad05324909ed460ae65366eee128260a5df41b9
GET /site/unwanted86/javascript/animatedrecentpost.js?attachauth=ANoY7cqTdqsTcAXN6Y5eOgzSnvYKr3MBJSv4tL1lPDdWF-urZF5iMM09Zd1ybN2akFJ8hkvVeO_ZG2RSVpux1xmj7hm7T9ZaYpIYZoLUjLbCaJX5p9WPdShMlvPQvXLnYlWIktE9vWtv2nq9raNReO4CpTjeGZUWjezKvRMmXpbCmTBaMVl27RNM04XE2qCAaGSl0o5fWCLbjlTS_X8vfjH5prHFpTWIwWU3EugfvSXYZAEzoJ8wjGs%3D&attredirects=0 HTTP/1.1
Host: 26ed6613-a-62cb3a1a-s-sites.googlegroups.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/x-javascript; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 27 Sep 2022 03:53:15 GMT
last-modified: Sun, 22 Aug 2010 22:19:41 GMT
etag: "1282515581476"
content-disposition: attachment; filename="animatedrecentpost.js"
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 1394
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true
302 Found 495 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (545)
Hash 63b454c7fd02a7f94f3ebd412e094f59
e5b8c557ab06a4944bab9ec614bf497db6379c2e
ac4ae4317ad97137bb13eb0c3db0460fc8494c1bfe5627e2197fd457be0e034b
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1412073176525199628%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%253D%253D%26pageSize%3D21%26postID%3D7243879109002258813%26origin%3Dhttp://aniekelate.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.z9QjrzsHcOc.O/d%253D1/rs%253DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Tue, 27 Sep 2022 03:53:16 GMT
location: https://www.blogger.com/followers.g?blogID=1412073176525199628&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByMwMDAwMDAiByNkNTE3MWEqC3RyYW5zcGFyZW50MgcjZDExN2Q1OgcjMDAwMDAwQgcjZDUxNzFhSgcjMDAwMDAwUgcjZDUxNzFhWgt0cmFuc3BhcmVudA%3D%3D&pageSize=21&postID=7243879109002258813&origin=http%3A%2F%2Faniekelate.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.z9QjrzsHcOc.O%2Fd%3D1%2Frs%3DAHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: script-src 'nonce-Q3FhQDWioSxzk662H3gHuw' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 495
server: GSE
set-cookie: __Host-GAPS=1:5coHikR4DCMo-EQ1G_AC73nzxVmqHQ:dnUdSXidPHWWGjFp;Path=/;Expires=Thu, 26-Sep-2024 03:53:16 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash 5454169b1878e99960907cb8926c8b32
55b6f1ada03d6e7e87b15b050a4a02b9cc94f402
bc608b69cf3373d7926f7493d58c0dea29915b6071599b2aed9811283c718562
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 5b7b66f5886a12421c3f3970bbf49d5a
13a31565fb5b2f1e75d67ba1ce09dae339f1c0e8
3ed8ffa99cefdf81381912b426c0ab9091fb5888836665d9012435965f99feba
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP
File type ASCII text, with very long lines (1034), with no line terminators
Hash 80585e7d4f1510898eeba1ae4175a6fc
a5a6a723aecc70bc2f23ff11d05b10838c3f557b
c0d82c824a37384777d1493508b45b05f5286b3a8366377b43db8f0f84fc0eb8
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Tue, 27 Sep 2022 03:53:16 GMT
date: Tue, 27 Sep 2022 03:53:16 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP
File type ASCII text, with very long lines (826)
Size 158 kB (158248 bytes)
Hash db1b5789e9915e9c82f5df92e5982980
2e193e502995501c85f45fd89d9f83707a7f9573
db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:25:55 GMT
expires: Mon, 25 Sep 2023 22:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 106041
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
200 OK 13 kB URL HTTP/1.1 aniekelate.blogspot.com/feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts
IP
File type Unicode text, UTF-8 text, with very long lines (55864)
Hash 0d4ce4788aa8f7ba589c4e669fa4eeb8
62aa043f10219c15f4521cf8ad6fb52ad20cae47
1ff9d3ea8f649076a5289278c722753eb9d508740045d62bc5eb0f677db5ba87
GET /feeds/posts/default?max-results=10&orderby=published&alt=json-in-script&callback=showrecentposts HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/06/artis-wanita-naik-angin-bila-ditegur.html
Cookie: cj_uid=d9UFTINUwPLIjdX9uew6WSoryuYfsU
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
Server: Blogger Render Server 1.0
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Content-Encoding: gzip
Content-Length: 12734
X-Frame-Options: SAMEORIGIN
Date: Tue, 27 Sep 2022 03:53:16 GMT
Expires: Sat, 24 Sep 2022 02:33:39 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
ETag: W/"69fe212a76f71555135c348af811071500a9b261f4da55bd028982eda0cbbe94"
Content-Type: text/javascript; charset=UTF-8
Age: 0
lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 47 kB URL HTTP/1.1 lh4.ggpht.com/-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 468x286, components 3\012- data
Hash 0de30e6df03918ab20d8a87d9033c035
5e0e8c20c8435112181105ef6393288673bf40b1
4e1b468bb7b419bff33c8fe683e3491eb387c17c9c9c4ea23e7cc41d5d98df79
GET /-XwQO0tSDz4k/U0NtkDn09EI/AAAAAAAB1Yc/X-L0LhOWdCQ/Christian%252520Couple_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d588"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Christian Couple_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 46859
X-XSS-Protection: 0
fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
200 OK 15 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15344, version 1.0\012- data
Hash 5d4aeb4e5f5ef754e307d7ffaef688bd
06db651cdf354c64a7383ea9c77024ef4fb4cef8
3e253b66056519aa065b00a453bac37ac5ed8f3e6fe7b542e93a9dcdcc11d0bc
GET /s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15344
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 12:31:58 GMT
expires: Sun, 24 Sep 2023 12:31:58 GMT
cache-control: public, max-age=31536000
age: 228078
last-modified: Mon, 16 Oct 2017 17:32:55 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
200 OK 16 kB URL HTTP/2 fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
IP
File type Web Open Font Format (Version 2), TrueType, length 15552, version 1.0\012- data
Hash 285467176f7fe6bb6a9c6873b3dad2cc
ea04e4ff5142ddd69307c183def721a160e0a64e
5a8c1e7681318caa29e9f44e8a6e271f6a4067a2703e9916dfd4fe9099241db7
GET /s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://www.google.com
Connection: keep-alive
Referer: https://www.google.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 15552
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 23 Sep 2022 00:48:31 GMT
expires: Sat, 23 Sep 2023 00:48:31 GMT
cache-control: public, max-age=31536000
age: 356685
last-modified: Mon, 16 Oct 2017 17:33:02 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3764
Expires: Tue, 27 Sep 2022 04:56:00 GMT
Date: Tue, 27 Sep 2022 03:53:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3764
Expires: Tue, 27 Sep 2022 04:56:00 GMT
Date: Tue, 27 Sep 2022 03:53:16 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3764
Expires: Tue, 27 Sep 2022 04:56:00 GMT
Date: Tue, 27 Sep 2022 03:53:16 GMT
Connection: keep-alive
www.advertlets.com/_/js/advertlets_lite.js
404 Not Found 196 B URL HTTP/1.1 www.advertlets.com/_/js/advertlets_lite.js
IP
ASN #133618 Trellian Pty. Limited
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62962daa1b19bbcc2db10b7bfd531ea6
d64bae91091eda6a7532ebec06aa70893b79e1f8
80c3fe2ae1062abf56456f52518bd670f9ec3917b7f85e152b347ac6b6faf880
GET /_/js/advertlets_lite.js HTTP/1.1
Host: www.advertlets.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 404 Not Found
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: Apache/2.4.38 (Debian)
Content-Length: 196
Connection: close
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5a6097201b7da81f6e9a6d99a7353a0c
d4240fe80c76013b9f7b6fd09963aa47151b8d6a
519e9b47ddfa1e1fe047f4dc7df88e3011817f88144fcc3853a7984a781c2070
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "519E9B47DDFA1E1FE047F4DC7DF88E3011817F88144FCC3853A7984A781C2070"
Last-Modified: Sun, 25 Sep 2022 22:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3764
Expires: Tue, 27 Sep 2022 04:56:00 GMT
Date: Tue, 27 Sep 2022 03:53:16 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
200 OK 8.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash fa70ece15044b7318cb11ae5e37a64e7
04a0665f771562c3e56ac3542abe5bd3c4c1a6b5
8c974283b2ba0058114404af3e4818daa8cc56f270cb8a46f5f2f54de9d2f0e1
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F14ab4d12-a7de-4708-a657-df4600198640.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8255
x-amzn-requestid: 3bf29c4a-406a-4645-ad18-44cd6f05d457
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Y4VnFEV-IAMFQMQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632ccfc6-3eaa337d1e1c1b6d5e951419;Sampled=0
x-amzn-remapped-date: Thu, 22 Sep 2022 21:12:38 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: X-6P09-hgjmDFe4Y7P1KnXtJAuvJNen8XsBVIexf521SOxMivJ4t7A==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 17:53:33 GMT
age: 35983
etag: "04a0665f771562c3e56ac3542abe5bd3c4c1a6b5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg
200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3140ec95f33c36599de95b25cdade940
932c74fa24b61ee1b1c672b6c19b1e736caab8d3
f7488246ca75fddc504812f4c5944a5a2494cdb14b6ef1db5fb28beca5cff194
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5bf02f4e-91c0-455b-8378-5eae82174db7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9737
x-amzn-requestid: a06488e4-22bb-4149-adac-b6696ab91923
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATHzUIAMFtcw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-238f1b945a8b549872c85f2a;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: qkfz02g1BMeZhFonJAWyqyQ9jBnZC4i-2ZHzO2wgJBVjC4YfvtlxCA==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 e80693c02cfdfd081110512210d57840.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 22459
etag: "932c74fa24b61ee1b1c672b6c19b1e736caab8d3"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe29cee89-5693-407a-b182-e52f8fe5734f.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe29cee89-5693-407a-b182-e52f8fe5734f.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 1f0a1508f459d7774c0d63ff682532c0
03edfe254fa4f5c88bf9c8868edd9cdf07bf5d0d
eebf3b550e7a675a2231e97575e8be57e8d1216126a711cdef73ccbc5dd1e773
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe29cee89-5693-407a-b182-e52f8fe5734f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11885
x-amzn-requestid: a8f6d57a-8bd3-42b9-80ba-695c5baac04b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YshLpHZPIAMFZiQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6328157d-4ef5eb306dde741502e46f24;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 07:08:45 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: JSWNUGbYq_zNf2L2AwkLuPfnGUTsX6iqCB5ESRr3dX-0voDgtu4KnQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:56:23 GMT
age: 21413
etag: "03edfe254fa4f5c88bf9c8868edd9cdf07bf5d0d"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
200 OK 13 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62e68c3cd08dd94d910507512a67e85f
3d4fa8701f17e8818c25584ef5f04bfbee8440cd
058d798963f83f5fb88ab728185f755c5353fa981d93e1b6ff869089f501586b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F79631135-a10c-43bf-85d2-fa2236b96883.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 13213
x-amzn-requestid: fe9ec409-2757-4910-8443-5b4d3be7efd3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlATEp8oAMFd9Q=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9b-3230e97a4fe34413285eb578;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:31 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: kRSg9NTTAgeAJgIZ_C9_rRodCX4bzGduJEvNPNHUya0Moa2vsmWSoQ==
via: 1.1 c7c3cdef911c9ee3c1a83a78f425dc5a.cloudfront.net (CloudFront), 1.1 2324edbcb8fc72f617442c65f36a40fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 22459
etag: "3d4fa8701f17e8818c25584ef5f04bfbee8440cd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg
200 OK 6.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 62ece01d7e0036711832df5a25175b3b
c80d9ce02eeaa7b0166a696e811d2cffde4997d0
8a1968c18b44495571ff382a9cacfb7f98d3e1275d650e84cb310d635eae7e70
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb5538bec-989b-434a-bf80-699456665fd7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 6829
x-amzn-requestid: cc3229a7-7c7e-472b-b7a4-1216594c4068
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: Yshb2FwhoAMF2EA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-632815e5-0964e463192712fb08a29ee7;Sampled=0
x-amzn-remapped-date: Mon, 19 Sep 2022 07:10:29 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 38UTZEh7vpUlYc9mGIdNrIy4fgLQf4iErqzZLY5mM5fdMQwvJvoBvQ==
via: 1.1 112c6b3f9aea37a6cb00b7d933e5af6e.cloudfront.net (CloudFront), 1.1 5397b304713f6301c7c94ac084b6ed08.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 22:12:45 GMT
age: 20431
etag: "c80d9ce02eeaa7b0166a696e811d2cffde4997d0"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg
200 OK 4.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash f9bc23ab347b5f2e2ec15d69f41f0cf0
a92af0438aa2b6637c0f69dabd0be00b3a43caf8
4382f21ee6727d4b4d21bd7d16b1821a57d9fec6c78dbf7e74bfdfbde51ec206
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffffd9a36-7835-4249-a213-06720f62ce54.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4327
x-amzn-requestid: 59493149-3c46-42c6-96aa-92c945fb4c40
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZFlA1HzioAMFzxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63321b9e-5bd13d5719a119a25650f405;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 21:37:34 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 5XQYaLxNwxhN9NCIoDYRbt8U-2Tsxcx-2SqPNr64Z4YV8Bk7Eayjfg==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 26 Sep 2022 21:38:57 GMT
age: 22459
etag: "a92af0438aa2b6637c0f69dabd0be00b3a43caf8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 48 kB URL HTTP/1.1 lh4.ggpht.com/-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 445x331, components 3\012- data
Hash b4c70c60ae51fe96193a3cbb78cc6c53
6b1bc7c02c0ec9391c7ed525ecf8f2a35dff057f
a2100c9a0d83609f8c137cd53807806b8667a60ca6b5b804180e2e0656b9ec7c
GET /-X9ZcGys_KAU/U0AG6yuMRUI/AAAAAAAB1WM/-GNklO7pu9w/2_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d564"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="2_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 48326
X-XSS-Protection: 0
lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 32 kB URL HTTP/1.1 lh6.ggpht.com/-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 425x320, components 3\012- data
Hash 119f351890394c0f1041d4fc747a01e0
7e893cc7a2c4b83e7bf3d409f846d71f41fed767
3d3dcf2b1422a31d993acf2b88dec84c4135f9f914e9a5b6c7dae36073a26de3
GET /-AxwgKc2_VM0/U0APdGXpZZI/AAAAAAAB1Wo/ZP4BsxdcAas/9bulan_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d56b"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="9bulan_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 31790
X-XSS-Protection: 0
lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 41 kB URL HTTP/1.1 lh3.ggpht.com/-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 433x363, components 3\012- data
Hash aeefa145a6e70802e3bbcd8046cb236a
276ba20b8b260a80dca3fc5f7d62abad4eb190cf
6d9e5016c72e316e6bd5cd94d6c8cfc78efd97af21658798472595e0558157a1
GET /-W6y49rYgQVE/UzLagR4bagI/AAAAAAAB1QM/yhkELjtQr7w/gambar%252520hantu%252520pocong%252520dirakam%252520di%252520jambatan%252520ke-2%252520pulau%252520pinang_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh3.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="gambar hantu pocong dirakam di jambatan ke-2 pulau pinang_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 41011
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:16 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d504"
Content-Type: image/jpeg
Age: 0
lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 22 kB URL HTTP/1.1 lh4.ggpht.com/-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 324x363, components 3\012- data
Hash 18e3f663057884d446438fce1800040b
7bcf057ae9454035200992f755e1bae4c8d6d1f3
dc760a9a2722822e5128231bccdf98296c54c3617be270a5a8ae5d95e30e9b00
GET /-kGxjjRmEsKw/U0AFzjn1AlI/AAAAAAAB1V8/KYhiXis20jY/sutinah_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d560"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sutinah_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 21666
X-XSS-Protection: 0
lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 26 kB URL HTTP/1.1 lh6.ggpht.com/-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 431x289, components 3\012- data
Hash e487a1afd94998fc389fa0a407e98f95
6119b9031746deef1dac5ea7a3f67323cfc3cef7
35a537184880273742bab14d23d8c0c38f07646ce5b5ccd7d77646c11bbaa46a
GET /-IBYQ3WUoE8k/Uz4p2_LQRmI/AAAAAAAB1RQ/Us8CkramqE4/Gao-Huayun-565x376_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh6.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d515"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Gao-Huayun-565x376_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 26341
X-XSS-Protection: 0
lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 92 kB URL HTTP/1.1 lh5.ggpht.com/-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type gzip compressed data, max compression\012- data
Hash d33ca9ac7bfa71ae543aa3f7ab3ba277
bb90147e8630408d2589d11f7c7c0cbe3b30e440
953ecb8cdd8ad104dcb18733e7435696ea176a23be6b08e490c76157e35172b9
GET /-TZEzoL-UdTI/Uz4xLMWWSuI/AAAAAAAB1Ro/d6c0MYPoelY/tentera%252520wanita%252520korea%252520utara%2525203_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh5.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="tentera wanita korea utara 3_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 75636
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:16 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d51b"
Content-Type: image/jpeg
Age: 0
play.google.com/log?format=json&hasfast=true
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 1509
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 27 Sep 2022 03:53:16 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+010; expires=Thu, 26-Sep-2024 03:53:16 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 27 Sep 2022 03:53:16 GMT
X-Firefox-Spdy: h2
lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
200 OK 53 kB URL HTTP/1.1 lh4.ggpht.com/-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 442x332, components 3\012- data
Hash 1757d0e5194d8a5a833cb2a02458bdf9
3b2dd318cf2ccad00b3113582e3019f2cea59e4d
44b87ed55f9aac71ceda8e8c9e00cf600c9f88e0db6609af8d19f8a4122daae3
GET /-wjT9pfCtU-U/Uwv-9NiIyXI/AAAAAAAB1PU/j7-7_BvjujY/IMG_20130924_092759_thumb%25255B2%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4f6"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="IMG_20130924_092759_thumb[2].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 52622
X-XSS-Protection: 0
lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 52 kB URL HTTP/1.1 lh4.ggpht.com/-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 464x286, components 3\012- data
Hash 8d6617a765dee2343b2d3b58a92c694a
39c90e0129e4fd9b1c85c5058e7613c31e01a23d
1f1d7b736b41372bac73cf4f539128ee4f41623d9d01294da652da960a75a84f
GET /-BhNVpaQ57is/Uz_7_GAElYI/AAAAAAAB1Vk/PnDd3HVojhU/rezeki_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="rezeki_thumb[1].jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 51712
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:16 GMT
Expires: Thu, 22 Sep 2022 02:02:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1d55a"
Content-Type: image/jpeg
Age: 0
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Tue, 27 Sep 2022 03:53:16 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+582; expires=Thu, 26-Sep-2024 03:53:16 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 27 Sep 2022 03:53:16 GMT
cache-control: private
X-Firefox-Spdy: h2
play.google.com/log?format=json&hasfast=true&authuser=0
200 OK 131 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash babb6f090aeebc6f421624475b4aefff
06079b7547949822c118224e51604f4c5ebf80c8
b2fe8b91f31edc7284cc9690e90dd4a38d985598374df68967d917590beb55dd
POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
X-Goog-AuthUser: 0
Content-Type: application/x-www-form-urlencoded;charset=utf-8
Content-Length: 2974
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
cross-origin-resource-policy: cross-origin
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web
content-type: text/plain; charset=UTF-8
content-encoding: gzip
date: Tue, 27 Sep 2022 03:53:16 GMT
server: Playlog
cache-control: private
content-length: 131
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+331; expires=Thu, 26-Sep-2024 03:53:16 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Tue, 27 Sep 2022 03:53:16 GMT
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
200 OK 1.5 kB URL HTTP/2 1.bp.blogspot.com/-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 2c53c52d7f8e27257535cfddaf818761
2b0aaeae7b0e715d7c6194e514591fd0c2a350b4
8d10c19235052321c5bf4aa25f86083366ca7c2c25e4ed71991d1902148bbd52
GET /-HjKHUtLKg90/WF04GLHhgdI/AAAAAAAAVF0/_AJxJm6ixcQS2kRLe85rf5BtrQNw2l2IgCK4B/s45-c/boa.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v545e"
expires: Wed, 28 Sep 2022 03:53:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="boa.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:16 GMT
server: fife
content-length: 1508
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
200 OK 1.6 kB URL HTTP/2 4.bp.blogspot.com/-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash b93f7dc0cd53989a2c79192d7168b731
692f76c3763bfe76d5b851092c648920e141f362
d639e67f744d24488abb8d54c479c2ff9aa43ce74bf5602d6874683f496fef5a
GET /-_L3A2cgIM-I/VBWP9xCZMNI/AAAAAAAAECY/dqSJRCPr3Fw/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1628
x-xss-protection: 0
date: Tue, 27 Sep 2022 03:53:16 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v1027"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg
200 OK 1.8 kB URL HTTP/2 3.bp.blogspot.com/-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 3285f84ae875731071b9a9977f70924e
e2a397ea3539e0ad8541b71d3c524cab63185a33
856300518b909557b0462756bcb44643fac507af54e1b9690a871ef9c415afab
GET /-DO1KOkmCVjg/XlNBJVAUVYI/AAAAAAAAQ3E/S5ZVEXoi87sylpnoH_W3029wCTaCLrFdwCK4BGAYYCw/s45-c/orangmuo1.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v4374"
expires: Wed, 28 Sep 2022 03:53:16 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="orangmuo1.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:16 GMT
server: fife
content-length: 1807
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
200 OK 1.9 kB URL HTTP/2 3.bp.blogspot.com/-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 48bba68daff578049c43043c87f3b208
76da41ebbc523e223a7191d5cfb9631a7678e433
e264232ba3a862f8eb1465170521e15c55a9879896379c406e7edb405d0f0393
GET /-Ught64v5ZEQ/XrjXO1Bh1tI/AAAAAAAAKoo/hsO8iOMCqOEuebCdRE4Syr_opHKFzGxXgCK4BGAYYCw/s45-c/83406512_1293299467522094_3600008267150917632_o.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="83406512_1293299467522094_3600008267150917632_o.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1915
x-xss-protection: 0
date: Tue, 27 Sep 2022 03:53:16 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v2a99"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
200 OK 1.8 kB URL HTTP/2 4.bp.blogspot.com/-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/*
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 628ac0588bdb98eb2dc69447bc81c3da
c768029c705d42b6b0fa00255e51435f3eb6abb8
40526f8672d1c629147c5b34d6b026fc0a554dd0ac1a4ce04cd8c531e9f5d885
GET /-VEtuHbxuyr4/VClXP0eJvxI/AAAAAAAAFO8/DZYfcxnxtFE/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1825
x-xss-protection: 0
date: Tue, 27 Sep 2022 03:53:16 GMT
expires: Thu, 22 Sep 2022 02:02:33 GMT
cache-control: public, max-age=86400, no-transform
etag: "v14f0"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c7ea09de6e63af53ed131169fd56eb1d
439eefa30aa1e3a5ee21b1981deb39328289c98d
938e772fbea16de4c0976358ff8b7b607dcdb21a3af63220beaa66cc77d89c71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
204 No Content 0 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=form
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /box/?boxid=648088&boxtag=sblqaq&sec=form HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 204 No Content
Server: nginx
Date: Tue, 27 Sep 2022 03:53:16 GMT
Content-Type: text/html; charset=UTF-8
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 27 Sep 2023 03:47:41 GMT
Cache-Control: public, max-age=31536000
X-Cache: HIT
www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
200 OK 653 B URL HTTP/1.1 www6.cbox.ws/box/?boxid=648088&boxtag=sblqaq&sec=main
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash d0d05a23cb23fe35908361694e15b565
d14818ca4dc04d998081b92c3975ff6e9f6dcdea
1fe598dd28104053751c17c7371ef1e42ec25c08b513993cbc93a4f6b4b9c716
GET /box/?boxid=648088&boxtag=sblqaq&sec=main HTTP/1.1
Host: www6.cbox.ws
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 27 Sep 2022 03:53:16 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
P3P: CP="NOI DSP COR NID CURa OUR NOR"
Expires: Wed, 17 Nov 2004 05:00:00 GMT
Last-Modified: Mon, 27 Sep 2021 03:53:16 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Cache: MISS
Content-Encoding: gzip
2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-XtLwxekGhR4/TvIZqJWxbfI/AAAAAAAAD2s/WK8GJy_E5SE/s45-c/uun%25252Bhalimah.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:17 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
404 Not Found 904 B URL HTTP/2 2.bp.blogspot.com/-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png
IP
File type PNG image data, 45 x 45, 8-bit colormap, non-interlaced\012- data
Hash 288ba721beee9352ca47b2a130423c86
5dd28e65cfc52620335ca1a10be532ed9e44ff14
6ee738d016e2e0d81bb5da04d1c97a4b33d9ec9f3bfc3cee450b33d1dd997cc4
GET /-jzlquOaLuxg/UB10SC2e_ZI/AAAAAAAAA4M/Xz64_O-6HhY/s45-c/i%25252Blove%25252Bkhairil.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:17 GMT
server: fife
content-length: 904
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
200 OK 1.7 kB URL HTTP/2 2.bp.blogspot.com/-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 82895e004d3dd1488c1854bd003596a4
53bdd437bd9706bdecbb7190a54bfcc99f285f1c
77994df50cc1dc7234716e49ce3662783bb16f984c9b16ade3282b607c458af8
GET /-wLCRF6JpmNM/T_8sgO7gE4I/AAAAAAAABxI/qrAgq9oMAxw/s45-c/hukhuk.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v712"
expires: Wed, 28 Sep 2022 03:53:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="hukhuk.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:17 GMT
server: fife
content-length: 1710
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
200 OK 2.2 kB URL HTTP/2 2.bp.blogspot.com/-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 386f20727f213912f0a055d82ac929da
9cc1801633daae7ddfa14d39c788de9511c58858
1e4f97fabf82db00d04160d636db8337603fa9ee33f59292725cabdb36582e2a
GET /-f_a70KvEAdw/YaA-jhrVRPI/AAAAAAAAzsc/AQwcJCRenh0awQSroyf_MGXoSI2QYmbUQCK4BGAYYCw/s45-c/rezise.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vceca"
expires: Wed, 28 Sep 2022 03:53:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="rezise.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:17 GMT
server: fife
content-length: 2160
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
200 OK 1.9 kB URL HTTP/2 2.bp.blogspot.com/_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 6028b848b44eabd8afb2f33709cb419d
96341495ffc9b35a1e4da8f24afef927d098fe9f
617c9f4afea96b2cb870ca5e5b853a23985f0ce7815040bee9848e0b5e2ddc79
GET /_3V8HBVRI_rA/TRqaFfagaHI/AAAAAAAAAAs/Xs9x9S97EbE/S45-s45-c/151220101344.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vb"
expires: Wed, 28 Sep 2022 03:53:17 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="151220101344.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Tue, 27 Sep 2022 03:53:17 GMT
server: fife
content-length: 1870
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.feedburner.com/fb/images/pub/feed-icon32x32.png
200 OK 1.4 kB URL HTTP/1.1 www.feedburner.com/fb/images/pub/feed-icon32x32.png
IP
File type PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced\012- data
Hash f3b2f178bb0fa4f2701ff218f6a6930d
2a1bc7c9589c8d1cde0b96e00c660b6480caf909
55070d3be787cd8ccee8ea0fd75f0e11e944e6f70231f0dcb4c5ae348fcba6be
GET /fb/images/pub/feed-icon32x32.png HTTP/1.1
Host: www.feedburner.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/pichu-static
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="pichu-static"
Report-To: {"group":"pichu-static","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/pichu-static"}]}
Content-Length: 1441
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 27 Sep 2022 03:53:17 GMT
Expires: Tue, 27 Sep 2022 03:53:17 GMT
Cache-Control: public, max-age=0
Last-Modified: Thu, 03 Oct 2019 10:15:00 GMT
Content-Type: image/png
Age: 0
widgets.amung.us/tab.js
200 OK 19 kB IP
File type ASCII text, with very long lines (29322), with no line terminators
Hash c9ed731944024702b435ba1cc59ef389
80ed46e16bd892d709d35f5ba8dfef01e4d6e320
34b786e8399cc681809345c8e92d95927bc67234f4e592adc1ef2a5d8e4ed449
GET /tab.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:17 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Mon, 29 Aug 2022 18:12:38 GMT
etag: W/"630d0196-728a"
expires: Wed, 28 Sep 2022 03:30:08 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 1389
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75114a9f3a6a95ea-ARN
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1645
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:17 GMT
Last-Modified: Tue, 27 Sep 2022 03:25:52 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js?hash=6c45bae571dfbe0b3d5e3d599eb75ca1
200 OK 89 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=6c45bae571dfbe0b3d5e3d599eb75ca1
IP
File type ASCII text, with very long lines (18673)
Hash 757298a0816caee239287b006e6995a4
4650fdbb55697af01720633405ef02423f9b53db
38e595465d6924ef34630e6a02208cf34410d2a3852770bd659e22a15c0070bb
GET /en_US/all.js?hash=6c45bae571dfbe0b3d5e3d599eb75ca1 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 70170b7759d77efae0eee62a1e265977
etag: "6c02e38859ed42acf18510662a61a836"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Wed, 27 Sep 2023 02:37:19 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: dXKYoIFsruI5KHsAbmmVpA==
x-fb-debug: eDdHevD+ESDWrfw0Lf6z3mPquxkTzXBdWt7/2PehCfj/Y8wgIMl4txZEPTSAUTCunf+otzy0h7WULw/WB2mdIQ==
content-length: 88721
x-fb-trip-id: 1679558926
date: Tue, 27 Sep 2022 03:53:17 GMT
alt-svc: h3=":443"; ma=86400,h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash cf99681f6f1d6e00e0abca7033eb6219
73261f7daa90ce6fd7a81b10ed7bd762200c3f28
3f4bfe673679f8f0650774c07f8707a7013ac7e1c3e1b3b03e68cbaa5ccc1af6
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1646
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:18 GMT
Last-Modified: Tue, 27 Sep 2022 03:25:52 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
aniekelate.blogspot.com/favicon.ico
200 OK 412 B URL HTTP/1.1 aniekelate.blogspot.com/favicon.ico
IP
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: aniekelate.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/2013/06/artis-wanita-naik-angin-bila-ditegur.html
Cookie: cj_uid=d9UFTINUwPLIjdX9uew6WSoryuYfsU
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Tue, 27 Sep 2022 03:53:18 GMT
Date: Tue, 27 Sep 2022 03:53:18 GMT
Cache-Control: private, max-age=86400
Last-Modified: Thu, 22 Sep 2022 14:57:26 GMT
ETag: W/"e1ba656da3dacd230d4c39fb05c0b322721591c9c17ab34fcab3ae03a8b72d8e"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
ocsp.sectigo.com/
200 OK 472 B IP
Hash e6cc8d18632fa35acd3fd25dbfd9e947
b7bf2efc706dfbbb1c09923600b0e4bd4e768d4b
9e08b27e4fca30c3c4ef7bcb4e2cf509cd44d18f80687317f55659ff55cad152
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:18 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sun, 25 Sep 2022 05:56:49 GMT
Expires: Sun, 02 Oct 2022 05:56:48 GMT
Etag: "b7bf2efc706dfbbb1c09923600b0e4bd4e768d4b"
Cache-Control: max-age=438809,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb5
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75114aa19fa6b51e-OSL
t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&j=
200 OK 2.1 kB URL HTTP/1.1 t.dtscout.com/i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&j=
IP
File type ASCII text, with very long lines (2077)
Hash 51bd741af3fcc4984d1a753eebfa1141
534664acf69cbbb5c9b97c96b63dd37bdc580da2
3e9c8e5dcf3cbff9e1b7211551a31fe388f1b8e607fd78a0a34855be65da721c
GET /i/?l=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Tue, 27 Sep 2022 03:53:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
X-S: mtl1
Set-Cookie: m=1; Domain=dtscout.com; Expires=Tue, 27-Sep-2022 05:16:38 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Tue, 27-Sep-2022 07:53:18 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1664250798; Domain=dtscout.com; Expires=Thu, 05-Jan-2023 03:53:18 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
X-T: 0.609
Expires: Tue, 27 Sep 2022 03:53:17 GMT
Cache-Control: no-cache
t.dtscout.com/pv/?_a=v&_h=aniekelate.blogspot.com&_ss=6fszoebkqw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=vjxc&_cb=_dtspv.c
200 OK 51 B URL HTTP/1.1 t.dtscout.com/pv/?_a=v&_h=aniekelate.blogspot.com&_ss=6fszoebkqw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=vjxc&_cb=_dtspv.c
IP
File type ASCII text, with no line terminators
Hash 049f1d9479edaa0ba225b4007927ea69
6f7d60c506385bf29e2693a23ae4b8e7d7bcc2ce
2259c7de2ab2e2944117c269a0580d179045224965e47fdfe5ce31122165fd72
GET /pv/?_a=v&_h=aniekelate.blogspot.com&_ss=6fszoebkqw&_pv=1&_ls=0&_u1=1&_u3=1&_cc=no&_pl=d&_cbid=vjxc&_cb=_dtspv.c HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Cookie: m=1; oa=1; df=1664250798
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.10.3 (Ubuntu)
Date: Tue, 27 Sep 2022 03:53:18 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: close
X-T: 0.612
X-C: 0
Expires: Tue, 27 Sep 2022 03:53:17 GMT
Cache-Control: no-cache
www.blogblog.com/1kt/transparent/black50.png
200 OK 96 B URL HTTP/1.1 www.blogblog.com/1kt/transparent/black50.png
IP
File type PNG image data, 20 x 20, 1-bit colormap, non-interlaced\012- data
Hash 857cf81cfd3449fd408ac0604cd3a326
69209e67fdd7533fb3c76a7f3e2430a63909e4e9
380be71e72fb28899a6cf71bad4434677a6df3a2fcce56d23c28bc4794549047
GET /1kt/transparent/black50.png HTTP/1.1
Host: www.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 96
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sun, 25 Sep 2022 08:58:55 GMT
Expires: Sun, 02 Oct 2022 08:58:55 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 24 Sep 2022 17:50:40 GMT
Content-Type: image/png
Age: 154466
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 710 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (667)
Hash 432b2f5eb7e4548f85810fdc712a0e67
2cc45e489153ebb04d7f5985ba702c76fa0c5150
ece014b6542858623d1e0cb7c3e77b2e7feb2edc2c88fa7a982db1d24d417736
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:21 GMT
Content-Length: 710
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
301 Moved Permanently 708 B URL HTTP/1.1 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (665)
Hash 94bc905e182a2512b11d65720e324aff
ae4406df196dec9eb8c90d15f27cff561367c506
15a04b386ea65fe121f83e79ae3a488e742c9f4d039a00da32ba937c92f6d3e6
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
Location: https://tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
Server: Microsoft-IIS/10.0
Date: Tue, 27 Sep 2022 03:53:21 GMT
Content-Length: 708
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Bottom&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.40904245668022254&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:21 GMT
content-length: 0
X-Firefox-Spdy: h2
tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
200 OK 0 B URL HTTP/2 tags.h12-media.com/v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /v2/tags.js?placement=7c2531d1cfb1ebec5d0980e460ccc092&type=sliding&erdal=mercan&size=&appearance=&pname=&debug=&name=From%20Right&code=&freq=&pb=&bref=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&href=undefined&rnd=0.4359494457427606&allowbackup=undefined&sability=undefined&cvfsy=undefined&mmtitw=undefined&bpos=undefined&bposscr=undefined&cdim=undefined&ddim=undefined&clngs=undefined&mdi=undefined&mhi=undefined HTTP/1.1
Host: tags.h12-media.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=300,private
content-type: application/x-javascript
server: Microsoft-IIS/10.0
x-powered-by: ARR/3.0
date: Tue, 27 Sep 2022 03:53:21 GMT
content-length: 0
X-Firefox-Spdy: h2
s10.histats.com/js15.js
200 OK 4.4 kB IP
File type HTML document, ASCII text, with very long lines (11088), with no line terminators
Hash 0c3fdf54a35d66a1e272956af95d34af
fd6cf4aa04104d6b48831bbf88bc6256fd5012c3
3adb20fd3b841e10b308345d164ac790a96228c3eac3e063efa505ae3c7d4cf6
GET /js15.js HTTP/1.1
Host: s10.histats.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
date: Tue, 27 Sep 2022 03:50:34 GMT
etag: "980881274"
last-modified: Thu, 16 Apr 2020 10:44:16 GMT
x-request-id: 542703720
content-type: text/javascript
content-length: 4405
content-encoding: gzip
vary: Accept-Encoding
x-cdn-pop: sbg
x-cdn-pop-ip: 137.74.120.0/27
x-cacheable: Matched cache
accept-ranges: bytes
x-iplb-request-id: 5B5A2A9A:6F80_2E69C9F0:0050_633273B2_52D96:1E8C
x-iplb-instance: 42472
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 348b8e9ff9789e9d04b35565f1f4a16e
a389fe1e390d2177191f58967c5291e9fcf8fea9
42393bbebc5bda5422c410adb413ddebf976d70fea8ca3ae50bd8dfddee645df
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "42393BBEBC5BDA5422C410ADB413DDEBF976D70FEA8CA3AE50BD8DFDDEE645DF"
Last-Modified: Sun, 25 Sep 2022 04:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=18103
Expires: Tue, 27 Sep 2022 08:55:05 GMT
Date: Tue, 27 Sep 2022 03:53:22 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html
200 OK 2.2 kB URL HTTP/1.1 www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (395)
Hash a92d7c9ae6286ce9ca7c551611b0eb4d
ab1678743ddf084b856bc4d623db626385e1940c
b84aaa6cf4d3334b4f2839deb62beab7b66c2f1d57273a10abb949acea7268bc
GET /geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:22 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Mon, 26-Dec-2022 03:53:21 GMT; Max-Age=7776000; path=/
pays=Norway; expires=Mon, 26-Dec-2022 03:53:21 GMT; Max-Age=7776000; path=/
ville=Oslo; expires=Mon, 26-Dec-2022 03:53:21 GMT; Max-Age=7776000; path=/
idcompteurcc_1955922=done; expires=Wed, 28-Sep-2022 03:53:21 GMT; Max-Age=86400; path=/
online_idcompteurcc_1955922=done; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
originecc_1955922=United%2BStates%2523United%2BStates%2BCity%252347225%257CCanada%2523Canada%2BCity%252314203%257CCanada%2523Burnaby%25239373%257CGermany%2523Frankfurt%2BAm%2BMain%25235888%257CUnited%2BKingdom%2523London%25235463%257CNetherlands%2523Amsterdam%25235075%257CUnited%2BStates%2523Santa%2BClara%25233893%257CUnited%2BStates%2523Clifton%25233563%257CCanada%2523Toronto%25233561%257CIndia%2523Bangalore%25233442%257CSingapore%2523Singapore%25233109%257CUnited%2BStates%2523Boardman%25232788%257CUnited%2BKingdom%2523Bath%25232194%257CUnited%2BStates%2523Fort%2BLauderdale%25232173%257CNew%2BZealand%2523Auckland%25231189%257CRomania%2523Romania%2BCity%2523755%257CRussian%2BFederation%2523Moscow%2523719%257CRussian%2BFederation%2523Russian%2BFederation%2BCity%2523685%257CFrance%2523Paris%2523528%257CIndia%2523New%2BDelhi%2523523%257CUnited%2BStates%2523Ashburn%2523485%257CIreland%2523Dublin%2523472%257CUnited%2BStates%2523Seattle%2523449%257CFrance%2523Le%2BLandreau%2523394%257CNetherlands%2523Netherlands%2BCity%2523333%257CUnited%2BStates%2523Chicago%2523329%257CGuatemala%2523Guatemala%2BCity%2523311%257CGermany%2523Aalen%2523298%257CUnited%2BStates%2523Lenexa%2523278%257C; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
online_1955922=3; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
jour_1955922=40; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
total_1955922=137394; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
bonus_1955922=21284; expires=Wed, 28-Sep-2022 03:53:21 GMT; Max-Age=86400; path=/
bonus_j_1955922=66; expires=Tue, 27-Sep-2022 03:56:21 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Tue, 27 Sep 2022 03:56:21 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=FTUjIr2FSFyVfLFvvVIy0VlIOUkF5zX8fEV0FyA4TpX6mYLyFPN9X5eIVpsuVF3zlExAHCWtzfvxIp2rZWs9mB1ANQ4zKBpk7mkW7VZJmNfBV9GwTMF67cdvHFM98iMM"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 75114ab78c5afac0-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.widgeo.net/tcm.js
200 OK 28 kB IP
File type HTML document, ASCII text
Hash cec1b3df690249273b60559cb7b8dfff
1294195a82dd73b82da1d94b5ff4dcf7d4d5727d
acdc65e1eba4fb11f88efc7afe93403f3f5cd79a392c875dd02633c42d024083
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 04 Oct 2022 03:53:21 GMT
last-modified: Fri, 01 Jul 2022 12:09:33 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IybEcoQBbUJ%2FE4K7YR5rPZPZmth%2F%2FdE1Aeu1nl%2Fyjg4GdevPdoi9bZ%2BALejZpgwbpG9ViKQAjKlUqPWWyr5u%2B2c6RgQvFpN5ORIL7eI14SJpqQgE7aQYBG%2Bsyce5qE2U"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114ab7d8440b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20states.png
200 OK 1.0 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20states.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 03d9bb2b449e6e964d86aec6d71b6856
e9b1da7fa7d59eaa78b2e2ad681c1e126fb55aa8
6baa676f5ca2682fd2d7945ca2d3b06759d8a1bdd4974e4c3e00b80643410399
GET /geocompteur/shadow/flag_united%20states.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 1008
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1214
content-disposition: inline; filename="flag_united%20states.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 14 Oct 2022 22:20:50 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1056751
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ke0NEbejvmGXt2JVWP6DY8ulyqTQYSlx7KB5TFimO1HpxC%2FcFDZMbVAEY1iSTy%2Bp1e4LqRD6odcjluVlQeWrjwyDDg9pdHc987LO2c84%2BFuQtFjzyzA6rClrBpLeEG0b"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b20b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 01:57:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 352569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=ATRYQSjHUarQfTP4mDfJI%2FWdegh61JesSahhGqVJHrfQeRHcFvOanaIdPBKaY8oGhnn0BkbNDofmQoVc9%2B6ViQ4uJGZbsLCr43I3zUPvSZhlvf1nLvyOFKQ9t2bZa5WW"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b40b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
200 OK 1.2 kB URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_united%20kingdom.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 0fca0f8c1f72968c8849d783accae326
6d6f3b4500a3f1fccc3474d59c716b2f60a59ea4
c1319ad29f9822f08a6740f0b89e91127cfb11a449f99528f0a7928156032c9e
GET /geocompteur/shadow/flag_united%20kingdom.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 1220
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1459
content-disposition: inline; filename="flag_united%20kingdom.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 18:14:05 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 293956
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=6jsHv7CZ4bQxeUzudyTiNkPm3ESaZqtbp2XmJefY2Z6OVU19Min7Y34QpAWc4ASdxvjVbsU8DltvNSoLOjBXpbrj%2FWZTFeCgOSSO1dYeUUcrnw00VjUr0yCoRoR%2Bntqa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b70b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_germany.png
200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 20:53:33 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 284388
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=lt8Rufzu71gelbz2nPWuakiXbJ674Kgiij%2F%2B4FLSHJzbHBqFIgaXEVgwQLEwofUvhqfDirpeeduYbbX%2FpOIjad%2Bjohk6gxcma7ThkJqLg9RUH0DXFbETtToCBhI8vbQG"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b50b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_india.png
200 OK 806 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_india.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 360d08c7d723c9cc21e98b83a9fbe646
b580c8380db1687a6365a95789c7227d325ce00f
b73e30b7030de7ec01db85eb01edfb3d228169583d6ccc6583bec0552d7ce172
GET /geocompteur/shadow/flag_india.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 806
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1027
content-disposition: inline; filename="flag_india.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 05 Oct 2022 10:04:45 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1878517
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=kx5l709QRhuAuqQc%2FxSDatsx1evPu%2FsQvrWLWGVb56l%2BBdO9fzjxopoZL0OFBeNorSQftRM8FWAFKYwJepY%2FC4KZFkuz%2Fe4BgU8O1oBFscA8ry9LMK7k6naSIy9gs0wf"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b90b02-OSL
X-Firefox-Spdy: h2
whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&y=&a=0&d=8.354&v=27&r=1170
200 OK 50 B URL HTTP/1.1 whos.amung.us/pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&y=&a=0&d=8.354&v=27&r=1170
IP
File type ASCII text, with no line terminators
Hash 02070324cd62e4435dff541151089689
bf8bc9c80c30edcc36a07fcd4159bd2443445a92
cb773cec4af3e4a3974777f15568a5ac41382c1164963aa93f21f0dd358e4446
GET /pingjs/?k=fau4sajxrcls&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20&c=t&x=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&y=&a=0&d=8.354&v=27&r=1170 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:22 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 75114ab9e825b518-OSL
www.widgeo.net/geocompteur/shadow/flag_netherlands.png
200 OK 710 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_netherlands.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4d48534384964664d122ef558ebf1acd
8cbccb6b66f6161c329f9945b58e79e09640cc90
286ee399704cd53efeabbca51dfc8459fb9633265ae4e9e046610f7d61d087bb
GET /geocompteur/shadow/flag_netherlands.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 710
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=892
content-disposition: inline; filename="flag_netherlands.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 20 Oct 2022 00:00:16 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 618785
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=GcvThMwSWltA%2BnQEy%2BJQm8DIvg0WtkTZbvJOP3MfJr0SvRztVLoFEFticl0pVIMP70gtzV34qawSnNtuqs91xGkm%2F460yoew46zZhAQlyeUvn5JEMNQwTQE72euCKYti"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99b80b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/geocity_html.php?id=1955922&c=geocity_orange&size=&nostats=&title=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&ref=aniekelate.blogspot.com&fullurl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html
HTTP/1.1 200 OK
Date: Tue, 27 Sep 2022 03:53:22 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 11:11:52 GMT
ETag: W/"633188f8-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BdvVgeSjcgl4Hwaqaw3asOcKJTROB47OwB%2BGDd51U4NvqxKEwwgCCVwnG5ShfuO0PQA9fBm5iFw3CACjsIE2dT4L3WAUk3ezFYz88H64zCaLe3pY1mtdAiCHNLxRoXq8"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 75114abaad97fac0-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Thu, 29 Sep 2022 03:53:22 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/hitparade.php?pagexiti=geocity_orange
200 OK 1.5 kB URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=geocity_orange
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 1ad94f6fb703eef15571d68c8675eca5
e52f1639c330569da35bc6dc1a7a3d11df92fa97
5717abc0ff0b565f173d40d172457f2a9f4296c27a7392bb890699f30542275f
GET /hitparade.php?pagexiti=geocity_orange HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Tue, 27 Sep 2022 03:56:21 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3%2BA0QM41qh4QjBVL0En7D7DYApggmB9xyEbfYrac8W6HeOFWG0q2vJq%2FqSklJGHKMeWXMtE5fFjXFu2MYyljYBzB8c8eTGfav8yhUP0NvBQ3aNphO5I%2F5Hmeh4Ne5KdF"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114ab7e84f0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
200 OK 940 B URL HTTP/1.1 lh4.ggpht.com/-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8719b63ac81155fd64422298ef8a8b25
c034b5869772ddf1675ebdbeb3c0d3c540738c24
b313f56a36c855a1a34a02b96910ee4307e553a28a6e52bc64e2ab1bc2cfdae5
GET /-XPEqe6ui3-0/UwoDrPeNnDI/AAAAAAAB1O8/mpFmxW7VDU4/MAS-A380_b680x498-565x413_thumb%25255B1%25255D.jpg?imgmax=800 HTTP/1.1
Host: lh4.ggpht.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1d4f0"
Expires: Wed, 28 Sep 2022 03:53:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="MAS-A380_b680x498-565x413_thumb[1].jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 27 Sep 2022 03:53:16 GMT
Server: fife
Content-Length: 42556
X-XSS-Protection: 0
www.widgeo.net/geocompteur/shadow/flag_romania.png
200 OK 644 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_romania.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash a2ef37e3cfe2119759469a219565c145
7d174bb96c9eb762a56b531e8c15a160773fe008
8f45100a446929b8ad38c886a1cc6d033a066a008f8268b6fa1ec8d3f4d74166
GET /geocompteur/shadow/flag_romania.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 644
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=842
content-disposition: inline; filename="flag_romania.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 01:57:12 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 352569
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DbnxHOr0iLT4VCuOsxIwGtvvQONOEFodoSegCOv%2BlETBi2BuglFHvgyxDqk0gIIZRLsMWYVG%2FRVJGI8vZK698oGC3T2SZ1lNGWdUL0vgeeWTinrPG2tydWB9Gzzd2A8q"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abaa9bc0b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_france.png
200 OK 696 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_france.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 40db5c3f7bd9cee685d7e682084fb924
711a4bc728a541423d4444facaee2651747620db
bf91a9e6437f46b4e59f5786b40ac2da0d23f70060729e3e9adbd1bbbd2ab716
GET /geocompteur/shadow/flag_france.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 696
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=901
content-disposition: inline; filename="flag_france.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Thu, 13 Oct 2022 18:28:29 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1157093
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XcOsZ32s10SMOOKcNSTntPn%2BqFt5WU3%2FbLxloWmEO9rfogZbHfd0vL8Sw4aT8RlU67AKm0NzjhmE%2BWBs%2BK7ZyXdzcry%2F5tTe5kdzUETQuPGAeOIKwDuiX2DABoXOiFE3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abaa9bf0b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
200 OK 680 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_russian%20federation.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 852881aef6d6a8bca3123c3201f64c74
0e5ef2c61383bb79c8a6ea068d9a688631d844fa
41c20a2d0dc8fe26ec1e5c7e71b5d82fc09e7ce0bd30db7abb516474f5c186a1
GET /geocompteur/shadow/flag_russian%20federation.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 680
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=857
content-disposition: inline; filename="flag_russian%20federation.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 25 Oct 2022 21:29:32 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 109429
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=RNiul5%2B7AJsY5LRQYCz4UV1ln504GgwjBG%2FhOp2Od0z1qxQ3DBrL8FKPKR6kqPvylJ3Y2FGiNJuG3TtDLySAeI4BK4Ej6B9FMATUwzEj7E2RDEa0uYUTF4uz00809BU9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abaa9be0b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_ireland.png
200 OK 712 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_ireland.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 8e55f246106bcd5ae49ef1a026ec80d3
a5afe18fe64456cbb16e31287f4106228267f584
eaf4b1563a65fb7bd06ace795835a00a4f491a48506996bd65c161d35002351e
GET /geocompteur/shadow/flag_ireland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 712
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=937
content-disposition: inline; filename="flag_ireland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Tue, 18 Oct 2022 19:54:53 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 719908
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eD4W4NaD8oVBf4Ryo36DGIPwG0EInKxaz8j0A2tgqclcS5x6sK0CatxVeFcnL4Qy0X9bfvIGKs2WCf1gO9azKwWuyDBZzzj%2BwbcT57lV4Sp0%2B76t0gZgYjl%2F8%2FI6up%2BD"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abaa9c20b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_guatemala.png
200 OK 940 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_guatemala.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash dafe0c345b80e5567b1ff2963e817d9d
e7b2b38df1c3cf0af1e69c5201c196bbaeba8f5e
ee2ee6cbd607e5a3bf1f42625b21f73584a19ba0686a9a255908bff3da86b542
GET /geocompteur/shadow/flag_guatemala.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 940
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1153
content-disposition: inline; filename="flag_guatemala.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 26 Oct 2022 02:54:24 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 89937
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=QCoRnb6E%2B9CpxA1deWxqjGShEcGTf2QakusRVLC3nv3wnP1CZsJxNKcT%2FFNGxDXhZxu3LIi1LRzvZt4Yg8Qh8huY58EtQjxf6mWX5HbQeb3UrzCpzmu9foGTfN%2BqcZo3"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abaa9c40b02-OSL
X-Firefox-Spdy: h2
developers.google.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://aniekelate.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: 5b021bfd78dde796bf18bffa5e5cd081
Date: Tue, 27 Sep 2022 03:53:22 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 904a8d4d380c2afb0f06401ce4c8491e
6c09e83415a209d302caba25187cae51fb998e9e
10724ff231265f6c0da44eb9ade0a936362252cad64cbcebb1d4414f4985730a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "10724FF231265F6C0DA44EB9ADE0A936362252CAD64CBCEBB1D4414F4985730A"
Last-Modified: Mon, 26 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3572
Expires: Tue, 27 Sep 2022 04:52:54 GMT
Date: Tue, 27 Sep 2022 03:53:22 GMT
Connection: keep-alive
www.widgeo.net/geocompteur/img/tmp/earth_beige.png
200 OK 2.4 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/earth_beige.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1fcc93f1321561f1c4f13358704fab24
cfd6fcdc3155419a74ad979ef3ae74acb5f20faa
3a14ddb14dd5980eefaf738778056479f512512a6126a383dde2ee1733a2bc08
GET /geocompteur/img/tmp/earth_beige.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 2396
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=3281
content-disposition: inline; filename="earth_beige.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Mon, 24 Oct 2022 02:33:39 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 263982
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Jiy1q0UlkyWNinlrDI0SzEqJe81Xk0ApvoKTTnmaiFpx%2BINx%2FMpCFmpH6cfqP1qXOyZb5ZEKNB1V5EM5TU%2FfzBN%2Fqriv%2BNvnPqHy7QJ6kvK785mjxSNXBrJx6J%2FlwZKV"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abb7a080b02-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/img/tmp/geocity_orange.png
200 OK 4.9 kB URL HTTP/2 www.widgeo.net/geocompteur/img/tmp/geocity_orange.png
IP
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1af8ea8361fe715b83d58626851ec708
f1a215520553bf8e4cc650e5005f4dbccfa910fe
799cf4b51127647d537a1494a5bb7344a0d70ce523490ca0e0934a34195881f2
GET /geocompteur/img/tmp/geocity_orange.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: image/webp
content-length: 4898
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=8312
content-disposition: inline; filename="geocity_orange.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 26 Oct 2022 20:09:33 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 27829
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=p36Kw0erNXSu130sHfk8elrzYk%2F0L0Xlv8pgMLHw2xtWNra%2FU9O5lJ8G7xRBPGJDBTD6K0LuOQT%2FfcbWNyUMQ5EmYFeYyYdhlZ686adD19YMmGLgWi0HXVe%2FMgKpsyqI"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abb7a0a0b02-OSL
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash bfc8c650e23854f708a3dd54fca4393f
b54c061cf5a5306a68112d403471914e839a68c8
84b8c36947944ea94b27e053f2abb944e6951157e256991f8b1523b9cacfe362
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 08:56:30 GMT
expires: Mon, 25 Sep 2023 08:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 22:13:13 GMT
content-type: text/javascript
age: 154612
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
200 OK 25 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.4.2/jquery.min.js
IP
File type ASCII text, with very long lines (820)
Hash cc24419c482370498f3c227ac73d666b
37fc103ace873f47102e0ca88eb4735bc6806750
152fa070788f0cf29dc062f03860897c39c7ffa13e6eee2dc3e5dc131ecbc7aa
GET /ajax/libs/jquery/1.4.2/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 24715
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 21:30:35 GMT
expires: Sun, 24 Sep 2023 21:30:35 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 195767
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
fonts.googleapis.com/css?family=Open+Sans:400,700
200 OK 1.1 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP
Hash 2818969243ebc407996a59b1ae3bd7ff
de0b2c60d503acc8ad287341a6e1a34c9bc747f2
2fc31ecf7ac26c9361f56f6f792ab2a4ac956039e091dbf595fd68ea6fa0a9d1
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Tue, 27 Sep 2022 03:53:22 GMT
date: Tue, 27 Sep 2022 03:53:22 GMT
cache-control: private, max-age=86400
cross-origin-opener-policy: same-origin-allow-popups
cross-origin-resource-policy: cross-origin
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash c939f97c8bcbfea356e92036803714bc
608c795e7c4fb943a4db49a4e4533c41ea717023
b05b38c78c15c259720bfc6783ac65ab60ceb1e6037b45b08113f183554f08cb
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 27 Sep 2022 03:53:22 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/tcm_t_u.js
200 OK 3.0 kB URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP
File type HTML document, Unicode text, UTF-8 text, with very long lines (2082), with CRLF line terminators
Hash 90e10e8d25a39dfeeaa30e9d866095d9
c842f8edcd834fef8ab30e78a8515562b24ad6a1
743e95df65699277bc29be6a689a2da20c5dad02338dc1d23bed46f233de6462
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Tue, 04 Oct 2022 03:53:21 GMT
last-modified: Mon, 25 Jul 2022 16:50:39 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=UMUMT7RV%2B3JuRD6NeHMvbRZ2Kn9Z0MbdEnBKbmkUXAdKN4qn55WwWrwZ%2FtHQrLGJK2U4JtSt304wFwjPlSBsgNtQNmqZmKSqV7oRXqs2Z4rrbEhb0fDKivO9ueP3h1J5"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114ab7d8480b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
my.rtmark.net/gid.js?userId=975115fc28e945b7a2309e42d118e3ea
200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=975115fc28e945b7a2309e42d118e3ea
IP
File type JSON data\012- , ASCII text
Hash 823420e5833a8594b12eb219de78c729
55f42fd226e4ead8bdf6be955873f6a23962b89a
ada7f05fbafb531175f7a4e0b32481e24f76de93902c9cbfa355f8a8c535d516
GET /gid.js?userId=975115fc28e945b7a2309e42d118e3ea HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=975115fc28e945b7a2309e42d118e3ea; expires=Wed, 27 Sep 2023 03:53:22 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/geowidget_js.js
200 OK 925 B URL HTTP/2 www.widgeo.net/geocompteur/geowidget_js.js
IP
File type ASCII text, with very long lines (866)
Hash 522a225007a969cede1ba2b85c0841c6
161df0a420f3d83da71e1c3b3014bac0f86f126b
4577784c331d19d2b74ff83db91e49c32e67e58f0c7bf2689cafe6af25aab357
GET /geocompteur/geowidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2217
cache-control: public, max-age=604800
expires: Tue, 27 Sep 2022 08:29:29 GMT
last-modified: Thu, 13 Feb 2020 12:35:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 588232
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=IhxnZIknshNkCxFuVZ6%2BBy%2BKmK22jOhKC7G36VHnR2jmp8Mjl%2FoJmubq4PGy9G4yXcRG%2F%2FqSF%2BEePVPbU91SNBliPjEN6F%2FOzs3ToGRqrJbVa4i1ImwruPX%2BhxbSkEHh"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114abb7a0c0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
200 OK 1.4 kB URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.430.0
IP
Hash c3f06e05284c6f92f8cdbc8113795921
9280a15696fa9116a0f61ebe79a2b926e1ea25bc
aed2aa8bf5ffe4563ef13313b44aba59f16b9ceeffd3291caecfcd42bdbe77c0
GET /5/3294720/?oo=1&js_build=iclick-v1.430.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/json
x-trace-id: 5e9229b98e30115b09d22ae2ac55deeb
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://aniekelate.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=975115fc28e945b7a2309e42d118e3ea; expires=Wed, 27 Sep 2023 03:53:22 GMT; path=/; secure; SameSite=None
oaidts=1664250802; expires=Wed, 27 Sep 2023 03:53:22 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=3x53x20&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=geocity_orange&hl=3x53x20&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On
IP
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=geocity_orange&hl=3x53x20&r=1280x1024x24x24&ref=http://aniekelate.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Tue, 27 Sep 2022 03:53:22 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 185768229530368be94556dcab1c486a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: QnTRKdu01h7gO8U0EYs8t8yFiH_mHuoh7gnlGBG0qUBuB7TgyPJS_A==
X-Firefox-Spdy: h2
cdn.tynt.com/tc.js
200 OK 16 kB IP
Hash 538facbab24b743a6cae81226f63eff6
fd69a8d9e38e88888ac61c3a2aa96d2279563fc7
ec5a6cb04070512b117420dafb6d6dfadea78894c9c76e322ddbf6c4252ddaf1
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/javascript
last-modified: Thu, 21 Jul 2022 14:57:10 GMT
vary: Accept-Encoding
etag: W/"62d96946-4599"
content-encoding: gzip
cf-cache-status: HIT
age: 131651
expires: Fri, 30 Sep 2022 03:53:22 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 75114abd19aa0b51-OSL
X-Firefox-Spdy: h2
onmarshtompor.com/?rb=49I3yaX-EDThLpsRnMqd61KqH2uwHEnTtNFmJDnQ66bs_d2dUtRUy5EyeEA3QPLsJV4JbTDhUNyJG9ITchRhnZ8VdekoQhAcZ118NZn7Xm7YmedUHuy0zF43YdRhvk3lftakduU8htO0E1mSLO_QLfDRC9Y41ZNb2CA0rQFyiKpEa6mChj-8ZK9Uzpoo2TySWaJLZzVbQNBLiGMsMFTTWvuSgWSyb4HKMvsWmg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=49290aeb-3183-4a19-a71b-b2f8c0c0dee5&userId=975115fc28e945b7a2309e42d118e3ea&m=link
200 OK 1.7 kB URL HTTP/1.1 onmarshtompor.com/?rb=49I3yaX-EDThLpsRnMqd61KqH2uwHEnTtNFmJDnQ66bs_d2dUtRUy5EyeEA3QPLsJV4JbTDhUNyJG9ITchRhnZ8VdekoQhAcZ118NZn7Xm7YmedUHuy0zF43YdRhvk3lftakduU8htO0E1mSLO_QLfDRC9Y41ZNb2CA0rQFyiKpEa6mChj-8ZK9Uzpoo2TySWaJLZzVbQNBLiGMsMFTTWvuSgWSyb4HKMvsWmg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=49290aeb-3183-4a19-a71b-b2f8c0c0dee5&userId=975115fc28e945b7a2309e42d118e3ea&m=link
IP
File type JSON data\012- , ASCII text, with very long lines (2213), with no line terminators
Hash 830346a332883ddb81beb69fc577278b
1c50b2869b38a67dccae4ef3a4e27c24fd0fe137
34c6c55d4e7bbf13289c4fb64fb04c4850dd26cfd0f77d1380fe0a8114f00a7b
GET /?rb=49I3yaX-EDThLpsRnMqd61KqH2uwHEnTtNFmJDnQ66bs_d2dUtRUy5EyeEA3QPLsJV4JbTDhUNyJG9ITchRhnZ8VdekoQhAcZ118NZn7Xm7YmedUHuy0zF43YdRhvk3lftakduU8htO0E1mSLO_QLfDRC9Y41ZNb2CA0rQFyiKpEa6mChj-8ZK9Uzpoo2TySWaJLZzVbQNBLiGMsMFTTWvuSgWSyb4HKMvsWmg%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.430.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=9&pl=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.430.0&bs=49290aeb-3183-4a19-a71b-b2f8c0c0dee5&userId=975115fc28e945b7a2309e42d118e3ea&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://aniekelate.blogspot.com/
Origin: http://aniekelate.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 27 Sep 2022 03:53:22 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: ad57e09d8f5fe774a60c312f105f31e4
Access-Control-Allow-Origin: http://aniekelate.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=975115fc28e945b7a2309e42d118e3ea; expires=Wed, 27 Sep 2023 03:53:22 GMT; path=/
oaidts=1664250802; expires=Wed, 27 Sep 2023 03:53:22 GMT; path=/
syncedCookie=true; expires=Tue, 04 Oct 2022 03:53:22 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1664250800753&dn=TC&iso=0&img=http%3A%2F%2Flh6.ggpht.com%2F-2L5z-nk5Ees%2FUbNTYGkeAbI%2FAAAAAAABrn4%2FSDU-APd9vm8%2Fw1200-h630-p-k-no-nu%2Fainul-aisyah02_thumb%2525255B1%2525255D.jpg%3Fimgmax%3D800&ct=Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&cu=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html
204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!fau4sajxrcls&lm=0&ts=1664250800753&dn=TC&iso=0&img=http%3A%2F%2Flh6.ggpht.com%2F-2L5z-nk5Ees%2FUbNTYGkeAbI%2FAAAAAAABrn4%2FSDU-APd9vm8%2Fw1200-h630-p-k-no-nu%2Fainul-aisyah02_thumb%2525255B1%2525255D.jpg%3Fimgmax%3D800&ct=Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&cu=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!fau4sajxrcls&lm=0&ts=1664250800753&dn=TC&iso=0&img=http%3A%2F%2Flh6.ggpht.com%2F-2L5z-nk5Ees%2FUbNTYGkeAbI%2FAAAAAAABrn4%2FSDU-APd9vm8%2Fw1200-h630-p-k-no-nu%2Fainul-aisyah02_thumb%2525255B1%2525255D.jpg%3Fimgmax%3D800&ct=Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&t=Bebelan%20Anie%20Kelate%3A%20Artis%20wanita%20naik%20angin%20bila%20ditegur%20tayang%20aurat%20di%20bulan%20Ramadan&cu=http%3A%2F%2Faniekelate.blogspot.com%2F2013%2F06%2Fartis-wanita-naik-angin-bila-ditegur.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Tue, 27 Sep 2022 03:53:23 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
200 OK 0 B URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=geocity_orange
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=nGYCn7Qlmw4f0Pvrb7oJmzG9Ye4qR%2BnKMeXAlB%2BfjIrJ9fWPDUMYj5YN5TTpfHHJW94BPneYALyPPmLsVgqPmDsKNoPadhrqKzFap%2BsKedydDRgWCMWdSSuFY5xgPakQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75114abaa9c60b02-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Thu, 29 Sep 2022 03:53:22 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/css/city_css.php?c=geocity_orange
IP
GET /geocompteur/css/city_css.php?c=geocity_orange HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:22 GMT
content-type: text/css;charset=UTF-8
cache-control: public, max-age=604800
expires: Tue, 04 Oct 2022 03:53:21 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=LdWhMrS6XdJsTJxw%2BdPYX4RjcpUYbVYCBg81tQGlw83rSV1sVzb%2BlfjFfJsZMklp%2FKntA8SFEXlKN1j7Y9P1ucIAV4U2pO8%2BTlKUtJo5RAbaOTdH74M8AiQYcm0eSXzN"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 75114aba99ae0b02-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
200 OK 0 B URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 27 Sep 2022 03:53:22 GMT
expires: Tue, 27 Sep 2022 03:53:22 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74673
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
inklinkor.com/tag.min.js
200 OK 0 B IP
GET /tag.min.js HTTP/1.1
Host: inklinkor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://aniekelate.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 27 Sep 2022 03:53:21 GMT
content-type: text/javascript; charset=utf-8
x-trace-id: 3422eefd1720f0f50d75b0b5abb57d62
cache-control: max-age=86400
last-modified: Fri, 23 Sep 2022 16:05:00 GMT
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
pragma: no-cache
expires: Wed, 28 Sep 2022 03:46:35 GMT
timing-allow-origin: *
cf-cache-status: HIT
age: 405
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=PFaAUjMi75VIu00N17MdP8cFzj%2FgCIs5AIEg9gkbsP6iPKX54bVixLiRUnUlO1pv2kMaZu3wcDZ9LsxS5wpDleL1VFrb1PEkDCCJ9Gp7xreDs%2BJAeObQT597ySE79Bm1"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 75114ab7ee691c02-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
142.250.74.161
190.2.139.23
23.36.76.226
158.69.139.225
139.45.197.234
104.20.229.67
157.240.200.14
103.224.182.246
18.138.110.223
46.105.201.240