Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
140s -
max time network
141s -
platform
windows7_x64 -
resource
win7-20240508-en -
resource tags
-
submitted
17/05/2024, 15:04 UTC
General
-
Target
501faf135d06531fc331fd8d2d464dae_JaffaCakes118.html
-
Size
148KB
-
MD5
501faf135d06531fc331fd8d2d464dae
-
SHA1
0f27c4605ce769666d57f619a46d68e3361fed89
-
SHA256
3e31a516db67fb1fb1255a838c4cf8dfa4d2f0265d33e0de9cd753e53980afd1
-
SHA512
ed202020478ff0b6b4c9c060f3e8074523311271ca6091c3c53b92ec303eb87cedcca2cebe0f08ae10c4eac85f4be17f6409b5ffb3585ee48380baf402ea6cf4
-
SSDEEP
3072:yIbKs/i2KTmPhcvC90C8r/ii2p1TrlSo68bQN:zKs/BFhaqO
Score
1/10
Malware Config
Signatures
-
Modifies Internet Explorer settings 1 TTPs 36 IoCs
-
Suspicious behavior: GetForegroundWindowSpam 1 IoCs
-
Suspicious use of FindShellTrayWindow 1 IoCs
-
Suspicious use of SetWindowsHookEx 6 IoCs
-
Suspicious use of WriteProcessMemory 4 IoCs
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\501faf135d06531fc331fd8d2d464dae_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
-
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1240 CREDAT:275457 /prefetch:22⤵
- Modifies Internet Explorer settings
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
-
Network
-
DNSresources.infolinks.comRemote address:8.8.8.8:53Requestresources.infolinks.comIN AResponseresources.infolinks.comIN A172.66.41.9resources.infolinks.comIN A172.66.42.247 -
DNS3.bp.blogspot.comRemote address:8.8.8.8:53Request3.bp.blogspot.comIN AResponse3.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A142.250.180.1
-
DNSresources.blogblog.comRemote address:8.8.8.8:53Requestresources.blogblog.comIN AResponseresources.blogblog.comIN CNAMEblogger.l.google.comblogger.l.google.comIN A142.250.178.9
-
DNSwww.google.comRemote address:8.8.8.8:53Requestwww.google.comIN AResponsewww.google.comIN A142.250.187.196
-
DNSd3gtl9l2a4fn1j.cloudfront.netRemote address:8.8.8.8:53Requestd3gtl9l2a4fn1j.cloudfront.netIN AResponse
-
DNSwww.blogger.comRemote address:8.8.8.8:53Requestwww.blogger.comIN AResponsewww.blogger.comIN CNAMEblogger.l.google.comblogger.l.google.comIN A142.250.178.9
-
DNSlh3.googleusercontent.comRemote address:8.8.8.8:53Requestlh3.googleusercontent.comIN AResponselh3.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A172.217.16.225
-
DNSlh5.googleusercontent.comRemote address:8.8.8.8:53Requestlh5.googleusercontent.comIN AResponselh5.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A172.217.16.225
-
DNSlh4.googleusercontent.comRemote address:8.8.8.8:53Requestlh4.googleusercontent.comIN AResponselh4.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A172.217.16.225
-
DNS1.bp.blogspot.comRemote address:8.8.8.8:53Request1.bp.blogspot.comIN AResponse1.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A142.250.180.1
-
DNSlh6.googleusercontent.comRemote address:8.8.8.8:53Requestlh6.googleusercontent.comIN AResponselh6.googleusercontent.comIN CNAMEgooglehosted.l.googleusercontent.comgooglehosted.l.googleusercontent.comIN A172.217.16.225
-
DNSgoogledrive.comRemote address:8.8.8.8:53Requestgoogledrive.comIN AResponsegoogledrive.comIN A172.217.169.65
-
GEThttps://lh3.googleusercontent.com/proxy/rCgBrRT9i0ScN4Ec9M8MT9TIinkpKxjwVE5PqbCoKg8cjbgsLylTtC34UXcHw5w2zWmrSIQt9Tp991nA2JcEuoy5IKZnbjzmQpAZL06ZumTRuYHxrDcAe3UxpY5uAYTWwQ=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/rCgBrRT9i0ScN4Ec9M8MT9TIinkpKxjwVE5PqbCoKg8cjbgsLylTtC34UXcHw5w2zWmrSIQt9Tp991nA2JcEuoy5IKZnbjzmQpAZL06ZumTRuYHxrDcAe3UxpY5uAYTWwQ=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh3.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh3.googleusercontent.com/proxy/PgenB9fs5KrrGsL9YXOKL70U9J8WLZRHfI4xmzVAAf0HpOXxTx7NwafZWP3qgm376eL1M0-aFJyTa8B2WJP-POQXlE852qLJIZ-KsEbkKnYrO4Dzvh64jUKIty4Tx6_gMg=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/PgenB9fs5KrrGsL9YXOKL70U9J8WLZRHfI4xmzVAAf0HpOXxTx7NwafZWP3qgm376eL1M0-aFJyTa8B2WJP-POQXlE852qLJIZ-KsEbkKnYrO4Dzvh64jUKIty4Tx6_gMg=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh3.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttp://resources.infolinks.com/js/infolinks_main.jsRemote address:172.66.41.9:80RequestGET /js/infolinks_main.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.infolinks.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Date: Fri, 17 May 2024 15:04:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Thu, 16 May 2024 13:46:38 GMT
ETag: W/"1146-6189276da26c6"
Cache-Control: max-age=3600
Expires: Fri, 17 May 2024 14:48:41 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 4576
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 885480c2de6a88bf-LHR
Content-Encoding: gzip
-
GEThttp://resources.infolinks.com/js/1931.004-3.034/ice.jsRemote address:172.66.41.9:80RequestGET /js/1931.004-3.034/ice.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.infolinks.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Date: Fri, 17 May 2024 15:04:58 GMT
Content-Type: application/javascript
Transfer-Encoding: chunked
Connection: keep-alive
Last-Modified: Tue, 14 May 2024 18:57:49 GMT
ETag: W/"2f3ac-6186e9407f17a"
Cache-Control: max-age=2592000
Expires: Sun, 16 Jun 2024 12:11:25 GMT
Via: 1.1 google
CF-Cache-Status: HIT
Age: 10413
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 885480c7de1588bf-LHR
Content-Encoding: gzip
-
GEThttps://www.google.com/jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30PngRemote address:142.250.187.196:443RequestGET /jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Location: https://www.gstatic.com/charts/loader.js?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Png
X-Content-Type-Options: nosniff
Server: sffe
Content-Length: 328
X-XSS-Protection: 0
Date: Fri, 17 May 2024 14:52:13 GMT
Expires: Fri, 17 May 2024 15:22:13 GMT
Cache-Control: public, max-age=1800
Content-Type: text/html; charset=UTF-8
Age: 765
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://resources.blogblog.com/img/icon18_wrench_allbkg.pngRemote address:142.250.178.9:443RequestGET /img/icon18_wrench_allbkg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 475
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 May 2024 06:58:59 GMT
Expires: Thu, 23 May 2024 06:58:59 GMT
Cache-Control: public, max-age=604800
Last-Modified: Wed, 15 May 2024 17:56:38 GMT
Content-Type: image/png
Age: 115559
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://resources.blogblog.com/img/icon18_edit_allbkg.gifRemote address:142.250.178.9:443RequestGET /img/icon18_edit_allbkg.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 162
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 11 May 2024 18:31:12 GMT
Expires: Sat, 18 May 2024 18:31:12 GMT
Cache-Control: public, max-age=604800
Last-Modified: Sat, 11 May 2024 16:51:51 GMT
Content-Type: image/gif
Age: 506026
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh4.googleusercontent.com/proxy/EWtFq-_EU26xxulvaszj-wNq_-2EE-F47LIkxyGJOVLkJcPryT2zVqRuqrGa3gpIZgIjDqAA7yDIASofvYOsPM7LHzzrVPv5rzyLe-wadZ8-WhucRoZsGkraD3oevPYADA=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/EWtFq-_EU26xxulvaszj-wNq_-2EE-F47LIkxyGJOVLkJcPryT2zVqRuqrGa3gpIZgIjDqAA7yDIASofvYOsPM7LHzzrVPv5rzyLe-wadZ8-WhucRoZsGkraD3oevPYADA=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh4.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh4.googleusercontent.com/proxy/qzjU_4j0XQDHnpY8qBjcCI-iPcViqn63pPiwYLQFiUyDfR1WjVUS0H8dBTIeoTaoeGO9W9Om713wTQ0_E7-ujnVK84CGZCahZZbByROuwMg78vG_4mMQxl1994v2hoDHCA=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/qzjU_4j0XQDHnpY8qBjcCI-iPcViqn63pPiwYLQFiUyDfR1WjVUS0H8dBTIeoTaoeGO9W9Om713wTQ0_E7-ujnVK84CGZCahZZbByROuwMg78vG_4mMQxl1994v2hoDHCA=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh4.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttp://fonts.googleapis.com/css?family=NoricanRemote address:216.58.204.74:80RequestGET /css?family=Norican HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: fonts.googleapis.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 17 May 2024 15:04:58 GMT
Date: Fri, 17 May 2024 15:04:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
-
GEThttps://www.blogger.com/static/v1/widgets/3011628148-widgets.jsRemote address:142.250.178.9:443RequestGET /static/v1/widgets/3011628148-widgets.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 52981
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 May 2024 11:59:17 GMT
Expires: Fri, 16 May 2025 11:59:17 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 02 Dec 2019 19:25:17 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
Age: 97541
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.cssRemote address:142.250.178.9:443RequestGET /static/v1/widgets/2549344219-widget_css_bundle.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 6822
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Thu, 16 May 2024 10:49:04 GMT
Expires: Fri, 16 May 2025 10:49:04 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 12 Jun 2020 07:20:00 GMT
Content-Type: text/css
Vary: Accept-Encoding
Age: 101754
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://www.blogger.com/dyn-css/authorization.css?targetBlogID=6774422058158560360&zx=9bbbb41d-fcbe-433c-ad6a-735665e38bb1Remote address:142.250.178.9:443RequestGET /dyn-css/authorization.css?targetBlogID=6774422058158560360&zx=9bbbb41d-fcbe-433c-ad6a-735665e38bb1 HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
Content-Type: text/css; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Fri, 17 May 2024 15:04:58 GMT
Last-Modified: Fri, 17 May 2024 15:04:58 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttp://fonts.googleapis.com/css?family=LimelightRemote address:216.58.204.74:80RequestGET /css?family=Limelight HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: fonts.googleapis.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Fri, 17 May 2024 15:04:58 GMT
Date: Fri, 17 May 2024 15:04:58 GMT
Cache-Control: private, max-age=86400
Cross-Origin-Opener-Policy: same-origin-allow-popups
Content-Security-Policy-Report-Only: require-trusted-types-for 'script';report-uri https://csp.withgoogle.com/csp/bcfae741e379a885f2ab2cf83ebe6d32/mr
Cross-Origin-Resource-Policy: cross-origin
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
-
GEThttps://lh5.googleusercontent.com/proxy/ZIq2YP4i2ZWguJjXuzkO3-gCgbFeQlUIzITCoRCFmbDbvLIyCCHpLNalK0-IY5gkEp8MKHhTF8bd4pGw-wzaIzDszKACEA9t_Q8_CnZEwKAuqZvPGQWQUtOPHJlT3TC3wQ=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/ZIq2YP4i2ZWguJjXuzkO3-gCgbFeQlUIzITCoRCFmbDbvLIyCCHpLNalK0-IY5gkEp8MKHhTF8bd4pGw-wzaIzDszKACEA9t_Q8_CnZEwKAuqZvPGQWQUtOPHJlT3TC3wQ=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh5.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh5.googleusercontent.com/proxy/hwrbzSZmHOGu11RyWjH37oRPkSh9IbbzR5S-68eT7PG8-2Bu4P0JKo87VZ_cHbn2TIq5CBOIQ7iK-W3oAguxgAq0VcgtDGjNSe--5zUbT1rEFa0H7Azzc65LH0mJ3Auyow=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/hwrbzSZmHOGu11RyWjH37oRPkSh9IbbzR5S-68eT7PG8-2Bu4P0JKo87VZ_cHbn2TIq5CBOIQ7iK-W3oAguxgAq0VcgtDGjNSe--5zUbT1rEFa0H7Azzc65LH0mJ3Auyow=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh5.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh5.googleusercontent.com/proxy/v8NQw2mrPgHE_j86MH4hP6zVOzXIIlo7CgpxaOcn25YPLB89-hVvaT9r5xteCPox1Hb65esoIA49t8LMEaYS3bi0mhGnFzpkvH9--BqBSVe0jNNgxNjeGTcb1a9QUzya-g=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/v8NQw2mrPgHE_j86MH4hP6zVOzXIIlo7CgpxaOcn25YPLB89-hVvaT9r5xteCPox1Hb65esoIA49t8LMEaYS3bi0mhGnFzpkvH9--BqBSVe0jNNgxNjeGTcb1a9QUzya-g=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh5.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh5.googleusercontent.com/proxy/PI7H44a9Me97TaiA64wEHwOHp_ps7oqLagbsGnTDqy5ZOeyXpQsKy1iNMp4iURHdy3xg_u6pdlig90tjGFzP9iVf_6TBivK-UAKpuKwklWBMOP6b5y3ugWNWjXwZ6cEk4A=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/PI7H44a9Me97TaiA64wEHwOHp_ps7oqLagbsGnTDqy5ZOeyXpQsKy1iNMp4iURHdy3xg_u6pdlig90tjGFzP9iVf_6TBivK-UAKpuKwklWBMOP6b5y3ugWNWjXwZ6cEk4A=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh5.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttp://1.bp.blogspot.com/-R8tDg4HW54U/UlYEbfrtwRI/AAAAAAAAAIU/qr8Wb5mizQY/w72-h72-p-k-no-nu/no-poster.jpgRemote address:142.250.180.1:80RequestGET /-R8tDg4HW54U/UlYEbfrtwRI/AAAAAAAAAIU/qr8Wb5mizQY/w72-h72-p-k-no-nu/no-poster.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 1.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/jpeg
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v56c"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="no-poster.jpg"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 2870
X-XSS-Protection: 0
-
GEThttp://1.bp.blogspot.com/-A2Ca8kkSRQ4/T0-JX0ykGyI/AAAAAAAAFoM/Ub-HQPzuO20/s1600/bg-blog.jpgRemote address:142.250.180.1:80RequestGET /-A2Ca8kkSRQ4/T0-JX0ykGyI/AAAAAAAAFoM/Ub-HQPzuO20/s1600/bg-blog.jpg HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 1.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bg-blog.jpg"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 29971
X-XSS-Protection: 0
Date: Fri, 17 May 2024 15:04:59 GMT
Expires: Sat, 18 May 2024 15:04:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v2cf5"
Content-Type: image/jpeg
Vary: Origin
Age: 0
-
GEThttp://1.bp.blogspot.com/-WTCe8TK_qAM/T09vaVCN60I/AAAAAAAAFn8/jxUsGPKfN4s/s1600/headline+news.pngRemote address:142.250.180.1:80RequestGET /-WTCe8TK_qAM/T09vaVCN60I/AAAAAAAAFn8/jxUsGPKfN4s/s1600/headline+news.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 1.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v167f"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="headline news.png"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 252
X-XSS-Protection: 0
-
GEThttps://googledrive.com/host/0B5SIFYMR0r2KcHZFVE1Ick94d1E/ragamb.jsRemote address:172.217.169.65:443RequestGET /host/0B5SIFYMR0r2KcHZFVE1Ick94d1E/ragamb.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: googledrive.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Referrer-Policy: no-referrer
Content-Length: 1604
Date: Fri, 17 May 2024 15:04:58 GMT
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://lh6.googleusercontent.com/proxy/f7xsQKzusCWfCLHwTov0o2f9i0p-uyzuzX0dypR8QNRQiGlXn6stnfCVxDPVMKRdWVJCQS-BKai8cb5PuiEgoYau239Tu6RbN3yzDUR-LfXP75ScQYJUNAG0AwlD6FwJQg=w72-h72-p-k-no-nuRemote address:172.217.16.225:443RequestGET /proxy/f7xsQKzusCWfCLHwTov0o2f9i0p-uyzuzX0dypR8QNRQiGlXn6stnfCVxDPVMKRdWVJCQS-BKai8cb5PuiEgoYau239Tu6RbN3yzDUR-LfXP75ScQYJUNAG0AwlD6FwJQg=w72-h72-p-k-no-nu HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: lh6.googleusercontent.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cross-Origin-Resource-Policy: cross-origin
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Type: text/html; charset=UTF-8
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 1715
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttp://3.bp.blogspot.com/-Gsv90fI1P1w/T0oxdn4UbeI/AAAAAAAAFjY/YGgddDwiMx0/s1600/btn_search.gifRemote address:142.250.180.1:80RequestGET /-Gsv90fI1P1w/T0oxdn4UbeI/AAAAAAAAFjY/YGgddDwiMx0/s1600/btn_search.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2a42"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="btn_search.gif"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 773
X-XSS-Protection: 0
-
GEThttp://3.bp.blogspot.com/-n5nYdL63Oig/T0kl7AILWAI/AAAAAAAAFiY/pXSUsPY1lwk/s1600/header-bg1.pngRemote address:142.250.180.1:80RequestGET /-n5nYdL63Oig/T0kl7AILWAI/AAAAAAAAFiY/pXSUsPY1lwk/s1600/header-bg1.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/png
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v1626"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="header-bg1.png"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 489
X-XSS-Protection: 0
-
GEThttp://3.bp.blogspot.com/-wglG2zzuKYA/TyXJdoMVWrI/AAAAAAAAE20/WytUd5_weW0/s1600/pager-bg.pngRemote address:142.250.180.1:80RequestGET /-wglG2zzuKYA/TyXJdoMVWrI/AAAAAAAAE20/WytUd5_weW0/s1600/pager-bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="pager-bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 1114
X-XSS-Protection: 0
Date: Fri, 17 May 2024 12:44:39 GMT
Expires: Sat, 18 May 2024 12:44:39 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v136d"
Content-Type: image/png
Vary: Origin
Age: 8419
-
GEThttp://3.bp.blogspot.com/-RkoCx5FnLGs/Tx19O3lENsI/AAAAAAAAEuI/4QvGJ5y-cLU/s1600/bottom-bg.pngRemote address:142.250.180.1:80RequestGET /-RkoCx5FnLGs/Tx19O3lENsI/AAAAAAAAEuI/4QvGJ5y-cLU/s1600/bottom-bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 3.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="bottom-bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 245
X-XSS-Protection: 0
Date: Fri, 17 May 2024 15:04:59 GMT
Expires: Sat, 18 May 2024 15:04:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v12e2"
Content-Type: image/png
Vary: Origin
Age: 0
-
DNS2.bp.blogspot.comRemote address:8.8.8.8:53Request2.bp.blogspot.comIN AResponse2.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A142.250.180.1
-
DNS4.bp.blogspot.comRemote address:8.8.8.8:53Request4.bp.blogspot.comIN AResponse4.bp.blogspot.comIN CNAMEphotos-ugc.l.googleusercontent.comphotos-ugc.l.googleusercontent.comIN A142.250.180.1
-
GEThttp://fonts.gstatic.com/s/norican/v15/MwQ2bhXp1eSBqjkPKJVbsw.woffRemote address:216.58.201.99:80RequestGET /s/norican/v15/MwQ2bhXp1eSBqjkPKJVbsw.woff HTTP/1.1
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Origin: file:
Accept-Encoding: gzip, deflate
Host: fonts.gstatic.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: font/woff
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 37860
Date: Fri, 17 May 2024 15:04:58 GMT
Expires: Sat, 17 May 2025 15:04:58 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Tue, 12 Sep 2023 18:18:17 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
-
GEThttp://fonts.gstatic.com/s/limelight/v19/XLYkIZL7aopJVbZJHDuoOulB.woffRemote address:216.58.201.99:80RequestGET /s/limelight/v19/XLYkIZL7aopJVbZJHDuoOulB.woff HTTP/1.1
Accept: */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Origin: file:
Accept-Encoding: gzip, deflate
Host: fonts.gstatic.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Accept-Ranges: bytes
Content-Type: font/woff
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="apps-themes"
Report-To: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
Timing-Allow-Origin: *
Content-Length: 28428
Date: Fri, 17 May 2024 15:04:58 GMT
Expires: Sat, 17 May 2025 15:04:58 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 24 Aug 2023 20:56:35 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
-
GEThttp://2.bp.blogspot.com/-8MT23fRt_Gw/T0jvi8_uE2I/AAAAAAAAFhA/UIeU-8rIpWw/s1600/main-bg.pngRemote address:142.250.180.1:80RequestGET /-8MT23fRt_Gw/T0jvi8_uE2I/AAAAAAAAFhA/UIeU-8rIpWw/s1600/main-bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 2.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="main-bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 71243
X-XSS-Protection: 0
Date: Fri, 17 May 2024 12:39:44 GMT
Expires: Sat, 18 May 2024 12:39:44 GMT
Cache-Control: public, max-age=86400, no-transform
Age: 8714
ETag: "v1610"
Content-Type: image/png
Vary: Origin
-
GEThttp://2.bp.blogspot.com/-rmTA9-c3acA/T05zu5IKhbI/AAAAAAAAFnM/wvJUQXi28-s/s1600/topnav_bg.pngRemote address:142.250.180.1:80RequestGET /-rmTA9-c3acA/T05zu5IKhbI/AAAAAAAAFnM/wvJUQXi28-s/s1600/topnav_bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 2.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="topnav_bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 237
X-XSS-Protection: 0
Date: Fri, 17 May 2024 15:04:58 GMT
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1673"
Content-Type: image/png
Vary: Origin
Age: 0
-
GEThttp://2.bp.blogspot.com/-9yN0O2c45uw/T0jx5nk7-ZI/AAAAAAAAFhY/cXQzFtDfIoU/s1600/batas.gifRemote address:142.250.180.1:80RequestGET /-9yN0O2c45uw/T0jx5nk7-ZI/AAAAAAAAFhY/cXQzFtDfIoU/s1600/batas.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 2.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v29b0"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="batas.gif"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 35
X-XSS-Protection: 0
-
GEThttp://2.bp.blogspot.com/-07FUJoh-Bik/T0-N3VzdQ9I/AAAAAAAAFo0/V8BjpWAHP90/s1600/movie.gifRemote address:142.250.180.1:80RequestGET /-07FUJoh-Bik/T0-N3VzdQ9I/AAAAAAAAFo0/V8BjpWAHP90/s1600/movie.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 2.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2a53"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="movie.gif"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 319
X-XSS-Protection: 0
-
GEThttp://4.bp.blogspot.com/-KvWwwYc98ac/T0zcRrzHcJI/AAAAAAAAFlM/ehAGx-cm8A8/s1600/navbar-bg.pngRemote address:142.250.180.1:80RequestGET /-KvWwwYc98ac/T0zcRrzHcJI/AAAAAAAAFlM/ehAGx-cm8A8/s1600/navbar-bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 4.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="navbar-bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 305
X-XSS-Protection: 0
Date: Fri, 17 May 2024 15:04:59 GMT
Expires: Sat, 18 May 2024 15:04:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1653"
Content-Type: image/png
Vary: Origin
Age: 0
-
GEThttp://4.bp.blogspot.com/-0UZ84gjcT7Q/T0ov6aRrvjI/AAAAAAAAFjQ/AASimbCShag/s1600/field.gifRemote address:142.250.180.1:80RequestGET /-0UZ84gjcT7Q/T0ov6aRrvjI/AAAAAAAAFjQ/AASimbCShag/s1600/field.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 4.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/gif
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
ETag: "v2b66"
Expires: Sat, 18 May 2024 15:04:58 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="field.gif"
X-Content-Type-Options: nosniff
Date: Fri, 17 May 2024 15:04:58 GMT
Server: fife
Content-Length: 281
X-XSS-Protection: 0
-
GEThttp://4.bp.blogspot.com/-mln30iVkHZg/T09gXKSf85I/AAAAAAAAFnU/1Mej8RLH71Y/s1600/footer-bg.pngRemote address:142.250.180.1:80RequestGET /-mln30iVkHZg/T09gXKSf85I/AAAAAAAAFnU/1Mej8RLH71Y/s1600/footer-bg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: 4.bp.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Access-Control-Expose-Headers: Content-Length
Content-Disposition: inline;filename="footer-bg.png"
X-Content-Type-Options: nosniff
Server: fife
Content-Length: 393
X-XSS-Protection: 0
Date: Fri, 17 May 2024 15:04:59 GMT
Expires: Sat, 18 May 2024 15:04:59 GMT
Cache-Control: public, max-age=86400, no-transform
ETag: "v1675"
Content-Type: image/png
Vary: Origin
Age: 0
-
DNSrouter.infolinks.comRemote address:8.8.8.8:53Requestrouter.infolinks.comIN AResponserouter.infolinks.comIN A172.66.42.247router.infolinks.comIN A172.66.41.9
-
GEThttps://router.infolinks.com/usync/manage?pid=1135079&wsid=3&pdom=&purl=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2F501faf135d06531fc331fd8d2d464dae_JaffaCakes118.htmlRemote address:172.66.42.247:443RequestGET /usync/manage?pid=1135079&wsid=3&pdom=&purl=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2F501faf135d06531fc331fd8d2d464dae_JaffaCakes118.html HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: router.infolinks.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Date: Fri, 17 May 2024 15:04:59 GMT
Content-Length: 0
Connection: keep-alive
via: 1.1 google
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 885480c9cd9d954a-LHR
-
172.217.16.225:443https://lh3.googleusercontent.com/proxy/rCgBrRT9i0ScN4Ec9M8MT9TIinkpKxjwVE5PqbCoKg8cjbgsLylTtC34UXcHw5w2zWmrSIQt9Tp991nA2JcEuoy5IKZnbjzmQpAZL06ZumTRuYHxrDcAe3UxpY5uAYTWwQ=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh3.googleusercontent.com/proxy/rCgBrRT9i0ScN4Ec9M8MT9TIinkpKxjwVE5PqbCoKg8cjbgsLylTtC34UXcHw5w2zWmrSIQt9Tp991nA2JcEuoy5IKZnbjzmQpAZL06ZumTRuYHxrDcAe3UxpY5uAYTWwQ=w72-h72-p-k-no-nuHTTP Response
404 -
172.217.16.225:443https://lh3.googleusercontent.com/proxy/PgenB9fs5KrrGsL9YXOKL70U9J8WLZRHfI4xmzVAAf0HpOXxTx7NwafZWP3qgm376eL1M0-aFJyTa8B2WJP-POQXlE852qLJIZ-KsEbkKnYrO4Dzvh64jUKIty4Tx6_gMg=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh3.googleusercontent.com/proxy/PgenB9fs5KrrGsL9YXOKL70U9J8WLZRHfI4xmzVAAf0HpOXxTx7NwafZWP3qgm376eL1M0-aFJyTa8B2WJP-POQXlE852qLJIZ-KsEbkKnYrO4Dzvh64jUKIty4Tx6_gMg=w72-h72-p-k-no-nuHTTP Response
404 -
172.66.41.9:80http://resources.infolinks.com/js/1931.004-3.034/ice.jshttp
HTTP Request
GET http://resources.infolinks.com/js/infolinks_main.jsHTTP Response
200HTTP Request
GET http://resources.infolinks.com/js/1931.004-3.034/ice.jsHTTP Response
200 -
142.250.187.196:443www.google.comtls
-
142.250.187.196:443https://www.google.com/jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30Pngtls, http
HTTP Request
GET https://www.google.com/jsapi?key=ABQIAAAAlQIoliUVPjZwD8UDgw_U3RTUhB4JyH-ajz-fA9t4yePPPdGAfRTC_mtuh6Iq1MLEipD0I2rCi30PngHTTP Response
301 -
172.66.41.9:80resources.infolinks.com
-
142.250.178.9:443resources.blogblog.comtls
-
142.250.178.9:443https://resources.blogblog.com/img/icon18_edit_allbkg.giftls, http
HTTP Request
GET https://resources.blogblog.com/img/icon18_wrench_allbkg.pngHTTP Response
200HTTP Request
GET https://resources.blogblog.com/img/icon18_edit_allbkg.gifHTTP Response
200 -
172.217.16.225:443https://lh4.googleusercontent.com/proxy/EWtFq-_EU26xxulvaszj-wNq_-2EE-F47LIkxyGJOVLkJcPryT2zVqRuqrGa3gpIZgIjDqAA7yDIASofvYOsPM7LHzzrVPv5rzyLe-wadZ8-WhucRoZsGkraD3oevPYADA=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh4.googleusercontent.com/proxy/EWtFq-_EU26xxulvaszj-wNq_-2EE-F47LIkxyGJOVLkJcPryT2zVqRuqrGa3gpIZgIjDqAA7yDIASofvYOsPM7LHzzrVPv5rzyLe-wadZ8-WhucRoZsGkraD3oevPYADA=w72-h72-p-k-no-nuHTTP Response
404 -
172.217.16.225:443https://lh4.googleusercontent.com/proxy/qzjU_4j0XQDHnpY8qBjcCI-iPcViqn63pPiwYLQFiUyDfR1WjVUS0H8dBTIeoTaoeGO9W9Om713wTQ0_E7-ujnVK84CGZCahZZbByROuwMg78vG_4mMQxl1994v2hoDHCA=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh4.googleusercontent.com/proxy/qzjU_4j0XQDHnpY8qBjcCI-iPcViqn63pPiwYLQFiUyDfR1WjVUS0H8dBTIeoTaoeGO9W9Om713wTQ0_E7-ujnVK84CGZCahZZbByROuwMg78vG_4mMQxl1994v2hoDHCA=w72-h72-p-k-no-nuHTTP Response
404 -
216.58.204.74:80http://fonts.googleapis.com/css?family=Noricanhttp
HTTP Request
GET http://fonts.googleapis.com/css?family=NoricanHTTP Response
200 -
142.250.178.9:443www.blogger.comtls
-
142.250.178.9:443https://www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.csstls, http
HTTP Request
GET https://www.blogger.com/static/v1/widgets/3011628148-widgets.jsHTTP Response
200HTTP Request
GET https://www.blogger.com/static/v1/widgets/2549344219-widget_css_bundle.cssHTTP Response
200 -
142.250.178.9:443https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6774422058158560360&zx=9bbbb41d-fcbe-433c-ad6a-735665e38bb1tls, http
HTTP Request
GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=6774422058158560360&zx=9bbbb41d-fcbe-433c-ad6a-735665e38bb1HTTP Response
200 -
216.58.204.74:80http://fonts.googleapis.com/css?family=Limelighthttp
HTTP Request
GET http://fonts.googleapis.com/css?family=LimelightHTTP Response
200 -
172.217.16.225:443lh5.googleusercontent.comtls
-
172.217.16.225:443https://lh5.googleusercontent.com/proxy/ZIq2YP4i2ZWguJjXuzkO3-gCgbFeQlUIzITCoRCFmbDbvLIyCCHpLNalK0-IY5gkEp8MKHhTF8bd4pGw-wzaIzDszKACEA9t_Q8_CnZEwKAuqZvPGQWQUtOPHJlT3TC3wQ=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh5.googleusercontent.com/proxy/ZIq2YP4i2ZWguJjXuzkO3-gCgbFeQlUIzITCoRCFmbDbvLIyCCHpLNalK0-IY5gkEp8MKHhTF8bd4pGw-wzaIzDszKACEA9t_Q8_CnZEwKAuqZvPGQWQUtOPHJlT3TC3wQ=w72-h72-p-k-no-nuHTTP Response
404 -
172.217.16.225:443https://lh5.googleusercontent.com/proxy/hwrbzSZmHOGu11RyWjH37oRPkSh9IbbzR5S-68eT7PG8-2Bu4P0JKo87VZ_cHbn2TIq5CBOIQ7iK-W3oAguxgAq0VcgtDGjNSe--5zUbT1rEFa0H7Azzc65LH0mJ3Auyow=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh5.googleusercontent.com/proxy/hwrbzSZmHOGu11RyWjH37oRPkSh9IbbzR5S-68eT7PG8-2Bu4P0JKo87VZ_cHbn2TIq5CBOIQ7iK-W3oAguxgAq0VcgtDGjNSe--5zUbT1rEFa0H7Azzc65LH0mJ3Auyow=w72-h72-p-k-no-nuHTTP Response
404 -
172.217.16.225:443https://lh5.googleusercontent.com/proxy/PI7H44a9Me97TaiA64wEHwOHp_ps7oqLagbsGnTDqy5ZOeyXpQsKy1iNMp4iURHdy3xg_u6pdlig90tjGFzP9iVf_6TBivK-UAKpuKwklWBMOP6b5y3ugWNWjXwZ6cEk4A=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh5.googleusercontent.com/proxy/v8NQw2mrPgHE_j86MH4hP6zVOzXIIlo7CgpxaOcn25YPLB89-hVvaT9r5xteCPox1Hb65esoIA49t8LMEaYS3bi0mhGnFzpkvH9--BqBSVe0jNNgxNjeGTcb1a9QUzya-g=w72-h72-p-k-no-nuHTTP Response
404HTTP Request
GET https://lh5.googleusercontent.com/proxy/PI7H44a9Me97TaiA64wEHwOHp_ps7oqLagbsGnTDqy5ZOeyXpQsKy1iNMp4iURHdy3xg_u6pdlig90tjGFzP9iVf_6TBivK-UAKpuKwklWBMOP6b5y3ugWNWjXwZ6cEk4A=w72-h72-p-k-no-nuHTTP Response
404 -
142.250.180.1:80http://1.bp.blogspot.com/-A2Ca8kkSRQ4/T0-JX0ykGyI/AAAAAAAAFoM/Ub-HQPzuO20/s1600/bg-blog.jpghttp
HTTP Request
GET http://1.bp.blogspot.com/-R8tDg4HW54U/UlYEbfrtwRI/AAAAAAAAAIU/qr8Wb5mizQY/w72-h72-p-k-no-nu/no-poster.jpgHTTP Response
200HTTP Request
GET http://1.bp.blogspot.com/-A2Ca8kkSRQ4/T0-JX0ykGyI/AAAAAAAAFoM/Ub-HQPzuO20/s1600/bg-blog.jpgHTTP Response
200 -
142.250.180.1:80http://1.bp.blogspot.com/-WTCe8TK_qAM/T09vaVCN60I/AAAAAAAAFn8/jxUsGPKfN4s/s1600/headline+news.pnghttp
HTTP Request
GET http://1.bp.blogspot.com/-WTCe8TK_qAM/T09vaVCN60I/AAAAAAAAFn8/jxUsGPKfN4s/s1600/headline+news.pngHTTP Response
200 -
172.217.169.65:443googledrive.comtls
-
172.217.169.65:443https://googledrive.com/host/0B5SIFYMR0r2KcHZFVE1Ick94d1E/ragamb.jstls, http
HTTP Request
GET https://googledrive.com/host/0B5SIFYMR0r2KcHZFVE1Ick94d1E/ragamb.jsHTTP Response
404 -
172.217.16.225:443lh6.googleusercontent.comtls
-
172.217.16.225:443https://lh6.googleusercontent.com/proxy/f7xsQKzusCWfCLHwTov0o2f9i0p-uyzuzX0dypR8QNRQiGlXn6stnfCVxDPVMKRdWVJCQS-BKai8cb5PuiEgoYau239Tu6RbN3yzDUR-LfXP75ScQYJUNAG0AwlD6FwJQg=w72-h72-p-k-no-nutls, http
HTTP Request
GET https://lh6.googleusercontent.com/proxy/f7xsQKzusCWfCLHwTov0o2f9i0p-uyzuzX0dypR8QNRQiGlXn6stnfCVxDPVMKRdWVJCQS-BKai8cb5PuiEgoYau239Tu6RbN3yzDUR-LfXP75ScQYJUNAG0AwlD6FwJQg=w72-h72-p-k-no-nuHTTP Response
404 -
142.250.180.1:80http://3.bp.blogspot.com/-n5nYdL63Oig/T0kl7AILWAI/AAAAAAAAFiY/pXSUsPY1lwk/s1600/header-bg1.pnghttp
HTTP Request
GET http://3.bp.blogspot.com/-Gsv90fI1P1w/T0oxdn4UbeI/AAAAAAAAFjY/YGgddDwiMx0/s1600/btn_search.gifHTTP Response
200HTTP Request
GET http://3.bp.blogspot.com/-n5nYdL63Oig/T0kl7AILWAI/AAAAAAAAFiY/pXSUsPY1lwk/s1600/header-bg1.pngHTTP Response
200 -
142.250.180.1:80http://3.bp.blogspot.com/-RkoCx5FnLGs/Tx19O3lENsI/AAAAAAAAEuI/4QvGJ5y-cLU/s1600/bottom-bg.pnghttp
HTTP Request
GET http://3.bp.blogspot.com/-wglG2zzuKYA/TyXJdoMVWrI/AAAAAAAAE20/WytUd5_weW0/s1600/pager-bg.pngHTTP Response
200HTTP Request
GET http://3.bp.blogspot.com/-RkoCx5FnLGs/Tx19O3lENsI/AAAAAAAAEuI/4QvGJ5y-cLU/s1600/bottom-bg.pngHTTP Response
200 -
216.58.201.99:80http://fonts.gstatic.com/s/norican/v15/MwQ2bhXp1eSBqjkPKJVbsw.woffhttp
HTTP Request
GET http://fonts.gstatic.com/s/norican/v15/MwQ2bhXp1eSBqjkPKJVbsw.woffHTTP Response
200 -
216.58.201.99:80http://fonts.gstatic.com/s/limelight/v19/XLYkIZL7aopJVbZJHDuoOulB.woffhttp
HTTP Request
GET http://fonts.gstatic.com/s/limelight/v19/XLYkIZL7aopJVbZJHDuoOulB.woffHTTP Response
200 -
142.250.180.1:80http://2.bp.blogspot.com/-8MT23fRt_Gw/T0jvi8_uE2I/AAAAAAAAFhA/UIeU-8rIpWw/s1600/main-bg.pnghttp
HTTP Request
GET http://2.bp.blogspot.com/-8MT23fRt_Gw/T0jvi8_uE2I/AAAAAAAAFhA/UIeU-8rIpWw/s1600/main-bg.pngHTTP Response
200 -
142.250.180.1:80http://2.bp.blogspot.com/-rmTA9-c3acA/T05zu5IKhbI/AAAAAAAAFnM/wvJUQXi28-s/s1600/topnav_bg.pnghttp
HTTP Request
GET http://2.bp.blogspot.com/-rmTA9-c3acA/T05zu5IKhbI/AAAAAAAAFnM/wvJUQXi28-s/s1600/topnav_bg.pngHTTP Response
200 -
142.250.180.1:80http://2.bp.blogspot.com/-9yN0O2c45uw/T0jx5nk7-ZI/AAAAAAAAFhY/cXQzFtDfIoU/s1600/batas.gifhttp
HTTP Request
GET http://2.bp.blogspot.com/-9yN0O2c45uw/T0jx5nk7-ZI/AAAAAAAAFhY/cXQzFtDfIoU/s1600/batas.gifHTTP Response
200 -
142.250.180.1:80http://2.bp.blogspot.com/-07FUJoh-Bik/T0-N3VzdQ9I/AAAAAAAAFo0/V8BjpWAHP90/s1600/movie.gifhttp
HTTP Request
GET http://2.bp.blogspot.com/-07FUJoh-Bik/T0-N3VzdQ9I/AAAAAAAAFo0/V8BjpWAHP90/s1600/movie.gifHTTP Response
200 -
142.250.180.1:80http://4.bp.blogspot.com/-KvWwwYc98ac/T0zcRrzHcJI/AAAAAAAAFlM/ehAGx-cm8A8/s1600/navbar-bg.pnghttp
HTTP Request
GET http://4.bp.blogspot.com/-KvWwwYc98ac/T0zcRrzHcJI/AAAAAAAAFlM/ehAGx-cm8A8/s1600/navbar-bg.pngHTTP Response
200 -
142.250.180.1:80http://4.bp.blogspot.com/-mln30iVkHZg/T09gXKSf85I/AAAAAAAAFnU/1Mej8RLH71Y/s1600/footer-bg.pnghttp
HTTP Request
GET http://4.bp.blogspot.com/-0UZ84gjcT7Q/T0ov6aRrvjI/AAAAAAAAFjQ/AASimbCShag/s1600/field.gifHTTP Response
200HTTP Request
GET http://4.bp.blogspot.com/-mln30iVkHZg/T09gXKSf85I/AAAAAAAAFnU/1Mej8RLH71Y/s1600/footer-bg.pngHTTP Response
200 -
172.66.42.247:443router.infolinks.comtls
-
172.66.42.247:443https://router.infolinks.com/usync/manage?pid=1135079&wsid=3&pdom=&purl=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2F501faf135d06531fc331fd8d2d464dae_JaffaCakes118.htmltls, http
HTTP Request
GET https://router.infolinks.com/usync/manage?pid=1135079&wsid=3&pdom=&purl=file%3A%2F%2F%2FC%3A%2FUsers%2FAdmin%2FAppData%2FLocal%2FTemp%2F501faf135d06531fc331fd8d2d464dae_JaffaCakes118.htmlHTTP Response
200 -
204.79.197.200:443ieonline.microsoft.comtls
-
204.79.197.200:443ieonline.microsoft.comtls
-
204.79.197.200:443ieonline.microsoft.comtls
-
8.8.8.8:53resources.infolinks.comdns
DNS Request
resources.infolinks.com
DNS Response
172.66.41.9172.66.42.247
-
8.8.8.8:533.bp.blogspot.comdns
DNS Request
3.bp.blogspot.com
DNS Response
142.250.180.1
-
8.8.8.8:53resources.blogblog.comdns
DNS Request
resources.blogblog.com
DNS Response
142.250.178.9
-
8.8.8.8:53www.google.comdns
DNS Request
www.google.com
DNS Response
142.250.187.196
-
8.8.8.8:53d3gtl9l2a4fn1j.cloudfront.netdns
DNS Request
d3gtl9l2a4fn1j.cloudfront.net
-
8.8.8.8:53www.blogger.comdns
DNS Request
www.blogger.com
DNS Response
142.250.178.9
-
8.8.8.8:53lh3.googleusercontent.comdns
DNS Request
lh3.googleusercontent.com
DNS Response
172.217.16.225
-
8.8.8.8:53lh5.googleusercontent.comdns
DNS Request
lh5.googleusercontent.com
DNS Response
172.217.16.225
-
8.8.8.8:53lh4.googleusercontent.comdns
DNS Request
lh4.googleusercontent.com
DNS Response
172.217.16.225
-
8.8.8.8:531.bp.blogspot.comdns
DNS Request
1.bp.blogspot.com
DNS Response
142.250.180.1
-
8.8.8.8:53lh6.googleusercontent.comdns
DNS Request
lh6.googleusercontent.com
DNS Response
172.217.16.225
-
8.8.8.8:53googledrive.comdns
DNS Request
googledrive.com
DNS Response
172.217.169.65
-
8.8.8.8:532.bp.blogspot.comdns
DNS Request
2.bp.blogspot.com
DNS Response
142.250.180.1
-
8.8.8.8:534.bp.blogspot.comdns
DNS Request
4.bp.blogspot.com
DNS Response
142.250.180.1
-
8.8.8.8:53router.infolinks.comdns
DNS Request
router.infolinks.com
DNS Response
172.66.42.247172.66.41.9
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
1KB
MD5a93121ae32cd488369d25acff1c165d3
SHA1215bc2d389f9738d938d045a24381f42fc72ce31
SHA2567d381e836d548532725e2c04e7c98077ca91a29ff936b175c1d692bdbf64c78d
SHA512b31a7d150fb2a185fe3e4d537e04f8835e19907d2d258aaf6b77a5aa03469804ad7d9cf66784bfd2b68dc00880345b68b93df12d744bd1df6c42a4fb20a698f7
-
Filesize
724B
MD5ac89a852c2aaa3d389b2d2dd312ad367
SHA18f421dd6493c61dbda6b839e2debb7b50a20c930
SHA2560b720e19270c672f9b6e0ec40b468ac49376807de08a814573fe038779534f45
SHA512c6a88f33688cc0c287f04005e07d5b5e4a8721d204aa429f93ade2a56aeb86e05d89a8f7a44c1e93359a185a4c5f418240c6cdbc5a21314226681c744cf37f36
-
Filesize
471B
MD5d665d525841cb38ec628aa2f1f0afd7f
SHA1b1d3b46f89642f4072f181f837a4e27e4c57964f
SHA2568ff4c455fc4ad0d6e0afd8e421247cd224f7938eaf026ef13120e44c37da62e9
SHA5125511955949f56f830936a262b63710b37f8a7727ce66071073d4a09cf03c5cba1337ec58e643958b759594262417e3358d1df1d6c83edcbf0d37d8c2ed3ff114
-
Filesize
410B
MD5e49f9bbfbebcfc027e51d6575c693dd0
SHA1b9d06eff115a35686a8e2a2c00c3a3e1f4752fc3
SHA2561770b83a393ae8a20354b8066ce4a89d8cb2c463a5d80f5ed69de3060ede3257
SHA5123c9ea1b014dbfda3713c38b2622235151b5219bca48b4f8e62212dae10ec931fb75b56ddcd6eb2cd5057f630d2ef7e35e67097bbb43bd5ef1075ee4215fd736b
-
Filesize
410B
MD512af3c6bdd1ebc88bd57659112f8860e
SHA13e4209bae277bd11e56a498a3e6c8879488fc679
SHA25605838b989b6a2404ddc601d4a4009fcab05125fc8ca6e6d8affa6178eeacc09b
SHA512c658879ab1bf460b2ba599d486ccedb62f3cb3c1abf0a00043ae5ab3861e39bdefbd9660cb88874ab222199867db204f405c9df11e35f8c39b60c7034071c3ec
-
Filesize
410B
MD56610487ecacac00f767780e28bf07977
SHA14696c08a7d56c089ab3d0eacd4a711f26076a79e
SHA256d75aabfb9a98909f2282b4e10dc5c5f19dd39c3099d2076ff9ebf1e87489fd58
SHA512987ef0de6c6895785529c1d53e46859cbcc845c4e3a0a7e39adc639a794683d0e41a6a1932f7a84ebc66606e184ba8648f756009b0dfb83b5d65c41ab0d82497
-
Filesize
344B
MD531f16dccb7e0b815d655b7f24d432236
SHA1c54ebf5f89235476b536b96106ac4880456ddd15
SHA2560c2673548d7ad1d4841e9154a0809cda6fb495e76c36bc9b86c56a8ea2254b75
SHA5127e001e15a23604126d48290360eb4bec6600b7d72ba0de90df84dce56673208d390e1f05b4bcc04380c39c8e11d6b06deddab837060de8f531fe5d451d28c7b3
-
Filesize
344B
MD5cf9c6fd1185c53b60ecd524af25ce2f2
SHA10a49caabbc8d8c9d80a64f766f5064f2961d711e
SHA256a88fe570c049c6ab2aa000fbd6f27394ebb9081790b0cd500591bdbd30193942
SHA5120c8af7e6f0679af4208edb0cf20bebcc895af1128d893edb6f6c4dac9f957792656cc8f0c3500ba5d35e423c9ba76ee569a50d8c043f5ce6cd68550dd229812b
-
Filesize
344B
MD5b4c4a549c9461f8a1d52f03c3f05f9f5
SHA1dd6ed034c5b0fd25608e5845bd2bcbebe2e13afb
SHA2567698945866424ae7dfe14e44183120aea6c26ecc449130548fcae861aecd89f2
SHA5129b565ff534ed1888cd68c369f016d940370f7412d827dc50350fccf43393828f239cbbca31e6b7215c94f039fcadfedf6c19083d375e691f57d6abc9e69ef41f
-
Filesize
344B
MD5431643fb8ee9a0ef08a4e1525ed4b341
SHA1f3f5ca239e5fd2c43aadb7e9b390aeea77f4198f
SHA256ac8744baf30cba03b5596263cd8065f3aa77f966da172bf3e789e087c49cc50b
SHA512e63e700c6469ef96ca0eeae75608f5844cd99d3799adb552708d9a25eb81e2a9282fb3fed3589f303bfd8c4c679d85427b5b0018c3d1a1a90e9493d63fb8778e
-
Filesize
344B
MD5c877e3bc00863faee33ad75f4fefa8b8
SHA1603e07d789654b0c37cb93cdbf97895b84bfc801
SHA2565efa1689c15b5993d5859874c2fcf05a61415383ebf561fa3531992034cd25bf
SHA512535e638749f69ca9a53b90a55e340bbd1db95c3c37a8df96625f8a0b6d5242b8843be03e74a1ac4a85872a0497003a0b9a47f8ce06b0df6a467b4ed72e606d22
-
Filesize
344B
MD5bd9fb5734f3f8c1dae0299cdafac4db7
SHA145f31287ad318b7bec2f01d980a4f9231cab9227
SHA256a64f9309e957e8cd1e886f3f6754359aa5eb0dae43390d54c9bd5b234bc883d9
SHA512862f38fcaa4e7d87f86a6b64e2a8f87c013760d7a238e54da68a522f0dddf002f9b31668efc4b497793d09f039edf355f7ee1d70e2bf3083770b6cdb2e1ff863
-
Filesize
344B
MD54a63caa07276ce427d127bbee0b00e63
SHA1b90f2771561543a5baf6f5deced73d521a5bc546
SHA25646e633c6538832950f6412f25cd35069c3e786c96c21efeb3764dff2497c288d
SHA512e491a12e1e8e9e35838f868e9433fec399525f9e29fd8d6a253323d810a6c93855d2f43bd61619378411fbc057f1e9bf6a66423e5f786c0f5e7789e9740e86bf
-
Filesize
344B
MD503a2b1e9bbdf6effbf601d797b9adf41
SHA11fcc9f5b6bddfddfb5b8c433f43a63776674650b
SHA25610cb02bd9871c7a36c8adfb44867198e88f9ddbabb812d66b6c06436cb00f8a9
SHA51217b972eb45d1fd2a88410a04bb2c57487d292bea399fd15df613040b980c0f13cfd96adf6bce7cbbbebc9713ba4c326e89161e2aafe4f1449cb690383f446cf1
-
Filesize
392B
MD52ffccb58265b75cafb8c51722bac0c36
SHA199bfb361b915a512ad41b09790729653f45d149e
SHA2560e40e7475a148f45867664c60f548350a4a4f09f5810598488c8ec10b7d0641f
SHA512962791ec832b153ca2f0b3af4842682face1e6e3783e84a1fe142211eef876de060e7ba00ba9ecd7045460ba5717dcb1ce71b12bd0a5110bfbd30f4724448367
-
Filesize
392B
MD5351a12c998adb650f4f8cf3af8a7074a
SHA1b59cdc5d587ecaec7c1fa076e13987caf551f583
SHA256c7a8ed38ec294529d3e56573a640e960951929d7bb37fdb3ceadb3edb40d703d
SHA51242c82ac2abcd3fa12a25d28982cca310272eeaaf5e91801f58beb0b86a169286e1076aae9dc0f1989e82fb5e1006d075ef01fbf830b515804babdba38fd9bae3
-
Filesize
406B
MD570bfeabc9c5387fc819ac52a0eb31259
SHA1852c2c801134fa571cba2d2d10374f8bd91eac25
SHA25635b5792a0cda834ba8c46e6ec760c4e755691bf6a5c9ff443be5351af58c4fad
SHA5122fcfa99552ce93affae988c4be45aae9f0b3126752ddca09608ad02b3192814d4eba8a16fd699d21bb0729df48ab4b936b2ccdf5247a4d1f2626a6dff5b2c424
-
Filesize
402B
MD5cb08ae0b88922eaccac425e978f47bc6
SHA17c352461cb4c0065d8c34953fa9e2c44264cf545
SHA2568253a49ce9e9bfa51d61eff6af5a30edc86be70632090f212932d66252541b95
SHA51290274a1bdd7355b3e0c8d8958422014201a2d1ea10fa2595e730b310c2d154a0bc85f12412357e0ed92f340444a8a449a2f597cad98031cd71fc4272ae0c6375
-
Filesize
68KB
MD529f65ba8e88c063813cc50a4ea544e93
SHA105a7040d5c127e68c25d81cc51271ffb8bef3568
SHA2561ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184
SHA512e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa
-
Filesize
177KB
MD5435a9ac180383f9fa094131b173a2f7b
SHA176944ea657a9db94f9a4bef38f88c46ed4166983
SHA25667dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34
SHA5121a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a