Overview

URL xuandienhannom.blogspot.com
IP216.58.211.1
ASNAS15169 Google Inc.
Location United States
Report completed2019-04-23 17:20:44 CEST
StatusLoading report..
urlquery Alerts No alerts detected


Settings

UserAgentMozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Referer
Pool
Access Level


Intrusion Detection Systems

Suricata /w Emerging Threats Pro  No alerts detected


Blacklists

MDL  No alerts detected
OpenPhish  No alerts detected
PhishTank  No alerts detected
Fortinet's Web Filter  No alerts detected
DNS-BH  No alerts detected
mnemonic secure dns  No alerts detected


Recent reports on same IP/ASN/Domain

Last 10 reports on IP: 216.58.211.1

Date UQ / IDS / BL URL IP
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-06-30 01:14:08 +0200
0 - 0 - 1 https://pueveturu1983.blogspot.jp/ 216.58.211.1
2019-06-27 12:16:13 +0200
0 - 0 - 0 s2.googleusercontent.com 216.58.211.1
2019-06-27 08:53:20 +0200
0 - 0 - 0 ldschurchgrowth.blogspot.com 216.58.211.1
2019-06-27 08:43:36 +0200
0 - 0 - 1 https://renchortrales1971.blogspot.com.br/ 216.58.211.1
2019-06-26 23:32:25 +0200
0 - 0 - 1 https://reterctreadat1975.blogspot.hu/ 216.58.211.1
2019-06-26 22:07:22 +0200
0 - 0 - 1 https://bioningmima1970.blogspot.mk/ 216.58.211.1
2019-06-26 15:58:25 +0200
0 - 0 - 0 https://ci5.googleusercontent.com/ 216.58.211.1

Last 10 reports on ASN: AS15169 Google Inc.

Date UQ / IDS / BL URL IP
2019-07-01 11:14:59 +0200
0 - 0 - 0 https://docs.google.com/forms/d/e/1FAIpQLSfZp (...) 216.58.207.206
2019-07-01 09:39:24 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt 216.58.211.1
2019-07-01 09:33:26 +0200
0 - 0 - 0 https://movieok4k.blogspot.com/2019/06/articl (...) 216.58.211.1
2019-07-01 09:28:48 +0200
0 - 0 - 1 bartuatenbe1974.blogspot.pt/ 216.58.211.1
2019-07-01 09:19:18 +0200
0 - 0 - 1 https://bartuatenbe1974.blogspot.pt/ 216.58.207.193
2019-07-01 08:47:18 +0200
0 - 0 - 1 https://elmulrapan1981.blogspot.ca/ 216.58.207.225
2019-07-01 08:24:54 +0200
0 - 0 - 1 pacarama1983.blogspot.com 216.58.207.193
2019-07-01 08:19:22 +0200
0 - 1 - 0 mycricketlive.live 172.217.22.179
2019-07-01 07:21:49 +0200
0 - 0 - 0 fijisharkdiving.blogspot.com/2018/10/my-fiji- (...) 216.58.207.193
2019-07-01 06:37:59 +0200
0 - 0 - 0 ta.wow-auto-forms.appspot.com/bower_component (...) 216.58.211.148

Last 1 reports on domain: xuandienhannom.blogspot.com

Date UQ / IDS / BL URL IP
2018-12-20 18:33:09 +0100
0 - 0 - 0 xuandienhannom.blogspot.com/ 216.58.207.193


JavaScript

Executed Scripts (81)


Executed Evals (0)


Executed Writes (5)

#1 JavaScript::Write (size: 0, repeated: 1) - SHA256: e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                                        
                                    

#2 JavaScript::Write (size: 306, repeated: 1) - SHA256: 264161db8a220a93a331aed7110937b464b8718881278a8ebc31384bd1cfc1bc

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_0"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_0']});</script > < /body></html >
                                    

#3 JavaScript::Write (size: 306, repeated: 1) - SHA256: 5efcb9fc2a44ea42dca7f3a6201c413bf996957c8642429d6bfa6d151206a13e

                                        < !doctype html > < html > < body > < script > google_sl_win = window.parent;
google_iframe_start_time = new Date().getTime();
google_async_iframe_id = "aswift_1"; < /script><script>window.parent.google_sa_impl({iframeWin: window, pubWin: window.parent, vars: window.parent['google_sv_map']['aswift_1']});</script > < /body></html >
                                    

#4 JavaScript::Write (size: 1316, repeated: 1) - SHA256: 1a3edf12247f5bdb704a57afa0e166ddc8d521f402a7ad855b05609a2ea1c819

                                        < iframe id = "google_ads_frame1"
name = "google_ads_frame1"
width = "336"
height = "280"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3789730342523048&amp;output=html&amp;h=280&amp;slotname=8449248018&amp;adk=2414062766&amp;adf=807048394&amp;w=336&amp;lmt=1556015490&amp;guci=1.2.0.0.2.2.0.0&amp;format=336x280&amp;url=http%3A%2F%2Fxuandienhannom.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1556032812382&amp;bpp=53&amp;fdt=546&amp;idt=539&amp;shv=r20190417&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;correlator=925262373763&amp;frm=20&amp;pv=2&amp;ga_vid=1657950908.1556032814&amp;ga_sid=1556032814&amp;ga_hid=1578876489&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=247&amp;ady=7726&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=21063245%2C21060853&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=1&amp;uci=a!1&amp;dtd=1274"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    

#5 JavaScript::Write (size: 1337, repeated: 1) - SHA256: 8994a84ec9ef1e59662958c06b24d8dcf1d1df5613d6dad137068b53c4cb537e

                                        < iframe id = "google_ads_frame2"
name = "google_ads_frame2"
width = "300"
height = "600"
frameborder = "0"
src = "https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3789730342523048&amp;output=html&amp;h=600&amp;slotname=6972514812&amp;adk=4120145191&amp;adf=807048394&amp;w=300&amp;lmt=1556015490&amp;guci=1.2.0.0.2.2.0.0&amp;format=300x600&amp;url=http%3A%2F%2Fxuandienhannom.blogspot.com%2F&amp;ea=0&amp;flash=10.0.45&amp;wgl=0&amp;adsid=NT&amp;dt=1556032816414&amp;bpp=539&amp;fdt=543&amp;idt=-M&amp;shv=r20190417&amp;cbv=r20190131&amp;saldr=aa&amp;abxe=1&amp;prev_fmts=336x280&amp;correlator=925262373763&amp;frm=20&amp;pv=1&amp;ga_vid=1657950908.1556032814&amp;ga_sid=1556032814&amp;ga_hid=1578876489&amp;ga_fc=0&amp;icsg=0&amp;dssz=0&amp;mdo=0&amp;mso=0&amp;u_tz=120&amp;u_his=1&amp;u_java=1&amp;u_h=885&amp;u_w=1176&amp;u_ah=855&amp;u_aw=1176&amp;u_cd=24&amp;u_nplug=10&amp;u_nmime=92&amp;adx=760&amp;ady=2069&amp;biw=1159&amp;bih=754&amp;scr_x=0&amp;scr_y=0&amp;eid=21063245%2C21060853&amp;oid=3&amp;rx=0&amp;eae=4&amp;fc=656&amp;brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&amp;vis=0&amp;rsz=%7C%7Cbr%7C&amp;abl=CS&amp;ppjl=u&amp;pfx=0&amp;fu=16&amp;bc=1&amp;ifi=2&amp;uci=a!2&amp;dtd=560"
marginwidth = "0"
marginheight = "0"
vspace = "0"
hspace = "0"
allowtransparency = "true"
scrolling = "no"
allowfullscreen = "true" > < /iframe>
                                    


HTTP Transactions (80)


Request Response
                                        
                                            GET /ajax/libs/jquery/1.8.3/jquery.min.js HTTP/1.1 
Host: ajax.googleapis.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
If-Modified-Since: Tue, 13 Nov 2012 19:53:02 GMT

                                         
                                         172.217.21.138
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
Content-Length: 33593
Date: Fri, 19 Apr 2019 15:10:24 GMT
Expires: Sat, 18 Apr 2020 15:10:24 GMT
Last-Modified: Tue, 20 Dec 2016 18:17:03 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000, stale-while-revalidate=2592000
Age: 346186


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   33593
Md5:    41f096f465c88617317d29c4ee182e8a
Sha1:   f4ec1b143d06a6ce60803b267c4f0a65ecb09ae8
Sha256: b9b28e5ea618b26cf70347e246a4a4a17c21b6ca09ce6ff6637848745595a82d
                                        
                                            GET /-1WWffe_CSD4/USXooFf-TOI/AAAAAAAAkb4/rm4F24iSZ1M/s1600/bg%2Bnxd1.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "vec88"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="bg nxd1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:10 GMT
Server: fife
Content-Length: 56436
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0


--- Additional Info ---
Magic:  JPEG image data, EXIF standard
Size:   56436
Md5:    aeb27d70355b54abbd20a9986c22e945
Sha1:   3880bac944b70347e09e22741b9592bdc08dd3fd
Sha256: 804266dd059ce32eaf1e3533b05c87ab088a356d1fac048bc0ffcc9cb049df7e
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    0b3172e6ee3bee58de71d46743a981fc
Sha1:   06e83f7049166d24ed51442d58cd58d7af6370f7
Sha256: 3b773aada8021020554deeace5ed64b14913d225af12a5b1b7617b44dc72160e
                                        
                                            POST /gsr2 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 112
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 468
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   468
Md5:    5be872b3fe0bb6f31385f91f811e9586
Sha1:   1192231bcb9ee73e9f619d433cdb66dddd9ae7f7
Sha256: db0ad6191770bff9043482b68acf62a4e25d4390a03274cfbe413675dd8c9cf5
                                        
                                            GET / HTTP/1.1 
Host: xuandienhannom.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Expires: Tue, 23 Apr 2019 15:20:09 GMT
Date: Tue, 23 Apr 2019 15:20:09 GMT
Cache-Control: private, max-age=0
Last-Modified: Tue, 23 Apr 2019 10:31:30 GMT
Etag: W/"39793cfcfe226d205feaa98d80d4e1d1155f3d46f2457751a16dc3efcf94b29c"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 52839
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   52839
Md5:    a487b7117eb93a1c61d257354d719892
Sha1:   d91f4791ff610a8c57e84a144432132ff8e920c8
Sha256: 4fd90fef7b596727d9f5b9546369efe94488426ff18483649f7014fe86cfabfa
                                        
                                            GET /favicon.ico HTTP/1.1 
Host: xuandienhannom.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/x-icon; charset=UTF-8
                                        
Expires: Tue, 23 Apr 2019 15:20:10 GMT
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: private, max-age=86400
Last-Modified: Tue, 23 Apr 2019 10:31:30 GMT
Etag: W/"39793cfcfe226d205feaa98d80d4e1d1155f3d46f2457751a16dc3efcf94b29c"
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Content-Length: 412
Server: GSE


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   412
Md5:    23e5eb1119a7f4d2ab629ccd77a5f84b
Sha1:   f7a5a792e41005ba918551e4416c4bf639ec80ec
Sha256: a0c8d4831f453c316840a502432719f7f7d833bea4a9b59f548e4a1bc2bf0c8a
                                        
                                            GET /static/v1/widgets/3597120983-css_bundle_v2.css HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 7979
Date: Fri, 19 Apr 2019 15:22:06 GMT
Expires: Sat, 18 Apr 2020 15:22:06 GMT
Last-Modified: Fri, 19 Apr 2019 11:17:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 345484
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   7979
Md5:    48755aff864990495450c9227e8cce32
Sha1:   70806174b63eb7b18dce798abebb2468d22f79f4
Sha256: 00db413a3f0fb5d585894e49f58dde1bb80fe48a8de85846ce1ba51fd82e4189
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    af17f81ee8ae7e8dd06bd73aa6fb067d
Sha1:   60baba108db9fed5b862b9c48207a1421c1650e1
Sha256: e22972b5adc80e092e545aaddaa489136aca2301d107213ebd75c0bed2a88629
                                        
                                            GET /dyn-css/authorization.css?targetBlogID=7180154790876747805&zx=77962cd7-c31f-46a7-a2ff-67c5d833ec55 HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/css; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 23 Apr 2019 15:20:10 GMT
Last-Modified: Tue, 23 Apr 2019 15:20:10 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-Frame-Options: SAMEORIGIN
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   21
Md5:    b9afc501fc43fbea335a2dc5d43263a1
Sha1:   7290a2dd6afbf39ecfc35b52dfb32a38fc222994
Sha256: d6e425ca7840c0ab6f26f5fc2822a47e26b4a8bbd104468a9c185bc132b8662f
                                        
                                            GET /img/icon18_edit_allbkg.gif HTTP/1.1 
Host: img2.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Accept-Ranges: bytes
Content-Length: 162
Date: Fri, 19 Apr 2019 15:06:20 GMT
Expires: Fri, 26 Apr 2019 15:06:20 GMT
Last-Modified: Fri, 19 Apr 2019 12:13:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 346430


--- Additional Info ---
Magic:  GIF image data, version 89a, 18 x 18
Size:   162
Md5:    c991641178ff05adf0d004298b5eafa9
Sha1:   d8f6ce8ecd92b86d49849360f6b81ceb10b4c941
Sha256: ca9848e6006cfec8f9ffa29433ade8152204bdb95579200831c6dc0f53dff70b
                                        
                                            GET /js/cookienotice.js HTTP/1.1 
Host: xuandienhannom.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2026
Date: Fri, 19 Apr 2019 20:18:20 GMT
Expires: Fri, 26 Apr 2019 20:18:20 GMT
Last-Modified: Fri, 19 Apr 2019 17:36:48 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 327710


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2026
Md5:    c4e1ed83d89245089b8a1203be20a377
Sha1:   f3940e1215b89300ef97d57a25993f25243b8688
Sha256: afa801a129ff6fc98533118275db8a7d4a38fc91f8ab55ed4c19b864255e68d2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    9dc7b5f54bccf090f00042d1c49ee29a
Sha1:   be8ddc92ad7f4e61790e18e4cf1224d2a7c09e27
Sha256: b0315cec36050ea2b3dcdb19b56ec6e714d6791742080591531374820d8bdde9
                                        
                                            GET /1kt/watermark/body_background_birds.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 22568
Date: Fri, 19 Apr 2019 15:19:31 GMT
Expires: Fri, 26 Apr 2019 15:19:31 GMT
Last-Modified: Fri, 19 Apr 2019 14:13:10 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345639


--- Additional Info ---
Magic:  PNG image, 300 x 300, 2-bit colormap, non-interlaced
Size:   22568
Md5:    5cd8cda0e75b359eb8f15dc83b0c5c29
Sha1:   86c99fbb62aadacb3ebd3f948d345b917f65253f
Sha256: 0220dbf46954d4efe2e91d261dd3d40f06e6402c722cc5580129af64bddc58f9
                                        
                                            GET /pagead/js/adsbygoogle.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 23 Apr 2019 15:20:10 GMT
Expires: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: private, max-age=3600
Etag: 12826891884490014754
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 32763
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   32763
Md5:    0e2b92236ede3e921b3f09cc209be0f6
Sha1:   d66af41476d911291a41b30b95d7306cf5f1f379
Sha256: 8108b89161045abd03599ee44bfa5ba4dc3673a18487ec6036c6d0b7446817e3
                                        
                                            GET /js/plusone.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "3cf41799f219d31d21d240cf6d4b4ff7"
Expires: Tue, 23 Apr 2019 15:20:10 GMT
Date: Tue, 23 Apr 2019 15:20:10 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info."
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Set-Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E;Domain=.google.com;Path=/;Expires=Wed, 23-Oct-2019 15:20:10 GMT;HttpOnly
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17039
Md5:    d0e2bb7c9a20c596b37b22dade1d03b9
Sha1:   d339588d5b61c531659aaec0744b693608f74b9a
Sha256: f1711c411f73f4bcacfe74565858606006919800320394f165dce5311e45302b
                                        
                                            GET /1kt/watermark/body_overlay_birds.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 3523
Date: Fri, 19 Apr 2019 15:18:04 GMT
Expires: Fri, 26 Apr 2019 15:18:04 GMT
Last-Modified: Fri, 19 Apr 2019 00:46:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345726


--- Additional Info ---
Magic:  PNG image, 386 x 121, 8-bit colormap, non-interlaced
Size:   3523
Md5:    031c64f442b967c59b28cdc8b03ac349
Sha1:   59f743959d06ced56f36b5e262c76e6cbfef9720
Sha256: 4bff767832f0cae6ed521f2436871dba9c4e1d036efd4889457b9e797738154a
                                        
                                            GET /pagead/js/google_top_exp.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 19 Apr 2019 15:21:59 GMT
Expires: Fri, 03 May 2019 15:21:59 GMT
Etag: 13036835877489095579
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 67
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 345491


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   67
Md5:    9bbc3ca32ec951a484589ce0e6b4db73
Sha1:   753d6f6183b33b2dee5dde2208fca91c17f5bb13
Sha256: b8f16a16d2a7ea39a9cc079fdbe3af7d31393d62a853668bdd549e0a0311cb3c
                                        
                                            GET /1kt/watermark/post_background_birds.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 103
Date: Fri, 19 Apr 2019 15:29:18 GMT
Expires: Fri, 26 Apr 2019 15:29:18 GMT
Last-Modified: Thu, 18 Apr 2019 03:33:36 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345052


--- Additional Info ---
Magic:  PNG image, 10 x 10, 8-bit colormap, non-interlaced
Size:   103
Md5:    7928cb1e4fb733117a1479c289f29d92
Sha1:   bd1bbe65951f64f44ec85910877dabd35c6dbc07
Sha256: 8a44923efeda7708df28a77f7e01bb10be3831d112891172950fe8c2d6b2566e
                                        
                                            GET /-9JvUh5ONByY/XL0l_kL0x2I/AAAAAAAA5Xs/YDCvkYusUToMccC_mG2Bs8KXxHzfd0HSQCLcBGAs/s1600/luat-phap-ngay-xua-393342.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve57c"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="luat-phap-ngay-xua-393342.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 136156
X-XSS-Protection: 0
Age: 8530
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   136156
Md5:    dce7e8d9c9bc15fe09a5dd1ea239ba63
Sha1:   cfd23a67793161927dbf43d5af3df3e5d4e5613a
Sha256: 31fea982081aca3f1d6ff476024fe22101ff424a6728720c43c77390878d3f71
                                        
                                            GET /-kSwXbZycTMg/XLfYLH7xYdI/AAAAAAAA5V4/3riZIceXrUUXv_BVgXEwifWUDPZVOiRxwCLcBGAs/w72-h72-p-k-no-nu/571543624227895818717002613130859632394240n.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve55f"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="571543624227895818717002613130859632394240n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:11 GMT
Server: fife
Content-Length: 3204
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3204
Md5:    897d826c25435973bb80b003cb401540
Sha1:   aa9337dbd8818d3b9cb447081f766f421a7d2e82
Sha256: dcbf5de8cb1322b95bc26d5628661241995a19ddf627dc286991695269864477
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:11 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    f672cab78b1e84eabd293fdf525fc484
Sha1:   1aae76c5c731026db09fef922cba6975168f5553
Sha256: 08a3dbff6237753ab58bfc169c3ec189613f7ed5a1c7b9e61f0b54794603602d
                                        
                                            GET /-Ft9SBBBLyBo/XLCrD3tJEkI/AAAAAAAA5UY/7fO2-3J_TIoXn_sBjujsDK6QfqVzhWgHQCLcBGAs/s1600/1.PNG HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve547"
Expires: Wed, 24 Apr 2019 15:20:11 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="1.PNG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:11 GMT
Server: fife
Content-Length: 251859
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 604 x 302, 8-bit/color RGB, non-interlaced
Size:   251859
Md5:    cb7450503c378018100e343682aee297
Sha1:   14ae2384f4cff7a5d68f1195b27ad77dbbf1ae4d
Sha256: b196cfffb2ae7cf452c73d9c784a4783c1374e6f878dbcb5faebf6d9530ddcad
                                        
                                            GET /-lXN-3pwAP28/XL1xUqEfudI/AAAAAAAA5X0/4WcIM_IttAcSt_cI3pNax4XK1HCkzMYcwCLcBGAs/w72-h72-p-k-no-nu/58383061_2713142328699993_8236368799679381504_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve57f"
Expires: Tue, 23 Apr 2019 16:14:47 GMT
Content-Disposition: inline;filename="58383061_2713142328699993_8236368799679381504_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 4201
X-XSS-Protection: 0
Age: 8531
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4201
Md5:    2e3e608ad470ea2ce7e7d471b0760f9c
Sha1:   b2a63bdda7cfd3054e5a24d8653aa6648f635889
Sha256: 25e47ba77cb03d8d2e2af52e29c4e485f89696e87de7e019ea7c56d724b4d92e
                                        
                                            GET /adsid/integrator.js?domain=xuandienhannom.blogspot.com HTTP/1.1 
Host: adservice.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:12 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /-l18RvqZJI-Q/XL0hYDmL4AI/AAAAAAAA5Xk/cYaSdBziCdcp7pMvGmXcSox3rzzpgEh5QCLcBGAs/s1600/minh_hoa_icxt.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve57a"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="minh_hoa_icxt.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 42844
X-XSS-Protection: 0
Age: 8530
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   42844
Md5:    38148128767f4354c47fc37bd73b5f14
Sha1:   d1f8b954e5255adae1dde9c7de73fed8a9f6ada2
Sha256: 111f4a3468621bdd90e9442e835d8c360a9a9506975727cbf1bdf0fbb6216559
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:12 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    800b036984477bc74a6eb66100f80c6c
Sha1:   600a0eb1a75128b32ccfc68a3d917ad78daf4400
Sha256: 28808e2ac76e5345d1d1dd4be6ad052b63b247c98446be17cfa8728e08b4a7ae
                                        
                                            GET /-9JvUh5ONByY/XL0l_kL0x2I/AAAAAAAA5Xs/YDCvkYusUToMccC_mG2Bs8KXxHzfd0HSQCLcBGAs/w72-h72-p-k-no-nu/luat-phap-ngay-xua-393342.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve57c"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="luat-phap-ngay-xua-393342.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 2884
X-XSS-Protection: 0
Age: 8531
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2884
Md5:    a1148f87f30db355572a1559978f547d
Sha1:   47bbf6df2e525f8523b1c7e129c22d8545eb3b68
Sha256: 57b22bdf52384d33e45b76537ea86dad8c6c8431a66486bb65f6178740f36b0a
                                        
                                            GET /-r3MkomHZo00/XLfVNnX0O3I/AAAAAAAA5Vw/h1B-74ppgIY9ZgeSvbkWYNwKwHfEN1ndACLcBGAs/w72-h72-p-k-no-nu/ma-tuy-17-4-8401-1555511043.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve55d"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="ma-tuy-17-4-8401-1555511043.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 4565
X-XSS-Protection: 0
Age: 8531
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4565
Md5:    74a9a953bd7085148b1db7d4ffe2e9b0
Sha1:   12006b6d81a9f095ce8120a9fb14feacaddec73b
Sha256: ab753c349525cb867b77d308517993dc24ebda142167ca6f4058f2bcdead228b
                                        
                                            GET /-CrJ81vftJtw/XLWS5ikh11I/AAAAAAAA5VI/sBj0z8e8RScyvK5xBJZBFRBsGHooFC37gCLcBGAs/w72-h72-p-k-no-nu/57099013_2669870089694534_195212697464209408_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve557"
Expires: Wed, 24 Apr 2019 15:20:12 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="57099013_2669870089694534_195212697464209408_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:12 GMT
Server: fife
Content-Length: 4168
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4168
Md5:    9e14bb9972888871345a569a640ad319
Sha1:   f3d72c8493922f7966c51be4a9d11cb3c816ab70
Sha256: 212dc4033dd8019764409079a4c5e2b1de2eee4703c3bd69f5dfee0c2e30b513
                                        
                                            GET /-k4BYlUEl6g4/XL0c3qFh2MI/AAAAAAAA5W8/nmS_SzX5jrkgH0grHAOYcPnQYHnwtGdKgCLcBGAs/s1600/57350459_2407742746124335_7617344612234952704_n.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve572"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57350459_2407742746124335_7617344612234952704_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:12 GMT
Server: fife
Content-Length: 41708
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   41708
Md5:    5c3f719458173577a8d8222ed1e90b62
Sha1:   efc6784fceaac8f0ed0b5ec94b5c1389f450fb7a
Sha256: 0fde1e6d1756be9311f236d7d887fd1a32963ae4fe799122b45c0f7004bfd0dd
                                        
                                            GET /adsid/integrator.js?domain=xuandienhannom.blogspot.com HTTP/1.1 
Host: adservice.google.no
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657 for more info."
Timing-Allow-Origin: *
Cache-Control: private, no-cache, no-store
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:12 GMT
Server: cafe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   104
Md5:    835dc76a57166c8b5b88275a570d1891
Sha1:   0d7e8826520cdadf8db62583b25e26149af2c8ce
Sha256: 6441b99ce0ba328cabe2ff8d6167c3ac47f8d67fc469689fd925f7b57761c333
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.OOhUjQBchWs.O/m=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 47741
Date: Fri, 19 Apr 2019 22:53:14 GMT
Expires: Sat, 18 Apr 2020 22:53:14 GMT
Last-Modified: Thu, 18 Apr 2019 23:13:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 318418
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   47741
Md5:    88a7df8ba90e66fa19bf2f25b98a4e41
Sha1:   1bcf15af33be6e4d530308def218bc8cea87afb4
Sha256: 4464c3c1dca78ccab43370964e87089d6f30f8af54d877c2358aa88ee183feb4
                                        
                                            GET /pagead/js/r20190417/r20190131/show_ads_impl.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
P3P: policyref="http://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Tue, 23 Apr 2019 15:20:12 GMT
Expires: Tue, 23 Apr 2019 15:20:12 GMT
Cache-Control: private, max-age=1209600
Etag: 15760368290616506668
X-Content-Type-Options: nosniff
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Server: cafe
Content-Length: 78249
X-XSS-Protection: 0


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   78249
Md5:    a8013cfa09ba5bbb5cb06576d51beab7
Sha1:   75de009bf1bcdbb8d9de68c3d5e24571e9b5d0d2
Sha256: c7a00ceae52220f02282349ab60c010efe118d07846a8b25abe68275fabb12b0
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:13 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    955b0c21617042d75362df2fbdb590b8
Sha1:   0ec6547ead783a35c774cbb3371be671a0c92c1f
Sha256: 081f6b6209345682e53f1a869191063b0d3876bdca5dcb2a87ce87d6165999ed
                                        
                                            GET /img/share_buttons_20_3.png HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/static/v1/widgets/3597120983-css_bundle_v2.css

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 5080
Date: Fri, 19 Apr 2019 15:05:37 GMT
Expires: Fri, 26 Apr 2019 15:05:37 GMT
Last-Modified: Fri, 19 Apr 2019 12:13:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 346475
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 120 x 60, 8-bit/color RGBA, non-interlaced
Size:   5080
Md5:    ad9999106d5f550920b586e8e1704e5a
Sha1:   93fd02c51166402a41f96509cd0ca3fb917877dd
Sha256: 3829a5b2ade7cfc416c80b8f3df71e49e68672875f025d525223978f5cee3fd3
                                        
                                            GET /pagead/html/r20190417/r20190131/zrt_lookup.html HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
Vary: Accept-Encoding
Date: Fri, 19 Apr 2019 15:12:13 GMT
Expires: Fri, 03 May 2019 15:12:13 GMT
Etag: 3275482936266559025
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: cafe
Content-Length: 6909
X-XSS-Protection: 0
Cache-Control: public, max-age=1209600
Age: 346080
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   6909
Md5:    4435999055d2232342e9ed745246f7e5
Sha1:   381e72a4ba75cf0b05f6883c625a89e50c63d320
Sha256: cf8b15c9acef19819e07c676dcce07a3c96a9a152554b007d8c3478fbf841ff8
                                        
                                            GET /-lXN-3pwAP28/XL1xUqEfudI/AAAAAAAA5X0/4WcIM_IttAcSt_cI3pNax4XK1HCkzMYcwCLcBGAs/s1600/58383061_2713142328699993_8236368799679381504_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve57f"
Expires: Tue, 23 Apr 2019 16:14:47 GMT
Content-Disposition: inline;filename="58383061_2713142328699993_8236368799679381504_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 101287
X-XSS-Protection: 0
Age: 8532
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   101287
Md5:    427ac7883f1899188ac5b0136118e58f
Sha1:   f69cf49eea619c16658cab4c31b65cce844866d8
Sha256: eab2eae0ce5c4473a15317720c2a4ddfbabb41446dadc09805cf4652eb65f3b1
                                        
                                            GET /activeview/js/current/osd.js?cb=%2Fr20100101 HTTP/1.1 
Host: www.googletagservices.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:13 GMT
Expires: Tue, 23 Apr 2019 15:20:13 GMT
Cache-Control: private, max-age=3000
Etag: "1555931705985636"
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   28619
Md5:    87f7c32dcff2ee967fa017076cdebd5b
Sha1:   5c15ef2cd6e366112c7a99377f1b7e29a6cb1070
Sha256: 0efab9f8f7b2ac5f32d1e1836a83da1a8a0c0da0d7fedef5ad07d1303916e2f4
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.OOhUjQBchWs.O/m=gapi_iframes,gapi_iframes_style_bubble/exm=plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg/cb=gapi.loaded_1 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 18218
Date: Fri, 19 Apr 2019 23:38:12 GMT
Expires: Sat, 18 Apr 2020 23:38:12 GMT
Last-Modified: Thu, 18 Apr 2019 23:13:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 315721
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   18218
Md5:    ba7c7451a32cd8538314afab0250687e
Sha1:   e41cc8c7a446f3c0f89c0b00e90c9bd9f5611f26
Sha256: 147502acb7227e7448d572d839c9f3fe644cbc9953a8fd27e25131645e6b2087
                                        
                                            GET /-ssSmmHEEtgg/XL0ZYVHVCTI/AAAAAAAA5W0/Y2jEV85k_dELLXes8s77En2VM9gF3KseQCLcBGAs/s1600/H3-111.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve56e"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="H3-111.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:13 GMT
Server: fife
Content-Length: 43030
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   43030
Md5:    93fef50a2f6ea1e0b7fbb1497ec570c3
Sha1:   9a8bc0693c1ef856912556fe85061d44e2a09ee7
Sha256: 99595248356eda1f9a8cd3f008df6a8323edf360df88755e6486ed91cf29bdc2
                                        
                                            GET /pagead/ads?client=ca-pub-3789730342523048&output=html&h=280&slotname=8449248018&adk=2414062766&adf=807048394&w=336&lmt=1556015490&guci=1.2.0.0.2.2.0.0&format=336x280&url=http%3A%2F%2Fxuandienhannom.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1556032812382&bpp=53&fdt=546&idt=539&shv=r20190417&cbv=r20190131&saldr=aa&abxe=1&correlator=925262373763&frm=20&pv=2&ga_vid=1657950908.1556032814&ga_sid=1556032814&ga_hid=1578876489&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=247&ady=7726&biw=1159&bih=754&scr_x=0&scr_y=0&eid=21063245%2C21060853&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=1&uci=a!1&dtd=1274 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:14 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 23-Apr-2019 15:35:14 GMT; path=/; domain=.doubleclick.net
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Tue, 23 Apr 2019 15:20:14 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   382
Md5:    4b0a680b8becf11817a60941486fda42
Sha1:   fa8b0f72418984ee08769054f52a0a9d980a8a23
Sha256: 1ee4b352f1385c87857f16123d8ee0e18d54f01916fc5706c21b1374e1e71985
                                        
                                            GET /-k4BYlUEl6g4/XL0c3qFh2MI/AAAAAAAA5W8/nmS_SzX5jrkgH0grHAOYcPnQYHnwtGdKgCLcBGAs/w72-h72-p-k-no-nu/57350459_2407742746124335_7617344612234952704_n.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve572"
Expires: Tue, 23 Apr 2019 16:14:50 GMT
Content-Disposition: inline;filename="57350459_2407742746124335_7617344612234952704_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:14 GMT
Server: fife
Content-Length: 4162
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4162
Md5:    0a9e6d804469ef585a74614fa28ce0ff
Sha1:   52cce3bc170147b2c593bd51eee6d2d5f958feef
Sha256: 36475a18494649afa34a6d71e534dae97f984adfcf4d95b3624e4f47fd4c68b4
                                        
                                            GET /-EBKHSMQRGxo/V6nZxfjMXtI/AAAAAAAAe1E/K0pZ9ltdLXkIUVjHCeYoxNfNi_MbJyCsQCLcB/w72-h72-p-k-no-nu/Luu-Quang-Vu-1.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v7b52"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="Luu-Quang-Vu-1.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:14 GMT
Server: fife
Content-Length: 2491
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2491
Md5:    548af07870c49d9dfc717bfa2ccfb680
Sha1:   dbf67a7c4e6d5b293b4cf15d7874a07d5bf32e0b
Sha256: 324f10fc405a2e70fd3e2fac0682b15f168373b477442ca665de37eaf1272392
                                        
                                            GET /-3-KBFKCTelc/XLgpNnA4hZI/AAAAAAAA5WA/6BwGEGy6PpQmLfZ55N71bV8Oc0Ae4LI9gCLcBGAs/w72-h72-p-k-no-nu/57486729_2018268205142807_5313847604352647168_n.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve561"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57486729_2018268205142807_5313847604352647168_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 2304
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   2304
Md5:    71183e32c20a19bdb091566df6c04bc2
Sha1:   0a811fa55bb1c02bd18c48106b6e6120b7f508b3
Sha256: 749206cb440b7db48730596b06f206fce7537136e93447bca9c793fe98afd38d
                                        
                                            GET /static/v1/widgets/2400194301-widgets.js HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 54462
Date: Fri, 19 Apr 2019 15:30:31 GMT
Expires: Sat, 18 Apr 2020 15:30:31 GMT
Last-Modified: Thu, 18 Apr 2019 19:13:51 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 344984
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   54462
Md5:    cb678447794c5f91eaebbc6ca631e054
Sha1:   c70bb97c9391705d851e56431478a49640f12098
Sha256: 1b5ab9282ed750e9aaa9b57e7961325f83719833ae9e369946ca06524b037772
                                        
                                            GET /-FaHCdIpMKaM/XLgv-BQQMbI/AAAAAAAA5WI/KLWMUe935MwxF96jKFPRqUVrrXAzsw1rACLcBGAs/w72-h72-p-k-no-nu/dich-vu-cham-soc-nguoi-gia-tai-nha.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve563"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="dich-vu-cham-soc-nguoi-gia-tai-nha.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 3167
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   3167
Md5:    545327c80e3dd4fab8c13da101a3d545
Sha1:   7f6c8c787e46c2af665d55bef1839f9da36f5a74
Sha256: 73d933b9f37ad7378c49046da5a60e5d06a8b75cb6256ad4f01dc1a0de357cdb
                                        
                                            GET /-2i9cqYjMF9c/XLWTFaS8YII/AAAAAAAA5VU/ffvHFkPPl8cBubrOD2q727lNUNq4snUaQCLcBGAs/w72-h72-p-k-no-nu/57099013_2669870089694534_195212697464209408_n.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve557"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57099013_2669870089694534_195212697464209408_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 4168
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   4168
Md5:    9e14bb9972888871345a569a640ad319
Sha1:   f3d72c8493922f7966c51be4a9d11cb3c816ab70
Sha256: 212dc4033dd8019764409079a4c5e2b1de2eee4703c3bd69f5dfee0c2e30b513
                                        
                                            GET /-WE4ZpPEB8CY/XLBRWQYwd1I/AAAAAAAA5UA/gu58ZDJzkhAJeBEbW-Pcji4JwayPlvO9gCLcBGAs/s1600/Capture.PNG HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve541"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="Capture.PNG"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 159601
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 517 x 345, 8-bit/color RGB, non-interlaced
Size:   159601
Md5:    7aeed293385432321eca4a28d6215819
Sha1:   aec0e82e0eff4d4f3ed0b81a0bfe4dcbee71b58e
Sha256: edf634866e6ba68867268d29f60da89977a0b74176a060a0836b3f7e9f22bccc
                                        
                                            GET /img/icon18_wrench_allbkg.png HTTP/1.1 
Host: resources.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 475
Date: Fri, 19 Apr 2019 15:36:44 GMT
Expires: Fri, 26 Apr 2019 15:36:44 GMT
Last-Modified: Fri, 19 Apr 2019 00:46:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 344611
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 18 x 18, 8-bit colormap, non-interlaced
Size:   475
Md5:    f617effe6d96c15acfea8b2e8aae551f
Sha1:   6d676af11ad2e84b620cce4d5992b657cb2d8ab6
Sha256: d172d750493be64a7ed84dec1dd2a0d787ba42f78bc694b0858f152c52b6620b
                                        
                                            GET /-a5y7q6FXF-I/XLCoDfSY2RI/AAAAAAAA5UM/rR0GhVkvew4yFgfr9HjRa5SjuUVeqRytgCLcBGAs/s1600/56811326_2015318015437826_589807513499598848_n.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve544"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="56811326_2015318015437826_589807513499598848_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 63767
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   63767
Md5:    42104f94ad7db23f364fb6c16383b9d5
Sha1:   55091b8e5eb8393602801b59e1510599f578f1bf
Sha256: 60fe3a1ae51015e95756f2918c1696d87fb5d0e33c45a12b51d3b46a6c92441d
                                        
                                            GET /pub-config/r20160913/ca-pub-3789730342523048.js HTTP/1.1 
Host: pagead2.googlesyndication.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Length: 125
Date: Tue, 23 Apr 2019 10:10:12 GMT
Expires: Tue, 23 Apr 2019 22:10:12 GMT
Last-Modified: Mon, 22 Apr 2019 20:08:58 GMT
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=43200
Age: 18603
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   125
Md5:    21aea2dae0239adff4f9f063cdacfc76
Sha1:   ce64c497ac1dd86393da79e8cea239de113c1de7
Sha256: a59ee78166b8467dd7dd8c7acb03d8df7d16cf4a04f45c8558366df1c33b868f
                                        
                                            GET /-FdmcdplWfW4/XLC2Rhi-CoI/AAAAAAAA5Uw/Wq5XvdG10ao4Jg2WBvaZtYhBUCqGOMDZwCLcBGAs/s1600/56917942_2297360977170257_1722709063143260160_n.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve54d"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="56917942_2297360977170257_1722709063143260160_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:15 GMT
Server: fife
Content-Length: 113915
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   113915
Md5:    c4cd35710793a15c46864850bd4e7db7
Sha1:   e5a7c54d6c8325e008bd1e379a430217431fc9a6
Sha256: f0af44b3b298664d226d48ee82eb77abe9169e9916a3e5795bd5a3977205691c
                                        
                                            GET /1kt/watermark/body_background_navigator.png HTTP/1.1 
Host: www.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 35181
Date: Fri, 19 Apr 2019 15:14:37 GMT
Expires: Fri, 26 Apr 2019 15:14:37 GMT
Last-Modified: Fri, 19 Apr 2019 00:46:31 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345940


--- Additional Info ---
Magic:  PNG image, 300 x 300, 4-bit colormap, non-interlaced
Size:   35181
Md5:    ab9048c3644036ed38499e69286744a8
Sha1:   81e54038caaaec75747cc8d0731e85c7ab196085
Sha256: 9754838f8b597bda799ff6a75743fbc1b7ba671e79ed618b7b7e14017d3345ca
                                        
                                            GET /cse/cse.js?cx=006340528894696232392:tbwjta3frn4 HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.211.132
HTTP/1.1 302 Found
Content-Type: text/html; charset=UTF-8
                                        
Location: https://cse.google.com/cse/cse.js?cx=006340528894696232392:tbwjta3frn4
Cache-Control: private
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:17 GMT
Server: sffe
Content-Length: 267
X-XSS-Protection: 0


--- Additional Info ---
Magic:  HTML document text
Size:   267
Md5:    9a85ec4ce83a776bf592afe38df0247b
Sha1:   a6275256a87cb3c4349fe8b7043cedea8890e502
Sha256: 7a6230dd0f7733a70619053389ac776fb8996daf65c1d1f7fbe3ac2fef6560ea
                                        
                                            GET /-xariQ_qgmfQ/WOWEwnAfltI/AAAAAAAAkYI/Z2zxsnWPK_sNTb2KvqSi6jvIVMW1rufogCLcB/s640/08234b2eae74c261.gif HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/gif
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "v9183"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="08234b2eae74c261.gif"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:16 GMT
Server: fife
Content-Length: 1266
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  GIF image data, version 87a, 182 x 200
Size:   1266
Md5:    e62d50dc8096a70a775757d3453b015e
Sha1:   a6421a067d31358319f1c7d487add0fb40114338
Sha256: e24f02f00f9f4fe7b4b624e43928572dcf969b1639a0b931e80c440268a01501
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.OOhUjQBchWs.O/m=profile/exm=gapi_iframes,gapi_iframes_style_bubble,plusone/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg/cb=gapi.loaded_2 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 8254
Date: Fri, 19 Apr 2019 23:38:12 GMT
Expires: Sat, 18 Apr 2020 23:38:12 GMT
Last-Modified: Thu, 18 Apr 2019 23:13:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 315726
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   8254
Md5:    d6271ee1ff53648f459f1f633ef19c71
Sha1:   e768f0765987be5960a7245606f9fe18cc616455
Sha256: 6b6bc95329b96d611f78e7cb4ff8835a4ef8fb176f5d93f2fba6ca0c3e40e6bc
                                        
                                            GET /-akdzdBqp3N8/XLFEtKx0ofI/AAAAAAAA5U8/QjFw6QdInFovNWrxrGJc2oC3s0S8hlh_wCLcBGAs/s1600/57247036_434707287085924_8728927554834006016_n.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve550"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57247036_434707287085924_8728927554834006016_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:16 GMT
Server: fife
Content-Length: 37183
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   37183
Md5:    2f116cb872f5eec6643a67f69a76b44f
Sha1:   fd747057cbc6109c72997e953e0422484d7a69be
Sha256: 3be5a48633d1995583ba679c3259118a66b5887cd315c146e25e2e898900cc83
                                        
                                            GET /-H3mNAbbrFmo/XLC0yXfVnnI/AAAAAAAA5Uk/lX3sxFVedEwa7rL1irBK3X9UoQTtDQI9QCLcBGAs/s1600/57029048_2297018990537789_1668233699415556096_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve54a"
Expires: Wed, 24 Apr 2019 15:20:16 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="57029048_2297018990537789_1668233699415556096_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:16 GMT
Server: fife
Content-Length: 100088
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.02
Size:   100088
Md5:    b1b4806e9eb55d09caf83db20710aa5f
Sha1:   c42ecc41314e7206395a22766aceac300e2f23ae
Sha256: 398afff20c863044abd35a28d5d8886ce5f334a63c005dd60deb56b40959bdd0
                                        
                                            GET /-CrJ81vftJtw/XLWS5ikh11I/AAAAAAAA5VI/sBj0z8e8RScyvK5xBJZBFRBsGHooFC37gCLcBGAs/s1600/57099013_2669870089694534_195212697464209408_n.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve557"
Expires: Wed, 24 Apr 2019 15:20:18 GMT
Cache-Control: public, max-age=86400, no-transform
Content-Disposition: inline;filename="57099013_2669870089694534_195212697464209408_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:18 GMT
Server: fife
Content-Length: 83553
X-XSS-Protection: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   83553
Md5:    5f96e40a7df23c8a74105f00d530fba7
Sha1:   d7d41f4c8f50a758ac28d02d221c5bf216024c2d
Sha256: 7de466f16e7585f17b9e57c589224ea183db5e71fbae764ed5c900993f79a0eb
                                        
                                            GET /pagead/ads?client=ca-pub-3789730342523048&output=html&h=600&slotname=6972514812&adk=4120145191&adf=807048394&w=300&lmt=1556015490&guci=1.2.0.0.2.2.0.0&format=300x600&url=http%3A%2F%2Fxuandienhannom.blogspot.com%2F&ea=0&flash=10.0.45&wgl=0&adsid=NT&dt=1556032816414&bpp=539&fdt=543&idt=-M&shv=r20190417&cbv=r20190131&saldr=aa&abxe=1&prev_fmts=336x280&correlator=925262373763&frm=20&pv=1&ga_vid=1657950908.1556032814&ga_sid=1556032814&ga_hid=1578876489&ga_fc=0&icsg=0&dssz=0&mdo=0&mso=0&u_tz=120&u_his=1&u_java=1&u_h=885&u_w=1176&u_ah=855&u_aw=1176&u_cd=24&u_nplug=10&u_nmime=92&adx=760&ady=2069&biw=1159&bih=754&scr_x=0&scr_y=0&eid=21063245%2C21060853&oid=3&rx=0&eae=4&fc=656&brdim=%2C%2C-4%2C-4%2C1176%2C0%2C1184%2C863%2C1176%2C754&vis=0&rsz=%7C%7Cbr%7C&abl=CS&ppjl=u&pfx=0&fu=16&bc=1&ifi=2&uci=a!2&dtd=560 HTTP/1.1 
Host: googleads.g.doubleclick.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: test_cookie=CheckForPermission

                                         
                                         216.58.207.226
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR"
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:18 GMT
Server: cafe
Cache-Control: private
X-XSS-Protection: 0
Set-Cookie: IDE=AHWqTUkZGR8YU8ScoZSDV1etI1uxPE0gB3lG-t_85ivG39bPGxWUGF_ia2Q_jlRc; expires=Thu, 22-Apr-2021 15:20:18 GMT; path=/; domain=.doubleclick.net; HttpOnly test_cookie=; domain=.doubleclick.net; path=/; expires=Mon, 21 Jul 2008 23:59:00 GMT
Alt-Svc: quic="googleads.g.doubleclick.net:443"; ma=2592000; v="46,44,43,39",quic=":443"; ma=2592000; v="46,44,43,39"
Expires: Tue, 23 Apr 2019 15:20:18 GMT
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   385
Md5:    6f0e7763ff418e12e89cb6be40e66ca6
Sha1:   7deba8d6d3aeee64c0b80b9f5b4f996c6d28056e
Sha256: a2542ccc9ffdf160a6e770cebcdbf2e3e009d97bf683707f5c6dc8fe669e4936
                                        
                                            GET /analytics.js HTTP/1.1 
Host: hit.asmung.net
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         209.99.40.223
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
Date: Tue, 23 Apr 2019 15:20:17 GMT
Server: Apache
ntCoent-Length: 272
Keep-Alive: timeout=5, max=124
Connection: Keep-Alive
Cache-Control: private
Content-Encoding: gzip
Content-Length: 196


--- Additional Info ---
Magic:  gzip compressed data, from Unix
Size:   196
Md5:    e0698dae3ade1f5cc1d7614aeaa9939b
Sha1:   e907f8b75f352b87245dd8c3fbec4a29de3d9117
Sha256: 3396aa8f6a541378072f2de22baa11d8728733fa5d9c67a557e319f8afc2e073
                                        
                                            GET /cse/cse.js?cx=006340528894696232392:tbwjta3frn4 HTTP/1.1 
Host: cse.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.238
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Content-Disposition: attachment; filename="f.txt"
Content-Encoding: gzip
Date: Tue, 23 Apr 2019 15:20:21 GMT
Server: gws
Cache-Control: private
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
Expires: Tue, 23 Apr 2019 15:20:21 GMT
Set-Cookie: 1P_JAR=2019-04-23-15; expires=Thu, 23-May-2019 15:20:21 GMT; path=/; domain=.google.com
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   2849
Md5:    03f979d9766c55635f5b0bc70a1cf02d
Sha1:   34dbd69ec2f26c5aca21f71ce52742d6fbf96887
Sha256: 870dae89607a4690e1328e27cb1b7fe304b951afccd78df627bf82b74e611136
                                        
                                            GET /-2i9cqYjMF9c/XLWTFaS8YII/AAAAAAAA5VU/ffvHFkPPl8cBubrOD2q727lNUNq4snUaQCLcBGAs/s1600/57099013_2669870089694534_195212697464209408_n.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve557"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57099013_2669870089694534_195212697464209408_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:21 GMT
Server: fife
Content-Length: 83553
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   83553
Md5:    5f96e40a7df23c8a74105f00d530fba7
Sha1:   d7d41f4c8f50a758ac28d02d221c5bf216024c2d
Sha256: 7de466f16e7585f17b9e57c589224ea183db5e71fbae764ed5c900993f79a0eb
                                        
                                            GET /feedback/js/help/prod/service/lazy.min.js HTTP/1.1 
Host: www.gstatic.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         172.217.21.163
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 17220
Date: Fri, 19 Apr 2019 15:32:26 GMT
Expires: Fri, 26 Apr 2019 15:32:26 GMT
Last-Modified: Thu, 18 Apr 2019 21:42:27 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 344875
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17220
Md5:    6b5f81f8160aeda2f44c22efed0ba64f
Sha1:   6ed15932af687b475bc13abd80e962a0710a5394
Sha256: 6a0c565b43e63f8aba6c094509873d12f0c2efaea8479068816d810d1ca08af4
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.OOhUjQBchWs.O/m=gapi_iframes_style_slide_menu/exm=gapi_iframes,gapi_iframes_style_bubble,plusone,profile/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg/cb=gapi.loaded_3 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3062
Date: Fri, 19 Apr 2019 23:38:13 GMT
Expires: Sat, 18 Apr 2020 23:38:13 GMT
Last-Modified: Thu, 18 Apr 2019 23:13:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 315728
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   3062
Md5:    1ca14ac77364a75d5200535a747a6319
Sha1:   3b3bf3e3c78da5733f101079d0689f9e070a48e4
Sha256: 1d3143052a7926e1d0e59039bed70d8e3a34a54553253aeb574655dd914a8ce2
                                        
                                            POST /GTSGIAG3 HTTP/1.1 
Host: ocsp.pki.goog
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Content-Length: 115
Content-Type: application/ocsp-request

                                         
                                         172.217.20.35
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
                                        
Date: Tue, 23 Apr 2019 15:20:21 GMT
Cache-Control: public, max-age=86400
Server: ocsp_responder
Content-Length: 471
X-XSS-Protection: 1; mode=block
X-Frame-Options: SAMEORIGIN


--- Additional Info ---
Magic:  data
Size:   471
Md5:    a7b2fd19c7559930e025cf96d497cfd2
Sha1:   0d4145d82fb9a6276cf6b868a4ad2110daa15aa1
Sha256: 1b7482f3f3bc15e9bb5aaa74c5fb839f6cf43f21b4a2abdf79804e3779ea09ce
                                        
                                            GET /cse/static/element/d35a6008cf40f285/default+en.css HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E; 1P_JAR=2019-04-23-15

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 9940
Date: Fri, 19 Apr 2019 15:09:40 GMT
Expires: Sat, 18 Apr 2020 15:09:40 GMT
Last-Modified: Mon, 08 Apr 2019 14:21:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 346241
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   9940
Md5:    b1d054480757f3372d90271b0508f5f0
Sha1:   2a57e04caf5dd91b53a914d2c89621a6b2711bb8
Sha256: 6106bb566b8b10bd0802ef9e5b4f4e80c31a94a9f273aa41798b92699cfddd54
                                        
                                            GET /cse/static/style/look/v3/default.css HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/css,*/*;q=0.1
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E; 1P_JAR=2019-04-23-15

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/css
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 3004
Date: Tue, 23 Apr 2019 14:52:02 GMT
Expires: Tue, 23 Apr 2019 15:42:02 GMT
Last-Modified: Mon, 01 Apr 2019 20:00:00 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=3000
Age: 1700
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   3004
Md5:    4c861e95081f85e6e23570d64efd8753
Sha1:   b2baef0a5ab738207d1ca1cb9a6f90598201120d
Sha256: fae4263ac27e77c8f6ab5ed91c5c7b539e300f86020a390e01e98c4b7b15e656
                                        
                                            GET /-FaHCdIpMKaM/XLgv-BQQMbI/AAAAAAAA5WI/KLWMUe935MwxF96jKFPRqUVrrXAzsw1rACLcBGAs/s1600/dich-vu-cham-soc-nguoi-gia-tai-nha.jpg HTTP/1.1 
Host: 3.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve563"
Expires: Wed, 24 Apr 2019 05:20:16 GMT
Content-Disposition: inline;filename="dich-vu-cham-soc-nguoi-gia-tai-nha.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:22 GMT
Server: fife
Content-Length: 27369
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   27369
Md5:    2053ad799c7ae1639f05855c03aafe6e
Sha1:   d5d85d0bbd6db31cd2e85571b19db65e30561ee8
Sha256: efefba9698f8c06a6750bf45f0387c7a4f7b5028a785f7461b4dbee315b04760
                                        
                                            GET /-nA9QrZRMSKE/XL0XuHcDatI/AAAAAAAA5Ws/GXXSr_Vwqs4m8hSOXlLQuUMCmUloT0ThwCLcBGAs/s1600/H7-19.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve56c"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="H7-19.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 12:58:01 GMT
Server: fife
Content-Length: 176828
X-XSS-Protection: 0
Age: 8532
Cache-Control: public, max-age=86400, no-transform
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   176828
Md5:    6c0729d8983fb60f05628bc78f519927
Sha1:   010039e03a867b24c49bdcd70e3d5c6545c71c19
Sha256: 8403ecab20729f9084370a69d7518caba19c2a71be353cfa43a98494edb3fb69
                                        
                                            GET /-3-KBFKCTelc/XLgpNnA4hZI/AAAAAAAA5WA/6BwGEGy6PpQmLfZ55N71bV8Oc0Ae4LI9gCLcBGAs/s1600/57486729_2018268205142807_5313847604352647168_n.jpg HTTP/1.1 
Host: 1.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.211.1
HTTP/1.1 200 OK
Content-Type: image/jpeg
                                        
Access-Control-Expose-Headers: Content-Length
Etag: "ve561"
Expires: Wed, 24 Apr 2019 05:54:26 GMT
Content-Disposition: inline;filename="57486729_2018268205142807_5313847604352647168_n.jpg"
Vary: Origin
Access-Control-Allow-Origin: *
Timing-Allow-Origin: *
X-Content-Type-Options: nosniff
Date: Tue, 23 Apr 2019 15:20:22 GMT
Server: fife
Content-Length: 8541
X-XSS-Protection: 0
Cache-Control: public, max-age=86400, no-transform
Age: 0
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  JPEG image data, JFIF standard 1.01
Size:   8541
Md5:    5977505ced71a813dd8147317a392038
Sha1:   4a0367575c777a17e037d06436e6e09d92001be5
Sha256: e937e6bba3d25e4e136d9a2e93014174642f47d42661266871a2f40b6c8e38c9
                                        
                                            GET /cse/static/element/d35a6008cf40f285/cse_element__en.js?usqp=CAI%3D HTTP/1.1 
Host: www.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E; 1P_JAR=2019-04-23-15

                                         
                                         216.58.211.132
HTTP/1.1 200 OK
Content-Type: text/javascript
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 79534
Date: Fri, 19 Apr 2019 15:04:21 GMT
Expires: Sat, 18 Apr 2020 15:04:21 GMT
Last-Modified: Mon, 08 Apr 2019 14:21:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=31536000
Age: 346561
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   79534
Md5:    eca8a7affa59520df162223879cd007a
Sha1:   5908c2c5e7ae53a7253b0ca97d910c937693891c
Sha256: 3656af63b0d44f618f8b19c1a6707f5d2abfbf5050300aeb06ff2c96bc44afd1
                                        
                                            GET /navbar.g?targetBlogID=7180154790876747805&blogName=T%E1%BB%84U+-+BLOG&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://xuandienhannom.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=http://xuandienhannom.blogspot.com/&vt=2224244990152778285&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.OOhUjQBchWs.O%2Fam%3DwQE%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg%2Fm%3D__features__ HTTP/1.1 
Host: www.blogger.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: text/html; charset=UTF-8
                                        
P3P: CP="This is not a P3P policy! See https://www.google.com/support/accounts/bin/answer.py?hl=en&answer=151657 for more info."
Cache-Control: no-cache, no-store, max-age=0, must-revalidate
Pragma: no-cache
Expires: Mon, 01 Jan 1990 00:00:00 GMT
Date: Tue, 23 Apr 2019 15:20:22 GMT
Content-Encoding: gzip
X-Content-Type-Options: nosniff
X-XSS-Protection: 1; mode=block
Server: GSE
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   2614
Md5:    b6b643b726c933b8f0b45009a88b2b69
Sha1:   667009fd959da9b4a59f1c496bb032380285141d
Sha256: e9182771411e02229c9bce16c6c8eb07d2e4eeee8561774cb6eaaf5dc45ff5da
                                        
                                            GET /js/platform:gapi.iframes.style.common.js HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=7180154790876747805&blogName=T%E1%BB%84U+-+BLOG&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://xuandienhannom.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=http://xuandienhannom.blogspot.com/&vt=2224244990152778285&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.OOhUjQBchWs.O%2Fam%3DwQE%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg%2Fm%3D__features__
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E; 1P_JAR=2019-04-23-15

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: application/javascript; charset=utf-8
                                        
x-ua-compatible: IE=edge, chrome=1
Timing-Allow-Origin: *
Etag: "f1fcfa41f8503addcaa25dd120adce3d"
Expires: Tue, 23 Apr 2019 15:20:22 GMT
Date: Tue, 23 Apr 2019 15:20:22 GMT
Cache-Control: private, max-age=1800, stale-while-revalidate=1800
Strict-Transport-Security: max-age=31536000
Content-Encoding: gzip
Server: ESF
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
X-Content-Type-Options: nosniff
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"
Transfer-Encoding: chunked


--- Additional Info ---
Magic:  gzip compressed data, max compression
Size:   17052
Md5:    9d8fcb360dd1416014c89333bf880d42
Sha1:   03b3f73e0083f0670702f910b3d12754cb87258e
Sha256: ed0731cd4d6b8563ba4983ffa454ae9403916c08c8ac3867d37c6d5da25858e4
                                        
                                            GET /img/navbar/icons_peach.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=7180154790876747805&blogName=T%E1%BB%84U+-+BLOG&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://xuandienhannom.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=http://xuandienhannom.blogspot.com/&vt=2224244990152778285&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.OOhUjQBchWs.O%2Fam%3DwQE%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg%2Fm%3D__features__

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 907
Date: Fri, 19 Apr 2019 15:29:04 GMT
Expires: Fri, 26 Apr 2019 15:29:04 GMT
Last-Modified: Fri, 19 Apr 2019 12:13:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345078
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 46 x 20, 8-bit colormap, non-interlaced
Size:   907
Md5:    3718077fe5eb689b0ded987a52881d06
Sha1:   f0ce5596ef43f850c400cbbc0556697fb3e7b232
Sha256: 72be8098b87d7e2d7fbc6eb0a3eaebcf1013186d7733cd340549f9e1701a4865
                                        
                                            GET /img/navbar/arrows-light.png HTTP/1.1 
Host: img1.blogblog.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=7180154790876747805&blogName=T%E1%BB%84U+-+BLOG&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://xuandienhannom.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=http://xuandienhannom.blogspot.com/&vt=2224244990152778285&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.OOhUjQBchWs.O%2Fam%3DwQE%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg%2Fm%3D__features__

                                         
                                         216.58.207.233
HTTP/1.1 200 OK
Content-Type: image/png
                                        
Accept-Ranges: bytes
Content-Length: 117
Date: Fri, 19 Apr 2019 15:26:46 GMT
Expires: Fri, 26 Apr 2019 15:26:46 GMT
Last-Modified: Fri, 19 Apr 2019 12:13:33 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, max-age=604800
Age: 345216
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  PNG image, 19 x 4, 8-bit/color RGBA, non-interlaced
Size:   117
Md5:    25c2b0cfe0ad4dcda4a0e3727d091d80
Sha1:   b9d16f4311e64648b7970baf00cb9841e3c3351b
Sha256: bb6685107846b4c25384202730b84ec168fecee197e5f9e3fe8ffdd5bed6749d
                                        
                                            GET /_/scs/apps-static/_/js/k=oz.gapi.en_US.OOhUjQBchWs.O/m=gapi_iframes_style_common/rt=j/sv=1/d=1/ed=1/am=wQE/rs=AGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg/cb=gapi.loaded_0 HTTP/1.1 
Host: apis.google.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: */*
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: https://www.blogger.com/navbar.g?targetBlogID=7180154790876747805&blogName=T%E1%BB%84U+-+BLOG&publishMode=PUBLISH_MODE_BLOGSPOT&navbarType=LIGHT&layoutType=LAYOUTS&searchRoot=https://xuandienhannom.blogspot.com/search&blogLocale=vi&v=2&homepageUrl=http://xuandienhannom.blogspot.com/&vt=2224244990152778285&usegapi=1&jsh=m%3B%2F_%2Fscs%2Fapps-static%2F_%2Fjs%2Fk%3Doz.gapi.en_US.OOhUjQBchWs.O%2Fam%3DwQE%2Frt%3Dj%2Fd%3D1%2Frs%3DAGLTcCOvsxxkR5QFS2So1oKkx__WQh3Ilg%2Fm%3D__features__
Cookie: NID=181=eflMAkvmcSUEum0Rf6W3kbIVT09hSFeMVdGY2Dx1wflFwMYT7hGjnY_EzB1UWZInmzV02BS5dETI82uEp_ysHv5n7Ay6AcBOoFouLVDA4cz4ZNsEtzF2_muKZGXZF8r1R0djchuaqqJCwuo0OkgIMkr4tcxuPx4U-SLf74i_-1E; 1P_JAR=2019-04-23-15

                                         
                                         216.58.207.206
HTTP/1.1 200 OK
Content-Type: text/javascript; charset=UTF-8
                                        
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 40384
Date: Fri, 19 Apr 2019 23:03:16 GMT
Expires: Sat, 18 Apr 2020 23:03:16 GMT
Last-Modified: Thu, 18 Apr 2019 23:13:52 GMT
X-Content-Type-Options: nosniff
Server: sffe
X-XSS-Protection: 0
Cache-Control: public, immutable, max-age=31536000
Age: 317826
Alt-Svc: quic=":443"; ma=2592000; v="46,44,43,39"


--- Additional Info ---
Magic:  gzip compressed data, from FAT filesystem (MS-DOS, OS/2, NT)
Size:   40384
Md5:    8583d5d4882a094e8e347bcf2e687648
Sha1:   d65736b60b0f180ed5c3ae4a8a1a7641884777c7
Sha256: d96a21ddd7faec8b35d9731619681eafbce08b36096596c4c75c4ee1a17ee8cb
                                        
                                            GET /-EBKHSMQRGxo/V6nZxfjMXtI/AAAAAAAAe1E/K0pZ9ltdLXkIUVjHCeYoxNfNi_MbJyCsQCLcB/s320/Luu-Quang-Vu-1.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /-r3MkomHZo00/XLfVNnX0O3I/AAAAAAAA5Vw/h1B-74ppgIY9ZgeSvbkWYNwKwHfEN1ndACLcBGAs/s1600/ma-tuy-17-4-8401-1555511043.jpg HTTP/1.1 
Host: 4.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---
                                        
                                            GET /-kSwXbZycTMg/XLfYLH7xYdI/AAAAAAAA5V4/3riZIceXrUUXv_BVgXEwifWUDPZVOiRxwCLcBGAs/s1600/571543624227895818717002613130859632394240n.jpg HTTP/1.1 
Host: 2.bp.blogspot.com
                                        
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 6.1; en-US; rv:1.9.2.13) Gecko/20101203 Firefox/3.6.13
Accept: image/png,image/*;q=0.8,*/*;q=0.5
Accept-Language: en-us,en;q=0.5
Accept-Encoding: gzip,deflate
Accept-Charset: ISO-8859-1,utf-8;q=0.7,*;q=0.7
Keep-Alive: 115
Connection: keep-alive
Referer: http://xuandienhannom.blogspot.com/

                                         
                                         0.0.0.0
                                        


--- Additional Info ---