Analysis

  • max time kernel
    148s
  • max time network
    150s
  • platform
    windows7_x64
  • resource
    win7-20240705-en
  • resource tags

    arch:x64arch:x86image:win7-20240705-enlocale:en-usos:windows7-x64system
  • submitted
    20/07/2024, 06:48 UTC

General

  • Target

    5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html

  • Size

    204KB

  • MD5

    5f6fc4222f46de441d930fe5320b4479

  • SHA1

    2f55eb36178d7000e75f4d86376d017e45b1a516

  • SHA256

    4268bf6117932ccb8572948289541c724726e7f1abed19d8ab68f50a5ed67b1d

  • SHA512

    484e8c27587b9f23892092c83a06ab74946e8de02bbad2a4f8b0599ae63677a8285427e6456fa439ddd8a470fe1819f2cbc1ededbc1144792ee4a6dac1e9c81b

  • SSDEEP

    6144:gd3cIIIW3G4k5QhL8atVsIiVQ5MIsuQyf5bTM+MdBXpKgXpgx4t4tCyumO9mge/O:UcDd3G4k5QhL8atOIiwMIsuQyf5bTM+a

Score
1/10

Malware Config

Signatures

  • Modifies Internet Explorer settings 1 TTPs 36 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Program Files\Internet Explorer\iexplore.exe
    "C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html
    1⤵
    • Modifies Internet Explorer settings
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1948
    • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
      "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:1948 CREDAT:275457 /prefetch:2
      2⤵
      • Modifies Internet Explorer settings
      • Suspicious use of SetWindowsHookEx
      PID:2260

Network

  • flag-us
    DNS
    ajax.googleapis.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ajax.googleapis.com
    IN A
    Response
    ajax.googleapis.com
    IN A
    142.250.75.234
  • flag-us
    DNS
    www.blogger.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.blogger.com
    IN A
    Response
    www.blogger.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    142.250.75.233
  • flag-us
    DNS
    platform.twitter.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    platform.twitter.com
    IN A
    Response
    platform.twitter.com
    IN CNAME
    cs472.wac.edgecastcdn.net
    cs472.wac.edgecastcdn.net
    IN CNAME
    cs1-apr-8315.wac.edgecastcdn.net
    cs1-apr-8315.wac.edgecastcdn.net
    IN CNAME
    wac.apr-8315.edgecastdns.net
    wac.apr-8315.edgecastdns.net
    IN CNAME
    cs1-lb-eu.8315.ecdns.net
    cs1-lb-eu.8315.ecdns.net
    IN CNAME
    cs41.wac.edgecastcdn.net
    cs41.wac.edgecastcdn.net
    IN A
    93.184.220.66
  • flag-us
    DNS
    2.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    2.bp.blogspot.com
    IN A
    Response
    2.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.75.225
  • flag-us
    DNS
    4.bp.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    4.bp.blogspot.com
    IN A
    Response
    4.bp.blogspot.com
    IN CNAME
    photos-ugc.l.googleusercontent.com
    photos-ugc.l.googleusercontent.com
    IN A
    142.250.75.225
  • flag-us
    DNS
    static.addtoany.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    static.addtoany.com
    IN A
    Response
    static.addtoany.com
    IN A
    104.22.71.197
    static.addtoany.com
    IN A
    172.67.39.148
    static.addtoany.com
    IN A
    104.22.70.197
  • flag-us
    DNS
    fortaller.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    fortaller.com
    IN A
    Response
  • flag-us
    DNS
    apis.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apis.google.com
    IN A
    Response
    apis.google.com
    IN CNAME
    plus.l.google.com
    plus.l.google.com
    IN A
    216.58.214.174
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_1?le=scs
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_1?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 35615
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 15 Jul 2024 18:19:16 GMT
    Expires: Tue, 15 Jul 2025 18:19:16 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Thu, 11 Jul 2024 18:55:26 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 390545
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    GET
    http://static.addtoany.com/menu/page.js
    IEXPLORE.EXE
    Remote address:
    104.22.71.197:80
    Request
    GET /menu/page.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.addtoany.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Date: Sat, 20 Jul 2024 06:48:20 GMT
    Content-Type: text/html
    Content-Length: 167
    Connection: keep-alive
    Cache-Control: max-age=3600
    Expires: Sat, 20 Jul 2024 07:48:20 GMT
    Location: https://static.addtoany.com/menu/page.js
    Vary: Accept-Encoding
    X-Content-Type-Options: nosniff
    Server: cloudflare
    CF-RAY: 8a610145fe8d632e-LHR
    alt-svc: h3=":443"; ma=86400
  • flag-pl
    GET
    http://platform.twitter.com/widgets.js
    IEXPLORE.EXE
    Remote address:
    93.184.220.66:80
    Request
    GET /widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: platform.twitter.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Encoding: gzip
    Access-Control-Allow-Methods: GET
    Access-Control-Allow-Origin: *
    Age: 475
    Cache-Control: public, max-age=1800
    Content-Type: application/javascript; charset=utf-8
    Date: Sat, 20 Jul 2024 06:48:20 GMT
    Etag: "824beb891744db98ccbd3a456e59e0f7+gzip"
    Last-Modified: Mon, 11 Dec 2023 17:20:28 GMT
    P3P: CP="CAO DSP LAW CURa ADMa DEVa TAIa PSAa PSDa IVAa IVDa OUR BUS IND UNI COM NAV INT"
    Server: ECS (lhd/35D8)
    Server-Timing: x-cache;desc= HIT,x-tw-cdn;desc=
    Vary: Accept-Encoding
    x-amz-server-side-encryption: AES256
    X-Cache: HIT
    x-tw-cdn: VZ
    Content-Length: 27597
  • flag-fr
    GET
    https://apis.google.com/js/plusone.js
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /js/plusone.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Sat, 20 Jul 2024 06:48:20 GMT
    Expires: Sat, 20 Jul 2024 06:48:20 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "9ba74e3c29037567"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 57428
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 15 Jul 2024 18:06:12 GMT
    Expires: Tue, 15 Jul 2025 18:06:12 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Thu, 11 Jul 2024 18:55:26 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 391329
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=file%3A%2F%2F&url=http%3A%2F%2Fdhiauliman.blogspot.com%2F2015%2F06%2Fterapi-hujan-untuk-anis-merah-macet.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=file%3A%2F%2F&url=http%3A%2F%2Fdhiauliman.blogspot.com%2F2015%2F06%2Fterapi-hujan-untuk-anis-merah-macet.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: http://developers.google.com/
    Cross-Origin-Resource-Policy: cross-origin
    X-Content-Type-Options: nosniff
    Server: sffe
    Content-Length: 226
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:48:19 GMT
    Expires: Sat, 20 Jul 2024 07:18:19 GMT
    Cache-Control: public, max-age=1800
    Content-Type: text/html; charset=UTF-8
    Age: 2
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://apis.google.com/js/rpc:shindig_random.js?onload=init
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /js/rpc:shindig_random.js?onload=init HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Vary: Accept-Encoding
    Content-Encoding: gzip
    Content-Type: text/javascript
    Access-Control-Allow-Origin: *
    Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
    Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
    Timing-Allow-Origin: *
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Expires: Sat, 20 Jul 2024 06:48:21 GMT
    Cache-Control: private, max-age=1800, stale-while-revalidate=1800
    ETag: "1e386670bd27c5be"
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
    IEXPLORE.EXE
    Remote address:
    216.58.214.174:443
    Request
    GET /_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: apis.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
    Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
    Content-Length: 24413
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 15 Jul 2024 18:19:17 GMT
    Expires: Tue, 15 Jul 2025 18:19:17 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Thu, 11 Jul 2024 18:55:26 GMT
    Content-Type: text/javascript; charset=UTF-8
    Vary: Accept-Encoding
    Age: 390545
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    http://4.bp.blogspot.com/-lHzBuyvobos/VXBYWs-nghI/AAAAAAAAAKQ/CQi7OKyUK0w/s320/IMG_20141209_072457.jpg
    IEXPLORE.EXE
    Remote address:
    142.250.75.225:80
    Request
    GET /-lHzBuyvobos/VXBYWs-nghI/AAAAAAAAAKQ/CQi7OKyUK0w/s320/IMG_20141209_072457.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 4.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="IMG_20141209_072457.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 18351
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:48:19 GMT
    Expires: Sun, 21 Jul 2024 06:48:19 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "va5"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 1
  • flag-fr
    GET
    https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/widgets/1394523530-widget_css_bundle.css HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 6667
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 10:53:26 GMT
    Expires: Sat, 19 Jul 2025 10:53:26 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Fri, 12 Nov 2021 02:51:58 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Age: 71694
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/img/cmt/close.gif
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /img/cmt/close.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 347
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 07:19:14 GMT
    Expires: Fri, 26 Jul 2024 07:19:14 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Fri, 19 Jul 2024 06:33:32 GMT
    Content-Type: image/gif
    Age: 84548
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    http://2.bp.blogspot.com/-vwBkrbNhb8U/VyThNeN2K8I/AAAAAAAABI0/VhY_qnf13nEcKjSuc92C_4jDSyG52QnngCK4B/s1600/header.jpg
    IEXPLORE.EXE
    Remote address:
    142.250.75.225:80
    Request
    GET /-vwBkrbNhb8U/VyThNeN2K8I/AAAAAAAABI0/VhY_qnf13nEcKjSuc92C_4jDSyG52QnngCK4B/s1600/header.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: 2.bp.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Access-Control-Allow-Origin: *
    Timing-Allow-Origin: *
    Access-Control-Expose-Headers: Content-Length
    Content-Disposition: inline;filename="header.jpg"
    X-Content-Type-Options: nosniff
    Server: fife
    Content-Length: 75351
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:48:19 GMT
    Expires: Sun, 21 Jul 2024 06:48:19 GMT
    Cache-Control: public, max-age=86400, no-transform
    ETag: "v48e"
    Content-Type: image/jpeg
    Vary: Origin
    Age: 1
  • flag-fr
    GET
    https://www.blogger.com/static/v1/jsbin/186635561-comment_from_post_iframe.js
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/jsbin/186635561-comment_from_post_iframe.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 6505
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 12:24:51 GMT
    Expires: Sat, 19 Jul 2025 12:24:51 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 12 Oct 2021 02:50:22 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 66209
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/static/v1/jsbin/2798357488-cmt.js
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/jsbin/2798357488-cmt.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 35018
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Tue, 16 Jul 2024 17:12:49 GMT
    Expires: Wed, 16 Jul 2025 17:12:49 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 16 Jul 2024 16:56:50 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 308133
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/comment-iframe-bg.g?bgresponse=js_disabled&bgint=sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /comment-iframe-bg.g?bgresponse=js_disabled&bgint=sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4 HTTP/1.1
    Accept: */*
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1#%7B%22color%22%3A%22rgb(0%2C%200%2C%200)%22%2C%22backgroundColor%22%3A%22rgb(241%2C%20241%2C%20241)%22%2C%22unvisitedLinkColor%22%3A%22rgb(52%2C%20152%2C%20219)%22%2C%22fontFamily%22%3A%22%5C%22Roboto_Regular%5C%22%2C%20%5C%22Roboto%5C%22%2C%20%5C%22Roboto%20Regular%5C%22%2C%20%5C%22Franklin%20Gothic%20Medium%5C%22%2C%20%5C%22Franklin%20Gothic%20Book%5C%22%2C%20%5C%22Lucida%20Sans%5C%22%2C%20%5C%22Lucida%20Sans%20Unicode%5C%22%2C%20%5C%22Helmet%2CFreesans%5C%22%2C%20%5C%22Sans-Serif%5C%22%22%7D
    Accept-Language: en-US
    Accept-Encoding: gzip, deflate
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/javascript; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://www.blogger.com/static/v1/v-css/4076883957-lightbox_bundle.css
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/v-css/4076883957-lightbox_bundle.css HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 6540
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 10:53:49 GMT
    Expires: Sat, 19 Jul 2025 10:53:49 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Fri, 11 Feb 2022 02:59:48 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Age: 71675
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/static/v1/widgets/852648224-widgets.js
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/widgets/852648224-widgets.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 56900
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 10:53:26 GMT
    Expires: Sat, 19 Jul 2025 10:53:26 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 29 Sep 2021 08:50:32 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 71694
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/static/v1/v-css/2621646369-cmtfp.css
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/v-css/2621646369-cmtfp.css HTTP/1.1
    Accept: text/css, */*
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 3701
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 07:42:41 GMT
    Expires: Sat, 19 Jul 2025 07:42:41 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Fri, 19 Jul 2024 06:33:32 GMT
    Content-Type: text/css
    Vary: Accept-Encoding
    Age: 83141
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/static/v1/jsbin/146224643-lbx.js
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /static/v1/jsbin/146224643-lbx.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 122909
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 16:11:49 GMT
    Expires: Sat, 19 Jul 2025 16:11:49 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Wed, 29 Sep 2021 04:50:47 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 52595
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4006924485056431266&zx=79f66fd8-c0ed-4514-ac0b-2ee60984aae9
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /dyn-css/authorization.css?targetBlogID=4006924485056431266&zx=79f66fd8-c0ed-4514-ac0b-2ee60984aae9 HTTP/1.1
    Accept: text/css, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/css; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Last-Modified: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-fr
    GET
    https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
    Content-Type: text/html; charset=UTF-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Content-Encoding: gzip
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 1; mode=block
    Server: GSE
    Set-Cookie: S=blogger=LtG1IrPgTQBBWg0-tCG399c8Aa6qd0yY-7bz3PyXOD4; Domain=.blogger.com; Path=/; Secure; HttpOnly; Priority=LOW; SameSite=none
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    GET
    https://static.addtoany.com/menu/page.js
    IEXPLORE.EXE
    Remote address:
    104.22.71.197:443
    Request
    GET /menu/page.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.addtoany.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    Access-Control-Allow-Origin: *
    Cache-Control: max-age=86400, stale-while-revalidate=30, public
    Cf-Bgj: minify
    ETag: W/"e346c2841e4abbb66ee259e9540abb61"
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=AawlpZvskS3TLTgWsaGwho1czDuBhvNUYA%2BCagLMPCon6WVIhxuqOBwYKDUyXBpgTJ1rDsa1lsN2errzs9LaaQaqA8Lab8GIBHYmOHochiM8fETXccUv0%2BwzO1MYbmubUWW51%2B4J%2BYksyzyw%2FWPlsnW6"}],"group":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    referrer-policy: strict-origin-when-cross-origin
    x-content-type-options: nosniff
    CF-Cache-Status: HIT
    Age: 23603
    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
    Server: cloudflare
    CF-RAY: 8a61014b7f7c3db2-LHR
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400
  • flag-us
    GET
    https://static.addtoany.com/menu/sm.25.html
    IEXPLORE.EXE
    Remote address:
    104.22.71.197:443
    Request
    GET /menu/sm.25.html HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.addtoany.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Type: text/html; charset=utf-8
    Transfer-Encoding: chunked
    Connection: keep-alive
    Access-Control-Allow-Origin: *
    Cache-Control: max-age=315360000, immutable
    referrer-policy: strict-origin-when-cross-origin
    x-content-type-options: nosniff
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MU%2BNKIyLEDwyXwSzo0E1WaHtWvqYoioJjBNJOJ7cBGXZp%2B31Hsm1XVrUVVs4x2X9G0t3bbXLVTfAqLCy6TyIYOZ8Kt3flAi0R95mmSJ0qf%2B7A2BcAV7ZuASsoCOwzMpsMwQus44w"}],"group":"cf-nel","max_age":604800}
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    CF-Cache-Status: HIT
    Age: 23603
    Last-Modified: Sat, 20 Jul 2024 00:14:58 GMT
    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
    Server: cloudflare
    CF-RAY: 8a61014d49c03db2-LHR
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400
  • flag-us
    GET
    https://static.addtoany.com/menu/eso.BRQnzO8v.js
    IEXPLORE.EXE
    Remote address:
    104.22.71.197:443
    Request
    GET /menu/eso.BRQnzO8v.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: static.addtoany.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Type: application/javascript
    Transfer-Encoding: chunked
    Connection: keep-alive
    Access-Control-Allow-Origin: *
    Cache-Control: max-age=315360000, immutable
    Cf-Bgj: minify
    ETag: W/"93c41722448d9f615d5594fdaa7bb9e0"
    NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
    Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U%2BIbSd%2BZMi23xHjJpbRCvN2s%2Bw%2F6ynEL1PCwJdsZsmyzulsFggCnHKQVwJqekAXcxUPBinJImUthyztbesQvJVHc7fdqtcLTGIlmxni7MlT%2FTzsQYGOdXq4eA0PVnV7akWoVyUNs"}],"group":"cf-nel","max_age":604800}
    Vary: Accept-Encoding
    referrer-policy: strict-origin-when-cross-origin
    x-content-type-options: nosniff
    CF-Cache-Status: HIT
    Age: 23601
    Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
    Server: cloudflare
    CF-RAY: 8a61014e5b0b3db2-LHR
    Content-Encoding: gzip
    alt-svc: h3=":443"; ma=86400
  • flag-us
    DNS
    apps.identrust.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    apps.identrust.com
    IN A
    Response
    apps.identrust.com
    IN CNAME
    identrust.edgesuite.net
    identrust.edgesuite.net
    IN CNAME
    a1952.dscq.akamai.net
    a1952.dscq.akamai.net
    IN A
    88.221.135.104
    a1952.dscq.akamai.net
    IN A
    88.221.134.137
  • flag-gb
    GET
    http://apps.identrust.com/roots/dstrootcax3.p7c
    IEXPLORE.EXE
    Remote address:
    88.221.135.104:80
    Request
    GET /roots/dstrootcax3.p7c HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: apps.identrust.com
    Response
    HTTP/1.1 200 OK
    X-XSS-Protection: 1; mode=block
    X-Frame-Options: SAMEORIGIN
    X-Content-Type-Options: nosniff
    X-Robots-Tag: noindex
    Referrer-Policy: same-origin
    Last-Modified: Fri, 13 Oct 2023 16:28:31 GMT
    ETag: "37d-6079b8c0929c0"
    Accept-Ranges: bytes
    Content-Length: 893
    X-Content-Type-Options: nosniff
    X-Frame-Options: sameorigin
    Content-Type: application/pkcs7-mime
    Cache-Control: max-age=3600
    Expires: Sat, 20 Jul 2024 07:48:20 GMT
    Date: Sat, 20 Jul 2024 06:48:20 GMT
    Connection: keep-alive
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    c.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    c.pki.goog
    IN A
    Response
    c.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-fr
    GET
    http://c.pki.goog/r/r1.crl
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /r/r1.crl HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: c.pki.goog
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
    Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
    Content-Length: 854
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:23:42 GMT
    Expires: Sat, 20 Jul 2024 07:13:42 GMT
    Cache-Control: public, max-age=3000
    Age: 1478
    Last-Modified: Wed, 01 Nov 2023 07:48:00 GMT
    Content-Type: application/pkix-crl
    Vary: Accept-Encoding
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    o.pki.goog
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    o.pki.goog
    IN A
    Response
    o.pki.goog
    IN CNAME
    pki-goog.l.google.com
    pki-goog.l.google.com
    IN A
    142.250.179.67
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:55:48 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3152
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:13:23 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2098
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:31:33 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1009
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:55:48 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3152
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:13:23 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 2098
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:31:33 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1009
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:25:01 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1399
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:37:31 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 650
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:31:33 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1009
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:21:55 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1585
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:37:31 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 650
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:31:33 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1009
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:55:48 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3152
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:45:13 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 189
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:56:38 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3104
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:25:01 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1399
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDJocJI3cuzOAqV4KAdwn94
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDJocJI3cuzOAqV4KAdwn94 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:51:05 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3437
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:56:38 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3104
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7 HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 05:55:48 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 3152
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:45:13 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 189
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Content-Type: application/ocsp-response
    Date: Sat, 20 Jul 2024 06:48:23 GMT
    Cache-Control: public, max-age=14400
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:21:55 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1585
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Server: ocsp_responder
    Content-Length: 471
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:31:33 GMT
    Cache-Control: public, max-age=14400
    Content-Type: application/ocsp-response
    Age: 1009
  • flag-fr
    GET
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW
    IEXPLORE.EXE
    Remote address:
    142.250.179.67:80
    Request
    GET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW HTTP/1.1
    Connection: Keep-Alive
    Accept: */*
    User-Agent: Microsoft-CryptoAPI/6.1
    Host: o.pki.goog
    Response
    HTTP/1.1 200 OK
    Content-Type: application/ocsp-response
    Date: Sat, 20 Jul 2024 06:48:23 GMT
    Cache-Control: public, max-age=14400
    Server: ocsp_responder
    Content-Length: 472
    X-XSS-Protection: 0
    X-Frame-Options: SAMEORIGIN
  • flag-us
    DNS
    jqueryapi.info
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    jqueryapi.info
    IN A
    Response
    jqueryapi.info
    IN A
    72.14.178.174
    jqueryapi.info
    IN A
    173.255.194.134
    jqueryapi.info
    IN A
    45.33.30.197
    jqueryapi.info
    IN A
    45.33.20.235
    jqueryapi.info
    IN A
    96.126.123.244
    jqueryapi.info
    IN A
    198.58.118.167
    jqueryapi.info
    IN A
    45.33.23.183
    jqueryapi.info
    IN A
    45.33.18.44
    jqueryapi.info
    IN A
    72.14.185.43
    jqueryapi.info
    IN A
    45.56.79.23
    jqueryapi.info
    IN A
    45.79.19.196
    jqueryapi.info
    IN A
    45.33.2.79
  • flag-us
    DNS
    themes.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    themes.googleusercontent.com
    IN A
    Response
    themes.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    216.58.214.161
  • flag-us
    DNS
    dhiauliman.blogspot.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    dhiauliman.blogspot.com
    IN A
    Response
    dhiauliman.blogspot.com
    IN CNAME
    blogspot.l.googleusercontent.com
    blogspot.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-us
    GET
    http://jqueryapi.info/?getsrc=ok&ref=&url=file%3A%2F%2FC%3A%5CUsers%5CAdmin%5CAppData%5CLocal%5CTemp%5C5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html
    IEXPLORE.EXE
    Remote address:
    72.14.178.174:80
    Request
    GET /?getsrc=ok&ref=&url=file%3A%2F%2FC%3A%5CUsers%5CAdmin%5CAppData%5CLocal%5CTemp%5C5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: jqueryapi.info
    Connection: Keep-Alive
    Response
    HTTP/1.1 403 Forbidden
    server: openresty/1.13.6.1
    date: Sat, 20 Jul 2024 06:48:21 GMT
    content-type: text/html
    content-length: 175
    x-fail-reason: Bad Actor
    connection: close
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 21132
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 14 Jul 2024 16:28:32 GMT
    Expires: Mon, 14 Jul 2025 16:28:32 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
    Content-Type: font/woff
    Age: 483589
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/roboto/v11/Hgo13k-tfSpn0qi1SFdUfT8E0i7KZn-EPnyo3HZu7kw.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/roboto/v11/Hgo13k-tfSpn0qi1SFdUfT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 19973
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Tue, 16 Jul 2024 14:44:13 GMT
    Expires: Wed, 16 Jul 2025 14:44:13 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Sun, 25 Jun 2023 02:58:00 GMT
    Content-Type: font/woff
    Vary: Accept-Encoding
    Age: 317048
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 19812
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sun, 14 Jul 2024 16:28:31 GMT
    Expires: Mon, 14 Jul 2025 16:28:31 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
    Content-Type: font/woff
    Age: 483590
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 22396
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Sat, 20 Jul 2024 06:48:19 GMT
    Expires: Sun, 20 Jul 2025 06:48:19 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
    Content-Type: font/woff
    Age: 2
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/roboto/v11/RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3HZu7kw.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/roboto/v11/RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3HZu7kw.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Type: font/woff
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 20636
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Expires: Sun, 20 Jul 2025 06:48:21 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
  • flag-fr
    GET
    http://dhiauliman.blogspot.com/feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dhiauliman.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Cross-Origin-Resource-Policy: cross-origin
    Server: blogger-renderd
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    Content-Encoding: gzip
    Content-Length: 958
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Expires: Sat, 20 Jul 2024 06:48:22 GMT
    Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
    Last-Modified: Wed, 13 Mar 2024 01:39:59 GMT
    ETag: W/"8915c2538202dc01650ad94406a37c723a329ecfa8ee21bde529df25778f3cda"
    Content-Type: text/javascript; charset=UTF-8
    Age: 0
  • flag-fr
    GET
    http://dhiauliman.blogspot.com/feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&start-index=30&max-results=5&callback=showRelatedPost
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET /feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&start-index=30&max-results=5&callback=showRelatedPost HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dhiauliman.blogspot.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Cross-Origin-Resource-Policy: cross-origin
    ETag: W/"c8759be443ee2aefd0d76214ac9e983fb1156efa945cfd01f0aea64e6509cd88"
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Type: text/javascript; charset=UTF-8
    Server: blogger-renderd
    Expires: Sat, 20 Jul 2024 06:48:22 GMT
    Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    Last-Modified: Wed, 13 Mar 2024 01:39:59 GMT
    Content-Encoding: gzip
    Content-Length: 3169
    X-Frame-Options: SAMEORIGIN
  • flag-fr
    GET
    http://themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:80
    Request
    GET /static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff HTTP/1.1
    Accept: */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Origin: file:
    Accept-Encoding: gzip, deflate
    Host: themes.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Access-Control-Allow-Origin: *
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
    Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
    Timing-Allow-Origin: *
    Content-Length: 21520
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 18 Jul 2024 21:53:37 GMT
    Expires: Fri, 18 Jul 2025 21:53:37 GMT
    Cache-Control: public, max-age=31536000
    Age: 118484
    Last-Modified: Tue, 22 Oct 2019 18:15:00 GMT
    Content-Type: font/woff
  • flag-fr
    GET
    http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:80
    Request
    GET /comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Location: https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&go=true
    Content-Type: text/html; charset=UTF-8
    Content-Encoding: gzip
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Expires: Sat, 20 Jul 2024 06:48:21 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Content-Length: 339
    Server: GSE
  • flag-fr
    GET
    http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:80
    Request
    GET /comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1 HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.blogger.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Moved Temporarily
    P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
    Location: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Content-Type: text/html; charset=UTF-8
    Content-Encoding: gzip
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Expires: Sat, 20 Jul 2024 06:48:22 GMT
    Cache-Control: private, max-age=0
    X-Content-Type-Options: nosniff
    X-Frame-Options: SAMEORIGIN
    Content-Security-Policy: frame-ancestors 'self'
    X-XSS-Protection: 1; mode=block
    Content-Length: 276
    Server: GSE
  • flag-us
    DNS
    dhiauliman.blogspot.co.id
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    dhiauliman.blogspot.co.id
    IN A
    Response
    dhiauliman.blogspot.co.id
    IN CNAME
    blogspot.l.googleusercontent.com
    blogspot.l.googleusercontent.com
    IN A
    172.217.20.193
  • flag-fr
    GET
    http://dhiauliman.blogspot.co.id//feeds/posts/summary?alt=json-in-script&orderby=published&max-results=7&callback=recentPosts
    IEXPLORE.EXE
    Remote address:
    172.217.20.193:80
    Request
    GET //feeds/posts/summary?alt=json-in-script&orderby=published&max-results=7&callback=recentPosts HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: dhiauliman.blogspot.co.id
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Cross-Origin-Resource-Policy: cross-origin
    Server: blogger-renderd
    X-Content-Type-Options: nosniff
    X-XSS-Protection: 0
    Content-Encoding: gzip
    Content-Length: 4415
    X-Frame-Options: SAMEORIGIN
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Expires: Sat, 20 Jul 2024 06:48:22 GMT
    Cache-Control: public, must-revalidate, proxy-revalidate, max-age=1
    Last-Modified: Wed, 13 Mar 2024 01:39:59 GMT
    ETag: W/"55ddcf69cb10b77b753bd6292b84c0ac208743c48517bc9a5cfe083455c96169"
    Content-Type: text/javascript; charset=UTF-8
    Age: 0
  • flag-us
    DNS
    accounts.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    accounts.google.com
    IN A
    Response
    accounts.google.com
    IN A
    108.177.127.84
  • flag-us
    DNS
    developers.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    developers.google.com
    IN A
    Response
    developers.google.com
    IN A
    142.250.75.238
  • flag-nl
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    108.177.127.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Security-Policy: script-src 'nonce-oMDh_eYIWRhIGvoLtOOlAA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Cross-Origin-Resource-Policy: same-site
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-nl
    GET
    https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&go=true
    IEXPLORE.EXE
    Remote address:
    108.177.127.84:443
    Request
    GET /ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&go=true HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 302 Found
    Content-Type: application/binary
    Set-Cookie: __Host-GAPS=1:Rvqqpf1otCtKg_DWxMO3WEqyUJI2HQ:KhtY9YaLG4PBu6Ec; Expires=Mon, 20-Jul-2026 06:48:21 GMT; Path=/; Secure; HttpOnly; Priority=HIGH
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Location: http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Strict-Transport-Security: max-age=31536000; includeSubDomains
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport
    Content-Security-Policy: script-src 'nonce-HC2QuTmSHIRBJ1Wb9c2r9w' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self'
    Cross-Origin-Opener-Policy: unsafe-none
    Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
    Cross-Origin-Resource-Policy: cross-origin
    Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
    Server: ESF
    Content-Length: 0
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    http://developers.google.com/
    IEXPLORE.EXE
    Remote address:
    142.250.75.238:80
    Request
    GET / HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: developers.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 301 Moved Permanently
    Location: https://developers.google.com/
    X-Cloud-Trace-Context: af1d2d587569bb1a388db42e0c311120
    Date: Sat, 20 Jul 2024 06:48:21 GMT
    Content-Type: text/html
    Server: Google Frontend
    Content-Length: 0
  • flag-fr
    GET
    https://developers.google.com/
    IEXPLORE.EXE
    Remote address:
    142.250.75.238:443
    Request
    GET / HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: developers.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Last-Modified: Wed, 17 Jul 2024 03:26:47 GMT
    Content-Type: text/html; charset=utf-8
    Vary: Cookie
    Vary: Accept-Encoding
    Set-Cookie: _ga_devsite=GA1.3.2575541639.1721458103; Expires=Mon, 20 Jul 2026 06:48:23 GMT; Max-Age=63072000; Path=/
    Content-Security-Policy: base-uri 'self'; object-src 'none'; script-src 'strict-dynamic' 'unsafe-inline' https: http: 'nonce-g2v0BQQz4MstHA6JsOf1pLXFJIUGY1' 'unsafe-eval'; report-uri https://csp.withgoogle.com/csp/devsite/v2
    Strict-Transport-Security: max-age=63072000; includeSubdomains; preload
    X-Frame-Options: SAMEORIGIN
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Cache-Control: no-cache, must-revalidate
    Expires: 0
    Pragma: no-cache
    Content-Encoding: gzip
    X-Cloud-Trace-Context: 571f0af83fcf96f6ec54a988dd250e8c
    Date: Sat, 20 Jul 2024 06:48:23 GMT
    Server: Google Frontend
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-us
    DNS
    ssl.gstatic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    ssl.gstatic.com
    IN A
    Response
    ssl.gstatic.com
    IN A
    142.250.179.67
  • flag-us
    DNS
    blogger.googleusercontent.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    blogger.googleusercontent.com
    IN A
    Response
    blogger.googleusercontent.com
    IN CNAME
    googlehosted.l.googleusercontent.com
    googlehosted.l.googleusercontent.com
    IN A
    216.58.214.161
  • flag-fr
    GET
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE1FfgPh0K-j_BK8ktMjyOHzJAggfw0E4jwV1Rwn32AcvqODJlPu1sZusGkDsdvZdEhEFbvtosv_pNYPaSb4928ailiEp-_lnqmm5Mi8icROi6zI3h0nDWTc8OZ-FYzsf2g79hMJ0yYhg/s50-c/20150420-cacing-tanah_20150420_181202.jpg
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:443
    Request
    GET /img/b/R29vZ2xl/AVvXsEhE1FfgPh0K-j_BK8ktMjyOHzJAggfw0E4jwV1Rwn32AcvqODJlPu1sZusGkDsdvZdEhEFbvtosv_pNYPaSb4928ailiEp-_lnqmm5Mi8icROi6zI3h0nDWTc8OZ-FYzsf2g79hMJ0yYhg/s50-c/20150420-cacing-tanah_20150420_181202.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogger.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Expose-Headers: Content-Length
    ETag: "v6b"
    Expires: Sun, 21 Jul 2024 06:48:22 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="20150420-cacing-tanah_20150420_181202.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Server: fife
    Content-Length: 3003
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ4QKhDDGHcyIWjODlwRNXBnnstDNK1RZF-oUfl-SnVbdgnSsse4IXtg9kRS_HI8_rJandf6r6BLCOCjMRTY_rFFgxdtDdXSB4LjkX-8Cz8cS3UOUX8-J8wr_uuDEBF5ocpMUtk-ojATg/s50-c/IMG_20141209_072457.jpg
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:443
    Request
    GET /img/b/R29vZ2xl/AVvXsEgQ4QKhDDGHcyIWjODlwRNXBnnstDNK1RZF-oUfl-SnVbdgnSsse4IXtg9kRS_HI8_rJandf6r6BLCOCjMRTY_rFFgxdtDdXSB4LjkX-8Cz8cS3UOUX8-J8wr_uuDEBF5ocpMUtk-ojATg/s50-c/IMG_20141209_072457.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogger.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Expose-Headers: Content-Length
    ETag: "va5"
    Expires: Sun, 21 Jul 2024 06:48:22 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="IMG_20141209_072457.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Server: fife
    Content-Length: 1993
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ0eZkDM-HQGS0TubGcI2B2UBYzCN708BsXHaUXV3g9FufUxL2u1p1qfK9on5wgSNVwlo9fMeqaRhtiXglQwqNrgRo2CgWiYns0aSYafT-k64MzY58ml3DOIKzrvjSlt92Wkby4Q_EWxQ/s50-c/S340LlQcCTOALnvzAAUEtKWHxGM438.png
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:443
    Request
    GET /img/b/R29vZ2xl/AVvXsEiZ0eZkDM-HQGS0TubGcI2B2UBYzCN708BsXHaUXV3g9FufUxL2u1p1qfK9on5wgSNVwlo9fMeqaRhtiXglQwqNrgRo2CgWiYns0aSYafT-k64MzY58ml3DOIKzrvjSlt92Wkby4Q_EWxQ/s50-c/S340LlQcCTOALnvzAAUEtKWHxGM438.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogger.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/png
    Vary: Origin
    Access-Control-Expose-Headers: Content-Length
    ETag: "v59"
    Expires: Sun, 21 Jul 2024 06:48:23 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="S340LlQcCTOALnvzAAUEtKWHxGM438.png"
    X-Content-Type-Options: nosniff
    Date: Sat, 20 Jul 2024 06:48:23 GMT
    Server: fife
    Content-Length: 5251
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjurg6t2P9XQiOh51OhQozmO5la-DUktpyQ5DSrX8H9YeByKUhuB6ksbqFeoFJoNzrnlnnizAqG4ftjc06u8fqSOm5yKMsrRDg6fTV0dliyP2-h2-8xqWqxs1GGjQCkoxR63x_tSi1f1hQ/s50-c/Cililinku_zps3ee08127.jpg
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:443
    Request
    GET /img/b/R29vZ2xl/AVvXsEjurg6t2P9XQiOh51OhQozmO5la-DUktpyQ5DSrX8H9YeByKUhuB6ksbqFeoFJoNzrnlnnizAqG4ftjc06u8fqSOm5yKMsrRDg6fTV0dliyP2-h2-8xqWqxs1GGjQCkoxR63x_tSi1f1hQ/s50-c/Cililinku_zps3ee08127.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogger.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Expose-Headers: Content-Length
    ETag: "v8e"
    Expires: Sun, 21 Jul 2024 06:48:22 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Cililinku_zps3ee08127.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Server: fife
    Content-Length: 2475
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuALTEhXMFJwjBTB-I78gznrTADVNhp0j2Stx4iXuhMtW-hPz2gx-hf8Mdyi29hGJ17eiQ84sBYa328UN52mCRtbG73qc9qcjSz4OrzqrFlQNDl0ef5CZBtGeVMX438lxqr7_RCVWG9xk/s50-c/Anis+merah32544.jpg
    IEXPLORE.EXE
    Remote address:
    216.58.214.161:443
    Request
    GET /img/b/R29vZ2xl/AVvXsEhuALTEhXMFJwjBTB-I78gznrTADVNhp0j2Stx4iXuhMtW-hPz2gx-hf8Mdyi29hGJ17eiQ84sBYa328UN52mCRtbG73qc9qcjSz4OrzqrFlQNDl0ef5CZBtGeVMX438lxqr7_RCVWG9xk/s50-c/Anis+merah32544.jpg HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: blogger.googleusercontent.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Content-Type: image/jpeg
    Vary: Origin
    Access-Control-Expose-Headers: Content-Length
    ETag: "va0"
    Expires: Sun, 21 Jul 2024 06:48:22 GMT
    Cache-Control: public, max-age=86400, no-transform
    Content-Disposition: inline;filename="Anis merah32544.jpg"
    X-Content-Type-Options: nosniff
    Date: Sat, 20 Jul 2024 06:48:22 GMT
    Server: fife
    Content-Length: 2310
    X-XSS-Protection: 0
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    resources.blogblog.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    resources.blogblog.com
    IN A
    Response
    resources.blogblog.com
    IN CNAME
    blogger.l.google.com
    blogger.l.google.com
    IN A
    142.250.75.233
  • flag-us
    DNS
    www.google.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    www.google.com
    IN A
    Response
    www.google.com
    IN A
    216.58.214.68
  • flag-fr
    GET
    https://www.google.com/js/bg/sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4.js
    IEXPLORE.EXE
    Remote address:
    216.58.214.68:443
    Request
    GET /js/bg/sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4.js HTTP/1.1
    Accept: application/javascript, */*;q=0.8
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: www.google.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Content-Encoding: gzip
    Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs"
    Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]}
    Content-Length: 24605
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Mon, 15 Jul 2024 09:52:51 GMT
    Expires: Tue, 15 Jul 2025 09:52:51 GMT
    Cache-Control: public, max-age=31536000
    Last-Modified: Mon, 08 Jul 2024 09:30:00 GMT
    Content-Type: text/javascript
    Vary: Accept-Encoding
    Age: 420931
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://resources.blogblog.com/img/blank.gif
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /img/blank.gif HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 43
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Fri, 19 Jul 2024 11:01:26 GMT
    Expires: Fri, 26 Jul 2024 11:01:26 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Thu, 18 Jul 2024 10:55:07 GMT
    Content-Type: image/gif
    Age: 71216
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-fr
    GET
    https://resources.blogblog.com/img/anon36.png
    IEXPLORE.EXE
    Remote address:
    142.250.75.233:443
    Request
    GET /img/anon36.png HTTP/1.1
    Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
    Referer: https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: resources.blogblog.com
    Connection: Keep-Alive
    Response
    HTTP/1.1 200 OK
    Accept-Ranges: bytes
    Cross-Origin-Resource-Policy: cross-origin
    Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
    Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
    Content-Length: 1654
    X-Content-Type-Options: nosniff
    Server: sffe
    X-XSS-Protection: 0
    Date: Thu, 18 Jul 2024 21:50:31 GMT
    Expires: Thu, 25 Jul 2024 21:50:31 GMT
    Cache-Control: public, max-age=604800
    Last-Modified: Thu, 18 Jul 2024 10:55:07 GMT
    Content-Type: image/png
    Age: 118671
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
  • flag-us
    DNS
    developer.android.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    developer.android.com
    IN A
    Response
    developer.android.com
    IN CNAME
    www3.l.google.com
    www3.l.google.com
    IN A
    142.250.178.142
  • flag-us
    DNS
    gstatic.com
    IEXPLORE.EXE
    Remote address:
    8.8.8.8:53
    Request
    gstatic.com
    IN A
    Response
    gstatic.com
    IN A
    172.217.20.195
  • flag-nl
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    108.177.127.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: __Host-GAPS=1:Rvqqpf1otCtKg_DWxMO3WEqyUJI2HQ:KhtY9YaLG4PBu6Ec
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:49:23 GMT
    Content-Security-Policy: script-src 'nonce-ZZJHyzRNNouOPpPwt0PIjg' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Cross-Origin-Resource-Policy: same-site
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • flag-nl
    GET
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    IEXPLORE.EXE
    Remote address:
    108.177.127.84:443
    Request
    GET /o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__ HTTP/1.1
    Accept: text/html, application/xhtml+xml, */*
    Accept-Language: en-US
    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
    Accept-Encoding: gzip, deflate
    Host: accounts.google.com
    Connection: Keep-Alive
    Cookie: __Host-GAPS=1:Rvqqpf1otCtKg_DWxMO3WEqyUJI2HQ:KhtY9YaLG4PBu6Ec
    Response
    HTTP/1.1 200 OK
    Content-Type: text/html; charset=utf-8
    Cache-Control: no-cache, no-store, max-age=0, must-revalidate
    Pragma: no-cache
    Expires: Mon, 01 Jan 1990 00:00:00 GMT
    Date: Sat, 20 Jul 2024 06:50:23 GMT
    Content-Security-Policy: script-src 'nonce-udqbbs0K85sv7A9uH_UmSA' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /o/cspreport
    Content-Security-Policy: require-trusted-types-for 'script';report-uri /o/cspreport
    Cross-Origin-Resource-Policy: same-site
    Content-Encoding: gzip
    Server: ESF
    X-XSS-Protection: 0
    X-Content-Type-Options: nosniff
    Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
    Transfer-Encoding: chunked
  • 216.58.214.174:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_1?le=scs
    tls, http
    IEXPLORE.EXE
    1.8kB
    43.0kB
    24
    36

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=auth/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_1?le=scs

    HTTP Response

    200
  • 104.22.71.197:80
    http://static.addtoany.com/menu/page.js
    http
    IEXPLORE.EXE
    538 B
    737 B
    6
    4

    HTTP Request

    GET http://static.addtoany.com/menu/page.js

    HTTP Response

    301
  • 93.184.220.66:80
    http://platform.twitter.com/widgets.js
    http
    IEXPLORE.EXE
    997 B
    29.2kB
    16
    24

    HTTP Request

    GET http://platform.twitter.com/widgets.js

    HTTP Response

    200
  • 216.58.214.174:443
    https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs
    tls, http
    IEXPLORE.EXE
    5.6kB
    125.5kB
    61
    100

    HTTP Request

    GET https://apis.google.com/js/plusone.js

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/u/0/se/0/_/+1/fastbutton?usegapi=1&count=true&size=medium&origin=file%3A%2F%2F&url=http%3A%2F%2Fdhiauliman.blogspot.com%2F2015%2F06%2Fterapi-hujan-untuk-anis-merah-macet.html&gsrc=3p&ic=1&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__

    HTTP Response

    301

    HTTP Request

    GET https://apis.google.com/js/rpc:shindig_random.js?onload=init

    HTTP Response

    200

    HTTP Request

    GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.pGGAptgAK4s.O/m=rpc,shindig_random/rt=j/sv=1/d=1/ed=1/am=AAAg/rs=AHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g/cb=gapi.loaded_0?le=scs

    HTTP Response

    200
  • 93.184.220.66:80
    platform.twitter.com
    IEXPLORE.EXE
    190 B
    132 B
    4
    3
  • 142.250.75.225:80
    http://4.bp.blogspot.com/-lHzBuyvobos/VXBYWs-nghI/AAAAAAAAAKQ/CQi7OKyUK0w/s320/IMG_20141209_072457.jpg
    http
    IEXPLORE.EXE
    940 B
    19.5kB
    13
    17

    HTTP Request

    GET http://4.bp.blogspot.com/-lHzBuyvobos/VXBYWs-nghI/AAAAAAAAAKQ/CQi7OKyUK0w/s320/IMG_20141209_072457.jpg

    HTTP Response

    200
  • 104.22.71.197:80
    static.addtoany.com
    IEXPLORE.EXE
    466 B
    92 B
    10
    2
  • 142.250.75.225:80
    4.bp.blogspot.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 142.250.75.225:80
    4.bp.blogspot.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 142.250.75.233:443
    https://www.blogger.com/img/cmt/close.gif
    tls, http
    IEXPLORE.EXE
    1.8kB
    13.3kB
    15
    15

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/1394523530-widget_css_bundle.css

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/img/cmt/close.gif

    HTTP Response

    200
  • 142.250.75.225:80
    http://2.bp.blogspot.com/-vwBkrbNhb8U/VyThNeN2K8I/AAAAAAAABI0/VhY_qnf13nEcKjSuc92C_4jDSyG52QnngCK4B/s1600/header.jpg
    http
    IEXPLORE.EXE
    1.9kB
    78.2kB
    34
    59

    HTTP Request

    GET http://2.bp.blogspot.com/-vwBkrbNhb8U/VyThNeN2K8I/AAAAAAAABI0/VhY_qnf13nEcKjSuc92C_4jDSyG52QnngCK4B/s1600/header.jpg

    HTTP Response

    200
  • 142.250.75.233:443
    https://www.blogger.com/static/v1/v-css/4076883957-lightbox_bundle.css
    tls, http
    IEXPLORE.EXE
    4.5kB
    74.5kB
    43
    64

    HTTP Request

    GET https://www.blogger.com/static/v1/jsbin/186635561-comment_from_post_iframe.js

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/static/v1/jsbin/2798357488-cmt.js

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/comment-iframe-bg.g?bgresponse=js_disabled&bgint=sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/static/v1/v-css/4076883957-lightbox_bundle.css

    HTTP Response

    200
  • 142.250.75.233:443
    https://www.blogger.com/static/v1/jsbin/146224643-lbx.js
    tls, http
    IEXPLORE.EXE
    5.3kB
    200.1kB
    83
    152

    HTTP Request

    GET https://www.blogger.com/static/v1/widgets/852648224-widgets.js

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/static/v1/v-css/2621646369-cmtfp.css

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/static/v1/jsbin/146224643-lbx.js

    HTTP Response

    200
  • 142.250.75.233:443
    https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    tls, http
    IEXPLORE.EXE
    1.7kB
    9.6kB
    15
    17

    HTTP Request

    GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=4006924485056431266&zx=79f66fd8-c0ed-4514-ac0b-2ee60984aae9

    HTTP Response

    200

    HTTP Request

    GET https://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1

    HTTP Response

    200
  • 104.22.71.197:443
    https://static.addtoany.com/menu/eso.BRQnzO8v.js
    tls, http
    IEXPLORE.EXE
    2.4kB
    39.8kB
    27
    39

    HTTP Request

    GET https://static.addtoany.com/menu/page.js

    HTTP Response

    200

    HTTP Request

    GET https://static.addtoany.com/menu/sm.25.html

    HTTP Response

    200

    HTTP Request

    GET https://static.addtoany.com/menu/eso.BRQnzO8v.js

    HTTP Response

    200
  • 88.221.135.104:80
    http://apps.identrust.com/roots/dstrootcax3.p7c
    http
    IEXPLORE.EXE
    369 B
    1.6kB
    5
    4

    HTTP Request

    GET http://apps.identrust.com/roots/dstrootcax3.p7c

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    394 B
    1.7kB
    6
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://c.pki.goog/r/r1.crl
    http
    IEXPLORE.EXE
    348 B
    1.7kB
    5
    4

    HTTP Request

    GET http://c.pki.goog/r/r1.crl

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    http
    IEXPLORE.EXE
    1.2kB
    4.6kB
    11
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    http
    IEXPLORE.EXE
    1.2kB
    3.9kB
    11
    7

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEE1SJYusv9NjEo1A7l3%2FSBY%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    http
    IEXPLORE.EXE
    1.2kB
    4.6kB
    11
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D
    http
    IEXPLORE.EXE
    1.3kB
    4.6kB
    12
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCYuPRR9vFAFgqWX6dsOlfx

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D
    http
    IEXPLORE.EXE
    1.2kB
    3.1kB
    10
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D
    http
    IEXPLORE.EXE
    1.2kB
    3.1kB
    10
    7

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBPKCljAPb1mEswGJPYk28M%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDJocJI3cuzOAqV4KAdwn94

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACECgq3UEYFscUCqLPFQqi4C0%3D

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW
    http
    IEXPLORE.EXE
    1.1kB
    2.4kB
    9
    6

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDuzmN5kYNMuxAyyuR%2BnBQ7

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEHViWUaptL4MEEkSmq4OScg%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW

    HTTP Response

    200
  • 142.250.179.67:80
    http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW
    http
    IEXPLORE.EXE
    1.2kB
    3.9kB
    11
    8

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQC1wDSQwr%2F7UxDebtw0D9JJ

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEC3M0Op9qKoaCXtJy2kA5Hs%3D

    HTTP Response

    200

    HTTP Request

    GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCUtVtPe7N2VQme5sLq09iW

    HTTP Response

    200
  • 72.14.178.174:80
    http://jqueryapi.info/?getsrc=ok&ref=&url=file%3A%2F%2FC%3A%5CUsers%5CAdmin%5CAppData%5CLocal%5CTemp%5C5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html
    http
    IEXPLORE.EXE
    607 B
    529 B
    5
    4

    HTTP Request

    GET http://jqueryapi.info/?getsrc=ok&ref=&url=file%3A%2F%2FC%3A%5CUsers%5CAdmin%5CAppData%5CLocal%5CTemp%5C5f6fc4222f46de441d930fe5320b4479_JaffaCakes118.html

    HTTP Response

    403
  • 72.14.178.174:80
    jqueryapi.info
    IEXPLORE.EXE
    466 B
    92 B
    10
    2
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff
    http
    IEXPLORE.EXE
    985 B
    22.6kB
    15
    20

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/roboto/v11/2UX7WLTfW3W8TclTUvlFyQ.woff

    HTTP Response

    200
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/roboto/v11/Hgo13k-tfSpn0qi1SFdUfT8E0i7KZn-EPnyo3HZu7kw.woff
    http
    IEXPLORE.EXE
    960 B
    21.5kB
    14
    19

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/roboto/v11/Hgo13k-tfSpn0qi1SFdUfT8E0i7KZn-EPnyo3HZu7kw.woff

    HTTP Response

    200
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff
    http
    IEXPLORE.EXE
    960 B
    21.2kB
    14
    19

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/roboto/v11/d-6IYplOFocCacKzxwXSOD8E0i7KZn-EPnyo3HZu7kw.woff

    HTTP Response

    200
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff
    http
    IEXPLORE.EXE
    1.0kB
    23.9kB
    15
    20

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/roboto/v11/1pO9eUAp8pSF8VnRTP3xnvesZW2xOQ-xsNqO47m55DA.woff

    HTTP Response

    200
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/roboto/v11/RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3HZu7kw.woff
    http
    IEXPLORE.EXE
    960 B
    22.1kB
    14
    19

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/roboto/v11/RxZJdnzeo3R5zSexge8UUT8E0i7KZn-EPnyo3HZu7kw.woff

    HTTP Response

    200
  • 172.217.20.193:80
    dhiauliman.blogspot.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 172.217.20.193:80
    http://dhiauliman.blogspot.com/feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&start-index=30&max-results=5&callback=showRelatedPost
    http
    IEXPLORE.EXE
    1.1kB
    5.6kB
    9
    9

    HTTP Request

    GET http://dhiauliman.blogspot.com/feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&max-results=0&callback=randomRelatedIndex

    HTTP Response

    200

    HTTP Request

    GET http://dhiauliman.blogspot.com/feeds/posts/summary/-/Anis%20Merah?alt=json-in-script&orderby=updated&start-index=30&max-results=5&callback=showRelatedPost

    HTTP Response

    200
  • 104.22.71.197:443
    static.addtoany.com
    tls
    IEXPLORE.EXE
    742 B
    4.5kB
    9
    9
  • 216.58.214.161:80
    http://themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff
    http
    IEXPLORE.EXE
    984 B
    23.0kB
    15
    20

    HTTP Request

    GET http://themes.googleusercontent.com/static/fonts/oswald/v8/-g5pDUSRgvxvOl5u-a_WHw.woff

    HTTP Response

    200
  • 142.250.75.233:80
    http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1
    http
    IEXPLORE.EXE
    1.1kB
    2.5kB
    8
    8

    HTTP Request

    GET http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077

    HTTP Response

    302

    HTTP Request

    GET http://www.blogger.com/comment-iframe.g?blogID=4006924485056431266&postID=590007951143876934&blogspotRpcToken=302077&bpli=1

    HTTP Response

    302
  • 216.58.214.174:443
    apis.google.com
    tls
    IEXPLORE.EXE
    519 B
    355 B
    6
    5
  • 172.217.20.193:80
    http://dhiauliman.blogspot.co.id//feeds/posts/summary?alt=json-in-script&orderby=published&max-results=7&callback=recentPosts
    http
    IEXPLORE.EXE
    670 B
    5.2kB
    7
    7

    HTTP Request

    GET http://dhiauliman.blogspot.co.id//feeds/posts/summary?alt=json-in-script&orderby=published&max-results=7&callback=recentPosts

    HTTP Response

    200
  • 172.217.20.193:80
    dhiauliman.blogspot.co.id
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 108.177.127.84:443
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    1.3kB
    6.1kB
    11
    12

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__

    HTTP Response

    200
  • 108.177.127.84:443
    https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&go=true
    tls, http
    IEXPLORE.EXE
    1.4kB
    6.1kB
    10
    11

    HTTP Request

    GET https://accounts.google.com/ServiceLogin?passive=true&continue=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&followup=http://www.blogger.com/comment-iframe.g?blogID%3D4006924485056431266%26postID%3D590007951143876934%26blogspotRpcToken%3D302077%26bpli%3D1&go=true

    HTTP Response

    302
  • 142.250.75.238:80
    http://developers.google.com/
    http
    IEXPLORE.EXE
    532 B
    411 B
    6
    4

    HTTP Request

    GET http://developers.google.com/

    HTTP Response

    301
  • 142.250.75.238:80
    developers.google.com
    IEXPLORE.EXE
    190 B
    92 B
    4
    2
  • 142.250.75.238:443
    https://developers.google.com/
    tls, http
    IEXPLORE.EXE
    2.0kB
    43.7kB
    31
    37

    HTTP Request

    GET https://developers.google.com/

    HTTP Response

    200
  • 216.58.214.161:443
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE1FfgPh0K-j_BK8ktMjyOHzJAggfw0E4jwV1Rwn32AcvqODJlPu1sZusGkDsdvZdEhEFbvtosv_pNYPaSb4928ailiEp-_lnqmm5Mi8icROi6zI3h0nDWTc8OZ-FYzsf2g79hMJ0yYhg/s50-c/20150420-cacing-tanah_20150420_181202.jpg
    tls, http
    IEXPLORE.EXE
    1.4kB
    13.3kB
    12
    15

    HTTP Request

    GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhE1FfgPh0K-j_BK8ktMjyOHzJAggfw0E4jwV1Rwn32AcvqODJlPu1sZusGkDsdvZdEhEFbvtosv_pNYPaSb4928ailiEp-_lnqmm5Mi8icROi6zI3h0nDWTc8OZ-FYzsf2g79hMJ0yYhg/s50-c/20150420-cacing-tanah_20150420_181202.jpg

    HTTP Response

    200
  • 216.58.214.161:443
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ4QKhDDGHcyIWjODlwRNXBnnstDNK1RZF-oUfl-SnVbdgnSsse4IXtg9kRS_HI8_rJandf6r6BLCOCjMRTY_rFFgxdtDdXSB4LjkX-8Cz8cS3UOUX8-J8wr_uuDEBF5ocpMUtk-ojATg/s50-c/IMG_20141209_072457.jpg
    tls, http
    IEXPLORE.EXE
    1.3kB
    12.2kB
    11
    14

    HTTP Request

    GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEgQ4QKhDDGHcyIWjODlwRNXBnnstDNK1RZF-oUfl-SnVbdgnSsse4IXtg9kRS_HI8_rJandf6r6BLCOCjMRTY_rFFgxdtDdXSB4LjkX-8Cz8cS3UOUX8-J8wr_uuDEBF5ocpMUtk-ojATg/s50-c/IMG_20141209_072457.jpg

    HTTP Response

    200
  • 216.58.214.161:443
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ0eZkDM-HQGS0TubGcI2B2UBYzCN708BsXHaUXV3g9FufUxL2u1p1qfK9on5wgSNVwlo9fMeqaRhtiXglQwqNrgRo2CgWiYns0aSYafT-k64MzY58ml3DOIKzrvjSlt92Wkby4Q_EWxQ/s50-c/S340LlQcCTOALnvzAAUEtKWHxGM438.png
    tls, http
    IEXPLORE.EXE
    1.4kB
    15.7kB
    13
    17

    HTTP Request

    GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEiZ0eZkDM-HQGS0TubGcI2B2UBYzCN708BsXHaUXV3g9FufUxL2u1p1qfK9on5wgSNVwlo9fMeqaRhtiXglQwqNrgRo2CgWiYns0aSYafT-k64MzY58ml3DOIKzrvjSlt92Wkby4Q_EWxQ/s50-c/S340LlQcCTOALnvzAAUEtKWHxGM438.png

    HTTP Response

    200
  • 216.58.214.161:443
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjurg6t2P9XQiOh51OhQozmO5la-DUktpyQ5DSrX8H9YeByKUhuB6ksbqFeoFJoNzrnlnnizAqG4ftjc06u8fqSOm5yKMsrRDg6fTV0dliyP2-h2-8xqWqxs1GGjQCkoxR63x_tSi1f1hQ/s50-c/Cililinku_zps3ee08127.jpg
    tls, http
    IEXPLORE.EXE
    1.3kB
    12.8kB
    12
    15

    HTTP Request

    GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEjurg6t2P9XQiOh51OhQozmO5la-DUktpyQ5DSrX8H9YeByKUhuB6ksbqFeoFJoNzrnlnnizAqG4ftjc06u8fqSOm5yKMsrRDg6fTV0dliyP2-h2-8xqWqxs1GGjQCkoxR63x_tSi1f1hQ/s50-c/Cililinku_zps3ee08127.jpg

    HTTP Response

    200
  • 216.58.214.161:443
    https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuALTEhXMFJwjBTB-I78gznrTADVNhp0j2Stx4iXuhMtW-hPz2gx-hf8Mdyi29hGJ17eiQ84sBYa328UN52mCRtbG73qc9qcjSz4OrzqrFlQNDl0ef5CZBtGeVMX438lxqr7_RCVWG9xk/s50-c/Anis+merah32544.jpg
    tls, http
    IEXPLORE.EXE
    1.3kB
    12.6kB
    12
    15

    HTTP Request

    GET https://blogger.googleusercontent.com/img/b/R29vZ2xl/AVvXsEhuALTEhXMFJwjBTB-I78gznrTADVNhp0j2Stx4iXuhMtW-hPz2gx-hf8Mdyi29hGJ17eiQ84sBYa328UN52mCRtbG73qc9qcjSz4OrzqrFlQNDl0ef5CZBtGeVMX438lxqr7_RCVWG9xk/s50-c/Anis+merah32544.jpg

    HTTP Response

    200
  • 216.58.214.68:443
    https://www.google.com/js/bg/sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4.js
    tls, http
    IEXPLORE.EXE
    1.6kB
    31.2kB
    18
    27

    HTTP Request

    GET https://www.google.com/js/bg/sn1S-AulhxcrIgUqNfYiEbxTfcKegpRxfM7JHRvb7T4.js

    HTTP Response

    200
  • 216.58.214.68:443
    www.google.com
    tls
    IEXPLORE.EXE
    981 B
    4.5kB
    15
    8
  • 142.250.75.233:443
    https://resources.blogblog.com/img/anon36.png
    tls, http
    IEXPLORE.EXE
    1.7kB
    7.7kB
    11
    11

    HTTP Request

    GET https://resources.blogblog.com/img/blank.gif

    HTTP Response

    200

    HTTP Request

    GET https://resources.blogblog.com/img/anon36.png

    HTTP Response

    200
  • 142.250.75.233:443
    resources.blogblog.com
    tls
    IEXPLORE.EXE
    707 B
    4.5kB
    9
    8
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.75.238:443
    developers.google.com
    tls
    IEXPLORE.EXE
    525 B
    355 B
    6
    5
  • 142.250.178.142:443
    developer.android.com
    tls
    IEXPLORE.EXE
    758 B
    4.6kB
    10
    9
  • 142.250.178.142:443
    developer.android.com
    tls
    IEXPLORE.EXE
    706 B
    4.5kB
    9
    8
  • 172.217.20.195:443
    gstatic.com
    tls
    IEXPLORE.EXE
    748 B
    4.6kB
    10
    9
  • 172.217.20.195:443
    gstatic.com
    tls
    IEXPLORE.EXE
    748 B
    4.6kB
    10
    9
  • 172.217.20.195:443
    gstatic.com
    tls
    IEXPLORE.EXE
    748 B
    4.6kB
    10
    9
  • 172.217.20.195:443
    gstatic.com
    tls
    IEXPLORE.EXE
    748 B
    4.6kB
    10
    9
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.7kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    747 B
    7.7kB
    9
    12
  • 204.79.197.200:443
    ieonline.microsoft.com
    tls
    iexplore.exe
    779 B
    7.7kB
    9
    12
  • 108.177.127.84:443
    https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__
    tls, http
    IEXPLORE.EXE
    1.8kB
    3.4kB
    10
    11

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__

    HTTP Response

    200

    HTTP Request

    GET https://accounts.google.com/o/oauth2/postmessageRelay?parent=file%3A%2F%2F&jsh=m%3B%2F_%2Fscs%2Fabc-static%2F_%2Fjs%2Fk%3Dgapi.lb.en.pGGAptgAK4s.O%2Fam%3DAAAg%2Fd%3D1%2Frs%3DAHpOoo-Cic-4VdRMZ7mFCYOA3wzpF7O-6g%2Fm%3D__features__

    HTTP Response

    200
  • 108.177.127.84:443
    accounts.google.com
    tls
    IEXPLORE.EXE
    431 B
    315 B
    4
    4
  • 8.8.8.8:53
    ajax.googleapis.com
    dns
    IEXPLORE.EXE
    65 B
    81 B
    1
    1

    DNS Request

    ajax.googleapis.com

    DNS Response

    142.250.75.234

  • 8.8.8.8:53
    www.blogger.com
    dns
    IEXPLORE.EXE
    61 B
    108 B
    1
    1

    DNS Request

    www.blogger.com

    DNS Response

    142.250.75.233

  • 8.8.8.8:53
    platform.twitter.com
    dns
    IEXPLORE.EXE
    66 B
    241 B
    1
    1

    DNS Request

    platform.twitter.com

    DNS Response

    93.184.220.66

  • 8.8.8.8:53
    2.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    2.bp.blogspot.com

    DNS Response

    142.250.75.225

  • 8.8.8.8:53
    4.bp.blogspot.com
    dns
    IEXPLORE.EXE
    63 B
    124 B
    1
    1

    DNS Request

    4.bp.blogspot.com

    DNS Response

    142.250.75.225

  • 8.8.8.8:53
    static.addtoany.com
    dns
    IEXPLORE.EXE
    65 B
    113 B
    1
    1

    DNS Request

    static.addtoany.com

    DNS Response

    104.22.71.197
    172.67.39.148
    104.22.70.197

  • 8.8.8.8:53
    fortaller.com
    dns
    IEXPLORE.EXE
    59 B
    132 B
    1
    1

    DNS Request

    fortaller.com

  • 8.8.8.8:53
    apis.google.com
    dns
    IEXPLORE.EXE
    61 B
    98 B
    1
    1

    DNS Request

    apis.google.com

    DNS Response

    216.58.214.174

  • 8.8.8.8:53
    apps.identrust.com
    dns
    IEXPLORE.EXE
    64 B
    165 B
    1
    1

    DNS Request

    apps.identrust.com

    DNS Response

    88.221.135.104
    88.221.134.137

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    c.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    c.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    o.pki.goog
    dns
    IEXPLORE.EXE
    56 B
    107 B
    1
    1

    DNS Request

    o.pki.goog

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    jqueryapi.info
    dns
    IEXPLORE.EXE
    60 B
    252 B
    1
    1

    DNS Request

    jqueryapi.info

    DNS Response

    72.14.178.174
    173.255.194.134
    45.33.30.197
    45.33.20.235
    96.126.123.244
    198.58.118.167
    45.33.23.183
    45.33.18.44
    72.14.185.43
    45.56.79.23
    45.79.19.196
    45.33.2.79

  • 8.8.8.8:53
    themes.googleusercontent.com
    dns
    IEXPLORE.EXE
    74 B
    119 B
    1
    1

    DNS Request

    themes.googleusercontent.com

    DNS Response

    216.58.214.161

  • 8.8.8.8:53
    dhiauliman.blogspot.com
    dns
    IEXPLORE.EXE
    69 B
    128 B
    1
    1

    DNS Request

    dhiauliman.blogspot.com

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    dhiauliman.blogspot.co.id
    dns
    IEXPLORE.EXE
    71 B
    133 B
    1
    1

    DNS Request

    dhiauliman.blogspot.co.id

    DNS Response

    172.217.20.193

  • 8.8.8.8:53
    accounts.google.com
    dns
    IEXPLORE.EXE
    65 B
    81 B
    1
    1

    DNS Request

    accounts.google.com

    DNS Response

    108.177.127.84

  • 8.8.8.8:53
    developers.google.com
    dns
    IEXPLORE.EXE
    67 B
    83 B
    1
    1

    DNS Request

    developers.google.com

    DNS Response

    142.250.75.238

  • 8.8.8.8:53
    ssl.gstatic.com
    dns
    IEXPLORE.EXE
    61 B
    77 B
    1
    1

    DNS Request

    ssl.gstatic.com

    DNS Response

    142.250.179.67

  • 8.8.8.8:53
    blogger.googleusercontent.com
    dns
    IEXPLORE.EXE
    75 B
    120 B
    1
    1

    DNS Request

    blogger.googleusercontent.com

    DNS Response

    216.58.214.161

  • 8.8.8.8:53
    resources.blogblog.com
    dns
    IEXPLORE.EXE
    68 B
    115 B
    1
    1

    DNS Request

    resources.blogblog.com

    DNS Response

    142.250.75.233

  • 8.8.8.8:53
    www.google.com
    dns
    IEXPLORE.EXE
    60 B
    76 B
    1
    1

    DNS Request

    www.google.com

    DNS Response

    216.58.214.68

  • 8.8.8.8:53
    developer.android.com
    dns
    IEXPLORE.EXE
    67 B
    111 B
    1
    1

    DNS Request

    developer.android.com

    DNS Response

    142.250.178.142

  • 8.8.8.8:53
    gstatic.com
    dns
    IEXPLORE.EXE
    57 B
    73 B
    1
    1

    DNS Request

    gstatic.com

    DNS Response

    172.217.20.195

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    854B

    MD5

    8d1040b12a663ca4ec7277cfc1ce44f0

    SHA1

    b27fd6bbde79ebdaee158211a71493e21838756b

    SHA256

    3086094d4198a5bbd12938b0d2d5f696c4dfc77e1eae820added346a59aa8727

    SHA512

    610c72970856ef7a316152253f7025ac11635078f1aea7b84641715813792374d2447b1002f1967d62b24073ee291b3e4f3da777b71216a30488a5d7b6103ac1

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    1KB

    MD5

    3bf30379b4098373328b08c9bed891c5

    SHA1

    0c7a59aa6595a9381f8996b6d36cc8d62a39a5da

    SHA256

    4877272ec4e6fb61d34aa0c20a5e565701e3567ad80272a03965cd14e3aaf5a7

    SHA512

    8c29de9febf3d06a8680d6f4d009069bb4afc3d112621c329fbafaaba56f305b03b4659e5645e2e08db4e036b421a41b169afcec4f1e0704219d7bb4ef3a906b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_DE59F8C40B88A0DF57DC57DBBEDD7057

    Filesize

    471B

    MD5

    73211a4bf0a6ba99cfe928c28b2316a5

    SHA1

    567810246b185042f4f8ee1c2231b6186a1e4340

    SHA256

    662a7518b008db1cc47cf4ccf4ea72e5efe505db961d0d5fcbfd1e9c3e441b23

    SHA512

    3df1e1e7a98a6751ca6ed1da62d4b1f8bb636666d8c1353eb0314c0dd020a23b36ecbbf5c8fc3b154a68a79292c8cb110e90c053ae743db6fa4712ce085b239d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199

    Filesize

    170B

    MD5

    d4df721229bf051b69dcb290a284fafe

    SHA1

    ba255ae0676624a142b1ecc1fdb3a73ccddd96e0

    SHA256

    84190c85c688442eb356212833c5eefcc76afae64ebb16dab344eb981b10df32

    SHA512

    9069233ab488f97a1bf15f643743c7cb695eddc109d726a2f8c70630c1ab31969278dd6565eb08adf13066874436d0c75006e00251380ca3fd9de40daa586fd4

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA

    Filesize

    410B

    MD5

    afa1438aa519c7a3d0b01e8d19e50cd3

    SHA1

    c4c48ad67c0bb28776d795bd9499c19f054ca02b

    SHA256

    9926021bd4b1c92b332acf01189c6c77ba4bf0e685dc34a15b2f97245287752a

    SHA512

    896f50369bcd9c7f38e16d00f8433afa84358e44b0680ec4c79cc82bd3df990d2d942c40a54a2a0db21630ae94d85e43fa9ec575d9641b73735fda9a8cd73993

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1b11d575125d698709ca19dc72508b8b

    SHA1

    58208e681453ca3b93e2603d26490a931415b4f6

    SHA256

    3239a0428c60c10766885416b1069936ddb08a7e51c15ec0aee0663530733c75

    SHA512

    29536a51fe1f7cf7f68690214507cb03b9e0c19ba89ab0aae327bccf602934d0c467f8bab922260f64c7ecc3fd70d7a95bab9bc35e5b8de10032e89a1934d1e5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    85b78c2a1825dd396ed2e26bc33e5bd8

    SHA1

    ab7fe1bb8f1b799dc697472b170706a25c776428

    SHA256

    2f458b59392a0da478cd71f0eacbbee69a809bcb5438044a8fd80725d0850eb5

    SHA512

    4b48fcc0a18d990b1431016a43ac7d22041191ef19b8dc06f654b4a82b76b525ac6d3634b5071c138c77301f16ed5e6a79729f9867bfc05b057c8121e83bd71a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    8c29db9425cc30c532a94d1140a3cbf9

    SHA1

    208a822d0a2f2574b930d2183b5bac576df77063

    SHA256

    a5a0aeae3ebd4ab245a9a0e5eb604d5c49ce3fbac664fa3073fad855cc73b342

    SHA512

    926d7d9ffe8f3fb527dec83866629eac4b47c0452f5272c21cf04dd6f4875f96677ac4caab5420f2cbbd1d2c00ab4ac516bb4b00c8e6f745f7c5fa3f9fe8f77b

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d61d803be0dad9c43ad1a0bab893e37a

    SHA1

    4194c9e2473ecb424cbafe46e56cc36d8ebe8d56

    SHA256

    b4c9a040f9a169f94fd51b104587d83ecd47eef07edbb86c8743c08f28f00289

    SHA512

    4c686c2f07ce87bf8e66f7bb7a8873dfc01f8d7c94a2714083d576fd2b2999d0bb457243f06d70eaa8e6293fb25a32c2429a272723cff41b7358221fa0d5b082

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    898e12353ea6e7c477809c7da3b5f724

    SHA1

    c6cc205e27e0af86bd47278bf763419deaa2325d

    SHA256

    76bf2635a080e9701d3a7b4a4f4f27e8ff924e48be66171663227fd29678861e

    SHA512

    26894d0fb9fb8ba6d9448f7f590a70a0f9494e418724d98c9d848cfee31faa8b4b937ba3ff2e2df7695cdd14dbb55824b9735fe85c61b7e3db77e7ab80613226

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66186708c93f51c951126b2f04a2e8a7

    SHA1

    67744b2b807b3264e135b48ce3d6a992d079a3c3

    SHA256

    0de47e7ecc954a3b4934c9b582177e29e2233a13d4e8cd16675cfb51e3b4de08

    SHA512

    6a44d0e3f1a5a220f8a2439cddcb550659ac2d22ebc19c10f039fe86249759a6e426fa162186ebd24f378f05249302dd584a0b08014f5766feff6c7f533a2a21

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    fc7dab1e4c0f97bcdba60e9788ad8b71

    SHA1

    73fe1d8cda040eb85511ef8795d3e46331768b3d

    SHA256

    7969e5647580a422bbec1d7ed4fa0070602109730b57653a5d4e62833b1a429f

    SHA512

    d8d42ca054082ad8a97191d31da5481d958ae1d71792011414d7c956ad667eef0e7cbe95f18e0e3eeaeca7ee0a548373b86dc88f9718bf55be729526f4fbd0f8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    a87a671dacc2662cf33198fb364af545

    SHA1

    55dcb35a13cb71e76386912d372a3998d5cdf956

    SHA256

    4b34af87663b1d40e7b24ed042c072cc1989efb5ff29aefb1cb0657fc78bfdb5

    SHA512

    1c34bbaef10cac09a9f7935aed479ed5a34550b8e0c9246aa2bde3bc96d6c503679155f20f7e96164b18198f4fdaaac0cd8e0ae9c23b428bfac9cc15a8f37dff

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    b8368aab86fe4b54019ef307ee0a42bf

    SHA1

    ce7c34e4ad5a7b73c23055582ad7e0183f1de837

    SHA256

    cfad9b6e99e57f7a979f7657584f18a7790e7de5e6ad03234fa18d35ca353310

    SHA512

    1c705f880023e19194c24dc6b488440f723f4d2db406d2b74a0524130eae884cbff254ca152ef34ab41d027b77cca6b4c6297b7844621a1751c6eb70dd34df68

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    58090aca0cd8104c57bb65903308fb2f

    SHA1

    9d223374d400da1b8a9a1271c470d1f30d7bb833

    SHA256

    c274020723d919e7d86e96d5be836f1165700831bbc042a5658732368b8bcc7f

    SHA512

    b53211fcc90f70fb106c212f27200a34a2a6f98a67ec6d6460edcd3d403f7b81a494e9758258d0402cd28aa86f4e28a1d90f49898e4f1742970f4f2082747858

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02a441c6c896698d02f8543eded5f762

    SHA1

    c8d4a4dbaaaeb826a40d0c270112478f9fb22ffa

    SHA256

    e6edea76f638c8bc223ff0974708d60b5e26c440a0024095341938224ce846d9

    SHA512

    f2a7883cb6878408a4e757f0c771bbb174b25116c82fa2f3a397532c2e1492362b858660fd36541dd0282c56fbb4122b00dc4529ce9c44eff68642d07b923b02

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    bffc7bea78fd8c233cc8436f23147802

    SHA1

    7e191a67e243d9f9cdc69140bb5b1832ccda407c

    SHA256

    079f1e725f8c572d475c8d7c2cbdaab13097e133e98a7fd156ac84f91b8e0fd6

    SHA512

    799966dad4b43ac3d95081dc3ed9d9ed79f0921726652030a921cb4431e7af8d54413cdc7f6a43ecb764aa0cd738159e2c79df112a07700cc49e58390e1aaf62

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    02270314ab488dffa7953fb357fd6898

    SHA1

    222bd582228a274a657721b2e2e0e86493fdfe1f

    SHA256

    731edfcd8ae9ffa018afb3b398f61cec258e75316d6c32a824be024a0e2f8ca6

    SHA512

    a1cee7278220b6bde1873ed8a4e98fb1f86a419a85e23fed963dada6fdd4757caee154d3fd121934eed378aeb4b54a188d1f03ce8e31a484108719f5814cdf42

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    dfb16c66cb6e2f2597c8bce650ce817c

    SHA1

    c67ee9be03ac548c5dd5a04ffb44568d1e362b4d

    SHA256

    065fb4fb5e7c9a7aa080554d5fe7fd50a56751d9e9376a7c18868f96cbac5078

    SHA512

    348cd1a02e104a8b63425052e89f204bafd60ccce5f53bbd1fbb175f838646e34f9543edf1eea2fd9ea588ce4d7825d3278bd2a2d88ff441ff1fda30b4cff6d5

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    67ee4a90f7123baf333ef7a738e62e6c

    SHA1

    fd6adf0b6e98701d1b4f337d02488e4260c32287

    SHA256

    fbebc99a6cac0b66baf3a96c049d7f61583058c059594a9e612b482a8398077a

    SHA512

    d1d8a60f29f88a844b2564160addacfa72c77793e51d30e3abff43837804a28ee7f912b7e14f0bf7a9fa85b6715ff311f043d06226278c02d1e506088be4809d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    9088ccb3f510b880b40fbf6f8c1d8a88

    SHA1

    fe3bea68aa731bdfc231fc914ab5c57e74f32076

    SHA256

    9fdc6cc3eba2a1221eab50e4e0cdb241d777f41deb46bd035c4b82e3eb95b268

    SHA512

    9803db0f1af382ebb75e2f03616773d1e06eeddd5a9f48b10e05d1c133f3bc9b57c414c1032bd93edd495710377a6a51e1b977645c124c0e747c5eeac3d05494

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e869543cdbe9f8c8575189b2dca520c6

    SHA1

    d29c39893fa1e7e0aa08d10a8b8b3138b58d9ae8

    SHA256

    a12974e100bdf2d5ddb5fcac5e0fcfb8683114890d00922b5f6ad555ca76b1cb

    SHA512

    4d4238e19856e60c0aeea78656e087940c92674419a7fc5540e0b81fc3835824e98582887c1b6f58e04e3a07adf22ab90db8e82aada26337e2c9b9290b62095a

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    1db5e27940d2d7988cccad4ed34abed2

    SHA1

    777a5476a60fb9125b1eaae494acf990c8a605f1

    SHA256

    e1d0a34f0a47892740b1ec3c8e3df0304c0f0346f5484b30ed6b8e5da05e71af

    SHA512

    c5dc045b2d290b486de5cf232a29392403c29dea0a6d1d64e056e921fe3e316920e64df74d8c3087c6c86615dd6e51442866480ab081a6ecd1669388c6d9ec5f

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    66e1fb2eeede1d8aa981b2d09985d19d

    SHA1

    5b756b7e3f9f95d308cfa53fd33c06868f7b3f99

    SHA256

    04fbd5f78c4206652ee35b1bf7a3a2d3a81c32b18cf27231c46b026b02e0d4fd

    SHA512

    0c2319529fd5088c33cf7dd4c171e4374b7d639b0150786bd53b09e0f77d9a91cc4d2e8fd05fcc15921ab283c91192e658a919c05dccd483d7c17e118bb31eb8

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    d7f813a6a1b43e2c6e12eb6a4c13bf78

    SHA1

    583bccfa2b583b32f439e29f4b42966a4291ca74

    SHA256

    2d6178336ae9ef1d5b07de72da95efa0b27312c2f3bca0a99478cb92c38363af

    SHA512

    d87b56b7a85364df2227de45643c5f11d11f1ab49ae11c5952b5d87ba8369db4073d2b618ea5b50c903c1f1e9e93cedfbb30cd64a32de478413a953a9627f1af

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    ee768ea937ced61a0be330d1a977967c

    SHA1

    c396b1061a0a6e1b736070cc881d08a438c17884

    SHA256

    e118507b72089d20f083745f9af3eec47037a9e60afeda5cb81b85fa1b1198e3

    SHA512

    112672e3288a21656d03cb0d54c5ec5a2305990f8381c2d431e6386c506b5414fd1081979d248bff0e549ced415e98de20eb5ff531bb5c9fa627ac1621c46f99

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    342B

    MD5

    e2e77b9021916f5f6eed59506805dad4

    SHA1

    2ca87bbe3b0fe00072d6a878c4ac2cc2ef3d7fe5

    SHA256

    034bc1109fb8c07d8685765ec5b5f4e2e29498de6e057a7b9c7d8b55fe89e67f

    SHA512

    fd6e31736405e4f08e2ddf330b5997ec7917f19e5c0619c2f55ba52d7a38d3e92b360dc1d86c246d6838bf7bf4551dbca9c943d39ce1e88089f5b0d16f603d5a

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5J67VDZD\544727282-postmessagerelay[1].js

    Filesize

    11KB

    MD5

    16f1b19cd042265a234dc208fd7efc64

    SHA1

    02f67c09980ab6057f073d29f4c3f2792257d3a3

    SHA256

    509be2bf36ff013c9a1c31ac54b751aac2401f14496662a16ea8af6903d21b27

    SHA512

    652ce3d209d5d4c1e39f06e41e87a14a3174419b8c9cff8e5683846afb51f9f4939c41fb51a7aee67d9d26db80b370890182ab7df089f826479d3e5e2843566e

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5J67VDZD\plusone[1].js

    Filesize

    55KB

    MD5

    15a42f20a492648f7c1595ea6bc99244

    SHA1

    50f3505e5459985af041ec26a6b412cfc2dc1cb5

    SHA256

    03998e7490f0e8f7d8490dc68ee8020101ddb4e8418567dbaa93426d15b721cb

    SHA512

    e5f256c59f1d22526b3610789a178ad06a2cab4a9c6c4238f72f67bd49c416540d5af74bc651c39ed2ec2558d1391ef77c30e68f9de73d0d07f34f5fe234af55

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\5J67VDZD\rpc_shindig_random[1].js

    Filesize

    14KB

    MD5

    f03c96248811fb7bba5b92a7929fecaa

    SHA1

    7938e96aac5714d34a1ba76972f79d52b5f403aa

    SHA256

    dc138da7a3e8f2591ad7e46811e2681412705798dbc3baf5b08b953b6be7afe6

    SHA512

    568fcfd183f1d8c92c28257b9b0ab1e9ae35c445aebfd56de7dc4c45db129972f3ab4bdc6d58701e421bcb8a14e69a5fe77449c853cf49a612ba917fd0bd9fcb

  • C:\Users\Admin\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\GLOK2QLQ\cb=gapi[1].js

    Filesize

    67KB

    MD5

    b4b711f3e747704ffe02b49791ce8cac

    SHA1

    ac7ce4cbd3c8ee66e3c8d9d209c1352c160c3b89

    SHA256

    f65bf40e2f0ce993b54772f703f72d53f0fa925457346fa8ec2031879ffa91d1

    SHA512

    b738deba57337a9147927f7dd35eab7c999dea6d2ff11f57fdc2e5b6f64326028a54778886548ba128a3f03ee333cc9e43de5162d8b578b85c290626577042db

  • C:\Users\Admin\AppData\Local\Temp\CabF76B.tmp

    Filesize

    70KB

    MD5

    49aebf8cbd62d92ac215b2923fb1b9f5

    SHA1

    1723be06719828dda65ad804298d0431f6aff976

    SHA256

    b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

    SHA512

    bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

  • C:\Users\Admin\AppData\Local\Temp\TarF80A.tmp

    Filesize

    181KB

    MD5

    4ea6026cf93ec6338144661bf1202cd1

    SHA1

    a1dec9044f750ad887935a01430bf49322fbdcb7

    SHA256

    8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

    SHA512

    6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.