r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7181eff9c60e83eb0004ece591e47dca
0fd8cd0c9d10b0547938982e57d2c43e2d98679f
89c5c0e2d6890798644174a8e31976aec03a1b3deb03812afbb520e5ed68f522
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "89C5C0E2D6890798644174A8E31976AEC03A1B3DEB03812AFBB520E5ED68F522"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2466
Expires: Thu, 08 Dec 2022 21:16:39 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash aea93551fa9deb76ae49a3b4019d64fe
e3b8862057ebe839959228e42246d7b1807fc90c
7e210f03b140418085e94ec20c1d27d6ecf7a404cbd323e16476ae5ae95d6dac
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "7E210F03B140418085E94EC20C1D27D6ECF7A404CBD323E16476AE5AE95D6DAC"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=17414
Expires: Fri, 09 Dec 2022 01:25:47 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash c3470f9f0a4df8c1496b577fa9435ff6
f83b0226bb57ed0f3e1acdad61b940414add135d
f542579e3a3577a646babde862282c2afda6ed784360a915143216100f7a3d91
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F542579E3A3577A646BABDE862282C2AFDA6ED784360A915143216100F7A3D91"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=11580
Expires: Thu, 08 Dec 2022 23:48:33 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 14cd9a0afb6ba9a763651d5112760d1e
75d7b104ab9ab11fbb73c3f348b43b0119b5adfa
4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Thu, 08 Dec 2022 20:08:13 GMT
content-type: application/json
age: 1640
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain
IP
File type PEM certificate\012- , ASCII text
Hash 53341dea33f4f3d9b4966f80589f429a
20f7b07c686c986d2ed1e3e9ad1bb2aef8edaf0d
651683e52cdbc96b289f8f123155f0b96d9f67432689e89156fa56f5a346c6a0
GET /chains/remote-settings.content-signature.mozilla.org-2023-01-19-10-06-33.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: QqvjCT4kafNk4hTHj38oEA1dJWrI9JNNp6cvcqm3PVQDSC0DjwNiNzlZvRGgMVQcGsr+C8vrp5s=
x-amz-request-id: Y4JZXV0ABR946D19
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Thu, 08 Dec 2022 19:48:02 GMT
age: 2851
last-modified: Wed, 30 Nov 2022 10:06:34 GMT
etag: "53341dea33f4f3d9b4966f80589f429a"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 08 Dec 2022 20:35:33 GMT
content-type: application/json
content-length: 12
access-control-allow-credentials: true
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Expires, Last-Modified, ETag, Cache-Control, Alert, Content-Length, Pragma, Content-Type, Retry-After, Backoff
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Thu, 08 Dec 2022 20:07:55 GMT
age: 1658
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
200 OK 80 kB URL HTTP/1.1 www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (18504)
Hash 4379ccf8fb752b304e8f035ad3216378
0a74f889221aeebb2eca65fef396594f71759c77
079aa4c5e5aea8f83025c494cacda822eb037cc4dcb4cf193afc39cf1335eb8e
Analyzer Verdict Alert fortinet Malware
GET /2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 08 Dec 2022 20:35:33 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: private, max-age=0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
ETag: W/"41c767f3ab7cc013c5cdf289bae6cafc92093fd71888bef1e563f06bb2aad2a2"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 79768
Server: GSE
static.addtoany.com/menu/page.js
301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/page.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 20:35:33 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 08 Dec 2022 21:35:33 GMT
Location: https://static.addtoany.com/menu/page.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 776849c70e980b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
ocsp.digicert.com/
200 OK 279 B IP
Hash 40ed5ec0836e5a03f0c1347b5db96966
40a1f62afbf3c26ea40be6d287122f3ffd19870e
2fd03cac65cc434ddade13acacc1c68a2a4bbc557e3a03777ea20fdd6c91a441
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3467
Cache-Control: max-age=127425
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Etag: "63918bcb-117"
Expires: Sat, 10 Dec 2022 07:59:18 GMT
Last-Modified: Thu, 08 Dec 2022 07:01:31 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b1c4d797d1d2fef94993a69a7cb423a
d4d0f3b2eccd29dddef0f1ec51309de97c6c05a4
d2f98268392005d93b5bce9c019c360400b09ac369fc8e8cbc1edba7ed6d929d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4e3dc85fd71bdb106039966a96cdd02b
53d3487232ddcac30b53c224c94e63571633e5af
d0a3a292876b50c590a3fa6c04d3471a6fb726c54f57e75c21f2e1bd45424ace
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 14:01:43 GMT
expires: Wed, 06 Dec 2023 14:01:43 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 05 Dec 2022 19:52:21 GMT
content-type: text/css
age: 196430
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 22:01:48 GMT
expires: Wed, 06 Dec 2023 22:01:48 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 167625
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 34da737f5d8fab7415ab2d552058d653
2e28de807960cde0030e68b4f468aaeecd1b533f
bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 4cb6f662c8dfa7c964adde096605ddda
02eddc917526a51d85a9c95d3f1196bc8c6236ba
52b1cd2d6fc38957c4a3e064fd8d415c24d885770e6532dfd199a16602e9b09c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "52B1CD2D6FC38957C4A3E064FD8D415C24D885770E6532DFD199A16602E9B09C"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3158
Expires: Thu, 08 Dec 2022 21:28:11 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Connection: keep-alive
images.dmca.com/Badges/DMCABadgeHelper.min.js
200 OK 395 B URL HTTP/1.1 images.dmca.com/Badges/DMCABadgeHelper.min.js
IP
Hash 365ad8f83802168e7326b29df6a22f4a
a096aa3c7e46525c7b7c54cb6b7987f01559b688
dafd787e6bf2c7ed10cb6c14f36ada4e5e9b7c15ffe7393cd6000acb946ebf13
GET /Badges/DMCABadgeHelper.min.js HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Encoding: gzip
Content-Type: application/javascript
Last-Modified: Fri, 21 Jun 2019 20:14:34 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Cache-Control: public,max-age=31536000
ETag: "26b181f16d28d51:0"
X-Powered-By: ASP.NET
X-HW: 1670531733.cds249.sk1.h2,1670531733.cds230.sk1.c
Link: <http://www.dmca.com/Badges/DMCABadgeHelper.min.js>; rel="canonical"
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 395
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b1c4d797d1d2fef94993a69a7cb423a
d4d0f3b2eccd29dddef0f1ec51309de97c6c05a4
d2f98268392005d93b5bce9c019c360400b09ac369fc8e8cbc1edba7ed6d929d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lightwidget.com/widgets/lightwidget.js
301 Moved Permanently 162 B URL HTTP/1.1 lightwidget.com/widgets/lightwidget.js
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 4f8e702cc244ec5d4de32740c0ecbd97
3adb1f02d5b6054de0046e367c1d687b6cdf7aff
9e17cb15dd75bbbd5dbb984eda674863c3b10ab72613cf8a39a00c3e11a8492a
GET /widgets/lightwidget.js HTTP/1.1
Host: lightwidget.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 301 Moved Permanently
Server: nginx
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
Location: https://cdn.lightwidget.com/widgets/lightwidget.js
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 34da737f5d8fab7415ab2d552058d653
2e28de807960cde0030e68b4f468aaeecd1b533f
bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash fd55f4aaaab6ec40bc7dc10252cd819a
a72523f60be265a391fa9edc43e0a93418ad1fd0
bae354b3db14f4fd115311a0c412c9b5e436dd9e0a151afd8b9c18831dd8c2dd
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3793
Cache-Control: max-age=135272
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Etag: "6391a92c-1d7"
Expires: Sat, 10 Dec 2022 10:10:05 GMT
Last-Modified: Thu, 08 Dec 2022 09:06:52 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4b1c4d797d1d2fef94993a69a7cb423a
d4d0f3b2eccd29dddef0f1ec51309de97c6c05a4
d2f98268392005d93b5bce9c019c360400b09ac369fc8e8cbc1edba7ed6d929d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/3222695235-widgets.js
200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/3222695235-widgets.js
IP
File type ASCII text, with very long lines (2221)
Hash 9f2f688aec73940034a0266a2a6266da
af9875c8064027204827b311250191c87e55366e
a78a0cfbae13cfc525657e31c2033d5c0281c5fbec2cf3e493ff75a7e097a02a
GET /static/v1/widgets/3222695235-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56718
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 07 Dec 2022 02:14:06 GMT
expires: Thu, 07 Dec 2023 02:14:06 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 07 Dec 2022 00:52:16 GMT
content-type: text/javascript
age: 152487
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-b-Is259_thw/We2dOPUD8RI/AAAAAAAACa8/dI3s5-2I7IsSbWBQ1yIpfFz6AhK7BCy8gCLcBGAs/s400/DB%2BKader.JPG
200 OK 50 kB URL HTTP/2 1.bp.blogspot.com/-b-Is259_thw/We2dOPUD8RI/AAAAAAAACa8/dI3s5-2I7IsSbWBQ1yIpfFz6AhK7BCy8gCLcBGAs/s400/DB%2BKader.JPG
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 398x400, components 3\012- data
Hash 9a9e2211f9b3a8ad3b32fb1f86865fd9
6e7584b5aa025eeefc910eb13811c5bcf36d9dea
d7ba1046a68219b047d9c106f6b058306b4e060a2a9fb4071b08eff83e880421
GET /-b-Is259_thw/We2dOPUD8RI/AAAAAAAACa8/dI3s5-2I7IsSbWBQ1yIpfFz6AhK7BCy8gCLcBGAs/s400/DB%2BKader.JPG HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v9b0"
expires: Fri, 09 Dec 2022 20:35:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="DB Kader.JPG"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 20:35:33 GMT
server: fife
content-length: 49504
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/jsbin/3469866930-comment_from_post_iframe.js
IP
File type ASCII text, with very long lines (1441)
Hash f60e5037324bf7fd2256c16929886f09
aae4b1aea3737e0268e3578dd1d0e7cfe6c6d66b
71846da8d45274b77549b110389ab3dbcb8ce042051b5c39547909c1c343dfde
GET /static/v1/jsbin/3469866930-comment_from_post_iframe.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6573
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Tue, 06 Dec 2022 13:44:05 GMT
expires: Wed, 06 Dec 2023 13:44:05 GMT
cache-control: public, max-age=31536000
last-modified: Tue, 06 Dec 2022 04:51:45 GMT
content-type: text/javascript
age: 197488
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 279 B IP
Hash 40ed5ec0836e5a03f0c1347b5db96966
40a1f62afbf3c26ea40be6d287122f3ffd19870e
2fd03cac65cc434ddade13acacc1c68a2a4bbc557e3a03777ea20fdd6c91a441
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3467
Cache-Control: max-age=127425
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Etag: "63918bcb-117"
Expires: Sat, 10 Dec 2022 07:59:18 GMT
Last-Modified: Thu, 08 Dec 2022 07:01:31 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
1.bp.blogspot.com/-4bYfiJVYZ7s/WcDGcAYbL7I/AAAAAAAACXc/eM-jeMM9FVUzaSgHYWau-vs5fYbYM3yywCLcBGAs/w72-h72-p-k-no-nu/WhatsApp%2BImage%2B2017-09-19%2Bat%2B8.22.20%2BAM.jpeg
200 OK 5.1 kB URL HTTP/2 1.bp.blogspot.com/-4bYfiJVYZ7s/WcDGcAYbL7I/AAAAAAAACXc/eM-jeMM9FVUzaSgHYWau-vs5fYbYM3yywCLcBGAs/w72-h72-p-k-no-nu/WhatsApp%2BImage%2B2017-09-19%2Bat%2B8.22.20%2BAM.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 3ba00bf177346a04893fd805bd739bd2
eae206230b62a3fa064071d8dd36724849633056
1fee42391fa52b670d2628d28de19f7b5100c8b322f5c47f2d5747e70c33f512
GET /-4bYfiJVYZ7s/WcDGcAYbL7I/AAAAAAAACXc/eM-jeMM9FVUzaSgHYWau-vs5fYbYM3yywCLcBGAs/w72-h72-p-k-no-nu/WhatsApp%2BImage%2B2017-09-19%2Bat%2B8.22.20%2BAM.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v978"
expires: Fri, 09 Dec 2022 20:35:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="WhatsApp Image 2017-09-19 at 8.22.20 AM.jpeg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 20:35:33 GMT
server: fife
content-length: 5077
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 4f48748dc87020a0f1368e6d3bb9a24c
4eeade3f02cc6b02390af43bd5e7d67da4a707e0
7cb746c8d9392ac22b2a06ce10ef0266bebf5a7a09febdafeea27a29fa0bd1a5
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
3.bp.blogspot.com/-HJqx-Yl9HlQ/WHIVREwjedI/AAAAAAAAB7s/fzPRoaPxNREZYSUso-GWZ_yLFSyj9HfqwCLcB/w72-h72-p-k-no-nu/led.jpg
200 OK 2.6 kB URL HTTP/2 3.bp.blogspot.com/-HJqx-Yl9HlQ/WHIVREwjedI/AAAAAAAAB7s/fzPRoaPxNREZYSUso-GWZ_yLFSyj9HfqwCLcB/w72-h72-p-k-no-nu/led.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash a2932e199f11f7399c180994b1bf6514
c0cf39f08cc16741457d43d4247dcff916c9e035
36876b5afef784cd2ee903fba822b4fa0892d23121aa69c168478eb399790b8f
GET /-HJqx-Yl9HlQ/WHIVREwjedI/AAAAAAAAB7s/fzPRoaPxNREZYSUso-GWZ_yLFSyj9HfqwCLcB/w72-h72-p-k-no-nu/led.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v7bc"
expires: Fri, 09 Dec 2022 20:35:33 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="led.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 20:35:33 GMT
server: fife
content-length: 2590
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 5c976eadb2fdff41e920cff02c33d451
eb2f9cd31a275766072f1ebcd44354143dc1a6c2
6899f0360a20f3f1b33aa3a38be18780ae115103157e5eac60d82bceb7acdd44
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "6899F0360A20F3F1B33AA3A38BE18780AE115103157E5EAC60D82BCEB7ACDD44"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2450
Expires: Thu, 08 Dec 2022 21:16:23 GMT
Date: Thu, 08 Dec 2022 20:35:33 GMT
Connection: keep-alive
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 34da737f5d8fab7415ab2d552058d653
2e28de807960cde0030e68b4f468aaeecd1b533f
bbd3063026b41b4487911d85977a7dfe8e0f62f93a48cedad2ce2448f28e2cf0
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
cdn.rawgit.com/Brando07/share/newbe/perlabel-SEOCIPS.js
301 Moved Permanently 102 B URL HTTP/2 cdn.rawgit.com/Brando07/share/newbe/perlabel-SEOCIPS.js
IP
ASN #34989 ServeTheWorld AS
File type ASCII text, with no line terminators
Hash b78fc3ddbe582c9e8a887e0e3fea7457
d0cb5d29bf8d9f9e901775c6281f408606f61acc
09b0d88f03b6e359db00281124fd733c53453312548eca6bd05c70ba1f7b0d68
GET /Brando07/share/newbe/perlabel-SEOCIPS.js HTTP/1.1
Host: cdn.rawgit.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 301 Moved Permanently
date: Thu, 08 Dec 2022 20:35:33 GMT
content-type: text/plain; charset=utf-8
content-length: 102
location: https://cdn.jsdelivr.net/gh/Brando07/share@newbe/perlabel-SEOCIPS.js
server: BunnyCDN-NO1-830
cdn-pullzone: 201235
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: NO
vary: Accept-Encoding
access-control-allow-origin: *
access-control-expose-headers: *
age: 39696
alt-svc: h3=":443", h3-29=":443", h3-27=":443"
cache-control: public, max-age=2592000
cdn-cachedat: 12/08/2022 20:35:33
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-served-by: cache-fra-eddf8230045-FRA, cache-chi-kigq8000025-CHI
x-cache: MISS, HIT
cdn-proxyver: 1.03
cdn-requestpullcode: 301
cdn-requestpullsuccess: True
cdn-edgestorageid: 830
cdn-status: 301
cdn-requestid: ea76b8c448084a38c102789d5a2393dc
cdn-cache: MISS
X-Firefox-Spdy: h2
www.immjatim.org/feeds/posts/default/-/Cabang?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 5.3 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/Cabang?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type ASCII text, with very long lines (21012)
Hash 0ced6653b3b8649d8f9d39c6408a61fa
b995eb1b2f7978893e787b3df90c98442bbc110a
aaa067eb78bee83d8fb0373d039909773ca483ea254873ac4459a13edee76a4c
GET /feeds/posts/default/-/Cabang?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"7dc78439546979867a3472766315714c41ffb0274c6a9279b4ab92dd8400e52b"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 5270
X-Frame-Options: SAMEORIGIN
www.immjatim.org/feeds/posts/default/-/Sikap?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 7.7 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/Sikap?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type Unicode text, UTF-8 text, with very long lines (38634)
Hash ae5da6e636a2335ffcf14ad4f1a6d4a4
3b93adb4fd2f42a9465c18f6b259f08d25b58066
cec92c26603ff9a195075e47605ee30cbc656d719de7240eb2517d9a3c1d3bfc
GET /feeds/posts/default/-/Sikap?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"f5302f366bedba0535fcee6206e861466688a82d1aea9a0ade4b8127f1375b8d"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 7682
X-Frame-Options: SAMEORIGIN
www.immjatim.org/js/cookienotice.js
200 OK 2.0 kB URL HTTP/1.1 www.immjatim.org/js/cookienotice.js
IP
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
Analyzer Verdict Alert fortinet Malware
GET /js/cookienotice.js HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 08 Dec 2022 20:35:33 GMT
Expires: Thu, 15 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 08 Dec 2022 19:54:39 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
2.bp.blogspot.com/-7qVkCzvGlC4/Ud1ZF3wqNlI/AAAAAAAABuc/6V0lQLdtvnk/s1600/twitter.png
200 OK 10 kB URL HTTP/1.1 2.bp.blogspot.com/-7qVkCzvGlC4/Ud1ZF3wqNlI/AAAAAAAABuc/6V0lQLdtvnk/s1600/twitter.png
IP
File type PNG image data, 394 x 394, 8-bit/color RGB, non-interlaced\012- data
Hash 4c9fa6b9883d697bfeaa71827ca103c4
872c2a5213f86be0cf054c9a88312a4d0e4ee291
4b619f77b05d45d90a354e547de1196072d89033fb40520d11f427eff009199d
GET /-7qVkCzvGlC4/Ud1ZF3wqNlI/AAAAAAAABuc/6V0lQLdtvnk/s1600/twitter.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="twitter.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10406
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 20:35:33 GMT
Expires: Tue, 06 Dec 2022 22:01:26 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6e9"
Content-Type: image/png
Age: 0
www.immjatim.org/feeds/posts/default/-/Mahasiswa?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 5.7 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/Mahasiswa?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type ASCII text, with very long lines (23118)
Hash 63ba3551e531d51b7b0cb168f0ee36f1
6c646761151eb55d6b08e6d158728904b7e0be0c
59d8c1f114c658b7332c96b71d291e183fb9c088e82f666cf3044c74bb33747e
GET /feeds/posts/default/-/Mahasiswa?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"8c71d44c5a4e70d29103445983553073d79c7e638fada5728158499c07c8d68f"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 5748
X-Frame-Options: SAMEORIGIN
www.immjatim.org/feeds/posts/default/-/Agenda%20Cabang?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 6.0 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/Agenda%20Cabang?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type Unicode text, UTF-8 text, with very long lines (29034)
Hash 59c53a666f13d25ce4230f95b9a845ba
56c414bcadfc1fe28c277f7fd95c18a71fba5edc
1d2a83b6eec8b0fa4e0998092a2c3c6a9cf4cedeeb5572ae9880652f6c375e54
GET /feeds/posts/default/-/Agenda%20Cabang?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"cf439e50123da8ebcd5c09f25c822e8e1a3a6fc789e4393c0b34cb31eeb83909"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 5993
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-zy8jnVs7KjA/Wm28L4LLcdI/AAAAAAAAClI/Ou8GOna8xsszdLX21e5aW9-RwTyM0GAYQCK4BGAYYCw/s1600/Media.jpg
200 OK 79 kB URL HTTP/1.1 2.bp.blogspot.com/-zy8jnVs7KjA/Wm28L4LLcdI/AAAAAAAAClI/Ou8GOna8xsszdLX21e5aW9-RwTyM0GAYQCK4BGAYYCw/s1600/Media.jpg
IP
File type JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 960x612, components 3\012- data
Hash f0a2d64478f3e657c56f049629077967
998713ef95e94d1d4d3145a1b4913b63866a9043
541db756308d04253570ce33b3b482e0d99c0503da7c5f7fa9ed3c51b9187edf
GET /-zy8jnVs7KjA/Wm28L4LLcdI/AAAAAAAAClI/Ou8GOna8xsszdLX21e5aW9-RwTyM0GAYQCK4BGAYYCw/s1600/Media.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va53"
Expires: Fri, 09 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Media.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Dec 2022 20:35:33 GMT
Server: fife
Content-Length: 79002
X-XSS-Protection: 0
www.immjatim.org/feeds/posts/default/-/IMM?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 6.0 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/IMM?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type Unicode text, UTF-8 text, with very long lines (28734)
Hash 1623e10b949cf123e7912d6b33c1a767
1d699d071d88a5b3c19f0c635ceb5a8188b6bc04
a03edc0e601c9336ee00c93d7a2937803c17fa4b7132c9dd6c4df969dfcfe551
GET /feeds/posts/default/-/IMM?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"b2312d985f64c3435712b80ee707e45ca9e46c3827eba03784c069ba06cf8f68"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 6007
X-Frame-Options: SAMEORIGIN
2.bp.blogspot.com/-1UnXR47C7go/WHCgzQ5OnqI/AAAAAAAAB7c/NiYmXD7tPAUmTn6agzyoBxgdu3wbV4AWACK4B/s1600/lll.png
200 OK 210 kB URL HTTP/1.1 2.bp.blogspot.com/-1UnXR47C7go/WHCgzQ5OnqI/AAAAAAAAB7c/NiYmXD7tPAUmTn6agzyoBxgdu3wbV4AWACK4B/s1600/lll.png
IP
File type PNG image data, 1600 x 240, 8-bit/color RGB, non-interlaced\012- data
Size 210 kB (210092 bytes)
Hash 1a36b734b8f2bb2e05ee05a2573689b5
68ce45cb29b666b246ce73cb0c3e93c19ccf8a81
11bb1bcc44f9a2f8c6715d6f2cc3c2a83cf77483d2801685dca7faeda78fbe60
GET /-1UnXR47C7go/WHCgzQ5OnqI/AAAAAAAAB7c/NiYmXD7tPAUmTn6agzyoBxgdu3wbV4AWACK4B/s1600/lll.png HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v7b9"
Expires: Fri, 09 Dec 2022 20:35:33 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="lll.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Dec 2022 20:35:33 GMT
Server: fife
Content-Length: 210092
X-XSS-Protection: 0
ocsp.digicert.com/
200 OK 279 B IP
Hash 8d64296cebc80e0641c4349c04fb23d4
3d52699e1a7cd879b17ebbdea0c3c88b6ece0991
ee988b96c9afcc2f7df5b2a65c4cee217a48263e63bf3575d844c314628004cb
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 3481
Cache-Control: max-age=165190
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:33 GMT
Etag: "63921f42-117"
Expires: Sat, 10 Dec 2022 18:28:43 GMT
Last-Modified: Thu, 08 Dec 2022 17:30:42 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 279
push.services.mozilla.com/
101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: EFjTPLCp/whGpxBI5EIPGQ==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: /lr//dJl9bbahloO4EsMC32lzqQ=
www.immjatim.org/feeds/posts/default/-/Sosial?alt=json-in-script&callback=related_results_labels&max-results=3
200 OK 6.0 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/default/-/Sosial?alt=json-in-script&callback=related_results_labels&max-results=3
IP
File type ASCII text, with very long lines (23155)
Hash 4f6598d891cd828dad1c7bd0004a082c
1720259e6c67e8c26963c2c746a4002f738f10f5
fd3bb8ac9e315792e1b3c43127866d0ade7ce1fb712a4f791bf8840444477665
GET /feeds/posts/default/-/Sosial?alt=json-in-script&callback=related_results_labels&max-results=3 HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"08d61a05ef5b8b7fea103b28fe21a95b7d1411ab87c2cb0ad4b0b0be2dd2966d"
Date: Thu, 08 Dec 2022 20:35:33 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 6045
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-EUw350jEWjY/XYGoRXKpl1I/AAAAAAAAIWM/59Q9frANLrkzkwqmH6zVsjVM_6uwfPjmQCLcBGAsYHQ/s400/WhatsApp%2BImage%2B2019-09-18%2Bat%2B10.21.33%2BAM.jpeg
200 OK 47 kB URL HTTP/2 1.bp.blogspot.com/-EUw350jEWjY/XYGoRXKpl1I/AAAAAAAAIWM/59Q9frANLrkzkwqmH6zVsjVM_6uwfPjmQCLcBGAsYHQ/s400/WhatsApp%2BImage%2B2019-09-18%2Bat%2B10.21.33%2BAM.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 400x225, components 3\012- data
Hash 884a61bdb1145cd3975621f0d64c8819
5656b78f8faa2db1a25317a062b606efbc10c36f
251aee4ea85867f1bb8d0da0abbdce8fb8236ed87e636e64fadd070fd65f4693
GET /-EUw350jEWjY/XYGoRXKpl1I/AAAAAAAAIWM/59Q9frANLrkzkwqmH6zVsjVM_6uwfPjmQCLcBGAsYHQ/s400/WhatsApp%2BImage%2B2019-09-18%2Bat%2B10.21.33%2BAM.jpeg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2164"
expires: Fri, 09 Dec 2022 20:35:34 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="WhatsApp Image 2019-09-18 at 10.21.33 AM.jpeg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 08 Dec 2022 20:35:34 GMT
server: fife
content-length: 46861
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
images.dmca.com/Badges/dmca-badge-w100-5x1-10.png?ID=9b7119a7-6bc8-4389-900e-8e3e26510092
200 OK 3.0 kB URL HTTP/1.1 images.dmca.com/Badges/dmca-badge-w100-5x1-10.png?ID=9b7119a7-6bc8-4389-900e-8e3e26510092
IP
File type PNG image data, 100 x 20, 8-bit/color RGBA, interlaced\012- data
Hash a15849c96a73a524a7d0883a4e16a7b4
2745a3a9b678e8979263c543f20742a6cadcf10c
97f75f03e5ad7ff6161e3aa7da8c0febaeb3a9e0ec21fecfb6895abf5d4ad6e1
GET /Badges/dmca-badge-w100-5x1-10.png?ID=9b7119a7-6bc8-4389-900e-8e3e26510092 HTTP/1.1
Host: images.dmca.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: image/png
Last-Modified: Mon, 25 Jul 2016 19:39:16 GMT
Accept-Ranges: bytes
Server: Microsoft-IIS/10.0
Cache-Control: public,max-age=31536000
ETag: "734a63aace6d11:0"
X-Powered-By: ASP.NET
X-HW: 1670531734.cds249.sk1.h2,1670531734.cds238.sk1.c
Link: <http://www.dmca.com/Badges/dmca-badge-w100-5x1-10.png>; rel="canonical"
Access-Control-Allow-Origin: *
Connection: keep-alive
Content-Length: 3048
1.bp.blogspot.com/-ReX8Fx2MrOk/Ud1ZFBIvvSI/AAAAAAAABuI/hX1cGTGVWZ0/s1600/facebook.png
200 OK 9.1 kB URL HTTP/1.1 1.bp.blogspot.com/-ReX8Fx2MrOk/Ud1ZFBIvvSI/AAAAAAAABuI/hX1cGTGVWZ0/s1600/facebook.png
IP
File type PNG image data, 394 x 394, 8-bit/color RGB, non-interlaced\012- data
Hash e2f7ea01ef4986503497e010530e266d
b0be07fe409785a519ebdd75d495bb626e90db89
86a4d584b14d711bf41f7f6116dc14cdebcb183f788f64e9a1bac0eee8f30bfa
GET /-ReX8Fx2MrOk/Ud1ZFBIvvSI/AAAAAAAABuI/hX1cGTGVWZ0/s1600/facebook.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="facebook.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9131
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 20:35:34 GMT
Expires: Tue, 06 Dec 2022 22:01:26 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v6e4"
Content-Type: image/png
Age: 0
cdn.lightwidget.com/widgets/lightwidget.js
200 OK 1.7 kB URL HTTP/2 cdn.lightwidget.com/widgets/lightwidget.js
IP
File type ASCII text, with very long lines (769), with no line terminators
Hash 941a292918f82deb9f5f6a3698507baa
9cc5e4be5612b641f90d726e6b18fc5d6f679ea6
ddb5287c6144e200c8231562f59c5554bad1e6f5d20cd8f07085eaae0fabf524
GET /widgets/lightwidget.js HTTP/1.1
Host: cdn.lightwidget.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.immjatim.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:33 GMT
content-type: application/javascript
cf-bgj: minify
access-control-allow-origin: *
etag: W/"6377850d-301"
last-modified: Fri, 18 Nov 2022 13:13:49 GMT
vary: Accept-Encoding, Accept-Encoding
cache-control: max-age=1382400
cf-cache-status: HIT
age: 2469
server: cloudflare
cf-ray: 776849c8b9bfb4ed-OSL
content-encoding: br
X-Firefox-Spdy: h2
3.bp.blogspot.com/-275B3vcbcGc/XW5BaSGt7vI/AAAAAAAABms/O6hBbakZ_t4ydG1CWWZ6OynDT7ZSNNKywCK4BGAYYCw/s1600/WhatsApp%2BImage%2B2019-08-03%2Bat%2B00.49.43.jpeg
200 OK 78 kB URL HTTP/1.1 3.bp.blogspot.com/-275B3vcbcGc/XW5BaSGt7vI/AAAAAAAABms/O6hBbakZ_t4ydG1CWWZ6OynDT7ZSNNKywCK4BGAYYCw/s1600/WhatsApp%2BImage%2B2019-08-03%2Bat%2B00.49.43.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=3, software=Google], baseline, precision 8, 1280x905, components 3\012- data
Hash c4945dba1646f5df0b1f817bb08c84c1
748f15b315ec5b86490e0c3b0d7695b861256a7f
182dcf6f99d08cd3ebbff64f320f4c10303c18b84990d308b35defe91a22f777
GET /-275B3vcbcGc/XW5BaSGt7vI/AAAAAAAABms/O6hBbakZ_t4ydG1CWWZ6OynDT7ZSNNKywCK4BGAYYCw/s1600/WhatsApp%2BImage%2B2019-08-03%2Bat%2B00.49.43.jpeg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v66c"
Expires: Fri, 09 Dec 2022 20:35:34 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="WhatsApp Image 2019-08-03 at 00.49.43.jpeg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Dec 2022 20:35:34 GMT
Server: fife
Content-Length: 77577
X-XSS-Protection: 0
3.bp.blogspot.com/-9gpsltkgVP0/Ud1ZFcm_cyI/AAAAAAAABuM/0u5oe5uRmuQ/s1600/google.png
200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-9gpsltkgVP0/Ud1ZFcm_cyI/AAAAAAAABuM/0u5oe5uRmuQ/s1600/google.png
IP
File type PNG image data, 394 x 394, 8-bit/color RGB, non-interlaced\012- data
Hash 9a838395e70b647ad08b1a4ef7650b54
b827f50885daeed1a8456b0cf9491d324fa2cb05
f83eb6ab3a64062e1322d4cd2ac6fdf7f75a4ba0b5274b002d6bf1daf003c2ea
GET /-9gpsltkgVP0/Ud1ZFcm_cyI/AAAAAAAABuM/0u5oe5uRmuQ/s1600/google.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6e5"
Expires: Fri, 09 Dec 2022 20:35:34 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="google.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 08 Dec 2022 20:35:34 GMT
Server: fife
Content-Length: 12440
X-XSS-Protection: 0
themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff
200 OK 21 kB URL HTTP/1.1 themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff
IP
File type Web Open Font Format, TrueType, length 21132, version 1.1\012- data
Hash e5d1ccfbe43c8138e553093300603815
87deb174af2e2beebb9f09d618a5159ca299a3d0
00ceca786c807c91b19ff7b38bdccbe7f2a5404efbd910831122750c5d88b713
GET /static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 21132
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 03 Dec 2022 06:57:01 GMT
Expires: Sun, 03 Dec 2023 06:57:01 GMT
Cache-Control: public, max-age=31536000
Age: 481113
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff
200 OK 22 kB URL HTTP/1.1 themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff
IP
File type Web Open Font Format, TrueType, length 21520, version 1.1\012- data
Hash b2181049bee439ab4f6b8678c8812e38
b20b90ecd6fc597f161d2228f5779e76e090edf9
a057e0c74a6ffa4a289512d05beb6998e6be8b91be2d056568ebf0c317c11a6c
GET /static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 21520
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 16:09:22 GMT
Expires: Fri, 08 Dec 2023 16:09:22 GMT
Cache-Control: public, max-age=31536000
Age: 15972
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff
200 OK 20 kB URL HTTP/1.1 themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff
IP
File type Web Open Font Format, TrueType, length 19812, version 1.1\012- data
Hash c74ddf8e339408e3d7d8082b7e1f5125
e140a63f45f42c4a5f29ea4e2d83a2859c6f99c6
9947e1f452a6580f1089ab62e3b140c96dd7ba65585b7b568c07c6d6947ffb06
GET /static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 19812
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 22:44:14 GMT
Expires: Wed, 06 Dec 2023 22:44:14 GMT
Cache-Control: public, max-age=31536000
Age: 165080
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
200 OK 57 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0
IP
File type Web Open Font Format (Version 2), TrueType, length 56780, version 4.197\012- data
Hash 97493d3f11c0a3bd5cbd959f5d19b699
1075231650f579955905bb2f6527148a8e2b4b16
aadc3580d2b64ff5a7e6f1425587db4e8b033efcbf8f5c332ca52a5ed580c87c
GET /font-awesome/4.3.0/fonts/fontawesome-webfont.woff2?v=4.3.0 HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: https://maxcdn.bootstrapcdn.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:34 GMT
content-type: font/woff2
content-length: 56780
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
access-control-allow-origin: *
cache-control: public, max-age=31919000
etag: "97493d3f11c0a3bd5cbd959f5d19b699"
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 08/18/2022 19:50:49
cdn-proxyver: 1.02
cdn-requestpullcode: 200
cdn-requestpullsuccess: True
cdn-edgestorageid: 722
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
cdn-status: 200
cdn-requestid: 7c64083e8bfd8ff527be40fe0d41e74b
cdn-cache: HIT
cf-cache-status: HIT
accept-ranges: bytes
vary: Accept-Encoding
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776849ca8cb7b527-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
lightwidget.com/widgets/1dfbc9e914df53df8c3788844217388d.html
200 OK 10 kB URL HTTP/1.1 lightwidget.com/widgets/1dfbc9e914df53df8c3788844217388d.html
IP
ASN #24940 Hetzner Online GmbH
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (19962), with CRLF, LF line terminators
Hash 4e5c728c7bac001bdac2324614cbb0c1
49f279f39b51d8b375c1be84e1aa07f9e26efd2a
eebd0e08b8251e94d868507c989b08fc303004069689841fcc21242f74db4740
GET /widgets/1dfbc9e914df53df8c3788844217388d.html HTTP/1.1
Host: lightwidget.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: text/html
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Fri, 06 May 2022 10:56:04 GMT
Vary: Accept-Encoding, Accept-Encoding
ETag: W/"6274fec4-beff"
X-Cache-Status: MISS
Content-Encoding: gzip
themes.googleusercontent.com/static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff
200 OK 22 kB URL HTTP/1.1 themes.googleusercontent.com/static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff
IP
File type Web Open Font Format, TrueType, length 22396, version 1.1\012- data
Hash 9f8f938d71883bbcdd8793738be4dcf4
64288a802bb63a55b41d554b0f69408d5462a4ef
f7e5e6ef07e157a8eaeceed7fe39eb53ac71e9a63b67b27ed2bb818877e983e0
GET /static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1
Host: themes.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Timing-Allow-Origin: *
Content-Length: 22396
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Tue, 06 Dec 2022 13:29:02 GMT
Expires: Wed, 06 Dec 2023 13:29:02 GMT
Cache-Control: public, max-age=31536000
Age: 198392
Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
Content-Type: font/woff
maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
200 OK 5.4 kB URL HTTP/2 maxcdn.bootstrapcdn.com/font-awesome/4.3.0/css/font-awesome.min.css
IP
File type ASCII text, with very long lines (23577)
Hash e41a7a310fa27452a5d7238e15efa8e8
44784cd38e0b85aa491a5881af4f6a3aacf2e36d
6bd9ad605e35a0de728c1a73e9ae5daba1439f24d2953fc3b682ec0b0cc85efe
GET /font-awesome/4.3.0/css/font-awesome.min.css HTTP/1.1
Host: maxcdn.bootstrapcdn.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:33 GMT
content-type: text/css; charset=utf-8
vary: Accept-Encoding
cdn-pullzone: 252412
cdn-uid: b1941f61-b576-4f40-80de-5677acb38f74
cdn-requestcountrycode: DE
cdn-edgestorageid: 632, 617, 617
last-modified: Mon, 25 Jan 2021 22:04:54 GMT
cdn-cachedat: 2021-06-08 21:08:57
cdn-requestpullsuccess: True
cdn-requestpullcode: 200
cache-control: public, max-age=31919000
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
access-control-allow-origin: *
x-content-type-options: nosniff
cdn-requestid: e6a55b08fe5091f45c9e99ce9e9f98c2
cdn-status: 200
cdn-cache: HIT
cf-cache-status: HIT
age: 15973332
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776849c75e6ab51d-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Qg5bi1ZtDdM/VZ5nHAyYBqI/AAAAAAAAChE/exGnasO4oyk/s640/arlinadesign.gif
200 OK 43 B URL HTTP/1.1 1.bp.blogspot.com/-Qg5bi1ZtDdM/VZ5nHAyYBqI/AAAAAAAAChE/exGnasO4oyk/s640/arlinadesign.gif
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 5c7a6ccdfb0884d7a1fc2623fcb7cf57
2d616485a6d324c4b72132fa3f0408f15bc4eb8c
133e13c382aab95cbd5c7c1ec3c13ffebf59fa7f616ffa4e8714013d224e6178
GET /-Qg5bi1ZtDdM/VZ5nHAyYBqI/AAAAAAAAChE/exGnasO4oyk/s640/arlinadesign.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="arlinadesign.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 43
X-XSS-Protection: 0
Date: Thu, 08 Dec 2022 17:20:05 GMT
Expires: Tue, 08 Mar 2022 09:11:49 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 11729
ETag: "va12"
Content-Type: image/gif
www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389
302 Moved Temporarily 320 B URL HTTP/1.1 www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (412)
Hash c1ed47d5e9d799aa51d358a0e5dda72e
b5bfd8696d8a128dcd837646267c329470e7cc25
8ed6f44ee34b23f9da3566c8d065996d5688873d73f1247aa67db4a214f08940
GET /comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&go=true
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 20:35:34 GMT
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 320
Server: GSE
jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
302 Found 0 B URL HTTP/1.1 jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1 HTTP/1.1
Host: jqueryapi.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Thu, 08 Dec 2022 20:35:34 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0340860000&uuid=1670531734.0340860000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1p3NcE:3JoRhl3H7n0ykQiGypy4oZTLVLI; expires=Thu, 08-Dec-2022 21:35:34 GMT; Max-Age=3600; Path=/
connection: close
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b8d79685682ab0684ebcd9873dc9f1ad
de00fe0fd4b99a98433a0161801244047115d456
42212f48d6d7f7e7fb0a771330dca03001c513a90364a2e5a0b69813ad0bbecf
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
static.addtoany.com/menu/eso.9b4ec89f.js
301 Moved Permanently 0 B URL HTTP/1.1 static.addtoany.com/menu/eso.9b4ec89f.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /menu/eso.9b4ec89f.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 301 Moved Permanently
Date: Thu, 08 Dec 2022 20:35:34 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Thu, 08 Dec 2022 21:35:34 GMT
Location: https://static.addtoany.com/menu/eso.9b4ec89f.js
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Server: cloudflare
CF-RAY: 776849cbdc060b06-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&go=true
302 Found 255 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&go=true
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash cd6d48a36fb790aa593aba43231924e9
87822595576e750b9ebac41479e53baf6a2618c0
12c4a5a0a0d18456c1840a33b4d1b8ba6356402b8747d5e269730d872d790bf9
GET /ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D8447020570309510568%26postID%3D5471247727143020147%26blogspotRpcToken%3D743389%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.immjatim.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 08 Dec 2022 20:35:34 GMT
location: http://www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-Lbdy5NMoMRJfRXp-ykN5Eg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 255
server: GSE
set-cookie: __Host-GAPS=1:4YU_UWSQ3Wl04PfixIYWzQkWFAWKHw:whA6ZGb53e7uJVfa;Path=/;Expires=Sat, 07-Dec-2024 20:35:34 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.immjatim.org/feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex
200 OK 1.2 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex
IP
File type ASCII text, with very long lines (2593)
Hash 1ec78644af8864be9c9b3c57fb66c417
a5584730db4db5de5faf3553571285e82a93c108
400f5e362f63964bc933e5ae398f9bee15109186bbaa12b874ea518e241262a7
GET /feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"c9b6f35d8a5684255453dc18b81d2c1a96cf29f68daf14d68ababd610cebfcb3"
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 1175
X-Frame-Options: SAMEORIGIN
ocsp.digicert.com/
200 OK 471 B IP
Hash 267e98f41c4135d8e0570a6e10c0f878
d572a011c97aa6550db4c26805cecfaa412e7789
3d9dc89add1f57c169c31a3e1e4b86f240f0cd5b4d51a93c34d2f1143e6b9409
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2946
Cache-Control: max-age=148084
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Etag: "6391de88-1d7"
Expires: Sat, 10 Dec 2022 13:43:38 GMT
Last-Modified: Thu, 08 Dec 2022 12:54:32 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 267e98f41c4135d8e0570a6e10c0f878
d572a011c97aa6550db4c26805cecfaa412e7789
3d9dc89add1f57c169c31a3e1e4b86f240f0cd5b4d51a93c34d2f1143e6b9409
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4743
Cache-Control: max-age=149881
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Etag: "6391de88-1d7"
Expires: Sat, 10 Dec 2022 14:13:35 GMT
Last-Modified: Thu, 08 Dec 2022 12:54:32 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
200 OK 471 B IP
Hash 267e98f41c4135d8e0570a6e10c0f878
d572a011c97aa6550db4c26805cecfaa412e7789
3d9dc89add1f57c169c31a3e1e4b86f240f0cd5b4d51a93c34d2f1143e6b9409
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 2946
Cache-Control: max-age=148084
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Etag: "6391de88-1d7"
Expires: Sat, 10 Dec 2022 13:43:38 GMT
Last-Modified: Thu, 08 Dec 2022 12:54:32 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
scontent.cdninstagram.com/vp/6ba642703a6fa6ea74fb182b858f9a22/5B835500/t51.2885-15/s320x320/e35/30590783_213785156061726_4963706816522354688_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/6ba642703a6fa6ea74fb182b858f9a22/5B835500/t51.2885-15/s320x320/e35/30590783_213785156061726_4963706816522354688_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/6ba642703a6fa6ea74fb182b858f9a22/5B835500/t51.2885-15/s320x320/e35/30590783_213785156061726_4963706816522354688_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcJRcmPo0Z9ZxoyN-ORKBq4VfSD1QMgHidnnIDHfEW5iHZt37xLvy_zSNqgdSSO_CKmsZA5kfaBze2Q"; e_fb_vipaddr="AcI-x1TuKE21iPsMs4AMvNTes_kGHUwvdzNMS32d04QpSnv0yUm3GJtPGha8ZMPWoveq2TCM-U4"; e_fb_builduser="AcJBL81Uls4Bzc8GRXqGoVWe_ksycYJBKJb7GHlu5vEdjeIkkCOwCurtNYiIxzt1e8I"; e_fb_binaryversion="AcI77KHKbBP7PCJmoGksECnGOOTN1wwyyXsypTnLw7A93Hj2DQXwTQk1NEIWQQ7_Yh2s63EIlUpBBkFK_4tIR6m507rqQCgo1ZU"; e_proxy="AcJXfNxmPqXXJvfaLMmhjOLDfQXgv2UD7PP4I9qeFUlVVv3fH6e3lrQc2uY3ehxR3qkQGjj8fv279fY"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/7b8468fd6ca3975b81c768fa38fac624/5AE8A129/t51.2885-15/s320x320/e35/28752868_407248913057722_7917336507218657280_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/7b8468fd6ca3975b81c768fa38fac624/5AE8A129/t51.2885-15/s320x320/e35/28752868_407248913057722_7917336507218657280_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/7b8468fd6ca3975b81c768fa38fac624/5AE8A129/t51.2885-15/s320x320/e35/28752868_407248913057722_7917336507218657280_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcLjIP8PM9rBoDSGF586YWJfSpSiKGtnztGRzGfW74ujXEILzB8rqh48iNZOa-ER994kYtrwKQthe1w"; e_fb_vipaddr="AcIErqkcC6WOQC08HScmJdzyzOTe5KmwzHmyv9x5iBrIvJEubxQSOv2nqrkrXaD3tENCVhpUaj4"; e_fb_builduser="AcLr6jHWmLtAlBFDYISAQjQOzmVaAFVzUzPjhUMd3MD_VKRDgxaHKxRBsPLMtadrbBc"; e_fb_binaryversion="AcIM2lBX4yJOoXuaMA8qBL5g5NGWI2LAFpp_mGhYaJPPTVjZynw-R2-F4E9OWuW5GmIWp-STo_oA4Rs6DEUmZmXXu2oS82HzJnI"; e_proxy="AcInIimLNH6-YXtNrCQbLyDtyylCypdsxkK31MSOqcVW3-AA6IImxjvjE86p_9jDDbqpkBY5rpatlEo"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/6b38257a5f0a0c94f8e7354344b63ea4/5B66B886/t51.2885-15/s320x320/e35/29089577_1847584268593397_8441311633883529216_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/6b38257a5f0a0c94f8e7354344b63ea4/5B66B886/t51.2885-15/s320x320/e35/29089577_1847584268593397_8441311633883529216_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/6b38257a5f0a0c94f8e7354344b63ea4/5B66B886/t51.2885-15/s320x320/e35/29089577_1847584268593397_8441311633883529216_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcIf7AZcwkydXiswo_tpkfUavpoOvZ08QP0w_9jv5etuaYdkve8klvmkuvWo6t5qDrK1FbUxGQpdK2k"; e_fb_vipaddr="AcLqYIpxznaJ7o1stheF31K5xSGTrcLHnOD2FrAP-Q19WdTGCMruyBJtvWycE0TnP9QE5ywcwno"; e_fb_builduser="AcIaoQ7dDCTICoNo-VZ9WOnx9djiLqmkGvMV4J2cgBHku3StmIebwO8i-s2j7-9NB4I"; e_fb_binaryversion="AcL6QjKldQtEe8Kzkcmbmoh1ax-WBBep6cuirHbBJzanMO-F9mCP8YKfdQq2vTHGH3VwpkZaWd60HB2ggwTqUPfQWqd38QZlkyQ"; e_proxy="AcIqFrjBqDhNpVQrUvqbqxGIPvKE89kNKSzVCqoD9WAawUwfiQKS5Oj-qGbbuKXGyoblI8LnjrjaRRE"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/c415f8b85f2b9deb390dd434cee57a63/5B7EA583/t51.2885-15/s320x320/e35/28434330_1619347148144560_2697018872367677440_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/c415f8b85f2b9deb390dd434cee57a63/5B7EA583/t51.2885-15/s320x320/e35/28434330_1619347148144560_2697018872367677440_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/c415f8b85f2b9deb390dd434cee57a63/5B7EA583/t51.2885-15/s320x320/e35/28434330_1619347148144560_2697018872367677440_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcK5_6El6qi-e87I1VHRfaft9x5IbRamRJXNl9yoCwcrpqOh5d_FQXzKtxkp-ckTbN_Aa4OKcqfxE48"; e_fb_vipaddr="AcKKzshdTrDCyTuFO6py_Oi9TK0DfLleaZwV6kZcxwmS_g8MLwH53X4BpT2E7Q6C_LJk9QbUKeo"; e_fb_builduser="AcKZeKvdCpMzh1mK9FVYtNc0pDCq9hQYDnSrgCxH3RV2HXsaQMNHGJUliDgPVUTfDDk"; e_fb_binaryversion="AcJG-lX8kzDUxZDqcbWMlF7vUQdUSjnqipXqoURtqBN2O5q2YZvpZ_DF6Tjulj2_v4Icl49NHVNYSfIBjUuqYfR_WM4tCOlmHp0"; e_proxy="AcL-KDWg2BLSN8sOPAXbI7rU42VSYoIw8xIR7nyD6B8B65XKOL-qcb0W62_QRCpJMKCmfwH07gv7kqs"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a938af990a97b9856e1174d11c72cbf7
b57716fd0ea9a1e9e0a0595ff593f939560c0abf
6ab769333b231097d077edfbc1c3fc9560de5ae9bfeb5b8360dea8b7fadbcb44
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
scontent.cdninstagram.com/vp/ed11b9138760fae94d70ebf13b24614a/5B7B32B0/t51.2885-15/s320x320/e35/28435063_1310040335762700_2159909430768959488_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/ed11b9138760fae94d70ebf13b24614a/5B7B32B0/t51.2885-15/s320x320/e35/28435063_1310040335762700_2159909430768959488_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/ed11b9138760fae94d70ebf13b24614a/5B7B32B0/t51.2885-15/s320x320/e35/28435063_1310040335762700_2159909430768959488_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcLBtn7KxfUGNGEZp3IMfaVVyc1LOJFC7eyqt7J2ZGu8aPEJAKQShBpmIRZW91yyyIFGoX0AARBK_ME"; e_fb_vipaddr="AcLu-fjZtBPJ5gB3rOodvVLKnYEYzRhURb1c5NqaocYmC28DXhB_hN2B59on2bGq1qpHJS80a9I"; e_fb_builduser="AcJ3robXWol5MnbnMnwLbdbyMOx4UAYYdyXB28TOUHEezGc7hjWRbUe9cgQ4GPEGv0A"; e_fb_binaryversion="AcIbhEKJ3tUlOG8n_Aa9DL5BehRfpGH3qysMoE-6sMtWzHR72r0PpdeKEFkjiDbg0_rRVbaaVXTFAN4QTtzetnB06m3u1WahWhk"; e_proxy="AcLddipv6pycd07iZ9o_kpZLqt5HD46sElNp4jyaauQRgujhExcd-_a0dlh9pYq4D6NaQazxFNcSxFM"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/dcdf30e9d0d640e7db3c8df20703f854/5AE8F21B/t51.2885-15/s320x320/e35/29094080_1093477974128742_631056632813453312_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/dcdf30e9d0d640e7db3c8df20703f854/5AE8F21B/t51.2885-15/s320x320/e35/29094080_1093477974128742_631056632813453312_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/dcdf30e9d0d640e7db3c8df20703f854/5AE8F21B/t51.2885-15/s320x320/e35/29094080_1093477974128742_631056632813453312_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcJxkVkHATqN_q2260UPEonHnHEj9fX2bTkRcwgrJNrf3A3vKodU5Cpy-6lKyoIdjNMwAlNwjUourd8"; e_fb_vipaddr="AcLaT6eIrlrqRRi_vWhY_knfC6Ih25tAdTkw2vY-u4PWy1e5f7OTZFNq2wzxxIlLOBjunOol0QU"; e_fb_builduser="AcJkwOmG_cjUh6L6tF5ZuDbj7zYxyic5yuPls56GtrQbbkmhZOk5xUXLNVTOvC6MH6g"; e_fb_binaryversion="AcIXABR1mkkjVfjtaaMhawvaD1lHEsx0iecwySTi31UU7fONoBegWfmhMNQfg5pPuFouQmCoi27uufzmzrg83aSWyMSQnw8E9_M"; e_proxy="AcJNQiRA4QcbSIhPJfnzWSLSnfr_Ronsxcv1dqL0-lSrxwsgoMnjZK7MZ5avkT_aQl-4WvITtXuCvFc"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/24029a5e76a0bcba69ec1a50c1803f59/5B9A6BB3/t51.2885-15/s320x320/e35/29095413_423696671416301_6202255065474924544_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/24029a5e76a0bcba69ec1a50c1803f59/5B9A6BB3/t51.2885-15/s320x320/e35/29095413_423696671416301_6202255065474924544_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/24029a5e76a0bcba69ec1a50c1803f59/5B9A6BB3/t51.2885-15/s320x320/e35/29095413_423696671416301_6202255065474924544_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcLkIF-TUKiB5yuQEjVjyapsxd7IoBVALqG4Kcd1v2OooqCSfbSNFoi86ajJ3Mqp_WO-f9Yf2HFmdhU"; e_fb_vipaddr="AcIdFASiJPNLVD7SKIgoP8nuTGH5JnpsxjOdUAlZ6B52NvdWYboRawxQSFGyCCLwYcgM0nELcvk"; e_fb_builduser="AcLRHmaJwl4n81zSOFVdWImiRF3dxEwp2V4lQF-jZoqyJodlpkF7aNZyvapAB4L3ABg"; e_fb_binaryversion="AcIHlfbYLL1K_MOnj-3Bl4EcxbPuLtEl2tOpBDunCoQbGZvJCKNh4ydEx05XUE8bQBR7I_1HbUm9NhfiLlJG14taik5o_46tN14"; e_proxy="AcIy0FvJtUiLuKa4589uDCqyK6ZK9VgxukLamXPNbBwZm0b0nAb1G3jJTD05se1idgl_UtA0HR_cA1Y"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/f7f3a2376c03acfb1e4af6b92f076c1a/5B802D98/t51.2885-15/s320x320/e35/29717964_144626593039413_1823209051601764352_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/f7f3a2376c03acfb1e4af6b92f076c1a/5B802D98/t51.2885-15/s320x320/e35/29717964_144626593039413_1823209051601764352_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/f7f3a2376c03acfb1e4af6b92f076c1a/5B802D98/t51.2885-15/s320x320/e35/29717964_144626593039413_1823209051601764352_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcKMpEtFHX12Gj7PDUe7lIYbKElaB4SVNDi_mKOvuaKxNILSOtTxWFpZbosLwwzTg9hNuSxYNn1uiJ0"; e_fb_vipaddr="AcKBk9LWbX7yJbmRQOpgc4H1L-MLBKuwmmkSVUe25i63FNe4ABwjeGId8U53NuWr1sFH44JgTYo"; e_fb_builduser="AcIDNPLZ6j0189Qap6m6NsrQPHVKZizG4nDTbSVJgi8hfmLTO2YxSJNS-W61SetHnNg"; e_fb_binaryversion="AcLRtSlEBy0c7ADjJhytuYLwZYzijoc97hb6LvHsxWIPet_gRunlVkSJd_2QkQz4minbIGvuWBGX-4XFcTw8or4pFGA5We1Isvg"; e_proxy="AcI_kglFhlBeH7Rr1TMpxYY2BG8fchwHYxACZkBZWO6LSD-Rfg3KPeWH5rsXy6ri7PCiRN91ooz7dOE"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/71b91286e353d38c07ad006be1610de5/5B78CDDC/t51.2885-15/s320x320/e35/29089309_440767063037213_6288012385416380416_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/71b91286e353d38c07ad006be1610de5/5B78CDDC/t51.2885-15/s320x320/e35/29089309_440767063037213_6288012385416380416_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/71b91286e353d38c07ad006be1610de5/5B78CDDC/t51.2885-15/s320x320/e35/29089309_440767063037213_6288012385416380416_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcKnTdXoH_UmwtldHa5mZgnwX1DLkz1o3sL3YeWrzG8YIAf9RnRXi6wryYHZ61Xkm4oqMzbFN8_DpMw"; e_fb_vipaddr="AcIoVoqQi_Vko7GgYbW71rXtPvPADvEpsvKqbkZMbdW8ADSDFgEd1s2-9X5OUKTHLRg9FvJBcAw"; e_fb_builduser="AcJdnoC1T8amF-oXKg9kqr3Nmv8RoKO0Hu6HBXAzASmuBXifIOzEqOBqpnEEqZkGPO4"; e_fb_binaryversion="AcJrO1pTtZu-zavupjWP2pxkSKWdhi6T2U6PsJTQnaidJm2rDOaRKyg1Rc-bE0Xm1Khka2Z6CX_R0Za-DIKrwhIS7kocaM9SFd4"; e_proxy="AcLgcPlNy5_FbiAdXIAO7SWupw8K5e8rS_fom1mpdrUE5_bGe_sPzrsO0dwxG7mIbdzAjY03LHl-Ndw"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
scontent.cdninstagram.com/vp/38383a7197d09021a120192f677ba568/5B8F5DE8/t51.2885-15/s320x320/e35/29717340_1987338728251098_638287382054961152_n.jpg
403 Forbidden 12 B URL HTTP/2 scontent.cdninstagram.com/vp/38383a7197d09021a120192f677ba568/5B8F5DE8/t51.2885-15/s320x320/e35/29717340_1987338728251098_638287382054961152_n.jpg
IP
File type ASCII text, with no line terminators
Hash 6da8b20dcba14383da78ef717bca965d
47e2253187a5c7c570e7c0092434ac21e980b4d2
3540a6f3c2b8f6c49b9f3dffc6e16629bf74203531524fdac1d80dc38e62f2b5
GET /vp/38383a7197d09021a120192f677ba568/5B8F5DE8/t51.2885-15/s320x320/e35/29717340_1987338728251098_638287382054961152_n.jpg HTTP/1.1
Host: scontent.cdninstagram.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://lightwidget.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 403 Forbidden
proxy-status: http_request_error; e_clientaddr="AcJaFIYbXB9rnd0TFyYFVimNKaZRD3TV0XgaATu0MLsF6ti2KbJkPtY9_fzsbOrR7rBTa2--eOGJpAA"; e_fb_vipaddr="AcKIhAGgb3iGVFXPoi9WmgbS-Pb3cOzZdKvsAzuNXj2dF4QRXXzGpzBqDAstIVJDl4RiQQghZUY"; e_fb_builduser="AcKXFbcsK8DX3TNrUizM0lQ3XgrOh48UdAeLTrWPlQ57CGQa8l6kYugOPG_5WDUBqkU"; e_fb_binaryversion="AcIdDXcfebHjaAUCS9s5n8xEjnF_lXSemJWQZ-6u2yF08wnu_mDArj50AZ4n8Szz2jB0fEIOIycG_7VrgNrq75bhnO9yYtCaILA"; e_proxy="AcJMtl2Gvw-XCTxqouKh2yPPZM9O9HCjYE-ThDIpjVSuhH9MSQSIemZLsiYM1xwWa3x15F5jReApt48"
content-type: text/plain
content-length: 12
server: proxygen-bolt
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:34 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 267e98f41c4135d8e0570a6e10c0f878
d572a011c97aa6550db4c26805cecfaa412e7789
3d9dc89add1f57c169c31a3e1e4b86f240f0cd5b4d51a93c34d2f1143e6b9409
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4743
Cache-Control: max-age=149881
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:34 GMT
Etag: "6391de88-1d7"
Expires: Sat, 10 Dec 2022 14:13:35 GMT
Last-Modified: Thu, 08 Dec 2022 12:54:32 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
302 Found 0 B URL HTTP/1.1 jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1 HTTP/1.1
Host: jqueryapi.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Thu, 08 Dec 2022 20:35:34 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0290920000&uuid=1670531734.0290920000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1p3NcE:kLXcgnW1nLojVE1eYoBNNHHx7Rw; expires=Thu, 08-Dec-2022 21:35:34 GMT; Max-Age=3600; Path=/
connection: close
www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0340860000&uuid=1670531734.0340860000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
200 OK 2.6 kB URL HTTP/1.1 www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0340860000&uuid=1670531734.0340860000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /?template=ARROW_3&tdfs=1&s_token=1670531734.0340860000&uuid=1670531734.0340860000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0 HTTP/1.1
Host: www6.jqueryapi.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.immjatim.org/
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:21 GMT
ETag: "638fbef9-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_k3raQaUtLl4fyoRapGqlpI2un4PmrqXAHfskmZa32Nq8NZkSUTYKqb3cQNbbTOdFoUHvWsjKCFgE7f9KK/Pu8w
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
www.immjatim.org/feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&start-index=11&max-results=5&callback=showRelatedPost
200 OK 3.5 kB URL HTTP/1.1 www.immjatim.org/feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&start-index=11&max-results=5&callback=showRelatedPost
IP
File type Unicode text, UTF-8 text, with very long lines (15758)
Hash 8d42034b856b44733a82e01c1e17fdbd
6fdeecac01b84451ace9f1f9664b60f16f3677ee
ea913535a23374fe68e7715bb78a6d8832cb337708fba3e12a43b4dc4d87e301
GET /feeds/posts/summary/-/Agenda%20Cabang?alt=json-in-script&orderby=updated&start-index=11&max-results=5&callback=showRelatedPost HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"83297d5b29d0f17f3ff30528cd612eaadc3f4fa0e3259a9ec364506e3833920c"
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
Content-Encoding: gzip
Content-Length: 3544
X-Frame-Options: SAMEORIGIN
www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389&bpli=1
302 Moved Temporarily 256 B URL HTTP/1.1 www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389&bpli=1
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash 334b7f07ec6f2d4a03cefab0c7491986
83654d86ffff7ab3209048f37708521f31338077
10b7ca591f63033629c981f131ad66b1001ead7aad6aac05984a74771a092168
GET /comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389&bpli=1 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.immjatim.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Moved Temporarily
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Location: https://www.blogger.com/comment-iframe.g?blogID=8447020570309510568&postID=5471247727143020147&blogspotRpcToken=743389&bpli=1
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Thu, 08 Dec 2022 20:35:34 GMT
Expires: Thu, 08 Dec 2022 20:35:34 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 256
Server: GSE
dpdimmjatim.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery18302865461541776806_1670531733030&_=1670531733551
404 Not Found 3.2 kB URL HTTP/1.1 dpdimmjatim.blogspot.com/feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery18302865461541776806_1670531733030&_=1670531733551
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (528)
Hash 50df144e9e626e1cec33647880c04208
508004c92016587f547c00b07e08625ccb3ddc47
724fb6e2dc8cec392f59c9d6c988bf3c86e3c19938b3a56ebdd5b80cb0643eea
GET /feeds/posts/default?alt=json-in-script&max-results=5&callback=jQuery18302865461541776806_1670531733030&_=1670531733551 HTTP/1.1
Host: dpdimmjatim.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Content-Type: text/html; charset=UTF-8
Date: Thu, 08 Dec 2022 20:35:34 GMT
Server: Blogger Render Server 1.0
Content-Length: 3185
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 471 B IP
Hash b5cba4e1962a1fe17c9021f3e418975a
01293d7e4084011451f7d17936ab2427504cdb1a
ecfe30d3abc32ca9f933303d75b2055642d3c7c8197af08fe2c314394699594b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/js/bg/api979c0EJY6QQNrS8TSWwgKrshdt-vRMqEtOqF-hYY.js
200 OK 14 kB URL HTTP/2 www.google.com/js/bg/api979c0EJY6QQNrS8TSWwgKrshdt-vRMqEtOqF-hYY.js
IP
File type ASCII text, with very long lines (36091)
Hash a0a4351158b7cd0bc70499d43c495d61
73681a401ea8229c09a47bcd6e62e06dbc679a91
d8f027da21d790aa88f03b18eaf6638a306e3e13ccee82168ae367492a514a59
GET /js/bg/api979c0EJY6QQNrS8TSWwgKrshdt-vRMqEtOqF-hYY.js HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: br
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="botguard-scs"
report-to: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
content-length: 14286
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Fri, 02 Dec 2022 23:39:32 GMT
expires: Sat, 02 Dec 2023 23:39:32 GMT
cache-control: public, max-age=31536000
age: 507363
last-modified: Thu, 03 Nov 2022 10:00:00 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15684
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 20:35:35 GMT
Connection: keep-alive
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15684
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 20:35:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
200 OK 7.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c94003641bb5a7595e7004f80f95d22
3446450df60d732f9021d5bfd5f5f7c6c870d9ec
4d782dbf94b2163e9bc18028cd0c1a391fdcfcb019f23c4c26ea0b44432039ff
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4119e239-0c3b-4175-bfe0-f5d42729d743.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7801
x-amzn-requestid: cb8d5aab-409f-4b39-b498-b1ba84f34e06
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFRNHX4oAMFvoQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c07-7c6e3bfa3f81082b48f43fa9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:39 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 8QHhEAFHTHd-5UqS1S5qwJj_h4WNfix2CgS4MO4zR_psrzgMP3SZ5g==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 57a21088b36c69a83578b5a5579df58e.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:16:35 GMT
age: 76740
etag: "3446450df60d732f9021d5bfd5f5f7c6c870d9ec"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
200 OK 503 B IP
ASN #20940 Akamai International B.V.
Hash 7b8c1870f03a90aac6370fc69516f95f
1e94fd7c9a2f9fe4867e21ab217879a2180a9cdb
f43702cd363447680d545d928f9ea6f997a770228108b4c9312999b76891bb38
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F43702CD363447680D545D928F9EA6F997A770228108B4C9312999B76891BB38"
Last-Modified: Wed, 07 Dec 2022 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15684
Expires: Fri, 09 Dec 2022 00:56:59 GMT
Date: Thu, 08 Dec 2022 20:35:35 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
200 OK 7.3 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 24d89b69ba37bf23c5d576aff4063caf
3d46a21b4da571d7e4962e335c18a28ca5f81ecf
09b52cdab278805c6e7282f469a02768ee62fc9ef09a6623a337e3d3aaa446fd
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fbbba0eea-a6f1-4374-a9c7-dab84270023b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7268
x-amzn-requestid: ae5c231c-b1be-498a-a242-e8d641f3fe8e
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFDgEzUoAMFgyQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911baf-10f06dc37cac69631c823fd9;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:03:11 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: QSv756DvAzOQnKae5wVg75wrQS6oDGPkfIZka86FNQ2vizBnZ7sIDQ==
via: 1.1 2afae0d44e2540f472c0635ab62c232a.cloudfront.net (CloudFront), 1.1 d6a002c70d55f415107618b0750d493c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:12:45 GMT
age: 76970
etag: "3d46a21b4da571d7e4962e335c18a28ca5f81ecf"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57be99ac898a37d73f2ba4a24f56248f
04e32eb45581201a6a1863200e4d139df48285e6
a20081b64fc019372843360b15aa3461ec9dd3deb50ab398bca0a5e74d5468c2
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa9301ee5-df75-4967-a2c7-597f869e557b.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 12534
x-amzn-requestid: 2a01f2ba-cf3a-4f59-8339-214c66bcc0d2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czDbyGTcoAMF_TQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911918-5d3eba8d01e4175a71acc6cd;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 22:52:08 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: NoZlZ8WFfOuIbkWaC2pJPJQrWtjzz2gCHJWr-u-nMNYmu8MkTf6_PA==
via: 1.1 86b676273517904f44af31586adb06ae.cloudfront.net (CloudFront), 1.1 e66162aafd55b64ba1478ff7105150fa.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:03:58 GMT
age: 77497
etag: "04e32eb45581201a6a1863200e4d139df48285e6"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
200 OK 8.4 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 98d2cf29c710d25bd2f03ff216fdd369
b8eb2e11f9655f19334befc036f21489a6473827
614c9b4a7ace908c1ef807964709cb292b33b48ce1d81ccbd2959c2c0ee156ac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F079bc299-d390-4250-a91a-db3c535c9ca3.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8351
x-amzn-requestid: 607d07ab-6833-4001-82ed-699ea91f84c9
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cvlitFk9oAMFakQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638fb611-3e5f14f833b332647ef7358d;Sampled=0
x-amzn-remapped-date: Tue, 06 Dec 2022 21:37:21 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 0w5Usq-LJMNHxw9UrwUqSslSVROXVHTmY_UhSHNaGh4k4xqh-FSa0A==
via: 1.1 030fe0607711293dda988e571617a9f2.cloudfront.net (CloudFront), 1.1 e4d3d5aafc7d7d582423c073065ab562.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 14:20:11 GMT
age: 22524
etag: "b8eb2e11f9655f19334befc036f21489a6473827"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c408efaa98ac2ce63bb1618368d10c15
a51bbb49ebd862d04eaee465d0a35b22dcd21391
077eb8c8739f527828c71c25a1c3aaae46afead3aac093ec11a6d5488ef2f0ec
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F74e98e03-fa9f-4e56-a8ba-5411568d88c8.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9596
x-amzn-requestid: e5e6ceb2-5bad-4146-a9de-92a859716029
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cy3_qH63oAMFfLg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-639106ca-678bed1b7729b8aa2645688d;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 21:34:02 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: FsbiyZG0110CEANduIIWuLcxFOxfrV0YPvOSy-ScXFIX1qM6qaOdCg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 7eb3b782ab09047ce0d11ee03763894c.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 22:21:22 GMT
age: 80053
etag: "a51bbb49ebd862d04eaee465d0a35b22dcd21391"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
200 OK 8.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash b87d6543345f73653ed4a49b37d7c959
c4f26846b8b72293368ff16915d49297cf12bbb9
aee6aa42e4b5b83b81f74801ff8f0039fc6d38036f42ee81875813c856cf5eef
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9519925e-95b7-4e66-b317-84c1708c7f84.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8659
x-amzn-requestid: 6f420d07-65d5-4bb2-9f1f-e56025de497b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: czFSYFArIAMF46w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63911c0f-0a295e5c48228d5806b4f107;Sampled=0
x-amzn-remapped-date: Wed, 07 Dec 2022 23:04:47 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: TSh1BNzzIPhWCfYEiqvQJckSPAyhHobe-HK6msEVeEJ1ruX-_rMSSA==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 591683988172c7980c4ebb318cbf18a8.cloudfront.net (CloudFront), 1.1 google
date: Wed, 07 Dec 2022 23:33:19 GMT
age: 75736
etag: "c4f26846b8b72293368ff16915d49297cf12bbb9"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0290920000&uuid=1670531734.0290920000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
200 OK 4.7 kB URL HTTP/1.1 www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531734.0290920000&uuid=1670531734.0290920000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
IP
Hash 97898ef32112c912d2995034e54e54b4
c295263a4abcc7b12e22f55cf7a4ab62b1a6eefb
b1c4fd505499195af861b7db6ab5a7779bce43769b72ce134f316c8255393b4f
GET /?template=ARROW_3&tdfs=1&s_token=1670531734.0290920000&uuid=1670531734.0290920000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0 HTTP/1.1
Host: www6.jqueryapi.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.immjatim.org/
Connection: keep-alive
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 08 Dec 2022 20:35:34 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Tue, 06 Dec 2022 22:15:35 GMT
ETag: "638fbf07-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_X4IJfjN2uQUD5AwkRorzAV/mZd76uzHemXreDXfZA9LRxTCoG0zgZbNncL0SELYK3Ag51SJ/bNWx8i+q8hwK5w
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 770
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F707)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
platform.twitter.com/widgets.js
200 OK 29 kB URL HTTP/1.1 platform.twitter.com/widgets.js
IP
File type Unicode text, UTF-8 text, with very long lines (33915)
Hash 7899fffaf0046efb7f9be2495d9dc928
d4c60d88e8deea577a50f9d20e1b6b3a20cba2cf
07d50450f22df0588cc1b67f5a124cb91d99a032a229586eb7dc490cce9f7f30
GET /widgets.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 1252
Cache-Control: public, max-age=1800
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "6633f9603c759c40d9b200995454f17c+gzip"
Last-Modified: Wed, 02 Nov 2022 19:43:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 29221
connect.facebook.net/en_US/all.js
301 Moved Permanently 0 B URL HTTP/1.1 connect.facebook.net/en_US/all.js
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 301 Moved Permanently
Location: https://connect.facebook.net/en_US/all.js
Content-Type: text/plain
Server: proxygen-bolt
Date: Thu, 08 Dec 2022 20:35:35 GMT
Connection: keep-alive
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a7a8eecec19b58f9286e9ce32471f3ba
f9e32a22a8ac6b1e5b29b91444183990b6e4c83e
69b0a2bff905b13caa305b1fcbb2db96a7f3bc60ccb4fba45b169e9ee86da4c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/analytics.js
200 OK 20 kB URL HTTP/2 www.google-analytics.com/analytics.js
IP
File type ASCII text, with very long lines (1325)
Hash 47e6f374ca946fddd5b59871b325736c
baa9282efc8785e84d247c3bff518eaa45f101c4
16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Thu, 08 Dec 2022 18:41:08 GMT
expires: Thu, 08 Dec 2022 20:41:08 GMT
cache-control: public, max-age=7200
age: 6867
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fwww.immjatim.org
200 OK 105 kB URL HTTP/1.1 platform.twitter.com/widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fwww.immjatim.org
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (56168)
Size 105 kB (105445 bytes)
Hash 2b4968b185495eddda0d85b2351ebb71
c665785ca0f4039f8c71d94631cd50a879d866b5
eb8af089d8082a58a6e90fedc23007f17a9e89ddbc6a29b6e535e4847ba94160
GET /widgets/widget_iframe.644279d1635fd969e87af94a98bd232b.html?origin=http%3A%2F%2Fwww.immjatim.org HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76258
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "50d73c0b4a4c7e4697b9c6ac6f1ecd75+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:59 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 105445
apis.google.com/js/plusone.js
200 OK 21 kB URL HTTP/2 apis.google.com/js/plusone.js
IP
File type ASCII text, with very long lines (1279)
Hash 327d33b72373a953dc7ddef0c6463b48
2fd9b26cb459ff01c3a1dd3507f1c7484cce6ce4
1f9becca80520826519f7908eff9bc2cdf551f9afc5d2a276f9d3c4a55a0e79c
GET /js/plusone.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20984
date: Thu, 08 Dec 2022 20:35:35 GMT
expires: Thu, 08 Dec 2022 20:35:35 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "34fae0e5dab49917"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google-analytics.com/j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=759955605&gjid=1176505525&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&_slc=1&z=432299728
200 OK 4 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=759955605&gjid=1176505525&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&_slc=1&z=432299728
IP
File type ASCII text, with no line terminators
Hash 9e92e190700c1af4539b40c2171320a9
209bcdb79e6067b51091ce8586d4b977f25b67d8
aec60bc104db041b1512185839f18f52986df7e569e5445f740dd60f763fbca8
POST /j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEBAAEABAAAAACAAI~&jid=759955605&gjid=1176505525&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&_slc=1&z=432299728 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://www.immjatim.org
date: Thu, 08 Dec 2022 20:35:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 0c89743226644fddacbe5d50c110b950
b343ae9eb9047cf764b518083d612ffd3652b209
1bf675bb6e12e913a98cd8849c1af9a0c50b0bb8bfa670c86419b41782e06e47
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google-analytics.com/j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAEABAAAAACAAI~&jid=1721174761&gjid=188388956&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&z=81544118
200 OK 2 B URL HTTP/2 www.google-analytics.com/j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAEABAAAAACAAI~&jid=1721174761&gjid=188388956&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&z=81544118
IP
File type ASCII text, with no line terminators
Hash cc7a1e792bca8ccb1946b7a07f6dbc03
11a2757082428311f587b7664fa9840376137f80
de3246094525b21a870fc7d2a67490d0132535c6fa5993755c549f1a9d1bd8af
POST /j/collect?v=1&_v=j98&a=19527961&t=pageview&_s=1&dl=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1&ul=en-us&de=UTF-8&dt=AMM%20UTM%20Peduli%20Kebakaran%20Hutan%20Sumatera%20dan%20Kalimantan%20-%20DPD%20IMM%20Jawa%20Timur&sd=24-bit&sr=1280x1024&vp=1268x939&je=0&_u=IEDAAEABAAAAACAAI~&jid=1721174761&gjid=188388956&cid=2093696736.1670531735&tid=UA-86994140-1&_gid=2126434721.1670531735&_r=1&z=81544118 HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-allow-origin: http://www.immjatim.org
date: Thu, 08 Dec 2022 20:35:35 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 615fddb7dcff0826f0a7dd4140f370b6
06d26c99fcf20516839a656c4c5b023088eb4eaa
f561bef7be5b58a820d37e40135c8bc83511ae9298e6317bf1761f7cc24941bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1385
Cache-Control: max-age=159156
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "63920fe2-1d7"
Expires: Sat, 10 Dec 2022 16:48:11 GMT
Last-Modified: Thu, 08 Dec 2022 16:25:06 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 471
connect.facebook.net/en_US/all.js
200 OK 1.7 kB URL HTTP/2 connect.facebook.net/en_US/all.js
IP
File type ASCII text, with very long lines (1957)
Hash 7f4e30ed7407ff870b76fc8d9e99b898
1cbb4578be14a618dee823a8c788c397aa31a29f
6735bc8f49cf58f8c3ff6e2490b363e717751339f80af576463ef28537f35df8
GET /en_US/all.js HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.immjatim.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 5cc09f8af1d0661ce799abc9fe22652b
etag: "383bb9c7b21d33b978b3c93e507a013d"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Thu, 08 Dec 2022 20:42:08 GMT
cache-control: public,max-age=1200,stale-while-revalidate=3600
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: f04w7XQH/4cLdvyNnpm4mA==
x-fb-debug: G6G97o3mk7cHA4HTwpY7ls0W8daYXxBL8rkvC3jiw+LxAqA9bLfuIo+5esyrM05HemwkPfNWVxPfYs1FwIqy0w==
priority: u=3,i
content-length: 1686
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:35 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
200 OK 471 B IP
Hash 615fddb7dcff0826f0a7dd4140f370b6
06d26c99fcf20516839a656c4c5b023088eb4eaa
f561bef7be5b58a820d37e40135c8bc83511ae9298e6317bf1761f7cc24941bf
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1933
Cache-Control: max-age=159704
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "63920fe2-1d7"
Expires: Sat, 10 Dec 2022 16:57:19 GMT
Last-Modified: Thu, 08 Dec 2022 16:25:06 GMT
Server: ECS (ska/F70C)
X-Cache: HIT
Content-Length: 471
www.immjatim.org/favicon.ico
200 OK 467 B URL HTTP/1.1 www.immjatim.org/favicon.ico
IP
File type MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel\012- data
Hash 1811f51ee3d94efe5ac3f6bbedf86281
46b8e193491ae3307f7d691837a3fec9f397f534
bc2a5ea0dc19e3c37943718106118da498f0cd6a14c3d0e17592dd5eb5c950a0
GET /favicon.ico HTTP/1.1
Host: www.immjatim.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/2019/09/imm-utm-peduli-kebakaran-hutan.html?m=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Thu, 08 Dec 2022 20:35:35 GMT
Date: Thu, 08 Dec 2022 20:35:35 GMT
Cache-Control: private, max-age=86400
Last-Modified: Sat, 25 Jun 2022 21:31:09 GMT
ETag: W/"41c767f3ab7cc013c5cdf289bae6cafc92093fd71888bef1e563f06bb2aad2a2"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 467
Server: GSE
ocsp.digicert.com/
200 OK 313 B IP
Hash 36e4aa16eec3abfb8619bca4a7f843f2
f088fc058de5e7fa7003c1c7cf0ce94b813bf0d7
241300ea6c2af396141ffc8d2e844c0ef0f503becd8fa4c55617c428a053d74a
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 1766
Cache-Control: max-age=118816
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:35 GMT
Etag: "639170d1-139"
Expires: Sat, 10 Dec 2022 05:35:51 GMT
Last-Modified: Thu, 08 Dec 2022 05:06:25 GMT
Server: ECS (ska/F713)
X-Cache: HIT
Content-Length: 313
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 2556512b197b09798af71bea10bb4bbb
23b647aca5f8294ae82fa8cc7e2215ebe3347b60
3b5bd592342d978bcf8919d1a1e2f87295e2e4af5b5b266e6017b7a25725d08d
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&gjid=1176505525&_gid=2126434721.1670531735&_u=IEBAAEAAAAAAACAAI~&z=1023704315
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&gjid=1176505525&_gid=2126434721.1670531735&_u=IEBAAEAAAAAAACAAI~&z=1023704315
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&gjid=1176505525&_gid=2126434721.1670531735&_u=IEBAAEAAAAAAACAAI~&z=1023704315 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.immjatim.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 20:35:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&gjid=188388956&_gid=2126434721.1670531735&_u=IEDAAEABAAAAACAAI~&z=1028654002
200 OK 4 B URL HTTP/2 stats.g.doubleclick.net/j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&gjid=188388956&_gid=2126434721.1670531735&_u=IEDAAEABAAAAACAAI~&z=1028654002
IP
File type ASCII text, with no line terminators
Hash 48c0473b7821185d937e685216e2168b
3743e47f8a429a5e87b86cb582d78940733d9d2e
570c4d4674fd20602189c548c145ba1f8ac34bc2e4599a71471969028aa1e25a
POST /j/collect?t=dc&aip=1&_r=3&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&gjid=188388956&_gid=2126434721.1670531735&_u=IEDAAEABAAAAACAAI~&z=1028654002 HTTP/1.1
Host: stats.g.doubleclick.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: text/plain
Content-Length: 0
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: http://www.immjatim.org
strict-transport-security: max-age=10886400; includeSubDomains; preload
date: Thu, 08 Dec 2022 20:35:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
last-modified: Sun, 17 May 1998 03:00:00 GMT
access-control-allow-credentials: true
x-content-type-options: nosniff
content-type: text/plain
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 4
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
syndication.twitter.com/settings?session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
200 OK 386 B URL HTTP/2 syndication.twitter.com/settings?session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
IP
File type JSON data\012- , ASCII text, with very long lines (980), with no line terminators
Hash d8191391c888619de075f6e68400d5d0
c50e4465150fa960db0be7c1eb5907a5f96eb5ed
115d700c917d36ef2d666d1c634f3b77413b2bccb78266bdba043b318009f773
GET /settings?session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://platform.twitter.com/
Origin: https://platform.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:35 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: application/json; charset=utf-8
cache-control: must-revalidate, max-age=600
last-modified: Thu, 08 Dec 2022 20:35:36 GMT
content-length: 386
content-encoding: gzip
x-transaction-id: b61760bf315f8fde
strict-transport-security: max-age=631138519
access-control-allow-origin: https://platform.twitter.com
access-control-allow-credentials: true
x-response-time: 112
x-connection-hash: f2bd49c0a863768ffab2ceea775b35669a1cb7bae54daf96f8affbfcaf8190bd
X-Firefox-Spdy: h2
developers.google.com/
301 Moved Permanently 0 B IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: developers.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://www.immjatim.org/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Location: https://developers.google.com/
X-Cloud-Trace-Context: 230d4f9559dc3d68efad1d2925958205
Date: Thu, 08 Dec 2022 20:35:36 GMT
Content-Type: text/html
Server: Google Frontend
Content-Length: 0
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 6d7737802f93eeb14503d61c77c137bc
fa6861c298d00f879b9f16af4f05470cecfc80af
6b1b9763bcfaeb92a63ad6020651b3745e8279c634eb3505fc9fa875e772af42
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
connect.facebook.net/en_US/all.js?hash=6fd2f9ab5d458c22f83c884caecb1612
200 OK 87 kB URL HTTP/2 connect.facebook.net/en_US/all.js?hash=6fd2f9ab5d458c22f83c884caecb1612
IP
File type ASCII text, with very long lines (18734)
Hash a3481ba14b6a589f85217940ad36a5eb
130519d465c35c783a31a1daff7c0f8c47a5fcae
0f6020a63c92cdfbb194ef4440a2873b9c13805281575c1a472b28d0c3f0ca97
GET /en_US/all.js?hash=6fd2f9ab5d458c22f83c884caecb1612 HTTP/1.1
Host: connect.facebook.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://www.immjatim.org
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
vary: Accept-Encoding
content-encoding: gzip
access-control-expose-headers: X-FB-Content-MD5
x-fb-content-md5: 3607c1c8f814e63b1c954c13dc86eb32
etag: "f2ba409512f698d4ea582d6b7bbb23c3"
content-type: application/x-javascript; charset=utf-8
timing-allow-origin: *
access-control-allow-origin: *
cross-origin-resource-policy: cross-origin
expires: Fri, 08 Dec 2023 18:44:38 GMT
cache-control: public,max-age=31536000,stale-while-revalidate=3600,immutable
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-fb-rlafr: 0
x-frame-options: DENY
strict-transport-security: max-age=31536000; preload; includeSubDomains
content-md5: o0gboUtqWJ+FIXlArTal6w==
x-fb-debug: atFUODdoazwxa61rHMsJzJ48IrRiY974IPKISi27DaEbRfo/40W2KwIfPW+N05XTXrzM3we0QYF8NX8JOpng9Q==
content-length: 86811
x-fb-trip-id: 1679558926
date: Thu, 08 Dec 2022 20:35:36 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash a0905812e8498e6c5c0a9b4b584b972f
039b784fd1e0152ec7f49a54ba027f0b2bd1e833
ee3531ef0f334dcd73a86b1e4365a020d5db69ff7b82bad136eaf1a8e9d3b47f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 38ab64c8d5e963bd13caddb191950d94
b2aeb62771557e894a0c7a8e4e46dc13cc4c7f84
d1d95cac0816e3a1ed1fdc7e944029c805cd863e658ba87338436cd66d969cca
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
200 OK 4.3 kB URL HTTP/2 ssl.gstatic.com/accounts/o/1832714284-postmessagerelay.js
IP
File type ASCII text, with very long lines (2267)
Hash 3f7502705229ccec9d066c5cd75e6c31
ede1663155afaa5a5213d075e6295c6d839b05c3
2be5113d3022d1819a19f327235d287a2538a03741fc08ccd9d55cc1d78b6282
GET /accounts/o/1832714284-postmessagerelay.js HTTP/1.1
Host: ssl.gstatic.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://accounts.google.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/federated-signon-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="federated-signon-mpm-access"
report-to: {"group":"federated-signon-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/federated-signon-mpm-access"}]}
content-length: 4294
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 04 Dec 2022 06:19:27 GMT
expires: Mon, 04 Dec 2023 06:19:27 GMT
cache-control: public, max-age=31536000
last-modified: Fri, 02 Dec 2022 03:14:01 GMT
content-type: text/javascript
age: 396969
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash c9208747f2926b414bae65ed0e18fac5
3b25f459b1fe1a63689880699450305a8aee8b77
2c5333a23ade630e8dd8242aa59e371fa2208e265c58916e6fa799683d53f196
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/js/horizon_timeline.5b32f06df3f1186af2ebf11024b09726.js
200 OK 3.0 kB URL HTTP/1.1 platform.twitter.com/js/horizon_timeline.5b32f06df3f1186af2ebf11024b09726.js
IP
File type Unicode text, UTF-8 text, with very long lines (8274), with no line terminators
Hash 9dcf6c8cba8fe3e8cb99b94ee63af2d5
ec132eb470954fdf2ff629d8344942b47ce4a5d1
2783e866faf68e4f6bc1775136ac1fa7b05d4adc7522f350763eb09a0e91b80d
GET /js/horizon_timeline.5b32f06df3f1186af2ebf11024b09726.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76259
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:36 GMT
Etag: "be517337a860b30e72096680d8dde0eb+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2977
platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
200 OK 2.4 kB URL HTTP/1.1 platform.twitter.com/js/button.d2f864f87f544dc0c11d7d712a191c1f.js
IP
File type ASCII text, with very long lines (7017), with no line terminators
Hash 83616664e4155f8af0efb0576f8920cf
1277b0f4f935bec3ada0f87c45395bb6d9b2efbc
bb19d85932c5e8a952b6fc28c1df42aed6d6920f79ee3f2217d2484294d575d3
GET /js/button.d2f864f87f544dc0c11d7d712a191c1f.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76254
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:36 GMT
Etag: "7bb2d17ac20be3bd6ec1079356afecd9+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:52 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2362
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
200 OK 14 kB URL HTTP/1.1 platform.twitter.com/widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (32033)
Hash cd8176e04a5a760140a9de9ffe9d8a17
f3b4514c9df71da30eadd2d87fd6131e5c3bf7e3
601089b9e7dcd29e255c391dff1c3da64dd80bb72ee047561592d86dbbc4c472
GET /widgets/tweet_button.644279d1635fd969e87af94a98bd232b.en.html HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76237
Cache-Control: public, max-age=315360000
Content-Type: text/html; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:36 GMT
Etag: "126ffb93f08e989b18a6e1fc082c9e33+gzip"
Last-Modified: Wed, 02 Nov 2022 19:36:56 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71A)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 13753
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&_u=IEDAAEABAAAAACAAI~&z=543870566
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&_u=IEDAAEABAAAAACAAI~&z=543870566
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=1721174761&_u=IEDAAEABAAAAACAAI~&z=543870566 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 20:35:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&_u=IEBAAEAAAAAAACAAI~&z=449003903
200 OK 42 B URL HTTP/2 www.google.no/ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&_u=IEBAAEAAAAAAACAAI~&z=449003903
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /ads/ga-audiences?t=sr&aip=1&_r=4&slf_rd=1&v=1&_v=j98&tid=UA-86994140-1&cid=2093696736.1670531735&jid=759955605&_u=IEBAAEAAAAAAACAAI~&z=449003903 HTTP/1.1
Host: www.google.no
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
p3p: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
timing-allow-origin: *
cross-origin-resource-policy: cross-origin
date: Thu, 08 Dec 2022 20:35:36 GMT
pragma: no-cache
expires: Fri, 01 Jan 1990 00:00:00 GMT
cache-control: no-cache, no-store, must-revalidate
content-type: image/gif
x-content-type-options: nosniff
server: cafe
content-length: 42
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
200 OK 472 B IP
Hash 32d90ff0cc366730c3633c1201b4c058
f4175292b607197a15085e14bf69df301dff6706
b4b2f80fbe9b02f3d54dc35a3738c31a4d7cb5a5e528fcbce50263d8c458231a
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 08 Dec 2022 20:35:36 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
syndication.twitter.com/i/jot/embeds?dnt=1&l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735479%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?dnt=1&l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735479%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?dnt=1&l=%7B%22experiment_key%22%3A%22tfw_horizon_timeline_12034%22%2C%22bucket%22%3A%22treatment%22%2C%22version%22%3Anull%2C%22data%22%3A%7B%7D%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735479%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22widget_origin%22%3A%22%22%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22ddg%22%2C%22section%22%3A%22tfw_horizon_timeline_12034%22%2C%22action%22%3A%22experiment%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:35 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Thu, 08 Dec 2022 20:35:36 GMT
content-length: 43
x-transaction-id: 1ee9d184b6743740
strict-transport-security: max-age=631138519
x-response-time: 116
x-connection-hash: f2bd49c0a863768ffab2ceea775b35669a1cb7bae54daf96f8affbfcaf8190bd
X-Firefox-Spdy: h2
syndication.twitter.com/i/jot/embeds?dnt=1&l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735648%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot/embeds?dnt=1&l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735648%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot/embeds?dnt=1&l=%7B%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3Afalse%2C%22language%22%3A%22en%22%2C%22message%22%3A%22m%3Anocount%3A%22%2C%22context%22%3A%22rufous-eol%22%2C%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531735648%2C%22dnt%22%3Atrue%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22format_version%22%3A1%2C%22event_namespace%22%3A%7B%22client%22%3A%22tfw%22%2C%22page%22%3A%22button%22%2C%22section%22%3A%22share%22%2C%22action%22%3A%22impression%22%7D%7D&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:35 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Thu, 08 Dec 2022 20:35:36 GMT
content-length: 43
x-transaction-id: 8ff6f0a689e9276a
strict-transport-security: max-age=631138519
x-response-time: 121
x-connection-hash: f2bd49c0a863768ffab2ceea775b35669a1cb7bae54daf96f8affbfcaf8190bd
X-Firefox-Spdy: h2
syndication.twitter.com/srv/timeline-profile/screen-name/immjatim?dnt=true&embedId=twitter-widget-0&features=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%3D%3D&frame=false&hideBorder=false&hideFooter=false&hideHeader=false&hideScrollBar=false&lang=id&maxHeight=435px&origin=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&sessionId=27467e5c318a7dbfbbdc263ebe499e805bc914ce&showHeader=true&showReplies=false&theme=light&transparent=false&widgetsVersion=a3525f077c700%3A1667415560940
200 OK 9.0 kB URL HTTP/2 syndication.twitter.com/srv/timeline-profile/screen-name/immjatim?dnt=true&embedId=twitter-widget-0&features=eyJ0ZndfdGltZWxpbmVfbGlzdCI6eyJidWNrZXQiOlsibGlua3RyLmVlIiwidHIuZWUiLCJ0ZXJyYS5jb20uYnIiLCJ3d3cubGlua3RyLmVlIiwid3d3LnRyLmVlIiwid3d3LnRlcnJhLmNvbS5iciJdLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X2hvcml6b25fdGltZWxpbmVfMTIwMzQiOnsiYnVja2V0IjoidHJlYXRtZW50IiwidmVyc2lvbiI6bnVsbH0sInRmd190d2VldF9lZGl0X2JhY2tlbmQiOnsiYnVja2V0Ijoib24iLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X3JlZnNyY19zZXNzaW9uIjp7ImJ1Y2tldCI6Im9uIiwidmVyc2lvbiI6bnVsbH0sInRmd19zaG93X2J1c2luZXNzX3ZlcmlmaWVkX2JhZGdlIjp7ImJ1Y2tldCI6Im9mZiIsInZlcnNpb24iOm51bGx9LCJ0ZndfY2hpbl9waWxsc18xNDc0MSI6eyJidWNrZXQiOiJjb2xvcl9pY29ucyIsInZlcnNpb24iOm51bGx9LCJ0ZndfdHdlZXRfcmVzdWx0X21pZ3JhdGlvbl8xMzk3OSI6eyJidWNrZXQiOiJ0d2VldF9yZXN1bHQiLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X3NlbnNpdGl2ZV9tZWRpYV9pbnRlcnN0aXRpYWxfMTM5NjMiOnsiYnVja2V0IjoiaW50ZXJzdGl0aWFsIiwidmVyc2lvbiI6bnVsbH0sInRmd19leHBlcmltZW50c19jb29raWVfZXhwaXJhdGlvbiI6eyJidWNrZXQiOjEyMDk2MDAsInZlcnNpb24iOm51bGx9LCJ0ZndfZHVwbGljYXRlX3NjcmliZXNfdG9fc2V0dGluZ3MiOnsiYnVja2V0Ijoib24iLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X3ZpZGVvX2hsc19keW5hbWljX21hbmlmZXN0c18xNTA4MiI6eyJidWNrZXQiOiJ0cnVlX2JpdHJhdGUiLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X3Nob3dfYmx1ZV92ZXJpZmllZF9iYWRnZSI6eyJidWNrZXQiOiJvbiIsInZlcnNpb24iOm51bGx9LCJ0ZndfdHdlZXRfZWRpdF9mcm9udGVuZCI6eyJidWNrZXQiOiJvbiIsInZlcnNpb24iOm51bGx9fQ%3D%3D&frame=false&hideBorder=false&hideFooter=false&hideHeader=false&hideScrollBar=false&lang=id&maxHeight=435px&origin=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&sessionId=27467e5c318a7dbfbbdc263ebe499e805bc914ce&showHeader=true&showReplies=false&theme=light&transparent=false&widgetsVersion=a3525f077c700%3A1667415560940
IP
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (65482), with no line terminators
Hash 26284d4c3c3946b905b633a14f6f1a76
cae0c176d623b9742cc0936bc93582753d546fc3
4d85f8455b3ea5a1d070660f5589f5fcb72c6e870f1b0724848e165973a2b014
GET /srv/timeline-profile/screen-name/immjatim?dnt=true&embedId=twitter-widget-0&features=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%3D%3D&frame=false&hideBorder=false&hideFooter=false&hideHeader=false&hideScrollBar=false&lang=id&maxHeight=435px&origin=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&sessionId=27467e5c318a7dbfbbdc263ebe499e805bc914ce&showHeader=true&showReplies=false&theme=light&transparent=false&widgetsVersion=a3525f077c700%3A1667415560940 HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:36 GMT
etag: "13404-2t7ro8HP+NMYaPy0Qd+hXUGyDqk"
perf: 7626143928
server: tsa_o
content-type: text/html; charset=utf-8
cache-control: must-revalidate, max-age=60
x-transaction-id: ef1cefdcc95eac8d
x-xss-protection: 0
strict-transport-security: max-age=631138519
content-encoding: gzip
content-length: 9046
x-response-time: 645
x-connection-hash: f2bd49c0a863768ffab2ceea775b35669a1cb7bae54daf96f8affbfcaf8190bd
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/chunks/runtime-74f234aa9436f2491c35.js
200 OK 2.1 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/runtime-74f234aa9436f2491c35.js
IP
File type ASCII text, with very long lines (3957), with no line terminators
Hash 0274a86de6fba7d937922bf4662c34c1
3dd586636843bcc02965fdef47fee0b8a002653d
fedcf74ccb47ca2556ea7769d84313f17a1ededb1d6e945112ee2bae5ae8524c
GET /_next/static/chunks/runtime-74f234aa9436f2491c35.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "bda3006a0ff2ad68893a3b518cd7783c+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F717)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2139
platform.twitter.com/_next/static/chunks/main-5325a8272647bc330971.js
200 OK 90 B URL HTTP/1.1 platform.twitter.com/_next/static/chunks/main-5325a8272647bc330971.js
IP
File type ASCII text, with no line terminators
Hash 5a21586c91c5d5afc6107e8c209a774d
dca82c597d05892e826c944c0a0d0237216d329f
b53c6c017edfc37b5256cbb4329a4ccffc47ab59a4d7fdad9958ff7314011341
GET /_next/static/chunks/main-5325a8272647bc330971.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "5a21586c91c5d5afc6107e8c209a774d"
Last-Modified: Mon, 05 Dec 2022 22:09:35 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70E)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 90
platform.twitter.com/_next/static/chunks/modules.3e7fdd96591c573dde4c.js
200 OK 96 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/modules.3e7fdd96591c573dde4c.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash 9bfe7541daac6d5f53ea8d23ae932935
33ec95a8fd413d3db9e77ba88dc3d365dad76cf2
61c69e5532fd5b8eff9d2c99b1ff0a0f4a0295351c48722d03b0dda5e932713e
GET /_next/static/chunks/modules.3e7fdd96591c573dde4c.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76259
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "b44f3651787d3ce6b4a0d6ec0499befd+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:38 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F709)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 95842
platform.twitter.com/_next/static/chunks/pages/_app-86af437e3e28541d5e09.js
200 OK 667 B URL HTTP/1.1 platform.twitter.com/_next/static/chunks/pages/_app-86af437e3e28541d5e09.js
IP
File type ASCII text, with very long lines (1338), with no line terminators
Hash c5ffb39961dfb0b282075b6fa13e2e51
bc2f265466ae2e7946452eb0ce5e996d4302832d
e66dc0e0f3a949cc54564f44076f09066912530056f331f7b92aadd29cd4a8ab
GET /_next/static/chunks/pages/_app-86af437e3e28541d5e09.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "0d176ce6e3db2191c4cfe849e7c2a858+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:35 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 667
platform.twitter.com/_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-08f2e7c1cd158311a4c9.js
200 OK 1.3 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-08f2e7c1cd158311a4c9.js
IP
File type ASCII text, with very long lines (13043), with no line terminators
Hash 504860ebb4b232eed01fde6e1db70552
4ce30a5d50cd41b014c1083370483be962844dd0
50f8d948763c9d9c11a23da6eb67a5841798a33050bf533d58c715c9d3920270
GET /_next/static/chunks/pages/timeline-profile/screen-name/%5BscreenName%5D-08f2e7c1cd158311a4c9.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "52a8972735878b8b34b36edd6e3f376c+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71D)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 1285
platform.twitter.com/_next/static/wzQGmsQhwwAORd-fa3erc/_buildManifest.js
200 OK 416 B URL HTTP/1.1 platform.twitter.com/_next/static/wzQGmsQhwwAORd-fa3erc/_buildManifest.js
IP
File type ASCII text, with very long lines (1208), with no line terminators
Hash daa8c5bf493faa213c68818076d45498
e9531c44567b03b5b6bd54384e8bf310d2aaa839
f533b079312812eabacbc6a960cd125d73b32f3d3e88af55a6843eb34990ec20
GET /_next/static/wzQGmsQhwwAORd-fa3erc/_buildManifest.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "c09e872187b38ab0554ed1550b9bf14a+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:35 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F71C)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=VZ,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 416
platform.twitter.com/_next/static/wzQGmsQhwwAORd-fa3erc/_ssgManifest.js
200 OK 76 B URL HTTP/1.1 platform.twitter.com/_next/static/wzQGmsQhwwAORd-fa3erc/_ssgManifest.js
IP
File type ASCII text, with no line terminators
Hash abee47769bf307639ace4945f9cfd4ff
c0a0dc51ee8a2852baf5ff30c33b1478ff302585
653f3e53e89b4f8548ff86c19e92bb3c6b84b6be7485a320b1e00893ed877479
GET /_next/static/wzQGmsQhwwAORd-fa3erc/_ssgManifest.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "abee47769bf307639ace4945f9cfd4ff"
Last-Modified: Mon, 05 Dec 2022 22:09:35 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F706)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 76
platform.twitter.com/_next/static/chunks/22.ae880b1d9e742e60faf6.js
200 OK 12 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/22.ae880b1d9e742e60faf6.js
IP
File type ASCII text, with very long lines (38080), with no line terminators
Hash b4275139608e4353e56e193431b1860f
2d5208e7384e9d9f662dca6f509fa18caa887df4
42423700b61320e00fa7f2476376fd8c8df7667eeb4e40de8d95fb4b81b34e9f
GET /_next/static/chunks/22.ae880b1d9e742e60faf6.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76015
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "d25f5e2ce983ec21d69da3da6fa27f60+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F716)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 12084
platform.twitter.com/_next/static/chunks/2.691622e4391d1973cb65.js
200 OK 7.7 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/2.691622e4391d1973cb65.js
IP
File type ASCII text, with very long lines (23122), with no line terminators
Hash ce1165904a2627392613edc89ecde25c
d79115cb2c3936a5c0ad3f070be8270bf39d2961
ae4beb7cc963089abbb272c10910467626b2eef37b966d86a54ff22885919293
GET /_next/static/chunks/2.691622e4391d1973cb65.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76259
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "942b5b928a24465d1906b4716131d896+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F712)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 7674
platform.twitter.com/_next/static/chunks/4.158dc38fd991a081ad9e.js
200 OK 1.3 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/4.158dc38fd991a081ad9e.js
IP
File type ASCII text, with very long lines (2558), with no line terminators
Hash b351247a8e032c8b58ddf1d1062aea00
cd3be05bb2450ed2e7a609081f7b5e02a2963fd9
92474e654cab4ef60959871c14ae72b6f8c3843bdf7aaae829b3c1582f647e04
GET /_next/static/chunks/4.158dc38fd991a081ad9e.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76258
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "ff2a4a029f711ed6f7dcb3f1f834609a+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F70F)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 1276
platform.twitter.com/_next/static/chunks/0.bf1027b56ec9497157ca.js
200 OK 182 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/0.bf1027b56ec9497157ca.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 182 kB (181512 bytes)
Hash 4fdf34313c03861af2225441a5ee952b
3d132ffc66ed9f48a193ed711d25fc106a55aa2f
16f6d186553cb7f2703f0aa1768366ef868dafda1c98ac0924f1b1dffb2edfcf
GET /_next/static/chunks/0.bf1027b56ec9497157ca.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76258
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "74be7dadad35792aa41d4d0bfc04970c+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:42 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F712)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 181512
jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
302 Found 0 B URL HTTP/1.1 jqueryapi.info/?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?getsrc=ok&ref=&url=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%3Fm%3D1 HTTP/1.1
Host: jqueryapi.info
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.immjatim.org/
HTTP/1.1 302 Found
server: openresty/1.13.6.1
date: Thu, 08 Dec 2022 20:35:37 GMT
content-type: text/html; charset=utf-8
content-length: 0
location: http://www6.jqueryapi.info/?template=ARROW_3&tdfs=1&s_token=1670531737.0341550000&uuid=1670531737.0341550000&term=Javascript%20Image%20Annotation%20Library&term=Online%20Programming%20Courses&term=Coding%20Certification%20Programs&term=Ethical%20Cracking%20and%20Penetration%20Testing&searchbox=0&showDomain=0&backfill=0
x-mtm-path: 0
vary: Accept-Language
content-language: en
set-cookie: mtm_delivered=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:1p3NcH:lVjuZL3-O3tjJhzB3qNBb_h1MZY; expires=Thu, 08-Dec-2022 21:35:37 GMT; Max-Age=3600; Path=/
connection: close
platform.twitter.com/_next/static/chunks/1.65f30b6faef659663dce.js
200 OK 2.6 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/1.65f30b6faef659663dce.js
IP
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /_next/static/chunks/1.65f30b6faef659663dce.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "5994cdbb117d58d216ac4842a581cd87+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:35 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F713)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 261200
platform.twitter.com/_next/static/chunks/ondemand.Dropdown.32cd349402647790873d.js
200 OK 2.6 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/ondemand.Dropdown.32cd349402647790873d.js
IP
File type ASCII text, with very long lines (6721), with no line terminators
Hash 43b85c67be8091071da37086b7fe8952
52952e8dffca3e460496d2e409ed0472190b60ed
a73cd27a57b4f1e5f4f263536377ddd37e14ee1483651902455413679cb3512e
GET /_next/static/chunks/ondemand.Dropdown.32cd349402647790873d.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76260
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:37 GMT
Etag: "23c946160e4f71b12faa787d95313ecf+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:36 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FC)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 2624
abs-0.twimg.com/emoji/v2/svg/2728.svg
200 OK 508 B URL HTTP/2 abs-0.twimg.com/emoji/v2/svg/2728.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1052), with no line terminators
Hash e96e946a645421ed7c388aef591f5ae5
1c04b4e5069c5b272bb9761f5a523d3a80362b89
656311abe6553cf0e632864eb6f9f2d19cf9f0c2c70ba6af7d2be0c1951b63a5
GET /emoji/v2/svg/2728.svg HTTP/1.1
Host: abs-0.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
content-encoding: gzip
content-type: image/svg+xml
etag: "6CCjBscyuQUVmJ2tqZlalw=="
expires: Fri, 10 Jun 2022 07:55:48 GMT
last-modified: Wed, 21 Feb 2018 22:32:28 GMT
perf: 6
strict-transport-security: max-age=631138519
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
x-transaction-id: 0035bfb500065131
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-served-by: cache-fty21364-FTY, cache-bma1655-BMA
x-cache: HIT, HIT
vary: Accept-Encoding
x-tw-cdn: FT
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 508
X-Firefox-Spdy: h2
platform.twitter.com/_next/static/chunks/vendors~ondemand.LottieWeb.6fa040c1440fc04a287d.js
200 OK 42 kB URL HTTP/1.1 platform.twitter.com/_next/static/chunks/vendors~ondemand.LottieWeb.6fa040c1440fc04a287d.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash c781a1ec25b69b4d2eae221319e7b347
064901751c87ef39cacb1c5eec1c0d8cb102a60e
f51884b352453b0b608fc4819887501f847a7ef76e3af434256e349631010283
GET /_next/static/chunks/vendors~ondemand.LottieWeb.6fa040c1440fc04a287d.js HTTP/1.1
Host: platform.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
HTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Methods: GET
Access-Control-Allow-Origin: *
Age: 76261
Cache-Control: public, max-age=315360000
Content-Type: application/javascript; charset=utf-8
Date: Thu, 08 Dec 2022 20:35:38 GMT
Etag: "27b0c28e4da6cc77da68c5361524079c+gzip"
Last-Modified: Mon, 05 Dec 2022 22:09:37 GMT
P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
Server: ECS (ska/F6FD)
Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=,edge;dur=1
Vary: Accept-Encoding
X-Cache: HIT
x-tw-cdn: VZ
Content-Length: 41941
syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531737666%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22dnt%22%3Atrue%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%224567b77%3A1670007971949%22%2C%22widget_data_source%22%3A%22screen-name%3Aimmjatim%22%7D&dnt=1&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
200 OK 43 B URL HTTP/2 syndication.twitter.com/i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531737666%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22dnt%22%3Atrue%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%224567b77%3A1670007971949%22%2C%22widget_data_source%22%3A%22screen-name%3Aimmjatim%22%7D&dnt=1&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce
IP
File type GIF image data, version 89a, 1 x 1\012- data
Hash 377d257f2d2e294916143c069141c1c5
b7cae69682cf31dd670b65088db8395acda6ed3e
ac8778041fdb7f2e08ceb574c9a766247ea26f1a7d90fa854c4efcf4b361a957
GET /i/jot?l=%7B%22_category_%22%3A%22tfw_client_event%22%2C%22triggered_on%22%3A1670531737666%2C%22event_namespace%22%3A%7B%22action%22%3A%22results%22%2C%22client%22%3A%22tfw%22%2C%22page%22%3A%22timeline-profile%22%2C%22section%22%3A%22main%22%7D%2C%22context%22%3A%22horizon%22%2C%22client_version%22%3A%22a3525f077c700%3A1667415560940%22%2C%22dnt%22%3Atrue%2C%22widget_id%22%3A%22twitter-widget-0%22%2C%22widget_origin%22%3A%22http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html%22%2C%22widget_frame%22%3A%22false%22%2C%22widget_partner%22%3A%22%22%2C%22widget_site_screen_name%22%3A%22%22%2C%22widget_site_user_id%22%3A%22%22%2C%22widget_creator_screen_name%22%3A%22%22%2C%22widget_creator_user_id%22%3A%22%22%2C%22widget_iframe_version%22%3A%224567b77%3A1670007971949%22%2C%22widget_data_source%22%3A%22screen-name%3Aimmjatim%22%7D&dnt=1&session_id=27467e5c318a7dbfbbdc263ebe499e805bc914ce HTTP/1.1
Host: syndication.twitter.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/srv/timeline-profile/screen-name/immjatim?dnt=true&embedId=twitter-widget-0&features=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%3D%3D&frame=false&hideBorder=false&hideFooter=false&hideHeader=false&hideScrollBar=false&lang=id&maxHeight=435px&origin=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&sessionId=27467e5c318a7dbfbbdc263ebe499e805bc914ce&showHeader=true&showReplies=false&theme=light&transparent=false&widgetsVersion=a3525f077c700%3A1667415560940
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:37 GMT
perf: 7626143928
vary: Origin
server: tsa_o
content-type: image/gif
cache-control: must-revalidate, max-age=600
last-modified: Thu, 08 Dec 2022 20:35:38 GMT
content-length: 43
x-transaction-id: 637b3531189a8218
strict-transport-security: max-age=631138519
x-response-time: 110
x-connection-hash: f2bd49c0a863768ffab2ceea775b35669a1cb7bae54daf96f8affbfcaf8190bd
X-Firefox-Spdy: h2
abs.twimg.com/sticky/animations/like.4.json
200 OK 1.9 kB URL HTTP/2 abs.twimg.com/sticky/animations/like.4.json
IP
File type ASCII text, with very long lines (24291)
Hash c5203df5bd1440c2fdf4b44f0eb3116a
6b928e79e59b281eb5b9f5c2ad608f81078b5869
0b638ce107a37db0734fcd82af97d1dd575c246d737949c5414aa1dc549540e3
GET /sticky/animations/like.4.json HTTP/1.1
Host: abs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://syndication.twitter.com/
Origin: https://syndication.twitter.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-encoding: gzip
accept-ranges: bytes
access-control-allow-origin: *
age: 4247059
content-type: application/json
date: Thu, 08 Dec 2022 20:35:38 GMT
etag: "YKYmOkwIx9KztN7bQT7x8g=="
expires: Fri, 08 Dec 2023 20:35:38 GMT
last-modified: Thu, 20 Oct 2022 16:50:56 GMT
perf: 7626143928
server: ECAcc (ska/F695)
strict-transport-security: max-age=631138519
surrogate-key: twitter-assets
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
vary: Accept-Encoding
x-cache: HIT
x-connection-hash: 00620de26479f72103b0d6f4ca0873a782dd4164b4c1379a9b6b21190ad4a58b
x-content-type-options: nosniff
x-response-time: 10
x-ton-expected-size: 24292
x-transaction-id: 80afab27525733bc
content-length: 1897
X-Firefox-Spdy: h2
pbs.twimg.com/profile_images/1517073902861635584/wSFQiKhg_normal.jpg
200 OK 1.9 kB URL HTTP/2 pbs.twimg.com/profile_images/1517073902861635584/wSFQiKhg_normal.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3\012- data
Hash 6a9f459b51798dfac41d0266da6adaf0
e291a2e5d6cb83c01db9e9d1721b5feffa8bc8e7
52f62e7c391f5275ae250a198a6859c298045d91e86bed9853654926c3060934
GET /profile_images/1517073902861635584/wSFQiKhg_normal.jpg HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
perf: 7626143928
cache-control: max-age=604800, must-revalidate
last-modified: Thu, 21 Apr 2022 09:30:58 GMT
x-transaction-id: 2b37511f71ddb5ba
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
content-type: image/jpeg
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, HIT
x-tw-cdn: FT
x-served-by: cache-lhr7364-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 1883
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1600744973447536640/j4N2Y7vK?format=jpg&name=120x120
200 OK 3.7 kB URL HTTP/2 pbs.twimg.com/card_img/1600744973447536640/j4N2Y7vK?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 99x120, components 3\012- data
Hash 36478d5e28302104615cbb3937ad67dd
9b0774e188e192a8e7027d048c426fd3fd9a4cd0
aa24e0af1985226b0a875e81cb26c748b09bc06b5f216ba0a924d00393925868
GET /card_img/1600744973447536640/j4N2Y7vK?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Thu, 08 Dec 2022 06:49:56 GMT
x-transaction-id: acccd0a222b58411
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7345-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 3735
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1600735251180900352/5qVSxsBU?format=jpg&name=120x120
200 OK 3.6 kB URL HTTP/2 pbs.twimg.com/card_img/1600735251180900352/5qVSxsBU?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 99x120, components 3\012- data
Hash 1b644bfb1beef1546e4f1e076c7df294
e9d3ab1bef25f6ac5d792f61f4023c957aecf79f
79f6dcac2ead8dfab8380d0b7a68a989d6e3c768ad661c830b040ac838041780
GET /card_img/1600735251180900352/5qVSxsBU?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Thu, 08 Dec 2022 06:11:18 GMT
x-transaction-id: 6cc272887be52ba9
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7338-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 3597
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1600823231916945408/EgI08is8?format=jpg&name=120x120
200 OK 4.7 kB URL HTTP/2 pbs.twimg.com/card_img/1600823231916945408/EgI08is8?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 99x120, components 3\012- data
Hash d725e0ecc00df695d553b001ff750ef8
806e68006667ef22ff4ad6a18210a2024639e85d
e5d96c03481c5dfee1c8e96b428fa24f26f2e4e36281a1ddb755195f927c5dbb
GET /card_img/1600823231916945408/EgI08is8?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Thu, 08 Dec 2022 12:00:55 GMT
x-transaction-id: d6b2fdd8a01ad935
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7378-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 4715
X-Firefox-Spdy: h2
pbs.twimg.com/card_img/1600640667889201152/VosRbJp9?format=jpg&name=120x120
200 OK 3.9 kB URL HTTP/2 pbs.twimg.com/card_img/1600640667889201152/VosRbJp9?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 99x120, components 3\012- data
Hash eefc73e732381920dda9962b1060fb14
68fa9eb255e995662a5893d105bb6b443b46c86f
9916a3ed50b123001f32798fae0c449bd883fd015f214f6d2e9b766e7be3f04a
GET /card_img/1600640667889201152/VosRbJp9?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Wed, 07 Dec 2022 23:55:28 GMT
x-transaction-id: 40d185f5938cc652
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7343-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 3850
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_MvEwVsAUvx8j?format=jpg&name=120x120
200 OK 4.7 kB URL HTTP/2 pbs.twimg.com/media/Fh_MvEwVsAUvx8j?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 96x120, components 3\012- data
Hash b48b999437fd812a4f2725a1d117d525
e8b38c99c632cb2d72bc3befeeb7aae9748a19f5
ecef58b9af4eb059b2b2396687218f92d941866415400ed4a209c83574d50ded
GET /media/Fh_MvEwVsAUvx8j?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 06:33:41 GMT
x-transaction-id: ba792f6e6fb8a324
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7387-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 4681
X-Firefox-Spdy: h2
pbs.twimg.com/profile_images/1152961811458617345/Ycvzvzi8_normal.jpg
200 OK 2.3 kB URL HTTP/2 pbs.twimg.com/profile_images/1152961811458617345/Ycvzvzi8_normal.jpg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 48x48, components 3\012- data
Hash 39ae824efd9db233649c8991f0da2452
c8636d8e2c82839ea5f7f9656ef50c2201c002ef
4fbd869fb550edaad5c920d71d0deecd9f3f4014e958752d50085abd1424af3a
GET /profile_images/1152961811458617345/Ycvzvzi8_normal.jpg HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 21 Jul 2019 15:19:31 GMT
x-transaction-id: 7fcc64caf54b1702
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
content-type: image/jpeg
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7365-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 2263
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_Cl_HaAAEpm3U?format=jpg&name=120x120
200 OK 4.7 kB URL HTTP/2 pbs.twimg.com/media/Fh_Cl_HaAAEpm3U?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 96x120, components 3\012- data
Hash 7fb9a8046ad4f21df24479200bf83e11
42ab223dd8375ceabe213eeca3cb2c92578d0fd0
c65c95a1f69961d04b882176e0f8ca1b9faf658b95841fe01257dd4615a66b34
GET /media/Fh_Cl_HaAAEpm3U?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 05:49:23 GMT
x-transaction-id: 431c11cc1ced89df
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7371-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 4699
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_Ib-VUcAAB5D1?format=jpg&name=120x120
200 OK 3.2 kB URL HTTP/2 pbs.twimg.com/media/Fh_Ib-VUcAAB5D1?format=jpg&name=120x120
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 99x120, components 3\012- data
Hash 5cfd301905850b7cae5c100e374122b5
d03f188140b11aedbb21a20e550f164e3458a70b
44de5dc7d9e2caae6a9fa24ecb34cf18c06f0f811030b82273b976c083b1c0d7
GET /media/Fh_Ib-VUcAAB5D1?format=jpg&name=120x120 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 06:14:54 GMT
x-transaction-id: efb6b618b9501b40
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:38 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7346-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 3185
X-Firefox-Spdy: h2
www.facebook.com/plugins/like.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3eb0622b884ccc%26domain%3Dwww.immjatim.org%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.immjatim.org%252Ff9035fd8b1c718%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&layout=button_count&locale=en_US&sdk=joey&send=false&show_faces=false&width=90
200 OK 0 B URL HTTP/2 www.facebook.com/plugins/like.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3eb0622b884ccc%26domain%3Dwww.immjatim.org%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.immjatim.org%252Ff9035fd8b1c718%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&layout=button_count&locale=en_US&sdk=joey&send=false&show_faces=false&width=90
IP
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /plugins/like.php?app_id=&channel=https%3A%2F%2Fstaticxx.facebook.com%2Fx%2Fconnect%2Fxd_arbiter%2F%3Fversion%3D46%23cb%3Df3eb0622b884ccc%26domain%3Dwww.immjatim.org%26is_canvas%3Dfalse%26origin%3Dhttp%253A%252F%252Fwww.immjatim.org%252Ff9035fd8b1c718%26relation%3Dparent.parent&container_width=0&href=http%3A%2F%2Fwww.immjatim.org%2F2019%2F09%2Fimm-utm-peduli-kebakaran-hutan.html&layout=button_count&locale=en_US&sdk=joey&send=false&show_faces=false&width=90 HTTP/1.1
Host: www.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.immjatim.org/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/html;charset=utf-8
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net *.facebook.net *.google-analytics.com *.google.com 127.0.0.1:* 'unsafe-inline' 'unsafe-eval' blob: data: 'self' connect.facebook.net;style-src fonts.googleapis.com *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ v.whatsapp.net *.fbsbx.com *.fb.com;font-src data: *.gstatic.com *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com *.tenor.co media.tenor.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net *.giphy.com connect.facebook.net *.carriersignal.info blob: android-webview-video-poster: googleads.g.doubleclick.net www.googleadservices.com *.whatsapp.net *.fb.com *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com https://*.giphy.com data:;frame-src *.doubleclick.net *.google.com *.facebook.com www.googleadservices.com *.fbsbx.com fbsbx.com data: www.instagram.com *.fbcdn.net https://paywithmybank.com https://sandbox.paywithmybank.com;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;
report-to: {"max_age":259200,"endpoints":[{"url":"https:\/\/www.facebook.com\/ajax\/browser_error_reports\/?device_level=unknown"}]}
cross-origin-opener-policy: same-origin-allow-popups
x-content-type-options: nosniff
x-xss-protection: 0
x-fb-debug: HelBqGp9oAYIe6HMu+feb/hL4epZEJfcrqEkyw64iH4eZKfOqXuhvLN8Ld+c+XQYBuEIKKoFB+I//uVbKZPXrw==
content-length: 0
date: Thu, 08 Dec 2022 20:35:39 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_MvEwVsAUvx8j?format=jpg&name=360x360
200 OK 26 kB URL HTTP/2 pbs.twimg.com/media/Fh_MvEwVsAUvx8j?format=jpg&name=360x360
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x360, components 3\012- data
Hash e4facdcf6211305fa18d1314ea990c15
438ddf62514b113b09b3c8ffaf867508c2dca316
4f24d78d3b845807cef8c76de4eb48336857c7ca41c408672639a49a72e41b51
GET /media/Fh_MvEwVsAUvx8j?format=jpg&name=360x360 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 06:33:41 GMT
x-transaction-id: f0226f3a3607f21f
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:40 GMT
x-cache: HIT, HIT
x-tw-cdn: FT
x-served-by: cache-lhr7384-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 25984
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_Cl_HaAAEpm3U?format=jpg&name=360x360
200 OK 26 kB URL HTTP/2 pbs.twimg.com/media/Fh_Cl_HaAAEpm3U?format=jpg&name=360x360
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 288x360, components 3\012- data
Hash f5d2a8b95706954598fd00b30042af05
e0624572d0087ceca9dfb6f289b8ec55a62c8a85
10dfc9ad99765488f9cbe473cded10a5ab0f820b526b4a3fd433b0fa9126579c
GET /media/Fh_Cl_HaAAEpm3U?format=jpg&name=360x360 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 05:49:23 GMT
x-transaction-id: 3c0db3797c2fd740
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:41 GMT
x-cache: HIT, HIT
x-tw-cdn: FT
x-served-by: cache-lhr7346-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=HIT, x-tw-cdn;desc=FT
content-length: 26171
X-Firefox-Spdy: h2
pbs.twimg.com/media/Fh_Ib-VUcAAB5D1?format=jpg&name=360x360
200 OK 16 kB URL HTTP/2 pbs.twimg.com/media/Fh_Ib-VUcAAB5D1?format=jpg&name=360x360
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 298x360, components 3\012- data
Hash 811cb451a2b63a60ac703852834efb03
1b7c33ef79c0cdb3a9b457d8888aaa98c3009af2
0d6f8c1ca01513067c123d278012b3036ef6b12dd05ec90a121158614dabfa10
GET /media/Fh_Ib-VUcAAB5D1?format=jpg&name=360x360 HTTP/1.1
Host: pbs.twimg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://syndication.twitter.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
perf: 7626143928
content-type: image/jpeg
cache-control: max-age=604800, must-revalidate
last-modified: Sun, 20 Nov 2022 06:14:54 GMT
x-transaction-id: c1b338c0398791f9
timing-allow-origin: https://twitter.com, https://mobile.twitter.com
strict-transport-security: max-age=631138519
access-control-allow-origin: *
access-control-expose-headers: Content-Length
x-content-type-options: nosniff
accept-ranges: bytes
date: Thu, 08 Dec 2022 20:35:41 GMT
x-cache: HIT, MISS
x-tw-cdn: FT
x-served-by: cache-lhr7328-LHR, cache-bma1646-BMA, cache-tw-ZZZ1
server-timing: x-cache;desc=MISS, x-tw-cdn;desc=FT
content-length: 16071
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg
IP
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3d44d17585c9a536c8da0e75ed90d175
9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1
6d14a5b5c43b39244434560a83a2bfea6604a4d072943b6147293b7adfd1b7b7
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8a21d707-1bf7-4b7f-a23b-7e8f38dd40c5.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx
content-length: 10164
x-amzn-requestid: a0cb7259-0a07-44f5-91cd-e96b8d9c9cac
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cnAPOGSnoAMFUUQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638c472e-799b6ee425e29fb70ff7e4ea;Sampled=0
x-amzn-remapped-date: Sun, 04 Dec 2022 07:07:26 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: 5Q2LRCrEYVZz_KldQARUQ26O1mv0G7rMAPQXGkBzUnERF-WjtZPMJA==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 d6b180eb367f7de26d67a9f3901b96a6.cloudfront.net (CloudFront), 1.1 google
date: Thu, 08 Dec 2022 10:05:37 GMT
age: 37805
etag: "9dc35d0f6b251004bc1ddc83aea9ee71c95aedd1"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
static.addtoany.com/menu/page.js
200 OK 0 B URL HTTP/2 static.addtoany.com/menu/page.js
IP
GET /menu/page.js HTTP/1.1
Host: static.addtoany.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://www.immjatim.org/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 08 Dec 2022 20:35:33 GMT
content-type: application/javascript; charset=utf-8
cache-control: public, max-age=172800
cf-bgj: minify
access-control-allow-origin: *
age: 44757
etag: W/"c04-5ee0ab04c6251"
last-modified: Tue, 22 Nov 2022 08:09:18 GMT
vary: Accept-Encoding
via: e4s
x-content-type-options: nosniff
cf-cache-status: HIT
strict-transport-security: max-age=31536000; includeSubDomains; preload
server: cloudflare
cf-ray: 776849c80dd9b517-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
172.217.21.179
194.242.11.186
188.114.99.234
157.240.200.63
151.101.84.159
157.90.166.33
93.184.220.66
104.22.25.150