firefox.settings.services.mozilla.com/v1/
143.204.55.35200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash 1b3053fa528e28810f8a2cc9284cc921
cca9eb471d941881a6b9a1793aecb6c281908f6a
a2427848ba35575dda8a82cf88f104978234c05389deebc3fc8279d9075eff45
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Alert, Content-Type, Backoff, Content-Length, Retry-After
Cache-Control: max-age=3600
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Thu, 29 Sep 2022 03:15:49 GMT
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: Z-ML6hIJXgUvaMrHeWSYMR6OBMBDLELx2fNsqXOm2JHO4m3j3iSUIw==
Age: 1194
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 6dd4587c98aef98ad0939030a6976a7f
92dc5966ac2deb0c3ac7fdd02bf8d28f9239801e
a382476d14b6ae14003333e7acdfbbd9ae8775d4c1a7d5c31116f33987043cff
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A382476D14B6AE14003333E7ACDFBBD9AE8775D4C1A7D5C31116F33987043CFF"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=12709
Expires: Thu, 29 Sep 2022 07:07:32 GMT
Date: Thu, 29 Sep 2022 03:35:43 GMT
Connection: keep-alive
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 6113f8408c59aebe188d6af273b90743
7398873bf00f99944eaa77ad3ebc0d43c23dba6b
b6e0cc9ad68306208a160f3835fb8da76acc5a82d8fde1da5a98e1de1c11a770
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-30-18-47-44.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 10 Sep 2022 18:47:45 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Wed, 28 Sep 2022 09:24:14 GMT
etag: "6113f8408c59aebe188d6af273b90743"
x-cache: Hit from cloudfront
via: 1.1 f00e3524edcdf61801454f2bb21e71ce.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: yBI_zoHFoOg0GCrH4ybQELBvruXZ0iZVSpEbd0B-WdCbPllRxZBu2g==
age: 79637
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 03:35:43 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.35200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.35:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600, max-age=3600
Date: Thu, 29 Sep 2022 03:29:33 GMT
Expires: Thu, 29 Sep 2022 03:36:29 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 aac54e3fe9825ce24d51e0204433c2c0.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: F9Sj0VDhlyT9Q1gSctzZGfS6RyvZwvTZwYVu1itrRsQkyeujLmD3Mw==
Age: 370
fonts.googleapis.com/css?family=Droid+Sans|BenchNine
216.58.211.10200 OK 387 B URL HTTP/1.1 fonts.googleapis.com/css?family=Droid+Sans|BenchNine
IP 216.58.211.10:0
Hash 8b6f85a2197a9a728afdd69caeab445c
585da1b7925202ea9e8ffc97d27bbca85cfa394a
336a6969fd14ae199beeada1a339cb913324bd397bd5c86eb77244a9fbda1d5b
GET /css?family=Droid+Sans|BenchNine HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Link: <http://fonts.gstatic.com>; rel=preconnect; crossorigin
Expires: Thu, 29 Sep 2022 03:35:43 GMT
Date: Thu, 29 Sep 2022 03:35:43 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash 3526d5ce1381ba26cbc553db057e1915
fe01c920696448e8bf12e6fff877bce8281d34a2
09604aed7cbca7971bfcb5afcb53591600b944f28eff21aa65dc601e78cdda53
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 981
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:43 GMT
Last-Modified: Thu, 29 Sep 2022 03:19:22 GMT
Server: ECS (ska/F714)
X-Cache: HIT
Content-Length: 471
macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
142.250.74.161200 OK 36 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 75bf438c75a1cf17973063b6e059bc31
f329ef7c1806ccfc319fbb4a0fee13cb6617bb10
ad00c46bd65e3ea31f2b89a5f8e8f208ef3e7b61e5ad87f6e6f2401989726a9b
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 29 Sep 2022 03:35:43 GMT
Date: Thu, 29 Sep 2022 03:35:43 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35507
Server: GSE
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:43 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
142.250.74.170200 OK 34 kB URL HTTP/2 ajax.googleapis.com/ajax/libs/jquery/1.8.3/jquery.min.js
IP 142.250.74.170:0
File type ASCII text, with very long lines (65483)
Hash a54a444f20643b131117dc2112cca05f
074964746b12ff1d30f7656310d6154ae1cc98b5
aa3ca8485dd777d4d880b38c1cf3bc2fc290d28a79ba3e3e43cba1f653132830
GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1
Host: ajax.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="hosted-libraries-pushers"
report-to: {"group":"hosted-libraries-pushers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers"}]}
timing-allow-origin: *
content-length: 33593
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 06:15:30 GMT
expires: Sun, 24 Sep 2023 06:15:30 GMT
cache-control: public, max-age=31536000, stale-while-revalidate=2592000
age: 422414
last-modified: Tue, 03 Mar 2020 19:15:00 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38602c8e73bf7fea64c5fb5e96c11768
374303288cfe0aec7f9c655744021f8f072ee8d8
cbb4d8013bf2a47695f0931dec4f8e5221dd1d23059ecca7f5901544d0940197
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
macamlawak.blogspot.com/js/cookienotice.js
142.250.74.161200 OK 2.0 kB URL HTTP/1.1 macamlawak.blogspot.com/js/cookienotice.js
IP 142.250.74.161:0
Hash c4e1ed83d89245089b8a1203be20a377
f3940e1215b89300ef97d57a25993f25243b8688
afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
GET /js/cookienotice.js HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
HTTP/1.1 200 OK
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 2026
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 06 Oct 2022 03:35:44 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 28 Sep 2022 19:56:40 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
142.250.74.105200 OK 6.6 kB URL HTTP/2 www.blogger.com/static/v1/widgets/55013136-widget_css_bundle.css
IP 142.250.74.105:0
File type ASCII text, with very long lines (30596)
Hash 6f46e6f68353c7911fe34f31faa1518f
ea4dbfa2f87c18e9c51c59a32dfa9afb9c2c3472
0be7e26374fcff6f423b88e5f2a05d1cfdcb56abb4a78fa125e391989782ae0f
GET /static/v1/widgets/55013136-widget_css_bundle.css HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 6620
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 21:18:29 GMT
expires: Mon, 25 Sep 2023 21:18:29 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 17:51:02 GMT
content-type: text/css
age: 281835
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7b22d51d4de3f248694613ac0536e5ce
60a81fac11b4fbebe5840fbb8e841ba040e82cf9
6adddd018338619032ea3f4dee0af308ad5a1e10ad98992439a29789a8b361c6
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.blogger.com/static/v1/widgets/4150139458-widgets.js
142.250.74.105200 OK 57 kB URL HTTP/2 www.blogger.com/static/v1/widgets/4150139458-widgets.js
IP 142.250.74.105:0
File type ASCII text, with very long lines (2221)
Hash b318be2224a9b91139a7a4b41f2e4b6e
4bcae447ce5bb3cb36a74745bcca9b72ba419c9f
bc5c92978c40e36f3da25045761d139de3a8a333c5290ccd233273af73bd7f4b
GET /static/v1/widgets/4150139458-widgets.js HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 56826
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 15:56:30 GMT
expires: Mon, 25 Sep 2023 15:56:30 GMT
cache-control: public, max-age=31536000
last-modified: Sun, 25 Sep 2022 08:50:22 GMT
content-type: text/javascript
age: 301154
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
resources.blogblog.com/img/icon18_edit_allbkg.gif
142.250.74.105200 OK 162 B URL HTTP/2 resources.blogblog.com/img/icon18_edit_allbkg.gif
IP 142.250.74.105:0
File type GIF image data, version 89a, 18 x 18\012- data
Hash c991641178ff05adf0d004298b5eafa9
d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
GET /img/icon18_edit_allbkg.gif HTTP/1.1
Host: resources.blogblog.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="blogger-tech"
report-to: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
content-length: 162
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 05:11:14 GMT
expires: Sun, 02 Oct 2022 05:11:14 GMT
cache-control: public, max-age=604800
last-modified: Sat, 24 Sep 2022 17:50:40 GMT
content-type: image/gif
age: 339870
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebbd545aefa9283e52290bd400617e3f
5797111cbbfe69c3727aa87a861f605ee34c91d2
5e9fb2ca140824876b52be9dff27f09cb86c15eba1bc508c79faa68d263067fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebbd545aefa9283e52290bd400617e3f
5797111cbbfe69c3727aa87a861f605ee34c91d2
5e9fb2ca140824876b52be9dff27f09cb86c15eba1bc508c79faa68d263067fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebbd545aefa9283e52290bd400617e3f
5797111cbbfe69c3727aa87a861f605ee34c91d2
5e9fb2ca140824876b52be9dff27f09cb86c15eba1bc508c79faa68d263067fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 3e9d3eab1fba386c4fdf3af9a757cfa9
b50127a1072c95ed71110b07dd58eab72747e6f8
869e09d135cff97a1073e32fa1808d0068195421369d138ad6bba86cfef18091
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
142.250.74.161200 OK 4.5 kB URL HTTP/2 1.bp.blogspot.com/-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9b7344f5521aa04d976b2cfad6f7a8c2
9995760dc29120bcd34877448a305d0b4c39a1b3
917b7d172e92722ee272dd4344a6a958c5a5c5d283087f0b0da4e3232d7de22a
GET /-MWk2N3DU0x4/Xiv6maZ54sI/AAAAAAAAZK8/W4m3WVFenJYOAz3T0EN4rxgrZmZnby1mQCLcBGAsYHQ/s72-c/FB_IMG_1579940468844.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="FB_IMG_1579940468844.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4524
x-xss-protection: 0
date: Thu, 29 Sep 2022 02:32:31 GMT
expires: Mon, 26 Sep 2022 03:00:01 GMT
cache-control: public, max-age=86400, no-transform
age: 3793
etag: "v64b0"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
142.250.74.161200 OK 4.3 kB URL HTTP/2 1.bp.blogspot.com/-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 4969f55f38298ce8b64e50c7256162d4
8cfd6f1939b1d189410c894d704fd2f554e12a62
abf3a18c7179167981435df2a623974d4b8de806ba04a0148d95a4fdbc290873
GET /-mGNR6tLHFCE/YQ0-fzhjV_I/AAAAAAAAv6c/pSfEJwqD0SswKaPFK78Qb5dNME-n7H1mACLcBGAsYHQ/s72-w400-h400-c/p6.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="p6.jpg"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 4283
x-xss-protection: 0
date: Thu, 29 Sep 2022 02:32:31 GMT
expires: Sat, 24 Sep 2022 06:11:37 GMT
cache-control: public, max-age=86400, no-transform
age: 3793
etag: "vbfa8"
content-type: image/jpeg
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
142.250.74.161200 OK 4.7 kB URL HTTP/2 1.bp.blogspot.com/-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit/color RGB, non-interlaced\012- data
Hash 914cb50b25dc47e3ed42f95d23441c63
ef24e0d012ecf092bac18441337a9e6c991c0c82
9e959670380178206298ea5a13c8c80d9393ba7cf3a65146b665e92380ba8777
GET /-Kgvh0R8fVIs/YRqVtw2ZDyI/AAAAAAAAJCU/8Z8KWhYeT60OX5MV6EX71NxLUv-z0TbawCLcBGAsYHQ/s72-c/jatuh-kapalterbang.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v2426"
expires: Fri, 30 Sep 2022 03:35:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="jatuh-kapalterbang.png"
content-type: image/png
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 29 Sep 2022 03:35:44 GMT
server: fife
content-length: 4695
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
185.66.200.221200 OK 428 B URL HTTP/1.1 ylx-1.com/banner.php?section=General&pub=636673&format=300x250&ga=g
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (428), with no line terminators
Hash 41adf7c5f19e0f5f32a36a633c69f0e2
659d458191212fe46c03e5e966b9f1b24645ac04
dc7c7a4375526625d8970bb2749d0938834d894025774b65d70358f3f90317c2
GET /banner.php?section=General&pub=636673&format=300x250&ga=g HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 29 Sep 2022 03:35:44 GMT
Last-Modified: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
185.66.200.221200 OK 0 B URL HTTP/1.1 ylx-4.com/layer.php?section=General&pub=636673&ga=g&show=1&fp
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /layer.php?section=General&pub=636673&ga=g&show=1&fp HTTP/1.1
Host: ylx-4.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
142.250.74.161200 OK 1.6 kB URL HTTP/1.1 3.bp.blogspot.com/-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png
IP 142.250.74.161:0
File type PNG image data, 100 x 20, 8-bit/color RGBA, non-interlaced\012- data
Hash fdb7528e7ccebcfe1daea52aa0195bd6
caa9b43d3056743538e12cb11a7320f9216712ea
08ee145d75eed8be290285f1a8b9fd40b9b8dc029ad10cc6283945b536270506
GET /-gwsFvgzCBDE/UC5jBenZUoI/AAAAAAAACLU/xlY3lJEl2IY/s1600/PhoXo2.png HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="PhoXo2.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1610
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Fri, 02 Sep 2022 14:21:17 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v8b5"
Content-Type: image/png
Age: 0
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
35.186.238.101200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP 35.186.238.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:12 GMT
ETag: "6324a854-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_QCijHgXs7oQKil/eIE2NqkJa/O6dsqAiRyvgXgTP1czDdgf1yj0DwE5lfC39OLIsoM6xbAB7lqEufX3RKg6ufw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f
142.250.74.105200 OK 21 B URL HTTP/2 www.blogger.com/dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f
IP 142.250.74.105:0
File type very short file (no magic)
Hash a62e4d501434033d5d177e67d3aafdd0
34f7300c9ed47334cf10826d57af785321e3138b
b0cabcbfed4b1830ab1956efbd2eec32289a968323cb854a47ef98360ed0f522
GET /dyn-css/authorization.css?targetBlogID=3754588090277075421&zx=c492145c-1f62-4e6f-8b8c-5cd38187147f HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
p3p: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
content-security-policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
content-type: text/css; charset=UTF-8
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 29 Sep 2022 03:35:44 GMT
last-modified: Thu, 29 Sep 2022 03:35:44 GMT
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
x-xss-protection: 1; mode=block
content-length: 21
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/img/logopm.png
104.26.11.22200 OK 714 B URL HTTP/1.1 www.widgeo.net/img/logopm.png
IP 104.26.11.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 3832d6b8d8c47a5cefe6561297b514f6
f7ebe08ccccde9ab79407b9348ffa8fa6c048d8d
c5fda4bddbc21f1d990ef4b42a6350e739a1870c73c6ab240aa921651bfe5a08
GET /img/logopm.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: image/webp
Content-Length: 714
Connection: keep-alive
Cf-Bgj: imgq:100,h2pri
Cf-Polished: origFmt=png, origSize=847
Content-Disposition: inline; filename="logopm.webp"
Vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 28 Oct 2022 17:24:21 GMT
last-modified: Thu, 20 Jun 2019 15:14:49 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 36682
Accept-Ranges: bytes
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Nwcy8PiUQ28Rlqe5tl%2FCyLYyqiMUvwciokKgmsfUjFNieWJN0PRqsPwqMX7HvXkTO5F%2BVhmUtoSQN%2B%2F%2Bo6yvnErBPrqJBVBXvdQglPL3hnTxpJGoUyUiIfWTv0IqrsMq"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7521aba57c3e0af6-OSL
alt-svc: h2=":443"; ma=60
push.services.mozilla.com/
35.161.6.128101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 35.161.6.128:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: ZH7fORYvwth29iTyYwId2A==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: 4Ce5g98BVUqUYhGk9zljYECq91U=
www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_GB.oR8V69blT9s.es5.O/am=6gAIBA/d=1/excm=_b,_r,_tp,commentformiframeview/ed=1/dg=0/wt=2/rs=AEy-KP2xoKh9X8MCpKz1ciqbmN7WCQHeWg/m=_b,_tp,_r
142.250.74.105200 OK 63 kB URL HTTP/2 www.blogger.com/_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_GB.oR8V69blT9s.es5.O/am=6gAIBA/d=1/excm=_b,_r,_tp,commentformiframeview/ed=1/dg=0/wt=2/rs=AEy-KP2xoKh9X8MCpKz1ciqbmN7WCQHeWg/m=_b,_tp,_r
IP 142.250.74.105:0
File type ASCII text, with very long lines (563)
Hash 197475492008d0acdde9ca4b2dcbad84
128078e33ba75ae64ac5f5d107c0e8fd79f440e9
f650ad1e5f803830dc777b038b74f1f4d8b66a02a9b59f7bd7bd5e887129898e
GET /_/scs/mss-static/_/js/k=boq-blogger.BloggerCommentUi.en_GB.oR8V69blT9s.es5.O/am=6gAIBA/d=1/excm=_b,_r,_tp,commentformiframeview/ed=1/dg=0/wt=2/rs=AEy-KP2xoKh9X8MCpKz1ciqbmN7WCQHeWg/m=_b,_tp,_r HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/boq-infra/blogger-boq-js-css-signers
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="boq-infra/blogger-boq-js-css-signers"
report-to: {"group":"boq-infra/blogger-boq-js-css-signers","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/boq-infra/blogger-boq-js-css-signers"}]}
content-length: 63244
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Wed, 28 Sep 2022 07:31:52 GMT
expires: Thu, 28 Sep 2023 07:31:52 GMT
cache-control: public, immutable, max-age=31536000
last-modified: Tue, 27 Sep 2022 04:11:46 GMT
content-type: text/javascript; charset=UTF-8
age: 72232
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg
142.250.74.161404 Not Found 1.7 kB URL HTTP/2 1.bp.blogspot.com/-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-aBuHTgFipnc/T75UHWFsCgI/AAAAAAAAGmA/0zMFJwkFUK8/s72-c/daniele.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 29 Sep 2022 03:35:44 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
142.250.74.161404 Not Found 1.7 kB URL HTTP/1.1 3.bp.blogspot.com/-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-w3iL-fZ9YvQ/T8TnrhoEpWI/AAAAAAAAGuA/qlewx_B0Y2U/s72-c/penyokong+kelantan+cium+mulut.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 404 Not Found
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: image/png
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:44 GMT
Server: fife
Content-Length: 1742
X-XSS-Protection: 0
3.bp.blogspot.com/-eOC79fOrSWk/T8RtjdiDiNI/AAAAAAAAGto/t6EY2KlwEec/s72-c/KHALID_bersama_rozita.jpg
142.250.74.161404 Not Found 1.7 kB URL HTTP/2 3.bp.blogspot.com/-eOC79fOrSWk/T8RtjdiDiNI/AAAAAAAAGto/t6EY2KlwEec/s72-c/KHALID_bersama_rozita.jpg
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-eOC79fOrSWk/T8RtjdiDiNI/AAAAAAAAGto/t6EY2KlwEec/s72-c/KHALID_bersama_rozita.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 29 Sep 2022 03:35:44 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38602c8e73bf7fea64c5fb5e96c11768
374303288cfe0aec7f9c655744021f8f072ee8d8
cbb4d8013bf2a47695f0931dec4f8e5221dd1d23059ecca7f5901544d0940197
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 38602c8e73bf7fea64c5fb5e96c11768
374303288cfe0aec7f9c655744021f8f072ee8d8
cbb4d8013bf2a47695f0931dec4f8e5221dd1d23059ecca7f5901544d0940197
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 2144449696b47bc6c9713cfd99c029bb
60a0624ddf8a0cc82bf76010da125c9aca109c6a
3512133b20dad7c27c207f6cd95c0a607e1e278f9eda6a5aa5a72095c4c081aa
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
142.250.74.163200 OK 20 kB URL HTTP/1.1 fonts.gstatic.com/s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 20196, version 1.0\012- data
Hash d056bf3055437ed0bccae4176b65336e
9049f5482de61d9a66806a292701787d5524fb85
f60c3e8ac9f319f101cf1d20290469aba1eb7cdc63c64d092a02764beae55d9f
GET /s/benchnine/v16/ahcbv8612zF4jxrwMosbUMl0.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://fonts.googleapis.com/
HTTP/1.1 200 OK
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 20196
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 23 Sep 2022 08:19:33 GMT
Expires: Sat, 23 Sep 2023 08:19:33 GMT
Cache-Control: public, max-age=31536000
Age: 501371
Last-Modified: Tue, 19 Apr 2022 19:06:50 GMT
Content-Type: font/woff2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebbd545aefa9283e52290bd400617e3f
5797111cbbfe69c3727aa87a861f605ee34c91d2
5e9fb2ca140824876b52be9dff27f09cb86c15eba1bc508c79faa68d263067fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/js/platform.js
142.250.74.174200 OK 20 kB URL HTTP/2 apis.google.com/js/platform.js
IP 142.250.74.174:0
File type ASCII text, with very long lines (1277)
Hash b5a31516be83fe4f962609045d824f88
939a49a9858bf23561279f9ca2d1941d3256c66f
edb661aa461800e97e3847608a8b2d81cfe345f69a6f84abaa001d8a60500328
GET /js/platform.js HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-type: text/javascript
access-control-allow-origin: *
content-security-policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="gapi-team"
report-to: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
timing-allow-origin: *
content-length: 20361
date: Thu, 29 Sep 2022 03:35:44 GMT
expires: Thu, 29 Sep 2022 03:35:44 GMT
cache-control: private, max-age=1800, stale-while-revalidate=1800
etag: "40c22a9ccbd70870"
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eb2f3cc13b8ab763c5f346d6fc23054d
1768cc61721a6a6624c1ccbf2c874342f53abd99
3faee940dd222a051862bc2a4e090ecd2cc1f2ead8b1a5c84e10241f31461c5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash ebbd545aefa9283e52290bd400617e3f
5797111cbbfe69c3727aa87a861f605ee34c91d2
5e9fb2ca140824876b52be9dff27f09cb86c15eba1bc508c79faa68d263067fc
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
142.250.74.174200 OK 58 kB URL HTTP/2 apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs
IP 142.250.74.174:0
File type ASCII text, with very long lines (580)
Hash d70fcc84d705c565b31a5835c0938d5b
d28e5dc9fcc6239d67986df3205468072023d2d7
1d558c94793446aa6a7832dde0c39ed7d9c77fd963ffb738c460e4f7369a7f4e
GET /_/scs/abc-static/_/js/k=gapi.lb.en.z9QjrzsHcOc.O/m=gapi_iframes,gapi_iframes_style_bubble/rt=j/sv=1/d=1/ed=1/rs=AHpOoo8359JQqZQ0dzCVJ5Ui3CZcERHEWA/cb=gapi.loaded_0?le=scs HTTP/1.1
Host: apis.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="social-frontend-mpm-access"
report-to: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
content-length: 57995
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 07:25:39 GMT
expires: Mon, 25 Sep 2023 07:25:39 GMT
cache-control: public, max-age=31536000
age: 331805
last-modified: Sat, 30 Jul 2022 15:17:53 GMT
content-type: text/javascript; charset=UTF-8
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
142.250.74.161404 Not Found 1.7 kB URL HTTP/2 4.bp.blogspot.com/-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg
IP 142.250.74.161:0
File type PNG image data, 72 x 72, 8-bit colormap, non-interlaced\012- data
Hash 58a17151a9a7dc2d32cedfff483923a8
a16dc81e6f06a4b14410119c5d02360276fcdc75
f7b3785f331b99dfd1cde553845fb0bfc5b1b4d48f1628aff98c0cd561ac041b
GET /-B6j6rvYGZNU/T5j286c20BI/AAAAAAAAGE0/uPHp3J2cBLw/s72-c/neelofa-seksi.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 404 Not Found
access-control-allow-origin: *
timing-allow-origin: *
content-type: image/png
x-content-type-options: nosniff
date: Thu, 29 Sep 2022 03:35:44 GMT
server: fife
content-length: 1742
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
142.250.74.78200 OK 12 kB URL HTTP/2 encrypted-tbn3.gstatic.com/images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw
IP 142.250.74.78:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 229x143, components 3\012- data
Hash 5a91ff00521c9c039138078d4258cf99
9d3937bc37fff0bfa98daac390ff5a9bab3ff07b
b87f3792f68189504233cf81d5d06decf0f3011b79123bdcc3299c7cfc2541f3
GET /images?q=tbn:ANd9GcTnsLHwUghPKm6VmAeanNUe6YTEuqTXAkg1WqL4QFG2wctkQk44Sw HTTP/1.1
Host: encrypted-tbn3.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
content-type: image/jpeg
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/images-tbn
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy-report-only: same-origin; report-to="images-tbn"
report-to: {"group":"images-tbn","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/images-tbn"}]}
content-length: 12346
date: Thu, 29 Sep 2022 03:35:44 GMT
expires: Fri, 29 Sep 2023 03:35:44 GMT
cache-control: public, max-age=31536000
last-modified: Sat, 02 Jul 2016 07:36:38 GMT
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
pagead2.googlesyndication.com/pagead/js/google_top_exp.js
142.250.74.98200 OK 67 B URL HTTP/1.1 pagead2.googlesyndication.com/pagead/js/google_top_exp.js
IP 142.250.74.98:0
Hash 9bbc3ca32ec951a484589ce0e6b4db73
753d6f6183b33b2dee5dde2208fca91c17f5bb13
b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
GET /pagead/js/google_top_exp.js HTTP/1.1
Host: pagead2.googlesyndication.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Date: Wed, 28 Sep 2022 10:41:44 GMT
Expires: Wed, 12 Oct 2022 10:41:44 GMT
Cache-Control: public, max-age=1209600
ETag: 13036835877489095579
Content-Type: text/javascript; charset=UTF-8
Age: 60840
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash eb2f3cc13b8ab763c5f346d6fc23054d
1768cc61721a6a6624c1ccbf2c874342f53abd99
3faee940dd222a051862bc2a4e090ecd2cc1f2ead8b1a5c84e10241f31461c5f
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
104.26.11.22200 OK 2.4 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget.php?idec=1009871715
IP 104.26.11.22:0
File type ASCII text, with very long lines (2149)
Hash cbafe83972442e457a19e0f65df92c8b
bed10a8306cb9202d1832adbe0ab4f2a0d9358b4
6f07bee420a11253512b4b4051bb0e045e84eb9f856e3a9b4f50dcba3f5db335
GET /geocompteur/trackwidget.php?idec=1009871715 HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: application/javascript
Content-Length: 2373
Connection: keep-alive
set-cookie: ville_idec=diff; expires=Thu, 06-Oct-2022 03:35:43 GMT; Max-Age=604800; path=/; domain=widgeo.net
country_idec=diff; expires=Thu, 06-Oct-2022 03:35:43 GMT; Max-Age=604800; path=/; domain=widgeo.net
w_js_ads_code=ok; expires=Wed, 05-Oct-2022 03:35:43 GMT; Max-Age=518400; path=/; domain=widgeo.net
cache-control: public, max-age=604800
expires: Thu, 06 Oct 2022 03:35:43 GMT
content-encoding: gzip
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=eCAk8%2FchWi%2BIZpuee5Ks6H3P7Xe6uJJyVIv6mk7hVGvRstgGdeTW3t5V1xFM%2Bk%2BksTX%2B4qzuq1e8wgNz17TIQ%2FcgQfGt493kyFts4wEBhQ%2FdPzylwrYaaSRLhZk1MT2s"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7521aba459aeb509-OSL
alt-svc: h2=":443"; ma=60
3.bp.blogspot.com/-bJ5C_nwEhsY/UqsWZYAmeoI/AAAAAAAACSU/Ya1BvYYw5Is/s1600/b2uang_bayi.jpg
142.250.74.161200 OK 30 kB URL HTTP/1.1 3.bp.blogspot.com/-bJ5C_nwEhsY/UqsWZYAmeoI/AAAAAAAACSU/Ya1BvYYw5Is/s1600/b2uang_bayi.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 292x320, components 3\012- data
Hash 87a8cef77e27da02aa8abfdf5be9bc57
ee6aa267e0fa7b4f33862b89a12b42f1229e535b
726a188f18df5bae8d30795a2cca49164f9990d32a75885c0d0db3f07de02910
GET /-bJ5C_nwEhsY/UqsWZYAmeoI/AAAAAAAACSU/Ya1BvYYw5Is/s1600/b2uang_bayi.jpg HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v926"
Expires: Fri, 30 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="b2uang_bayi.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:44 GMT
Server: fife
Content-Length: 30464
X-XSS-Protection: 0
yllix.com/images/aff/pub_7nc2s6.jpg
185.66.200.224200 OK 74 kB URL HTTP/2 yllix.com/images/aff/pub_7nc2s6.jpg
IP 185.66.200.224:0
ASN #201702 skHosting.eu s.r.o.
File type JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=12, height=250, bps=158, PhotometricIntepretation=RGB, orientation=upper-left, width=300], baseline, precision 8, 300x250, components 3\012- data
Hash 7a19e68cca2f5d28d919bb6db6faa8f0
877535b8821515cf43269fc2dfdcde54b5ec339f
d0af19a5198d12ead1c743bd66b969baef0a4682b8a7eb4fa05df216888da209
GET /images/aff/pub_7nc2s6.jpg HTTP/1.1
Host: yllix.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 03:35:44 GMT
content-type: image/jpeg
content-length: 74258
last-modified: Sun, 17 Apr 2016 08:55:25 GMT
etag: "57134f7d-12212"
expires: Sat, 29 Oct 2022 03:35:44 GMT
cache-control: max-age=2592000
x-frame-options: SAMEORIGIN
accept-ranges: bytes
X-Firefox-Spdy: h2
ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166442254459926&xtt=2001135
185.66.200.221200 OK 1.3 kB URL HTTP/1.1 ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166442254459926&xtt=2001135
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (1335), with no line terminators
Hash 83dd7cb552cf0015e6784a15336a58ca
deea40efe396e8c5b2302f760e9d468be8e42b51
c51820dcab22571ca9153bd63bf8c5a6170a6550eef491f65921b0b7325b1e26
GET /bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166442254459926&xtt=2001135 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 29 Sep 2022 03:35:44 GMT
Last-Modified: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
Set-Cookie: used_ad2633299=1; expires=Thu, 29-Sep-2022 04:00:00 GMT; Max-Age=1456; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
total_impressions=1; expires=Thu, 29-Sep-2022 04:00:00 GMT; Max-Age=1456; path=/; domain=ylx-1.com; secure; HttpOnly; SameSite=None
cpa_673873=300x250_881516516_0; expires=Sat, 29-Oct-2022 03:35:44 GMT; Max-Age=2592000; path=/; domain=ylx-1.com; secure; SameSite=None
1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
142.250.74.161200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash c89b3e4cc3d6462ae9580470a315791d
fd3be63550a4ef169863fca193012ece884df54f
2c694057ea793e99fb49186866251ab4e548d17a08e0230ecf3cfefb8d6c6bab
GET /-sj518Bj0E28/U95mRyuT6GI/AAAAAAAAEXY/Ftwfh8wwlZA/s72-c/10408547_10154511905900454_8487754128025911440_n.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v1177"
Expires: Fri, 30 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="10408547_10154511905900454_8487754128025911440_n.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:44 GMT
Server: fife
Content-Length: 4755
X-XSS-Protection: 0
1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
142.250.74.161200 OK 2.6 kB URL HTTP/1.1 1.bp.blogspot.com/-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 9d2936e5ada19cf70ebcba407d9d9155
c59d9c8ef9d14b135fe15b31d9122cc9fcba58eb
a0ecc02e048826f41bb9b5da70fa1791db5f25297f95fc15e67e2cde369a40a7
GET /-OZdRvlZj1yU/U6YLPs-doII/AAAAAAAAQfw/fHoZmbGb3jE/s72-c/1.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2647
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v41ff"
Content-Type: image/jpeg
Age: 0
1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
142.250.74.161200 OK 2.2 kB URL HTTP/2 1.bp.blogspot.com/-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash f1a6797f91242287a33a4fbd390461c0
1faa0cba38f656d320b66ffd54167243c3a11b2a
f7e3c056e77fe5a256f5fb37d6084d43b660632f34dc0a77cefa9224ffd15e64
GET /-eFGhGqI_nDw/U85jbQbvumI/AAAAAAAAVPg/f1IrBj85tro/s72-c/mains.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
etag: "v54f9"
expires: Fri, 30 Sep 2022 03:35:44 GMT
cache-control: public, max-age=86400, no-transform
content-disposition: inline;filename="mains.jpg"
content-type: image/jpeg
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
date: Thu, 29 Sep 2022 03:35:44 GMT
server: fife
content-length: 2150
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
142.250.74.161200 OK 3.8 kB URL HTTP/1.1 2.bp.blogspot.com/-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 0df95f70ada2fd798ee29fd931a698f7
621494a4fd57382d9e3a8241c4bb456b09982ac6
d3503b6ffe77f928919fa21e4863ccb764a0dd9fa4f8f85bd3b07daccc4f1bcc
GET /-tLLm7DYhNdc/U_Lofyq_4ZI/AAAAAAAAgQI/6lfPHNN-8ow/s72-c/kanak-kanak-disembelih.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8103"
Expires: Fri, 30 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="kanak-kanak-disembelih.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:44 GMT
Server: fife
Content-Length: 3770
X-XSS-Protection: 0
2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
142.250.74.161200 OK 4.1 kB URL HTTP/1.1 2.bp.blogspot.com/-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 6d57e4858ab729e9db89b4a12996c30f
33d340600545ca608cc05649f9de69947ecbada5
99998e4b1f2f6a36badeb95410638ff41f5903dae2d93330ef556d99235a115b
GET /-w9DFkPFl_Jc/UrhTZW9jZtI/AAAAAAAAi_E/oRPMyORB6v0/s72-c/hmkiasus_01.jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v8bf2"
Expires: Fri, 30 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="hmkiasus_01.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:44 GMT
Server: fife
Content-Length: 4072
X-XSS-Protection: 0
2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
142.250.74.161200 OK 4.0 kB URL HTTP/1.1 2.bp.blogspot.com/-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 72x72, components 3\012- data
Hash 1a7922b370e02385ee179c6e36297225
c3190c9f94ad43eea3ca4ce261206b9fea758e9b
5fbb684a31c3623382278b03b38c773df6bfa2f1bc398f78e13bae2aaf50efac
GET /-18f7v8hpidQ/UrV2scB6TJI/AAAAAAAAAnc/I6vlD6BjErw/s72-c/Pertandingan+Membuka+8r4+Paling+Cepat+Di+Stesen+Tv+Indonesia+(edit).jpg HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="Pertandingan Membuka 8r4 Paling Cepat Di Stesen Tv Indonesia (edit).jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4047
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Tue, 27 Sep 2022 03:50:30 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v278"
Content-Type: image/jpeg
Age: 0
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 7f6c1bbbde940ad17ceda150b7b1664d
7273da22f182d9540784068537cc678ec27800d3
4d8a6cd94e298a71543331248750230237a56a67cef251c7a204291612dbb569
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
play.google.com/log?format=json&hasfast=true&authuser=0
142.250.74.110200 OK 0 B URL HTTP/2 play.google.com/log?format=json&hasfast=true&authuser=0
IP 142.250.74.110:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1
Host: play.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: x-goog-authuser
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: https://www.blogger.com
access-control-allow-methods: GET, POST, OPTIONS
access-control-max-age: 86400
access-control-allow-credentials: true
access-control-allow-headers: X-Playlog-Web,authorization,origin,x-goog-authuser
content-type: text/plain; charset=UTF-8
date: Thu, 29 Sep 2022 03:35:44 GMT
server: Playlog
content-length: 0
x-xss-protection: 0
x-frame-options: SAMEORIGIN
set-cookie: CONSENT=PENDING+816; expires=Sat, 28-Sep-2024 03:35:44 GMT; path=/; domain=.google.com; Secure
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
expires: Thu, 29 Sep 2022 03:35:44 GMT
cache-control: private
X-Firefox-Spdy: h2
ylx-1.com/show.php?u40031664422544=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=6e348921c7b1b331deee3f68cea0b8f6&cc=NO&useAf=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
185.66.200.221200 OK 1.7 kB URL HTTP/1.1 ylx-1.com/show.php?u40031664422544=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=6e348921c7b1b331deee3f68cea0b8f6&cc=NO&useAf=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (594), with CRLF line terminators
Hash 34a50734a20828004c0ea8e7ef992297
0b67f0e141bd3cbf4df94415b6436e84143235dd
5d87bf64f1e8f133ec12509fdfbc213530e47ee442f69b1f6a76a1baf421195a
GET /show.php?u40031664422544=true&ad=673873&f=300x250&a=395578&cri=0&s=NjFmYmM1ZmM1OGRlNTNhZGRlZGJkNTk3ZWQ2YjA5NjI=&u=636673&si=881516516&di=34108481&ci=16&h=6e348921c7b1b331deee3f68cea0b8f6&cc=NO&useAf=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&ar=aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw== HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/bnr_xload.php?section=General&pub=636673&format=300x250&ga=g&xt=166442254459926&xtt=2001135
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Thu, 29 Sep 2022 03:35:44 GMT
Last-Modified: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex, nofollow, noarchive, nosnippet
www.blogger.com/comment/frame/3754588090277075421?po=6161744065127095277&hl=en-GB&blogspotRpcToken=8906281
142.250.74.105200 OK 41 kB URL HTTP/2 www.blogger.com/comment/frame/3754588090277075421?po=6161744065127095277&hl=en-GB&blogspotRpcToken=8906281
IP 142.250.74.105:0
Hash ecac0de1677cff1c500dce915e7f9a01
8dd76c5e88a11e807c7ebbb2ff398ef4fa147df8
2167955150ded6b26bb35a4c9117d62b22e84576810896c47d32e0a005cef4e1
GET /comment/frame/3754588090277075421?po=6161744065127095277&hl=en-GB&blogspotRpcToken=8906281 HTTP/1.1
Host: www.blogger.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: text/html; charset=utf-8
vary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site
x-ua-compatible: IE=edge
cache-control: no-cache, no-store, max-age=0, must-revalidate
pragma: no-cache
expires: Mon, 01 Jan 1990 00:00:00 GMT
date: Thu, 29 Sep 2022 03:35:44 GMT
p3p: CP="This is not a P3P policy! See g.co/p3phelp for more info."
accept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
content-security-policy: script-src 'nonce-P73vtVOZQaCGPjOAs-D-lg' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/BloggerCommentUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/BloggerCommentUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/BloggerCommentUi/cspreport
cross-origin-opener-policy: same-origin; report-to="BloggerCommentUi"
report-to: {"group":"BloggerCommentUi","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/BloggerCommentUi/external"}]}
permissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-platform=*, ch-ua-platform-version=*
cross-origin-resource-policy: same-site
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-content-type-options: nosniff
set-cookie: NID=511=Y_Lxc1b4K_Do_HOHA1Kanqehq1RFHSk0dNX85tj6ylik_j6kLUNyy9K-AImvJXBMq0zijphZVRfcSXuzLQS6cmw_Ss4pSLS8E8tLsUOzlR9JGACRPBV1P9gPlTjSZ2XuCZaN-UrkmaWb1Bgs0w9EzMWpSXaPEoSR48qMwB8i528; expires=Fri, 31-Mar-2023 03:35:44 GMT; path=/; domain=.blogger.com; Secure; HttpOnly
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 0acb404c6e5e614b2b45960b66540566
9dd62de9f34b30f89ff0fbe054affd8114562b65
78195875441b18f2c34830e59c85bfba8aa9e4afb3953ea232352b49d67d76bd
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
142.250.74.164200 OK 668 B URL HTTP/2 www.google.com/recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu
IP 142.250.74.164:0
File type ASCII text, with very long lines (1034), with no line terminators
Hash 80585e7d4f1510898eeba1ae4175a6fc
a5a6a723aecc70bc2f23ff11d05b10838c3f557b
c0d82c824a37384777d1493508b45b05f5286b3a8366377b43db8f0f84fc0eb8
GET /recaptcha/api.js?trustedtypes=true&render=6LcdyMoZAAAAAFYwZAM4wZySTWVzr15BuInOVasu HTTP/1.1
Host: www.google.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
expires: Thu, 29 Sep 2022 03:35:44 GMT
date: Thu, 29 Sep 2022 03:35:44 GMT
cache-control: private, max-age=300
content-type: text/javascript; charset=UTF-8
cross-origin-resource-policy: cross-origin
content-encoding: gzip
x-content-type-options: nosniff
x-frame-options: SAMEORIGIN
content-security-policy: frame-ancestors 'self'
x-xss-protection: 1; mode=block
content-length: 668
server: GSE
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&title=Bayi%20Ditemui%20Mati%20Dalam%20Mangkuk%20Tanda%20Hospital%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
104.26.11.22200 OK 3.5 kB URL HTTP/1.1 www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&title=Bayi%20Ditemui%20Mati%20Dalam%20Mangkuk%20Tanda%20Hospital%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
IP 104.26.11.22:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (3124)
Hash 7e96e0a7afa556449b122c22b228da14
3de64b0972f6a8b5d92de89e9e413c18cbf8e365
118171ad68283b0d0c234212556ae4425f0a7415f4899f7d025f3e42c4107460
GET /geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&title=Bayi%20Ditemui%20Mati%20Dalam%20Mangkuk%20Tanda%20Hospital%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
p3p: CP="NOI ADM DEV COM NAV OUR STP"
set-cookie: monpays=NO; expires=Wed, 28-Dec-2022 03:35:43 GMT; Max-Age=7776000; path=/; domain=widgeo.net
country_name=Norway; expires=Wed, 28-Dec-2022 03:35:43 GMT; Max-Age=7776000; path=/; domain=widgeo.net
idcompteurcc_1410487131622=done; expires=Fri, 30-Sep-2022 03:35:43 GMT; Max-Age=86400; path=/
get_data_1410487131622=ok; expires=Thu, 29-Sep-2022 03:38:43 GMT; Max-Age=180; path=/; domain=widgeo.net
bonus_1410487131622=577; expires=Fri, 30-Sep-2022 03:35:43 GMT; Max-Age=86400; path=/
bonus_j_1410487131622=1; expires=Thu, 29-Sep-2022 03:38:43 GMT; Max-Age=180; path=/
cache-control: public, max-age=180
expires: Thu, 29 Sep 2022 03:38:43 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: DYNAMIC
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=e%2FYn%2B85tmQ8cKxWsJmmaD4OoDtyoT4B2K5W%2FKYVGwAJkdKdegKB7TlxWd%2BMQ1iGy291%2F1ukWWBzNFy1qEeSJjxkApT%2Ff7FlWTezZGsiVjuiX3CV1hynxc%2B%2ByinBTgKwV"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7521aba80b39b509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
35.186.238.101200 OK 2.6 kB URL HTTP/1.1 myblogtalk.com/bloggertemplates/js/recentposts_thumbnail.js
IP 35.186.238.101:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (2551), with no line terminators
Hash 41f66bb0ac50f2d851236170e7c71341
59bcec216302151922219b51be8ad8ab6d0b8384
ec99cca58b612ce268e6ada818dfcec0acc22dd1bbe372487be9abbdd07ce073
GET /bloggertemplates/js/recentposts_thumbnail.js HTTP/1.1
Host: myblogtalk.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Server: openresty
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/html
Content-Length: 2551
Last-Modified: Fri, 16 Sep 2022 16:46:37 GMT
ETag: "6324a86d-9f7"
X-Adblock-Key: MFwwDQYJKoZIhvcNAQEBBQADSwAwSAJBAJRmzcpTevQqkWn6dJuX/N/Hxl7YxbOwy8+73ijqYSQEN+WGxrruAKtZtliWC86+ewQ0msW1W8psOFL/b00zWqsCAwEAAQ_QCijHgXs7oQKil/eIE2NqkJa/O6dsqAiRyvgXgTP1czDdgf1yj0DwE5lfC39OLIsoM6xbAB7lqEufX3RKg6ufw
Cache-Control: no-cache
X-Content-Type-Options: nosniff
Set-Cookie: caf_ipaddr=91.90.42.154;Path=/;Max-Age=86400;
country=NO;Path=/;Max-Age=86400;
city="";Path=/;Max-Age=86400;
expiry_partner=;Path=/;Max-Age=86400;
Accept-Ranges: bytes
Via: 1.1 google
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.26.11.22200 OK 3.9 kB URL HTTP/1.1 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.26.11.22:0
File type ASCII text, with very long lines (12331)
Hash 54c87b7a9007d256c837e382cab4170d
6c8f44204021f68596af9ae5a742c3ad1b76a6ec
3a09f98b09786cd8fbe71cc17d07660e767fc1c8d2ea467f912bc328766a54a1
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&title=Bayi%20Ditemui%20Mati%20Dalam%20Mangkuk%20Tanda%20Hospital%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 11:11:52 GMT
ETag: W/"633188f8-302c"
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2BxSvC3lz8T5nLWd1kVolHu%2BQ%2F1vlhrXx1ezG4KAIj%2B%2FbA9UMEdC%2FUeC528yuZsGwHNCZiBymQD7Xht5D8OEIvReOQi7nYRiWe5AelB1084QP8z%2Fpg5LxylPbfrwvQ%2FAl"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7521aba8ed750af6-OSL
X-Frame-Options: DENY
X-Content-Type-Options: nosniff
Expires: Sat, 01 Oct 2022 03:35:44 GMT
Cache-Control: max-age=172800, public
Content-Encoding: gzip
www.widgeo.net/geocompteur/css/tipTip.css
104.26.11.22200 OK 593 B URL HTTP/1.1 www.widgeo.net/geocompteur/css/tipTip.css
IP 104.26.11.22:0
File type ASCII text, with very long lines (2057), with no line terminators
Hash a747347fbc4841ea98b69cc6b9e82340
9ff90c2abcbd22df2a8f618400421dc0c87ee3f2
181311b58305877b33a71d8f6b968783df4a5be2fbc51e6e2439c6272050626d
GET /geocompteur/css/tipTip.css HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://www.widgeo.net/geocompteur/trackwidget_html.php?id=1410487131622&nostats=0&view=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&title=Bayi%20Ditemui%20Mati%20Dalam%20Mangkuk%20Tanda%20Hospital%20-%20MacamLawakKot&ref=&colorborder=%23dddddd&colorbg1=%23ffffff&colorbg2=%23f9f9f9&colortxt=%23666666&colorlink1=%23666666&colorlink2=%230066ff&widget_w=160&widget_h=634¶m_Storage=yes
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: text/css
Transfer-Encoding: chunked
Connection: keep-alive
Cf-Bgj: minify
Cf-Polished: origSize=2441
cache-control: public, max-age=604800
expires: Wed, 05 Oct 2022 04:12:25 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
CF-Cache-Status: HIT
Age: 84198
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=i2EeTq2Y7vmFO2POmq2nVfhb4R%2FxnOUYlgFhJu6m%2B40fpqM7ta%2BxP9xUf4YNm3QT12p7qVEgNaemCGZyWtaCvuqq2xmCzGxXIcwiYm%2FZDTLLFbvKaj4VaExGV7YEOikL"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Server: cloudflare
CF-RAY: 7521aba8eb8db509-OSL
Content-Encoding: gzip
alt-svc: h2=":443"; ma=60
www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
142.250.74.163200 OK 158 kB URL HTTP/2 www.gstatic.com/recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js
IP 142.250.74.163:0
File type ASCII text, with very long lines (826)
Size 158 kB (158248 bytes)
Hash db1b5789e9915e9c82f5df92e5982980
2e193e502995501c85f45fd89d9f83707a7f9573
db9c82b18117d7cff0f674de758f5bbb39bc6dee969cee679c741090968b9206
GET /recaptcha/releases/ovmhLiigaw4D9ujHYlHcKKhP/recaptcha__en.js HTTP/1.1
Host: www.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.blogger.com/
Origin: https://www.blogger.com
Connection: keep-alive
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
accept-ranges: bytes
vary: Accept-Encoding
content-encoding: gzip
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups; report-to="recaptcha"
report-to: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]}
content-length: 158248
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sun, 25 Sep 2022 22:25:55 GMT
expires: Mon, 25 Sep 2023 22:25:55 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 19 Sep 2022 04:01:43 GMT
content-type: text/javascript
age: 277789
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash b2eb20feb0cf76247b06b09fa0d9643e
39cfc489626188762fc83269d25fac275849b2b2
8258ce2affbce3c1555082bca3ff2514f2d13350b38bb3d2a67cf4147c9310e3
GET /-vskoNsBdihs/UYl9p6jAksI/AAAAAAAAI-4/AGjSDvooObE/s000/03.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12197
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Tue, 08 Mar 2022 09:33:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23ef"
Content-Type: image/gif
Age: 0
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash bc2f36b68ace0419ad9bc17791df000d
68af541022d0fb1516a9fdd2ee2f3bafb1a14b81
f53e378d2706f03af59a3145b48096c852d7a74781aaf9ef5c1313efba2e3e12
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "F53E378D2706F03AF59A3145B48096C852D7A74781AAF9EF5C1313EFBA2E3E12"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=14877
Expires: Thu, 29 Sep 2022 07:43:41 GMT
Date: Thu, 29 Sep 2022 03:35:44 GMT
Connection: keep-alive
1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
142.250.74.161200 OK 32 kB URL HTTP/1.1 1.bp.blogspot.com/-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 47 x 36\012- data
Hash de8786141e6d1977bf7e2e6de7f1576b
eca2cf38a29141c00223120e03ddb0266d0eae5c
a66d397b2074119260adcf349ba9aa2d1de08ed098a6cb77c49f40e45795f9f6
GET /-Sn3E_SD_djY/UYl9qrrQiQI/AAAAAAAAI_A/_N2WJEaUfmg/s000/06.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="06.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 31605
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Mon, 06 Dec 2021 15:33:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f1"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
142.250.74.161200 OK 7.7 kB URL HTTP/1.1 3.bp.blogspot.com/-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9cc44dc0d9d256729214bad1f2f203e
58090dfe6c40f94742026e6c995d1efa1528cea9
f738a2d77df5130907ab4d6ace1233bee0766be9bfbdcffef3c4c1a789843ede
GET /-ULVPkGfieac/UYl9toWKMYI/AAAAAAAAI_Q/GT6gCuUl2qI/s000/02.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="02.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7678
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f5"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
142.250.74.161200 OK 11 kB URL HTTP/1.1 3.bp.blogspot.com/-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash e0efb02c657f5cd002fe98568c94a93b
e79c6d48316d628653fa0f2234c85fa4fc77c261
25ad56a82cd57d11572d9e28d8b1ce5e02d1422d4a523d9d336adcad45e2cd0f
GET /-EAVc16Jn4Go/UYl9ubVye3I/AAAAAAAAI_Y/xeydJxWl_o4/s000/03a.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="03a.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 10557
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Fri, 11 Mar 2022 11:40:49 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f8"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 1d6914eb78b0e6ba05418a388ab0abc8
1af2bc2925d92c78ab617e05d95784881ef0f28f
0fe6fda5d85b2370a5e27820a0dc5dc2bb53fe256bbd1470d76a5f0061295ee9
GET /-0XzlL89lNOs/UYl9v1pHnNI/AAAAAAAAI_o/jEOrGxiOzgs/s000/05.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="05.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11864
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23fd"
Content-Type: image/gif
Age: 0
ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
185.66.200.127200 OK 1.3 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/logo_n_small.png?1480628810
IP 185.66.200.127:0
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 16 x 12, 8-bit/color RGBA, non-interlaced\012- data
Hash 961dcad940bcae720f8f0ead6409f9d2
7199f8b763df9aec9c55bad14795e2166e6b1501
a50a9224daca3d84e35717d2c03bea4a7e9c811b2cc598078de2f9b787ed080a
GET /logo_n_small.png?1480628810 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 01 Dec 2016 21:46:50 GMT
ETag: W/"58409a4a-631"
Expires: Sat, 29 Oct 2022 03:35:44 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
142.250.74.161200 OK 7.1 kB URL HTTP/1.1 4.bp.blogspot.com/-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash b24f42a157fe0fd0c0670b82cdf4ed80
23cd6f155ff3ccd1b972446cd9769b95d7760fb3
97d910d193ef3ba80d2ec9e3fcc8c3e7669420389bbfa263d484d3626ed2cfa5
GET /-TGmeb01UJ_c/UYl9svtOviI/AAAAAAAAI_I/7WPXi6Jbs4I/s000/01.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="01.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7139
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f3"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 27c2fbd98af4e80cfd9a0ea066053744
839c502889b0a4d6e928ed211e9d201b596c26c4
020f931d362228610e97493a931d9b5771fe9d732c4171756ecceda2814427af
GET /-qZXP1UjLBrs/UYl9xXY0-uI/AAAAAAAAI_4/AW62-YHaVtQ/s000/8.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="8.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12211
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Wed, 17 Nov 2021 07:42:37 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23ff"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
142.250.74.161200 OK 2.0 kB URL HTTP/1.1 2.bp.blogspot.com/-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 35\012- data
Hash 1b9200f411ac88d26abae6047bfb4839
0f583fbd1433ec2ce11d73a3a5d8d6fe6ec4afe7
93b826c061859ace5120ecf13154150954d1728e81964eb780fab9dbf7aedc0a
GET /-62Hie_NrpyY/UYl9vIW3_jI/AAAAAAAAI_c/WHnIbytoL74/s000/04.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="04.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1988
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Wed, 17 Nov 2021 18:18:55 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23f9"
Content-Type: image/gif
Age: 0
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
185.66.201.8200 OK 795 B URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c
IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
File type ASCII text, with very long lines (626)
Hash e187e127e5c96bd6976fa3897c31a7d9
46a29b94dc796a97a1983ab206802c556ac8f072
5226b1da2dad260eb3bb885e8c22548ff7832d3a246f1c137df47723edb530e7
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Content-Encoding: gzip
3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 0c7de4432447b874c2b6337fe6f675fe
845af5f406010c1462e1da4ec9c50ac84bb5679b
4b401f70a2d0a9e48f2826eb0c81554a868fbe202adee608d193b68d5f5763cc
GET /-eOh8-uoT-Us/UYl98QWLz1I/AAAAAAAAJBA/5liDPytF5Ec/s000/16.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="16.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11938
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2411"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
142.250.74.161200 OK 4.8 kB URL HTTP/1.1 1.bp.blogspot.com/-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash b16f3ef0d022879f521011b331f1f751
e3272da7a66d6ed1d275fcec3b154c8c0c34fdec
363e15dc2577e03ef8183224677d69d26ecaa07691d66b1c45fc0d4b7fe6b647
GET /-gBz7DccFllo/UYl-FIxKubI/AAAAAAAAJBg/TaHmbNeQaSA/s000/21.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="21.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 4771
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Wed, 17 Nov 2021 07:16:21 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2418"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 61493dfb3c256f6247991635d959aa36
a78ff4b39f9540181d37b97fab7e412948f9feb0
f9c93ab91a81b6f010462e2d77c67e4eae52b80bab26d7046dd999914886c8df
GET /-aJrUgcokHYo/UYl9wn82PII/AAAAAAAAI_s/U3tvbU3WZHk/s000/7.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="7.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11789
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23fc"
Content-Type: image/gif
Age: 0
ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
185.66.200.127200 OK 26 kB URL HTTP/1.1 ylx-i.advertica-cdn2.com/aff/pub_s9c2nm.png?1480419364
IP 185.66.200.127:0
ASN #201702 skHosting.eu s.r.o.
File type PNG image data, 300 x 250, 8-bit colormap, non-interlaced\012- data
Hash f46784dcc71c42f9406d242fede794f4
79269678d6fb002908aae6c5616ddd2f94f9691a
0df87463e7f01f1abbb4144ed58c36de50d1fdb3bc56046e0976ab642ed2f1bc
GET /aff/pub_s9c2nm.png?1480419364 HTTP/1.1
Host: ylx-i.advertica-cdn2.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:44 GMT
Content-Type: image/png
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 29 Nov 2016 11:36:04 GMT
ETag: W/"583d6824-68a8"
Expires: Sat, 29 Oct 2022 03:35:44 GMT
Cache-Control: max-age=2592000
Access-Control-Allow-Origin: *
X-Cache: HIT
X-Server: cdnbts
Content-Encoding: gzip
1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
142.250.74.161200 OK 13 kB URL HTTP/1.1 1.bp.blogspot.com/--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash aafd50d72e0f92a19f2e043a59d58f3c
8b565b7610a01b1bf5c1bd58fb94070c4fd1a085
d3b1a956d913c0017a5fa30b739d63dc7966fdc00c177626537a2a0b160f5fb7
GET /--KSLxLC05kc/UYl9xz1LoDI/AAAAAAAAJAA/HUm36rjGAgA/s000/09.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="09.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12733
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Sun, 17 Jul 2022 04:39:41 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2401"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:44 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 72f527be8e9d67bd33d62ca5cc76efdf
6d39bf733cf16b342dc7ddf413406b37560ca86c
81b247e69eab61049c8f66c7ba70de6c7fa0137d6f35816b31f0166d4f818654
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "81B247E69EAB61049C8F66C7BA70DE6C7FA0137D6F35816B31F0166D4F818654"
Last-Modified: Tue, 27 Sep 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3127
Expires: Thu, 29 Sep 2022 04:27:51 GMT
Date: Thu, 29 Sep 2022 03:35:44 GMT
Connection: keep-alive
1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
142.250.74.161200 OK 2.3 kB URL HTTP/1.1 1.bp.blogspot.com/-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 10bb241722f4180ff2149995133249c7
ecdba88ef548a01c63e04f1d6385f933904fcffe
1d7297ae79305a59aa464c72240610364da0e4424c57e5e4539644948e48e978
GET /-g8uarPGC1OM/UYl99qymAPI/AAAAAAAAJBQ/fi62Dv1LWWY/s000/18.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="18.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2259
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:44 GMT
Expires: Mon, 26 Sep 2022 20:27:35 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2415"
Content-Type: image/gif
Age: 0
3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
142.250.74.161200 OK 2.1 kB URL HTTP/1.1 3.bp.blogspot.com/-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash bfb5c4ad3077b6067c24d727e85e4d55
683a3c57084227c6f3a94d1feda97a63eb8c902d
be82914e30dc50b25809b031abc0ebcb7c69fecf69b2c0848f81d8aedae88812
GET /-hA0HV7ElBkQ/UYl-PEKf8bI/AAAAAAAAJB0/jYLk8xsqIco/s000/25.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="25.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2127
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2436"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
142.250.74.161200 OK 11 kB URL HTTP/1.1 2.bp.blogspot.com/-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2754d2f6cd3621d09343cff0f3b3a6ef
0466a0996870b85bcb4de07a6028efdded023092
8bbd1eff8b018e50fa1189dc220a56bb0e7906ccc861bd59b0a57a6fecf8d0a1
GET /-zI0pi-UlZAI/UYl94UjJ96I/AAAAAAAAJAY/dpqr_RlUI4A/s000/11.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="11.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11140
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Sun, 08 May 2022 18:57:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2407"
Content-Type: image/gif
Age: 0
lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
142.250.74.1200 OK 11 kB URL HTTP/2 lh5.googleusercontent.com/-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif
IP 142.250.74.1:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash ab3f2cda071a82b6dbc067404699fb84
f1aa69bdc7f29e7737413a82be8b97d93b15a6eb
4d3958cb51bc42b95a3257d96b16acca6e53dbcf32847704b1b441f9a7651c93
GET /-XCXdaCYaOGE/T2WEcmd15EI/AAAAAAAACbQ/Z5UyZCuX4Xo/s36/20.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="20.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 11225
x-xss-protection: 0
date: Thu, 29 Sep 2022 02:06:50 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 5335
etag: "v10b8"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
142.250.74.161200 OK 8.6 kB URL HTTP/1.1 1.bp.blogspot.com/-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 4b4f6e15739d67050873ca3f1a65786e
f42e1c5e677d6da97dbfbd32161fbe87202a27fd
ba67fba16537316a624f0f8344d77524e19c2df5f85b28aa86b702c5cf1285e1
GET /-7UID-hPDOdg/UYl946HKGAI/AAAAAAAAJAg/CkIHp704FOk/s000/12.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="12.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 8611
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Sun, 11 Sep 2022 06:09:13 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2409"
Content-Type: image/gif
Age: 0
lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
142.250.74.1200 OK 6.9 kB URL HTTP/2 lh5.googleusercontent.com/-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif
IP 142.250.74.1:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash c3f6f37a1facf33abac47f1c5d5cedb2
34c323bc28abe8bb44598b94f56325827bbda75e
0ddd89667f12408f11369f673d035c1e9c329dbea848bffe05cca4d8a3b7bb5d
GET /-nkyzLkHUPg8/T2WEYdFqFxI/AAAAAAAACaQ/Mu1yPq91yuc/s36/10.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="10.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 6893
x-xss-protection: 0
date: Thu, 29 Sep 2022 02:06:50 GMT
expires: Sun, 08 May 2022 07:10:40 GMT
cache-control: public, max-age=86400, no-transform
age: 5335
etag: "v10fa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
142.250.74.1200 OK 10 kB URL HTTP/2 lh3.googleusercontent.com/-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif
IP 142.250.74.1:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2f6fd5905d46763e4250381d18a413eb
f35c7f8ddc23a44a543beacd1a42c9dd961f0529
fa5a337841922b3a6e6f9f25decd416ef368f002e34ac6b01ea7ee3e839b0df6
GET /-H8izCFTaHFE/T2b39mmu2NI/AAAAAAAACkM/k4bDdFe301U/s36/24.gif HTTP/1.1
Host: lh3.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="24.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 9958
x-xss-protection: 0
date: Thu, 29 Sep 2022 01:56:49 GMT
expires: Mon, 18 Apr 2022 10:29:06 GMT
cache-control: public, max-age=86400, no-transform
age: 5936
etag: "v10aa"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
www.widgeo.net/tcm_t_u.js
104.26.11.22200 OK 27 kB URL HTTP/2 www.widgeo.net/tcm_t_u.js
IP 104.26.11.22:0
File type HTML document, Unicode text, UTF-8 text, with very long lines (2082), with CRLF line terminators
Hash cb306d435265265656d610597fb26325
495bdc9882a3e970eb126217f32f520461667a09
6553fab3d2337b6c71181b3b3d0f476ba39b08fa759fbf5ec350377fb7a20705
GET /tcm_t_u.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 06 Oct 2022 03:35:44 GMT
last-modified: Mon, 25 Jul 2022 16:50:39 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=X1qEuHMs6cFBycL6V7I5vhVSQxMQsUKnbs4Lr1MAip9Q0zF2HNnwgN%2B4YcHf7CYD%2BbdxJje5SbgU1Jweaone69A58DfKFcoa%2B%2BDagDZgxuiSHV6qJ0uEqkZfJ9IB%2Flgt"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521aba85e99b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 34 x 35\012- data
Hash 83e1107d6c3aab9177481cfae5a85766
62052a6816003bcb433f9d9156124873f304abc2
2f3a10a4dac6b35eb5e7c71c8e08b15af49d486a6bc94d09e2679f0f5e61cca8
GET /-r72Ve93v7fk/UYl-HZTfYoI/AAAAAAAAJBk/5X6dcDUHglQ/s000/22.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="22.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11966
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241a"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
142.250.74.161200 OK 9.2 kB URL HTTP/1.1 2.bp.blogspot.com/-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 7f8668e6d3ad490f26348cc7282a4f90
2e166126a1217dcc5ce4cdf31716da22e6bd59d1
fa148f161258d3dc721eee88a5cc174559c6f1430176d647d2e9e2dc8b0a7209
GET /-AUg0GgtAPjc/UYl95tdaRUI/AAAAAAAAJAo/rNPxsDIROkQ/s000/13.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="13.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9176
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Fri, 23 Sep 2022 01:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v240b"
Content-Type: image/gif
Age: 0
fonts.googleapis.com/css?family=Open+Sans:400,700
216.58.211.10200 OK 10 kB URL HTTP/2 fonts.googleapis.com/css?family=Open+Sans:400,700
IP 216.58.211.10:0
Hash 49402cdcba3b06bcbc0ab8692534001c
70d4d0c5324bdfb49a75e9d69b3558b4b0fcc3f8
168ca718626e29994256bdcca3e412e9ac0cba6b48904a9721e163042d1fa72f
GET /css?family=Open+Sans:400,700 HTTP/1.1
Host: fonts.googleapis.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: text/css; charset=utf-8
access-control-allow-origin: *
timing-allow-origin: *
link: <https://fonts.gstatic.com>; rel=preconnect; crossorigin
strict-transport-security: max-age=31536000
expires: Thu, 29 Sep 2022 03:35:44 GMT
date: Thu, 29 Sep 2022 03:35:44 GMT
cache-control: private, max-age=86400
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin-allow-popups
content-encoding: gzip
server: ESF
x-xss-protection: 0
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
142.250.74.161200 OK 3.7 kB URL HTTP/1.1 1.bp.blogspot.com/-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash abf8a5999f654d65c90a962779ebe9ff
e81b0d3b64b7bd830ec204d8c54c52e983d5fe15
5d72dd878b3b6e37f8c0d66ac059d78850f04613fa9b3bf3a7ee21b6042ba028
GET /-exG8PIDVr4c/UYl97cOwu1I/AAAAAAAAJA0/IgPtwcaq8Lw/s000/15.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="15.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 3705
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Mon, 06 Dec 2021 15:33:27 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v240f"
Content-Type: image/gif
Age: 0
ylx-1.com/trk/?6e348921c7b1b331deee3f68cea0b8f6
185.66.200.221200 OK 43 B URL HTTP/2 ylx-1.com/trk/?6e348921c7b1b331deee3f68cea0b8f6
IP 185.66.200.221:0
ASN #201702 skHosting.eu s.r.o.
File type GIF image data, version 89a, 1 x 1\012- data
Hash 325472601571f31e1bf00674c368d335
2daeaa8b5f19f0bc209d976c02bd6acb51b00b0a
b1442e85b03bdcaf66dc58c7abb98745dd2687d86350be9a298a1d9382ac849b
GET /trk/?6e348921c7b1b331deee3f68cea0b8f6 HTTP/1.1
Host: ylx-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://ylx-1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: image/gif
content-length: 43
last-modified: Thu, 29 Sep 2022 03:35:45 GMT
x-robots-tag: noindex, nofollow, noarchive, nosnippet
pragma-directive: no-cache
cache-directive: no-cache
cache-control: public, no-cache
pragma: no-cache
expires: 0
X-Firefox-Spdy: h2
2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
142.250.74.161200 OK 7.9 kB URL HTTP/1.1 2.bp.blogspot.com/-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6229e0dc57d33c3b51d1b067ca69c625
2e445e3ab75ca465569838aa2d17c7609c8c45b9
0ac371efd8c7403e232169bd9b08de8676116b3768996abdc899bd91340beb8d
GET /-4p9OCcW73YI/UYl99FWvoGI/AAAAAAAAJBI/J8WhdMMtmpo/s000/17.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="17.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 7860
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Wed, 11 May 2022 19:21:33 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2413"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
142.250.74.161200 OK 30 kB URL HTTP/1.1 1.bp.blogspot.com/-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 2922070489895cdda39211911bb2e19b
9086810a13c3a1975637ce6432f833e536ba75ca
d35863d1bd2faa137b042ae5e673490891cd5170350085844981671895392e28
GET /-XlM_ZZcy2mw/UYl9-o17ChI/AAAAAAAAJBY/Z5w0AJG03G4/s000/19.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="19.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 30419
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Wed, 30 Mar 2022 13:29:00 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2417"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
142.250.74.161200 OK 2.5 kB URL HTTP/1.1 2.bp.blogspot.com/-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 24 x 24\012- data
Hash faa74e8c61fc64d5edb11613c7eead2c
e043879d3ee94a3edf10260f21f44bfa4a6fc66e
483c4a0396691993a641ec409c44b8b7e1daab0ae7e2b2944c4bc59520bb7655
GET /-PfP0K_VdDW0/UYl9oBf2atI/AAAAAAAAI-k/NL74VAi-oRw/s000/progress_ani.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="progress_ani.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 2545
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Sat, 24 Sep 2022 12:31:26 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v23eb"
Content-Type: image/gif
Age: 0
www.widgeo.net/geocompteur/shadow/flag_norway.png
104.26.11.22200 OK 880 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_norway.png
IP 104.26.11.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash e186cd78997ba86002ffe37b1bf7ea64
ec8365cf9b6db82cac866c92865cd8d6d4146ae5
de0cb6c3eada763844403b680fa08dcc451a48df4a234a7f607558987ee3371c
GET /geocompteur/shadow/flag_norway.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: image/webp
content-length: 880
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1041
content-disposition: inline; filename="flag_norway.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Wed, 05 Oct 2022 05:36:42 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 2066342
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=Ud3K4q%2B2ReRhuk7328tCq02FYS4MgAuImgXL37N2AegjPEJmZ8UITAw5afgqtvFSDjGtX6PxZMh4Y0WVrLduySj%2F12ucnYE4%2Ftn9C%2FY%2BJjf6Uq2Iy6tk22paicfmwcwP"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaadf7eb51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
104.26.11.22200 OK 4.9 kB URL HTTP/2 www.widgeo.net/cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js
IP 104.26.11.22:0
Hash 50079172ac489fe7c5ae83d4b6362575
250ac9873dbcf5bb57ab946d20e5c78a1f7de1e6
b3671a181fc815d78f2c85f780386e52bd1e44a65d159440c0a50415af12be16
GET /cdn-cgi/scripts/7d0fa10a/cloudflare-static/rocket-loader.min.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/hitparade.php?pagexiti=trackwidget
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: application/javascript
last-modified: Mon, 26 Sep 2022 11:11:52 GMT
etag: W/"633188f8-302c"
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=xJuB%2FT1C%2F6MTHbQx%2Fd9Glo3GVzr%2BWiObuL0P4VoVpD28B1w51iIlLAbWOnASEadbTi%2Fcu6betqnps1f4Qt%2FFs03YqxeW2c8g1HdIgblTvdkKGM%2BW%2F0L%2BJX2yFTeI%2Fh9x"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7521abaabf79b51e-OSL
x-frame-options: DENY
x-content-type-options: nosniff
expires: Sat, 01 Oct 2022 03:35:45 GMT
cache-control: max-age=172800, public
content-encoding: gzip
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_finland.png
104.26.11.22200 OK 724 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_finland.png
IP 104.26.11.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 4bb42c0a72d24163a22f5b03c19014ca
333c2b0e19045c6162ea18f96cde896e9568c965
57f34fcc77132fcdfc669956854f38ebc6089241f1d5f52d7218d06365c9e750
GET /geocompteur/shadow/flag_finland.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: image/webp
content-length: 724
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=899
content-disposition: inline; filename="flag_finland.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 09 Oct 2022 16:35:01 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 1681244
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=cftaGWm3N0cjE3I0UOIpPUkuHemsIlhL3BZY2wQtINVAn8%2Ft4zkZmwTMjkfBkFeG0LcqtwNrj%2BrKuBZU9A7giJlzcap2%2BHErU1XQ6qf65ElZ7QTsE8ebeuh4jqmbTntQ"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaadf7fb51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_germany.png
104.26.11.22200 OK 686 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_germany.png
IP 104.26.11.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 1c667705cee250254b246ed54d521b22
ebb8e80e0820a7e73926c5d2ff02c5f74c9925b1
1b4f1b8a79090e222e116c0bb9a7333a8b88f41dd2172122f67e8c0f1a6c2e21
GET /geocompteur/shadow/flag_germany.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: image/webp
content-length: 686
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=873
content-disposition: inline; filename="flag_germany.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Sun, 23 Oct 2022 20:53:33 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 456131
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=A%2BgNm%2BZhd8mDI8k%2BUYscgU1CYDyXWHWWjYMqVAUdhWrMQuFxLNS0bpkHOdGXVe5RBbU2QgAedlruk5Q7Nspm%2BJhtMD77GlZ2HSz1Km4ye%2BJHH%2BHvdJzkHtEUeDnnOhj9"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaadf85b51e-OSL
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/shadow/flag_canada.png
104.26.11.22200 OK 886 B URL HTTP/2 www.widgeo.net/geocompteur/shadow/flag_canada.png
IP 104.26.11.22:0
File type RIFF (little-endian) data, Web/P image\012- data
Hash 9dfda6415875b226812181f7ea64fcc8
6cdf4ed8b0a4d6a748510ab74d772183a55bdf38
b5e378613935ec7dabd4e11e095b4141b16462909085a185e3a093c8900e6a55
GET /geocompteur/shadow/flag_canada.png HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: image/webp
content-length: 886
cf-bgj: imgq:100,h2pri
cf-polished: origFmt=png, origSize=1148
content-disposition: inline; filename="flag_canada.webp"
vary: Accept
cache-control: public, max-age=2592000
expires: Fri, 28 Oct 2022 17:24:24 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 36681
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=iLrxt4agbcGyyPCpMPA2cgHsqEvTjQEnxWoKut5CTru6ar9YtcoNwU79r4Eyo%2BQC%2FakD1fOzcB%2BtQxzt%2FcA6nE9ouKNWu9noH6ylxcNTMLaHUPMyG3M8L%2F9ridyJsOFa"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaadf86b51e-OSL
X-Firefox-Spdy: h2
3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 3.bp.blogspot.com/-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash ee6d6b52c53c776577813dd3b5e67346
a938b694e2aed81a1177a76a32b66b518e9fea78
585ea39592df809c30b51e7d367aeafa0413b2476beac6e9912484aacb0e326f
GET /-K7pkFrjRAmg/UYl-IWl_fJI/AAAAAAAAJBs/J1vN-M1DjdQ/s000/23.gif HTTP/1.1
Host: 3.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="23.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 12154
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v241b"
Content-Type: image/gif
Age: 0
fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
142.250.74.163200 OK 45 kB URL HTTP/2 fonts.gstatic.com/s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2
IP 142.250.74.163:0
File type Web Open Font Format (Version 2), TrueType, length 44856, version 1.0\012- data
Hash 565ce506190ad3af920b40baf1794cec
ad3cba5d06100e09449a864d3b5e58403b478b3d
8778e9af2422858d7052ff9a0f3c12c08ae976bdd6e0316db144cd5579cd97db
GET /s/opensans/v34/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: http://www.widgeo.net
Connection: keep-alive
Referer: https://fonts.googleapis.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 44856
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Sat, 24 Sep 2022 18:01:25 GMT
expires: Sun, 24 Sep 2023 18:01:25 GMT
cache-control: public, max-age=31536000
last-modified: Mon, 15 Aug 2022 18:20:18 GMT
content-type: font/woff2
age: 380060
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
142.250.74.161200 OK 12 kB URL HTTP/1.1 1.bp.blogspot.com/-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 758a0518d4e16817962190748c2ed65b
7834a60870315b25a26610eadbf1cb76cb57425a
9f334e753336e3ddef1c187a36cefbd28723e13c9fe982d587be75c4bf25a399
GET /-P9IkONN3z6k/UYl-RFrowNI/AAAAAAAAJB8/fObV-YnsS5c/s000/26.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="26.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 11518
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Tue, 22 Mar 2022 19:57:38 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2420"
Content-Type: image/gif
Age: 0
2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
142.250.74.161200 OK 14 kB URL HTTP/1.1 2.bp.blogspot.com/-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 178ae7bc8ba7f2c93fce38923aa0a0e0
1a53ce687d64a38c5ec245dc32f25535d39df767
b78339e9b4454feb9a8a903a72b1526a0da4626d1d237e36287c27c8a8b9c3f6
GET /-d-ZlL4bONl4/UYl-SGf6FkI/AAAAAAAAJCE/WodYuWhK7k8/s000/27.gif HTTP/1.1
Host: 2.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="27.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 14382
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Wed, 20 Jul 2022 09:05:34 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2425"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
142.250.74.161200 OK 9.7 kB URL HTTP/1.1 1.bp.blogspot.com/-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash e9451c0f97aade01a0ee5fe500f91819
bccaad828c715be199eac75210ee248a9fed69cb
cc49b2fd8a07e1765061ae5893ec7700de8cc2dd53b9506b55c079f98fb5ccb9
GET /-zyFSdisLns4/UYl-TlBqMTI/AAAAAAAAJCM/d6rty53PcKs/s000/28.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="28.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 9651
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Tue, 29 Mar 2022 00:14:30 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2424"
Content-Type: image/gif
Age: 0
4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
142.250.74.161200 OK 6.0 kB URL HTTP/1.1 4.bp.blogspot.com/-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 6f597a032fa3941248175f066ea7d85c
8d11b4fafa5dd5fa501507fec2541d6c41eb0980
8904c280153182d0ca0258b0163364994c8d644c06ccd3527819adc860d71fb4
GET /-97ekotXWOkc/UYl-Ua4McKI/AAAAAAAAJCY/4G-GlZnXRnc/s000/29.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="29.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 5978
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Thu, 22 Sep 2022 15:33:25 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2427"
Content-Type: image/gif
Age: 0
1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
142.250.74.161200 OK 6.2 kB URL HTTP/1.1 1.bp.blogspot.com/-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash d32de0777c3455570b8316da2e55c151
3d8f8c8ea71003845021291517263f2cf597e75d
60be4a95d4774dcb77aba69aa1bca4e98d5596aed56d584d49cf0f5c405f07e9
GET /-_fAEeZUGfkQ/UYl-VelfqAI/AAAAAAAAJCg/R9hGE34mtDI/s000/30.gif HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="30.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6200
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Mon, 20 Jun 2022 06:51:03 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2429"
Content-Type: image/gif
Age: 0
4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
142.250.74.161200 OK 7.0 kB URL HTTP/1.1 4.bp.blogspot.com/-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif
IP 142.250.74.161:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 86a790169f7ee3eab648f73a3577d1db
484f5ef646ca88f04e42eec22b14dd4c4182f5ba
610f74fc26a960624833800cd25fe47635e75b9287dd89c78f3b137d683ef33d
GET /-mQl5GvTz7QY/UYl-VywKl8I/AAAAAAAAJCo/aRQxd9uI4xI/s000/31.gif HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="31.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 6957
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Thu, 01 Sep 2022 06:02:47 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v242b"
Content-Type: image/gif
Age: 0
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
142.250.74.1200 OK 7.5 kB URL HTTP/2 lh5.googleusercontent.com/-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif
IP 142.250.74.1:0
File type GIF image data, version 89a, 36 x 36\012- data
Hash 19c1058bce48182f99d8defd40d7cc37
d3a356987b4b26ce3f7b1e6ffe948b83280470e7
d47ce018c59039146898b2bec0ca49d2b6e6c5aac3d9b54549490b7b0a7702f2
GET /-9TYEg93ImUM/T2WEjvuhxTI/AAAAAAAACc0/KQRBXuuV_Yg/s36/32.gif HTTP/1.1
Host: lh5.googleusercontent.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-expose-headers: Content-Length
content-disposition: inline;filename="32.gif"
vary: Origin
access-control-allow-origin: *
timing-allow-origin: *
x-content-type-options: nosniff
server: fife
content-length: 7480
x-xss-protection: 0
date: Thu, 29 Sep 2022 02:06:50 GMT
expires: Sat, 04 Jun 2022 09:13:20 GMT
cache-control: public, max-age=86400, no-transform
age: 5335
etag: "v10da"
content-type: image/gif
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 472 B IP 142.250.74.3:0
Hash 9de589812cbbb75efbcbb1ddadd63bc7
291278b3e1cce78d217fb87e36bd0a79f33465ca
dc206b730948f82a9b161a9ae57406c376d16dca79e6ee867008957fe682c0c8
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
macamlawak.blogspot.com/feeds/posts/summary?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18305131085546952264_1664422541392&_=1664422542223
142.250.74.161200 OK 3.1 kB URL HTTP/1.1 macamlawak.blogspot.com/feeds/posts/summary?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18305131085546952264_1664422541392&_=1664422542223
IP 142.250.74.161:0
File type Unicode text, UTF-8 text, with very long lines (12672)
Hash 02223e3531d20783b7e518bec6be4538
82ff7c7665ab91dcb0778318218001e9aca0d97e
c4c96964e5217e481d6fcf00f110c2e43ba9d0375ce2f1887b5be63f2466cf32
GET /feeds/posts/summary?max-results=5&orderby=published&alt=json-in-script&callback=jQuery18305131085546952264_1664422541392&_=1664422542223 HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/javascript, application/javascript, application/ecmascript, application/x-ecmascript, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
ETag: W/"6d673b063b37a2bc98afa86a0149241ec9394460ebd0ccb6af139566f9e3b5f1"
Date: Thu, 29 Sep 2022 03:35:45 GMT
Content-Type: text/javascript; charset=UTF-8
Server: blogger-renderd
Expires: Thu, 29 Sep 2022 03:35:46 GMT
Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
X-Content-Type-Options: nosniff
X-XSS-Protection: 0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
Content-Encoding: gzip
Content-Length: 3143
X-Frame-Options: SAMEORIGIN
www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
142.250.74.72200 OK 75 kB URL HTTP/2 www.googletagmanager.com/gtag/js?id=G-RP7FMTL79Y
IP 142.250.74.72:0
File type ASCII text, with very long lines (17807)
Hash 0adda413871963d716f364300e9e464e
8490509f126f48fb8b2e63ac27143ce3890911a5
9e89ee934612a91bde618148395b6b9117c3642b2d1c63939a0c2eb733d83156
GET /gtag/js?id=G-RP7FMTL79Y HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Thu, 29 Sep 2022 03:35:45 GMT
expires: Thu, 29 Sep 2022 03:35:45 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 74792
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
ocsp.pki.goog/gts1c3
142.250.74.3200 OK 471 B IP 142.250.74.3:0
Hash 75eebff373cf84ae810a9e326f9e3d03
a5b22b0eee98dda385cb4e90d119205bc5f3a25f
f2089c63c7c2b3024972aba8cbc12dfcffc79dfc1ef9f7be801c79e7737b0d71
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
143.204.46.236302 Found 147 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/
IP 143.204.46.236:0
File type HTML document, ASCII text
Hash 9636872668ade5c28c2b194114715bca
e77e3e4ff78d719be776c11a523024b7c53eb120
bd54fc62058afbee01663cfa61c1842266d4cb65527f9ce9d2217eaafdfbea92
GET /hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/ HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www.widgeo.net/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 147
date: Thu, 29 Sep 2022 03:35:45 GMT
cache-control: no-store
location: /hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
p3p: CP="NON DSP COR CURa PSA PSD OUR BUS NAV STA"
set-cookie: idrxvr=1F121868-FFF7-442B-AE38-DEC84111ABE3; Path=/; Domain=xiti.com; Expires=Sun, 29 Oct 2023 03:35:45 GMT; HttpOnly
atidx=1F121868-FFF7-442B-AE38-DEC84111ABE3; Path=/; Domain=xiti.com; Expires=Sun, 29 Oct 2023 03:35:45 GMT; HttpOnly; Secure
atid=1F121868-FFF7-442B-AE38-DEC84111ABE3; Path=/; Domain=xiti.com; Expires=Sun, 29 Oct 2023 03:35:45 GMT; HttpOnly; Secure; SameSite=None
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: DsHu98h37Md_3lDYo3Qic5P8RqtXe-0-tjUsgixaMdND07_y2tMmPQ==
X-Firefox-Spdy: h2
ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=1245864101763&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
185.66.201.8200 OK 75 kB URL HTTP/1.1 ebaaa.xyz/148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=1245864101763&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0=
IP 185.66.201.8:0
ASN #201702 skHosting.eu s.r.o.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (65536), with no line terminators
Hash 35e552927e42f69128031ee60437c887
303e7ee14ac96da0663137a8def87f1fa30c5c1f
fa242becc80942fdb3518a2f950e44fce257f75f50ffd7ac32be3c63ad651112
GET /148bcf03fc/bb6bac9292/?placementName=ROTATOR&type=n&cv=XrdpCjjrArdArdCikAAGjCxCkrNkxNpZNrApCrCjdCCrkjCkdCrCrGCxCrdZZdjGjxCCr_85448&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&capSettings=eWx4LTEuY29tfDUwMDAwMHwyNHw1MTg1Ng==&adApiR=loaded_string_7258435b0bce9d250429df012c0426f88d0bd_2633299_1664422544.5247_50913&refferer=3362106174_aHR0cDovL21hY2FtbGF3YWsuYmxvZ3Nwb3QuY29tLw==&width=300&height=250&yxDom=eWx4LTEuY29t_d2e782c6bee242762e705a45bd0be41c&randomA=1245864101763&realRef=WW04RXo1aStzQlhlZVdVc01RSDlETzNJd1VxRXlHV3N4cnVzUkc4VFZrND0= HTTP/1.1
Host: ebaaa.xyz
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://ylx-1.com/
Upgrade-Insecure-Requests: 1
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:45 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Set-Cookie: total_impressions=1; expires=Thu, 29-Sep-2022 03:59:59 GMT; Max-Age=1454; secure; SameSite=None
used_ad2633299=1; expires=Thu, 29-Sep-2022 03:59:59 GMT; Max-Age=1454; path=/; secure; SameSite=None
used_c_51856=1; expires=Fri, 30-Sep-2022 03:35:45 GMT; Max-Age=86400; path=/; secure; SameSite=None
Expires: Sun, 01 Jan 2014 00:00:00 GMT
Cache-Control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
Pragma: no-cache
X-Robots-Tag: noindex,nofollow
Access-Control-Allow-Origin: *
Content-Encoding: gzip
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19099
Expires: Thu, 29 Sep 2022 08:54:04 GMT
Date: Thu, 29 Sep 2022 03:35:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19099
Expires: Thu, 29 Sep 2022 08:54:04 GMT
Date: Thu, 29 Sep 2022 03:35:45 GMT
Connection: keep-alive
r3.o.lencr.org/
23.36.77.32200 OK 503 B IP 23.36.77.32:0
ASN #20940 Akamai International B.V.
Hash 47f245f9a098439e59436f81d4c03415
950b3eadfd6fc7f859130fa2c63934c6ccd49889
25f075effbd8acded8f38d69ea17f673de3e197b635274d4c52411ef577fe8e7
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "25F075EFFBD8ACDED8F38D69EA17F673DE3E197B635274D4C52411EF577FE8E7"
Last-Modified: Thu, 29 Sep 2022 00:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19099
Expires: Thu, 29 Sep 2022 08:54:04 GMT
Date: Thu, 29 Sep 2022 03:35:45 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0734a230-932d-4bc0-bc12-9177b543b103.jpeg
34.120.237.76200 OK 5.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0734a230-932d-4bc0-bc12-9177b543b103.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash eece069cebb7039dbba50ec1cd73daab
4a35c50b5b16779582a75078b6df090892358d3b
41ad701a8ea3dcbfc38cb0701f3b24a6b833f6b1197014e10530c40496b6a13c
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F0734a230-932d-4bc0-bc12-9177b543b103.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 5222
x-amzn-requestid: cb2849d8-9579-42c1-84c9-e59700104aba
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKaUGnAoAMFrTQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334bddb-3649a45539964e985ee41911;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:34:19 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: v1EEfyICGujupCV26P4JAgnY-NHtvFVVWwxA0PNLs-Ky-FuR0TTDOA==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:50:26 GMT
age: 20719
etag: "4a35c50b5b16779582a75078b6df090892358d3b"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg
34.120.237.76200 OK 8.8 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 556ea631652cbb77ff38dbe3bbc8c4d1
ba797da9b2d6942161fa02a0e431de4868b84327
130dab67cb6d80c741a7f2dadfd536bd6900204880dc3b68b2afbfa53dd3d781
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F48e2707b-f3b2-4e52-99ae-03c359b698de.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8754
x-amzn-requestid: 175fc592-ed89-44fb-8cf7-8a4404f59d4b
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZC5OcHKkIAMFafA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-633108c2-2c0c36007bc8bcb56a54e8a1;Sampled=0
x-amzn-remapped-date: Mon, 26 Sep 2022 02:04:50 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: -AhTOJwgY3-DnA_pYXdBL18wPP_fNeyDmZjkdkQ2J-xrBZSyRcdK3Q==
via: 1.1 71e7943ea0729c284a06faa05a567236.cloudfront.net (CloudFront), 1.1 ead78c395f4bede3ec6cd7ea180e3d3a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 19:10:22 GMT
age: 30323
etag: "ba797da9b2d6942161fa02a0e431de4868b84327"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22873375-e381-41ee-a4b6-18ad56172e59.jpeg
34.120.237.76200 OK 8.5 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22873375-e381-41ee-a4b6-18ad56172e59.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 515e23ff5ef0fc336ac5ec7fd31dfacd
a98da6b6ce993bd8f3b58ba42915cd9c4b45946c
77c186eb00def4a978d1bfd9eac755f70bf465f622991aaf6681227aec3e118a
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F22873375-e381-41ee-a4b6-18ad56172e59.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8508
x-amzn-requestid: 5568f81c-2f99-44bf-9bd8-f015c604c513
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMJlzFywoAMFamw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334bc8b-1d335c5c536e895a19b5965f;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:28:43 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: 2RLqacSoBXtv1i-6fRV9nejJ5tulXVJ-VsKVDvsMqAgPqXKWe_2cJw==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 3cd7af07832481c336aa1c93c9b4a6fe.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:42:49 GMT
etag: "a98da6b6ce993bd8f3b58ba42915cd9c4b45946c"
content-type: image/jpeg
age: 17576
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
macamlawak.blogspot.com/favicon.ico
142.250.74.161200 OK 412 B URL HTTP/1.1 macamlawak.blogspot.com/favicon.ico
IP 142.250.74.161:0
File type MS Windows icon resource - 2 icons, 32x32, 8 bits/pixel, 16x16, 8 bits/pixel\012- data
Hash 501c61a70f5c41181aa050d9110909ca
5b985d5671a7caf686fdfb1df13488c4407f6c9f
c4aaf001607ee331f6871b4dbbf45942b1e197726714fd106e46d70cc10ee97e
GET /favicon.ico HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
Expires: Thu, 29 Sep 2022 03:35:45 GMT
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: private, max-age=86400
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48a423-ea95-40fe-9f8b-55ca1ca874fc.jpeg
34.120.237.76200 OK 9.7 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48a423-ea95-40fe-9f8b-55ca1ca874fc.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 28799c10f9ea39af55c7003f4254cc60
523da6aeec4cc23897fe01b0bc8b5da254edb3a8
2d1640fbd1f61aee3f2be670b37eb06e20bb265f702a428fadb550a4b51d64ab
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F4a48a423-ea95-40fe-9f8b-55ca1ca874fc.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9688
x-amzn-requestid: 68e9fd78-af17-4a8f-ad4b-6fe563ae94fe
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK4JHF5IAMFSXQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be9a-603f13d3016d77fa2ca94492;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:30 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: gIg0vR5I9vnA6Z7MJtTNaXn2TK8YeHWWcJEodiNJ6BEB7z7LUrcV1Q==
via: 1.1 28a7186077f9b5270d98dd053f31303e.cloudfront.net (CloudFront), 1.1 556b99c6be8d7078b9f067347c62df6a.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:56 GMT
age: 19849
etag: "523da6aeec4cc23897fe01b0bc8b5da254edb3a8"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
34.120.237.76200 OK 4.2 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 30471179bd7cdeecea2fa4ea98701aef
2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb
967e070aec3942c64cc6c4cfdc13d430825c9e5c26dbec5bb3d66237d5978dfc
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F6362b4f1-5935-43c9-9147-6d019a1ea6cd.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4235
x-amzn-requestid: 60825c64-7743-4b16-b80d-d1195ccb0f23
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMK2nFsDoAMFRwg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be90-1898e5d9111db7c843c1ebb4;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:37:20 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: C-XC9qsktkENdI6lWZp5RQjeEvrrFMUfBq1mA5dxEjRq5tkfL5Jsxw==
via: 1.1 0005a84c2971ff4f5bbb79e7ebc622a8.cloudfront.net (CloudFront), 1.1 ee8246c5442dace7525c74f6a799bb46.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 22:04:55 GMT
age: 19850
etag: "2bbcd6305b4da3204bf1c04b6db23d44cfc84fbb"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
34.120.237.76200 OK 14 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 11594ce7500d8776bfd5162b17f87d72
72603efba82d649ce5a7a0ca45dc830c0d9ef012
511f5aa33750cd4a02cf3968bf165ffa521e77cb4fb7135b516d7ad14e8b9d01
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ff5cbaf6d-fc16-4449-8b54-1d55f68eff4f.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 14073
x-amzn-requestid: 4ff72590-e28d-4d4b-af1a-4d62e75e3d66
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: ZMKnpEsJoAMFlBQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6334be30-38b014a25551aa0a2ab04ccf;Sampled=0
x-amzn-remapped-date: Wed, 28 Sep 2022 21:35:44 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: dyDhatfeYzzSQpRY7JpOIu3VhjlI8IOWcKCLCBWYaxJ1CYgCxqdQjA==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 567b44ed19c8caed2570b7bcd8c70034.cloudfront.net (CloudFront), 1.1 google
date: Wed, 28 Sep 2022 21:49:42 GMT
age: 20763
etag: "72603efba82d649ce5a7a0ca45dc830c0d9ef012"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
143.204.46.236200 OK 373 B URL HTTP/2 logv33.xiti.com/hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On
IP 143.204.46.236:0
File type GIF image data, version 89a, 39 x 25\012- data
Hash 29cb2a1e585dff1f4282449fdbbab2d7
075d147195f9dba1862a6f3990d219d7c4389225
86fd3be02ab9497ebb14a884fb226386cd0db257b234b005f0000326ae8c9081
GET /hit.xiti?s=281802&p=trackwidget&hl=3x35x42&r=1280x1024x24x24&ref=http://macamlawak.blogspot.com/&Rdt=On HTTP/1.1
Host: logv33.xiti.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://www.widgeo.net/
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
content-type: image/gif
content-length: 373
date: Thu, 29 Sep 2022 03:35:45 GMT
cache-control: no-store
strict-transport-security: max-age=15768000
x-cache: Miss from cloudfront
via: 1.1 5de23153ac267c206221751e1cccb6e8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: buLNie5ZG4_53qAqIHq0GMQ6UNRqxxhIrnBrFSZxhFMKYSEIsRGvDA==
X-Firefox-Spdy: h2
1.bp.blogspot.com/-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png
142.250.74.161200 OK 191 B URL HTTP/1.1 1.bp.blogspot.com/-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png
IP 142.250.74.161:0
File type PNG image data, 1 x 1, 8-bit/color RGB, non-interlaced\012- data
Hash 8fad4931d9f0f8a25b1a0e538c0963be
4dc416a330db497b9239b687c4961d7979c07ab6
3b607a6d761360fb4006f9064e899b3e9a7a563e6f0526766ccae09bbd509012
GET /-gIdQCoMIkSk/UYl-cRQtiHI/AAAAAAAAJC0/p9xZetaajI8/s000/grey.png HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="grey.png"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 191
X-XSS-Protection: 0
Date: Thu, 29 Sep 2022 03:35:45 GMT
Expires: Wed, 28 Sep 2022 15:06:40 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2438"
Content-Type: image/png
Age: 0
ocsp.sectigo.com/
104.18.32.68200 OK 471 B IP 104.18.32.68:0
Hash 0869109d63ef5270595fb34384023a90
f2ec69fdaca2a0327cd3599ac05d0051df3dee41
c4a67afda7094519228049f837e2e0c1674148bd2e564ae2dccc3458bbdb9ed4
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Thu, 29 Sep 2022 03:35:45 GMT
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Last-Modified: Mon, 26 Sep 2022 06:25:19 GMT
Expires: Mon, 03 Oct 2022 06:25:18 GMT
Etag: "f2ec69fdaca2a0327cd3599ac05d0051df3dee41"
Cache-Control: max-age=355172,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb4
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 7521abaed95c1c0e-OSL
my.rtmark.net/gid.js?userId=1c5fa56663fa41879eca9f854346cb3a
139.45.195.8200 OK 65 B URL HTTP/2 my.rtmark.net/gid.js?userId=1c5fa56663fa41879eca9f854346cb3a
IP 139.45.195.8:0
File type JSON data\012- , ASCII text
Hash a57bab3d645f0f42b4048bf9ed652e2d
492db9e7081dff10ef3c1f09cc3a28762ea37770
5bd6715f7adfc71b9f51e9933f2d3891ac82248d7353b152ff76d0b4ef3ef9d1
GET /gid.js?userId=1c5fa56663fa41879eca9f854346cb3a HTTP/1.1
Host: my.rtmark.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: application/json; charset=utf-8
content-length: 65
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-methods: POST, GET, OPTIONS, PUT, DELETE
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding, Authorization,X-CSRF-Token
access-control-expose-headers: Authorization
access-control-allow-credentials: true
set-cookie: ID=1c5fa56663fa41879eca9f854346cb3a; expires=Fri, 29 Sep 2023 03:35:45 GMT; secure; SameSite=None
strict-transport-security: max-age=1
x-content-type-options: nosniff
timing-allow-origin: *, *
X-Firefox-Spdy: h2
datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
139.45.195.253200 OK 12 B URL HTTP/1.1 datatechonert.com/log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f
IP 139.45.195.253:0
File type JSON data\012- , ASCII text, with no line terminators
Hash adb4650bfc9d2a73d4dd69583b0ceb14
1ce399d6e936232aaf2192cd7903a279c5015f22
21c1f682de27109caabcca9016511974defcec217c0441fd3f1b50ecdf8247ed
Analyzer Verdict Alert quad9 Sinkholed
POST /log/add?cid=1db9169f-90f4-4b2d-b517-bc47aab19c1f HTTP/1.1
Host: datatechonert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://macamlawak.blogspot.com/
Content-Type: text/plain;charset=UTF-8
Origin: http://macamlawak.blogspot.com
Content-Length: 1548
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx/1.19.10
Date: Thu, 29 Sep 2022 03:35:45 GMT
Content-Type: application/json; charset=utf-8
Content-Length: 12
Connection: keep-alive
Access-Control-Allow-Origin: http://macamlawak.blogspot.com
Access-Control-Allow-Methods: POST, GET, OPTIONS, PUT, DELETE
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding, X-CSRF-Token, Authorization, X-Forwarded-For, If-None-Match
Access-Control-Allow-Credentials: true
onmarshtompor.com/?rb=1BW-vhjLY-0hUaB2JY7OYmqhK3d9l2BRxlNo_ZiIFzxkZMv3qcVjcju7nYCpAi_Tg8_N8pOEakMMYP9hBK0fgkyiRKODGa57EIKknKcQIB7y78FDHGnxjrRbp8FGXtKYzzdlLibqc-KJyVuwFBXjyVUI-tMTk4ZdayEx4R1z6r4WGJmEEeuCVY4Ofg02RfBlt5EJ70f9Lh9XnSExBqVi8AK02Tyg7uvplAmh8w%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.431.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.431.0&bs=4828e6f0-024c-4a03-ae98-e150e0e71819&userId=1c5fa56663fa41879eca9f854346cb3a&m=link
139.45.197.243200 OK 1.8 kB URL HTTP/1.1 onmarshtompor.com/?rb=1BW-vhjLY-0hUaB2JY7OYmqhK3d9l2BRxlNo_ZiIFzxkZMv3qcVjcju7nYCpAi_Tg8_N8pOEakMMYP9hBK0fgkyiRKODGa57EIKknKcQIB7y78FDHGnxjrRbp8FGXtKYzzdlLibqc-KJyVuwFBXjyVUI-tMTk4ZdayEx4R1z6r4WGJmEEeuCVY4Ofg02RfBlt5EJ70f9Lh9XnSExBqVi8AK02Tyg7uvplAmh8w%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.431.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.431.0&bs=4828e6f0-024c-4a03-ae98-e150e0e71819&userId=1c5fa56663fa41879eca9f854346cb3a&m=link
IP 139.45.197.243:0
File type JSON data\012- , ASCII text, with very long lines (2292), with no line terminators
Hash 3d2fd4cfe4fa51c08f76ec31e86507aa
ab66dca91860812826d2d66f192ae287f5c7b047
1d738e1dcc22ec55cf78501bce5ebe0a6607f214581c00acc8717875ab1b870b
GET /?rb=1BW-vhjLY-0hUaB2JY7OYmqhK3d9l2BRxlNo_ZiIFzxkZMv3qcVjcju7nYCpAi_Tg8_N8pOEakMMYP9hBK0fgkyiRKODGa57EIKknKcQIB7y78FDHGnxjrRbp8FGXtKYzzdlLibqc-KJyVuwFBXjyVUI-tMTk4ZdayEx4R1z6r4WGJmEEeuCVY4Ofg02RfBlt5EJ70f9Lh9XnSExBqVi8AK02Tyg7uvplAmh8w%3D%3D&request_ab2=0&zoneid=3294720&js_build=iclick-v1.431.0&fs=0&cf=0&sw=1280&sh=1024&sah=1002&wx=0&wy=0&ww=1280&wh=1024&cw=1268&wiw=1280&wih=939&wfc=5&pl=http%3A%2F%2Fmacamlawak.blogspot.com%2F2014%2F01%2Fbayi-ditemui-mati-dalam-mangkuk-tanda.html&drf=&np=0&pt=0&nb=1&ng=1&ix=0&nw=1&tb=false&js_build=iclick-v1.431.0&bs=4828e6f0-024c-4a03-ae98-e150e0e71819&userId=1c5fa56663fa41879eca9f854346cb3a&m=link HTTP/1.1
Host: onmarshtompor.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Referer: http://macamlawak.blogspot.com/
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
HTTP/1.1 200 OK
Server: nginx
Date: Thu, 29 Sep 2022 03:35:45 GMT
Content-Type: application/json
Transfer-Encoding: chunked
Connection: keep-alive
X-Trace-Id: 3e06d14cf2ae3b91b9600194e7056ff9
Access-Control-Allow-Origin: http://macamlawak.blogspot.com
Access-Control-Allow-Credentials: true
Access-Control-Allow-Methods: GET, POST, OPTIONS
Access-Control-Allow-Headers: Accept, Content-Type, Content-Length, Accept-Encoding
Access-Control-Max-Age: 86400
Pragma: no-cache
Cache-Control: no-transform, no-store, no-cache, must-revalidate, max-age=0
Expires: Tue, 11 Jan 1994 10:00:00 GMT
Set-Cookie: OAID=1c5fa56663fa41879eca9f854346cb3a; expires=Fri, 29 Sep 2023 03:35:45 GMT; path=/
oaidts=1664422545; expires=Fri, 29 Sep 2023 03:35:45 GMT; path=/
syncedCookie=true; expires=Thu, 06 Oct 2022 03:35:45 GMT; path=/
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
Timing-Allow-Origin: *, *
Content-Encoding: gzip
macamlawak.blogspot.com/2014/01/ketagih-sayang.html
142.250.74.161200 OK 35 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/ketagih-sayang.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash ca1569fc66dfda8c3d697210bee0e440
3f4783b58afadd6bed98ac7323d70c81d7151b3f
d54ece232fbc3645a6c32cf754814b7cecc872f561bbf42f7f4f998a76102c6b
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/ketagih-sayang.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 29 Sep 2022 03:35:45 GMT
Date: Thu, 29 Sep 2022 03:35:45 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 35189
Server: GSE
macamlawak.blogspot.com/2014/01/video-depe-tanpa-segan-silu-rakam.html
142.250.74.161200 OK 37 kB URL HTTP/1.1 macamlawak.blogspot.com/2014/01/video-depe-tanpa-segan-silu-rakam.html
IP 142.250.74.161:0
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, ASCII text, with very long lines (15637)
Hash 6fcaa293db91cf2fc4da197e0f8384c8
70cb05187f977e7680e1061b6210e81b6f06531d
cd23b127e0adead3867e26798ce752fad2864a465e4f3ef7baa523cc1b9b4eac
Analyzer Verdict Alert fortinet Phishing
GET /2014/01/video-depe-tanpa-segan-silu-rakam.html HTTP/1.1
Host: macamlawak.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html, */*; q=0.01
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/2014/01/bayi-ditemui-mati-dalam-mangkuk-tanda.html
Cookie: ck_TCM_pop=1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
Expires: Thu, 29 Sep 2022 03:35:46 GMT
Date: Thu, 29 Sep 2022 03:35:46 GMT
Cache-Control: private, max-age=0
Last-Modified: Wed, 17 Aug 2022 01:59:18 GMT
ETag: W/"67eb5520a28217f889f899c74c926423b522b94b1e77b2edba8f0c95a344eb35"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 36657
Server: GSE
4.bp.blogspot.com/-em77GNhcclU/Uqv7CFA500I/AAAAAAAACU0/iv7CMgRNTrk/s1600/mama-ketagih.jpg
142.250.74.161200 OK 21 kB URL HTTP/1.1 4.bp.blogspot.com/-em77GNhcclU/Uqv7CFA500I/AAAAAAAACU0/iv7CMgRNTrk/s1600/mama-ketagih.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 357x285, components 3\012- data
Hash d970b12f0a3701929ebe79e4da8e29a6
6e2cb9a003ed09fdd595824688f7d61d31cef441
343a2793531ccafc845f000dbe0f651af819ef89d688130b2367b029c3af2dae
GET /-em77GNhcclU/Uqv7CFA500I/AAAAAAAACU0/iv7CMgRNTrk/s1600/mama-ketagih.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v94e"
Expires: Fri, 30 Sep 2022 03:35:46 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="mama-ketagih.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:46 GMT
Server: fife
Content-Length: 20720
X-XSS-Protection: 0
1.bp.blogspot.com/-Dp7c0dYjHKw/Uqv60RYIcXI/AAAAAAAACUs/d_7ZtyCLeko/s1600/awek-cun.jpg
142.250.74.161200 OK 17 kB URL HTTP/1.1 1.bp.blogspot.com/-Dp7c0dYjHKw/Uqv60RYIcXI/AAAAAAAACUs/d_7ZtyCLeko/s1600/awek-cun.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 320x303, components 3\012- data
Hash e9b3780d51aeb70595bb92d01bcdd9fd
f8a1f9b6bb5b756fdf1341bfca738b19702d0b2c
06068c4f3974c5a97d90cf38c73dbfa363d21936615d6466fe80800a8f72fb2d
GET /-Dp7c0dYjHKw/Uqv60RYIcXI/AAAAAAAACUs/d_7ZtyCLeko/s1600/awek-cun.jpg HTTP/1.1
Host: 1.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "v94c"
Expires: Fri, 30 Sep 2022 03:35:46 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="awek-cun.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:46 GMT
Server: fife
Content-Length: 17427
X-XSS-Protection: 0
4.bp.blogspot.com/-3XVfcpcfrOg/UkO0eX4e5iI/AAAAAAAAAK8/_oHzREkMCWs/s1600/depe.jpg
142.250.74.161200 OK 11 kB URL HTTP/1.1 4.bp.blogspot.com/-3XVfcpcfrOg/UkO0eX4e5iI/AAAAAAAAAK8/_oHzREkMCWs/s1600/depe.jpg
IP 142.250.74.161:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=2, software=Google], baseline, precision 8, 320x226, components 3\012- data
Hash 30fb23d7f4bc175f513ba9d25a7dfb87
ebfdf93434b07764a2b9c7cbaf9aadd92fc953c2
e33f02e0cb136a924a6ba03030a099871713b8789401de59fa0a8dfcc78b0fc2
GET /-3XVfcpcfrOg/UkO0eX4e5iI/AAAAAAAAAK8/_oHzREkMCWs/s1600/depe.jpg HTTP/1.1
Host: 4.bp.blogspot.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
HTTP/1.1 200 OK
Access-Control-Expose-Headers: Content-Length
ETag: "vb0"
Expires: Fri, 30 Sep 2022 03:35:46 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="depe.jpg"
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Thu, 29 Sep 2022 03:35:46 GMT
Server: fife
Content-Length: 10653
X-XSS-Protection: 0
www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
104.26.11.22200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/js/jquery.tipTip.minified.js
IP 104.26.11.22:0
GET /geocompteur/js/jquery.tipTip.minified.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=5251
cache-control: public, max-age=604800
expires: Wed, 05 Oct 2022 19:27:05 GMT
last-modified: Mon, 22 Mar 2010 15:10:00 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 29319
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=3cHyxdVC4gjYQsY7rrJVrS2gQfeDAypQnR2iThtgs%2BYN0FQ%2B0Lz7781HNAO%2FijhWBDwljJ3oa6ltVT%2Fwa2K7C7GyBCUfK2QdUt3Oj6V1BQIqyvqE2fOEiO8DUtNN57iH"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaa5f4db51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
tzegilo.com/stattag.js
104.21.84.149200 OK 0 B IP 104.21.84.149:0
GET /stattag.js HTTP/1.1
Host: tzegilo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: application/javascript
last-modified: Thu, 04 Aug 2022 15:18:11 GMT
etag: W/"62ebe333-8007"
link: <https://flerap.com/>; rel=preconnect; crossorigin, <https://fleraprt.com/>; rel=preconnect; crossorigin
cache-control: max-age=14400
cf-cache-status: HIT
age: 6309
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=31rcp5dklcUCSUzWT9rmy5wBVSqXelLRaKcalYAvn1VPUcS8%2Fs9zNnwE7nHhJHTAep5aVHq6dd74F6KwnmqVDbva8rmKg%2BzUNRN62Px92kRkZqOua%2B6ULzE%2FFxk1wg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7521abae78201c0a-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
www.widgeo.net/tcm.js
104.26.11.22200 OK 0 B IP 104.26.11.22:0
GET /tcm.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:44 GMT
content-type: application/javascript
cache-control: public, max-age=604800
expires: Thu, 06 Oct 2022 03:35:44 GMT
last-modified: Wed, 28 Sep 2022 16:25:06 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=v5KU1GncV0U4hBmn3V1iak3G5kAbwdly3ooYlhv5vcqDaVNQ7rMOQ%2FUzmoplP6MCLnf%2FWO6zEAJhhkHIv4lhibwUn3c%2Bdw4qA0k9VsCKX0RkA%2FdlT3VocN11kWpSVned"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521aba85e96b51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/hitparade.php?pagexiti=trackwidget
104.26.11.22200 OK 0 B URL HTTP/2 www.widgeo.net/hitparade.php?pagexiti=trackwidget
IP 104.26.11.22:0
GET /hitparade.php?pagexiti=trackwidget HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:44 GMT
content-type: text/html; charset=UTF-8
cache-control: public, max-age=180
expires: Thu, 29 Sep 2022 03:38:44 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=AZtVsefDdLApyKbHDlwYbMBV0T7C6WjZHBLLaP2%2FpFiEna8GpgZGPA3e%2BY0zNw51GRI6gHmftaiNLnZYihL64EK9bcsPQMU3VP5wQduRD2bzZS8fpnv9weMQkz8W4HQE"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521aba86e9ab51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
www.widgeo.net/geocompteur/trackwidget_js.js
104.26.11.22200 OK 0 B URL HTTP/2 www.widgeo.net/geocompteur/trackwidget_js.js
IP 104.26.11.22:0
GET /geocompteur/trackwidget_js.js HTTP/1.1
Host: www.widgeo.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://www.widgeo.net/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Thu, 29 Sep 2022 03:35:45 GMT
content-type: application/javascript
cf-bgj: minify
cf-polished: origSize=2426
cache-control: public, max-age=604800
expires: Wed, 05 Oct 2022 04:12:25 GMT
last-modified: Thu, 20 Jun 2019 15:14:42 GMT
vary: Accept-Encoding
x-content-type-options: nosniff
x-turbo-charged-by: LiteSpeed
cf-cache-status: HIT
age: 84198
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gXH7Opp9BPJGfRRfIWMAmXRvR0GhHLvwD%2FKRa%2FIPNHzApP8PKnj9mCDA%2B4sikeV5yRuXB3S3ut09DqGQwDmTI%2FebAZZl1iOYwLdxIBc2OTolyykGuhu8hgzU6ylWNhdq"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7521abaa6f4eb51e-OSL
content-encoding: br
X-Firefox-Spdy: h2
bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.431.0
139.45.197.234200 OK 0 B URL HTTP/2 bedrapiona.com/5/3294720/?oo=1&js_build=iclick-v1.431.0
IP 139.45.197.234:0
GET /5/3294720/?oo=1&js_build=iclick-v1.431.0 HTTP/1.1
Host: bedrapiona.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: http://macamlawak.blogspot.com
Connection: keep-alive
Referer: http://macamlawak.blogspot.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Thu, 29 Sep 2022 03:35:44 GMT
content-type: application/json
x-trace-id: acd4ac342d52a5e0ff0523c8c82cafdc
link: <https://my.rtmark.net>; rel="preconnect dns-prefetch",<https://propeller-tracking.com>; rel="preconnect dns-prefetch",<https://diromalxx.com>; rel="preconnect dns-prefetch"
access-control-allow-origin: http://macamlawak.blogspot.com
access-control-allow-credentials: true
access-control-allow-methods: GET, POST, OPTIONS
access-control-allow-headers: Accept, Content-Type, Content-Length, Accept-Encoding
access-control-max-age: 86400
timing-allow-origin: *
set-cookie: OAID=1c5fa56663fa41879eca9f854346cb3a; expires=Fri, 29 Sep 2023 03:35:44 GMT; path=/; secure; SameSite=None
oaidts=1664422544; expires=Fri, 29 Sep 2023 03:35:44 GMT; path=/; secure; SameSite=None
syncedCookie=; expires=Tue, 10 Nov 2009 23:00:00 GMT
pragma: no-cache, no-cache
cache-control: no-transform, no-store, no-cache, must-revalidate, max-age=0, no-store, no-cache, must-revalidate, max-age=0
expires: Tue, 11 Jan 1994 10:00:00 GMT, Mon, 26 Jul 1997 05:00:00 GMT
content-encoding: gzip
X-Firefox-Spdy: h2