Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
120s -
max time network
127s -
platform
windows7_x64 -
resource
win7-20240903-en -
resource tags
arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system -
submitted
28/09/2024, 10:20 UTC
Static task
static1
Behavioral task
behavioral1
Sample
fc16658a28d769b1f915a48a69a3aaf4_JaffaCakes118.html
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fc16658a28d769b1f915a48a69a3aaf4_JaffaCakes118.html
Resource
win10v2004-20240802-en
General
-
Target
fc16658a28d769b1f915a48a69a3aaf4_JaffaCakes118.html
-
Size
81KB
-
MD5
fc16658a28d769b1f915a48a69a3aaf4
-
SHA1
48a3bb526583c6cf859d54a205445a5276fd9164
-
SHA256
3736713fbc54a120f1aba985ff3fbb0cf915ec29df0c0557351c50bf592cdaad
-
SHA512
0aee1ef33c5f5f692825eff96fab554b895768a6f16a60776157f3aae8d5dccdb3e08f58c30ce70b88f9c61c09a72f03ec3d0a3339138fdddbcf46c6450b9d43
-
SSDEEP
768:/pGhKRcghp1Np18hLP0T1PcuK6Y97q72WK9k1N3UvaLmk0V7q7+673Y4RCqDNv9p:Zvp13185P0TtLKWL5HY3H9VO
Malware Config
Signatures
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 5 IoCs
flow ioc 45 sites.google.com 62 sites.google.com 64 sites.google.com 100 sites.google.com 104 sites.google.com -
System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language IEXPLORE.EXE -
description ioc Process Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IntelliForms iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch\Version = "WS not running" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes\DownloadRetries = "2" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DontShowMeThisDialogAgain iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\WindowsSearch iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\DecayDateQueue = 01000000d08c9ddf0115d1118c7a00c04fc297eb01000000953bd8210872ea40aad5946cc0771cd3000000000200000000001066000000010000200000008c763c23409975ab1be9d5bacce80ad3cdd85ed9626b30126d5f238afe2901a4000000000e8000000002000020000000067b54a82cd4be3aa623d824721c23ad8bbd39637638ec10cc94d8f4e7818fab20000000d0d4c1a1d4e0929725db2497540963c2ccfaf30daeec04bc24b64e14db80774b400000005147fcefb6739f4e8489d11e6b35726d58929f5c6c4b889ef3586fa0688feb19614b43e1207e9d0158e9318e1625edecf364a514a566cd4c3c8848a3a29e25a5 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\SearchScopes iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\InternetRegistry iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\CompatibilityFlags = "0" iexplore.exe Set value (str) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\FullScreen = "no" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\BrowserEmulation\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Zoom iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NTPFirstRun = "1" iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "1" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\MFV = 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 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\GPU iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\PageSetup iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main\Window_Placement = 2c0000000200000003000000ffffffffffffffffffffffffffffffff2400000024000000aa04000089020000 iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\AdminActive\{47591171-7D83-11EF-81B8-46BBF83CD43C} = "0" iexplore.exe Set value (data) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing\NewTabPage\LastProcessed = d0fdba209011db01 iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\DomainSuggestion\NextUpdateDate = "433680693" iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\IETld\LowMic iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\LowRegistry iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Main IEXPLORE.EXE Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\TabbedBrowsing iexplore.exe Key created \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Toolbar iexplore.exe Set value (int) \REGISTRY\USER\S-1-5-21-3290804112-2823094203-3137964600-1000\Software\Microsoft\Internet Explorer\Recovery\PendingRecovery\AdminActive = "0" iexplore.exe -
Suspicious use of FindShellTrayWindow 1 IoCs
pid Process 2916 iexplore.exe -
Suspicious use of SetWindowsHookEx 6 IoCs
pid Process 2916 iexplore.exe 2916 iexplore.exe 2968 IEXPLORE.EXE 2968 IEXPLORE.EXE 2968 IEXPLORE.EXE 2968 IEXPLORE.EXE -
Suspicious use of WriteProcessMemory 4 IoCs
description pid Process procid_target PID 2916 wrote to memory of 2968 2916 iexplore.exe 30 PID 2916 wrote to memory of 2968 2916 iexplore.exe 30 PID 2916 wrote to memory of 2968 2916 iexplore.exe 30 PID 2916 wrote to memory of 2968 2916 iexplore.exe 30
Processes
-
C:\Program Files\Internet Explorer\iexplore.exe"C:\Program Files\Internet Explorer\iexplore.exe" C:\Users\Admin\AppData\Local\Temp\fc16658a28d769b1f915a48a69a3aaf4_JaffaCakes118.html1⤵
- Modifies Internet Explorer settings
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:2916 -
C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE"C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2916 CREDAT:275457 /prefetch:22⤵
- System Location Discovery: System Language Discovery
- Modifies Internet Explorer settings
- Suspicious use of SetWindowsHookEx
PID:2968
-
Network
-
Remote address:8.8.8.8:53Requestcafelyrics.googlepages.comIN AResponsecafelyrics.googlepages.comIN CNAMEghs.googlehosted.comghs.googlehosted.comIN A216.58.204.83
-
Remote address:8.8.8.8:53Requestbloggerbuster.comIN AResponsebloggerbuster.comIN A216.239.36.21bloggerbuster.comIN A216.239.34.21bloggerbuster.comIN A216.239.32.21
-
Remote address:8.8.8.8:53Requesttokopakaianonline.comIN AResponse
-
Remote address:8.8.8.8:53Requestwww.blogger.comIN AResponsewww.blogger.comIN CNAMEblogger.l.google.comblogger.l.google.comIN A142.250.178.9
-
Remote address:8.8.8.8:53Requestapis.google.comIN AResponseapis.google.comIN CNAMEplus.l.google.complus.l.google.comIN A216.58.201.110
-
Remote address:8.8.8.8:53Requestresources.blogblog.comIN AResponseresources.blogblog.comIN CNAMEblogger.l.google.comblogger.l.google.comIN A142.250.178.9
-
Remote address:8.8.8.8:53Requestcafelyrics.blogspot.comIN AResponsecafelyrics.blogspot.comIN CNAMEblogspot.l.googleusercontent.comblogspot.l.googleusercontent.comIN A142.250.200.1
-
Remote address:8.8.8.8:53Requestwww.feedburner.comIN AResponsewww.feedburner.comIN CNAMEwww3.l.google.comwww3.l.google.comIN A142.250.178.14
-
Remote address:8.8.8.8:53Requestus.i1.yimg.comIN AResponseus.i1.yimg.comIN CNAMEedge.gycpi.b.yahoodns.netedge.gycpi.b.yahoodns.netIN A87.248.114.12edge.gycpi.b.yahoodns.netIN A87.248.114.11
-
Remote address:8.8.8.8:53Requestbuttons.googlesyndication.comIN AResponsebuttons.googlesyndication.comIN CNAMEwww.google.comwww.google.comIN A142.250.180.4
-
Remote address:8.8.8.8:53Requests7.addthis.comIN AResponses7.addthis.comIN CNAMEs8.addthis.coms8.addthis.comIN CNAMEds-s7.addthis.com.edgekey.netds-s7.addthis.com.edgekey.netIN CNAMEe4016.a.akamaiedge.nete4016.a.akamaiedge.netIN A23.44.66.45
-
GEThttp://bloggerbuster.com/wordpress/wp-content/themes/grid_focus_public2/images/btn_search.gifIEXPLORE.EXERemote address:216.239.36.21:80RequestGET /wordpress/wp-content/themes/grid_focus_public2/images/btn_search.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: bloggerbuster.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 1629
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
Remote address:142.250.187.238:80RequestGET /urchin.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.google-analytics.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Server: Golfe2
Content-Length: 6847
Content-Security-Policy-Report-Only: script-src 'none'; form-action 'none'; frame-src 'none'; report-uri https://csp.withgoogle.com/csp/scaffolding/ascnsrsgac:208:0
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to=coop_reporting
Report-To: {"group":"coop_reporting","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/scaffolding/ascnsrsgac:208:0"}],}
Date: Sat, 28 Sep 2024 05:47:52 GMT
Expires: Sat, 12 Oct 2024 05:47:52 GMT
Cache-Control: public, max-age=1209600
Age: 16359
Last-Modified: Tue, 12 Dec 2023 18:09:08 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
-
Remote address:142.250.180.4:80RequestGET /fusion/add.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: buttons.googlesyndication.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Type: image/gif
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="static-on-bigtable"
Report-To: {"group":"static-on-bigtable","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/static-on-bigtable"}]}
Content-Length: 2068
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=31536000
Last-Modified: Thu, 03 Oct 2019 12:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
-
Remote address:142.250.178.9:443RequestGET /static/v1/widgets/14020288-widget_css_bundle.css HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 6823
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 08:03:47 GMT
Expires: Sat, 27 Sep 2025 08:03:47 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Wed, 14 Apr 2021 08:41:29 GMT
Content-Type: text/css
Vary: Accept-Encoding
Age: 94604
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttps://www.blogger.com/dyn-css/authorization.css?targetBlogID=1414237899914995146&zx=b9eea0a2-65b5-49ab-92c8-c670590ee927IEXPLORE.EXERemote address:142.250.178.9:443RequestGET /dyn-css/authorization.css?targetBlogID=1414237899914995146&zx=b9eea0a2-65b5-49ab-92c8-c670590ee927 HTTP/1.1
Accept: text/css, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Security-Policy: script-src 'self' *.google.com *.google-analytics.com 'unsafe-inline' 'unsafe-eval' *.gstatic.com *.googlesyndication.com *.blogger.com *.googleapis.com uds.googleusercontent.com https://s.ytimg.com https://i18n-cloud.appspot.com https://www.youtube.com www-onepick-opensocial.googleusercontent.com www-bloggervideo-opensocial.googleusercontent.com www-blogger-opensocial.googleusercontent.com https://www.blogblog.com; report-uri /cspreport
Content-Type: text/css; charset=UTF-8
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 28 Sep 2024 10:20:31 GMT
Last-Modified: Sat, 28 Sep 2024 10:20:31 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:142.250.180.2:80RequestGET /pagead/show_ads.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: pagead2.googlesyndication.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Timing-Allow-Origin: *
Cross-Origin-Resource-Policy: cross-origin
Vary: Accept-Encoding
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=3600
Content-Type: text/javascript; charset=UTF-8
ETag: 11102647593724563522
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 15700
X-XSS-Protection: 0
-
Remote address:142.250.178.9:80RequestGET /img/icon18_email.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 164
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 08:11:09 GMT
Expires: Fri, 04 Oct 2024 08:11:09 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 26 Sep 2024 23:57:51 GMT
Content-Type: image/gif
Age: 94162
-
Remote address:142.250.178.9:80RequestGET /img/icon18_edit_allbkg.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 162
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:56:08 GMT
Expires: Fri, 04 Oct 2024 07:56:08 GMT
Cache-Control: public, max-age=604800
Last-Modified: Thu, 26 Sep 2024 23:57:51 GMT
Content-Type: image/gif
Age: 95063
-
Remote address:142.250.178.9:443RequestGET /static/v1/widgets/73815324-widgets.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.blogger.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 52329
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 13:02:51 GMT
Expires: Sat, 27 Sep 2025 13:02:51 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Thu, 17 Sep 2020 22:18:22 GMT
Content-Type: text/javascript
Vary: Accept-Encoding
Age: 76660
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
Remote address:87.248.114.12:80RequestGET /us.yimg.com/i/us/my/addtomyyahoo4.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: us.i1.yimg.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
x-amz-request-id: 7N481HKVC1V612MP
Date: Sun, 18 Aug 2024 20:11:34 GMT
Last-Modified: Thu, 17 May 2018 13:30:46 GMT
ETag: "9652eeb62b03f1fbf4d358ea0ce13107"
x-amz-server-side-encryption: AES256
Cache-Control: public,max-age=315360000
x-amz-meta-created-date: Wed, 14 Nov 2012 17:41:49 GMT
x-amz-meta-mbst-etag: "YM:1:a7bd8e41-25b9-44bf-917e-b7efec483bac0004ce780c98c874"
x-amz-meta-x-ysws-mbst-vtime: 1352914909579380
Expires: Sun, 14 May 2028 13:30:45 GMT
x-amz-meta-x-ysws-access: public
Accept-Ranges: bytes
Content-Type: image/gif
Server: ATS
Content-Length: 765
Referrer-Policy: no-referrer-when-downgrade
Vary: Origin
Age: 3506937
ATS-Carp-Promotion: 1
Connection: keep-alive
ATS-Carp-Promotion: 1
-
Remote address:216.58.204.83:80RequestGET /recentcomments.txt HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: cafelyrics.googlepages.com
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Date: Sat, 28 Sep 2024 10:20:31 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 255
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
Remote address:216.58.204.83:80RequestGET /autoreadmore.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: cafelyrics.googlepages.com
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Date: Sat, 28 Sep 2024 10:20:31 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 252
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
Remote address:23.44.66.45:80RequestGET /js/addthis_widget.php?v=12 HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: s7.addthis.com
Connection: Keep-Alive
ResponseHTTP/1.1 308 Permanent Redirect
Content-Type: text/html
Content-Length: 171
Location: https://s7.addthis.com/js/addthis_widget.php
Date: Sat, 28 Sep 2024 10:20:31 GMT
Connection: keep-alive
X-Host: s7.addthis.com
-
Remote address:23.44.66.45:80ResponseHTTP/1.0 408 Request Time-out
Mime-Version: 1.0
Date: Sat, 28 Sep 2024 10:21:05 GMT
Content-Type: text/html
Content-Length: 312
Expires: Sat, 28 Sep 2024 10:21:05 GMT
-
Remote address:142.250.178.14:80RequestGET /fb/images/pub/feed-icon16x16.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: www.feedburner.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Sat, 28 Sep 2024 10:20:31 GMT
Permissions-Policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*
Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version
Cross-Origin-Opener-Policy: same-origin
Content-Security-Policy: require-trusted-types-for 'script'
Content-Encoding: gzip
Transfer-Encoding: chunked
Server: ESF
X-XSS-Protection: 0
X-Content-Type-Options: nosniff
-
Remote address:142.250.178.9:443RequestGET /img/icon18_wrench_allbkg.png HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: resources.blogblog.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech"
Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]}
Content-Length: 475
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 08:11:45 GMT
Expires: Fri, 04 Oct 2024 08:11:45 GMT
Cache-Control: public, max-age=604800
Last-Modified: Fri, 27 Sep 2024 07:00:31 GMT
Content-Type: image/png
Age: 94126
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
Remote address:216.58.201.110:443RequestGET /js/plusone.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Access-Control-Allow-Origin: *
Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team"
Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]}
Timing-Allow-Origin: *
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
ETag: "e648652e2943b335"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttps://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scsIEXPLORE.EXERemote address:216.58.201.110:443RequestGET /_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 57774
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:37:08 GMT
Expires: Sat, 27 Sep 2025 07:37:08 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 06 Sep 2024 22:15:37 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 96204
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
GEThttp://cafelyrics.blogspot.com/feeds/comments/default?alt=json-in-script&callback=showrecentcommentsIEXPLORE.EXERemote address:142.250.200.1:80RequestGET /feeds/comments/default?alt=json-in-script&callback=showrecentcomments HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: cafelyrics.blogspot.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
Date: Sat, 28 Sep 2024 10:20:31 GMT
Server: Blogger Render Server 1.0
Content-Length: 3184
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
GEThttps://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_1?le=scsIEXPLORE.EXERemote address:216.58.201.110:443RequestGET /_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_1?le=scs HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: apis.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/social-frontend-mpm-access
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="social-frontend-mpm-access"
Report-To: {"group":"social-frontend-mpm-access","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/social-frontend-mpm-access"}]}
Content-Length: 15036
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:34:41 GMT
Expires: Sat, 27 Sep 2025 07:34:41 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Fri, 06 Sep 2024 22:15:37 GMT
Content-Type: text/javascript; charset=UTF-8
Vary: Accept-Encoding
Age: 96351
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
Remote address:8.8.8.8:53Requestsites.google.comIN AResponsesites.google.comIN A216.58.212.238
-
Remote address:216.58.212.238:80RequestGET /site/cafelyrics/autoreadmore.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 211
Server: GSE
-
Remote address:216.58.212.238:80RequestGET /site/klod82/dot.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:32 GMT
Expires: Sat, 28 Sep 2024 10:20:32 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 205
Server: GSE
-
Remote address:216.58.212.238:80RequestGET /site/cafelyrics/recentcomments.txt HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 212
Server: GSE
-
Remote address:216.58.212.238:80RequestGET /site/klod82/chat_grey.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:32 GMT
Expires: Sat, 28 Sep 2024 10:20:32 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Content-Length: 211
Server: GSE
-
Remote address:216.58.212.238:443RequestGET /site/cafelyrics/recentcomments.txt HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Frecentcomments.txt
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Frecentcomments.txtIEXPLORE.EXERemote address:216.58.212.238:443RequestGET /site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Frecentcomments.txt HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:216.58.212.238:443RequestGET /site/cafelyrics/autoreadmore.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Fautoreadmore.js
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Fautoreadmore.jsIEXPLORE.EXERemote address:216.58.212.238:443RequestGET /site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Fautoreadmore.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:31 GMT
Expires: Sat, 28 Sep 2024 10:20:31 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requestc.pki.googIN AResponsec.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:142.250.187.227:80RequestGET /r/r1.crl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: c.pki.goog
ResponseHTTP/1.1 200 OK
Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/cacerts
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="cacerts"
Report-To: {"group":"cacerts","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/cacerts"}]}
Content-Length: 854
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Sat, 28 Sep 2024 10:03:07 GMT
Expires: Sat, 28 Sep 2024 10:53:07 GMT
Cache-Control: public, max-age=3000
Age: 1044
Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT
Content-Type: application/pkix-crl
Vary: Accept-Encoding
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
Remote address:8.8.8.8:53Requesto.pki.googIN AResponseo.pki.googIN CNAMEpki-goog.l.google.compki-goog.l.google.comIN A142.250.187.227
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:52:35 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1676
-
GEThttp://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydBIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydB HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 10:02:27 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1085
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:52:35 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1676
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 10:16:34 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 242
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:35:49 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2682
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 10:16:34 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 242
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:35:49 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 2682
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:52:35 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1676
-
GEThttp://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:30:01 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3030
-
GEThttp://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEgl HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:30:01 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 3030
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:52:35 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1676
-
GEThttp://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DIEXPLORE.EXERemote address:142.250.187.227:80RequestGET /wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3D HTTP/1.1
Connection: Keep-Alive
Accept: */*
User-Agent: Microsoft-CryptoAPI/6.1
Host: o.pki.goog
ResponseHTTP/1.1 200 OK
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Date: Sat, 28 Sep 2024 09:52:35 GMT
Cache-Control: public, max-age=14400
Content-Type: application/ocsp-response
Age: 1676
-
Remote address:8.8.8.8:53Requestmisslyrics.netIN AResponse
-
Remote address:8.8.8.8:53Requestklod82.googlepages.comIN AResponseklod82.googlepages.comIN CNAMEghs.googlehosted.comghs.googlehosted.comIN A216.58.204.83
-
Remote address:216.58.204.83:80RequestGET /dot.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: klod82.googlepages.com
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Date: Sat, 28 Sep 2024 10:20:32 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 240
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
Remote address:216.58.204.83:80RequestGET /chat_grey.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: klod82.googlepages.com
Connection: Keep-Alive
ResponseHTTP/1.1 301 Moved Permanently
Date: Sat, 28 Sep 2024 10:20:32 GMT
Content-Type: text/html; charset=UTF-8
Server: ghs
Content-Length: 246
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
-
Remote address:216.58.212.238:443RequestGET /site/klod82/dot.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fdot.gif
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:33 GMT
Expires: Sat, 28 Sep 2024 10:20:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fdot.gifIEXPLORE.EXERemote address:216.58.212.238:443RequestGET /site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fdot.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:33 GMT
Expires: Sat, 28 Sep 2024 10:20:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:216.58.212.238:443RequestGET /site/klod82/chat_grey.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 302 Moved Temporarily
Location: https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fchat_grey.gif
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:33 GMT
Expires: Sat, 28 Sep 2024 10:20:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
GEThttps://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fchat_grey.gifIEXPLORE.EXERemote address:216.58.212.238:443RequestGET /site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fchat_grey.gif HTTP/1.1
Accept: image/png, image/svg+xml, image/*;q=0.8, */*;q=0.5
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: sites.google.com
Connection: Keep-Alive
ResponseHTTP/1.1 404 Not Found
Content-Encoding: gzip
Date: Sat, 28 Sep 2024 10:20:33 GMT
Expires: Sat, 28 Sep 2024 10:20:33 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
Content-Security-Policy: frame-ancestors 'self'
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:8.8.8.8:53Requesttpc.googlesyndication.comIN AResponsetpc.googlesyndication.comIN A172.217.169.65
-
Remote address:172.217.169.65:443RequestGET /sodar/sodar2.js HTTP/1.1
Accept: application/javascript, */*;q=0.8
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: tpc.googlesyndication.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Type: text/javascript
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs"
Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
Date: Sat, 28 Sep 2024 10:20:36 GMT
Expires: Sat, 28 Sep 2024 10:20:36 GMT
Cache-Control: private, max-age=3000
ETag: "1727224258380615"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
Transfer-Encoding: chunked
-
Remote address:172.217.169.65:443RequestGET /sodar/sodar2/232/runner.html HTTP/1.1
Accept: text/html, application/xhtml+xml, */*
Accept-Language: en-US
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; Trident/7.0; rv:11.0) like Gecko
Accept-Encoding: gzip, deflate
Host: tpc.googlesyndication.com
Connection: Keep-Alive
ResponseHTTP/1.1 200 OK
Content-Encoding: gzip
Cross-Origin-Resource-Policy: cross-origin
Cross-Origin-Opener-Policy: same-origin; report-to="adspam-signals-scs"
Report-To: {"group":"adspam-signals-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/adspam-signals-scs"}]}
Content-Length: 5005
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Date: Fri, 27 Sep 2024 07:31:57 GMT
Expires: Sat, 27 Sep 2025 07:31:57 GMT
Cache-Control: public, max-age=31536000
Last-Modified: Mon, 23 Sep 2024 18:12:21 GMT
Content-Type: text/html
Vary: Accept-Encoding
Age: 96519
Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
-
216.239.36.21:80http://bloggerbuster.com/wordpress/wp-content/themes/grid_focus_public2/images/btn_search.gifhttpIEXPLORE.EXE609 B 2.0kB 6 5
HTTP Request
GET http://bloggerbuster.com/wordpress/wp-content/themes/grid_focus_public2/images/btn_search.gifHTTP Response
404 -
632 B 8.0kB 8 9
HTTP Request
GET http://www.google-analytics.com/urchin.jsHTTP Response
200 -
567 B 2.9kB 6 5
HTTP Request
GET http://buttons.googlesyndication.com/fusion/add.gifHTTP Response
200 -
190 B 92 B 4 2
-
190 B 92 B 4 2
-
142.250.178.9:443https://www.blogger.com/static/v1/widgets/14020288-widget_css_bundle.csstls, httpIEXPLORE.EXE1.2kB 12.5kB 14 15
HTTP Request
GET https://www.blogger.com/static/v1/widgets/14020288-widget_css_bundle.cssHTTP Response
200 -
142.250.178.9:443https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1414237899914995146&zx=b9eea0a2-65b5-49ab-92c8-c670590ee927tls, httpIEXPLORE.EXE1.2kB 6.0kB 13 13
HTTP Request
GET https://www.blogger.com/dyn-css/authorization.css?targetBlogID=1414237899914995146&zx=b9eea0a2-65b5-49ab-92c8-c670590ee927HTTP Response
200 -
190 B 92 B 4 2
-
190 B 92 B 4 2
-
830 B 16.9kB 12 15
HTTP Request
GET http://pagead2.googlesyndication.com/pagead/show_ads.jsHTTP Response
200 -
611 B 1.7kB 7 5
HTTP Request
GET http://www.blogger.com/img/icon18_email.gifHTTP Response
200 -
617 B 1.7kB 7 5
HTTP Request
GET http://www.blogger.com/img/icon18_edit_allbkg.gifHTTP Response
200 -
142.250.178.9:443https://www.blogger.com/static/v1/widgets/73815324-widgets.jstls, httpIEXPLORE.EXE2.0kB 60.3kB 31 48
HTTP Request
GET https://www.blogger.com/static/v1/widgets/73815324-widgets.jsHTTP Response
200 -
575 B 1.9kB 6 6
HTTP Request
GET http://us.i1.yimg.com/us.yimg.com/i/us/my/addtomyyahoo4.gifHTTP Response
200 -
242 B 144 B 5 3
-
603 B 1.3kB 7 5
HTTP Request
GET http://cafelyrics.googlepages.com/recentcomments.txtHTTP Response
301 -
600 B 1.2kB 7 5
HTTP Request
GET http://cafelyrics.googlepages.com/autoreadmore.jsHTTP Response
301 -
599 B 1.0kB 7 5
HTTP Request
GET http://s7.addthis.com/js/addthis_widget.php?v=12HTTP Response
308 -
288 B 692 B 6 4
HTTP Response
408 -
620 B 1.9kB 7 6
HTTP Request
GET http://www.feedburner.com/fb/images/pub/feed-icon16x16.pngHTTP Response
404 -
190 B 92 B 4 2
-
759 B 4.6kB 10 9
-
142.250.178.9:443https://resources.blogblog.com/img/icon18_wrench_allbkg.pngtls, httpIEXPLORE.EXE1.1kB 5.7kB 11 9
HTTP Request
GET https://resources.blogblog.com/img/icon18_wrench_allbkg.pngHTTP Response
200 -
216.58.201.110:443https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scstls, httpIEXPLORE.EXE3.1kB 93.0kB 46 75
HTTP Request
GET https://apis.google.com/js/plusone.jsHTTP Response
200HTTP Request
GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_0?le=scsHTTP Response
200 -
142.250.200.1:80http://cafelyrics.blogspot.com/feeds/comments/default?alt=json-in-script&callback=showrecentcommentshttpIEXPLORE.EXE645 B 3.7kB 7 6
HTTP Request
GET http://cafelyrics.blogspot.com/feeds/comments/default?alt=json-in-script&callback=showrecentcommentsHTTP Response
404 -
216.58.201.110:443https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_1?le=scstls, httpIEXPLORE.EXE1.6kB 21.4kB 18 22
HTTP Request
GET https://apis.google.com/_/scs/abc-static/_/js/k=gapi.lb.en.2ttuSS2XBQ8.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=AACA/rs=AHpOoo-TYe36ShA0ds8KrukIhF82BwaKlg/cb=gapi.loaded_1?le=scsHTTP Response
200 -
190 B 92 B 4 2
-
923 B 1.6kB 8 8
HTTP Request
GET http://sites.google.com/site/cafelyrics/autoreadmore.jsHTTP Response
302HTTP Request
GET http://sites.google.com/site/klod82/dot.gifHTTP Response
302 -
932 B 1.7kB 8 8
HTTP Request
GET http://sites.google.com/site/cafelyrics/recentcomments.txtHTTP Response
302HTTP Request
GET http://sites.google.com/site/klod82/chat_grey.gifHTTP Response
302 -
216.58.212.238:443https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Frecentcomments.txttls, httpIEXPLORE.EXE1.5kB 9.2kB 12 16
HTTP Request
GET https://sites.google.com/site/cafelyrics/recentcomments.txtHTTP Response
302HTTP Request
GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Frecentcomments.txtHTTP Response
404 -
216.58.212.238:443https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Fautoreadmore.jstls, httpIEXPLORE.EXE1.5kB 9.1kB 13 16
HTTP Request
GET https://sites.google.com/site/cafelyrics/autoreadmore.jsHTTP Response
302HTTP Request
GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fcafelyrics%2Fautoreadmore.jsHTTP Response
404 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
348 B 1.7kB 5 4
HTTP Request
GET http://c.pki.goog/r/r1.crlHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydBhttpIEXPLORE.EXE786 B 1.6kB 7 4
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DHTTP Response
200HTTP Request
GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQCAjeF7nQPGRhIrMaE%2FWydBHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DhttpIEXPLORE.EXE846 B 3.1kB 8 6
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DHTTP Response
200HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DhttpIEXPLORE.EXE846 B 3.1kB 8 6
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3DHTTP Response
200HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEG4QF2R8nF2AEtb%2Bd0Q2tcs%3DHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3DhttpIEXPLORE.EXE472 B 1.6kB 5 4
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEGxehKwEvgtmEgBIJfgU%2FNk%3DHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DhttpIEXPLORE.EXE518 B 1.6kB 6 4
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglhttpIEXPLORE.EXE516 B 1.6kB 6 4
HTTP Request
GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglhttpIEXPLORE.EXE464 B 845 B 5 3
HTTP Request
GET http://o.pki.goog/wr2/MFIwUDBOMEwwSjAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEQDmcMw%2Fo03sIxABiVt5eEglHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DhttpIEXPLORE.EXE466 B 844 B 5 3
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DHTTP Response
200 -
142.250.187.227:80http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DhttpIEXPLORE.EXE518 B 1.6kB 6 4
HTTP Request
GET http://o.pki.goog/wr2/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRTQtSEi8EX%2BbYUTXd8%2ByMxD3s1zQQU3hse7XkV1D43JMMhu%2Bw0OW1CsjACEBjLuCs2qfDnElspkAVY%2Bl8%3DHTTP Response
200 -
559 B 1.2kB 6 5
HTTP Request
GET http://klod82.googlepages.com/dot.gifHTTP Response
301 -
611 B 1.2kB 7 5
HTTP Request
GET http://klod82.googlepages.com/chat_grey.gifHTTP Response
301 -
216.58.212.238:443https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fdot.giftls, httpIEXPLORE.EXE1.6kB 9.1kB 14 18
HTTP Request
GET https://sites.google.com/site/klod82/dot.gifHTTP Response
302HTTP Request
GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fdot.gifHTTP Response
404 -
216.58.212.238:443https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fchat_grey.giftls, httpIEXPLORE.EXE1.6kB 9.1kB 13 17
HTTP Request
GET https://sites.google.com/site/klod82/chat_grey.gifHTTP Response
302HTTP Request
GET https://sites.google.com/site/sites/system/errors/WebspaceNotFound?path=%2Fklod82%2Fchat_grey.gifHTTP Response
404 -
710 B 4.5kB 9 8
-
172.217.169.65:443https://tpc.googlesyndication.com/sodar/sodar2/232/runner.htmltls, httpIEXPLORE.EXE1.6kB 18.4kB 16 21
HTTP Request
GET https://tpc.googlesyndication.com/sodar/sodar2.jsHTTP Response
200HTTP Request
GET https://tpc.googlesyndication.com/sodar/sodar2/232/runner.htmlHTTP Response
200 -
747 B 7.8kB 9 12
-
747 B 7.8kB 9 12
-
779 B 7.8kB 9 12
-
72 B 119 B 1 1
DNS Request
cafelyrics.googlepages.com
DNS Response
216.58.204.83
-
63 B 111 B 1 1
DNS Request
bloggerbuster.com
DNS Response
216.239.36.21216.239.34.21216.239.32.21
-
67 B 140 B 1 1
DNS Request
tokopakaianonline.com
-
61 B 108 B 1 1
DNS Request
www.blogger.com
DNS Response
142.250.178.9
-
61 B 98 B 1 1
DNS Request
apis.google.com
DNS Response
216.58.201.110
-
68 B 115 B 1 1
DNS Request
resources.blogblog.com
DNS Response
142.250.178.9
-
69 B 128 B 1 1
DNS Request
cafelyrics.blogspot.com
DNS Response
142.250.200.1
-
64 B 108 B 1 1
DNS Request
www.feedburner.com
DNS Response
142.250.178.14
-
60 B 131 B 1 1
DNS Request
us.i1.yimg.com
DNS Response
87.248.114.1287.248.114.11
-
75 B 116 B 1 1
DNS Request
buttons.googlesyndication.com
DNS Response
142.250.180.4
-
60 B 169 B 1 1
DNS Request
s7.addthis.com
DNS Response
23.44.66.45
-
62 B 78 B 1 1
DNS Request
sites.google.com
DNS Response
216.58.212.238
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
c.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
56 B 107 B 1 1
DNS Request
o.pki.goog
DNS Response
142.250.187.227
-
60 B 133 B 1 1
DNS Request
misslyrics.net
-
68 B 115 B 1 1
DNS Request
klod82.googlepages.com
DNS Response
216.58.204.83
-
71 B 87 B 1 1
DNS Request
tpc.googlesyndication.com
DNS Response
172.217.169.65
MITRE ATT&CK Enterprise v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
854B
MD5e935bc5762068caf3e24a2683b1b8a88
SHA182b70eb774c0756837fe8d7acbfeec05ecbf5463
SHA256a8accfcfeb51bd73df23b91f4d89ff1a9eb7438ef5b12e8afda1a6ff1769e89d
SHA512bed4f6f5357b37662623f1f8afed1a3ebf3810630b2206a0292052a2e754af9dcfe34ee15c289e3d797a8f33330e47c14cbefbc702f74028557ace29bf855f9e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize1KB
MD50140aa5c98f3f97871f084b2816e6798
SHA1a8f70ad85359e9f96724147320d3d3cff7f3f435
SHA256db6433beddd0641b74d03def44f290a637d6412f9ec91b63bc92a0d7e5a83857
SHA512353892f5c144be39d413401ba538bc3258f846ac77f93b2731690ca410a00ebde16884dfc7445780b430032a19fe6a8c2ad7fbc63529d5dcf70710a5cc479d06
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C02877841121CC45139CB51404116B25_0BE30C8E6128C0BC8455FF6A9904D7CF
Filesize471B
MD529d9d2336e72779e0e11c40e02aba9f0
SHA10deab76218eed4108fb9ed2f5cb66d0b94028e6d
SHA256ad9a43c1a8ec628e2f03ded9f10ebb971f3816d164df1391b3419fa27966b242
SHA5122fd640ca3a6abe0d46e8956cc4d20d203c2a81d930f9568defb1b0ebb6525b624330d28a7af4154b286377ccb68f7aadb85a8c4798e780df78ceaeffee00fc1e
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\05DDC6AA91765AACACDB0A5F96DF8199
Filesize170B
MD5e4ae43bd41053127dc45eeeab542f8b4
SHA19cf583ab992f8d3c71a019d6846be25ee5b72074
SHA25676cc32375ed3b02045e641d50f490a327fc9e9a40217277678b7b72fad86235a
SHA5125d5c7cd7dd7bdbf7ffc2c4fbabc957dfdd796ff267f60bd54b6fdbe74769004bace037111bb150d456161ee5785b281dd0004ddfd8141ac418c1e8ec61f829e7
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\24BD96D5497F70B3F510A6B53CD43F3E_3A89246FB90C5EE6620004F1AE0EB0EA
Filesize410B
MD5bbb033b2dd2f1dc3e3dd72956099b9b6
SHA19164308adb0be85fb1b26210ef8928fecbe964d5
SHA256b70a731fb8667fea378f00768ed5b0ceb3bcba84b4795389eef4a42d4bc4af10
SHA51233bcf60b4908d4f586c41259e4cb72185c38e71c69be0f66afdef0549dc1bbe5e6808ea9e828f34d6631a9afb4126a5846b985843f9819b464a551c03f8149c8
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5222736bd6949f4176c89ba6ba31696a9
SHA142b1e0a38b684d47f4cc8949c23a2883f58a45ca
SHA2565c3c12012e6685729ac26147e6d6cdc322cc1413d9778e48518a02b850739663
SHA512c3be8c9304f146520094dfe68ab56f0327e46dbc972f47bbb0550ef99d0be1e2a95e612a1bf205db5c2e91b3bf985bd29f94179ca9c4eff43279fb6657cc2646
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5b7de0a8bcac54b3e8eb9abae305ca257
SHA13e73cb3d5058c74269b2f28b620cdb70c564248c
SHA2568753e6ea33d18afa08a26b42135616751a813b30ab79028aa9e5847f1f88c3d7
SHA512d88ca7c9827e23c0162bc5b83d8445983c94b9e678b8e5d6f61dc57b4fe3ea7b1fe86b461d10d7f55e0db26aaed2a5a9c35ab553c7cd56a49a160d0f23d77e73
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5188d0e6dcc4675e08f8df8781cfc924d
SHA1ca5e1b1acbe78fcad48f7e854b45aa1d3b28a96a
SHA2569e8b2bb51f50905b96158fa264abf784abc79fbb354b286252526dc65bddba2e
SHA51284f2e62a1b02aa8ad15aeaf5e7d626395113d0029a4443b8202d11424e869f8ddb86fec725d05ceb2dc4f6abaaf85f595ab6b32b1eda0a000b25b0a9976aecd3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5fd5419b5911dc5a7ee50cec6c0dad1d0
SHA1d5742adaf2d1302d070124a00ab1093c6bc5ee38
SHA25699c63f6684d0277b9195c468d841c41df3021f6349ea702aa005be4c1731f6c1
SHA512435ac85953ca2774a4b0ae8eb6b0bbdea5a2b8230f6a39311fc668c63ee84eda8bd19e082f04316d49333ac11d10066d4450baee6582f6130b619a2c3ef41414
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e86a2dc663e231f8528bc11d88acbf9b
SHA126fbf46476371bacf2b8ac6a33c98912479c553a
SHA256853296b84320abdad779123a255cbc62da9fe94347891f7fe08fa7a8b07355be
SHA512590dbdfb003b035237e6fb11d669a19257df3832214a5b96151e449e4f9019391fbc5ed27d2b28ee8c6d9bf534bfa6d938d2e8165f30e94a95b23ccf89cbdeeb
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ec686e657c19dcad617dcedc8ebfae26
SHA1f4b6a18d30244c66f51ef710e3c7c62392f765b7
SHA256ad0cd5245a1a19ea713cae86b0cceb11f39db2ea53da4d7391faa4baedd44ca7
SHA512b600092bba43a8e792da6cacdb4cd598013533258a1c6ab33a7e7cfb9016a1345fc57ff3b1198068f965f0856015ec68f848ae5c2991a3e358d025bb9db4d4e2
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5e255a01ce6248b365aaeb893da2ad3c3
SHA1a30d2b983623e1ee9776225938a11fc039359def
SHA2560ab3145b662141a6cedb5c05f5d8d70c6f0a71c1bb14e7549d2066d6315f6d26
SHA5125fa2fda0f0cefe5152389e71cb2048e08e545269ac15cffbc2198079cc645bff24f622368791a26922fdbdab971594142e5f8beffc581e776e6369192ce32282
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD51ad0dfb82a5173a95d5daaddab2bd587
SHA1cb5493fbbc856efe1922c21993380296b38e32c8
SHA2560d8531d61e1e23afad991c33d0bbcad1c0b28c4b01362e9a885fd0c1322e7ff7
SHA512576948e78951f8ff2ac12fdb1422a904cedc184ed303ddb741259c071572f5874909da57a64fd89d436c4513853ef354aa539899d2fd780ce1a8fd9232162189
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD53e73061ebdab49a003430139d55fb8b5
SHA150071a786f71b9282d82860cb3e543c4e841ea9d
SHA256d46ad2c9d5d71137c853feb848a1f3cb6d333a4e9a6b53c3849d31d1d31d7018
SHA512351c56aa4daffd8ce89c3257aa6b65fcd7d0cb7f111cd63fe1ce390d6a4c9ae523a9b2a5d51e43f58095e9b2f3e117d007520b517bb4427f650899f975f1d09a
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD552d0ef2dceb0c9665a75d918139fc592
SHA186482d92747ce4832b1fa7c2714e24ce191033eb
SHA256c56c1be0a79b301e50a0c4868c9274a369443053de7144112cc11ee78219e254
SHA512ffc1a12b089cca0b8fc369f1ffd5488f0823b2e19d5342e838ffca96ec19f0d64bd5211a745bedf5988b11a66b8c7d33847a142b26c1b91cb1f90445a4670ca5
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD58c3074dd4f2e934da46764ad9146a74a
SHA1d68530d65b8c1525a36f1f693446776f5a91c197
SHA256c774371aae70e39a571fdea1650e5dc45fb398fc0e110d9adb206ec8ffa30dc7
SHA512f70df22a7c179c2696e98764ba7ce6a5bd2e49f5188ab4d492225f4c8ba84dd633ea71ca0a1fd139ceb5698bf49a65fa847ad23055dbb591b2e58e8bb59f1b2f
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD585acec4234ecfc31a946280f2709f03d
SHA139a8db94c1655d0e634fcc4a968c34f148f71f54
SHA256c852ff3fa17ebdc0232c24b0e95e90f5eaa51e010c3dcbc1db8aba4c6d062126
SHA5121918db904a9dfe1e85f7abfd55a51174d48c8aff7f2d487b00a517ba909ae5678274d4178e22641fdac10993ead48bcdf332c49c050afadf32b36fca51de49c3
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD531d5d8caf1c5a50b69eaf857a5a561d9
SHA1f42cce9b751b3ef927259fd08a513c62b56ad6bd
SHA2569f611762120c54499c3582b58c83890882ad46b667fae4105830d3045c78b26c
SHA512a4d6b7903186434ec06636fd11fd4599a406681bb311b1d7a5485bb1731d9644706c76071f3d1bceedb62dab409b839c6cdd05308e8b1fb443726e275f8dd244
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ce226d508495a261e154c1a976577bc5
SHA148ebd4fd3e12a8f9a5c67b5b12a40a2839d0e6a5
SHA2568dd6e32d4e72ecc39fd55668cecb3c6665c91771d340b0272ba250808492777c
SHA5125a9a3e0a613d2836c82b7e97953c12002876c4d438733e152513b932d2d48685efe0c2bd68f2d2b4d4231fecb6227d7832350edf1ae1bca5e9c5309abf0c15dd
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5a0978b0b052ca282340901cb6cb7dd32
SHA1ec6b8d72c733fd61e70faf862b0b8445a211b580
SHA256d7b4c8c89d9e0552f37f72213608d34980de9a419849d794796aa843a943f1e0
SHA5123fbca9afb836778525b4b1ca240e8dace19e67949b658f43a4daa52b4cfb44e44f9a3b68b3289e4a42ce8cdc1d7823e577758d2218371c178c1a072768925cc0
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5aecee83536d03d91adada21cc6835cc9
SHA12294bf474363258b28187f07d45cdf2da93505f8
SHA2563e71e17c679c286ea2853b8a58a5c7ad237aa041552d98f5cfe80345b1788dd8
SHA512b6b9f9197ab8f94164d674e44257f2afdc0f3cc004ead459599b7816c1dce051e843be61eda04509d53d6808b48e5a0889fd0c80a506f2115a438c3bba084671
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD5ef2174e750232d46ede8163dcf20c57f
SHA19ce18363c4cb3f35ec966596211e0ddd94cf23d0
SHA256e3c35c044ab69f4cc60983fbd17895c7c62d760e07bc31f7ed95f673deb9b88c
SHA512b3973bf678af70e5a2a0aa574b80534cdf0b3d30847895c60d05b1932bc97c0f34c66aced585d954bd277a617b0c840e7fc212d9137c7b4d64985f8c2cfdb825
-
C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
Filesize342B
MD57807abf761005ae9a54d87efe6893cbb
SHA16e02520d3ea1cf655e1b4ed6a89010872a142223
SHA256bcd8b919da04242964ad2c9debda6ce29a1dd4441c3584ff22603141ff1abbae
SHA512add23edca83e71a99481fa04f1640e84480c5cc30afaac2f2d6b341ca83d31efb2e92db93a1aeb4429a3ecf2a8b7950df3106fbc7f954b0cdce65954ec97d713
-
Filesize
70KB
MD549aebf8cbd62d92ac215b2923fb1b9f5
SHA11723be06719828dda65ad804298d0431f6aff976
SHA256b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f
SHA512bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b
-
Filesize
181KB
MD54ea6026cf93ec6338144661bf1202cd1
SHA1a1dec9044f750ad887935a01430bf49322fbdcb7
SHA2568efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8
SHA5126c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b