Overview

URL paypal-payer.blogspot.no/
IP216.58.211.1
ASNAS15169 Google Inc.
Location United States
Report completed2019-05-22 01:41:31 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter
Added / Verified Severity Host Comment
2019-05-22 2 paypal-payer.blogspot.no/ Phishing
2019-05-22 2 paypal-payer.blogspot.com/ Phishing
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.211.1

Date UQ / IDS / BL URL IP
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-06-30 01:14:08 +0200
0 - 0 - 1 https://pueveturu1983.blogspot.jp/ 216.58.211.1
2019-06-27 12:16:13 +0200
0 - 0 - 0 s2.googleusercontent.com 216.58.211.1
2019-06-27 08:53:20 +0200
0 - 0 - 0 ldschurchgrowth.blogspot.com 216.58.211.1
2019-06-27 08:43:36 +0200
0 - 0 - 1 https://renchortrales1971.blogspot.com.br/ 216.58.211.1
2019-06-26 23:32:25 +0200
0 - 0 - 1 https://reterctreadat1975.blogspot.hu/ 216.58.211.1
2019-06-26 22:07:22 +0200
0 - 0 - 1 https://bioningmima1970.blogspot.mk/ 216.58.211.1
2019-06-26 15:58:25 +0200
0 - 0 - 0 https://ci5.googleusercontent.com/ 216.58.211.1

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:14:59 +0200
0 - 0 - 0 https://docs.google.com/forms/d/e/1FAIpQLSfZp (...) 216.58.207.206
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-07-01 09:19:18 +0200
0 - 0 - 1 https://bartuatenbe1974.blogspot.pt/ 216.58.207.193
2019-07-01 08:47:18 +0200
0 - 0 - 1 https://elmulrapan1981.blogspot.ca/ 216.58.207.225
2019-07-01 08:24:54 +0200
0 - 0 - 1 pacarama1983.blogspot.com 216.58.207.193
2019-07-01 08:19:22 +0200
0 - 1 - 0 mycricketlive.live 172.217.22.179
2019-07-01 07:21:49 +0200
0 - 0 - 0 fijisharkdiving.blogspot.com/2018/10/my-fiji- (...) 216.58.207.193
2019-07-01 06:37:59 +0200
0 - 0 - 0 ta.wow-auto-forms.appspot.com/bower_component (...) 216.58.211.148

Last 1 reports on domain: paypal-payer.blogspot.no

Date UQ / IDS / BL URL IP
2019-04-01 08:39:32 +0200
0 - 0 - 2 paypal-payer.blogspot.no/ 172.217.21.129


JavaScript

Executed Scripts (7)


Executed Evals (0)


Executed Writes (0)



HTTP Transactions (28)


Request Response
                                        
                                            GET / HTTP/1.1 
Host: paypal-payer.blogspot.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
Location: http://paypal-payer.blogspot.com/
Content-Encoding: gzip
Date: Tue, 21 May 2019 23:41:00 GMT
Expires: Tue, 21 May 2019 23:41:00 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 179
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   179
Md5:    c9007a2bd328310e5f56fdd97c293b20
Sha1:   f9f088deeb46bc0915ac0ec45d3b16f02ca897f0
Sha256: 9beaf293f823919f0431392a198abb26048c0031f3ba3b48906b1831e540a985

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            GET / HTTP/1.1 
Host: paypal-payer.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 301 Moved Permanently
Content-Type: text/html; charset=UTF-8
                                        
Location: https://paypal-payer.blogspot.com/
Content-Encoding: gzip
Date: Tue, 21 May 2019 23:41:00 GMT
Expires: Tue, 21 May 2019 23:41:00 GMT
Cache-Control: private, max-age=0
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Content-Length: 178
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   178
Md5:    a2c0ac4c296d0b17d4e00943ace28d77
Sha1:   21e633fc766587c49607a34ee7bba719b95115c9
Sha256: 69dded6c1d465a917ca478c8bd2aba9ee4f1e095e159003dad55887f769ce5fb

Alerts:
  Blacklists:
    - fortinet: Phishing
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:01 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    32b5665bc645ed861c5b10560f80562c
Sha1:   0adf824f990ea09bc3e2e720a145103c2c8f5f72
Sha256: 377b16160c1837aa92016bb1b948b3718cbba28cf0a9e532fa3cdadff4fdfa87
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:01 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:02 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   671
Md5:    1c90f0db91fe25e95268de77dec5f844
Sha1:   a6c00a14921876f8b752c3309ffc445661dcb70a
Sha256: 3b31e2fe386d739a038a293b4c4c7a3e876238c8026a717748185218ed699184
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:03 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   743
Md5:    29b430298778375b6a6002692b024f5a
Sha1:   e86e8bbc2dce4a00ad2a0d89fdd9a676e876915f
Sha256: 8c8f8bd9f0d3159d13619261ea147b273a11f9a40bc919e7e38f44f701996121
                                        
                                            GET /static/v1/v-css/281434096-static_pages.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1374
Date: Fri, 19 Apr 2019 15:31:41 GMT
Expires: Sat, 18 Apr 2020 15:31:41 GMT
Last-Modified: Fri, 19 Apr 2019 00:46:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2794163
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   1374
Md5:    49fea0412dd2b3a36f11f28335b1acbc
Sha1:   061e4fc40c4a98e1d350ee4699fd7f8df92f3d17
Sha256: ad9029fcd2bc7cfdd8fca53e1316793b7693274cb6e502f3abbae411d7a78648
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    212ca4c755d4f4c0c15e78a70362bbaa
Sha1:   95582a0969562b958700d7be27da19f2005aed02
Sha256: 5f5221d5674c41ca3997b741627b88d99696426442a0b957806cba4e5d8a3bed
                                        
                                            GET /static/v1/jsbin/3101730221-analytics_autotrack.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8412
Date: Fri, 19 Apr 2019 15:15:54 GMT
Expires: Sat, 18 Apr 2020 15:15:54 GMT
Last-Modified: Fri, 19 Apr 2019 14:13:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2795110
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   8412
Md5:    739f1b15eee23787051d56b33e822c8b
Sha1:   711bac2e42885c5944e2fc672b6d3e2677b58e1f
Sha256: 1321e6c3f622d3cf3b98c8553308ecbd5be2b234e6c50c1271b90a6e8de6d300
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    fbecfe9e5ac1fcf84c137a6f11ccda33
Sha1:   43bdd04c78cd42b88873f1c62d43bcb466a2455b
Sha256: 2460188b1c20b0a78d34019f11c50146b122586c77ba3df0e56b196bd898121a
                                        
                                            GET /css?family=Open+Sans:300 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 21 May 2019 23:41:04 GMT
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   201
Md5:    16a52d7119b10c459d5a697de8f414b2
Sha1:   f7c633ee755a9e4636c5a1f569e0e7c3a11c203f
Sha256: 17f7a3f300f45accf9b0498113b4cb41000e0172fed13705a6e65b54ccbb7391
                                        
                                            GET /css/maia.css HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.211.4
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 21 May 2019 23:41:04 GMT
Expires: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: private, max-age=0
Last-Modified: Mon, 26 Feb 2018 16:30:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   12181
Md5:    bbb96f1e62e3f84502664d603d4ecbfc
Sha1:   684db7b7626d997e41d11716107d25824f322983
Sha256: fcb969338fcac7f4d33a5f51945c6756d58881b82572604863fd8c0f3b1840c7
                                        
                                            GET /blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.207.233
HTTP/1.1 404 Not Found
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 21 May 2019 23:41:04 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   42609
Md5:    93f399713ecb4a1a6dd8a48cc55f5b93
Sha1:   7ada82b85ec31829b87165fa165fd888239af2e3
Sha256: b77beb4aa83bd1c4292bdaeb1a1c803a01f24852408f29a660c43af1f5b98ac4
                                        
                                            GET /css?lang=no&family=Product+Sans|Roboto:400,700 HTTP/1.1 
Host: fonts.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.234
HTTP/1.1 200 OK
Content-Type: text/css; charset=utf-8
                                        
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Expires: Tue, 21 May 2019 23:41:04 GMT
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: private, max-age=86400
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   311
Md5:    ef24521f4c5a01e4571960abcfd88f64
Sha1:   d3ddb58ff5f3b3d34f0040384a95260d22367931
Sha256: 26568def705c6ecd4b45ef085a7b9da210955f86b60c0a5a14d9a28c6e4c3391
                                        
                                            GET /img/blogger-logotype-color-black-1x.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 1155
Date: Fri, 17 May 2019 15:11:34 GMT
Expires: Fri, 24 May 2019 15:11:34 GMT
Last-Modified: Fri, 17 May 2019 14:07:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 376170
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 112 x 27, 8-bit colormap, non-interlaced
Size:   1155
Md5:    a9d652846aeacdf8da5401f6e4d4a409
Sha1:   6127321cafe0be999bc0c9d952715ede2b9dd83d
Sha256: cbad27c35fbc84e2da4280476adeb197566db2750b8b4a79eb7e872db8d8acb7
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    c7c4399af389ff9552033018a4a5db09
Sha1:   6fed269d028e054a4037be5eb427f25fcc832ef6
Sha256: dd3b793aec498452f117dc53022148dde6041e60daf4df64d3eeafecf8ddc916
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:04 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    060591c6e1f425192c736e9c21d3903b
Sha1:   f1da8738e6505e223766235cd5b2cfd930be529a
Sha256: 5456603daa36c44856c54ea2341efadbb36368f2d84a02ab7b649d1e0d1683fb
                                        
                                            GET /analytics.js HTTP/1.1 
Host: www.google-analytics.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Strict-Transport-Security: max-age=10886400; includeSubDomains; preload
Timing-Allow-Origin: *
Date: Tue, 21 May 2019 23:27:28 GMT
Expires: Wed, 22 May 2019 01:27:28 GMT
Last-Modified: Thu, 02 May 2019 01:33:03 GMT
X-Content-Type-Options: nosniff
Vary: Accept-Encoding
Content-Encoding: gzip
Server: Golfe2
Content-Length: 17779
Cache-Control: public, max-age=7200
Age: 816
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17779
Md5:    348fbdd6c0fd83acfd390fa9cc127596
Sha1:   252099e50f60c46d3a16264edc93007ef333a660
Sha256: 5874a897424027f25efdc7142d4d8a4341d9a9f6362ac79bead10db6356dae2b
                                        
                                            GET /images/branding/googlelogo/svg/googlelogo_clr_74x24px.svg HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: image/svg+xml
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 738
Date: Fri, 19 Apr 2019 15:25:01 GMT
Expires: Sat, 18 Apr 2020 15:25:01 GMT
Last-Modified: Thu, 21 Apr 2016 03:17:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2794564
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   738
Md5:    d28c52ab9d8055c95c3cdeb36cc2f0c8
Sha1:   5d504625b0d7e828ff158191fc652013191a7f94
Sha256: 1dfae9e473f50336f37866b279547919bb22db2122cca954af55fe6b24edb17d
                                        
                                            GET /s/opensans/v16/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:300
Origin: https://www.blogger.com

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 18668
Date: Fri, 19 Apr 2019 15:15:47 GMT
Expires: Sat, 18 Apr 2020 15:15:47 GMT
Last-Modified: Mon, 25 Mar 2019 20:10:23 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2795118
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   18668
Md5:    a7622f60c56ddd5301549a786b54e6e6
Sha1:   d55574524345932db3968c675e1aea08c68a456f
Sha256: 6e8a28a0638c920e5b76177e5f03ba94fcdedd3e3ecd347c333d82876b51c9c0
                                        
                                            GET /og/_/ss/k=og.qtm.w8asnfxnvvkh.L.F4.O/m=q_d,qawd,qmd/excm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhbr,qhch,qhga,qhid,qhin,qhlo,qhmn,qhpc,qhpr,qhsf,qhtb,qhtt/d=1/ed=1/rs=AA2YrTuvB6QsW0H9qWWPG72UxrN6DbpyGg HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 2472
Date: Thu, 16 May 2019 07:38:59 GMT
Expires: Fri, 15 May 2020 07:38:59 GMT
Last-Modified: Mon, 13 May 2019 02:38:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 489726
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2472
Md5:    3b349fa620811617e5bae179341df892
Sha1:   1461f208b230523e70933b2ddb0c31492e3b8142
Sha256: 6d883b7ec9ac7fc7e22d92ec13490288053500ccf54fb77338e6a8077d6ffe15
                                        
                                            GET /s/roboto/v19/KFOmCnqEu92Fr1Mu4mxM.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?lang=no&family=Product+Sans|Roboto:400,700
Origin: https://www.blogger.com

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: font/woff
                                        
Accept-Ranges: bytes
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 20268
Date: Fri, 19 Apr 2019 15:36:18 GMT
Expires: Sat, 18 Apr 2020 15:36:18 GMT
Last-Modified: Mon, 25 Mar 2019 20:12:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2793887
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  data
Size:   20268
Md5:    60fa3c0614b8fb2f394fa29944c21540
Sha1:   42c8ae79841c592a26633f10ee9a26c75bcf9273
Sha256: c1dc87f99c7ff228806117d58f085c6c573057fa237228081802b7d8d3cf7684
                                        
                                            GET /og/_/js/k=og.qtm.en_US.8Yt0SE9qym8.O/rt=j/m=q_d,q_pc,qawd,qmd,qsd,qmutsd,qbg,qbd/exm=qaaw,qabr,qadd,qaid,qalo,qebr,qein,qhaw,qhbr,qhch,qhga,qhid,qhin,qhlo,qhmn,qhpc,qhpr,qhsf,qhtb,qhtt/d=1/ed=1/rs=AA2YrTvTN-y7O5ZhkaAfaMtysQs8WsfuLw HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         216.58.207.227
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding, Origin
Content-Encoding: gzip
Content-Length: 43913
Date: Thu, 16 May 2019 07:47:26 GMT
Expires: Fri, 15 May 2020 07:47:26 GMT
Last-Modified: Mon, 13 May 2019 02:38:22 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 489219
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   43913
Md5:    74a0337f7dd40ed08903cce0d5e27b31
Sha1:   4c336d7a64673699ec065a67b536c856057cf0d3
Sha256: cf965c5bab9bc9f346e7516276932fce3e50793d975e1f5c5663005de66a29a8
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         216.58.211.131
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 21 May 2019 23:41:05 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f13498a927e457113c01a3acf5ea54b9
Sha1:   78e0fd640618de95670198c2be2f5516e7b0e0b1
Sha256: 12b116003e3224b3b9c3963f818f36b7c9f2b9ef3a5db928ebfafe011799d124
                                        
                                            GET /_/scs/abc-static/_/js/k=gapi.gapi.en.NqPOw1G8B3I.O/m=gapi_iframes,googleapis_client,plusone/rt=j/sv=1/d=1/ed=1/rs=AHpOoo9Un2bnlKyVHr37bEqQCNKVG9ZmzA/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1

                                         
                                         172.217.20.46
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 49533
Date: Fri, 19 Apr 2019 15:16:35 GMT
Expires: Sat, 18 Apr 2020 15:16:35 GMT
Last-Modified: Mon, 08 Apr 2019 15:14:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 2795070
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   49533
Md5:    e527612057a54668170bd5e343aafad6
Sha1:   6b0d4894491183490f7b7c597af3b6c40d1bd44e
Sha256: 8d23a8a1e1bd298cf0bf7d749a35d2fab47b03f041379134cb6f5236e9786068
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Cookie: _ga=GA1.2.835919489.1558482065; _gid=GA1.2.719168224.1558482065

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/x-icon
                                        
Expires: Wed, 22 May 2019 00:41:06 GMT
Date: Tue, 21 May 2019 23:41:06 GMT
Cache-Control: public, max-age=3600
Last-Modified: Tue, 21 May 2019 05:58:20 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /ServiceLogin?continue=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://paypal-payer.blogspot.com/%26bpli%3D1&followup=https://www.blogger.com/blogin.g?blogspotURL%3Dhttps://paypal-payer.blogspot.com/%26bpli%3D1&passive=true&go=true HTTP/1.1 
Host: accounts.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.141
HTTP/1.1 302 Moved Temporarily
Content-Type: text/html; charset=UTF-8
                                        
X-Frame-Options: DENY
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 21 May 2019 23:41:03 GMT
Location: https://www.blogger.com/blogin.g?blogspotURL=https%3A%2F%2Fpaypal-payer.blogspot.com%2F&bpli=1
Strict-Transport-Security: max-age=31536000; includeSubDomains
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Set-Cookie: GAPS=1:d7XJZ4Us6jA6F2N4SKfPqlvGK2fvAg:YhlyeaOzTixgi75o;Path=/;Expires=Thu, 20-May-2021 23:41:03 GMT;Secure;HttpOnly;Priority=HIGH
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
                                        
                                            GET /s/opensans/v16/mem5YaGs126MiZpBA-UN_r8OUuhv.woff HTTP/1.1 
Host: fonts.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://fonts.googleapis.com/css?family=Open+Sans:300
Origin: https://www.blogger.com

                                         
                                         0.0.0.0
                                        


--- Additional Info ---