r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash a2104f935c638b4767ca5ae0d738ef23
85c6af15af749be0ceeae6de17c36925b750f166
5d4789a3696bd7faa9916768cb627bbc89bf70a756d80e53860cbac13c2bc8b1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "5D4789A3696BD7FAA9916768CB627BBC89BF70A756D80E53860CBAC13C2BC8B1"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4732
Expires: Sun, 29 Jan 2023 15:11:37 GMT
Date: Sun, 29 Jan 2023 13:52:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 3eb88dea4fe00db1182370e72683c3ab
ca520abf1e91bfd2aef40c6a1270a911071e8922
d8083ee567c7b3023111dc30f32c94237df7db30d4d2daaea0a569e8a3069ad7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D8083EE567C7B3023111DC30F32C94237DF7DB30D4D2DAAEA0A569E8A3069AD7"
Last-Modified: Sat, 28 Jan 2023 16:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4664
Expires: Sun, 29 Jan 2023 15:10:29 GMT
Date: Sun, 29 Jan 2023 13:52:45 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
35.241.9.150200 OK 939 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash bf0c602d32b3c14606f22a86183b5e3c
6eabd8d83475eba731968abe1a05a8bfd272f160
6c6a7c519a9e950c2445ed874a25211a94dd4d3cf3afb0103af9dcd1dbd5ff9e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Content-Length, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Sun, 29 Jan 2023 13:35:37 GMT
content-type: application/json
age: 1028
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 03092d1a1bc7ac91ee342a1a7ab2a562
52db06ce1fd2c74ddd36b6a0a7aee1b5c891600a
03b8ff2629abac9fc30ebec059c2e2018fcbc41646ad5f71c965ff630fbf1ffd
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "03B8FF2629ABAC9FC30EBEC059C2E2018FCBC41646AD5F71C965FF630FBF1FFD"
Last-Modified: Fri, 27 Jan 2023 17:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=6209
Expires: Sun, 29 Jan 2023 15:36:14 GMT
Date: Sun, 29 Jan 2023 13:52:45 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
34.160.144.191200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain
IP 34.160.144.191:0
File type PEM certificate\012- , ASCII text
Hash 7b922915ebf1fa3639b333f994c74f24
144a3f80b98fd0652d4614f24cf6cbbee40f8938
adbb3e06df0e870f5c7a9cb81e8979d4e92735853d75c9b779c06470d4db5d9c
GET /chains/remote-settings.content-signature.mozilla.org-2023-02-28-18-04-20.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: FlRKnszp9gJgLSr0kqApEYgygMIOMTFbrr0Z664SjvwDGPZ6KrTurksqKWJlbf1Lhp//e7P6UYhGKKQFfpywFg==
x-amz-request-id: KWXYCJRMCQM2HJ33
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Sun, 29 Jan 2023 13:21:24 GMT
age: 1881
last-modified: Mon, 09 Jan 2023 18:04:21 GMT
etag: "7b922915ebf1fa3639b333f994c74f24"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Sun, 29 Jan 2023 13:52:45 GMT
content-type: application/json
content-length: 12
access-control-expose-headers: content-type
vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
access-control-allow-credentials: true
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
35.241.9.150200 OK 329 B URL HTTP/2 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 35.241.9.150:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Backoff, Pragma, Last-Modified, ETag, Content-Length, Expires, Cache-Control, Retry-After, Content-Type, Alert
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 329
via: 1.1 google
date: Sun, 29 Jan 2023 13:49:04 GMT
age: 222
last-modified: Fri, 25 Mar 2022 17:45:46 GMT
etag: "1648230346554"
content-type: application/json
cache-control: max-age=3600,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash 16a7b6a7128312e2f985d30df18c4487
6017bff79ffb525d9c7f9f32b999b74b5dc69602
663fd12209627f08e759c2ed1c76278a5da79dae1e0b46082dd1bb44775f7a16
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "663FD12209627F08E759C2ED1C76278A5DA79DAE1E0B46082DD1BB44775F7A16"
Last-Modified: Fri, 27 Jan 2023 08:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3106
Expires: Sun, 29 Jan 2023 14:44:32 GMT
Date: Sun, 29 Jan 2023 13:52:46 GMT
Connection: keep-alive
push.services.mozilla.com/
44.238.73.182101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 44.238.73.182:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: KWo1mSpuDqVfSRtgPNUA/Q==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: qQ5/PiDkCL30LMtjUwkERm33bk4=
diamilikku.blogspot.com/2018/03/why-flirting.html
172.217.21.161200 OK 38 kB URL HTTP/1.1 diamilikku.blogspot.com/2018/03/why-flirting.html
IP 172.217.21.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (1467)
Hash 790475e75bd4222dfb861155e9eb58b2
98f9e9da829ee8a20868b15e1f5be9d9630e23a9
b3e973002fb11338203a2dbb714fd6b921861a9e63346bc0a09b153e4d834416
GET /2018/03/why-flirting.html HTTP/1.1
Host: diamilikku.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Sun, 29 Jan 2023 13:52:46 GMT
Date: Sun, 29 Jan 2023 13:52:46 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 05 Dec 2022 13:02:09 GMT
ETag: W/"d335dcb1b72f3ad1fd28bc8b5c9fb6de1b7db5c2a51ff6c1777296a4639275eb"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 37704
Server: GSE
dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
162.125.71.15301 Moved Permanently 0 B URL HTTP/1.1 dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
IP 162.125.71.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontsuhanna/blogger-sifr.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
date: Sun, 29 Jan 2023 13:52:46 GMT
server: envoy
x-dropbox-request-id: 6af4cd8862ce423da5db2154623af680
content-length: 0
dl.dropbox.com/u/8296860/fontaziah/sifr.css
162.125.71.15301 Moved Permanently 0 B URL HTTP/1.1 dl.dropbox.com/u/8296860/fontaziah/sifr.css
IP 162.125.71.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontaziah/sifr.css HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/8296860/fontaziah/sifr.css
date: Sun, 29 Jan 2023 13:52:46 GMT
server: envoy
x-dropbox-request-id: 45a805fc7a8e4487a9d7f2d5d0e13e60
content-length: 0
dl.dropbox.com/u/8296860/fontaziah/sifr.js
162.125.71.15301 Moved Permanently 0 B URL HTTP/1.1 dl.dropbox.com/u/8296860/fontaziah/sifr.js
IP 162.125.71.15:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontaziah/sifr.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 301 Moved Permanently
location: https://dl.dropbox.com/u/8296860/fontaziah/sifr.js
date: Sun, 29 Jan 2023 13:52:46 GMT
server: envoy
x-dropbox-request-id: 865bdcfb3aef413b8f5a301da4c00f5c
content-length: 0
diamilikku.blogspot.com/js/cookienotice.js
172.217.21.161200 OK 2.0 kB URL HTTP/1.1 diamilikku.blogspot.com/js/cookienotice.js
IP 172.217.21.161:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: diamilikku.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/2018/03/why-flirting.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Sun, 29 Jan 2023 13:52:47 GMT
Expires: Sun, 05 Feb 2023 13:52:47 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sun, 29 Jan 2023 07:50:34 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 446d71a92d12e6dcfc6f54397182f838
fefa6767a1e9afae573295a29982e4bc16729d56
aa26efff443b4e82e95c672d619c0ae11c8dac839ab9452a7cc033907f9fcbbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 677574c4d6c61909f3b923d6c0944aaf
a70e6323cc046b724a52ee3b05239d7510d32c1d
47e51ecfe2eed8486c7208f9624c17a1e08b383fcd962a9a678abfb9324346e6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 446d71a92d12e6dcfc6f54397182f838
fefa6767a1e9afae573295a29982e4bc16729d56
aa26efff443b4e82e95c672d619c0ae11c8dac839ab9452a7cc033907f9fcbbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
widgets.amung.us/colored.js
104.22.74.171200 OK 3.2 kB URL HTTP/1.1 widgets.amung.us/colored.js
IP 104.22.74.171:0
File type ASCII text, with very long lines (8596), with no line terminators
Hash fb2d2d6ae1380dd532a4f653267faf5e
5f1c850f1872fc8b43ec5bb2ebc29a76c77292b9
df88edf6843167ac3284b229fca9e2ef641db2c5b7abce9f638d7fc5d260713f
GET /colored.js HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:47 GMT
Content-Type: application/x-javascript
Transfer-Encoding: chunked
Connection: keep-alive
last-modified: Thu, 12 Jan 2023 17:19:26 GMT
etag: W/"63c0411e-2194"
expires: Mon, 30 Jan 2023 13:10:14 GMT
cache-control: max-age=86400
access-control-allow-origin: *
content-encoding: gzip
CF-Cache-Status: HIT
Age: 2553
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 79127346aa252e06-ARN
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fcbd5c708e411beb5907d39bb34e2622
c1df9b2d28709ea2f9240504b5aa2792ec2e8365
206c8eb25acbd8ecd3f1d95aa57f124679603dd59320b831ee5d610b99d18498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4389
Cache-Control: max-age=119710
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Etag: "63d599a8-1d7"
Expires: Mon, 30 Jan 2023 23:07:57 GMT
Last-Modified: Sat, 28 Jan 2023 21:54:48 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
216.58.207.233200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 216.58.207.233:0
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 26 Jan 2023 03:27:21 GMT
expires: Fri, 26 Jan 2024 03:27:21 GMT
cache-control: public, max-age=31536000
last-modified: Wed, 25 Jan 2023 14:53:31 GMT
content-type: text/css
age: 296726
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
216.58.207.233200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 20:56:35 GMT
expires: Wed, 01 Feb 2023 20:56:35 GMT
cache-control: public, max-age=604800
last-modified: Wed, 25 Jan 2023 14:53:31 GMT
content-type: image/gif
age: 320172
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
resources.blogblog.com/img/blank.gif
216.58.207.233200 OK 43 B URL HTTP/2 resources.blogblog.com/img/blank.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /img/blank.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 43
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 25 Jan 2023 00:39:56 GMT
expires: Wed, 01 Feb 2023 00:39:56 GMT
cache-control: public, max-age=604800
last-modified: Tue, 24 Jan 2023 12:52:03 GMT
content-type: image/gif
age: 393171
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fcbd5c708e411beb5907d39bb34e2622
c1df9b2d28709ea2f9240504b5aa2792ec2e8365
206c8eb25acbd8ecd3f1d95aa57f124679603dd59320b831ee5d610b99d18498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4389
Cache-Control: max-age=119710
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Etag: "63d599a8-1d7"
Expires: Mon, 30 Jan 2023 23:07:57 GMT
Last-Modified: Sat, 28 Jan 2023 21:54:48 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash fcbd5c708e411beb5907d39bb34e2622
c1df9b2d28709ea2f9240504b5aa2792ec2e8365
206c8eb25acbd8ecd3f1d95aa57f124679603dd59320b831ee5d610b99d18498
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4360
Cache-Control: max-age=119681
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Etag: "63d599a8-1d7"
Expires: Mon, 30 Jan 2023 23:07:28 GMT
Last-Modified: Sat, 28 Jan 2023 21:54:48 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
apis.google.com/js/platform.js
172.217.21.174200 OK 21 kB URL HTTP/2 apis.google.com/js/platform.js
IP 172.217.21.174:0
File type ASCII text, with very long lines (1429)
Hash 2354fa28c58e16af89e7da6224aeca93
6bd3430a81730ed77c5d53f5406ddb40306ecabd
dc35ae752b7be035bd3a3bd4ae205e41afce5fa8f88e1bfe0e9524610df10f3b
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20950
date: Sun, 29 Jan 2023 13:52:47 GMT
expires: Sun, 29 Jan 2023 13:52:47 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "03884666a30c671f"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.blogger.com/static/v1/widgets/1253685842-widgets.js
216.58.207.233200 OK 156 kB URL HTTP/2 www.blogger.com/static/v1/widgets/1253685842-widgets.js
IP 216.58.207.233:0
File type ASCII text, with very long lines (2221)
Size 156 kB (156311 bytes)
Hash 282c3db331d4d3d06779b0b8a60ef7c2
c0450142786dc1ce0f3875608b38591ff7eaaf1b
6c3f04bab4d89e7ea271ecb6ffd98b1fb47634d30cc10aa52169c4d2bdefce77
GET /static/v1/widgets/1253685842-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 156311
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Mon, 23 Jan 2023 01:57:07 GMT
expires: Tue, 23 Jan 2024 01:57:07 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 23 Jan 2023 00:54:53 GMT
content-type: text/javascript
age: 561340
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 446d71a92d12e6dcfc6f54397182f838
fefa6767a1e9afae573295a29982e4bc16729d56
aa26efff443b4e82e95c672d619c0ae11c8dac839ab9452a7cc033907f9fcbbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash 446d71a92d12e6dcfc6f54397182f838
fefa6767a1e9afae573295a29982e4bc16729d56
aa26efff443b4e82e95c672d619c0ae11c8dac839ab9452a7cc033907f9fcbbc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash ef589be52a3e55b643978f17949a73da
74545de6f144282252ff92c751f97cc835c80341
7bfa68c43e60a2627770163b5c1b96fbd7e4843984ad5ff6225c5490b8073b26
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
img1.blogblog.com/img/icon18_email.gif
216.58.207.233200 OK 164 B URL HTTP/1.1 img1.blogblog.com/img/icon18_email.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 18 x 13\012- data
Hash 36b9f993db1b953f3b9b08040aaf9af4
18248661b307586dc291fd2dff4bb59cf7579475
1258cbe1e2900ec3df11a83a6bb6008d7a833f783a6df80b0d5d45a052ac1466
GET /img/icon18_email.gif HTTP/1.1
Host: img1.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 164
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 26 Jan 2023 03:41:13 GMT
Expires: Thu, 02 Feb 2023 03:41:13 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 25 Jan 2023 14:53:31 GMT
Content-Type: image/gif
Age: 295894
www.blogger.com/img/icon_delete13.gif
216.58.207.233200 OK 140 B URL HTTP/1.1 www.blogger.com/img/icon_delete13.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 13 x 13\012- data
Hash e7f55c98f18368f2ba26a008b1d40fc3
bb509d770d2d149060707c2c2c01776e86b858c4
69ff07a31a102649f3e0d08a967c39b134286293b85aac0885b3102a9120f1a6
GET /img/icon_delete13.gif HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 140
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Wed, 25 Jan 2023 17:06:23 GMT
Expires: Wed, 01 Feb 2023 17:06:23 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 25 Jan 2023 16:55:15 GMT
Content-Type: image/gif
Age: 333984
www.blogger.com/img/blogger_logo_round_35.png
216.58.207.233200 OK 2.5 kB URL HTTP/1.1 www.blogger.com/img/blogger_logo_round_35.png
IP 216.58.207.233:0
File type PNG image data, 35 x 35, 8-bit/color RGBA, non-interlaced\012- data
Hash 838622483cbfed35380b4705f19d7cca
7de684136affc969a24d61927afc18905cf2fc36
183923f8c8c3960dce8ad9722cf55a30d19b321b721741bd9e2ab6ae1f1ae72a
GET /img/blogger_logo_round_35.png HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2531
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Jan 2023 09:44:05 GMT
Expires: Sat, 04 Feb 2023 09:44:05 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 28 Jan 2023 08:50:10 GMT
Content-Type: image/png
Age: 101322
resources.blogblog.com/img/blank.gif
216.58.207.233200 OK 43 B URL HTTP/1.1 resources.blogblog.com/img/blank.gif
IP 216.58.207.233:0
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /img/blank.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 43
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Jan 2023 01:26:34 GMT
Expires: Sat, 04 Feb 2023 01:26:34 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 27 Jan 2023 19:55:49 GMT
Content-Type: image/gif
Age: 131173
www.linkwithin.com/pixel.png
3.19.188.212200 OK 83 B URL HTTP/1.1 www.linkwithin.com/pixel.png
IP 3.19.188.212:0
File type PNG image data, 1 x 1, 8-bit/color RGBA, non-interlaced\012- data
Hash ca1dba98f5e46c0e7a1549b3d8af9b93
37284bda145ed93cee64997e3d6688cae7d98468
88021da4a13d993a2c94e4d8ddc9bd98b34985d806371e71e0531b37b8a0e081
GET /pixel.png HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 29 Jan 2023 13:52:47 GMT
Content-Type: image/png
Content-Length: 83
Last-Modified: Thu, 18 Jun 2020 22:02:28 GMT
Connection: keep-alive
ETag: "5eebe474-53"
Expires: Thu, 31 Dec 2037 23:55:55 GMT
Cache-Control: max-age=315360000
Accept-Ranges: bytes
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
216.58.211.2200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 216.58.211.2:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Sun, 29 Jan 2023 12:42:11 GMT
Expires: Sun, 12 Feb 2023 12:42:11 GMT
Cache-Control: public, max-age=1209600
Age: 4236
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
4.bp.blogspot.com/_8GxSJXcDIwk/TBNALDZe_0I/AAAAAAAABqk/cS_OBWXZEQs/s1600/1276330011_tags.png
142.250.74.161200 OK 769 B URL HTTP/1.1 4.bp.blogspot.com/_8GxSJXcDIwk/TBNALDZe_0I/AAAAAAAABqk/cS_OBWXZEQs/s1600/1276330011_tags.png
IP 142.250.74.161:0
File type PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced\012- data
Hash 7a5daed680d735388ad22035dc2dbd7d
c3b1f1494710e1eefeedd218e9d912e18f5ed78e
e6ced0fa54f257a9b98fa436566e088b35cdbf70916d6a70a9a0b5992aa7b0c4
GET /_8GxSJXcDIwk/TBNALDZe_0I/AAAAAAAABqk/cS_OBWXZEQs/s1600/1276330011_tags.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="1276330011_tags.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 769
X-XSS-Protection: 0
Date: Sun, 29 Jan 2023 11:55:00 GMT
Expires: Wed, 25 Jan 2023 15:48:19 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 7067
ETag: "v6a9"
Content-Type: image/png
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bc7c4f207ec97cacb1eedd94d2f6b371
5f0948a39435ace8bacc4ac5fb3df19045908e42
bfb24fe4a1cb45a068b0a6432b03c20d00ea178aabea23498f2d1f0273bf6e1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.linkwithin.com/widget.js?rand=0.5526165231416063
3.19.188.212404 Not Found 162 B URL HTTP/1.1 www.linkwithin.com/widget.js?rand=0.5526165231416063
IP 3.19.188.212:0
File type HTML document text\012- HTML document text\012- HTML document, ASCII text, with CRLF line terminators
Hash 1b7c22a214949975556626d7217e9a39
d01c97e2944166ed23e47e4a62ff471ab8fa031f
340c8464c2007ce3f80682e15dfafa4180b641d53c14201b929906b7b0284d87
GET /widget.js?rand=0.5526165231416063 HTTP/1.1
Host: www.linkwithin.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 404 Not Found
Server: nginx/1.18.0 (Ubuntu)
Date: Sun, 29 Jan 2023 13:52:47 GMT
Content-Type: text/html
Content-Length: 162
Connection: keep-alive
lb3m.lilypie.com/71php8.png
174.136.99.42200 OK 4.5 kB URL HTTP/1.1 lb3m.lilypie.com/71php8.png
IP 174.136.99.42:0
File type PNG image data, 200 x 80, 8-bit colormap, non-interlaced\012- data
Hash 68384bcc1c4cfe054a70dd80a6dd21a3
f1d1a5f48b22ac443c24e86b3daa0908bcf69405
e2d689e18b80c2a0ec50317ed51a2695339bc4d77ad78490b6325cc41fd6c669
GET /71php8.png HTTP/1.1
Host: lb3m.lilypie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: Apache/2.4.55
X-Powered-By: PHP/8.0.27
Content-Length: 4538
Connection: close
Content-Type: image/png
lb2m.lilypie.com/V3yvp2.png
174.136.99.42200 OK 5.1 kB URL HTTP/1.1 lb2m.lilypie.com/V3yvp2.png
IP 174.136.99.42:0
File type PNG image data, 200 x 80, 8-bit colormap, non-interlaced\012- data
Hash fbc160549aa34252a75f96ddc8f56c22
fc65da388f38118cf51a5d46abcccc8903128483
0c23b5833a939626a5d43d8fec897b2c60a4d4b4e7745ad0db3de43a6674d524
GET /V3yvp2.png HTTP/1.1
Host: lb2m.lilypie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: Apache/2.4.55
X-Powered-By: PHP/8.0.27
Content-Length: 5136
Connection: close
Content-Type: image/png
lb2m.lilypie.com/TikiPic.php/V3yv.jpg
174.136.99.42200 OK 2.2 kB URL HTTP/1.1 lb2m.lilypie.com/TikiPic.php/V3yv.jpg
IP 174.136.99.42:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v80), quality = 69", baseline, precision 8, 62x80, components 3\012- data
Hash a3a2eb8f2f14fadf940fd7904b3ae4f5
756fc42b48a6934933e1866945356aee0b0f3946
47f4cbc14d7e1740e53d074cdf0199b2b6a412425ccabc7f3c736582a317360e
GET /TikiPic.php/V3yv.jpg HTTP/1.1
Host: lb2m.lilypie.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: Apache/2.4.55
X-Powered-By: PHP/8.0.27
Accept-Ranges: bytes
Content-Length: 2211
Connection: close
Content-Type: image/jpeg
davm.daisypath.com/XUt2p8.png
174.136.99.42200 OK 5.5 kB URL HTTP/1.1 davm.daisypath.com/XUt2p8.png
IP 174.136.99.42:0
File type PNG image data, 200 x 80, 8-bit colormap, non-interlaced\012- data
Hash 27bd16346ac280107edbf647448794de
e0fdd64e25ca91ff246e194e7dc35b8aad27f509
fa8d2acea17adc60c9adf60efe7e76d15c7eb19eb58b6b0608973746c4887b26
GET /XUt2p8.png HTTP/1.1
Host: davm.daisypath.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: Apache/2.4.55
X-Powered-By: PHP/8.0.27
Content-Length: 5483
Connection: close
Content-Type: image/png
1.bp.blogspot.com/_WIwdcrPxswM/S065BFioWKI/AAAAAAAACNc/IZYZm_N5Fxk/S163/anak2+(10).jpg
142.250.74.161200 OK 8.5 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/S065BFioWKI/AAAAAAAACNc/IZYZm_N5Fxk/S163/anak2+(10).jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 122x163, components 3\012- data
Hash 35e79a806daee3a3ce7fa3ebec25f699
e3e0bc57df141efb3ce31510637134a126b01f68
ef0128b343c1329d807b5fe6239dcbf214fe4c55d68b5e4242a4dfbedbadcc24
GET /_WIwdcrPxswM/S065BFioWKI/AAAAAAAACNc/IZYZm_N5Fxk/S163/anak2+(10).jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8d7"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="anak2 (10).jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 8493
X-XSS-Protection: 0
1.bp.blogspot.com/-utzUS-Q6KwI/TYkWD9EiB4I/AAAAAAAADyk/qy75T2h97cM/s250/my_buah_hati.jpg
142.250.74.161200 OK 19 kB URL HTTP/1.1 1.bp.blogspot.com/-utzUS-Q6KwI/TYkWD9EiB4I/AAAAAAAADyk/qy75T2h97cM/s250/my_buah_hati.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 200x217, components 3\012- data
Hash 310ec19c4b6f56eb3ee1c09ec2f6e080
5f295995346b96fb48d7b2864256bd290bf0a5f0
ec01778261b283e41fee74f62a48b744a094c28e5a03dd79fd428da53b877c70
GET /-utzUS-Q6KwI/TYkWD9EiB4I/AAAAAAAADyk/qy75T2h97cM/s250/my_buah_hati.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vf29"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="my_buah_hati.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 18758
X-XSS-Protection: 0
4.bp.blogspot.com/-XMkpR1YknVk/XIeijhCwh0I/AAAAAAAAAA8/_iWQC6EZhEES-7a3wbKL7p_tP2iHvW6mQCK4BGAYYCw/s35/Ronaldo%25252Bdrogba.jpg
142.250.74.161200 OK 1.4 kB URL HTTP/1.1 4.bp.blogspot.com/-XMkpR1YknVk/XIeijhCwh0I/AAAAAAAAAA8/_iWQC6EZhEES-7a3wbKL7p_tP2iHvW6mQCK4BGAYYCw/s35/Ronaldo%25252Bdrogba.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 35x35, components 3\012- data
Hash 06a0b51eab5709954f7ea530c5ca75f9
3339944fe6aabced064c7b5c85ca8269d7163e43
2c5f7561525aa610d136a0dbdc0e77e1f38f10a2ef6b7671023fb84176d8dc58
GET /-XMkpR1YknVk/XIeijhCwh0I/AAAAAAAAAA8/_iWQC6EZhEES-7a3wbKL7p_tP2iHvW6mQCK4BGAYYCw/s35/Ronaldo%25252Bdrogba.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v11"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Ronaldo%2Bdrogba.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 1379
X-XSS-Protection: 0
4.bp.blogspot.com/-U1PRl4DFDbQ/X0e1FprcTPI/AAAAAAAAAMA/bZgDPshvkponvb26NqFeO_dink7lxNXGACK4BGAYYCw/s35/199.jpg
142.250.74.161200 OK 1.5 kB URL HTTP/1.1 4.bp.blogspot.com/-U1PRl4DFDbQ/X0e1FprcTPI/AAAAAAAAAMA/bZgDPshvkponvb26NqFeO_dink7lxNXGACK4BGAYYCw/s35/199.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 35x35, components 3\012- data
Hash a74684647b0696e91f6acc937bdcf837
b04db6cd4420b24a38363efc0bf1951c14308e21
c7ccf7eddaed53c0d1553fd48fd1ebf7c8b3ee23d0762424091b5dedc7bf7b06
GET /-U1PRl4DFDbQ/X0e1FprcTPI/AAAAAAAAAMA/bZgDPshvkponvb26NqFeO_dink7lxNXGACK4BGAYYCw/s35/199.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vc5"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="199.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 1505
X-XSS-Protection: 0
1.bp.blogspot.com/-Yu_1PSUlCbk/TpudkaWCapI/AAAAAAAAEGU/si2fcSwnfkY/s80/Kechor-20111009-01590.jpg
142.250.74.161200 OK 4.0 kB URL HTTP/1.1 1.bp.blogspot.com/-Yu_1PSUlCbk/TpudkaWCapI/AAAAAAAAEGU/si2fcSwnfkY/s80/Kechor-20111009-01590.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 62x80, components 3\012- data
Hash 8cd99d2372c6e525eeca219241ff5af6
039be43d13d095bdda5cb526ca5519585852df88
bc87cbd4d36b436ac8e730ea181280fb3cd1a4f11c59fdb7871d8044c1b9e199
GET /-Yu_1PSUlCbk/TpudkaWCapI/AAAAAAAAEGU/si2fcSwnfkY/s80/Kechor-20111009-01590.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1079"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Kechor-20111009-01590.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 4043
X-XSS-Protection: 0
3.bp.blogspot.com/_WIwdcrPxswM/SjCEK71BMxI/AAAAAAAABtE/RUnQ4iIqnFM/S163/award.jpg
142.250.74.161200 OK 18 kB URL HTTP/1.1 3.bp.blogspot.com/_WIwdcrPxswM/SjCEK71BMxI/AAAAAAAABtE/RUnQ4iIqnFM/S163/award.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 163x163, components 3\012- data
Hash c1a699a3aafcd39a6e5a0019c24abcf4
dc30e0cecddd13f006e646873e5a9f3e24fdee3d
49eb34137b5e14f7ba307733c0855385c52f61efd468d7ba432ef6b1949fb1bd
GET /_WIwdcrPxswM/SjCEK71BMxI/AAAAAAAABtE/RUnQ4iIqnFM/S163/award.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6d1"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="award.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 17805
X-XSS-Protection: 0
2.bp.blogspot.com/_WIwdcrPxswM/S95fyLvxNII/AAAAAAAACiU/V_ncdX-zxd8/S175/2nd+anni.jpg
142.250.74.161200 OK 16 kB URL HTTP/1.1 2.bp.blogspot.com/_WIwdcrPxswM/S95fyLvxNII/AAAAAAAACiU/V_ncdX-zxd8/S175/2nd+anni.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 175x160, components 3\012- data
Hash 4b64b6f38d2b33862be254ea6853dc31
66509138ac18b409ccbb78a120dc17c08a2929bb
053e44048d6ad7b57229d344f2e704c3f8aeef124637e09abfbba9cc639f2bf4
GET /_WIwdcrPxswM/S95fyLvxNII/AAAAAAAACiU/V_ncdX-zxd8/S175/2nd+anni.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va25"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="2nd anni.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 16194
X-XSS-Protection: 0
1.bp.blogspot.com/_WIwdcrPxswM/TFoxFHHAW9I/AAAAAAAADD8/Vq-iaPFg-ls/S350/Jellyfish.jpg
142.250.74.161200 OK 28 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/TFoxFHHAW9I/AAAAAAAADD8/Vq-iaPFg-ls/S350/Jellyfish.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 350x262, components 3\012- data
Hash f80ab01584782ac42d7fa5907b64e3fd
2a73aaea3965dda26bde3387be0173b7562e52e4
40ba393a1d416e9a7aee045f0da8eed560ec0df6765a33c0e038f6ffbb086862
GET /_WIwdcrPxswM/TFoxFHHAW9I/AAAAAAAADD8/Vq-iaPFg-ls/S350/Jellyfish.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vc3f"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="Jellyfish.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 27548
X-XSS-Protection: 0
3.bp.blogspot.com/_WIwdcrPxswM/S95dCD1O9JI/AAAAAAAACh0/F6Xo_DUq2jU/S175/nikah2.jpg
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/_WIwdcrPxswM/S95dCD1O9JI/AAAAAAAACh0/F6Xo_DUq2jU/S175/nikah2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, description=\232u\014$1g\201\236"\315\225\335\001U2g%L\212\030\260\260\011\033+Y\302\032c#\226\321\0330\334\257\201\230<\006[\367b\254\336\007\254\334:\250v\225#, software=Google], baseline, precision 8, 175x120, components 3\012- data
Hash 1068162201d4d11ffca10ee239cd53be
d38b4f3872e283ed1f51e8075737035993e2bd72
5732b15d112becd76a59e09bf8874019111be945ef9b410c73bda1dd31005bde
GET /_WIwdcrPxswM/S95dCD1O9JI/AAAAAAAACh0/F6Xo_DUq2jU/S175/nikah2.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va1d"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nikah2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 11907
X-XSS-Protection: 0
1.bp.blogspot.com/_WIwdcrPxswM/S95alSy3B_I/AAAAAAAAChc/poN40KrPi_I/S150/aisy.jpg
142.250.74.161200 OK 11 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/S95alSy3B_I/AAAAAAAAChc/poN40KrPi_I/S150/aisy.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 150x146, components 3\012- data
Hash 971d28de606770a874c5c7261b913306
dd1534f05c31483db95448258b338df3d17accec
8e85f7d6badef437ece8a637b3e4fd3425ce9692f814846fe745caf359fc7e81
GET /_WIwdcrPxswM/S95alSy3B_I/AAAAAAAAChc/poN40KrPi_I/S150/aisy.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va17"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="aisy.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 11123
X-XSS-Protection: 0
4.bp.blogspot.com/_WIwdcrPxswM/S95cdl452tI/AAAAAAAAChs/aDZLs21KfDk/S175/nikah.jpg
142.250.74.161200 OK 14 kB URL HTTP/1.1 4.bp.blogspot.com/_WIwdcrPxswM/S95cdl452tI/AAAAAAAAChs/aDZLs21KfDk/S175/nikah.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 175x155, components 3\012- data
Hash 9c948588ed3afb2707467929f680ebde
359de5a6b3c6ee67994bd63ee947d6c359acf8e6
1849c708f3b0ee52be35095165b5c30b4a6f567d9fcc8fd5b3bae0894e5df1d7
GET /_WIwdcrPxswM/S95cdl452tI/AAAAAAAAChs/aDZLs21KfDk/S175/nikah.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va1b"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nikah.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 14151
X-XSS-Protection: 0
1.bp.blogspot.com/-ZjLLxHMVhxY/Xu_uVFoz7kI/AAAAAAAAAGQ/ZGsQ3Pn4qaoASsBNUtiIEqea_CYbWnFGACK4BGAYYCw/s35/4K-Wallpaper-of-Indian-Flag-for-Independence-Day-and-Republic-Day-500x281.jpg
142.250.74.161200 OK 1.3 kB URL HTTP/1.1 1.bp.blogspot.com/-ZjLLxHMVhxY/Xu_uVFoz7kI/AAAAAAAAAGQ/ZGsQ3Pn4qaoASsBNUtiIEqea_CYbWnFGACK4BGAYYCw/s35/4K-Wallpaper-of-Indian-Flag-for-Independence-Day-and-Republic-Day-500x281.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 35x35, components 3\012- data
Hash 2ec30d3226ecd7b96216bcc7671792be
5ada7e7d5263b3385442760880fb590cd47fa600
5dff2834bc8a7d6cdbbcbecf9f44ac138cbef0e1bfbb0a0a3d468610466df568
GET /-ZjLLxHMVhxY/Xu_uVFoz7kI/AAAAAAAAAGQ/ZGsQ3Pn4qaoASsBNUtiIEqea_CYbWnFGACK4BGAYYCw/s35/4K-Wallpaper-of-Indian-Flag-for-Independence-Day-and-Republic-Day-500x281.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="4K-Wallpaper-of-Indian-Flag-for-Independence-Day-and-Republic-Day-500x281.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1307
X-XSS-Protection: 0
Date: Sun, 29 Jan 2023 12:28:02 GMT
Expires: Tue, 24 Jan 2023 18:27:23 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 5085
ETag: "v67"
Content-Type: image/jpeg
4.bp.blogspot.com/_WIwdcrPxswM/S95escBS2_I/AAAAAAAACiE/vY-qNJMI4Z8/S175/anniversary.jpg
142.250.74.161200 OK 17 kB URL HTTP/1.1 4.bp.blogspot.com/_WIwdcrPxswM/S95escBS2_I/AAAAAAAACiE/vY-qNJMI4Z8/S175/anniversary.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 155x175, components 3\012- data
Hash d27253aa025d186077c515b698185c2e
157d27ed027a164a10064aafdc36358c3ebe8d33
d195339d78157ffad4f039c101eca744ab0ec5c13845a53ea17dbfa50f6eb918
GET /_WIwdcrPxswM/S95escBS2_I/AAAAAAAACiE/vY-qNJMI4Z8/S175/anniversary.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va21"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="anniversary.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 17389
X-XSS-Protection: 0
www.totallyfreecounters.com/counters/v/63141
154.19.239.104403 Forbidden 1.1 kB URL HTTP/1.1 www.totallyfreecounters.com/counters/v/63141
IP 154.19.239.104:0
File type HTML document text\012- HTML document text\012- exported SGML document, Unicode text, UTF-8 text, with very long lines (374)
Hash 3ff0e3eefe6f38c125a7fa492a37a331
0650fa1b669f5511273ce4330fb363afb0dc5261
4ac51629bfdd505bec4ee564d60c9667f2530718b3b306449db14939c951a85e
GET /counters/v/63141 HTTP/1.1
Host: www.totallyfreecounters.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 403 Forbidden
Server: nginx
Date: Sun, 29 Jan 2023 13:52:47 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Vary: Accept-Encoding
Content-Encoding: gzip
ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
142.250.74.131200 OK 472 B URL HTTP/1.1 ocsp.pki.goog/s/gts1p5/97q-VzuQ-Mw
IP 142.250.74.131:0
Hash e70f779cb46b9db421456336270b4913
ff385daceac57ca0c04b169fea0ef34a99a61c94
b85bd22816f4ce853f1bf26b6ef05065b015779efa15b6bbd231629eb58a13c0
POST /s/gts1p5/97q-VzuQ-Mw HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=14400
Server: scaffolding on HTTPServer2
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/_WIwdcrPxswM/S95fHezLh-I/AAAAAAAACiM/leScpK6_iEw/S175/nikah4.jpg
142.250.74.161200 OK 10 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/S95fHezLh-I/AAAAAAAACiM/leScpK6_iEw/S175/nikah4.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 175x150, components 3\012- data
Hash b71a79d0166228fe32a315f60138055a
5bed6d37192a45cd145756ac7536774626bb6138
6fb7875f76a481d93d93a8838fcdd845c2331b2ab151ab071124ffb581767778
GET /_WIwdcrPxswM/S95fHezLh-I/AAAAAAAACiM/leScpK6_iEw/S175/nikah4.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va23"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="nikah4.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 10016
X-XSS-Protection: 0
1.bp.blogspot.com/_WIwdcrPxswM/S95gOM3kWlI/AAAAAAAACic/BXxSkz5n5Gg/S175/3rd+anni.jpg
142.250.74.161200 OK 17 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/S95gOM3kWlI/AAAAAAAACic/BXxSkz5n5Gg/S175/3rd+anni.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 175x137, components 3\012- data
Hash bc27fd6aee622861e5eb8c58cd6e0bf9
f291598567ca19d4b879c9b08aa12dff27db1f99
75145aacabf21ceb0d1dae990e716d4f40bcc2586ab456c4a2e05c29d3688992
GET /_WIwdcrPxswM/S95gOM3kWlI/AAAAAAAACic/BXxSkz5n5Gg/S175/3rd+anni.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "va27"
Expires: Mon, 30 Jan 2023 13:52:47 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="3rd anni.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:47 GMT
Server: fife
Content-Length: 17042
X-XSS-Protection: 0
lh3.googleusercontent.com/-E8rK3zGjSPA/TYkRI0EuXEI/AAAAAAAADyg/p7fjN-2uQx8/s1600/bunga.png
142.250.74.97200 OK 552 B URL HTTP/2 lh3.googleusercontent.com/-E8rK3zGjSPA/TYkRI0EuXEI/AAAAAAAADyg/p7fjN-2uQx8/s1600/bunga.png
IP 142.250.74.97:0
File type PNG image data, 15 x 15, 8-bit/color RGBA, non-interlaced\012- data
Hash e5b3cc36fe62166424da56694e4b0cbb
faae2797296c0d2ccc3b850da9db7df41f18b13f
2488676b0f044c13af580d97145f52c4a5605b6508284a42300d2dfed953868d
GET /-E8rK3zGjSPA/TYkRI0EuXEI/AAAAAAAADyg/p7fjN-2uQx8/s1600/bunga.png HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vf28"
expires: Mon, 30 Jan 2023 13:52:48 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="bunga.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:48 GMT
server: fife
content-length: 552
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12419
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12419
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12419
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12419
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.76.226200 OK 503 B IP 23.36.76.226:0
ASN #20940 Akamai International B.V.
Hash dfb84426fed94988d5c90372baff059c
f1c4740830034ff8a5759d59ae3f657ea524d083
d97efec67504b084ca6ff9e2af973b45b916f90aa021603e3615806bb2737b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D97EFEC67504B084CA6FF9E2AF973B45B916F90AA021603E3615806BB2737B6A"
Last-Modified: Sun, 29 Jan 2023 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12419
Expires: Sun, 29 Jan 2023 17:19:47 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 57ff6665d99a17d06b75c8fe64c90ab3
05648eed6830a794aa7e30ba4da526ed4c45b0ca
728b809756a0faff1a55bb03f13f33e31518f321e50dd944a0267d585c09264c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fdd9499d0-2a81-41ee-b328-0d82ea64b349.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5198
x-amzn-requestid: 8117f45b-926a-4cbe-b152-dae983bc3526
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fOYdlG6XIAMF_vA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf3abd-7ce531f65f66ac3a73970841;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 01:56:13 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: naZHCCrUSwrLi2eWi3LOrir9zOGQcNUBJ1iS9wUewWoV3WM2E0kE2w==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 570075675953459325e00b7bcd171df2.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 21:47:00 GMT
age: 57948
etag: "05648eed6830a794aa7e30ba4da526ed4c45b0ca"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1.bp.blogspot.com/-ehNKWsZ0pXo/TXjylr7s9kI/AAAAAAAACyA/tQ8Dp4FtXCY/s1600/sidebaratas.png
142.250.74.161200 OK 28 kB URL HTTP/1.1 1.bp.blogspot.com/-ehNKWsZ0pXo/TXjylr7s9kI/AAAAAAAACyA/tQ8Dp4FtXCY/s1600/sidebaratas.png
IP 142.250.74.161:0
File type PNG image data, 250 x 184, 8-bit/color RGBA, non-interlaced\012- data
Hash 758964dcf03131bc17ac19fd86e5e475
07bd5ea895046b3b08e79862b85b6314b8e97e2e
b01245903a92a36ebb5b737f2200b2e398c2685139aedd2ac58649ee52bf9fda
GET /-ehNKWsZ0pXo/TXjylr7s9kI/AAAAAAAACyA/tQ8Dp4FtXCY/s1600/sidebaratas.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb20"
Expires: Mon, 30 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="sidebaratas.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:48 GMT
Server: fife
Content-Length: 28310
X-XSS-Protection: 0
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
34.120.237.76200 OK 9.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 3be81f83687ddb6c93d3ff3c09a9dba2
50a48e737310d3f31840db4301b25927fbcc12c5
e78c909e2381898e7f546183784a05dff47c31734c95358aaada8c2777ad47be
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd9a423a9-16ee-4e3f-b9b4-34f6a469aba9.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9167
x-amzn-requestid: f644ca78-a07a-43d1-96e4-95bcdecff7fb
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fPGLfFtOIAMFp7w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cf83e2-202ca7160544acd24259bd5d;Sampled=0
x-amzn-remapped-date: Tue, 24 Jan 2023 07:08:18 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: xRwqrWS66l4qJfg2HnGphN1dbrIUod9XKW3zTk_-Km9AQRPyV2UqWg==
via: 1.1 2dc111aa3ead15d061e41a423155a53a.cloudfront.net (CloudFront), 1.1 5565a51537c689d1d16f6b4d41f40082.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 20:46:16 GMT
age: 61592
etag: "50a48e737310d3f31840db4301b25927fbcc12c5"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
1.bp.blogspot.com/_WIwdcrPxswM/SjCETAlKgPI/AAAAAAAABtM/exv7FHx1IJo/S163/award2.jpg
142.250.74.161200 OK 19 kB URL HTTP/1.1 1.bp.blogspot.com/_WIwdcrPxswM/SjCETAlKgPI/AAAAAAAABtM/exv7FHx1IJo/S163/award2.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 163x163, components 3\012- data
Hash 8c728053e349ba7dcf2fc0165edad842
7ed521ef6956f743eddb9ac03320ff1ac51cb4ad
2ce9d26ecbde979c3ab4d581c38d1335738e3a8c3a06111caa2afb5e78a82007
GET /_WIwdcrPxswM/SjCETAlKgPI/AAAAAAAABtM/exv7FHx1IJo/S163/award2.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v6d3"
Expires: Mon, 30 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="award2.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:48 GMT
Server: fife
Content-Length: 18959
X-XSS-Protection: 0
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
34.120.237.76200 OK 12 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 10a6491e2c1dfde68c7cd7297e70700f
d0f195319825a6d3e5e50ad15b2fcab27cb65896
4d9353d5874e5ea03c25e1562db5f479c222a48db526fdd10ede7c2e6a4dd874
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fce27f1aa-8d31-4110-a47f-73de0b95926d.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 11470
x-amzn-requestid: 62d61967-9380-4ca9-b11a-531425dbd2ae
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fIf6WFgAIAMF6gw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cce042-6d9fe51029094b7f37c0a648;Sampled=0
x-amzn-remapped-date: Sun, 22 Jan 2023 07:05:38 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: rUIvvkZQ028ey3klplI-x9oZFugon5HsAWT-SN2GQo5hBeBJWqoMAg==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 fda3b2797d2719576f6b916583a28e52.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 04:01:15 GMT
age: 35493
etag: "d0f195319825a6d3e5e50ad15b2fcab27cb65896"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
162.125.71.15404 Not Found 4.2 kB URL HTTP/2 dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
IP 162.125.71.15:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (23665)
Hash 801b47c9960e081635bbe4b2ee06ede6
14db3f945916ca542ecf53f51811cfae5a1c7846
c240a503355bd56574e6451b83aa999161862ca6c4b4a6416f0bc1676d80e810
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontsuhanna/blogger-sifr.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 29 Jan 2023 13:52:47 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: bb573960ab22480d8aeba8482688bc0f
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
34.120.237.76200 OK 5.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 4c77437e3a7361861aed8bfecbfe6bd6
fefd238c13c0fdfb7d964c90fcc8a8cbbf953034
282d15c443cb6232ae0a30046a0dc24360617355a4651cdba59b11e6f7313d8a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F8d4cfe7c-2bbe-4efd-b73a-59ea603c332f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5594
x-amzn-requestid: d56c9b84-dc1f-4d5c-91bf-7db55058bf67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fLyeEGOloAMFpzA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63ce3126-5013a6b971d6800c5c85a4eb;Sampled=0
x-amzn-remapped-date: Mon, 23 Jan 2023 07:03:02 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: uPJu2SzvWcfqukF9t0PKG5iK7LrTnk1Cn5nioD4MklQgDAZnbiH8Gw==
via: 1.1 446313511980eb02f28ff5a9a4147c0a.cloudfront.net (CloudFront), 1.1 d8792dbd3191bbe722eba5b536b979c8.cloudfront.net (CloudFront), 1.1 google
date: Sat, 28 Jan 2023 14:55:48 GMT
age: 82620
etag: "fefd238c13c0fdfb7d964c90fcc8a8cbbf953034"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
162.125.71.15404 Not Found 8.7 kB URL HTTP/2 dl.dropbox.com/u/8296860/fontsuhanna/blogger-sifr.js
IP 162.125.71.15:0
Hash 2fda8ae72db74c10ac825c867dcb7877
c84a387cfa52bf93685370c90b213cccdd2cc247
7d32c92c3c0dff98f941f03dc911ce2eb296ce3a61ac649352cd308abdc0b393
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontsuhanna/blogger-sifr.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 29 Jan 2023 13:52:47 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 6c948c335e2044ec8c87d63450ae8159
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash d5ed99a9aed6f367efc5c9498ce87ff1
3123eb6f550c51fe17fc62eff943b3739e239a9b
536f45bf2eb41f7056df8b34964538005d6a0a4c6157def3fbdd9487f8c79027
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F5dcfee7f-f43c-4828-8113-8ba8eb26f727.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10168
x-amzn-requestid: fe58fe3c-dd23-4614-b5a2-e91ef68c2ab7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: fFOD7H-NIAMFcxw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63cb907f-687fc51741d7ff97182d1955;Sampled=0
x-amzn-remapped-date: Sat, 21 Jan 2023 07:13:03 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: SORDxKQP-GudaCfRIbrmexyEeJXBExRipfF8sPHI-UkaYhR_RkDjvQ==
via: 1.1 8dbfaf7df256a75768461d934659b6b2.cloudfront.net (CloudFront), 1.1 325ed3ba58a560748d886354beef39c0.cloudfront.net (CloudFront), 1.1 google
date: Sun, 29 Jan 2023 00:55:27 GMT
age: 46641
etag: "3123eb6f550c51fe17fc62eff943b3739e239a9b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
4.bp.blogspot.com/--zciG0VSCtk/TXjylSQQiII/AAAAAAAACx4/WzAf38Oh7U4/s1600/header.png
142.250.74.161200 OK 346 kB URL HTTP/1.1 4.bp.blogspot.com/--zciG0VSCtk/TXjylSQQiII/AAAAAAAACx4/WzAf38Oh7U4/s1600/header.png
IP 142.250.74.161:0
File type PNG image data, 1060 x 460, 8-bit/color RGB, non-interlaced\012- data
Size 346 kB (345866 bytes)
Hash 703bf75430bcf1ff1128e2e72e1dd626
c3a4efa6f8ca9c319e64b3caf2c1185d4fc4bcac
b21b9c9d379cf68f39be24008859b2a6162bc8ab84882b60b9e5a2c0c192a3e5
GET /--zciG0VSCtk/TXjylSQQiII/AAAAAAAACx4/WzAf38Oh7U4/s1600/header.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb1e"
Expires: Mon, 30 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="header.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:48 GMT
Server: fife
Content-Length: 345866
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash bc7c4f207ec97cacb1eedd94d2f6b371
5f0948a39435ace8bacc4ac5fb3df19045908e42
bfb24fe4a1cb45a068b0a6432b03c20d00ea178aabea23498f2d1f0273bf6e1b
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-UtioMBZFaWI/TXj9PqdzmLI/AAAAAAAACyY/SOlqL5_bxtc/s1600/footer.png
142.250.74.161200 OK 121 kB URL HTTP/1.1 4.bp.blogspot.com/-UtioMBZFaWI/TXj9PqdzmLI/AAAAAAAACyY/SOlqL5_bxtc/s1600/footer.png
IP 142.250.74.161:0
File type PNG image data, 1280 x 300, 8-bit/color RGB, non-interlaced\012- data
Size 121 kB (121230 bytes)
Hash 31275aae12f6d9e1ed1e2821252bebd5
85f826f0e521c748f242ecf1f795b96ce775c618
7ad2895c8b6e80f29f2883ea04b5b91f235803f73c3bea9231d82220564d7e78
GET /-UtioMBZFaWI/TXj9PqdzmLI/AAAAAAAACyY/SOlqL5_bxtc/s1600/footer.png HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb26"
Expires: Mon, 30 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="footer.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:48 GMT
Server: fife
Content-Length: 121230
X-XSS-Protection: 0
www.mainmusik.com/mp3/playlist_player.swf
104.164.250.119200 OK 785 B URL HTTP/1.1 www.mainmusik.com/mp3/playlist_player.swf
IP 104.164.250.119:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ISO-8859 text, with CRLF line terminators
Hash 00cc2386d0a9113ece6e1a8d6628c05f
1c926d9c0cd5f5f93c9f42c2f948e7b99fc08d96
46ec52241d2e859e25f899b99c4c1ae02fa3559b948722586cf28fcd31047e06
GET /mp3/playlist_player.swf HTTP/1.1
Host: www.mainmusik.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Sun, 29 Jan 2023 13:52:46 GMT
Content-Type: text/html
Content-Length: 785
Connection: keep-alive
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 471 B IP 142.250.74.131:0
Hash 631ea0b9b4e3085e98b5c5498a4c9047
ec9f6e457fdd72390b9843f217821dff325c80f8
27c2771693d65c03977ca230c70271d4105cac00b7cf855d968473c6a9eec39f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
142.250.74.109302 Found 488 B URL HTTP/2 accounts.google.com/ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true
IP 142.250.74.109:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document, ASCII text, with very long lines (533)
Hash c4c8bb9c00c2bfe37c317eda7af7ba1e
fa97f95d879435b60b92d3fea6812a57eb2366e6
c38f226171f1c8142c6149938af7d4f49b7830953d9fef728115234eb1a2cd4f
GET /ServiceLogin?passive=true&continue=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&followup=https://www.blogger.com/followers.g?blogID%3D1314923861280433423%26colors%3DCgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50%26pageSize%3D21%26postID%3D4238178967430494004%26origin%3Dhttp://diamilikku.blogspot.com/%26usegapi%3D1%26jsh%3Dm;/_/scs/abc-static/_/js/k%253Dgapi.lb.en.AMZ27oQJoUI.O/d%253D1/rs%253DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g/m%253D__features__%26bpli%3D1&go=true HTTP/1.1
Host: accounts.google.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=UTF-8
x-frame-options: DENY
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Sun, 29 Jan 2023 13:52:48 GMT
location: https://www.blogger.com/followers.g?blogID=1314923861280433423&colors=Cgt0cmFuc3BhcmVudBILdHJhbnNwYXJlbnQaByNiZDA2ZjkiByM3ODA3YzEqByNmZmZmZmYyByNmYjU2YWY6ByNiZDA2ZjlCByM3ODA3YzFKByNmZmZmZmZSByM3ODA3YzFaC3RyYW5zcGFyZW50&pageSize=21&postID=4238178967430494004&origin=http%3A%2F%2Fdiamilikku.blogspot.com%2F&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.AMZ27oQJoUI.O%2Fd%3D1%2Frs%3DAHpOoo9dsXwz2g0gTMdQFEKa7ZoVvtQf4g%2Fm%3D__features__&bpli=1
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-opener-policy-report-only: same-origin; report-to="coop_gse_qebhlk"
content-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-TxSqu59zHQV6q2tlVjPQEA' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport
report-to: {"group":"coop_gse_qebhlk","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gse_qebhlk"}]}
content-encoding: gzip
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-length: 488
server: GSE
set-cookie: __Host-GAPS=1:miFMEOE0ZP5X5wZS2h6O-S1ouv9oeQ:aGfowQZ12XzhQyI5;Path=/;Expires=Tue, 28-Jan-2025 13:52:48 GMT;Secure;HttpOnly;Priority=HIGH
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
badge.facebook.com/badge/1066438553.667.807829563.png
157.240.205.1301 Moved Permanently 0 B URL HTTP/1.1 badge.facebook.com/badge/1066438553.667.807829563.png
IP 157.240.205.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /badge/1066438553.667.807829563.png HTTP/1.1
Host: badge.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 301 Moved Permanently
Location: https://badge.facebook.com/badge/1066438553.667.807829563.png
Content-Type: text/plain
Server: proxygen-bolt
Date: Sun, 29 Jan 2023 13:52:48 GMT
Connection: keep-alive
Content-Length: 0
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7078b1d21bbac26012d93fc9501fbbb0
412189ffa7980709edc28b87a820aa1ae64fa3a7
6db1d0d3f3924d7e75e1fd087553cf4ec5fa938ecc52adf3f149570551eaf7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4226
Cache-Control: max-age=104461
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Etag: "63d55ebb-1d7"
Expires: Mon, 30 Jan 2023 18:53:49 GMT
Last-Modified: Sat, 28 Jan 2023 17:43:23 GMT
Server: ECS (ska/F715)
X-Cache: HIT
Content-Length: 471
whos.amung.us/pingjs/?k=bfn0xz4os4ij&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&c=u&x=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&y=&a=-1&d=2.085&v=27&r=1544
104.22.74.171200 OK 51 B URL HTTP/1.1 whos.amung.us/pingjs/?k=bfn0xz4os4ij&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&c=u&x=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&y=&a=-1&d=2.085&v=27&r=1544
IP 104.22.74.171:0
File type ASCII text, with no line terminators
Hash d95a9b27c595f71518f7b79ee7d8b480
4ff897ce874cd6f1b9757e699ec76c6d0ff710d5
7bd0ac2614f8c1a36b00aa2baeaa2a7634c890f35eb134565eac03ac30f9ed1c
GET /pingjs/?k=bfn0xz4os4ij&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&c=u&x=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&y=&a=-1&d=2.085&v=27&r=1544 HTTP/1.1
Host: whos.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:48 GMT
Content-Type: text/javascript;charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
content-encoding: gzip
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7912734ecd1c09a8-ARN
badge.facebook.com/badge/1066438553.667.807829563.png
157.240.205.1302 Found 0 B URL HTTP/2 badge.facebook.com/badge/1066438553.667.807829563.png
IP 157.240.205.1:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /badge/1066438553.667.807829563.png HTTP/1.1
Host: badge.facebook.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
location: https://static.xx.fbcdn.net/rsrc.php/v3/y4/r/Hn3hZ7_eVoc.png
x-fb-rlafr: 0
content-security-policy-report-only: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
content-security-policy: default-src data: blob: 'self' https://*.fbsbx.com 'unsafe-inline' *.facebook.com 'unsafe-eval' *.fbcdn.net;script-src *.facebook.com *.fbcdn.net 'unsafe-inline' 'unsafe-eval' blob: data: 'self';style-src *.fbcdn.net data: *.facebook.com 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net wss://*.facebook.com:* wss://*.fbcdn.net attachment.fbsbx.com blob: *.cdninstagram.com 'self' http://localhost:3103 wss://gateway.facebook.com wss://edge-chat.facebook.com wss://snaptu-d.facebook.com wss://kaios-d.facebook.com/ *.fbsbx.com;font-src data: *.facebook.com *.fbcdn.net *.fbsbx.com;img-src *.fbcdn.net *.facebook.com data: https://*.fbsbx.com facebook.com *.cdninstagram.com fbsbx.com fbcdn.net blob: android-webview-video-poster: *.oculuscdn.com;media-src *.cdninstagram.com blob: *.fbcdn.net *.fbsbx.com www.facebook.com *.facebook.com data:;frame-src *.facebook.com *.fbsbx.com fbsbx.com data: *.fbcdn.net;worker-src blob: *.facebook.com data:;block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.facebook.com/csp/reporting/?m=c&minimize=0;
document-policy: force-load-at-top
cross-origin-opener-policy: same-origin-allow-popups
pragma: no-cache
cache-control: private, no-cache, no-store, must-revalidate
expires: Sat, 01 Jan 2000 00:00:00 GMT
x-content-type-options: nosniff
x-xss-protection: 0
x-frame-options: DENY
strict-transport-security: max-age=15552000; preload
content-type: text/html; charset="utf-8"
x-fb-debug: OqHVC785yStTwxXb4Efy6BBvxt0ZpEt/P8QLpYI/gMgFNHmf7TUzIZEs9VF2fSE/HBIZ/4QJUgs/6m01war5uQ==
content-length: 0
date: Sun, 29 Jan 2023 13:52:48 GMT
priority: u=3,i
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 7078b1d21bbac26012d93fc9501fbbb0
412189ffa7980709edc28b87a820aa1ae64fa3a7
6db1d0d3f3924d7e75e1fd087553cf4ec5fa938ecc52adf3f149570551eaf7f3
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 4119
Cache-Control: max-age=104354
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Etag: "63d55ebb-1d7"
Expires: Mon, 30 Jan 2023 18:52:02 GMT
Last-Modified: Sat, 28 Jan 2023 17:43:23 GMT
Server: ECS (ska/F71B)
X-Cache: HIT
Content-Length: 471
diamilikku.blogspot.com/favicon.ico
172.217.21.161200 OK 412 B URL HTTP/1.1 diamilikku.blogspot.com/favicon.ico
IP 172.217.21.161:0
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: diamilikku.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/2018/03/why-flirting.html
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Sun, 29 Jan 2023 13:52:48 GMT
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: private, max-age=86400
Last-Modified: Mon, 05 Dec 2022 13:02:09 GMT
ETag: W/"d335dcb1b72f3ad1fd28bc8b5c9fb6de1b7db5c2a51ff6c1777296a4639275eb"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
static.xx.fbcdn.net/rsrc.php/v3/y4/r/Hn3hZ7_eVoc.png
157.240.205.11200 OK 593 B URL HTTP/2 static.xx.fbcdn.net/rsrc.php/v3/y4/r/Hn3hZ7_eVoc.png
IP 157.240.205.11:0
File type PNG image data, 32 x 32, 8-bit colormap, non-interlaced\012- data
Hash 8d968697fbab95c8dbc489a9d78103b8
9f1c5a32ca92a9a5cd41e97b6bb86fd0d6d10160
cf310a186e16b018cd0c9b94e7821d814aa87dbb69cf027aa662ccdcc000e509
GET /rsrc.php/v3/y4/r/Hn3hZ7_eVoc.png HTTP/1.1
Host: static.xx.fbcdn.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: image/png
access-control-allow-origin: *
last-modified: Mon, 01 Jan 2001 08:00:00 GMT
content-md5: jZaGl/urlcjbxImp14EDuA==
expires: Fri, 19 Jan 2024 04:00:28 GMT
cache-control: public,max-age=31536000,immutable
x-fb-rlafr: 0
document-policy: force-load-at-top
cross-origin-resource-policy: cross-origin
x-content-type-options: nosniff
timing-allow-origin: *
origin-agent-cluster: ?0
x-fb-debug: s5cPuC5Hjhu3fg1c/C02JvCNoURHPsKL5bETYYMn1U8+fXqGJFGNBjH4Y+Q/RR1WapfRMAs0UFx8NcsCfFuCWg==
content-length: 593
x-fb-trip-id: 1679558926
date: Sun, 29 Jan 2023 13:52:48 GMT
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
1.bp.blogspot.com/-ciIJyXAnVMc/TXjylGxi6dI/AAAAAAAACxw/bEHd2vmQURg/s1600/bgback.png
142.250.74.161200 OK 656 kB URL HTTP/1.1 1.bp.blogspot.com/-ciIJyXAnVMc/TXjylGxi6dI/AAAAAAAACxw/bEHd2vmQURg/s1600/bgback.png
IP 142.250.74.161:0
File type PNG image data, 1280 x 840, 8-bit/color RGB, non-interlaced\012- data
Size 656 kB (656270 bytes)
Hash 183ac639a2568a863904f0a0a68d5304
9165953b1e49e6c91003dd1036da21da2d220aa2
39e8fb992e8615f7e0207e2b0100a9c3fc731ac20e72bf41bd84d9190dcc1497
GET /-ciIJyXAnVMc/TXjylGxi6dI/AAAAAAAACxw/bEHd2vmQURg/s1600/bgback.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb1c"
Expires: Mon, 30 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="bgback.png"
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Sun, 29 Jan 2023 13:52:48 GMT
Server: fife
Content-Length: 656270
X-XSS-Protection: 0
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1fb140379b11bb1a8952e94aaa28cf7
b2e8903140d9c9eecc30da31697576c829d5a1f9
0d0a8e4c4eecc262f407b246dc349f616a62e85a6e5dc0ae6fb30033cb321775
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1fb140379b11bb1a8952e94aaa28cf7
b2e8903140d9c9eecc30da31697576c829d5a1f9
0d0a8e4c4eecc262f407b246dc349f616a62e85a6e5dc0ae6fb30033cb321775
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1fb140379b11bb1a8952e94aaa28cf7
b2e8903140d9c9eecc30da31697576c829d5a1f9
0d0a8e4c4eecc262f407b246dc349f616a62e85a6e5dc0ae6fb30033cb321775
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1fb140379b11bb1a8952e94aaa28cf7
b2e8903140d9c9eecc30da31697576c829d5a1f9
0d0a8e4c4eecc262f407b246dc349f616a62e85a6e5dc0ae6fb30033cb321775
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
4.bp.blogspot.com/-b_uHBsdMRS8/WUdbYPjq6GI/AAAAAAAAl_U/AZvrmmKMma4JqZ4gT_JX8-b_5RbXJ65lgCK4BGAYYCw/s45-c/al-lavendari.jpg
142.250.74.161200 OK 1.8 kB URL HTTP/2 4.bp.blogspot.com/-b_uHBsdMRS8/WUdbYPjq6GI/AAAAAAAAl_U/AZvrmmKMma4JqZ4gT_JX8-b_5RbXJ65lgCK4BGAYYCw/s45-c/al-lavendari.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 50b23ac4a8092b0135116b47324e3275
85eae64e0d154ac5b186238480e7b7652cadfdd1
263cc1e57f905d571eab6709610986440cae95110fba6486399e0a7e4e05d210
GET /-b_uHBsdMRS8/WUdbYPjq6GI/AAAAAAAAl_U/AZvrmmKMma4JqZ4gT_JX8-b_5RbXJ65lgCK4BGAYYCw/s45-c/al-lavendari.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v97f6"
expires: Mon, 30 Jan 2023 13:52:48 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="al-lavendari.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:48 GMT
server: fife
content-length: 1848
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-nFzW5csmZAo/VRoXETjaTYI/AAAAAAAAFwk/lHplFplwun4/s45-c/*
142.250.74.161200 OK 1.5 kB URL HTTP/2 4.bp.blogspot.com/-nFzW5csmZAo/VRoXETjaTYI/AAAAAAAAFwk/lHplFplwun4/s45-c/*
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 1bdffdc652fc01167df71ba4a8490500
becef1b6a56bebb484483556d737e1e217071ba1
0152044164d63cc60386b8f5ba27000538df4ee0ead5b356a8951c341ef03c96
GET /-nFzW5csmZAo/VRoXETjaTYI/AAAAAAAAFwk/lHplFplwun4/s45-c/* HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="*.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1483
x-xss-protection: 0
date: Sun, 29 Jan 2023 13:52:48 GMT
expires: Wed, 25 Jan 2023 23:44:29 GMT
cache-control: public, max-age=86400, no-transform
etag: "v170a"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
2.bp.blogspot.com/_5RPeDxzYin8/TUg_XM5_4uI/AAAAAAAAAAs/QNFoR3w4kno/s45-c/11.jpg
142.250.74.161200 OK 1.7 kB URL HTTP/2 2.bp.blogspot.com/_5RPeDxzYin8/TUg_XM5_4uI/AAAAAAAAAAs/QNFoR3w4kno/s45-c/11.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash d8d9425f408818dd43419c69ff49b390
1d37c8c40fa3111abda63ecac3d7399672888c9d
715df6b179edde1f0bfc52274b09b1a4c0370ccb62d80bef9598c34a48f9fd03
GET /_5RPeDxzYin8/TUg_XM5_4uI/AAAAAAAAAAs/QNFoR3w4kno/s45-c/11.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="11.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 1738
x-xss-protection: 0
date: Sun, 29 Jan 2023 13:52:48 GMT
expires: Sun, 29 Jan 2023 05:50:29 GMT
cache-control: public, max-age=86400, no-transform
etag: "vb"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/_4GjqqdOEf1A/TPyGNhdrZaI/AAAAAAAAAWw/htjWwa8g7HU/S45-s45-c/20111125_002%25252Bcopy.jpg
142.250.74.161200 OK 2.0 kB URL HTTP/2 4.bp.blogspot.com/_4GjqqdOEf1A/TPyGNhdrZaI/AAAAAAAAAWw/htjWwa8g7HU/S45-s45-c/20111125_002%25252Bcopy.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash fffb2a3773da2fc4d4c541b7039ade0c
dc1bc216c59b0b9e16ef561f33624cf9bfa08cb0
20b4cfb788eba5bcf935abe5350a08c1a51a7fc976b563cfbcba0c8c11e0c995
GET /_4GjqqdOEf1A/TPyGNhdrZaI/AAAAAAAAAWw/htjWwa8g7HU/S45-s45-c/20111125_002%25252Bcopy.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v16c"
expires: Mon, 30 Jan 2023 13:52:48 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="20111125_002%2Bcopy.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:48 GMT
server: fife
content-length: 1976
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
widgets.amung.us/colwid/?c=2e3192000000
104.22.74.171200 OK 3.4 kB URL HTTP/1.1 widgets.amung.us/colwid/?c=2e3192000000
IP 104.22.74.171:0
File type PNG image data, 116 x 57, 8-bit/color RGBA, non-interlaced\012- data
Hash f9fddf0fc40d28cc8bf9b5a88695c3f4
228403843bedfbbf21e2edd859e51fd5cae934c2
fd575bfaab9a5ccf56e1c54d6cb67fae3fa056c85bf354a5cc21d3e4ee4fb226
GET /colwid/?c=2e3192000000 HTTP/1.1
Host: widgets.amung.us
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:48 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
content-disposition: filename=wau-widget.png
expires: Mon, 30 Jan 2023 13:52:48 GMT
cache-control: max-age=2678400
access-control-allow-origin: *
CF-Cache-Status: MISS
Last-Modified: Sun, 29 Jan 2023 13:52:48 GMT
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 791273504d422e06-ARN
ocsp.pki.goog/gts1c3
142.250.74.131200 OK 472 B IP 142.250.74.131:0
Hash f1fb140379b11bb1a8952e94aaa28cf7
b2e8903140d9c9eecc30da31697576c829d5a1f9
0d0a8e4c4eecc262f407b246dc349f616a62e85a6e5dc0ae6fb30033cb321775
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Sun, 29 Jan 2023 13:52:48 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
dl.dropbox.com/u/8296860/fontaziah/sifr.css
162.125.71.15404 Not Found 8.8 kB URL HTTP/2 dl.dropbox.com/u/8296860/fontaziah/sifr.css
IP 162.125.71.15:0
Hash fdeba851382acaf9d3b4516291ac8589
e654a8b9368a8f3b908b5f7aad7e1da301658ee7
defae0fe93b75feba67adba042f013751d1b05dadb65b8d61abe6fa8830c5aaa
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontaziah/sifr.css HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 29 Jan 2023 13:52:46 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 04fea70041ed4f00b211ccc5acf691da
X-Firefox-Spdy: h2
3.bp.blogspot.com/-t9dbtfcBlcQ/TX3FhvQFHVI/AAAAAAAAAAw/fOgHD2lx-YM/s45-c/DSC02163.JPG
142.250.74.161200 OK 2.0 kB URL HTTP/2 3.bp.blogspot.com/-t9dbtfcBlcQ/TX3FhvQFHVI/AAAAAAAAAAw/fOgHD2lx-YM/s45-c/DSC02163.JPG
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash d48736524186a82cee37720f6ff341ec
b594e724a31bd25539e06e7acd82e6e77d81e54f
546aa7db157b6bf000eb90dd30fa7198130ef7a559704707115c2a1c61966cc7
GET /-t9dbtfcBlcQ/TX3FhvQFHVI/AAAAAAAAAAw/fOgHD2lx-YM/s45-c/DSC02163.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "vc"
expires: Mon, 30 Jan 2023 13:52:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="DSC02163.JPG"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:49 GMT
server: fife
content-length: 2015
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 7a216b4cdc1c95c59f5463b19f22b873
5aa561794c0e05c475bef80e5e6270b4d7da29fc
8c3ae8bd5d76089e1a403ec1fb1cba3c74e581063c0f6c007302aa2b4039b095
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Sun, 29 Jan 2023 13:52:49 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Sun, 29 Jan 2023 11:33:40 GMT
Expires: Sun, 05 Feb 2023 11:33:39 GMT
Etag: "5aa561794c0e05c475bef80e5e6270b4d7da29fc"
Cache-Control: max-age=595849,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 791273505bf51c16-OSL
4.bp.blogspot.com/-xarSrN_CMVA/V7PGToS4U3I/AAAAAAAABt4/6m4qraY_-CA5TbjeJQGWG8vQrw5X9UYHACK4B/s45-c/frog.jpg
142.250.74.161200 OK 2.2 kB URL HTTP/2 4.bp.blogspot.com/-xarSrN_CMVA/V7PGToS4U3I/AAAAAAAABt4/6m4qraY_-CA5TbjeJQGWG8vQrw5X9UYHACK4B/s45-c/frog.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 4a543f5a39ce50a4ab3bb0f5c2b14662
ccb7ac8db66319959d05641e7600d4fb96b0c27f
c540d9bc8da73f39f303115811e3d2c8bba1919d8f5e877fd7ae34675000c3f1
GET /-xarSrN_CMVA/V7PGToS4U3I/AAAAAAAABt4/6m4qraY_-CA5TbjeJQGWG8vQrw5X9UYHACK4B/s45-c/frog.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="frog.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 2229
x-xss-protection: 0
date: Sun, 29 Jan 2023 13:52:49 GMT
expires: Wed, 25 Jan 2023 18:37:16 GMT
cache-control: public, max-age=86400, no-transform
etag: "v6df"
content-type: image/jpeg
age: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
3.bp.blogspot.com/-KGlLkYSKrds/TexPja97v0I/AAAAAAAAAHc/_avfkdBITMU/s45-c/_DSC9581%25252B-%25252BSmall.JPG
142.250.74.161200 OK 2.2 kB URL HTTP/2 3.bp.blogspot.com/-KGlLkYSKrds/TexPja97v0I/AAAAAAAAAHc/_avfkdBITMU/s45-c/_DSC9581%25252B-%25252BSmall.JPG
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash 6bc46df920aaadbc70907d9eb38de146
3c8a5df58cdaa72ec3fa6117f8dd14a66b8ba905
502e5861f9487ee0cc9004d41919bfb8c6ff3d3be010cf87e3c095f3f558825c
GET /-KGlLkYSKrds/TexPja97v0I/AAAAAAAAAHc/_avfkdBITMU/s45-c/_DSC9581%25252B-%25252BSmall.JPG HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v77"
expires: Mon, 30 Jan 2023 13:52:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="_DSC9581%2B-%2BSmall.JPG"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:49 GMT
server: fife
content-length: 2236
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
4.bp.blogspot.com/-YfXhbPRBR8s/TmTqaIGxU1I/AAAAAAAAAOA/P58aBzTVshc/s45-c/DSC00274.jpg
142.250.74.161200 OK 1.7 kB URL HTTP/2 4.bp.blogspot.com/-YfXhbPRBR8s/TmTqaIGxU1I/AAAAAAAAAOA/P58aBzTVshc/s45-c/DSC00274.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 45x45, components 3\012- data
Hash e155b149aab7ee1eadb629bcd1306ce5
0e95d10508d1db241a2d44f24feaaaa801547b23
8492ce1e07a755d420440b1f885ed74df2db46ec2bad59cd66f27dbaf87d6f58
GET /-YfXhbPRBR8s/TmTqaIGxU1I/AAAAAAAAAOA/P58aBzTVshc/s45-c/DSC00274.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.blogger.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "ve0"
expires: Mon, 30 Jan 2023 13:52:49 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="DSC00274.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Sun, 29 Jan 2023 13:52:49 GMT
server: fife
content-length: 1688
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 29 Jan 2023 13:52:49 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F&t=Biarkan%20Aku%20Dengan%20Duniaku%3A%20WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 29 Jan 2023 13:52:49 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
de.tynt.com/deb/v2?id=w!bfn0xz4os4ij&dn=TC&cc=1&r=&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html
67.202.105.33200 OK 4 B URL HTTP/2 de.tynt.com/deb/v2?id=w!bfn0xz4os4ij&dn=TC&cc=1&r=&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html
IP 67.202.105.33:0
File type ASCII text, with no line terminators
Hash 350fd6ef6446635f7a8f608434a405ec
a4b6c275ac2c80ec925b5c0c5c6abb79ba897356
d21021784cda31eeae5c8295e047a14bda6ed5a9b5963fca9e7ceb398a9c9179
GET /deb/v2?id=w!bfn0xz4os4ij&dn=TC&cc=1&r=&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html HTTP/1.1
Host: de.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
cache-control: max-age=86400
expires: Mon, 30 Jan 2023 13:52:49 GMT
accept-ch: Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-type: application/javascript
content-length: 4
date: Sun, 29 Jan 2023 13:52:48 GMT
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 29 Jan 2023 13:52:49 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&ct=WHY%20F.L.I.R.T.I.N.G%20%3F%3F%3F%3F%3F HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 29 Jan 2023 13:52:49 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html
67.202.105.33204 No Content 0 B URL HTTP/2 ic.tynt.com/b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html
IP 67.202.105.33:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /b/p?id=w!bfn0xz4os4ij&lm=0&ts=1675000376820&dn=TC&iso=0&pu=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html HTTP/1.1
Host: ic.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 204 No Content
server: nginx/1.16.1
date: Sun, 29 Jan 2023 13:52:50 GMT
cache-control: "no-store, no-cache, must-revalidate, post-check=0, pre-check=0, false"
expires: "Sat, 26 Jul 1997 05:00:00 GMT"
p3p: CP="NOI DSP COR NID PSA PSD OUR IND UNI COM NAV INT DEM STA"
X-Firefox-Spdy: h2
cdn.tynt.com/tc.js
172.64.151.83200 OK 7.1 kB IP 172.64.151.83:0
Hash 2d832227a1adc4f60b483071a22536d0
f976b82888e8696c1959e9a56c32833fc5b4467d
5f6a5f862c21d736893b97d68c15484ca8c7073a4378a57a097c2f1521addc2b
GET /tc.js HTTP/1.1
Host: cdn.tynt.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 13:52:49 GMT
content-type: application/javascript
last-modified: Tue, 10 Jan 2023 20:39:09 GMT
vary: Accept-Encoding
etag: W/"63bdcced-4571"
content-encoding: gzip
cf-cache-status: HIT
age: 118060
expires: Wed, 01 Feb 2023 13:52:49 GMT
cache-control: public, max-age=259200
server: cloudflare
cf-ray: 79127353ca95b4f9-OSL
X-Firefox-Spdy: h2
dl.dropbox.com/u/8296860/fontaziah/sifr.js
162.125.71.15404 Not Found 0 B URL HTTP/2 dl.dropbox.com/u/8296860/fontaziah/sifr.js
IP 162.125.71.15:0
NIDS Severity Alert suricata high ETPRO POLICY dl.dropbox Download
GET /u/8296860/fontaziah/sifr.js HTTP/1.1
Host: dl.dropbox.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: http://diamilikku.blogspot.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 404 Not Found
content-type: text/html
date: Sun, 29 Jan 2023 13:52:46 GMT
server: envoy
strict-transport-security: max-age=31536000; includeSubDomains; preload
x-robots-tag: noindex, nofollow, noimageindex
content-encoding: gzip
vary: Accept-Encoding
x-dropbox-response-origin: remote
x-dropbox-request-id: 924a28fe6aad413ebc07baeec3adc7c0
X-Firefox-Spdy: h2
t.dtscout.com/i/?l=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&j=
141.101.120.10200 OK 0 B URL HTTP/2 t.dtscout.com/i/?l=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&j=
IP 141.101.120.10:0
GET /i/?l=http%3A%2F%2Fdiamilikku.blogspot.com%2F2018%2F03%2Fwhy-flirting.html&j= HTTP/1.1
Host: t.dtscout.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://diamilikku.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Sun, 29 Jan 2023 13:52:48 GMT
content-type: application/javascript
x-s: mtl3
set-cookie: m=1; Domain=dtscout.com; Expires=Sun, 29-Jan-2023 15:16:07 GMT; Max-Age=5000; Path=/; SameSite=None; Secure
oa=1; Domain=dtscout.com; Expires=Sun, 29-Jan-2023 17:52:47 GMT; Max-Age=14400; Path=/; SameSite=None; Secure
df=1675000367; Domain=dtscout.com; Expires=Tue, 09-May-2023 13:52:47 GMT; Max-Age=8640000; Path=/; SameSite=None; Secure
x-t: 0.568
expires: Sun, 29 Jan 2023 13:52:46 GMT
cache-control: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DK8d0IXuTLZpHrYIHUCkM4XN5asGgKB6U6lhMrWAs%2B002CE6tWFcJYJQx3HfE%2F%2BEuEUezhw9OaHzmceUaiKhE6L256oSAQBh9YLgePfphpNvKZC7Ts%2B%2B4w2lb4WnWzw%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7912734ad8c50d46-ARN
content-encoding: br
X-Firefox-Spdy: h2